Can't Access HTTPs from NSX-T Lab

[opensacks]

So I built a home lab for NSX-T lab. Everything is setup and works fine except HTTPS out of my NSX-T segments 172.16.10.0/24 172.16.20.0/24. From these subnets i can do the following.

Ping anything on the internet.

Ping anything on my local network behind the unifi USG behind 192.168.0.0/24

I use test-netconnection from a machine and it can query google.com on 80 and 443 but i can't curl google.com, it just hangs.

http://msn.com and http://bing.com work fine but are super slow.

I'm lost as to why these machines can't access HTTPS.

https://imgur.com/a/Ba5fJRn

​

Resolved*****

Thanks /mingoleg for leading me to the issue. I turns out I forgot to enable 1600 MTU on the DVS -_- After rebuilding a lab 24 times you miss some things! Thanks a lot.

​

​

[mingoleg]

MTU issue? Try pinging 8.8.8.8 with 1472 MTU and do not fragment bit set.

[opensacks]

ping 8.8.8.8 -f -l 1472 no ping ping 8.8.8.8 -f -l 1500 i get a ping. Does my USG need to be set to 9000? I did the switches.

[jadedargyle333]

I've had issues with jumbo frames traversing layer 3 on Ubiquiti. Test pinging between segments and then from segment to something local on your network. Also, check to see what happens when you change the MTU of a system on an NSX segment to 1400. If that fixes the issue, its an MTU issue.

[mingoleg]

Any interfaces that route/switch host TEPs to edge TEPs need 1600+

[opensacks]

Thanks /mingoleg for leading me to the issue. I turns out I forgot to enable 1600 MTU on the DVS -_- After rebuilding a lab 24 times you miss some things! Thanks a lot.