ESXi Site to Site VPN

Leigh Kalbli
Leigh Kalbli used Ask the Experts™
on
We have a site to site IPSEC vpn up and running and communicate to each security appliance, the gateways and VLANs We have connected laptops and other devices and can traverse back and forth.  However, Site A has a vcenter server and we are trying to add two hosts on Site B to the site a vcenter.  I can ping the hosts from site A, and ping B and vice versa. However, I cannot get access from site A to the ESXi Host on site B.  Is there a TCP/UDP necessary to connect to the host?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017
Commented:
Is there a TCP/UDP necessary to connect to the host?

Yes

Is there a firewall blocking port ?

All the ports required are listed in this document

https://kb.vmware.com/s/article/2039095

https://kb.vmware.com/s/article/2106283

Author

Commented:
I checked and the ports are open. Each site has a 150MB ISP connection.  I tested RDP from one vm from site A to B and B to A and RDP sessions are fine. WHen trying to access an esxi host from web or client, it just times out.  Not sure if its just a bandwidth issue or something else.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
that link should sustain a connection...

Author

Commented:
Andrew,

Thanks for th follow up.  We have elevated it to our firewall vendors to see id they can isolate it. Ill post back soon but dont think its on vmware side now.

Author

Commented:
It was on the actual VPN appliance side with a routing issue.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial