VMware Networking Community
iforbes
Hot Shot
Hot Shot

Cannot ping vm's on the same VXLAN and same ESXi host

Hi. This is incredibly frustrating since I had it working at one point. I've created a logical switch (network1) and given it VNI 5001. It's in a Transport Zone that includes my test ESXi cluster and the control plane is unicast (all pretty default stuff). I've even created a logical router and included network1 as a connected interface (to take care of routing).

To keep things simple I configured 2 vm's on the same ESXi host to be connected to VXLAN network network1. I added these vm's via NSX - Logical Switches. I've given each vm an IP in the VXLAN subnet (192.168.100.1/24). At this point you'd think I could at least ping from one vm to the other...but I can't.

My first question is what might be the issue? These are on the same ESXi server, so there is no VTEP --> VTEP task. I vmotioned one of the vm's to another ESXi host, but still no ability to communicate between these vm's. I've gone through the following NSX troubleshooting link : NSX-v Troubleshooting L2 Connectivity | VMware Professional Services. Everything I went through in that article related to the Logical network was ok. When I checked the VXLAN routing section (VTEP --> VTEP) using the following ping command ping ++netstack=vxlan [target VTEP IP] -s 1570 -d, it fails. If I ping the target VTEP IP without the -s 1570 -d it is succussful. This is supposed to point to incorrect MTU on the vDS, but i verified that the MTU is set to 1600.

Once again, it's an issue that I cannot seem to communicate between ESXi VTEP's using the 1570 MTU (I also tried MTU 1572 in the command), but don't forget that even having the vm's on the ame ESXi server still fails communication between them.

I feel like it's something small that is missing. This was working weeks ago, and I don't know what I changed that causes this. I even blew away all of the VXLAN logical switches and created new ones - but same issue.

Any advice would be most appreciated.

Thanks

0 Kudos
2 Replies
grosas
Community Manager
Community Manager

I would put them back on the same host and check if you can get the machines to ping if you use a non-vxlan backed dPortGroup.  If they can't talk, perhaps check to make sure your there is no IPtables/windows Firewall issues?  Distributed firewall being used.  I'd make sure we're not blocking there.

_____________________________________
Gabe Rosas (VMware HCX team at VMware)
Blog: hcx.design
LinkedIn: /in/gaberosas
Twitter: gabe_rosas
0 Kudos
AjazWani
Contributor
Contributor

Have You checked the Virtual Wire settings?  There is a feature called Miscellaneous which if is set as "YES" will block your communication between all the associated VM's.

VM to VM problem1.PNG

0 Kudos