Error: "Cannot update edge <cluster name> to cluster with id urn:vcloud:edgeCluster: <id> having different Stateful firewall configuration than source cluster" while trying to update the edge cluster in VMware Cloud Director

Products

• VMware Cloud Director

Issue/Introduction

When attempting to exchange one NSX-T edge cluster to another in VMware Cloud Director without making changes to the current infrastructure, following error is encountered:

"Cannot update edge <cluster name> to cluster with id urn:vcloud:edgeCluster:########-####-####-####-############ having different Stateful firewall configuration than source cluster since there are User defined firewall rules. Please delete them and try again."

Environment

VMware Cloud Director 10.6.x

Cause

This error occurs because there is a mismatch in the Stateful Firewall configuration between the source and target edge clusters while user-defined firewall rules are present.

Resolution

To resolve this and proceed with the cluster exchange, align the configurations between the source and target edge clusters by following these steps:

1. Check Edge Cluster Settings: Log in to the Cloud Director provider UI and navigate to Resources > Infrastructure Resources > NSX-T > NSX-T Edge Clusters. Compare the Stateful Firewall status (Active / Inactive) for both the source and target clusters.

2. Align Cluster Configurations: If the target cluster has a different setting than the source, click Edit on the target cluster and toggle the Stateful Firewall slider to match the source cluster.

3. Once the Stateful Firewall settings match, proceed with the edge cluster exchange. Afterward, you can revert the Stateful Firewall to its previous state if necessary.

Additional Information

Reference:

How to create stateful firewall rule with VCD UI

 Stateless Firewall Support in Cloud Director