Before beginning the upgrade, it is important to test the NSX working state. Otherwise, you will not be able to determine if any post-upgrade issues were caused by the upgrade process or if they preexisted the upgrade process.

Do not assume everything is working before you start to upgrade the NSX infrastructure. Make sure to check it first.


  1. Note the current versions of NSX Manager, vCenter Server, ESXi and NSX Edges.
  2. Identify administrative user IDs and passwords.
  3. Verify you can log into the following components:
    • vCenter Server

    • NSX Manager Web UI

    • Edge services gateway appliances

    • Distributed logical router appliances

    • NSX Controller appliances

  4. Verify that VXLAN segments are functional.

    Make sure to set the packet size correctly and include the don't fragment bit.

    • Ping between two VMs that are on same logical switch but on two different hosts.

      • From a Windows VM: ping -l 1472 –f <dest VM>

      • From a Linux VM: ping -s 1472 –M do <dest VM>

    • Ping between two hosts' VTEP interfaces.

      • ping ++netstack=vxlan -d -s 1572 <dest VTEP IP>


        To get a host's VTEP IP, look up the vmknicPG IP address on the host's Manage > Networking > Virtual Switches page.

  5. Validate North-South connectivity by pinging out from a VM.
  6. Visually inspect the NSX environment to make sure all status indicators are green/normal/deployed.
    • Check Installation > Management.

    • Check Installation > Host Preparation.

    • Check Installation > Logical Network Preparation > VXLAN Transport.

    • Check Logical Switches.

    • Check NSX Edges.

  7. Record BGP and OSPF states on the NSX Edge devices
    • show ip ospf neighbor

    • show ip bgp neighbor

    • show ip route

  8. Verify that syslog is configured.
  9. If possible, in the pre-upgrade environment, create some new components and test their functionality.
    • Create a new logical switch.

    • Create a new edge services gateway and a new distributed logical router.

    • Connect a VM to the new logical switch and test the functionality.

  10. Validate netcpad and vsfwd user-world agent (UWA) connections.
    • On an ESXi host, run esxcli network vswitch dvs vmware vxlan network list --vds-name=<VDS_name> and check the controller connection state.

    • On NSX Manager, run the show tech-support save session command, and search for "5671" to ensure that all hosts are connected to NSX Manager.

  11. (Optional) If you have a test environment, test the upgrade and post-upgrade functionality before upgrading a production environment.