Adding a new workload domain with a dedicated NSX Manager Instance to VCF 9.1 fails due to IP address pool overlapping

Products

• VCF Operations
• VMware Cloud Foundation
• VMware NSX
• VMware SDDC Manager / VCF Installer

Issue/Introduction

• New Workload Domain deployment fails on step 11 (Validation) with error message:
  
  [The IP address range [##.##.##.##-##.##.##.##] overlaps with the existing IP address ranges [10.10.0.1-10.10.3.254] of the IP address pool ########-####-####-####-############ in the NSX cluster <nsx_fqdn>]
  
  
• SDDC Manager logs shows the following error:
  

  /var/log/vmware/vcf/domainmanager/domainmanager.log
  yyyy-mm-ddThh:mm:ss.zzz+0000 DEBUG [vcf_dm,0000000000000000,0000] [c.v.v.h.s.v.IpAddressPoolSpecValidator,dm-exec-11] CIDR=<USED_CIDR_BLOCK>, ipAddressInCidr=<USED_CIDR>, networkAddress=<USED_CIDR>
  yyyy-mm-ddThh:mm:ss.zzz+0000 ERROR [vcf_dm,0000000000000000,0000] [c.v.v.h.s.v.IpAddressPoolSpecValidator,dm-exec-11] The IpAddress range [<start_ip>-<end_ip>] overlaps with the IP ranges [10.10.0.1-10.10.3.254] of the IP address pool <ip_pool_id> in the NSX cluster <nsx_fqdn>

  
  
  

Environment

VMware Cloud Foundation (VCF) 9.1.0

NSX Manager

Cause

This is a known issue in VCF 9.1.0 that occurs when the new Workload Domain configuration contains IP addresses belonging to the 10.10.0.0/22 CIDR block.
NSX creates an internal system IP pool for Service Insertion (SI) consumption in that CIDR block.
By default, this pool is allowed to overlap with other NSX IP pools.
However, the VCF workflow incorrectly flags this overlap as a validation failure during the Workload Domain deployment process.

Resolution

A fix to this issue will be implemented in a future VCF release.

Contact Broadcom support for a workaround.