Strange VMware problem

[Cy Hauptmann]

Hi all,

I was wondering if anyone has had problems connecting to a ESXi 4.1 or 4.1 U1 installed on B200, B230, B250 or B440 blades.  My UCS is currently running 1.4.3(q). 

At this point, we can ping the Host just fine and the host can ping out just fine.  However when we connect via vSphere, http, https or ssh to the ESXi host, it fails.

Anyone seen this before??

Thanks,

Cy Hauptmann

[abbharga · Accepted solution]

Hi Cy,

Nothing we have heard of.

Did you verify the firewall rules on the host as well as ACLs port blocking etc on the noth bound switches to the FI?

./Abhinav

[Cy Hauptmann]

As far as I can see all paths are wild open to the UCS ..... looking through the vmware logs ... the connections are getting blacklisted ...

Again ... anyone seen anthing like that .... I have two other UCS systems and using the same configurations and I have no problem with them.

Thanks

Cy.

[rammuthaiya]

This is due to Host's security settings.Take a KVM session and check for settings.

ram

[Cy Hauptmann]

Where would I check that ....

Sent from Samsung mobile

[Cy Hauptmann]

Ok .. just to verify, I'm looking at the vmware side and not on UCS side correct?

[Cy Hauptmann]

Ok ... I am completely baffled now.  My current UCS system consist of 5 chassis and the FI 6140.  My upstream switch is a Nexus 5548.  I have tried three different versions on this UCS - 1.4.1m, 1.4.3q and 2.03q.  I have installed the cisco build 260247 of VMWare on different blades on different chassis and I get same blacklist error on the VMware host.  It doesn't matter where the host is within the system, same error.

On my productiion UCS system, I had one blade server go bad so I took one of the new B230M1 from one of the chassis of my new UCS system and put into the production UCS.  I loaded up VMWare using the same ISO file that I have been using to install on my new UCS system.  The only difference between the new UCS and production UCS system is the upstream switch.  My production UCS connects to Nexus 5020 ... to me a switch is a switch is a switch ...    Anyway, after the load of vmware, I kvm in the B230 blade and configure it.  And everything works the way it should be.  I can directly pull the webpage, vshpere into the host and even add it into vcenter.

Since I'm able to get the load of vmware working properly on the production UCS using the new blade servers, I'm thinking that something, either on my FI or my Nexus 5548 is modifying the ssl packet so that the vmware host is not liking and is blacklisting it. 

Anyone with any ideas, cause I sure am fresh out of them ...

Thanks,

Cy.