In VCF 9, tunnels between NSX Edge Nodes and EXi Hosts will not come up after fresh deployment

Products

• VMware NSX

Issue/Introduction

After deploying a new VCF 9 instance, the NSX-T data center environment exhibits connectivity issues, specifically the failure of the Geneve tunnels to establish between the NSX edge nodes and the ESXi hosts. This results in a lack of VXLAN encapsulation necessary for network virtualization overlays.

A thorough review of the configuration and logs is required to diagnose and resolve the underlying cause of this networking failure.

Environment

VMware VCF 9

VMware NSX

VMware vSphere ESXi

Cause

In VCF 9 environments, while the SDDC Manager automates the provisioning of the NSX stack, the automated configuration process does not consistently finalize the required NSX activation on the Distributed Virtual Port Groups (DVPGs). This necessitates manual intervention to complete the logical network connectivity.

 

Resolution

With VCF 9, SDDC manager automates the provisioning of the NSX stack. Upon completion, the NSX activation on the DVPG’s may not be completed.



Once completed, the tunnels should come up.

If not, please check NSX license status and activate it manually through SDDC dashboard if not activated. Next, check the NSX license status again to confirm it is now activated. Then check the tunnel status and confirm it is up and running. If the tunnels are still not up, check the following link additional info:

https://knowledge.broadcom.com/external/article/379112/troubleshooting-nsx-tepbfd-tunnels-betwe.html