NSX Manager UI login failure when using Virtual IP (VIP)

Products

• VMware NSX

Issue/Introduction

• Admin credentials fail or timeout when logging in via the Cluster VIP.
• Login is successful when connecting directly to any individual cluster member IP.
• SSH access to individual nodes functions correctly.

Environment

VMware NSX

Cause

The NSX Virtual IP (VIP) is configured on a different subnet than the NSX Manager appliance management interfaces (eth0). In NSX-T architecture, the native VIP is a floating IP address managed via Gratuitous ARP (GARP) on the elected leader node. This requires Layer 2 adjacency; if the VIP is on a different subnet, the leader node cannot correctly bind or advertise the IP, leading to routing inconsistencies or authentication session failures.

Resolution

Configure the NSX Virtual IP (VIP) on the same subnet as the NSX Manager nodes:

1. Log in to an individual NSX Manager node UI using its management IP.
2. Navigate to System > Appliances.
3. Under the Virtual IP section, select Edit.
4. Change the Virtual IP to an address that resides in the same subnet as the NSX Manager eth0 interfaces.
5. Click Save.
6. Verify access by logging in to the UI using the newly assigned VIP.

For additional information on VIP requirements, see Configure a Virtual IP Address for a Cluster.

Additional Information

For password synchronization issues not related to network configuration, refer to KB 440169.