JordansphereNSX
NSX Alert: Possible DHCP DOS Attack on Host
Problem Running NSX. 6.4.3. An error was keep appearing on one of our 6.7 ESXi hosts: NSX Alert: Possible DHCP DOS attack on host Resolution I believe this is a false positive from a bug in 6.4.x To check if there are any issues log into the affected ESXi host and run the following […]
NSX Manager Disconnected from vCenter
Problem We noticed NSX Manager had become disonnected from both the lookup service and vCenter Troubleshooting Check Connectivity From NSX Manager # debug connection {IP_of_vCenter} PING 10.63.240.1(10.63.240.1): 56 data bytes 64 bytes from 10.63.240.1: icmp_seq=0 ttl=64 time=0.205 ms 64 bytes from 10.63.240.1: icmp_seq=1 ttl=64 time=0.134 ms 64 bytes from 10.63.240.1: icmp_seq=2 ttl=64 time=0.096 ms […]
Change Default Gateway of NSX Controller
Problem A default gateway on the IP Pool servicing the NSX controllers had been mistyped during installtion. I needed to change this so my montioring system could route traffic to the 3 controllers. Versions: NSX .6.4.3 vCenter 6.7 Caveats NTP Server was on a different subnet so current controllers could not route to […]
Configure Load Balancer on NSX Edge
The following guide describes how to set up LB on an NSX 6.4.1 Edge 1. Click Manage tab -> Load Balancer -> Edit -> Global Configuration -> Enable Load Balancer -> Enable Logging 2. Under Pools -> Select + (sign) -> {Enter details like below} 3. Click + (sign) -> {Enter details like […]
Invalid PEM Data Received for Private Key – NSX Edge
Problem When attempting to import an SSL certificate into an NSX Edge firewall I got the following error: Invalid PEM data received for private key Resolution The private key was in PKCS#8 which is not a valid type for import. Export it to PKCS#1 using the following command: openssl rsa -in original.key -out […]
NSX Network and Security Tab Disappeared in vCenter
Issue: I noticed the Network & Security tab was not visible in a vCenter 5.5 Web Client. This had worked previously. Troubleshooting: Upon investigation in the NSX Manager it appeared the Lookup Service URL was showing as disconnected Resolution: To fix the issue we had to click Edit then re-enter the credentials.
Upgrade NSX 6.2.4 to 6.3.4 in a vCloud Environment
This document describes how to upgrade NSX in a VCD environment. We will be upgrading NSX from 6.2.4 -> 6.3.4 Current Components Component Version vCloud Director 8.20.0 ESXi 5.5 U3 vCenter 5.5 U3 NSX 6.2.4 Chargeback Manager 2.7.3 Check Interoperability Matrices Pre-installation Take a clone of NSX Manager Take backup of NSX manager […]
NSX Edge VPN Not Working after Upgrade from 6.2.4 to 6.3.4
Problem: After an upgrade of NSX from 6.2.4 to 6.3.4 in a vCloud enivronment (8.20) several VPNs refused to connect from NSX Edges to a variety of external devices. Troubleshooting: We attempted disabling/re-enabling VPN, redploying the Edge (and thus upgrading to 6.3.4) and removing/add the VPN configuration. All failed. Looking at […]
Lockdown NSX Edge SSL VPN to Specific IP Address
Issue: I wanted to lock down my NSX Edge Gateway SSL VPN portal to a specific IP range. As you are not allowed to put a custom rule above a system defined rule on the edge itself I needed a work around. Resolution: In vCenter web client go to HOME -> Network & Security […]
SSL VPN-Plus Client Fails to Connect
After upgrading from vShield Edge 5.5.4 -> NSX Edge 6.2.4 -> then converting to Advanced Gateway in a vCloud Director (8.20) environment all of my SSL VPN connections failed to establish. The following appeared: "Error: Connection to gateway failed. Please contact your administrator for SSL VPN-Plus gateway settings." Looking at the version it appeared I […]