NSX Edge-to-Host Tunnels Down

Products

• VMware NSX

Issue/Introduction

• Edge-to-Host tunnels show as DOWN in the NSX Manager UI, while Host-to-Host and Edge-to-Edge tunnels remain UP when the Edges are running on the same Host TNs.
• During the issue, packet captures reveal that BFD packets sent from Hosts to Edge TEPs are not GENEVE encapsulated
• Host to Edge BFD (not encapsulated):

00:aa:bb:cc:dd:01 > 00:aa:bb:cc:dd:02, ethertype IPv4 (0x0800), length 66: X.X.X.X > Y.Y.Y.Y: BFDv1, Control, State Down, Flags: [Poll], length: 24

• Edge to Host BFD (encapsulated with GENEVE):

00:aa:bb:cc:dd:02 > 00:aa:bb:cc:dd:01, ethertype IPv4 (0x0800), length 116: Y.Y.Y.Y > X.X.X.X: Geneve, Flags [O], vni 0x0, proto TEB (0x6558): 00:00:00:00:00:00 > 00:00:00:00:00:00, ethertype IPv4 (0x0800), length 66: Y.Y.Y.Y > X.X.X.X: BFDv1, Control, State Down, Flags: [none], length: 24

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

 

Environment

VMware NSX

Resolution

Please perform the following workaround steps if you have encountered this issue

1. vMotion the Edge Nodes to another ESXi host
   • Immediately after the vMotion, all Edge-to-Host tunnels come UP.
   • GENEVE encapsulation for BFD packets resumed correctly on packet captures.
2. vMotion Edge Nodes back to the original host (Optional)
   • All Tunnels should remain Stable and UP.