NSX Load Balancers on VLAN-backed Segments are inaccessible after NSX-V to NSX-T Migration

Products

• VMware NSX

Issue/Introduction

• After completing the NSX-V to T migration, the Load Balancers are not longer accessible
• Load Balancers are on VLAN backed segments
• Users cannot access the application when using the Load Balancer Virtual Server address
• Cannot ping the Virtual Server IP address

Environment

VMware NSX

Cause

Possible causes

• VLAN double tagging with Edge uplink and Segment configuration
• No route for return traffic for the LB Virtual Server addresses and/or service interface on the NSX GW

Resolution

• Check for the configuration for Edge uplinks and VLAN backed Segment in case of VLAN double tagging
  
  
• If Tier-1 and Tier-0 gateways are not being used for routing, then there maybe no routes back from the service interface or the LB Virtual Server IP addresses on the Edge node
  • If that is the case, add a static route on the Tier-1 Gateway where the LB is allocated to the default gateway of the service interface address