Issue 1: Make configuration changes in Exclusion List are getting the error message "Invalid group with Ipset/MACAddress in FW Exclusion List (Error code:514051)"
Issue 2: In cases, where Groups with IP Sets, IP Addresses, MAC addresses are added to exclusion list in versions prior to 3.0.2, and then, if there is an upgrade to version 4.2.0.1 or above, you may see the NSX Manager proton service restarting repeatedly. This results in the NSX Manager cluster being in the DEGRADED state.
In the NSX Manager's /var/log/proton/proton-tomcat-wrapper.log:
proton-tomcat-wrapper.log
INFO | jvm 784 | 2024/10/07 18:33:30 | com.vmware.nsx.management.common.exceptions.InvalidArgumentException: Invalid group with IPSet/MACAddress in ExclusionList path=[/infra/domains/default/groups/<GroupID>]
INFO | jvm 785 | 2024/10/07 18:39:51 | com.vmware.nsx.management.common.exceptions.InvalidArgumentException: Invalid group with IPSet/MACAddress in ExclusionList path=[/infra/domains/default/groups/<GroupID>]
INFO | jvm 786 | 2024/10/07 18:45:44 | com.vmware.nsx.management.common.exceptions.InvalidArgumentException: Invalid group with IPSet/MACAddress in ExclusionList path=[/infra/domains/default/groups/<GroupID>]
INFO | jvm 787 | 2024/10/07 18:52:45 | com.vmware.nsx.management.common.exceptions.InvalidArgumentException: Invalid group with IPSet/MACAddress in ExclusionList path=[/infra/domains/default/groups/<GroupID>]
INFO | jvm 788 | 2024/10/07 18:59:21 | com.vmware.nsx.management.common.exceptions.InvalidArgumentException: Invalid group with IPSet/MACAddress in ExclusionList path=[/infra/domains/default/groups/<GroupID>]
proton-tomcat-wrapper.log
STATUS | wrapper | 2024/10/07 18:28:31 | Launching a JVM...
STATUS | wrapper | 2024/10/07 18:34:16 | Launching a JVM...
STATUS | wrapper | 2024/10/07 18:40:39 | Launching a JVM...
STATUS | wrapper | 2024/10/07 18:46:31 | Launching a JVM...
STATUS | wrapper | 2024/10/07 18:53:32 | Launching a JVM...
VMware NSX-T Data Center 3.0.2 or later
VMware NSX 4.x
Workaround is the same for both issues.
{
"members": [
//Comma-separated list of valid group paths
]
}
For more info, please refer to the NSX Data Center API documentation : https://developer.broadcom.com/xapis/nsx-t-data-center-rest-api/latest/