Symptoms:
LB METHOD ip-hash| LB PROTOCOL L7| Transparent disabled| SESSION (cur, max, total) = (0, 56, 5748)| BYTES in = (63571), out = (153004)+->POOL MEMBER: vRA_Appliances_Pool/vRA_App_1, STATUS: DOWN| | HEALTH MONITOR = MONITOR SERVICE, vRA:CRITICAL| | | LAST STATE CHANGE: 2016-10-01 10:38:27| | | LAST CHECK: 2016-10-01 10:59:54| | | FAILURE DETAIL: CRITICAL - Cannot make SSL connection.| | SESSION (cur, max, total) = (0, 28, 28)| | BYTES in = (31490), out = (83264)+->POOL MEMBER: vRA_Appliances_Pool/vRA_App_2, STATUS: DOWN| | HEALTH MONITOR = MONITOR SERVICE, vRA:CRITICAL| | | LAST STATE CHANGE: 2016-10-01 10:38:28| | | LAST CHECK: 2016-10-01 10:59:54| | | FAILURE DETAIL: CRITICAL - Cannot make SSL connection.| | SESSION (cur, max, total) = (0, 28, 28)| | BYTES in = (31265), out = (69740)Note: Supported ciphers can be checked with nmap tool “nmap –script ssl-cert,ssl-enum-ciphers –p <port> <Service_IP>”
Starting from NSX for vSphere 6.2.4 and later, TLSv1 and SSLv3 support is deprecated on Edge Service Gateways.
Note:
For ssl-version=3 Force SSL handshake using ssl 3
For ssl-version=10 Force SSL handshake using tls 1.0.
For ssl-version=11 Force SSL handshake using tls 1.1.
For ssl-version=12 Force SSL handshake using tls 1.2.