In-place Host upgrade will fail if the atleast one logical port is disabled on the host.

Products

• VMware NSX

Issue/Introduction

Symptoms:
UI will show the host upgrade in failure state with the following error message
 
In-place upgrade eligibility not met. Disabled swsec Filter(s) present on host
 
In /var/run/log/vmkernel.log: the following logs are observed while indicates the dvportID that is disabled 
2019-12-11T05:50:24.698Z cpu2:1008675)WARNING: kcp: KcpIoctlDVPortStatsGet:1638: [nsx@6876 comp=“nsx-esx” subcomp=“kcp”]VDSPortDataGet failed DVPID ########-####-####-####-########d04e PID 67108883 : Not found

Environment

VMware NSX-T Data Center 2.5.x
VMware NSX-T Data Center

Cause

In-place host upgrade requires all logical ports to be up during an upgrade process. If the system identifies any logical ports on host in disabled state, it will stop the upgrade since the host does not meet the eligibility.

Resolution

This is an expected behavior which has been introduced in NSX-T Data Center 2.5.0 and later releases.

Workaround:
Below are few options to work around the issue:

1. Re-enable the disabled logical port and continue with the in-place upgrade.
2. vMotion the VM and continue with in-place upgrade.
3. Use maintenance mode upgrade instead of in-place upgrade.