vSAN File Service Directory Configuration Fails on NSX Segments

Products

• VMware vSAN

Issue/Introduction

When configuring vSAN File Services on an NSX segment, the directory service configuration fails with the following error:

`Errors/warnings in the previous session's configuration: Failed to check domain configuration: Can't get advanced check result from any hosts`

The configuration worked correctly when using a standard vSphere Distributed Switch (vDS) but fails as soon as the service is moved to an NSX segment.

Environment

VMware vSphere 8

Cause

This issue occurs because the default NSX Segment Profile does not permit **MAC address changes**. vSAN File Service nodes (FSVMs) may require the ability to change their MAC addresses or require MAC Learning to facilitate proper communication during the domain configuration check. If this setting is not explicitly enabled, network traffic required for the advanced check result is dropped.

Resolution

To resolve this issue, you must enable MAC Learning and allow MAC changes within the NSX Segment Profile associated with the vSAN File Service network.

1. Log in to the NSX Manager with administrative privileges.
2. Navigate to Networking > Segments > Segment Profiles.
3. Click Add Segment Profile and select  MAC Discovery.
4. Configure the profile with the following settings:
    - Name: Provide a descriptive name (e.g., vSAN-File-Service-MAC-Profile).
    - MAC Learning: Enabled.
    - MAC Change: Enabled.
5. Click Save.
6. Navigate to Networking > Segments and locate the segment used for vSAN File Services.
7. Edit the segment and expand the Segment Profiles section.
8. Change the MAC Discovery profile to the new profile created in Step 4.
9. Save the segment configuration.
10. Retry the vSAN File Service directory configuration in the vSphere Client.