In an NSX environment, Aria Operations for Networks is reporting “high packet drops / more than 5%” warnings for NSX-T Logical Switch/Ports after applying DFW rules.

Products

• VMware NSX
• VMware NSX
• VMware vDefend Firewall

Issue/Introduction

The following Warning Events may be present on Aria Operations for Networks (formerly vRealize Network Insight, vRNI)

• NSX-T Logical Port Received Packets are getting dropped
• Received packets are getting dropped on the NSX-T Logical Port and associated entities might get affected
• NSX-T Logical Port Transmitted Packets are getting dropped.
• Transmitted packets are getting dropped on the NSX-T Logical Port and associated entities might get affected

Environment

VMware NSX-T Data Center
VMware NSX

Resolution

This issue is resolved in VMware NSX 3.2.4
This issue is resolved in VMware NSX 4.1.2
This issue is resolved in VMware NSX 4.2.0
This issue is resolved in VMware Aria Operations for Networks 6.12

Workaround:
Aria Operations for Networks System Events can be disabled/suppressed.
Note: If there is a real condition that is causing dropped packets, you will not be alerted.

1. In Aria Operations for Networks, go to Settings -> Events -> System Events
2. Disable the following Events
3. NSX-T Logical Port Received Packets are getting dropped.
4. NSX-T Logical Port Transmitted Packets are getting dropped.