NSX Local Manager configuration import fails in a Federation environment

Products

• VMware NSX

Issue/Introduction

• NSX 3.2.x and 4.0.x
• An attempt to onboard and import configuration from a Local Manager to a Global Manager fails
• Configuration on the Local Manager may be removed but it is not imported on the Global Manager
• On the Global Manager, in /var/log/gmanager/gmanager.log, errors similar to these examples are observed

2023-02-07T14:13:48.692Z ERROR ClientReceiverFlowHandler-1 GMARDataPostProcessorImpl 8759 POLICY [nsx@6876 comp="global-manager" errorCode="MP500032" level="ERROR" subcomp="global-manager"] Exception encountered while executing resource listeners
java.lang.IllegalArgumentException: Invalid UUID string: 1000000

2023-02-07T14:13:48.752Z  WARN ClientReceiverFlowHandler-1 NsxTRestClient 8759 POLICY [nsx@6876 comp="global-manager" level="WARNING" subcomp="global-manager"] Authentication failure with NSX manager, will retry
org.springframework.web.client.HttpClientErrorException$Forbidden: 403 : "{<EOL>  "httpStatus" : "FORBIDDEN",<EOL>  "error_code" : 401,<EOL>  "module_name" : "common-services",<EOL>  "error_message" : "Write operations are temporarily blocked"<EOL>}"

Environment

VMware NSX-T Data Center
VMware NSX 4.0.0.1
VMware NSX-T Data Center 3.x

Cause

An exception occurs when processing Local Manager configuration that blocks the import workflow.

Resolution

This issue is resolved in VMware NSX-T 3.2.3 (build number 21703624)
This issue is resolved in VMware NSX-T 4.1.0.2 (build number 21761691)

Workaround
After experiencing this failure, the Local Manager should be restored from backup to a time point prior to the configuration import failure. The Global Managers do not need to be reverted.

After performing the LM restore or if proactively wishing to avoid this issue, please open a Support Request with Broadcom Support and they can provide workaround details for the configuration import.