scvmclient firewall rule set gets disabled on reboot

Products

• VMware vSphere ESXi

Issue/Introduction

• After the upgrade the Datastore and upgrading ESXi from 7.0.u3 to 8.0.u1.
• scvmclient firewall rule set gets disabled on reboot.

 

Environment

• VMware vSphere ESXi 8.0

Cause

•  The ScvmClientConnectionRule or daemon-scvmclient value should be True where after upgrade it was changed to false.
• Output of the Firewall rule before 8.0 which is 7.0.u3

# esxcli network firewall ruleset list | grep -i scvm

ScvmClientConnectionRule true

• Output of the Firewall rule after upgrade to ESXi 8.0.u1:

# esxcli network firewall ruleset list | grep -i scvm

   daemon-scvmclient false

Resolution

• Reach out to CISCO for further fix and information

 

Workaround:

• Enable the firewall rule to True where Datastore gets mounted back, this has to be ran on all nodes where the Datastore are in unmounted state

# esxcli network firewall ruleset set --enabled=true --ruleset-id=daemon-scvmclient 

• Validate that the firewall ruleset is enabled.

# esxcli network firewall ruleset list | grep -i scvm

Expected output: 

daemon-scvmclient true

Additional Information

• CISCO bug Post upgrade to 5.5.1a+ESXi to 8.0, DSs were unmounted due to scvmclient firewall rule.