In the NSX-T Policy UI, unable to override the default segment profile on a segment port
book
Article ID: 322502
calendar_today
Updated On:
Products
VMware NSX Networking
Issue/Introduction
Symptoms:
From the segment port in the policy UI (Policy - Segments - NSX - Ports - Segment Port Profiles) you can select a custom profile and save the changes.
After changes are made the default segment profile remains configured on the segment port.
This is seen for all custom segment profiles (IP Discovery, MAC Discovery, Spoof Guard, Segment Security, and QoS).
Environment
VMware NSX-T Data Center
Resolution
This issue is resolved in NSX-T 3.2.2 available at VMware Downloads.
Workaround:
To override the default segment profile on a port created from vCenter (VM connected to segment port), you must use the Manager mode UI: Logical Switches - Ports - Manage - QoS/Spoof Guard/etc. And change the profile as required.
Additional Information
Impact/Risks: This is intended behaviour, ports created from vCenter, when a VM is connected to a segment port, a VIF creation occurs, this happens under the Manager mode, not policy mode.