VyOS VMs experience egress packet drops after being migrated to ESXi host which was upgraded fro ESXi 7.x to 8.x

Products

• VMware vSphere ESXi

Issue/Introduction

• Ingress IS-IS traffic is arriving to the VyOS VMs.
• Egress IS-IS network traffic is blocked coming out of VyOS VMs.
• Within an environment running ESXi 7.0 there has been no issue observed and neighborships are forming fine by VyOS VMs. However, in ESXi 8, the neighborships can't be formed by VyOS VMs.

Environment

VMware vSphere ESXi 8.x

Cause

BPDUs sent from VyOS VM to upstream switch are being filtered by the BPDU filter (NetMisc_DropBPDUPackets).

Resolution

Disable Net.BlockGuestBPDU as per BPDU Filter feature in vSphere: 

1. Using the vSphere Client, switch to the Hosts and Clusters view.
2. Click the desired host from the inventory tree view in the left pane.
3. Click the Configuration Tab and then Advanced Settings under Software.
4. Click Net and then locate the Net.BlockGuestBPDU option.
5. Change the value to 0, which disables BPDU filtering.
6. Click OK.

Note: By disabling BPDU filtering you are allowing all the VM's vNIC's on the ESXi host to send not only LLDP but also other BPDU's 

Additional Information

LEAF Switches cannot form LLDP neighborship to Virtual APIC VM