HCX migrated VM's from NSX for vSphere to NSX-T may loss network connectivity

Products

• VMware NSX Networking

Issue/Introduction

Symptoms:

• After a VM is migrated from an NSX for vSphere environment to NSX-T environment using HCX, the VM may loss network connectivity for several minutes.
• After this connectivity will resume again.
• The Segment Security Profile used on the segment in NSX-T has Non-IP Traffic Block enabled.
• The default Segment Security Profile has Non-IP Traffic Block disabled.
• After a VM is migrated, a RARP is sent from the VM, this is meant to announce its new location and flush any stale cache.

Environment

VMware NSX-T Data Center

Cause

When the non default Segment Security Profile is used and has Non-IP Traffic Block enabled, this RARP packet will be dropped.

Resolution

This is a known issue impacting NSX-T data center.

Workaround:
Disable Non-IP Traffic Block on the Segment Security Profile used on the segment.
Please review the following guide on how to edit or create Segment Security Profiles Create a Segment Security Segment Profile.