Can't Access HTTPs from NSX-T Lab
So I built a home lab for NSX-T lab. Everything is setup and works fine except HTTPS out of my NSX-T segments 172.16.10.0/24 172.16.20.0/24. From these subnets i can do the following.
Ping anything on the internet.
Ping anything on my local network behind the unifi USG behind 192.168.0.0/24
I use test-netconnection from a machine and it can query google.com on 80 and 443 but i can't curl google.com, it just hangs.
http://msn.com and http://bing.com work fine but are super slow.
I'm lost as to why these machines can't access HTTPS.
Resolved*****
Thanks /mingoleg for leading me to the issue. I turns out I forgot to enable 1600 MTU on the DVS -_- After rebuilding a lab 24 times you miss some things! Thanks a lot.
5 comments · 100% upvoted · other discussions
MTU issue? Try pinging 8.8.8.8 with 1472 MTU and do not fragment bit set.
opensacks [OP] 1 points · Sep 2020
ping 8.8.8.8 -f -l 1472 no ping ping 8.8.8.8 -f -l 1500 i get a ping. Does my USG need to be set to 9000? I did the switches.
jadedargyle333 2 points · Sep 2020
I've had issues with jumbo frames traversing layer 3 on Ubiquiti. Test pinging between segments and then from segment to something local on your network. Also, check to see what happens when you change the MTU of a system on an NSX segment to 1400. If that fixes the issue, its an MTU issue.
mingoleg 1 points · Sep 2020
Any interfaces that route/switch host TEPs to edge TEPs need 1600+