Vmware NSX Plugin Out of Sync with NSX-T Manager
1052
Created On 12/13/23 15:05 PM - Last Modified 05/22/24 20:12 PM
Symptom
- The VMware NSX plugin is Out of Sync with the NSX-T Manager:
> show plugins vmware_nsx nsx_t status
NSXT Manager: NSX-T-Service-Manager
State: Registered
Out of Sync Info: None
Service Definition: <Service-Definition>
State: Out of Sync
Service Definition Out of Sync Info:
Failed to get service profiles from NSXT. Unable to compare service profiles for service definition:<Service-Definition>
- Set the vmware_nsx logging on High:
> request plugins debug plugin-name vmware_nsx level high
- Attempting "Synchronize Dynamic Objects" and "NSX-T Config-Sync" under "Panorama >VMware > NSX-T > Service Managers", The below error message is seen in the "plugin_vmware_vnsx.log".
52:49.451 +0000 ERROR: [NSXT-CONFIG-SYNC] [NSXT-MGR: NSX-T-Service-Manager] Failed to delete stale service reference:<Service-Profile> ret:400 resp:{'httpStatus': 'BAD_REQUEST', 'error_code': 500030, 'module_name': 'Policy', 'error_message': 'The object path=[/infra/service-references/<Service-Profile>] cannot be deleted as either it has children or it is being referenced by other objects path=[/infra/service-references/<Service-Profile>/service-profiles/b75d2d4d-7942-4ab9-97de-c09f2e1ccf60]'}
Environment
- Panorama with VMware NSX Plugin
- NSX-T East-West Operation Centric Deployment
- Dynamic Address and Address Group sync use-case
Cause
Sync can fail for multiple reasons. As an example, such issues can arise when the NSX Manager Objects ID changes.
Resolution
- The "<Service-Profile>" mentioned in the log as a stale entry needs to be removed on the NSX-T Manager. In this case it is under "Security > Network Introspection > Service Profiles".
- After this Service Profile is deleted, it should auto-populate from the Panorama side, corresponding to the Zones created with vwire on the corresponding Template.
Additional Information
Note that the Service Profile needs to be linked to the corresponding "Service Chain" under "Security > Network Introspection > Service Chains".