VMware Networking Community
ablesxs
Contributor
Contributor

Register NSX to vCenter failed: Connection timed out

Hi Heroes,

I would like to have your suggestion on the below issue while doing tests in my lab, thanks in advance...

Env:

vCenter 6.5     ip: 192.168.1.11

NSX 6.3.1     ip: 192.168.1.99

ESXi 6.5     ip: 192.168.1.10

DC     ip: 192.168.1.9

Issue:

In NSX manager web console> NSX Management Service> vCenter Server, I tried to register my NSX to vCenter, after entering vCenter server ip/username/password, it said:

Certificate verification failed. Cause - Connection timed out

Things I tried:

1. In NSX command prompt, tried to ping 192.168.1.11 (vCenter IP) but failed.

2. In vCenter, tried to ping NSX IP/FQDN, it works fine.

3. I generated a tech support log from NSX, and attached to this post, hope it helps.

3. Provide the screenshots for your reference:

pastedImage_1.png

pastedImage_2.png

pastedImage_3.png

pastedImage_4.png

H

Tags (2)
Reply
0 Kudos
6 Replies
amolnjadhav
Enthusiast
Enthusiast

Hi,

  Do you have firewall in between NSX Manager & virtual Center server?

  Can you please check windows firewall status? i assumed virtual Center Server you have installed in windows.

Please consider marking this answer "correct" or "helpful" if you think your query have been answered correctly. Regards Amol Jadhav VCP NSXT | VCP NSXV | VCIX6-NV | VCAP-DCA | CCNA | CCNP - BSCI
Reply
0 Kudos
rajeevsrikant
Expert
Expert

Hope you have kept the vCenter out of DFW as a recommended practice ?

Reply
0 Kudos
ablesxs
Contributor
Contributor

Hi,

The firewall in vCenter has disabled, btw, does the NSX has a built-in firewall (iptables)?

Reply
0 Kudos
ablesxs
Contributor
Contributor

Hi,

Sorry, may I know what does "DFW" means...? tried to google it but still didn't sure...

Reply
0 Kudos
rajeevsrikant
Expert
Expert

DFW means distributed firewall in NSX.

Have you set any firewall policies in NSX which blocks the access to vCenter.

By default all the access should be allowed. But double check what is your existing firewall policies

Reply
0 Kudos
ablesxs
Contributor
Contributor

Hi Raj,

Thanks for your information, I re-deployed NSX ova, seems the new NSX is able to register with vCenter.

Appreciate for your help Smiley Happy

Reply
0 Kudos