Why 2 VMs in the same subnet and VLAN cannot communicate on port 5986?

[jmaxwellUSAF]

Hello.

Goal:
To determine why 2 VM servers in the same subnet and VLAN cannot communicate on port 5986 (WinRM).

GIVEN:
-These servers are connected via the same port channel to a Nexus9300.
(Does this communication not even traverse the ethernet cables?)

-These servers SUCCESSFULLY PING eachother.
--

Additional:

The Nexus "show route" states that it routes to the downstream ASA, but...
-These are 2 servers in the same subnet and VLAN, Why would they need to travel to a routing device?
-Pcaps on the ASA show no evidence of ICMP packets from Server1 to Server2.

Ethanalyser on the Nexus has not been effective because...
1. if icmp traffic is normal, then no packets should punt to the supervisor.
2. when I try to enter a data capture config, I recieve error that config cannot be applied to a switchport (non layer 3)

Questions:
1. Does this VM communication not even traverse the ethernet cables?
2. May you please advise on next troubleshoot steps?

Thank you.

[MHM Cisco World]

follow

[jmaxwellUSAF · Accepted solution]

If the below proves a resolution, I will mark this post as the solution. Until then I will keep this thread open.

__________

From VSphere messageboard...

VSphere servers in same subnet and vlan communicat... - VMware Technology Network VMTN

03-01-2023 12:44 PM

 ... "if there exist 2 servers in the same VSphere environment" ...

Just to make sure I understood your question correctly. Are you actually talking about two VMs on the same ESXi host?

If so then yes, the traffic will not need to exit the ESXi host, but will be handled by the vSwitch.

André

[MHM Cisco World]

follow