Upgrading VMware NSX-T 2.4.0 to NSX-T 2.5.0 Step by Step Guide

Posted by

Recently, VMware released NSX-T 2.5 with a lot of new features and improvements I know everyone is wanting.  I know being one of those people I had to upgrade NSX-T from 2.4.0 in my production environment to 2.5.  This is my walk through of upgrading from 2.4.0 to 2.5.0.  I must admit the upgrade assistant on NSX is really sweet and made the entire upgrade process smooth and flawless.  Not  a lot to say so let’s get right into the upgrade how to.

Pre-Reqs:

  • Minimum 6.5 build is 13004031 which is ESXi 6.5 Express Patch 13        
  • Minimum vCenter Appliance 6.5 U2d
  • vCenter 6.7 U3 Appliance supported but need existing NSX-T environment at 2.4.2

During Upgrade

  • During the NSX Edge upgrade, you might experience the following traffic interruption:
  • North-south datapath is affected if the NSX Edge is part of the datapath.
  • East-west traffic between tier-1 routers using NSX Edge firewall, NAT, or load balancing.
  • Temporary Layer 2 and Layer 3 interruption.
  • Configuration changes are not blocked on NSX Manager but might be delayed.

Limitations on In-Place Upgrade

For NSX-T Data Center, in-place upgrade of a host is not supported in the following scenarios:

  • More than one N-VDS switch is configured on the host.
  • More than 100 vNICs are configured on the host N-VDS switch.
  • ENS is configured on the host N-VDS switch.
  • CPU use for the hostd, nsxa, or the config-agent service is high.
  • vSAN(with LACP) is configured on the host N-VDS switch.
  • VMkernel interface is configured on the overlay network.

Adhere to the following upgrade paths for each NSX-T Data Center release version.

  • NSX-T Data Center 2.3 > NSX-T Data Center 2.5.
  • NSX-T Data Center 2.4 > NSX-T Data Center 2.5.

Additional Pre-Checks:

1 Identify and record the administrative user IDs and passwords.
2 Verify that you can log in to the NSX Manager web user interface.
3 Check the Dashboard, system overview, host transport nodes, edge transport nodes, NSX Edge cluster, transport nodes, HA status of the edge, and all logical entities to make sure that all the status indicators are green, deployed, and do not show any warnings.
4 Validate North-South connectivity by pinging out from a VM.
5 Validate that there is an East-West connectivity between any two VMs in your environment.
6 Record BGP states on the NSX Edge devices.
#get logical-routers
#vrf SR
#get bgp
#get bgp neighbor

Let the upgrade begin:

Machine generated alternative text:
Status 
W' rate

Go to System > Upgrade

Machine generated alternative text:

Select Upload MUB file and browse to wherever you stored the Vmware-NSX-upgrade-bundle-2.5.0.0.0.14663074.mub

Machine generated alternative text:
1. Bundle And Status 
Upload upgrade Bundle 
O Upload MUB file 
Upgrade bundle (.mub)• 
UPLOAD 
O Upload from remote location 
Uploaded upgrade 
bundle: 
BEGIN UPGRADE 
BROWSE... 
O Upgrade Bundle retrleved successfully

Begin Upgrade

Machine generated alternative text:
Begin Upgrade 
(2) 
This action will upgrade the Upgrade Coordinator component on the 
management node. Do you want to begin system upgrade now? 
CANCEL 
CONTINUE

Continue

Machine generated alternative text:

This part takes several minutes

Machine generated alternative text:
1. Bundle and Status 
upgrade Summary 
2. Edges 
Show upgrade History 
3. Hosts 
4. Management Nodes 
Upgrade Coordinator Version: 
2-5.0.0_0.14663978 
— RUN PRE CHECKS EXPORT PRE CHECKS CSV 
Edges 
Upgrade Not Started 
Hosts 
Upgrade Not Started 
Management Nodes 
Upgrade Not Started 
Target Version: 
From Version: 
Pre Check Status: 
2.5-0.0.0.14663982 
2.4.0.0012454265 (2) 
No checks performed 
Target Version: 
From Version: 
Pre Check Status: 
Target Version: 
From Version: 
Pre Check Status: 
2.5-0.0.0.14663978 
2.4.0.0012456291 (3) 
No checks performed 
2.5-0.0.0.14663975 
2.4.0.0012454259 (3) 
No checks performed 
Upload upgrade Bundle 
O Upload MUB file 
O Upload from remote location 
Enter URL • 
UPLOAD

Run pre-checks

Machine generated alternative text:
1. Bundle and Status 
Plan 
c019.._9d1a 
2. Edges 
3. Hosts 
O Parallel 
4. Management Nodes 
Progress 
Status 
Details 
state 
• Enabled 
A Not started 
Upgrade status 
Not Started 
START 
Progress 
RESET 
O Serial 
Upgrade order across groups 
Pause upgrade condition 
Edge Groups 
— RUN POST CHECKS 
Group Name 
When an upgrade unit tails to upgrade 
Cl After each group completes 
By default. upgrade WII pause after all groups are completed. 
ACTIONS 
Unlts 
2 
Upgrade Order wlthln Group 
Serial 
BACK 
Post Check status 
No checks performed 
edgegroup-NPRD-NSXEDGE-Cluster 
NEXT 
I -I of I Group Name 
BACK 
NEXT 
COLUMNS Z' REFRESH Last Updated: a few seconds ago 
Do not power-ort or reboot tne noces wnen upgrade Is In progress. Tney may De reoootea automatically as part or tne upgrade process.

Must upgrade in order from left to right
Each tab must finish upgrading before you can upgrade the next set of components
Start

Machine generated alternative text:
Progress 
Status 
Details 
In Progress 
11 PAUSE

Monitor progress – FYI you can click MORE INFORMATION in blue to see the logs and monitor the upgrade step by step

Machine generated alternative text:
1. Bundle and Status 
Plan 
c019...9d1a 
2. Edges 
3. Hosts 
Parallel 
4. Management Nodes 
Progress 
Status 
Details 
@ successful 
100% 
O Serial 
Upgrade order across groups 
Pause upgrade condition 
Edge Groups 
RUN POST CHECKS 
Group Name 
When an upgrade unit tails to upgrade 
After each group completes 
ay default. upgrade WII' pause after all groups are completed. 
ACTIONS 
MORE INFORMATION... 
Units 
2 
Upgrade Order wlthln Group 
Serial 
state 
• Enabled 
Progress 
100% 
Post Check status 
No checks performed 
Upgrade status 
• Successful 
edgegroup-NPRD-NSXEDGE-Cluster

Once done click Run Post Checks and then move on to hosts

Machine generated alternative text:
1. Bundle and Status 
Plan 
2. Edges 
3. Hosts 
Parallel 
4. Management Nodes 
Progress 
Status 
Details 
In Progress 
11 PAUSE 
O Serial 
state 
• Enabled 
Upgrade order across groups 
Pause upgrade condition 
Enterlng the malntenance mode. 
Upgrade status 
In Progress 
When an upgrade unit tails to upgrade 
After each group completes 
ay default. upgrade WII' pause after all groups are completed. 
Host Groups 
+ ADD O EDIT 
Group Name 
Group for NSXT 
MORE INFORMATION... 
Upgrade Mode 
Maintenance 
— RUN POST CHECKS 
Units 
e8c6...2 
ACTIONS 
Upgrade Order wlthln 
Serial 
to make cnanges to plan settings ana groups 
Post Check status 
No checks performed 
Progress 
U DELETE

Start
Puts each host in maintenance mode one at a time and upgrades bits
Click more information to view logs

Machine generated alternative text:
1. Bundle and Status 
Plan 
2. Edges 
3. Hosts 
Parallel 
4. Management Nodes 
Progress 
Status 
Details 
@ successful 
O Serial 
state 
• Enabled 
100% 
Upgrade status 
• Successful 
Progress 
100% 
Post Check status 
No checks performed 
Upgrade order across groups 
Pause upgrade condition 
When an upgrade unit tails to upgrade 
(2 After each group completes 
By default. upgrade vvlll pause after all groups are completed. 
Host Groups 
+ ADD O EDIT 
Group Name 
Group for NSXT 
MORE INFORMATION... 
Upgrade Mode 
Maintenance 
RUN POST CHECKS 
Units 
e8c6...2- 
ACTIONS 
Upgrade Order wlthln 
Serial 
U DELETE

When done click on Run Post Checks before moving onto Management Nodes

Machine generated alternative text:
e66e...bb88 
6993...ee2c 
Bundle and Status 
2. Edges 
3. Hosts 
4. Management Nodes 
IP Address 
10.24.53.52 
10.24.53.53 
10.24.53.51 
b4ef.. 
START 
.975e 
Upgrade status 
Not Started 
Not Started 
Not Started 
Progress 
Progress 
Status 
Details 
A Not started 
Management Nodes 
Upgrade Unit 
NSX-MGR-02 
DAL-NSXMGR-03 
DAL-NSXMGR-OI

Start to begin last stage of the upgrade

Machine generated alternative text:
Upgrade Status 
Management node upgrade status could not be fetched. This may be because 
the Management node is rebooting as part of the upgrade. Please wait for a few 
minutes and reload the browser. 
RELOAD

Eventually upgrade status message will appear
Wait 5 minutes then reload the page
Can ping the VIP to see when final manager is back online

Machine generated alternative text:
VMware@ NSX-TTM 
sername 
Re s sword 
LOG IN

Log in as admin

Machine generated alternative text:
Bundle and Status 
2. Edges 
3. Hosts 
e66e...bb88 
6993...ee2c 
4. Management Nodes 
IP Address 
10.24.53.52 
10.24.53.53 
10.24.53.51 
b4ef.. 
.975e 
Upgrade status 
In Progress 
In Progress 
In Progress 
Progress 
Progress 
Status 
Details 
In Progress 
MP upgrade In progress. 
MORE INFORMATION... 
Management Nodes 
Upgrade Unit 
NSX-MGR-02 
DAL-NSXMGR-03 
DAL-NSXMGR-OI

Finishing monitoring upgrade

Machine generated alternative text:
Bundle and Status 
3. Hosts 
e66e...bb88 
6993...ee2c 
4. Management Nodes 
IP Address 
10.24.53.52 
10.24.53.53 
10.24.53.51 
2. Edges 
100% 
b4ef.. 
.975e 
Upgrade status 
• Successful 
• Successful 
• Successful 
Progress 
100% 
100% 
100% 
Progress 
Status 
Details 
@ successful 
MORE INFORMATION... 
Management Nodes 
Upgrade Unit 
NSX-MGR-02 
DAL-NSXMGR-03 
DAL-NSXMGR-OI

When upgrade finished Run Post Checks

Machine generated alternative text:
1. Bundle and Status 
upgrade Summary 
2. Edges 
Show upgrade History 
3. Hosts 
4. Management Nodes 
Upgrade Coordinator Version: 
2.5-0.0-0.14663978 
— RUN PRE CHECKS EXPORT PRE CHECKS CSV 
Edges 
@ Upgrade Successful 
Hosts 
@ Upgrade Successful 
Management Nodes 
@ Upgrade Successful 
Target Version: 
From Version: 
Pre Check Status: 
2.5-0.0.0.14663982 (2) 
No checks performed 
Target Version: 
From Version: 
Pre Check Status: 
2.5-0.0.0.14663975 (3) 
No checks performed 
Target Version: 
From Version: 
Pre Check Status: 
2.5-0.0.0.14663978 (3) 
No checks performed

Congrats it is finished
Can click show upgrade history to confirm success of upgrade

Summary:
As you can see upgrading NSX has come a long way since it’s humble beginnings.  I hope this article was useful and helps everyone understand how easy it is to upgrade NSX-T to 2.5.

One comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s