Gathering ARP tables for NSX segments

Products

• VMware NSX

Issue/Introduction

Introduction:  

This article provides procedures for retrieving ARP tables for NSX-T segments. Users may need to gather this information to troubleshoot connectivity, verify IP-to-MAC mappings, or audit segment traffic.

Symptoms:

• Requirement to verify IP-to-MAC mappings for specific NSX-T segments.
• Need for centralized ARP table collection.
• Troubleshooting North-South or East-West connectivity issues.

Environment

VMware NSX

Resolution

Resolution

1. Retrieve via NSX Manager CLI

   • Log in to the NSX Manager appliance via SSH using admin credentials.
   • Obtain the Virtual Network Identifier (VNI) for the target segment. (Found in NSX Manager UI under Networking > Segments).
   • Execute the following command: get segment <segment-uuid> arp-table

2. Retrieve via Edge Node CLI

   • Access the Edge node shell.
   • Execute the following command to retrieve learned entries for specific segments: get segment remote arp-cache <VNI-ID>

3. Retrieve via ESXi Host CLI

   • Log in to the ESXi host where the segment resides.
   • Execute the following command: get logical-switch <VNI-ID> arp-table
     
     
4. Download the ARP table as .csv file from the UI
   
   

5. Retrieve via API

   • Use the following API call to retrieve the ARP table for a segment: GET /policy/api/v1/infra/segments/{segment-id}/arp-table

Additional Information

• Segments
• For further assistance, contact Broadcom Support.
• To learn more about creating and managing cases, see Creating and managing Broadcom support cases.