• NSX 6.2 Centralized CLI, Edge Services Gateway

      As discussed in a previous post, we have developed a centralized set of commands that can be run from the NSX manager instead of having to get a session into each NSX component. In this post I will focus on the Edge Services Gateway centralized commands; we have pushed out more than 60 total commands and I will list them here and go through what I feel are the most useful subsets. It’s important to remember that these commands are only going to provide you with information, rather than allow you to make changes. I know this is a […]

    Read more »
  • NSX 6.2 Communication Channel Health Check

      In NSX 6.2 we introduced a new feature to provide users with a way to check the communication channel between NSX Manager, the control plane agent (netcpa) and the firewall agent. If the channel is broken, the NSX manager will perform a sync operation to attempt to recover. The following communication channels are checked, along with their intervals below.   NSX Manager to Firewall agent – A heartbeat is sent every 3 minutes, if two iterations are lost a sync will occur NSX Manager to Control Plane Agent – A heartbeat is sent every 2 minutes, if two iterations […]

    Read more »
  • NSX controller deployment, deep dive, and connectivity verification

      I recently had a few customer’s run into some issues surrounding control plan connectivity. I wanted to compile a list of steps to verify that the control plane is in tact and doesn’t have any issues as well as provide useful commands to diagnose any issues. I wrote a previous post on how to Troubleshoot NSX Controller cluster status, roles, and connectivity, but I wanted to dive a little bit deeper this time.   Deployment   The first thing to mention, is again, that we recommend to deploy a total of three NSX controllers. NSX controllers store VM, ESXi, […]

    Read more »
  • NSX 6.2 Centralized CLI, Distributed Firewall

      In NSX 6.2 we have developed a centralized CLI to help troubleshoot DFW, Edge, VXLAN, and DLR issues. The majority of these commands are only to gather information rather than make changes, but it allows our users to the opportunity to login into a single machine rather than logging into a controller, an edge, the manager and a host. All of these CLI commands will be run from the NSX manager and these specific distributed firewall commands are replacing the vsipioctl commands that you would typically run on an ESXi host. Below is a list of all of the […]

    Read more »
  • Repointing vCenter 6.0 U1 to a Platform Services Controller (PSC) in a Different Site

      With 6.0 Update 1, a feature that allows repointing of a standalone vCenter server to a external PSC was also released. You might be thinking “But I could already do that, couldn’t I?”   The answer to that is Yes and No.   Yes, a repoint was possible before Update 1. The catch being that the PSC must have been installed in the same SSO site as well as domain. Meaning that if the PSC was not in what is considered an HA deployment without a load balancer, a repoint was not workable. In this article, I will explain […]

    Read more »
  • Shifting Focus to NSX and VMware Integrated OpenStack

      It has been a few months since I have been in the blog game and I am going to step it back up. The reason for my absence over the last few months has been my recent transition within VMware. As many of you know, I was an Escalation Engineer on the Systems Operations team where I supported vCenter Server, ESXi, PSC, SSO, certificates, and anything generally related to the management of a vSphere Environment. In early July I moved over to the NSX and VMware Integrated Openstack team so I could focus on Software Defined Networking and the […]

    Read more »
  • Deploying VMware Integrated OpenStack (VIO)

      VMware has released a relatively new product called VMware Integrated OpenStack (VIO). This product is free for our customers who have Enterprise plus licensing, but actual support for the product is on a per CPU cost basis. Essentially, we have simplified the process for deploying OpenStack into a simple wizard. Although it takes a while to run through all the steps, it’s all done in the background which makes the deployment of this product so much easier for anyone wanting to use it or even just play around with it. VIO is a very powerful cloud product which allows […]

    Read more »
  • VXLAN vib agent installations fails immediately with the error “Agent VIB module not installed”

      I ran into an issue the other day in a new NSX lab deployment I was building out. Whenever I tried to prepare the ESXi hosts for VXLAN the install would immediately fail with no real good error messages; tasks and events displayed “Cannot complete the operation. See the event log for details.” Task: XXX eam.agent.enable.label not found XXX.”After digging a little bit deeper, I was able to find the following error message in my NSX Manager log.     2015-06-28T20:02:58.323-06:00 | ERROR | agent-4 | AuditedJob.java | 75 | JOB FAILED: [#2025773242] EnableDisableAgentJob(AgentImpl(ID:’Agent:7cd8e40b-7892-4755-977f-b847b4d35eae:bb36baa5-dd5d-46cc-b80c-eb38df42ff3c’)), com.vmware.eam.EamException: VibInstallationFailed 2015-06-28T20:02:58.324-06:00 | DEBUG […]

    Read more »
  • Unable to deploy NSX VIBs after updating certificates in vSphere 6.0

    I ran into an issue the other day while helping a customer install the NSX agents on his ESXi hosts. Whenver we tried to deploy the agents to the host, we would get a generic error in the vSphere Web Client. To troubleshoot the issue, we first navigated to Home -> Administration -> vCenter Server Extensions and double clicked vSphere ESX Agent Manager.     By clicking the Manage tab we saw no ESX Agencies / an error similar to:   “Error while creating eam agency for deployment”   In the NSX Manager log you see the following:   show […]

    Read more »
  • 5

    Upgrading from embedded SSO 5.5 to External SSO (PSC) 6.0

      UPDATE: As of vCenter 6.0 Update 1, there are more options available to reconfigure an existing embedded topology to an external setup without the need to reinstall. More information can be found in this post   There has been a lot of discussion surrounding an upgrade from vSphere 5.1 or 5.5 to vSphere 6.0 when you currently have Single Sign-On (SSO) embedded and want to move to an external deployment. I highly recommend, in anyone’s environment that you future proof by setting up vSphere 6 in an external deployment. There are multiple reasons for this, but a few of […]

    Read more »

Back to Top