NSX

Debug NSX Edge Traffic

September 24, 2019 Jordansphere NSX

OS: NSX Edge: 6.4.x   Show routing table show ip route   Show Interfaces show int   Display debug information on a specific interface debug packet display interface {int_name} eg debug packet display interface vNic_2   Display debug information on specific interface and remote host debug packet display interface {int_name} host_{IP Address}  eg debug packet display […]

More

Debu NSx edge routing, Debug NSX routing, nsx edge, routing, vhsield edge,

NSX Alert: Possible DHCP DOS Attack on Host

April 1, 2019 Jordansphere ESXi

Problem Running NSX. 6.4.3. An error was keep appearing on one of our 6.7 ESXi hosts: NSX Alert: Possible DHCP DOS attack on host   Resolution I believe this is a false positive from a bug in 6.4.x To check if there are any issues log into the affected ESXi host and run the following […]

More

NSX Alert, Possible DHCP DOS Attack on Host,

NSX Manager Disconnected from vCenter

March 6, 2019 Jordansphere NSX

Problem We noticed NSX Manager had become disonnected from both the lookup service and vCenter   Troubleshooting   Check Connectivity From NSX Manager # debug connection {IP_of_vCenter} PING 10.63.240.1(10.63.240.1): 56 data bytes 64 bytes from 10.63.240.1: icmp_seq=0 ttl=64 time=0.205 ms 64 bytes from 10.63.240.1: icmp_seq=1 ttl=64 time=0.134 ms 64 bytes from 10.63.240.1: icmp_seq=2 ttl=64 time=0.096 ms […]

More

Change Default Gateway of NSX Controller

December 5, 2018 Jordansphere NSX

Problem A default gateway on the IP Pool servicing the NSX controllers had been mistyped during installtion. I needed to change this so my montioring system could route traffic to the 3 controllers.   Versions: NSX .6.4.3 vCenter 6.7   Caveats NTP Server was on a different subnet so current controllers could not route to […]

More

Configure Load Balancer on NSX Edge

October 4, 2018 Jordansphere NSX

The following guide describes how to set up LB on an NSX 6.4.1 Edge   1. Click Manage tab -> Load Balancer -> Edit -> Global Configuration -> Enable Load Balancer -> Enable Logging       2. Under Pools -> Select + (sign) -> {Enter details like below}  3. Click + (sign) -> {Enter details like […]

More

Invalid PEM Data Received for Private Key – NSX Edge

September 25, 2018 Jordansphere NSX

Problem   When attempting to import an SSL certificate into an NSX Edge firewall I got the following error: Invalid PEM data received for private key     Resolution The private key was in PKCS#8 which is not a valid type for import. Export it to PKCS#1 using the following command: openssl rsa -in original.key -out […]

More

NSX Network and Security Tab Disappeared in vCenter

November 24, 2017 Jordansphere NSX

Issue: I noticed the Network & Security tab was not visible in a vCenter 5.5 Web Client. This had worked previously.   Troubleshooting: Upon investigation in the NSX Manager it appeared the Lookup Service URL was showing as disconnected   Resolution: To fix the issue we had to click Edit then re-enter the credentials.   

More

Upgrade NSX 6.2.4 to 6.3.4 in a vCloud Environment

November 7, 2017 Jordansphere NSX

This document describes how to upgrade NSX in a VCD environment. We will be upgrading NSX from 6.2.4 -> 6.3.4 Current Components Component Version vCloud Director 8.20.0 ESXi 5.5 U3 vCenter 5.5 U3 NSX 6.2.4 Chargeback Manager 2.7.3   Check Interoperability Matrices   Pre-installation Take a clone of  NSX Manager  Take backup of NSX manager […]

More

NSX Edge VPN Not Working after Upgrade from 6.2.4 to 6.3.4

November 3, 2017 Jordansphere NSX

Problem:    After an upgrade of NSX from 6.2.4 to 6.3.4 in a vCloud enivronment (8.20) several VPNs refused to connect from NSX Edges to a variety of external devices.     Troubleshooting:   We attempted disabling/re-enabling VPN, redploying the Edge (and thus upgrading to 6.3.4) and removing/add the VPN configuration. All failed. Looking at […]

More

Lockdown NSX Edge SSL VPN to Specific IP Address

October 24, 2017 Jordansphere NSX

Issue: I wanted to lock down my NSX Edge Gateway SSL VPN portal to a specific IP range. As you are not allowed to put a custom rule above a system defined rule on the edge itself I needed a work around.   Resolution: In vCenter web client go to HOME -> Network & Security […]

More

« Previous Posts

Powered by WordPress. Designed by elogi.