Step by Step NSX Upgrade

Page content

NSX Upgrade - step by step - logo

I haven’t been writing much about NSX so far, but I am working on an Internet of Things (IoT) Project where NSX is one of the core products. In Today post Step by Step NSX Upgrade, I would like to show you how NSX upgrade should be done.

Before we upgrade

It is very important to validate all necessary components before NSX is upgraded. It is not only valid for a minor upgrade which we will be doing - 6.2.2 to 6.2.3, but for every version. Checklist below will help you to prepare your environment to upgrade:

  • Download NSX upgrade bundle and check MD5.
  • There is known bug which affects EDGE upgrade when incorrect ciphers are configured. VMware KB NSX Edge is unmanageable after upgrading to NSX 6.2.3 explain steps needed to check it and/or change it before the upgrade.
  • Familiarize yourself with Update sequence for vSphere 6.0 and its compatible VMware products.
  • Backup of components:
  • Take a backup of NSX Manager (if you are not doing it regularly) before the upgrade.
  • Before upgrading download technical support logs.
  • Export of vSphere Distributed Switches configuration. Check out my Git repository for the detailed script.
  • Create a backup of vCenter Server database.
  • Take a snapshot of vCenter Server and vCenter Server database.
  • Take a snapshot of NSX Manager (without quiescing VMware Tools, because it is not supported and it might crash your NSX Manager).

3, 2, 1 - Go!

Upgrade of NSX Manager

  1. Download NSX upgrade bundle.

    NSX Upgrade - step by step - 1

  2. Login to NSX Manager and go to Upgrade section.
  3. Click on Upgrade button, specify a location of upgrade bundle and click Continue.

    NSX Upgrade - step by step - 2

  4. It will take few minutes to upload it.

    NSX Upgrade - step by step - 3

  5. Choose if you want to enable SSH and participate in Customer Experience Improvement Program (CEIP). Click Upgrade to proceed.

    NSX Upgrade - step by step - 4

  6. Upgrade takes a while so be patient. In my lab, it took 15 minutes.

    NSX Upgrade - step by step - 5

  7. GUI reports that upgrade was done.

    NSX Upgrade - step by step - 6

  8. Go back to vSphere Web Client and go to Networking&Security. After logging in I immediately noticed new section Dashboard.

    NSX Upgrade - step by step - 7

NSX Controllers Upgrade

  1. To continue upgrade click on Installation and hit Upgrade Available button.

    NSX Upgrade - step by step - 8

  2. Confirm that we want to proceed with Controllers upgrade.

    NSX Upgrade - step by step - 9

  3. It will take few moments to upgrade controllers. In my case, it was ~15 minutes per controller.

    NSX Upgrade - step by step - 10

  4. Once all controllers upgraded and the reboot is finished, green status is displayed.

    NSX Upgrade - step by step - 11

VMware ESXi NSX VIBs Upgrade

  1. Navigate to Installation section and click Host Preparation.

    NSX Upgrade - step by step - 12

  2. Click on Upgrade Available in every cluster you are using NSX and confirm Upgrade by clicking Yes.

    NSX Upgrade - step by step - 13

  3. In vSphere Client uninstalls and install tasks are visible.

    NSX Upgrade - step by step - 14

  4. To finish with upgrade ESXi hosts have to be rebooted.

    NSX Upgrade - step by step - 15

NSX Edge Services Gateway and Distributed Logical Router Upgrade

  1. Next step is to upgrade Edge Services Gateway and Distributed Logical Router. In my environment, I have only ESG deployed so we will proceed with the upgrade of it.

    NSX Upgrade - step by step - 16

  2. Please remember that there might be service interruption depending on a configuration used in environment.

    NSX Upgrade - step by step - 17

  3. In vSphere Web Client in current tasks, it is visible, that two temporary new Edge Services Gateways deployment is in progress.

    NSX Upgrade - step by step - 18

  4. After two minutes Edge Services Gateways upgrade to 6.2.3 is completed.

    NSX Upgrade - step by step - 19

  5. Same procedure should be used to perform an upgrade of Distributed Logical Routers.

Post-Upgrade Checklist

  • Check if NSX Manager is working.
  • Check if NSX Manager backup is working.
  • Check if NSX VIBs are installed on ESXi host.
  • Resynchronize the host message bus.
  • Remove snapshot from NSX Manager.
  • Remove snapshot from vCenter Server.
  • Remove snapshot from vCenter Server database.

Documentation: