{"id":68,"date":"2019-01-17T11:29:19","date_gmt":"2019-01-17T16:29:19","guid":{"rendered":"https:\/\/blog.markdepalma.com\/?p=68"},"modified":"2019-02-10T08:55:20","modified_gmt":"2019-02-10T13:55:20","slug":"a-nic-device-is-tied-to-a-disallowed-network","status":"publish","type":"post","link":"https:\/\/blog.markdepalma.com\/?p=68","title":{"rendered":"A NIC device is tied to a disallowed network"},"content":{"rendered":"\n<p>I recently received a call from a former colleague where they were unable to update a machine catalog. They stated nothing had changed in vCenter, Citrix, or the master image. The error they were receiving was:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Error Id: XDDS:919D761E<br><br>Exception:     Citrix.Console.Models.Exceptions.ProvisioningTaskException Create Catalog failed with an unknown reason, see terminating error for more details.        at Citrix.Console.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeTask.CheckForTerminatingError(SdkProvisioningSchemeAction sdkProvisioningSchemeAction)        at Citrix.Console.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeTask.WaitForProvisioningSchemeActionCompletion(Guid taskId, Action`1 actionResultsObtained)        at Citrix.Console.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeCreationTask.StartProvisioningAction()        at Citrix.Console.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeCreationTask.RunTask()        at Citrix.Console.PowerShellSdk.BackgroundTaskService.BackgroundTask.Task.Run()<br><br><br>DesktopStudio_ErrorId : ProvisioningTaskError<br>     ErrorCategory : NotSpecified<br>     ErrorID : NetworkNotPermitted<br>     TaskErrorInformation : Terminated<br>     InternalErrorMessage : <strong>A NIC device is tied to a disallowed network.<\/strong><br>     DesktopStudio_PowerShellHistory : Create Machine Catalog 'XenApp - WSRV12 - DAPPS - DR'<br>     11\/25\/2018 7:09:42 AM<\/pre>\n\n\n\n<p>The key error here is &#8216;<strong>A NIC device is tied to a disallowed network&#8217;.<\/strong> If you do a quick search you will find an article referencing this error: <a href=\"https:\/\/support.citrix.com\/article\/CTX139460\">CTX139460<\/a>. This points to a change in the vCenter networking config, but supposedly there weren&#8217;t any changes. Time to do some digging. I asked them to get networking info from both vCenter and CItrix using PowerShell.<\/p>\n\n\n\n<p>To get the hypervisor networking I asked him to log in to one of the delivery controllers, launch PowerShell as administrator, and run the following:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Add-PSSnapin Citrix*<br>dir XDHyp:\\HostingUnits | Select PSPath,HostingUnit*,*Network* | Format-List<\/pre>\n\n\n\n<p>The output of this was:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">PSPath : Citrix.Host.Admin.V1\\Citrix.Hypervisor::XDHyp:\\HostingUnits\\DR_Cluster-vm_dr<br> HostingUnitName : DR_Cluster-vm_dr<br> HostingUnitUid  : bddd641a-a55c-4f0e-bd62-9331502fd908<br> NetworkId       : <strong>Network:network-641<\/strong><br> NetworkPath     : XDHyp:\\Connections\\PRDVCENTER01\\DR.datacenter\\DR Cluster.cluster\\VM Network 201.network<br>...<\/pre>\n\n\n\n<p>The thing to take note of is the &#8216;<strong>NetworkId<\/strong>&#8216; for the DR hosting connection. This Id is the vCenter MoRef (Managed Object Reference) for the VM network. I then had him pull the VM networks from vCenter using PowerCLI.<\/p>\n\n\n\n<p>To get the VM networks (with MoRef) from vCenter I asked him to launch VMware PowerCLI as administrator and run the following:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Connect-VIServer prdvcenter01.domain.com<br>Get-View -ViewType Network | Select Name,MoRef<br><\/pre>\n\n\n\n<p>The output of this was:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Name                                                        MoRef<br> ----                                                        -----<br> VM Network 201                                              Network-network-4790<br><br>...<\/pre>\n\n\n\n<p>The MoRef was <strong>network-641<\/strong> in MCS, but <strong>network-4790<\/strong> in vCenter even though the VM network names were the same. From this it was clear there was a networking change performed on the vCenter side at some point. After stating this, it was revealed that port groups were deleted and recreated (which generated new MoRef ids) in this DR cluster. At this point we have to reconfigure the hosting connection networking with the new MoRef and this cannot be done in Citrix Studio. To do this we have to reconfigure the &#8216;<strong>NetworkPath<\/strong>&#8216; in the hosting connection, but use the same &#8216;<strong>NetworkPath<\/strong>&#8216; since the network name did not change. Running this will force the network MoRef to be queried and updated in the MCS hosting connection.<\/p>\n\n\n\n<p>To reset (or change if needed) the &#8216;<strong>NetworkPath<\/strong>&#8216; in the hosting connection you take the &#8216;<strong>PSPath<\/strong>&#8216; from the first command and copy everything starting with &#8216;<strong>XDHyp<\/strong>&#8216;. I took that path and provided them with this command to run:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Set-Item \u2013Path \u2018XDHyp:\\HostingUnits\\DR_Cluster-vm_dr\u2019 \u2013NetworkPath \u2018XDHyp:\\Connections\\PRDVCENTER01\\DR.datacenter\\DR Cluster.cluster\\VM Network 201.network\u2019<\/pre>\n\n\n\n<p>Finally, I asked them to re-run the first &#8216;<strong>dir<\/strong>&#8216; command again to verify the network MoRef updated.  After doing this they were able to successfully update the machine catalog.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently received a call from a former colleague where they were unable to update a machine catalog. They stated nothing had changed in vCenter, Citrix, or the master image. The error they were receiving was: Error Id: XDDS:919D761EException: Citrix.Console.Models.Exceptions.ProvisioningTaskException Create Catalog failed with an unknown reason, see terminating error for more details. at Citrix.Console.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeTask.CheckForTerminatingError(SdkProvisioningSchemeAction [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[63,61],"tags":[29,10,31,30,14,9,32,33],"class_list":["post-68","post","type-post","status-publish","format-standard","hentry","category-citrix","category-vmware","tag-citrix","tag-esx","tag-machine-creation-services","tag-mcs","tag-vcenter","tag-vmware","tag-xenapp","tag-xendesktop"],"_links":{"self":[{"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/posts\/68","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=68"}],"version-history":[{"count":7,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/posts\/68\/revisions"}],"predecessor-version":[{"id":118,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=\/wp\/v2\/posts\/68\/revisions\/118"}],"wp:attachment":[{"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=68"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=68"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.markdepalma.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=68"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}