Solved

vCenter remote management of ESXi / VMs

Posted on 2013-05-25
8
1,309 Views
Last Modified: 2013-06-01
Our client plans to use existing vCenter at the HQ to
remotely manage the ESXi hosts / VMs at a remote
branch office over the WAN (leased circuits).

The physical ESXi hosts & those hosts storage are
located at the branch offices.

Q1:
what are the pre-requisites?  (in terms of WAN speed,
etc).  Do we need to trunk the VLANs over & must
the remote office be part of the HQ's Windows
domain?

Q2:
What Tcp/Udp ports need to be permitted from the
vCenter at HQ to the remote office's ESXi hosts IPs
& remote office's IPs?
0
Comment
Question by:sunhux
  • 4
  • 4
8 Comments
 
LVL 117

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE)
Andrew Hancock (VMware vExpert / EE MVE) earned 490 total points
Comment Utility
Q1. There is no requirement to be part of the HQ's Windows Domain, just use the correct userid and password, and domain name to login to vCenter.

What traffic is going over the WAN? if just ESXi Management traffic and console, you do not need to have a fast WAN. No need to stretch the VLANs, to have access to the ESXi Management network.

Q2. See here for a list of firewall ports

TCP and UDP Ports required to access vCenter Server, ESXi/ESX hosts, and other network components (1012382)
0
 

Author Comment

by:sunhux
Comment Utility
There's quite a bit of rules there.  I've extracted & attached what
I think is relevant (ie ESXi 5.x).  Those items in red text are what
I think is involved. Can let know by editing the attached MS Doc
& attach back the updated copy.

If I have VIC client installed on one of the remote office's server,
what's the ports required for this VIC to connect to the vCenter?
vCenteremote-firewallports.doc
0
 
LVL 117

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 490 total points
Comment Utility
I've attached and highlighted in yellow, AD and SQL/Oracle only needed if your vCenter Server are remote to SQL and Oracle DB servers, and AD.vCenteremote-firewallports.doc

The important ports are:-

vSphere Client ---> vCenter Server

Port TCP 902
Port TCP 443
Port TCP 80
0
 

Author Comment

by:sunhux
Comment Utility
So for my case, I should replace vSphere Clients with
all the ESXi hosts' Management IP addresses?

Should I also substitute all the VMs' IP addresses as
the vSphere clients' IP address ?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:sunhux
Comment Utility
My vCenter is not running SQL Express but a full SQL,
so does this mean the vCenter is accessing a 'bundled'
SQL & thus does not need any firewall rules for SQL/Oracle?
0
 
LVL 117

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE)
Andrew Hancock (VMware vExpert / EE MVE) earned 490 total points
Comment Utility
where is the SQL database in relation to vCenter Server, if on the same LAN, no firewall rules to change, as it's local.

You need to look at

For vCenter Server Management across WAN
vCenter Server to ESXi Server commuinications (both ways)

vSphere Client will connect to vCenter Server not across WAN!
0
 

Author Comment

by:sunhux
Comment Utility
A VCP colleague told me what's needed is just
Tcp Port 443 and 902 between vCenter and the ESXi hosts,
bidirectional.  Any comment on whether he's right?
0
 
LVL 117

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE)
Andrew Hancock (VMware vExpert / EE MVE) earned 490 total points
Comment Utility
if ESXi and vCenter are the only sources communicating - YES, these are the same ports as the vSphere Client uses.

443 (SSL)
902 (VNC like comminications to the VMs console)

So if you have a vCenter at HQ (and all comms are local to AD/SQL etc), the only thing going over the wire (WAN) is 443 TCP and 902 TCP to ESXi this is all that's needed.

depending on size of WAN, you may need to change a timeout variable, you will need to test, and if you find, it gets disconnected, you may need to change this value.
0

Featured Post

Network it in WD Red

There's an industry-leading WD Red drive for every compatible NAS system to help fulfill your data storage needs. With drives up to 8TB, WD Red offers a wide array of solutions for customers looking to build the biggest, best-performing NAS storage solution.  

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Will try to explain how to use the VMware feature TAGs in the VMs and create Veeam Backup Jobs using TAGs. Since this article is too long, I will create second article for the Veeam tasks.
Teach the user how to convert virtaul disk file formats and how to rename virtual machine files on datastores. Open vSphere Web Client: Review VM disk settings: Migrate VM to new datastore with a thick provisioned (lazy zeroed) disk format: Rename a…
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now