Preparing to Upgrade NSX
Operational Impact of the NSX Installation
The duration for the NSX upgrade process depends on the number of components you have to upgrade in your infrastructure. It is important to understand the operational state of NSX components during an upgrade.
The upgrade process is as follows:
- NSX Edge cluster
- Hosts
- Management plane
You have the flexibility to change the order of upgrade for your edge clusters and hosts. You can alternate between groups of hosts and groups of edge nodes during upgrade. The NSX Manager is upgraded only after all the edges and hosts have been upgraded.
NSX Edge Cluster Upgrade
During Upgrade | After Upgrade |
---|---|
|
|
Hosts Upgrade
During Upgrade | After Upgrade |
---|---|
|
|
Management Plane Upgrade
During Upgrade | After Upgrade |
---|---|
When upgrading from NSX 3.1.x, 3.2, or 3.2.0.1:
|
|
Pre-Upgrade Tasks
- Run the NSX Upgrade Evaluation Tool before you begin the upgrade process. The tool is designed to ensure success by checking the upgrade readiness of your NSX Manager nodes. For more information on the tool, see the VMware knowledge base article at https://kb.vmware.com/s/article/87379.
For upgrade to NSX version 4.0.1.1 and later, the checks performed by the Upgrade Evaluation Tool are run by NSX as part of the upgrade pre-check.
- Ensure that your transport node profiles have the appropriate transport zones added to them. NSX Manager may not display the list of transport node profiles if any of the transport node profiles do not have transport zones added to them.
- Ensure that you backup the NSX Manager before you start the upgrade process. See the NSX Administration Guide.
- Ensure that your host OS is supported for NSX Manager. See Supported Hosts for NSX Managers in the the NSX Administration Guide.
- Disable automatic backups before you start the upgrade process. See the the NSX Administration Guide for more information on configuring backups.
- Terminate any active SSH sessions or local shell scripts that may be running on the NSX Manager or the NSX Edge nodes, before you begin the upgrade process.
- Ensure that the appropriate communication ports are open from the Transport and Edge nodes to the NSX Manager nodes. For more information on ports, see https://ports.esp.vmware.com/home/NSX.
- You need a valid license to use licensed features like T0, T1, Segments, and NSX intelligence. Ensure that you have a valid license.
- Delete all expired user accounts before you begin upgrade. Upgrade for NSX on vSphere fails if your exception list for vSphere lockdown mode includes expired user accounts. For more information on accounts with access privileges in lockdown mode, see Specifying Accounts with Access Privileges in Lockdown Mode in the vSphere Security Guide.
Upgrading Your Host OS
To avoid problems during the host upgrade, your host OS must be supported in NSX.
If the version of your host OS is unsupported, you can manually upgrade the host OS to the supported version. See Supported Upgrade Paths.
Upgrade ESXi Host
- If your ESXi host is unsupported, manually upgrade your ESXi host to the supported version. [Read more]
Verify the Current State of NSX
Before you begin the upgrade process, it is important to test the NSX working state. Otherwise, you cannot determine if the upgrade caused post-upgrade problems of if the problem existed before the upgrade.
Procedure:
- Identify and record the administrative user IDs and passwords.
- Verify that you can log in to the NSX Manager web user interface.
- Check the Dashboard, system overview, host transport nodes, edge transport nodes, NSX Edge cluster, transport nodes, HA status of the edge, and all logical entities to make sure that all the status indicators are green, deployed, and do not show any warnings.
- Validate North-South connectivity by pinging out from a VM.
- Validate that there is an East-West connectivity between any two VMs in your environment.
- Record BGP states on the NSX Edge devices.
- get logical-routers
- vrf <vrf>
- get bgp
- get bgp neighbor
Download the NSX Upgrade Bundle
The upgrade bundle contains all the files to upgrade the NSX infrastructure. Before you begin the upgrade process, you must download the correct upgrade bundle version.
You can also navigate to the upgrade bundle and save the URL. When you upgrade the upgrade coordinator, paste the URL so that the upgrade bundle is uploading from the VMware download portal.
Procedure
-
Locate the NSX build on the VMware download portal.
-
Navigate to the upgrade bundle file and click Read More.
-
Verify that the upgrade bundle filename extension ends with .mub.
-
The upgrade bundle filename has a format similar to VMware-NSX-upgrade-bundle-ReleaseNumberNSXBuildNumber.mub.
-
Download the NSX upgrade bundle to the same system you are using to access the NSX Manager user interface.