LogicalPort Update to Parent VIF Fails Incorrectly on Overlay Transport Zone

Products

• VMware NSX

Issue/Introduction

• When attempting to update a Segment Port to a Parent port on a Segment (Logical Switch) backed by an Overlay Transport Zone, the operation fails with the error:
  CIF_LOGICALPORT_CANNOT_IN_TRUNK_VLAN — "Could not update logical port to CIF since it's in trunk VLAN mode."

Environment

VMware NSX 

Cause

This validation constraint, which blocks parent VIF port assignments, is incorrectly applied to ports associated with Overlay Transport Zones. It is intended for VLAN-type Transport Zone ports only.

Resolution

This is a known issue impacting VMware NSX. Subscribe to this KB article to be updated if a fix version becomes available.

Workaround:
On impacted versions, the following sequence can be used to achieve the desired configuration without hitting the error:

1. Create the Segment with the Transport Zone type set to Overlay.
   * Do not configure any VLAN range at this stage.
2. Attach the VM to the Segment.
   * This triggers creation of a SegmentPort (LogicalPort) for the VM.
3. Convert the Segment Port to a PARENT port.
   * Update the port's attachment type to Parent port.
   * Since the Segment has no VLAN trunk range configured yet, the VLAN trunk range validation does not trigger.
4. Update the Segment with the required VLAN trunk range.
   * Now that the Parent port already exists, this step configures the VLAN range on the Segment without going through the SegmentPort (LogicalPort) update path.