VMware Cloud Community
GeoPerkins
Enthusiast
Enthusiast
‎03-15-2019 03:01 PM

Unable to disable firewall rule for SSH Server - message is Failed cannot change the host configuration

Very strange bug in ESXi 6.5 U2 that has been present and not repaired since ESXi 5.1 as first described here: Re: Stopping SSH on ESXi 5.1 produces error

Actions Taken:

  1. Attempted connection of SSH to ESXi 6.5 host. Connection refused.
  2. Identified that the firewall rule for SSH Server was disabled
  3. SSH was found to be running, but unable to connect because firewall prevented connection
  4. Enabled the firewall rule for SSH Server.
  5. Connected using SSH
  6. Disconnected from SSH
  7. Attempted to disable SSH Server firewall rule, received error "Cannot change the host configuration." (in vCenter) or "Failed cannot change the host configuration" (in web client connected to host).
  8. Stopped SSH (puts host back in a better security posture, but this is not the original condition of host when I found it)
  9. Attempted to disable the SSH Server rule again, but got same errors

Question:

Why can't I put the host back into the state I found it (namely, disabled SSH Server firewall rule which means, the firewall blocks SSH traffic although SSH daemon is still running)?

0 Kudos
0 Replies