Unable to redirect the east west traffic to Service VMs post deploying the East West Service Insertion in NSX

Products

• VMware NSX

Issue/Introduction

• Traffic redirection towards SVMs is not occurring after the deployment of the East West Service Insertion.
• There is a missing slot 12 at the vnic level.
• East West service insertion is successfully deployed and no error reported on UI.
• The EW service insertion is not present in the MP SI status table.
  

  /opt/vmware/bin/corfu_tool_runner.py -o showTable -n nsx -t InternalSIStatusConfiguration

  Key:

  {

    "uuid": {

      "left": "##################",

      "right": "##################"

    }

  }

   

  
  Payload:

  {

    "managedResource": {

      "displayName": "status"

    },

    "enableNorthSouthSi": true  >>>>>>>>> indicates that only NS SI is present in the table

Environment

VMware NSX-T Data Center 3.x

Cause

The Policy and Management Plane Service Insertion Status table going off sync.

Resolution

This issue is resolved in VMware NSX-T Data Center 3.2, available at Broadcom downloads.

If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.

Note: If the issue is encountered an upgrade to a version that contains the fix will not resolve the impact, the workaround will need to be carried out to resolve the legacy impact. 

 

Workaround

The workaround is to toggle the East-West status which should result in the Service Insertion to function.

To toggle via Policy API

1. GET /policy/api/v1/infra/settings/service-insertion/security/status
2. Change "east_west_enabled" to false and make a PUT call.
3. GET /policy/api/v1/infra/settings/service-insertion/security/status
4. Change "east_west_enabled" to true and make a PUT call.

Additional Information