NSX Bridging appears to be not working.

Products

• VMware NSX

Issue/Introduction

• VMs connected to bridged segments experience issue with connectivity. No issue for the VMs running on primary edge node.

Environment

VMware NSX-T Data Center 3.2.3.1
VMware vSphere ESXi 7.0.3

Cause

ARP reply is dropped by dvswitch

Resolution

Workaround:

Run following command as a workaround (enable promiscuous and disable it) on ESX host where Bridge running primary Edge node is running.

nsxdp-cli vswitch l2sec set --dvport xxxxx --dvs-alias xxxx --promisc --mac-change --forge-src

nsxdp-cli vswitch l2sec set --dvport xxxxx --dvs-alias xxxx --no-promisc --mac-change --forge-src

 

NOTE: Enabling promiscuous mode will establish connectivity, but an ICMP test will show duplicate packets. Disabling promiscuous mode will remove the duplicate packets and connectivity will be maintained.

 

Additional Information

Impact/Risks:

In the absence of ARP resolution network connectivity does not get established.