"Unknown" connectivity status when listing IPSec VPNs in VMware Cloud Director

Products

• VMware Cloud Director

Issue/Introduction

• "Unknown" Connectivity Status shown for IPSec VPNs which should be "UP" under Edge Gateway > Services > IPSec VPN in the VMware Cloud Director Tenant Portal.
  
• "Down" Connectivity Status is correctly shown for IPSec VPNs which are in a down state.
• Expanding the individual IPSec VPN shows the correct status values.
• Querying all IPSec VPN tunnels for a given Edge via the Cloud Director OpenAPI shows "UNKNOWN" for "connectivityStatus" for IPSec VPNs which should be "UP":
  
  

  GET https://<vcd_address>/cloudapi/2.0.0/edgeGateways/urn:vcloud:gateway:########-####-####-####-############/ipsec/tunnels
  ...
  "connectivityStatus": "UNKNOWN"
  ...

• Querying an individual IPSec VPN tunnel for a given Edge via the Cloud Director OpenAPI correctly shows "UP" for "connectivityStatus":
  
  

  GET https://<vcd_address>/cloudapi/2.0.0/edgeGateways/urn:vcloud:gateway:########-####-####-####-############/ipsec/tunnels/########-####-####-####-############
  ...
  "connectivityStatus": "UP"
  ...

• Screenshot of the error
  • 

Environment

VMware Cloud Director 10.6.1

Cause

• This issue occurs because the VMware Cloud Director OpenAPI returns "UNKNOWN" for "connectivityStatus" for IPSec VPNs which should be "UP" when listing all IPSec VPN tunnels for an Edge Gateway.
• This is a known issue documented in the VMware Cloud Director 10.6.1 Release Notes.

Resolution

This is a known cosmetic issue in the UI when listing IPSec VPN tunnels in the VMware Cloud Director 10.6.1 (24532667). 

This issue is fixed in VMware Cloud Director 10.6.1.1 (24756346). Click here to download.

Workaround:

• From the VMware Cloud Director UI, expand the individual IPSec VPN tunnels using the ">>" button to see the correct state, including "State", "IKE Status", and "Tunnel Status".
• From the VMware Cloud Director OpenAPI, we can query the individual tunnels to see the correct "connectivityStatus":
  VMware Cloud Director OpenAPI, Get Ip Sec Vpn Tunnel
• For example this could be done via the VMware Cloud Director API Explorer:
  Getting Started with VMware Cloud Director OpenAPI, VMware Cloud Director OpenAPI UI