HCX Tunnel down with Error "Overall encryption tunnel status is down. Service pipeline status is down."

Products

• VMware HCX

Issue/Introduction

• After creating the service mesh in HCX, the tunnel is DOWN with the error "Overall encryption tunnel status is down. Service pipeline status is down.".  
• The tunnel status is UP, but the Encryption tunnel is down. 
• The underlying network only supports an MTU of less than 1150, and this was detected via Transport analytics. 
• Path MTU detection indicates it is below the threshold. 
• MTU was set to a value lower than 1150 in the network profile. 

Environment

VMware HCX

Cause

The issue is related to MTU, and all underlays must comply with a minimum MTU of 1150. 

• Network Underlay Minimum Requirements

Resolution

To ensure smooth and reliable operation of your VMware HCX environment and successful connectivity with our infrastructure, a critical network requirement is that the "underlay network" (the underlying physical or virtual network infrastructure) must support a minimum MTU of 1150 bytes