Description

This article describes a scenario when a new VLAN is created, the communication between the third-party VNF and vSRX stops working.

Symptoms

A third-party VNF is running as well as vSRX, and management communication was successful between these VM's. Then a new VLAN was created for outbound traffic to go through vSRX out to the Internet. We could not see communication via ping between third-party VNF and vSRX over new VLAN in tcpdump in either direction.

Version on this NFX250 is: 15.1X53-D471 

List of VNFs
---------------------------------------
ID   Name               State
---- ----------------   ---------------
8    vsrx               Running
7    ubuntuMySQL        Running

Solution

When adding a new VLAN to an interface on an already existing VNF, the VNF must be removed, and recreated. 

Delete the VNF configuration, then re-add the same configuration (with the VLAN and interface modifications) and the communication between third-party VNF and vSRX will be successful through the new VLAN.