VMware Networking Community
Hamidreza74
Enthusiast
Enthusiast

NSX-T TEP Communication down

I ran NSX-T 3.1 in my test Environment, and I have 1 Port Group in my vcenter and I config this scenario:

Hamidreza74_0-1661160438512.png

 

But after I config Host transport Node and Edge node TEP tunnel will be down after 10 minutes, i used the same port Group for Overlay and VLAN Transport Zone
Does anybody have an idea?

0 Kudos
14 Replies
ShahabKhan
VMware Employee
VMware Employee

Hi,

Kindly refer to the below KB article.

https://kb.vmware.com/s/article/83743

 

Hamidreza74
Enthusiast
Enthusiast

Thanks @ShahabKhan 
I am confused, I read documents and  try many scenarios but my TEP tunnel still down
can you help me
I have one port Group that is connected to the Physical Switch, I used this port Group for overlay and TEP tunnel
and also I have Port Group Trunk for north/south Traffic.
I want to test NSX-T in my lab environment, I can't create an extra VLAN on the physical switch 

Hamidreza74_0-1661283034151.png

 

0 Kudos
shank89
Expert
Expert

Are you using the same VLAN for edge and host TEPs?

Shashank Mohan

VCIX-NV 2022 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
LinkedIn https://www.linkedin.com/in/shankmohan/
Twitter @ShankMohan
Author of NSX-T Logical Routing: https://link.springer.com/book/10.1007/978-1-4842-7458-3
Hamidreza74
Enthusiast
Enthusiast

Yes

0 Kudos
ShahabKhan
VMware Employee
VMware Employee

Assuming you are using vDS7 & single VLAN for uplink (north/south), here is my suggestion

1. In NSX-T, create a VLAN-backed segment allowing Uplink & TEP VLANs

2. Connect the Edge node interfaces (fp-eth0 & fp-eth1) to this portgroup.

This should resolve your issue.

 

Hamidreza74
Enthusiast
Enthusiast

Thanks @ShahabKhan  I Create a VLAN-backed segment and allowed Uplink & TEP VLANs:

Hamidreza74_0-1661409065513.png

VLAN 1001 UPLINK 
VLAN 30 for overlay
and then connect edge node to this Segment 

Hamidreza74_1-1661409227998.png


also, I create Uplink Profile "NSX-Ege" and Assign Transport VLAN 100

but still, tunnel is down

0 Kudos
ShahabKhan
VMware Employee
VMware Employee

Hi,

Are you able to ping the TEP IPs using a larger MTU size i.e. from Host TEP to Edge node TEP?

Here is the command you can use on the ESXi host.

ping -S vxlan -s 1600 -d <destination-tep>

Hamidreza74
Enthusiast
Enthusiast

NO, I changed MTU Size on VDS to 1600, I think in the Physical switch I should change MTU to 1600, am I right?

Tags (1)
0 Kudos
ShahabKhan
VMware Employee
VMware Employee

Yes, on the physical switch as well you have to change the MTU.

Hamidreza74
Enthusiast
Enthusiast

@ShahabKhan  @shank89 Can I Use Dedicate PG for overlay Traffic and change MTU size in Vcenter? in this scenario TEP tunnel is not thrown over a physical switch 

Tags (1)
0 Kudos
ShahabKhan
VMware Employee
VMware Employee

I am not sure if that solution will work. Instead, you can deploy a virtual router or VM which supports routing & configure the TEP gateway in it. There are many free options available for lab.

Hamidreza74
Enthusiast
Enthusiast

Thanks @ShahabKhan I have Virtual Router and Deploy this Scenario But in Transport Node Uplink  PG is not available, I have ESXI Host and ESXI has 2 uplinks 2  to physical switch when I configure Transport Node Active Interfaces is not Show 

Hamidreza74_0-1661430180865.png

 

0 Kudos
Hamidreza74
Enthusiast
Enthusiast

@ShahabKhan  I don't have any limitations in my LAB environment (ESXI)  and I have Cisco Router and 1 PG group that is connected to a Physical switch, can you help with a simple solution that I can Test and MY TEP is UP

0 Kudos
ShahabKhan
VMware Employee
VMware Employee

If you have a router, then create a router-on-stick architecture. Make your router as the default gateway for both the VLANs & configure the larger MTU on the interface. Also if possible could you please provide a logical diagram of your lab environment?

0 Kudos