Segment created in NSX is not working

Products

• VMware NSX

Issue/Introduction

This article provides step-by-step instructions on how to create an NSX Segment (formerly known as a logical switch).
In NSX, segments are virtual Layer 2 domains used to provide network connectivity for virtual machines and container workloads.
You can create two types of segments: overlay-backed segments and VLAN-backed segments.

Environment

 

VMware Cloud Foundation 9.0
VMware NSX

 

Cause

This is a configuration guide. Administrators need to perform these steps when there is a requirement to provision new virtual Layer 2 networks (segments) for workload connectivity, east-west routing, or north-south routing within the SDDC.

Resolution

To create a new NSX segment, follow these steps:

1. Log in to the NSX Manager with administrator privileges.
2. Navigate to Networking > Segments.
3. Click Add Segment.
4. Enter a "Name" for the segment.
5. Select the type of "Connectivity" for the segment:
   "None": Select this if you do not want to connect the segment to an upstream gateway (e.g., for local testing on the same subnet, when no external routing is needed, or when configuring guest VLAN tagging).

• "Tier-1" Select this to connect the segment to a Tier-1 gateway.
• "Tier-0" Select this to connect the segment to a Tier-0 gateway.

Note: Segment connectivity can be changed later provided the gateway and segment remain in the same transport zone.

6. Enter the "Gateway IP" address of the subnet in CIDR format (e.g., 192.XX.X.X/XX).
   Note: If the segment is not connected to a gateway, the subnet is optional. If connected to a Tier-0 or Tier-1 gateway, the subnet is required. Subnets must not overlap with other segments in your network.

7. Select a "Transport Zone"

• Choose a "VLAN transport zone to create a VLAN-backed segment.
• Choose an "Overlay transport zone" to create an overlay-backed segment.

8. "(Optional)" To configure DHCP on the segment, click "Set DHCP Config".
9. In the "VLAN" field, specify the VLAN IDs:

• "For VLAN Transport Zones" Configure a single VLAN ID (to define the physical VLAN backing) or a range of VLAN IDs (to enable guest VLAN tagging).
• "For Overlay Transport Zones" Optionally enter a range of VLAN IDs to enable guest VLAN tagging.

10. "(Optional)" Select an "Uplink Teaming Policy":

• Overlay segments always follow the default teaming policy.
• For VLAN-backed segments, you can override the default teaming policy by selecting a named policy. This allows you to steer infrastructure traffic to specific VLAN segments.

11. Enter the "Fully Qualified Domain Name (FQDN)". The DHCPv4 server and static bindings on the segment will automatically inherit this domain name.
12. Make sure the Network connectivity toggle is enabled before saving the configuration
13. Click "Save".
14.  When prompted to continue configuring the segment, click "Yes" if you wish to add specific segment ports (defining VIF UUIDs, address bindings, etc.) or set up Segment Profiles. Otherwise, click "No".

Additional Information

• "DHCP Restrictions"  Starting with NSX 3.1.1, IPv4 DHCP relay is supported on a VLAN-backed segment through the Service Interface.

• For a standalone segment that is not connected to a gateway, only a local DHCP server is supported.

• Gateway DHCP is not supported on VLAN segments; they only support local DHCP servers.

• "Advanced Segment Operations" By expanding the segment in the "Networking > Segments" inventory list and clicking the options menu (the three dots), you can download MAC tables, VTEP tables, ARP tables, and ARP proxies directly to a CSV file.
  You can also view detailed local port statistics, interface statistics, and Duplicate Address Detection (DAD) status.
  
  Addtional Documentation:
  https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/advanced-network-management/administration-guide/segments/add-an-nsx-segment.html