How to open firewall ports for vSphere?

Question

I need to open ports on a firewall, so that a client can access his VM console through vCenter server's Web Client. I had a look at this page about port description, but I am a little confused.

I already have a port open for the client on a firewall, to access vCenter server's 443 port (https), 9443 (for vSphere PC client), 902 (TCP/UDP) and the client still gets some kind of error related to 902 port being blocked.

Do I have to open port 902 on ESXi hosts and not on vCenter instead? What should I permit as well?

Answer 1

I believe you mentioned about accessing virtual machine console using VMware Remote Console through the vSphere Client.

You must do the following things:

For vCenter Server

• The firewall must allow the vSphere Client to access vCenter Server on port 443

For ESXi hosts

• The firewall must allow the VMRC to access ESXi host on port 902 for VMRC versions before 11.0, and port 443 for VMRC version 11.0 and greater.

You can visit the following pages for more information

• VMware Remote Console 11.x requires port 443 on ESXi hosts
• Connecting to the Virtual Machine Console Through a Firewall

Answer 2

This link shows that port 902 needs to be open between the vCenter Server (source) and the ESX(i) host (target) in order to be able to make a remote MKS connection, as you suspected.

[If the above link doesn't work, try this.]