"Preferred edge path should be the same as default tier-0 (Error code 500157)" error presented when editing the VRF on NSX UI

Products

• VMware NSX

Issue/Introduction

• You have created a parent Tier-0 (T0) Gateway and associated a VRF to it.
• Fail over order is Preemptive and the preferred edge on the parent T0 was later changed to a different edge node.
• Attempting to update the associated VRF results in validation failure.
• When attempting to edit a Tier-0 VRF Gateway in the NSX UI, the operation fails with the following error message:

Error: Preferred edge path should be the same as default tier-0 /infra/tier-0s/<T0_VRF>. (Error code 500157)

Environment

VMware NSX
VMware NSX-T Data Center

Cause

This issue occurs because the NSX lacks a validation mechanism to prevent changes to the preferred edge path on the parent Tier-0 gateway while it is being referenced by a VRF. When the parent’s preferred edge is modified, it becomes inconsistent with the VRF configuration, leading to update failures.

Resolution

This issue is resolved in NSX version 4.2.2.0 and later. Starting with this version, the system includes a validation check that prevents modification of the preferred edge on a parent Tier-0 Gateway if it is currently referenced by a VRF.

Workaround:

The child VRF will only be editable while the Parent T0 preferred edge node is the same as it was when the VRF was created. If the Parent T0 has only 1 child VRF, manually change the preferred edge node on the Parent T0 to align with the preferred edge node on the VRF.

Alternatively, recreate the VRF. This will realign the preferred edge node configuration and NSX will allow it to be edited. However, changing the preferred edge node on the Parent T0 will cause the inconsistent VRF configuration.