From a web vm
- I'm able to ping its gateway (192.168.2.1) and even a vm in the app network with IP 192.168.3.4 (distributed routing).
- Ping to uplink on T1 connecting to T0, 100.64.240.1 works. Ping to downlink on T0 connecting to T1, 100.64.240.0 works
- Ping to uplink on T0, which is 10.4.14.10 does NOT work
Details from relevant API responses
Details of the T0 uplink port
{
"subnets": [
{
"ip_addresses": [
"10.4.14.10"
],
"prefix_length": 24
}
],
"edge_cluster_member_index": [
1
],
"linked_logical_switch_port_id": {
"target_id": "9ff79c75-69e8-45c0-b561-11a39dbbcb76",
"target_display_name": "9ff79c75-69e8-45c0-b561-11a39dbbcb76",
"target_type": "LogicalPort",
"is_valid": true
},
"urpf_mode": "STRICT",
"mtu": 1600,
"mac_address": "00:50:56:a5:7d:85",
"resource_type": "LogicalRouterUpLinkPort",
"id": "b6f466c5-4a85-4c06-9a57-22f1366f5643",
"display_name": "uplink-ns-exit",
"logical_router_id": "e5421544-631e-41f5-bd47-1105da236e4f",
"_create_user": "admin",
"_create_time": 1558050667180,
"_last_modified_user": "admin",
"_last_modified_time": 1558158219773,
"_system_owned": false,
"_protection": "NOT_PROTECTED",
"_revision": 6
}
NAT rules on tier-0 gateway
{
"results": [
{
"rule_priority": 1124,
"action": "SNAT",
"match_source_network": "192.168.2.0/24",
"translated_network": "10.4.14.11",
"enabled": true,
"logging": true,
"logical_router_id": "e5421544-631e-41f5-bd47-1105da236e4f",
"nat_pass": false,
"firewall_match": "MATCH_INTERNAL_ADDRESS",
"internal_rule_id": "01003000-0000-0402-0000-000000000003",
"resource_type": "NatRule",
"id": "1026",
"display_name": "web-tier",
"tags": [
{
"scope": "policyPath",
"tag": "/infra/tier-0s/apstra-bs-tier0/nat/USER/nat-rules/76822df0-783a-11e9-b88f-ef8f85d7f602"
}
],
"_create_user": "nsx_policy",
"_create_time": 1558052893072,
"_last_modified_user": "nsx_policy",
"_last_modified_time": 1558158288113,
"_system_owned": false,
"_protection": "REQUIRE_OVERRIDE",
"_revision": 1
}
],
"result_count": 1,
"sort_by": "rule_priority"
}
