HCX migrated VM's from NSX for vSphere to NSX-T may loss network connectivity

Products

• VMware NSX

Issue/Introduction

Symptoms:

• After a VM is migrated from a NSX for vSphere Environment to a NSX-T environment using HCX, the VM may lose network connectivity for several minutes.
• After some time, the connectivity will resume again.
• The Segment Security Profile used on the segment in NSX-T has Non-IP Traffic Block enabled.
• The default Segment Security Profile has Non-IP Traffic Block disabled.
• After a VM is migrated, a RARP is sent from the VM, this is meant to announce its new location and flush any stale cache.

Environment

VMware NSX-T Data Center

Cause

When the non default Segment Security Profile is used and has Non-IP Traffic Block enabled, this RARP packet will be dropped.

Resolution

This is a known issue impacting NSX-T Data Center.

Workaround:

• Disable Non-IP Traffic Block on the Segment Security Profile used on the segment.

Please review the following guide on how to edit or create Segment Security Profiles Create a Segment Security Segment Profile.