After you perform software maintenance in your environment, verify that the configured NSX Edges are intact.

About this task

After you patch, update or upgrade the NSX instances in the SDDC, or after you have restored the NSX instances, verify the configuration of each NSX edge appliances are intact.

Table 1. IP Addresses and NSX edges of the NSX Manager Appliances

Region

NSX Manager Instance

IP Address

NSX Edge Name

Region A

NSX Manager for the management cluster

172.16.11.65

SFOMGMT-ESG01

SFOMGMT-ESG02

NSX Manager for the shared edge and compute cluster

172.16.11.66

SFOCOMP-ESG01

SFOCOMP-ESG02

Region B

NSX Manager for the management cluster

172.17.11.65

LAXMGMT-ESG01

LAXMGMT-ESG02

NSX Manager for the shared edge and compute cluster

172.17.11.66

LAXCOMP-ESG01

LAXCOMP-ESG02

Procedure

  1. Log in to vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://mgmt01vc01.sfo01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      administrator@vsphere.local

      Password

      vsphere_admin_password

  2. Verify that the edge interface settings are intact.
    1. In the Navigator pane, click Networking & Security, and click NSX Edges.
    2. Select 172.16.11.65 from the NSX Manager drop-down menu.
    3. Double-click the SFOMGMT-ESG01 NSX Edge device.
    4. Click the Manage tab, click Settings, and select Interfaces.
    5. Select the Uplink01 interface and click the Edit icon.
    6. Verify that the following interface settings are intact.
      • Region A Configuration

        Setting

        SFOMGMT-ESG01

        SFOMGMT-ESG02

        SFOCOMP-ESG01

        SFOCOMP-ESG02

        Name

        Uplink01

        Uplink01

        Uplink01

        Uplink01

        Type

        Uplink

        Uplink

        Uplink

        Uplink

        Connected To

        vDS-Mgmt-Uplink01

        vDS-Mgmt-Uplink01

        vDS-Comp-Uplink01

        vDS-Comp-Uplink01

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        172.27.11.2

        172.27.11.3

        172.16.35.2

        172.16.35.3

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

      • Region B Configuration

        Setting

        LAXMGMT-ESG01

        LAXMGMT-ESG02

        LAXCOMP-ESG01

        LAXCOMP-ESG02

        Name

        Uplink01

        Uplink01

        Uplink01

        Uplink01

        Type

        Uplink

        Uplink

        Uplink

        Uplink

        Connected To

        vDS-Mgmt-Uplink01

        vDS-Mgmt-Uplink01

        vDS-Comp-Uplink01

        vDS-Comp-Uplink01

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        172.27.14.2

        172.27.14.3

        172.17.35.2

        172.17.35.3

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

    7. Select the Uplink02 interface and click the Edit icon.
    8. Verify that the following interface settings are intact.
      • Region A Configuration

        Setting

        SFOMGMT-ESG01

        SFOMGMT-ESG02

        SFOCOMP-ESG01

        SFOCOMP-ESG02

        Name

        Uplink02

        Uplink02

        Uplink02

        Uplink02

        Type

        Uplink

        Uplink

        Uplink

        Uplink

        Connected To

        vDS-Mgmt-Uplink02

        vDS-Mgmt-Uplink02

        vDS-Comp-Uplink02

        vDS-Comp-Uplink02

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        172.27.12.3

        172.27.12.2

        172.27.13.3

        172.27.13.2

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

      • Region B Configuration

        Setting

        LAXMGMT-ESG01

        LAXMGMT-ESG02

        LAXCOMP-ESG01

        LAXCOMP-ESG02

        Name

        Uplink02

        Uplink02

        Uplink02

        Uplink02

        Type

        Uplink

        Uplink

        Uplink

        Uplink

        Connected To

        vDS-Mgmt-Uplink02

        vDS-Mgmt-Uplink02

        vDS-Comp-Uplink02

        vDS-Comp-Uplink02

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        172.27.15.3

        172.27.15.2

        172.27.21.3

        172.27.21.2

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

    9. Select the UDLR interface and click the Edit icon.
    10. Verify that the following interface settings are intact.
      • Region A Configuration

        Setting

        SFOMGMT-ESG01

        SFOMGMT-ESG02

        SFOCOMP-ESG01

        SFOCOMP-ESG02

        Name

        UDLR

        UDLR

        UDLR

        UDLR

        Type

        Internal

        Internal

        Internal

        Internal

        Connected To

        Universal

        Transit Network

        Universal

        Transit Network

        Universal

        Transit Network

        Universal

        Transit Network

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        192.168.10.1

        192.168.10.2

        192.168.100.1

        192.168.100.2

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

      • Region B Configuration

        Setting

        LAXMGMT-ESG02

        LAXMGMT-ESG02

        LAXCOMP-ESG02

        LAXCOMP-ESG02

        Name

        UDLR

        UDLR

        UDLR

        UDLR

        Type

        Internal

        Internal

        Internal

        Internal

        Connected To

        Universal

        Transit Network

        Universal

        Transit Network

        Universal

        Transit Network

        Universal

        Transit Network

        Connectivity Status

        Connected

        Connected

        Connected

        Connected

        Primary IP Address

        192.168.10.51

        192.168.10.52

        192.168.100.51

        192.168.100.52

        Subnet Prefix Length

        24

        24

        24

        24

        MTU

        9000

        9000

        9000

        9000

        Send ICMP Redirect

        Selected

        Selected

        Selected

        Selected

  3. Verify the firewall settings of the edges.
    1. Click the Manage tab and click Firewall.
    2. Verify that the Firewall is disabled.
  4. Verify the Routing settings of the edges.
    1. Click the Manage tab, click Routing and click Global Configuration.
    2. Verify that the following Global Configuration settings are intact.

      Setting

      Value

      ECMP

      Enabled

      Router ID

      Uplink01

    3. On the Routing tab, click BGP.
    4. Verify that the following BGP Configuration settings are intact.

      Setting

      SFOMGMT-ESG01 and SFOMGMT-ESG02

      SFOCOMP-ESG01 and SFOCOMP-ESG02

      LAXMGMT-ESG01 and LAXMGMT-ESG02

      LAXCOMP-ESG01 and LAXCOMP-ESG02

      Status

      Enabled

      Enabled

      Enabled

      Enabled

      Local AS

      65003

      65000

      65003

      65000

      Graceful Restart

      Enabled

      Enabled

      Enabled

      Enabled

    5. Verify that the following Neighbors settings are intact.

      NSX Edge Device

      Setting

      First Top of Rack Switch Value

      Second Top of RackSwitch Value

      UDLR Value

      SFOMGMT-ESG01 SFOMGMT-ESG02

      IP Address

      172.27.11.1

      172.27.12.1

      192.168.10.4

      Remote AS

      65001

      65001

      65003

      Weight

      60

      60

      60

      Keep Alive Time

      4

      4

      1

      Hold Down Time

      12

      12

      3

      SFOCOMP-ESG01SFOCOMP-ESG02

      IP Address

      172.16.35.1

      172.27.13.1

      192.168.100.4

      Remote AS

      65001

      65001

      65000

      Weight

      60

      60

      60

      Keep Alive Time

      4

      4

      1

      Hold Down Time

      12

      12

      3

      LAXMGMT-ESG01LAXMGMT-ESG02

      IP Address

      172.27.14.1

      172.27.15.1

      192.168.10.4

      Remote AS

      65002

      65002

      65003

      Weight

      60

      60

      60

      Keep Alive Time

      4

      4

      1

      Hold Down Time

      12

      12

      3

      LAXCOMP-ESG01LAXCOMP-ESG02

      IP Address

      172.17.35.1

      172.27.21.1

      192.168.100.4

      Remote AS

      65002

      65002

      65000

      Weight

      60

      60

      60

      Keep Alive Time

      4

      4

      1

      Hold Down Time

      12

      12

      3

    6. On the Routing tab, click Route Redistribution.
    7. Verify that the following Route Redistribution Status settings are intact.

      Setting

      Value

      OSPF

      Deselected

      BGP

      Selected

    8. Verify that the following Route Redistribution table settings are intact.

      Setting

      Value

      Prefix

      Any

      Learner Protocol

      BGP

      OSPF

      Deselected

      ISIS

      Deselected

      Connected

      Selected

      Action

      Permit

  5. Repeat this verification procedure for the remaining NSX Edge devices.

What to do next

Verify that the NSX Edge devices are successfully peering, and that BGP routing has been established by following the instructions in Verify Peering of Upstream Switches and Establishment of BGP in Region A from VMware Validated Design Deployment Guide for Region A. Perform verification for the following pairs of NSX Edge devices.

  1. SFOMGMT-ESG01 and SFOMGMT-ESG02

  2. SFOCOMP-ESG01 and SFOCOMP-ESG02

  3. LAXMGMT-ESG01 and LAXMGMT-ESG02

  4. LAXCOMP-ESG01 and LAXCOMP-ESG02