salarmehdizadeh Tracker

Re: NSX-T 3.1 renew self signed certificates

salarmehdizadeh — Wed, 01 Feb 2023 08:01:58 GMT

Hello,

1. Can we extend the duration of an expired certificate?
2. You advised entering SAN (VIP and three manager nodes with FQDN) for a certificate, but in the CSR generating process we only can enter the Common name, there is no section for entering SAN?

Re: NSX-T 3.2 on vSphere 7u3c Hugepage issues on Edge VMs.

salarmehdizadeh — Thu, 05 Jan 2023 11:16:27 GMT

Hello,

Based on VMware support advice, we migrate EDGE VMs to another cluster where EVC was disabled there and the issue was resolved and we could proceed with the Upgrade process as well.

I hope that it works for you.

Re: AVI Load Balancer routed pools

salarmehdizadeh — Sat, 26 Nov 2022 18:18:16 GMT

I think that the answer is ROUTING.

your SEs must have reachability to your pools. it will be done by selecting the appropriate network on the vCenter cloud inside NSX ALB SEG (Network Tab) and also defining a specific route or default route for SEs.

if you use NSX cloud, T1 has to have a route advertisement to T0, and also T0 must have route to your physical side.

if you use vCenter cloud, under NSX ALB > Infrustracture > cloud resources > routing

select your cloud and define a static route if you do not use Dynamic routing.

Re: NSX-T + Cloud director + shared external subnet between 2 locations

salarmehdizadeh — Wed, 14 Sep 2022 10:02:21 GMT

hi,

I think that it's NOT a good idea to announce your External IP from more than one site. (it means you can't use an A/A site with the same Ext IP). at the standby site, you should append some data to BGP to use it as a secondary path.

Re: NSX-T 3.2 on vSphere 7u3c Hugepage issues on Edge VMs.

salarmehdizadeh — Tue, 27 Dec 2022 18:19:53 GMT

I have the same issue in the NSX Upgrading process from version 3.1.3.1 to 3.2.2 in EDGE nodes Upgrade stage.

I edited the EDGE VM advance feature to "featMask.vm.cpuid.pdpe1gb: Val:1" based on VMware kb
but, because of EVC is enabled on Cluster, it does NOT take effect for me.
the suggestion was about disabling the EVC but in a production environment, will disable EVC has a negative impact?