After creating the service mesh, the IX status becomes Down.

Products

• VMware HCX

Issue/Introduction

• After creating the service mesh, the IX status becomes Down.
  
  
• The following error message is displayed:
   - Overall transport tunnel status is down.
   - Overall encryption tunnel status is unknown.
   - Service pipeline status is down.
  
  
• Running the “RUN DIAGNOSTICS” command in the service mesh reveals that there is no reachability between IXs.
  
  
• The traceroute results indicate that communication is established up to the intermediate route.

Environment

VMware HCX

Cause

IX is experiencing issues with the underlying network, preventing tunnel establishment.
Since the tunnel between IXs cannot be established, the IX appliance status transitions to “Down”.

Resolution

You need to examine the network devices near the hops where no response was detected in the traceroute results.
For example, packets may be dropped due to reasons such as the absence of a routing table for the segment used by the IX, or filtering by ACLs or firewalls.