Symptoms:
When VDS and the first network on the ESXi host are not under the same hierarchy and and NSX install is triggered on the hosts using the VDS, TN Update or TN Create may fail.
This can include NVDS to CVDS migration or new preparation of the ESXi host with CVDS.
Workaround:
NSX-T versions prior to 3.2.1
The first network of the host is the first network as visible on the network field in the vCenter MOB page https://<VC-IP>/mob?moid=host-moref
The first network of hosts as mentioned above and the concerned VDS should be directly under the same folder. The folder could be either DataCenter or a network folder inside DataCenter.
Example 1
or
Example 2
NSX-T 3.2.1/ NSX 4.0.0.1 and above
The first network of the host as mentioned above should be directly under a folder and desired VDS can be directly under the same folder or can be nested inside the same folder. The folder could be either DataCenter or a network folder inside DataCenter.
Example 1
or
Example 2
If the first network on the ESXI host is in a folder move then vDS to the same folder or DVS can be nested under the same folder.
To get the host-moref ID:
https://<VC-IP/FQDN>/mob/ --> content --> ManagedObjectReference:Folder (Datacenter Name) --> ManagedObjectReference:ManagedEntity[] (Datacenter ID) --> ManagedObjectReference:Folder (host) --> ManagedObjectReference:ManagedEntity[] (VC cluster) --> ManagedObjectReference:HostSystem[] (Host ID)
Or
Run the following API against NSX Manager
https://<NSX Manager IP>/api/v1/transport-nodes/<node-id>
In the output check for "discovered_node_id" in "node_deployment_info" which will be a combination of compute manager id and host moref
Example: 73a9b0bf-xxxx-xxxx-xxxxxxx:host-1004
In this case, host moref is host-1004
Validate the Network on the TNode either through or through the MOB page. The first network can be DVPG, NSX Network (NVDS), or a Standard network.
https://<VC-IP/FQDN>/mob/?moid=<host moref>
Expand the field to see all networks on the TNode: ManagedObject Reference: Network
https://<VC-IP/FQDN>/mob/?moid=<folder ID>
Example: group-n1156 taken from the log snippet mentioned in the KB
Expand the field to see all networks under the folder: ManagedObject Reference: ManagedEntity
Impact/Risks: