VMware NSX-T Knowledge Base

1

Top 10 Common Issues

Most critical NSX-T break & fix scenarios

• #1 Transport Node Prep Failure
• #2 T0/T1 Gateway Loss
• #3 Edge Cluster Failover
• #4 DFW Rules Not Applied
• #5 BFD Session Flapping
• #6 Manager Split-Brain
• #7 VTEP Communication
• #8 BGP Peering Failure
• #9 Controller Connectivity
• #10 Upgrade Coordinator

KB #1–10 Open Phase 1 →

2

Day-2 Operations

Certificates, backup, migration & maintenance

• #11 Certificate Rotation
• #12 Backup & Restore
• #13 N-VDS to VDS Migration
• #14 Edge Node Replacement
• #15 Transport Zone Drift
• #16 LDAP/AD Identity Source
• #17 Alarm Correlation
• #18 Syslog Configuration
• #19 MP/CCP Cert Regen
• #20 Manager Decommission

KB #11–20 Open Phase 2 →

3

Distributed Firewall

DFW rules, microsegmentation & security groups

• #21 DFW Hit Count Analysis
• #22 Microsegmentation Design
• #23 Exclusion List Failure
• #24 Rule Publish Failure
• #25 IDFW Issues
• #26 Time-Based Rules
• #27 DFW Performance
• #28 Security Group Stale
• #29 Applied To Scope
• #30 Rule Export/Import

KB #21–30 Open Phase 3 →

4

Routing & BGP

BGP peering, ECMP, route redistribution & NAT

• #31 BGP Route Reflector
• #32 ECMP Asymmetric
• #33 Redistribution Loops
• #34 T0 SR-DR Failure
• #35 Static Route Blackhole
• #36 Prefix List Filtering
• #37 BFD Timer Tuning
• #38 Federation Routing
• #39 NAT Conflict
• #40 Edge Rebalancing

KB #31–40 Open Phase 4 →

5

Edge Services

Load balancer, VPN, DHCP & edge datapath

• #41 LB Health Monitor
• #42 L7 SSL Binding
• #43 IPSec VPN Flapping
• #44 Edge CPU/Memory
• #45 Edge Datapath Failure
• #46 DNS Forwarder Cache
• #47 DHCP Relay Config
• #48 Edge Anti-Affinity
• #49 GFW vs DFW Precedence
• #50 Edge Redeployment

KB #41–50 Open Phase 5 →

6

Segments & Overlays

GENEVE, VTEP pools, segment connectivity & MTU

• #51 Port Blocking Table Full
• #52 GENEVE MTU Issues
• #53 MAC Learning Flood
• #54 Post-Migration Issues
• #55 ARP Suppression
• #56 Cross-vCenter Extension
• #57 VLAN Trunk Config
• #58 Security Profile
• #59 TEP Pool Exhaustion
• #60 Segment Disconnect

KB #51–60 Open Phase 6 →

7

VCF & Federation

Global Manager, stretched segments & VCF lifecycle

• #61 GM/LM Connectivity
• #62 Stretched Segments
• #63 VCF NSX Upgrade
• #64 VCF BOM Compliance
• #65 GM Failover
• #66 Workload Domain Isolation
• #67 Edge Cluster in VCF
• #68 Cert Sync Federation
• #69 Transport Zone Mapping
• #70 Federation Span

KB #61–70 Open Phase 7 →

8

Troubleshooting & CLI

central-cli, packet capture, NSX Intelligence & monitoring

• #71 central-cli Reference
• #72 Packet Capture
• #73 NSX Intelligence
• #74 get logical-switches
• #75 Support Bundle
• #76 Edge Datapath CLI
• #77 API Rate Limiting
• #78 Proactive Health
• #79 Host TN Workflow
• #80 Metrics & Monitoring

KB #71–80 Open Phase 8 →

9

Advanced Security

IDS/IPS, Malware Prevention, NDR, TLS Inspection & Container Networking

• #81 Distributed IDS/IPS
• #82 Malware Prevention
• #83 URL/FQDN Filtering
• #84 Service Insertion & GI
• #85 Network Detection & Response
• #86 TLS Inspection
• #87 Intelligence Advanced
• #88 Guest Introspection
• #89 NSX+ (SaaS)
• #90 Container Networking

KB #81–90 Open Phase 9 →

⚙

Interactive Decision Tree

Step-by-step symptom-based troubleshooting

• Select symptoms to narrow down the root cause
• Covers all 90 KB entries across 9 categories
• Quick-path shortcuts for common scenarios
• Guided navigation with breadcrumb trail

All 90 KBs Open Decision Tree →