Cisco ACI based environment conflicting with the VIP in vRealize Log Insight (2024)

Symptoms:

• The Administration > Management >System Monitor page intermittentlyshows Failed to load resourcesand agents are reporting Disconnectedin a Cisco ACI based environment.
• vRealize Log Insight VIP is not reachable for ingestion, however ingestion sent directly to a node succeeds.

The vRealize Log Insightload balancer uses a Direct Server Return (DSR) configuration.
By default, DSR does not work in Cisco ACI because of data-plane IP learning.

The L4-L7 Virtual IPs option was introduced in Cisco Application Policy Infrastructure Controller (APIC) Release 1.2(1m).
This option is located at Tenant > Application Profiles > Application EPGs or uSeg EPGs.
This option disables data-plane IP learning for the specific DSR virtual IP address. Failure to disable IP learning for the DSR virtual IP address will result in IP endpoint flapping between different locations in the Cisco ACI fabric.

For more information, seeACI Fabric Endpoint Learning White Paper.

Note: Ensure that GARP is set to "enabled" for the segment on CISCO ACI. The default GARP setting is "disabled."

1. In the vRealize Log Insight UI, note which node has the ILB (Integrated Load Balancer). You will reboot this nodelast.
2. From the vSphere Web Client, right click the vRealize Log Insight node, selectPower > Restart Guest OS
3. Repeat step 2 on the remaining nodes in the cluster, one by one.

thumb_up Yes

thumb_down No