1 Reply Latest reply on Apr 21, 2014 1:34 AM by vThinkBeyondVM

    Connecting to vCenter Server, Unable to connect to the MKS: Failed to connect to server xxx.xxx.xxx.xxx:902 vSphere 5.5, ESXi 5.5

    tmolko Lurker

      Here's my network topology:

       

      http://s24.postimg.org/86hcf6dwl/test1.png

       

      WHAT I WANT OT ACHIEVE: access virtual machines from remote network, be able to manage them through vCenter Server, run them, and see vms consoles (what's happening inside every vm, as I can see this in my local network).

       

      WHAT I HAVE SO FAR: at the moment Im able to successfully connect from my computer in the remote network to vCenter Server, which is a virtual machine on one of my ESXi hosts. vCenter Server is the VM on ESXi 1, its IP address is 172.16.254.112/24.

       

      WHAT I DID: I forwarded some ports on my JSRX router, forwarded 1.1.1.2:443 to 172.16.254.112:443, used this:

       

      edit security
      set zones security-zone trust address-book address accessvsphere 172.16.254.112/32
      exit

      edit security policies from-zone untrust to-zone trust
      set policy vspherepolicy match source-address any destination-address [ accessvsphere ] application any
      set policy vspherepolicy then permit
      exit

      edit security nat destination
      set pool dst-nat-pool-vsphere address 172.16.254.112 port 443
      set rule-set rs1 from zone untrust
      set rule-set rs1 rule myrule1 match destination-address 1.1.1.2
      set rule-set rs1 rule myrule1 match destination-port 443
      set rule-set rs1 rule myrule1 then destination-nat pool dst-nat-pool-vsphere
      exit

      edit security nat
      set proxy-arp interface ge-0/0/0.0 address 1.1.1.2

       

      And it works great, I can connect to vCenter Server, but then I try to launch virtual machine, I see only black screen and the message: Unable to connect to the MKS: Failed to connect to server 172.16.254.11:902.

      I read that vCenter Server need also port 902 and 903 for full connectivity but have no idea how to do this further. Which ports I need to forward, and - how?