Removing Host Switch from VDS in NSX Security Only installation.

Products

• VMware NSX

Issue/Introduction

• Removing Host Switch from VDS that has NSX Security Only installation.
  
  There are 2 types of Installation. "Security" and "Networking & Security".
  To verify your cluster is installed with "Security", navigate to System > Fabric > Hosts and check the cluster shows "Security" on NSX UI.
  
  
  
• In Security Only installation, transport node profile has:
  • Name ends with "autoconf-tnp". The format is "<COMPUTE_COLLECTION_ID>-autoconf-tnp".
  • Name has system generated transport node profile icon.
    
  • Updating host switch configuration is blocked. ADD HOST SWITCH, Edit, Delete buttons are disabled.
    

Environment

NSX 4.1

Cause

This is expected behavior for transport node profiles that are created by NSX Security Only installation.
The transport node profile created by NSX Security Only installation cannot be updated through UI or API.

Resolution

To remove host switch from VDS, apply desired transport node profile that has desired host switch configuration.

1. Moving out of the host from Security Only cluster triggers uninstallation. After uninstallation completed, move another cluster that has desired host switch configuration.
   Triggering Uninstallation from the vSphere Web Client
   
   
2. Remove the host from VDS.
   Remove Hosts from a vSphere Distributed Switch
3. Create new cluster.
   
   
4. Add the host to the cluster.
   
   
5. Start Security Only installation.
   Security Only installation adds all VDS that the host joined. Make sure to remove the host from VDS before start Security Only installation in Step 2.

Additional Information