vCenter Server logging may show warnings detecting an IP conflict between HCX Fleet Appliances

Products

• VMware vCenter Server
• VMware HCX

Issue/Introduction

vCenter Server is logging the following warning for potential IP conflicts involving more the one HCX appliances.

Path: /var/log/vmware/vpxd/vpxd.log
2024-07-01T18:18:18.865Z error vpxd[12X45] [Originator@6876 sub=InvtId opID=HB-host-22X22@33X333-333x333x] Detected IP [:192.0.2.XX] conflict between vm [HCX-ServiceMesh-NE-R1] (moId:vm-44X44) nic:GuestInfo.net[5].ipAddress[0] and entity [HCX-ServiceMesh-IX-R1] (moId:vm-55X55)"

Note: The above log is an example, and values such as operation IDs, IP addresses, hostnames, and moId's will vary.

Environment

VMware HCX
VMware vCenter Server

Cause

vCenter is mistakenly flagging IPs as duplicates because it doesn't recognize the isolated nature of these IPsec local tunnels. It compares IPs across all inventory items without considering that private IP addresses like 192.0.2.x could be reused across different HCX Fleet appliances. The IP address range mentioned is used exclusively within the IX and NE appliances for IPsec local tunnels and is not accessible from the network, These tunnels utilize the same internal IP pool within each appliance and are isolated, ensuring they are not exposed externally in the network.

Resolution

The vCenter warning regarding the duplicate IP for the IX/NE can be safely ignored.