Enable Communication Between NSX-T Manager and Panorama

Complete the following procedure to enable communication between Panorama and NSX-T Manager. You can connect your Panorama to up to 16 NSX-T Managers. If you are connecting your Panorama to multiple NSX-T Managers, you must carefully plan your device group hierarchy and template stacks and consider how they interact with the other components needed for deployment. Service definitions reference device groups and template stacks and push that information to the firewalls in the related ESXi clusters.
  1. (
    Optional
    ) Bypass proxy server settings, configured on Panorama under
    Panorama
    Setup
    Services
    Proxy Server
    , for communication between Panorama and NSX-T Manager. This command allows Panorama to communicate directly with NSX-T Manager while maintaining proxied communication for other services.
    1. Log in to the Panorama CLI.
    2. Execute the following command to enable or disable proxy bypass.
      admin@Panorama> request plugins vmware_nsx proxy bypass {yes | no}
      Select
      yes
      to enable proxy bypass and
      no
      to disable proxy bypass. This is set to
      no
      by default.
  2. Log in to the Panorama web interface.
    Using a secure connection (https) from a web browser, log in using the IP address and password you assigned during initial configuration (https://<
    IP address
    >).
  3. Set up access to the NSX-T Manager. Repeat this procedure for each NSX-T Manager to which you will connect Panorama.
    1. Select
      Panorama
      VMware
      NSX-T
      Service Managers
      and click
      Add
      .
    2. Enter a descriptive
      Name
      for your NSX-T Manager.
    3. (
      Optional
      ) Add a
      Description
      for NSX-T Manager.
    4. Enter the
      NSX Manager URL
      —NSX-T Manager cluster virtual IP address or FQDN—at which to access the NSX-T Manager.
    5. Enter the
      NSX Manager Login
      credentials—username and password, so that Panorama can authenticate to the NSX-T Manager.
    6. Click
      OK
      .
    If you change your NSX-T Manager login password, ensure that you update the password on Panorama immediately. An incorrect password breaks the connection between Panorama and NSX-T Manager.
  4. Commit your changes to Panorama.
    Select
    Commit
    and
    Commit to Panorama
    .
  5. Verify the connection status on Panorama.
    1. Select
      Panorama
      VMware
      NSX-T
      Service Managers
      .
    2. Verify the message in the
      Status
      column.
      When the connection is successful, the status displays as
      Registered
      . This indicates that Panorama and the NSX-T Manager are in sync.
      The unsuccessful status messages are:
      • No connection
        : Unable to reach/establish a network connection to the NSX-T Manager.
      • Invalid Credentials
        : The access credentials (username and/or password) are incorrect.
      • Out of sync
        : The configuration settings defined on Panorama are different from what is defined on the NSX-T Manager.Click the link for details on the reasons for failure. For example, NSX-T Manager may have a service definition with the same name as defined on Panorama. To fix the error, use the service definition name listed in the error message to validate the service definition on the NSX-T Manager. Until the configuration on Panorama and the NSX-T Manager is synchronized, you cannot add a new service definition on Panorama.
      • Connection Disabled
        : The connection between Panorama and the NSX-T Manager was manually disabled.

Recommended For You