Search the VMware Knowledge Base (KB)
View by Article ID

Traffic disruption when performing vMotion in NSX 6.2.3 (2146227)

  • 9 Ratings

Symptoms

  • Traffic disruption is encountered when performing a vMotion on compute virtual machines, after upgrading to NSX for vSphere 6.2.3 with Distributed Firewall (DFW) and configuring Security Groups (SG)
  • Configurations of the Global Address Sets in the SG referenced of the virtual machines are changed

Purpose

Upgrading to NSX for vSphere 6.2.4 resolves this issue.

Cause

In NSX-V 6.2.3, a new Global Address set (Addrset) is introduced as an optimization feature. Any virtual machines that are created on NSX-V 6.2.3 would be using the Shared Global Addrset and would refer to the new Global Addrset.

After upgrading to NSX for vSphere 6.2.3, when virtual machines that were part of a SG that was created in NSX-V 6.2.3 and earlier version are migrated to another host running NSX-V 6.2.3, would continue to refer to the old local copy of Addrset and ignore new updates in the Global Addrset.

Resolution

This issue is resolved in VMware NSX for vSphere 6.2.4, available at VMware Downloads.

To work around this issue if you do not want to upgrade:
  1. Disable vMotion on the VMK interface on all hosts in the compute cluster.
  2. If your Default_Rule rule is set to DENY, change it to ALLOW.
  3. Disable Distributed Firewall (DFW), per cluster, one at a time.
  4. Wait 15 minutes between each cluster change.
  5. Enable Distributed Firewall (DFW), per cluster, one cluster at a time.
  6. Wait for all applications to recover.

    Note: This process is application dependent and can take some time to recover. Some connections might get dropped based on when the Default_Rule to ALLOW would be picked up.


  7. Change the Default_Rule rule to DENY.

Additional Information

To be alerted when this article is updated, click Subscribe to Document in the Actions box.

See Also

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 9 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 9 Ratings
Actions
KB: