Unable to create a LIF as there is already a Hardware Gateway attached to the Logical Switch

Products

• VMware NSX

Issue/Introduction

Symptoms:

• You are using NSX with a Hardware VTEP
• You attempt to attach a Logical Switch that is already being used with a HW-VTEP to a DLR

 

• Errors seen in UI
  • When attempting to add a logical switch to an interface on the DLR the job fails and the below error is seen in the UI:

 

• Errors seen in Logs
  • In /home/secureall/secureall/logs/vsm.log on the live environment or /logs/management-services/vsm.log in the support bundle we see the error is question:

2021-07-27 16:09:03.496 UTC ERROR TaskFrameworkExecutor-12 Worker:229 - - [nsxv@6876 comp="nsx-manager" level="ERROR" subcomp="manager"] BaseException thrown while executing task instance taskinstance-5562557
com.vmware.vshield.edge.exception.VshieldEdgeException: nested exception is TorException: core-services:897:Unable to create a LIF as there is already a Hardware Gateway attached to the Logical Switch.

Caused by: com.vmware.vshield.vsm.vdn.exceptions.TorException: A TOR binding exists on the network. Failed to create the LIF.

 

NOTE: The preceding log excerpts are only examples. Date, time and environmental variables may vary depending on your environment.

Cause

NSX-V starts to support Hardware VTEP gateway feature from NSX-V 6.2.3.

• Integration is at L2 only. Hardware VTEP for L3 is not supported

 

When an NSX Logical Switch (LS) is connected to a HW-VTEP it cannot be attached to a Distributed Logical Router (DLR) at the same time.

• This limitation exists for all NSX implementations of this feature, regardless of the hardware vendor providing the HW-VTEP function.

 

Resolution

This is expected behavior as Hardware VTEP integration at L3 is not supported

Workaround:
No workaround available.