Powershell scripts to retrieves a list of security groups along with their members in NSX

[Pesitm]

Hi All,

I'm new to powercli and I was trying to export the list of security groups along with their members in excel file. I am trying to run the below script but its not working. I gave domain as default but it threw below error. Any idea what i'm doing wrong here?

Connect to NSX-T Manager
Connect-NsxtServer -Server "NSX_URL"

# Get all security groups and their members
$securityGroups = Invoke-ListGroupForDomain | ForEach-Object {
$groupName = $_.display_name
$groupMembers = Invoke-GetGroupIPMembers -SecurityGroup $_

[PSCustomObject]@{
GroupName = $groupName
Members = $groupMembers.Member
}
}

# Prepare data for CSV
$csvData = $securityGroups | Select-Object GroupName, Members

# Export to CSV
$csvPath = "C:\NSX\NSXT_SecurityGroups.csv"

 

 

[LucD]

If that first line is a comment, you should proceed it with a #

# Connect to NSX-T Manager

 

[Pesitm]

Hi Lucd,
Sorry, I missed it while copy pasting the script here.

[LucD]

But does that fix your issue?

[Pesitm]

No, it does not.

[LucD]

Can you show us the errors you are now getting?

[Pesitm]

Its the same as the old one.

 

[LucD]

Looks like the connection is not made.
Check by displaying what is in $global:defaultNsxtServers.

Did you do the following before?

 

 

Set-PowerCLIConfiguration  -Scope User -InvalidCertificateAction:Ignore -Confirm:$false

 

 

[Pesitm]

I have checked it by running $global:defaultNsxtServers and it displays my NSX server name.

 

Also, yes i have tried this "Set-PowerCLIConfiguration -Scope User -InvalidCertificateAction:Ignore -Confirm:$false" and it didn't work.

[LucD]

Did you also connect to the VCSA with Connect-VIServer?
You can check by displaying the content of $global:defaultVIServer

[Pesitm]

Yes, and now it shows the vcenter name. like below

Name                                 Port                     User
----                                      ----                       ----

Vcenter.com                    443                       admin

[LucD]

Then I have no clue what is going wrong.

I suggest you open an SR

[Antony Stefanov]

Hello,

I have written a simple PowerShell script that will fetch NSX groups and their VM members and output in a JSON or CSV file.

The scrip wraps NSX API calls to get the groups and VM members.

https://github.com/antonystefanov/repo-public/tree/main/PowerShell/List-NsxGroups

[LucD]

Out of curiosity, where can one find the value "default" for the domain-id in this case?

And does this mean that the Swagger-generated cmdlets like Invoke-ListGroupForDomain do not work?

------------------------------

Blog: lucd.info  Twitter: @LucD22  Co-author PowerCLI Reference

------------------------------

[Antony Stefanov]

So far in my experience never seen different domain-id than "default"

I had issues in the past with swagger-generated cdmlets, so decided to wrap API calls.