Unable to connect to an ESX host using Secure Shell (SSH)

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

This document guides you through the process of troubleshooting an SSH connection to an ESX host.

Note: This article applies only to ESX 4.x and earlier versions. In ESXi 4.1 and later, VMware recommends that you use Tech Support Mode. 

Symptoms:

• You are unable to connect to an ESX host using SSH.
• You receive one or more of these errors when trying to connect:
  
  
  • Network error: Connection refused.
  • Error code: 24577 (0x6001)
  • Error code: 110 (0x006E)

Environment

VMware VirtualCenter 2.0.x
VMware ESX 4.0.x
VMware ESX Server 3.5.x
VMware vCenter Server 4.1.x
VMware ESX 4.1.x
VMware ESX Server 3.0.x
VMware vCenter Server 4.0.x
VMware VirtualCenter 2.5.x

Resolution

Validate that each troubleshooting step below is true for your environment. Each step provides instructions or a link to a document, in order to eliminate possible causes and take corrective action as necessary. The steps are ordered in the most appropriate sequence to isolate the issue and identify the proper resolution. Do not skip a step. 

1. Verify that there is network connectivity between the SSH client and the ESX host. For more information, see Testing network connectivity with the Ping command (1003486) .
   
   
2. Verify that port 22 on the ESX host can be reached from the SSH client machine. For more information, see Testing port connectivity with the Telnet command (1003487).
   
   
3. Verify that the username and password is correct by logging directly in to the console. A common error is to use an incorrect username or password, which causes a login failure and an access denied error message to appear.
   
   
4. Verify that the SSH Daemon is running. 
   
   
5. Verify that user is permitted to access the host via SSH. For more information, see Enabling root SSH login on an ESX host (8375637).
   
   
6. Verify that the ESX host firewall permits SSH connections. For more information, see Configuring the ESX host firewall for SSH (1003808).

Note: If your problem still exists after trying the steps in this article:

• Gather the VMware Support Script Data. For more information, see Collecting Diagnostic Information in a VMware Virtual Infrastructure Environment (1003689).
• Contact Broadcom Support

Additional Information

Note: To enable SSH access for local user accounts created on ESX 4.1, see Local users created on ESX and ESXi 4.1 systems cannot log in (1024235).

Testing network connectivity with the ping command
Testing port connectivity with Telnet
Collecting diagnostic information in a VMware Virtual Infrastructure Environment
Configuring the ESX host firewall for SSH
Local or Active Directory Domain users on ESX and ESXi 4.1 systems cannot log in
Enabling root SSH login on an ESX host