NSX Upgrade pre-check failed due to MPA connectivity down alarm observed on edge vms

Products

• VMware NSX

Issue/Introduction

• Upgrade pre-check failed as MPA connectivity down alarm observed on edge vms. Screenshot of the alarm is as below

• Management IP of NSX Edges were not reachable via ping and SSH, while other Transport nodes and other edge vms were accessible
• The alarm didn't clear after rebooting both edge vms via vcenter, transport nodes, NSX managers .
• All certificates on NSX managers and transport nodes were applied successfully and verified to be correct 

Environment

3.2.3.0

Cause

The VNIC interfaces of the Edge nodes remained not connected to configured segment on vcenter as shown in below screenshot 

Resolution

After re-connecting the VNIC interfaces to the corresponding segments on the edge nodes from vcenter, 

• Edge nodes became reachable via ping and accessible via SSH
• The alarm "MPA connectivity down" alarm got cleared
• No error or warning observed in upgrade pre-check

Additional Information

Ensure to verify the geneve tunnel connectivity between edge nodes are UP in case the edge vms are deployed only for VCD load balancer service. In such cases the ESXi host need not be prepared as transport nodes, so geneve tunnel between transport nodes doesn't exist, and if the TEP IPs of edge vms are statically assigned, check the gateway is reachable from each edge vm to establish a geneve tunnel across edge nodes in an edge cluster.