Just been assigned a ticket for a new ESXi installation with connection issues, from a remote office the customer is not able to connect to the host in the remote office using the vSphere client (the host webpage doesn’t even load up past the security certificate warning), he is able to connect to the host directly from a machine at the local site. The error message is “The request failed because the remote server took long to respond”.
From the branch office, he is also not able to log directly into the hosts at the main site or access the webpages but he is able to load the vCenter server web page as well as log into it using the vSphere client, but he is not able to add the host to vCenter either (request timed out error).
The two sites are connected together by a site-to-site VPN and the person who looks after the both firewalls has opened ports 80/443/902 in both directions on both firewalls, below is what I have checked.
- Verified host networking details.
- Telneted to the host/vCenter on 40/443/902 and the ports are open
- Checked the ESXi firewall on the remote host and it has the default settings;
- Tested the ESXi build (OEM image) on another server at the main site and that works fine
- Installed ESXi on another machine at the remote site using the same build as the main office hosts and I still have the same issue.
- I’ve run packet captures from both sites and I can see communication between the host and the client/vCenter, this is also confirmed by a tcpdump.
- I have gone as far as having the all the management ports opened on both firewalls.
My gut feeling is that it is a firewall issue but I am not sure how I can prove it.
Any suggestions are most welcome.
