Alarm for gateway_firewall.sr_limit_per_edge_approaching

Products

• VMware NSX Firewall
• VMware vDefend Firewall

Issue/Introduction

Event ID: gateway_firewall.sr_limit_per_edge_approaching

Added in release: 4.2.1

Alarm Description:

• Purpose: The number of Tier0/Tier1 Logical Routers or bridges with Gateway Firewall feature enabled on an edge is approaching the maximum limit.

• Impact: Dataplane functions may be impacted due to high scale. Increased time for configuration to get realized.

Environment

VMware NSX Data Center 4.2.1

Cause

Number of T0/T1s/bridges with gateway firewall feature enabled scaled close to the allowed limits.
Limits: medium form factor edge - 5; L/XL/Bare metal edge - 100

Resolution

Reduce the number of gateways configured on the edge node. Map additional gateways to a new edge in the cluster.

Disable Gateway Firewall feature on the gateway if no firewall rules are configured.