I deployed an NSX-T Manager (3.1.0) but the gateway didn’t appear to be set so I couldn’t access it from outside the network In order to change this Console into the NSX-T Manager that was just deployed Log in using the admin credentials Type set route prefix 0.0.0.0/0 gateway {ip} eth0 eg set route predix Read More…
Category: NSX
NSX-T Password Expiry Commands
Useful commands To reset a root password that has expired (and you still have the admin login) set user root password “new-pass” old-password “old-pass” To set the root password to never expire clear user audit password-expiration To set no SSH timeout set cli-timeout 0
Upgrade NSX-T from 2.5.1 to 3.0
Upgrade NSX-T 2.5.1 to 3.0 Please find the step-by-step process for upgrading NSX-T 2.5.1 to 3.0 1) Download NSX Cloud Upgrade Bundle for NSX-T 3.0.0 from Vmware.com website. 2) Log into NSX-T Manager Node (DO NOT USE VIP) Go to System -> Upgrade -> Upload MUB file -> {Select file} -> Upload This will upload Read More…
Debug NSX Edge Traffic
OS: NSX Edge: 6.4.x Show routing table show ip route Show Interfaces show int Display debug information on a specific interface debug packet display interface {int_name} eg debug packet display interface vNic_2 Display debug information on specific interface and remote host debug packet display interface {int_name} host_{IP Address} eg debug packet display Read More…
NSX Alert: Possible DHCP DOS Attack on Host
Problem Running NSX. 6.4.3. An error was keep appearing on one of our 6.7 ESXi hosts: NSX Alert: Possible DHCP DOS attack on host Resolution I believe this is a false positive from a bug in 6.4.x To check if there are any issues log into the affected ESXi host and run the following Read More…
NSX Manager Disconnected from vCenter
Problem We noticed NSX Manager had become disonnected from both the lookup service and vCenter Troubleshooting Check Connectivity From NSX Manager # debug connection {IP_of_vCenter} PING 10.63.240.1(10.63.240.1): 56 data bytes 64 bytes from 10.63.240.1: icmp_seq=0 ttl=64 time=0.205 ms 64 bytes from 10.63.240.1: icmp_seq=1 ttl=64 time=0.134 ms 64 bytes from 10.63.240.1: icmp_seq=2 ttl=64 time=0.096 ms Read More…
Change Default Gateway of NSX Controller
Problem A default gateway on the IP Pool servicing the NSX controllers had been mistyped during installtion. I needed to change this so my montioring system could route traffic to the 3 controllers. Versions: NSX .6.4.3 vCenter 6.7 Caveats NTP Server was on a different subnet so current controllers could not route to Read More…
Configure Load Balancer on NSX Edge
The following guide describes how to set up LB on an NSX 6.4.1 Edge 1. Click Manage tab -> Load Balancer -> Edit -> Global Configuration -> Enable Load Balancer -> Enable Logging 2. Under Pools -> Select + (sign) -> {Enter details like below} 3. Click + (sign) -> {Enter details like Read More…
Invalid PEM Data Received for Private Key – NSX Edge
Problem When attempting to import an SSL certificate into an NSX Edge firewall I got the following error: Invalid PEM data received for private key Resolution The private key was in PKCS#8 which is not a valid type for import. Export it to PKCS#1 using the following command: openssl rsa -in original.key -out Read More…
NSX Network and Security Tab Disappeared in vCenter
Issue: I noticed the Network & Security tab was not visible in a vCenter 5.5 Web Client. This had worked previously. Troubleshooting: Upon investigation in the NSX Manager it appeared the Lookup Service URL was showing as disconnected Resolution: To fix the issue we had to click Edit then re-enter the credentials.