NSX Port Mirroring Source configuration failing with error: Destination ports must in same logical switch for logical SPAN

Products

• VMware NSX

Issue/Introduction

• The distributed firewall is not in use or there are exclusions for the participating VMs.
• When setting up a Logical Span port mirroring configuration, no mirrored traffic is seen at the destination.
• The backing segment for the source and destination are using an overlay network.
• The VMs have nics/ports connected to the segment.
• Under the Logical Span Source column. The Status shows as Failed:

• Click on the 'Failed' link. The following is seen:
  • Object Status: Success
  • Binding Status: Failed
  • Binding Status Error(s):
    • Destination ports must in same logical switch for logical SPAN

• Clicking the refresh icon next to the 'Failed' link may change the Status to Success but the error returns after the window is closed.

Environment

VMware NSX

Cause

VMs with connections to multiple networks/logical switches cause the config to fail.

This is true even when the VM has one nic connected to the correct segment but another nic connected to a different segment.

NSX requires the VMs in the groups to have their nics on the same logical switch for a Logical Span Port Mirroring config.

Resolution

Connect the Source VMs nics to the same network.

Select VM inventory groups that contain VMs that meet the requirement.

Note that one VM with multiple networks in a group can cause the Source config to fail.

Additional Information

For more information on configuring Port Mirroring session on NSX, please refer: Add a Port Mirroring Session