Transport Nodes in disconnected state in NSX UI

Products

• VMware NSX

Issue/Introduction

• Edge VM MPA connectivity is down

• Host Transport nodes are in  'Host Disconnected' state and attempts to configure the disconnected hosts for NSX or use the resolve button may fail at step "Waiting for connection to Managers" roughly at 48%. 

• Output from 'get managers' command shows the NSX managers as Standby instead of Connected

 

Environment

VMware NSX

Cause

Expired APH Certificates on the NSX Managers

Resolution

1. Replace the expired certificates

2. After replacing expired certificates on the NSX managers, the existing Edge Transport Nodes may still show "Edge VMs MPA connectivity is down" and Hosts in "Host Disconnected" state.

Please use the workaround below for VMware NSX version 4.x

• On NSX manager node:
  • SSH into a manager node as admin
  • Run the command:  get certificate api thumbprint
  • copy the <thumbprint>

 

• On NSX Transport Node
  • root: # nsxcli -c sync-aph-certificates <NSX-Manager-IP> username admin thumbprint <thumbprint> password <password>
  • root: # /etc/init.d/nsx-proxy restart
    
    
• On Edge node
  • SSH into the edge node as admin
  • Run the command  sync-aph-certificates <NSX-Manager-IP> username admin thumbprint <thumbprint> password <password>
  • Switch to engineering mode (root) by entering: > st en
  • root: # /etc/init.d/nsx-proxy restart

 

3. Refresh the NSX UI and check the status of the hosts and edge nodes