Impact of Toggling Segment Admin State to Up or Down

Products

• VMware NSX

Issue/Introduction

This article explains the the impact of toggling the Segment "Admin State" to "Up/Down".

Environment

VMware NSX

Resolution

Toggling the Segment Admin state to "down" prevents any traffic from passing through that segment.

This is usually done by the administrator to logically disable the traffic flow.

Steps:

1. Navigate to Networking Tab on the NSX UI
2. Click on Segments --> Add segment button
3. You can find the "Admin State" toggle option here.

Similarly toggling the Admin Status of a Segment to "Up" allows the flow of traffic through that Segment.

The default value of the admin status of a segment is "Up".

Log snippets observed on the NSX manager:

1. Log snippet observed on Toggling the segment, test_segment's "Admin Status" to Down:

/var/log/syslog
2026-05-18T03:50:03.166Z nsx-####-###### NSX 80731 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Updated LogicalSwitch to LogicalSwitch [id=LogicalSwitch/######-####-####-####-########, name=test_segment, segmentPath=/infra/segments/test_segment, switchType=DEFAULT, transportZoneId=TransportZone/####-######-####, vni=72704, vniPoolId=VniPool/######-####-####-####-########, replicationMode=MTEP, adminState=DOWN, switchingProfileIds=[SwitchingProfileTypeIdEntry [type=SwitchSecuritySwitchingProfile, profileId=#######-####-####-####-#######], SwitchingProfileTypeIdEntry [type=SpoofGuardSwitchingProfile, profileId=#######-####-####-####-########], SwitchingProfileTypeIdEntry [type=IpDiscoverySwitchingProfile, profileId=######-####-####-9741-#########], SwitchingProfileTypeIdEntry [type=MacManagementSwitchingProfile, profileId=######-####-####-####-########], SwitchingProfileTypeIdEntry [type=PortMirroringSwitchingProfile, profileId=null], SwitchingProfileTypeIdEntry [type=QosSwitchingProfile, profileId=########-####-####-####-########]], switchMode=STANDARD, switchType=DEFAULT,uplinkTeamingPolicyName=null, extraConfigs=[  ], originId=null, originType=null, org=null, project=null, vpc=null, skipDefaultProfile=[]]

2. Log snippet observed on Toggling the segment, test_segment's "Admin Status" to Up:

/var/log/syslog 
2026-05-18T03:50:03.134Z nsx-####-###### NSX 80731 SWITCHING [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Updating existing LogicalSwitch LogicalSwitch [id=LogicalSwitch/#######-####-####-####-########, name=test_segment, segmentPath=/infra/segments/test_segment, switchType=DEFAULT, transportZoneId=TransportZone/######-######, vni=72704, vniPoolId=VniPool/######-####-####-####-#########, replicationMode=MTEP, adminState=UP, switchingProfileIds=null, switchMode=STANDARD, switchType=DEFAULT, uplinkTeamingPolicyName=null, extraConfigs=[  ], originId=null, originType=null, org=null, project=null, vpc=null, skipDefaultProfile=[]]

 

Additional Information

NSX Segment Administrative State DOWN Does Not Shut Down the Associated Tier-0/Tier-1 Gateway Interface