Link to home
Create AccountLog in
Avatar of sunhux
sunhux

asked on

vCenter remote management of ESXi / VMs

Our client plans to use existing vCenter at the HQ to
remotely manage the ESXi hosts / VMs at a remote
branch office over the WAN (leased circuits).

The physical ESXi hosts & those hosts storage are
located at the branch offices.

Q1:
what are the pre-requisites?  (in terms of WAN speed,
etc).  Do we need to trunk the VLANs over & must
the remote office be part of the HQ's Windows
domain?

Q2:
What Tcp/Udp ports need to be permitted from the
vCenter at HQ to the remote office's ESXi hosts IPs
& remote office's IPs?
SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of sunhux
sunhux

ASKER

There's quite a bit of rules there.  I've extracted & attached what
I think is relevant (ie ESXi 5.x).  Those items in red text are what
I think is involved. Can let know by editing the attached MS Doc
& attach back the updated copy.

If I have VIC client installed on one of the remote office's server,
what's the ports required for this VIC to connect to the vCenter?
vCenteremote-firewallports.doc
ASKER CERTIFIED SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of sunhux

ASKER

So for my case, I should replace vSphere Clients with
all the ESXi hosts' Management IP addresses?

Should I also substitute all the VMs' IP addresses as
the vSphere clients' IP address ?
Avatar of sunhux

ASKER

My vCenter is not running SQL Express but a full SQL,
so does this mean the vCenter is accessing a 'bundled'
SQL & thus does not need any firewall rules for SQL/Oracle?
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of sunhux

ASKER

A VCP colleague told me what's needed is just
Tcp Port 443 and 902 between vCenter and the ESXi hosts,
bidirectional.  Any comment on whether he's right?
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account