Unable to see all the NSX-T Manager in the system exclusion list from the NSX-UI

Products

• VMware NSX

Issue/Introduction

 

• One of the NSX managers is not showing up in the DFW exclusion list.
• The NSX managers are deployed on NSX prepared host.
• Traffic to the NSX manager may be blocked by the DFW rules.
• For instance : Manager node1: mgp01 is not seen in the system excluded VM's.

Environment

• VMware NSX.

Cause

• Usually, the first manager VM(say nsx_manager01) will be deployed manually through vCenter using the OVA template.
• When it is deployed using an OVA template, it doesn't get the NSX tag "SystemVM_NSGroup" attached to it. Whereas the other managers (say nsx_manager02 and nsx_manager03) that are deployed directly from NSX-T UI will be deployed with tag "SystemVM_NSGroup".
• This tag is required for the VM to be part of the System Excluded VMs Exclusion list.

Resolution

• There is no resolution as it is a default behavior.

Workaround:

• Delete and redeploy the 1st NSX manager from NSX UI for that to be show up in the exclusion list.
• Add the tag "SystemVM_NSGroup" manually to the NSX manager that is manually deployed.

Additional Information

Reference document link:

https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-3B3C278D-4E35-4CE9-A4E2-ED6B1F25ABCE.html