Upgrade or Downgrade the VMware NSX Plugin 4.0.0

Use the following procedures to upgrade to or downgrade from Panorama plugin for VMware NSX 4.0.0.

Upgrade to Panorama Plugin for VMware NSX 4.0.0

Complete the following procedure to upgrade to Panorama plugin for VMware NSX 4.0.0.
You must upgrade to the Panorama plugin for VMware NSX 4.0.0 from plugin 3.2.x.
  1. Log in to the
    passive
    Panorama peer web interface and upgrade the Panorama plugin for VMware NSX 4.0.0.
    1. Select
      Panorama
      Plugins
      .
    2. Select
      Check Now
      to retrieve a list of available updates.
    3. Select
      Download
      in the Action column to download the plugin.
    4. Select the version of the plugin and click
      Install
      in the Action column to upgrade the plugin. Panorama will alert you when the upgrade is complete.
  2. Log in to the
    active
    Panorama peer web interface and upgrade the Panorama plugin for VMware NSX 4.0.0.
    1. Select
      Panorama
      Plugins
      .
    2. Select
      Check Now
      to retrieve a list of available updates.
    3. Select
      Download
      in the Action column to download the plugin.
    4. Select the version of the plugin and click
      Install
      in the Action column to upgrade the plugin. Panorama will alert you when the upgrade is complete.

Downgrade from Panorama Plugin for VMware NSX 4.0.0

If you need to downgrade the Panorama plugin for VMware NSX from 4.0.0 to 3.2.x from a security-centric deployment, complete the following procedure.
The Panorama plugin for VMware NSX 4.0.0 can be downgrade for 3.2.x only. No other downgrade path is supported.
If you set any of the CLI commands on the following list, you must reconfigure the CLI command after downgrading to Panorama plugin for VMware NSX 3.2.x. Do this on both nodes in a Panorama HA deployment.
  • request plugins vmware_nsx nsx_t dau-interval interval <>
  • request plugins vmware_nsx nsx_t auto-sync-interval dag <>
  • request plugins vmware_nsx nsx_t auto-sync-interval profile-security-group <>
  • request plugins vmware_nsx nsx_t auto-sync-interval service-chain <>
  • request plugins vmware_nsx nsx_v dag-sync-interval interval <>
  • request plugins vmware_nsx nsx_v dau-interval interval <>
  • request plugins vmware_nsx global proxy bypass <>
  • request plugins vmware_nsx global curl-timeout timeout <>
  • request plugins vmware_nsx nsx_t trigger-full-sync <>
If you have another active NSX deployment, do not click on the
Remove Config
link under
Panorama
Plugins
before downgrading the plugin. Removing the config from the NSX plugin breaks the configuration for all deployments configured on that plugin.
The following steps are for an NSX-T security-centric configuration.
  1. Delete steering rules.
    1. Log in to Panorama.
    2. Select
      Panorama
      VMware
      NSX-T
      Network Introspection
      Rule
      .
    3. Select each steering rule.
    4. Click
      Delete
      .
  2. Delete steering policy.
    1. Select
      Panorama
      VMware
      NSX-T
      Network Introspection
      Policy
      .
    2. Select each steering policy.
    3. Click
      Delete
      .
  3. Commit
    your changes to Panorama.
  4. Remove any VM-Series firewalls you deployed in NSX-T under the security-centric service definition linked to the service manager.
  5. Remove service definition(s) from your service manager(s).
    1. Select
      Panorama
      VMware
      NSX-T
      Service Managers
      .
    2. Click on your service manager.
    3. Under
      Service Definitions
      , select each service definition and click
      Delete
      .
    4. Repeat these steps for each service manager.
    5. Click
      OK
      .
  6. Remove the membership criteria associated with your security-centric service definition(s).
    1. Select
      Panorama
      VMware
      NSX-T
      Membership Criteria
      .
    2. Select the service definition(s).
    3. Click
      Delete
      .
  7. Delete any NSX-T security-centric service definitions that you unlinked from the service definition in step 5.
    1. Log in to the Panorama web interface.
    2. Select
      Panorama
      VMware
      NSX-T
      Service Definitions
      .
    3. To delete your service definition, check the box next to the service definition name and then click
      Delete
      .
    4. Repeat the above step for each NSX-T service definition.
    5. Commit
      your changes.
  8. Log in to the
    passive
    Panorama peer web interface and downgrade the Panorama plugin for VMware NSX 3.2.x.
    Do not use the
    Remove Config
    link if you any other active NSX deployments when downgrading.
    1. Verify the configuration from the active Panorama is synchronized on the passive peer by viewing the high availability widget on the Panorama dashboard. If the config sync is in progress, do not initiate the downgrade until it is complete.
    2. Select
      Panorama
      Plugins
      .
    3. Select
      Check Now
      to retrieve a list of available updates.
    4. Select
      Download
      in the Action column to download the plugin.
    5. Select the version of the plugin and click
      Install
      in the Action column to downgrade the plugin. Panorama will alert you when the downgrade is complete.
  9. Log in to the
    active
    Panorama peer web interface and downgrade the Panorama plugin for VMware NSX 3.2.x.
    Do not use the
    Remove Config
    link if you any other active NSX deployments when downgrading.
    1. Select
      Panorama
      Plugins
      .
    2. Select
      Check Now
      to retrieve a list of available updates.
    3. Select
      Download
      in the Action column to download the plugin.
    4. Select the version of the plugin and click
      Install
      in the Action column to downgrade the plugin. Panorama will alert you when the downgrade is complete.

Recommended For You