Hi there,
We are planning the migration from NSX-V to NSX-T and we have deployed 3 managers and an Edge Node. NSX-T Managers, Edge Node, ESX hosts, vCenter and NSX-V manager are on the same network and have connectivity.
When we are carrying out the process of importing the NSX-V configuration, it gives us a failure in the process 4- Translate imported configuration: Errors Config translation failed [Reason: [TOPOLOGY] Can not proceed with migration: DFW user-defined rules in topo # 3 candidate.].
Attach picture.
Any idea?
Thanks!
Looks like you have unsupported DFW rules in NSX-V.
Check this out to figure out what may be blocking:
Also check the log files on NSX-T Manager:
/var/log/migration-coordinator/v2t/
cm.log is a good start.
Not to mutch for that log. We review https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/migration/GUID-FA5EFF22-B7CA-4FF8-A0D3-C0CB0... and I think its good 😞
2021-10-13 15:39:45,039 16840 CM.plugins.xlate_plugin DEBUG Loaded 1 objects
2021-10-13 15:39:45,039 16840 CM.plugins.topology_plugin INFO FW/NAT enabled on: edge-9
2021-10-13 15:39:45,039 16840 CM.plugins.xlate_plugin DEBUG Loading configuration from nsx-v backup files named firewall.globalroot-0.config
2021-10-13 15:39:45,047 16840 CM.plugins.xlate_plugin DEBUG Loaded 1 objects
2021-10-13 15:39:45,048 16840 CM.engine.xlate_engine INFO ---------- TOPOLOGY plugin: failed with [TOPOLOGY] Can not proceed with migration: DFW user-defined rules in topo#3 candidate.
2021-10-13 15:39:45,048 16840 CM.engine.xlate_engine INFO This exception requires stage to terminate
2021-10-13 15:39:45,080 16840 CM.engine.xlate_engine INFO
Stored 203 apis
2021-10-13 15:39:45,084 16840 CM.engine.xlate_engine INFO --------------- Stage xlate: error
Update! The above error was due to having an ESG applied in a DFW policy. Removing it from DFW policy and disabling the FW on the ESG, fixed.
Still working on it.
Make sure your topology matches one of the supported ones here: