VMware NSX

  • 1.  Address not visible on Linux Guest VM

    Posted Oct 05, 2017 11:54 PM

    When I find most of my VM's in vcenter - I am not seeing it's IP address. And in NSX I can not find it if

    I search for IP address. It became an issue because I used the VM's NIC as source and destination

    for NSX firewall rules and they failed. When I created an IP Set with the IP address of the VM the

    rules worked. Any known issue for Linux guest VM's and their displaying IP address in Summary?

    See screen shot below.



  • 2.  RE: Address not visible on Linux Guest VM

    Broadcom Employee
    Posted Oct 06, 2017 07:25 PM

    You'll just need to install VMware Tools in order to have visibility into the IP address of the guest OS in vCenter.



  • 3.  RE: Address not visible on Linux Guest VM

    Posted Oct 07, 2017 07:29 AM

    Please look into this KB article why you need vmware tools and how to install it.

    Installing VMware Tools in a Linux virtual machine using a Compiler (1018414) | VMware KB



  • 4.  RE: Address not visible on Linux Guest VM

    Posted Oct 09, 2017 07:59 PM

    If we refer to this document: IP Discovery for Virtual Machines

    Behind the scenes, DFW requires associating VM and its vNIC with IP address.

    So DFW need to find a way how to get the IP address of the VM/vNIC.

    By default, this is through VMware Tools and from your screenshot you don't have it installed on the VM; that's why your DFW rules using object doesn't work.

    IP Sets works because NSX know the IP address.

    Installing VMware Tools is a best practice not just for NSX.

    Newer Linux uses open vm tools and if you need to use open vm tools, you would want to use NSX 6.3.2

    VMware NSX for vSphere 6.3.2 Release Notes​

    Starting in NSX 6.3.2, Open VM Tools is supported with Distributed Firewall.

    Prior 6.3.2, Open VM Tools are not supported and may not work in some scenario and the workaround is to use other method for IP Detection such as ARP/DHCP Snooping.

    Refer to this document on how to change IP Detection: Change IP Detection Type