topic NSX-T 3.2 - No Distributed Port Group found in VMware NSX Discussions

NSX-T 3.2 - No Distributed Port Group found

vmsysadmin20111 — Wed, 02 Mar 2022 18:08:37 GMT

Hello all,

I have NSX-T 3.2 installed, the ESXi cluster is enabled for Distributed Security and Overlay Networking, however the regular vDS portgroups are not discovered.

From the 3.2 Security Guide: "Starting NSX-3.2 release NSX supports vSphere Distributed Switch (VDS) 7.0 & 6.7 for security only usecase, where by user can define distributed security policies for workloads connected to Distributed Virtual Port-groups(DVPG)."

Does this mean that if the cluster configured for the overlay networking, the Distributed Security on the standard vDS portgroups is not available? The documentation wording is very confusing. Can someone please clarify?

Thanks!

Re: NSX-T 3.2 - No Distributed Port Group found

jeffersonc47 — Wed, 02 Mar 2022 18:26:48 GMT

I've had the same issue. There's a QuickStart wizard that you can use for security only use cases on a vDS (https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-E9FBE567-D136-41AF-B8D6-AE95416F4229.html#GUID-E9FBE567-D136-41AF-B8D6-AE95416F4229). I've used that successfully. However it build all the profiles and such for me. If I want to do overlay also and build custom profiles, I can't get the vDS port groups to show up.

Re: NSX-T 3.2 - No Distributed Port Group found

vmsysadmin20111 — Fri, 04 Mar 2022 21:00:15 GMT

So nobody knows for sure if the Distributed Security on the vDS and overlay networking are mutually exclusive? Hello? VMware employees??

Re: NSX-T 3.2 - No Distributed Port Group found

CyberNils — Mon, 07 Mar 2022 08:33:06 GMT

You can't use both on the same VDS. Not sure where this is documented though, but saw it on an internal VMware presentation and also told by VMware.

Re: NSX-T 3.2 - No Distributed Port Group found

vmsysadmin20111 — Mon, 07 Mar 2022 17:30:28 GMT

Thank you for confirming!

Re: NSX-T 3.2 - No Distributed Port Group found

nreyesv79 — Thu, 15 Dec 2022 18:17:39 GMT

Not only you can't use on same vDS, the deployment mode are Security or Networking and Security, you can use only one of them, for Security only you can use vDS and PG to configure DFW rules, etc. For Net&Sec mode, you work as of today, only NSX-T segments can be used; it is documented on Reference Design Guide 3.2 v1.1.

Cheers