6.2 NSX to vCenter 6.0 u1 recording

Hello

I was playing with NSX 6.2 in my lab and noticed a strange behavior when you try to save my NSX to vCenter Server 6.0 6.2 Manager u1 with external CFP.

Usually, I try to connect all the services with their respective accounts. So I used rather than use [email protected] to register for vCenter and PSC, precree user [email protected] who was part of the administrator group and therefore had full access to the system.

So, the NSX in vCenter connection has been a success, but as I logged in vSphere Web Client like [email protected], I was unable to see the NSX Manager newly registered under the section network & Web Client Security. Workaround for this situation was:

  1. Re-register NSX Manager vCenter with [email protected] account
  2. Connect to the Web Client with [email protected] account, proceed to the section networking and security and make sure that the NSX Manager is visible
  3. Re-save Manager of NSX to vCenter with [email protected] account

So my questions (or invitations to discussion) are:

  1. Someone at - it light of the behavior like this? What is the cause of this problem?
  2. Which user whose rights you use to record NSX to vCenter? Installation guide explains recommended is to use [email protected], but I just don't feel like it. What happens if someone changes [email protected] password, for example?

Hi, just to update the audit of official documents (6.2 NSX VMware vSphere Documentation Center), after the registration of the NSX, you access with the same user, which is used in the registration process.

Doc:

--------------

Mandatory if vCenter Web Client is already open, disconnect from vCenter and connect again the same role administrator used to record the NSX Manager with vCenter. If you do not, vCenter Web Client will not display the icon of network & security under the Home tab click the icon network & security and confirm that you can see the newly deployed NSX Manager.

Tags: VMware

Similar Questions

  • Can not see my server vCenter SSO is even recorded

    Hello

    yesterday I upgraded vCenter 5.0 to vCenter 5.1.0a. I did everything what (I think!) as it was written in vsphere-esxi-vcenter-server-51-upgrade-guide.pdf. But when I connected to the web client (https://vcenter:9443 / vsphere client) I do not see my server vcenter. So I connected to localhost:9443 to register my vCenter and I see that it is registered. So, what is the problem, why I do not see in the web client?

    vcenter01.png

    vcenter02.png

    Best regards

    p.

    Connection to vCenter using the vSphere Client.

    Right click to the next level and add permissions > Add in the Domain Admins or whatever AD group you use vCenter.

    Then connect to the Web Client using domain\username and you should see vCenter.

  • vCenter 6 with NSX

    Hello

    I test a laboratory using ESXi and vCenter 6 and 6.11 NSX.

    When, after I recording NSX manager vCenter, the icon of "Networks and security" haven't are introduced. 6.11 does is not compatible with Vshphere 6 or I did something wrong?

    Indeed, you need minimum 6.1.3 with vCenter 6.0.

  • NSX website screen

    HelloW VMware,

    I get a NSX screen below.

    NSX.PNG

    But I'm looking for something like this. Why do I get different NSX screen

    Picture1.png

    Please help me to get over the top of the screen

    Kind regards

    HS

    Please see the article here: http://wahlnetwork.com/2014/04/28/working-nsx-deploying-nsx-manager

    It guides you through recording NSX with vCenter and access the implementation of network & security plug-ins via the web client of vSphere

  • 6.1.4 NSX upgrade to 6.2.0: DLR fails to upgrade with DHCP relay message

    Hey all, in the middle of an upgrade of non-prod to a greenfield 6.1.4 6.2. Did the Manager NSX, and follow-up of all controllers. Then after the VMware recommended upgrade sequence, I did the GSS. Then began the DLR. When you try to upgrade the DLR, I received an error message

    The "Upgrade Version" operation failed for the entity with the following error message.

    [DHCP] To enable DHCP Relay, DR instance must be created with a single connected LIF.

    NSX-Training2015-09-07 13_06_51.jpg

    Also, the router now displays status in the NSX edges pane: "failed to create/update edgeAssist interface for edge edge-3.» 404 not found. »

    NSX-Training2015-09-07 15_03_09.jpg

    So I tried erase the configuration of DHCP on the DLR with the button relay remove, no dice. Tried to redeploy, fail with the same message. Tried to force synchronization, changes in status to "impossible to force synchronization. NSX Edge edge-3 is in poor condition. Try the operation again. The DHCP configuration disappears, but the change seems never commit, because when I browse the bracing or routing section and browse to the DHCP relay page, the original configuration is still there. It is a simple DLR with no configured HA. I have attached the newspapers of DLR tech support in case there is any support curious people out there. Note, vCenter 6.0.0 2741530, ESXi 5.5 Patch 5 reissue 2718055.

    He was just going to remove the DLR and re-create it since it's a lab, but if it wasn't a lab I just want to know why it's a failure.

    After reading more carefully, I apparently missed a step in the upgrade (hosts). I suggest that whoever does the upgrade follows the upgrade guide in pubs located here: 6.2 NSX VMware vSphere Documentation Center

    • Manager of NSX upgrade to 6.2
    • Upgrade of the Cluster controller NSX to 6.2, check the status of cluster control
    • Upgrade the cluster hosts for NSX 6.2
    • 6.2 the NSX border upgrade
    • Guest Introspection to NSX 6.2 update
    • Remove the NSX data security and redeploy

    So I tried a lot of things to work myself back from that. I tried to upgrade the hosts but that didn't fly, esx-vxlan has been blocked to version 5.5.0 - 0.0.2691051. To return to a viable State in the end I had to nuke basically the GSS, logical switches, DLR, TZ, manually uninstall the NSX vibs and unsubscribe manager the NSX to vCenter in the cluster take-off of the State of "uninstall." From there, re - install the 5.5.0 - esx-vxlan 0.0.2983935 (6.2) vibs on the cluster worked OK, and I rebuilt the gateway routing and dashboard. So read before making anywhere near prod. : )

  • Service component of VMware Manager fails to start in vCenter Server 6 Update 2

    Hello

    A brief idea of my test environment:

    VCenter servers:

    VC1 - recorded at the psc1 in Site1

    VC2 - recorded at psc2 in Site2

    External Services platform controllers:

    psc1 - Site1

    PSC2 - Site2

    SSO domain: vsphere.local

    I upgraded from vCenter Server 5.5 update 3d to vCenter Server 6.0 Update 2. VCenter 5.5 servers had integrated / embedded of SSO and all services running on the same machine and were in modes related before the upgrade and I have them removed modes related before the upgrade. They have been upgraded to vCenter Server 6.0 with Embedded PSC and they entered automatically improved Linked Mode (ELM).

    After the previous step, I deployed the PSC external psc1 respectively 2 and psc2 mode of replication with vc1 and vc2 in the same site Site1 and Site2. I migrated then boarded two PSC vCenter servers to their respective partners external PSC of replication by running the command cmsso-util reconfigure - repoint-PSC "psc1/psc2" - administrator user name - domain name "vsphere.local" - passwd "Hasło_Administratora." This operation ended successfully and my vCenter have been reconfigured as vCenter Server with external CFP.

    After that, I followed article KB VMware 2127057 (agreements ofdetermination of replication and the State with the service controller 6.0 platform (2127057) |) The VMware KB) do psc1 and psc2 external replication of the PSC 2 partners either by running the command vdcrepadmin-f createagreement-2--h psc2.clifford.local h psc1.clifford.local u Administrator w 'Hasło_Administratora '. I ran this command psc2. Also, this operation succeeded, and when I ask the State of replication of the psc1 of replication partners and psc2, there is nothing wrong. However, after restarting my vSphere Infrastructure, I see that vc1, psc1 and psc2 have all their services started successfully.

    VC2 services seem to be failing, especially the service component manager of VMware which is required for many other services start. The VMware HTTP Reverse Proxy service starts properly and I have no IIS role / feature installed on my machine. The error message that occurs when you try to manually start the service is also attached as a file Error2.JPG in the discussion. The Windows event log error is as deeply as the file Error3.JPG in the discussion.

    Please let me know how to solve this problem as soon as possible.

    Well, I found a solution myself.

    In fact, after I created the external PSC 2 psc1 and psc2 partners of replication of the vc1 and vc2 in Site1 and Site2 respectively, I had to immediately follow section KB VMware 2127057 in order to create a replication agreement between the 2 external to the PSC psc1 and before psc2 I reconfigured and show the vCenter servers vc1 and vc2 of on-Board of the PSC outside the PSC following the VMware Documentation (Center of) VSphere documentation 6.0).

    That's all.

    Thanks to all for looking into it.

  • vCenter Server Converter NfcConnectionFault error

    Hello everyone,

    I'm trying to migrate virtual machines to a stand-alone ESXi Server to a new vSphere with vCenter Converter Server Cluster, but all work ends with this error:

    Import machine

    Unknown error returned by vCenter Converter Agent

    Records the details:

    2010-03-17 15:35:26.397 "App" 3908 info VmiImportTask::task step "to create and clone VM" destroyed 2010-03-17 15:35:26.397 "App" 3908 info VmiImportTask::task step 'Clone VM' destroyed

    15:35:26.397 2010-03-17 error 3908 "App" VmiImportTask::task: task of Image processing failed with MethodFault::Exception: sysimage.fault.NfcConnectionFault 2010-03-17 15:35:26.397 "App" 3908 talkative VmiImportTask::task: SetState error

    2010-03-17 15:35:26.397 "App" 3908 talker task VmiImportTask::task remote finished

    Warning of 1596-2010 - 03 - 17 'Local' 15:35:26.397 default resource used to "NfcConnectionFault.summary" planned for the module 'fault '.

    2010-03-17 15:35:26.506 'P2V' mistake of 3896 Task failed: P2VError UNKNOWN_METHOD_FAULT (sysimage.fault.NfcConnectionFault)

    Attached is the complete log.

    Any idea which could help me solve this problem?

    Best regards

    ACR

    Take a look at this, it may be useful

    http://KB.VMware.com/kb/1004615

  • Changing servers vCenter

    Hello

    I have a vCenter Server 4.0 U1 with a bit of Connection Manager servers connected to it. I need to change the server vCenter for an another 4.0 U1. I can simply change the vCenter server info in the connection without interupting Manager any of my stocks of VDI?

    Thanks for the help

    Aaron

    We had a particularly bad experience with view after a vCenter server change, so I may be too paranoid, but I highly recommend opening a pension with VMware case before making the change.  I believe that the VMs system (ESX host also) are saved with vCenter and that the 'recording' information is the database of the view, it is essential that this information is not changed in vCenter.  If it is changed, the pointers of the database of the view will not be up-to-date and you will have big problems.  I think that as long as you point your new instance of vCenter to your existing database of vCenter, everything will be fine, but I just would make sure with support before doing so.  Good luck.

  • locale ID / local question of evacuation

    Dear team

    Referring to https://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx-cross-vcenter-install.doc%2FGUID-98B1347A-2961-4E2A-B6AC-2C38FD19D127.html

    I asked the question before a while back - so I try to clarify the essential again.

    ID of locale and local evacuation IIRC of sense in a multi-site/multi-vc configuration where the workload can move between several locations, insofar as that they are connected to universal ls.

    What I'm not 100% grasp here is whether or not we must take into account the attention of site prefix "affinity"-i.e. If I move the workload on the same subnet from left to right and vice versa, I can only think of one almost 32 style host routing underlying features of locale id. "» Even if it would work from a route point of view ESG (border router) controller - how you would ensure that the physical router to the North include the fact that we sometimes different indicators for the same subnet or host route?

    To regular routing, we could say "who cares"-, but if your ESG is configured for FW'ing - this cannot be ignored of course.

    Can you help me here?

    Kind regards

    Rik

    Hello

    I was thinking of scenarios like this, talk to the guy of our network and come only with operational "pin" subnet owners site.

    If you set up rules of the DRS (when stretched cluster) and/or write some operational procedures of your employees (maybe even automate the VM available to reduce the probability of human error).

    For example, you have 192.168.aaa.0/24 subnet (NAV 5aaa) and 192.168.bbb.0/24 (5bbb NAV) and decide that the VMs, connected to the NAV 5aaa, should work in site A and VMs, connected to NAV - site b. 5bbb.

    Then you have to announce these networks in the outside world following way (using OSPF or BGP or whatever):

    • the way favorite to 192.168.aaa.0/24 via the site a router to border, route non-preferred is through site b.
    • preferential routes to 192.168.bbb.0/24 via the edge site B, route router no favorite is via site A

    This way you have routing resiliency against site failure, but if your operational "pin" is somehow broken (for example, VM, connected to the NAV 5aaa found in site B), you have asymmetric traffic that most likely will be dropped by your GSE (because they are firewalls).

    I guess, there is simply no solution "simple and clean" for that, you have to compromise somehow (perhaps leave firewall level DFW only, while traffic can be as asymmetric, as it happens).

    Maybe you should ask you first of all, what is more important in this scenario: locality of traffic, ability to move VMs between sites or something else.

    Another possibility is described in this great blog post http://www.routetocloud.com/2016/02/nsx-dual-activeactive-datacenters-bcdr. Look in the section "active data center with GSE mirrored." But there is no local traffic in this solution.

    And something about the local infiltration I have stumpled to another great post a while ago: ://networkinferno.net/ingress-optimisation-with-nsx-for-vsphere http://https it's not supported of course, but I hope that we will see a feature like this in no time.

  • vRA upgrade sequence

    Hello

    I plan for the upgrade of vRA 6.2.1 of the vCAC 6.0.1. I understand there is no way to upgrade directly but to vRA first then vRA 6.1 6.1 will be promoted to the vRA 6.2.1. I read the following article http://kb.vmware.com/selfservice/search.do?cmd=displayKC & docType = kc & docTypeID = DT_KB_1_1 & externalId = 2109760 which has sequence support for vmware for its products, which says: -.

    1.) vRA would be improved first of all then followed VCD of vCenter and vRO

    However, I read an article not vmware on which the author has followed the following sequence: -.

    Upgrade vShield Manager latest version

    1. Installation/update or configure vCenter Orchestrator to latest version
    2. Install the plugin NSX for vCenter Orchestrator (such as his need for POSSIBLE)
    3. Optional: vCenter Server Appliance upgrade to the latest version
    4. Optional: upgrade on ESXi hosts
    5. VCAC coffee device to 6.1 upgrade
    6. Upgrade the Database vCAC to 6.1 using the dbupgrade script
    7. Upgrade the IAAS vCAC to 6.1 Server

    What is the best way to do this, please suggest.

    Hello

    I personally used the method of VMware and it worked perfectly fine for me. Just take your machines backups before the upgrade just in case something goes wrong (not that it did in mine)

    Gregg

  • Unregistering removed a unit of replication of disks instead of destination

    We reinstall our vCenter and will be re-registering/move our unit of replication. We have extremely large drives to our Dr site that we cannot allow to be planted again. Opt-out of the former vCenter unit will cause these discs to remove? I am also told that replication is of ESXi to ESXi host. So if remove us the replication device will always continue? Just trying to figure the best way to re - install replication without causing these disks of destination should be deleted.

    Hello

    VR device is related to the installation of vCenter server and maintains the object identifiers internal managed vCenter VMS and hosts and data warehouses.

    VR device cannot meet another server vCenter Server with id values different managed object.

    Withdrawal of the army with the VR of the vCenter Server inventory unit, even with again add it back, will make it useless.

    Remove a source VM (or its host) to vCenter inventory had RV removed all knowledge on this virtual machine and this includes the removal of the disc replica of the remote site (except when you set up replication, the existing disks were used as initial copies).

    In your case you can do:

    1. perform failover for all virtual machines that are replicated, without turning off the original source of VMs and without turning on/off the Unregister VMs. recovered the VMs recovered inventory of vCenter target, while keeping records on data warehouses.

    2 do whatever management is necessary on the vCenter (s) and presenters.

    3. If DB vCenter is a novelty - deploy the new device of VR.

    4 configure replication from scratch and direct them to use existing records in the target as the initial seed for replication data warehouses. This will still show as initial full-synchronization in the UI, however, checksum is performed and only the different disk blocks are exchanged.

    Kind regards

    Martin

  • Shared IP addresses

    I've deployed the OpsMgr VAPP and everything works, but somehow, the ip addresses of 2 virtual machines are swapped, then the link in vCenter takes me to the ip address of the virtual analytical machine and not the UI VM is it possible to replace the link in vCenter, or y at - it an easy way to share ip addresses on 2 virtual machines now that everything is already set up?

    I suggest updating your CV Ops record to vCenter. "Update" the recording of the/admin UI... This will update the extension in vCenter and will link on the good IP via the Web Client and the client.

  • With vSphere 5.5 replication disaster recovery test

    I have a few virtual machines in our site of DR using a 24-hour RPO.  We will test by recovering virtual machines remotely, without affecting the production of virtual machines on our local site by selecting the option 'recover with the latest available data.  My question is after the replication can I 'pause' instead of 'stop' the task of replication during this test, so that after our test, I can resume the replication tasks?  This would cause a problem?  I don't want something to happen to the production of virtual machines on the side of the source.

    Hello

    Currently Failover Test + Test cleanup function, without having to make a break or stop replication only works in VR, if using MRS. above it.

    RV without SRM, after failover, the only possible option is to stop replication. Perform the failover consolidates replica records in the target data warehouses and prepares the virtual machine configuration files.

    Yet after the replication is stopped, you can:

    -power off the virtual machine on the recovery after done with the test site

    -Remove the vCenter site recovery, leaving records in the target VM data stores

    -set up replication again and that it points to the existing disks in the warehouses of data target

    Although the UI will display 'Initial full sync', really VR calculates checksums and only changed disk blocks are transferred from the protected site.

    Kind regards

    Martin

  • Static DNS records; Bad, good ugly.

    Hello

    always when I want to add the new ESXi5 host to vCenter I creat static record on DNS, after this host to join in DC and then add the host to vCenter.

    is it possible to join my poor host to vCenter without creating records staics on DNS manually? He can see that when joining ESXi host DC or a way to create the dynamic DNS record?

    Unfortunately the-host, these must be manually created in all cases. Take a look at Re: ESXi 5 in AD / DNS configuration where Troy describes the reason for this.

    André

  • Problem with Vmware Ha cluster

    Good dekdak all

    I have a problem with vsphere 4.

    Today, I have to change the ip of the host 3 addreeses and a virtual Center.

    I do these things with your help like that, connect on VC disconnect all hosts and remove.

    Vcenter stopover services change beginning vcenter intellectual property services.

    Change the Ip addresses of the hosts, but now I get this error when I try to connect to the host to vcenter.

    Unable to connect ha agent on this host,.

    Please help me because Icannot create the cluster now, I don't know why

    Hi Patrizio,.

    Make sure your vCenter and all ESXs records are updated in your DNS infrastructure (or files hosts...).

    Good luck.

    Concerning

    Franck

Maybe you are looking for