In a VMware Cloud (VMC) on AWS environment, from the VMC Console it may be determined that one or more HCX-GRP and/or HCX-IX-vm Inventory Management Group entries is stale. These stale entries are associated with past HCX IX/NE appliance Uplink IPs and VM IDs that are no longer in use. They can been found under:
Networking & Security - Groups - Management Groups
In some cases, an attempt to delete a stale HCX-GRP entry from the VMC Console will fail and an error will be seen similar to the following:
The object HCX-GRP-35.164.205.228-vmc cannot be deleted as either it has children or it is being referenced by other objects HCX-CE-35.164.205.228-ANY,HCX-CE-ANY-35.164.205.228-1,HCX-CE-ANY-35.164.205.228-0
The Delete option that triggers the error can be found by clicking on the 3 dots highlighted in the screen snapshot below:
Step1)
Determine which HCX-GRP Inventory Management Group entries are currently active and should not be deleted by determining the active HCX IX/NE appliance Uplink IPs in use on the VMC Cloud site:
HCX Cloud manager - Interconnect - Service Mesh - VIEW APPLIANCES
Determine which HCX-IX-vm Inventory Management Group entries are currently active and should not be deleted by determining the VM ID associated with each active HCX IX/NE appliance on the VMC cloud site:
vCenter - select the IX/NE appliance
From the VMC Console attempt to delete any stale HCX IX/NE appliance HCX-GRP and HCX-IX-vm Inventory Management Group entries. This can be done under:
Networking & Security - Groups - Management Groups
Delete the conflicting redirect rules associated with the stale HCX-GRP entry
This step cannot be performed from the VMC console. It requires direct access to the NSX UI via:
Optimus - Break Glass - NSX UI
Once in the NSX UI ensure the NSX Policy view is selected and then go to:
Security - Network Introspection (N-S)
Step4)
Inventory - Groups