Hi,
When I add a VM to segment Overlay on my T1. I always this error. Geneve tunnel is down with 0 as error. I use a pfSense and I created two VLAN. One for VTEP Edge and one for VTEP ESXi.
vmkping works fine between edge and ESXi hosts.
Have you got an idea for this issue ?
Thank you,
Regards,
Hi,
I solved this issue. My pfSense was inside the same environment than NSX-t. When I created pfsense outside, everything works fine.
Tank you,
Hello @Marmotte94,
This is indicating that definetely there is an issue while doing the tunnel between the two VTEPs adapter. In your screenshot I can see another IP which is 50.50.50.114 instead of the 50.50.50.112 that is in your screenshot.
Are you configuring everything using VDS or N-VDS?
Hi,
50.50.50.112 is on ESXi host but all works fine with others as well.
Yes, all are configured correctly I hope. I can use NSX-t on VLAN segment.
Thank you,
Regards,
Hey,
Could you please give us more insight about the VDS, N-VDS and Profiles configurations because most of the time the issue is because of one wrong configuration there.
Hi,
I send to you more details with screenshot. I have two profiles (ESXi Host, Edge) for VLAN configuration as well as two address pool.
- All ping from pfSense to ESXi, Edge, T0.
- VMKping work fine between ESXi and Edge server.
Thank you,
Few things here:
I can see you are also using MTU 9000 and 1600 on different Uplink Profiles, try to standarize that configuration. However I can see that you are specifying the VLAN on the Uplink Profiles so how are you VDS portgroups configured?
Hi,
Ok, I'll change this configuration. The port group is configured with TRUNK. But All interfaces ping from pfSense and MTU works fine from ESXi to Edge.
Thank you,
Regards,
The ping could work if the connectivity is there and the size is not getting fragmented, however I thing found something:
On the edge you are using the next configuration:
As I can see, the TZ you are using is a VLAN one:
However you are using the VTEP Uplink Profile which has a defined VLAN:
This should not be the issue as on the picture two (2) I can confirm that you are using 3 Transport Nodes which should the NSX Edge we are troubleshooting and some ESXi.
I think this issue will be better to fix if you share with us what were you trying to configure in a diagram perspective. I assume you are trying to follow the VMware Docs configurations.
I'm trying and test to add a virtual machine on T1 segment whit his GW. When I connect a virtual machine on this segment the tunnel GENEGE goes down.
But I can used NSX-t for VLAN only (So East/West only). I think there a mistake somewhere or I don't understand something.
I understand what is not failing for you but unfortunately we need to see the full picture to see why is not working, that is why I am asking if you went over the documentation.
VLAN connectivity is working because the traffic does not go over the VTEPs so you do not need any encapsulation and the tunnel is getting down because there is some issue while doing the tunnel.
I recommend you to follow the next series: https://shuttletitan.com/nsx-t/nsx-t-installation-series/nsx-t-installation-series-step-9-configure-...
As you do not have anything configured you can start from the very beginning to make sure you understand everything you are doing.
Hi,
Thank you for your help. But I didn't solve this issue yet. All work fine with VLAN segment, BGP. But not overlay, I checked all configuration without any resolution.
I think I'll wait version 3.1 ready to download on VMUG Advanced.
Thank you,
Regards,
A bit more information as to how and why it all works the way it does can be found here. https://www.lab2prod.com.au/2020/11/nsx-t-inter-TEP.html?m=1#more
Hi,
I solved this issue. My pfSense was inside the same environment than NSX-t. When I created pfsense outside, everything works fine.
Tank you,