Network port requirements for VMware Cloud Foundation for Service Providers

Products

• VMware Cloud Foundation

Issue/Introduction

This article provides information on the port requirements for the VMware Cloud Foundation for Service Providers.

Resolution

Notes: 

• The Bringup process depends on TCP 22, 443, 8443, 9443 on the SDDC Manager VM being accessible from the Cloud Builder VM.
• The DNS/NTP/NFS ports on the SDDC Manager VM need to be accessible from the ESXi hosts.
• If you have a firewall between your VMware Cloud Foundation environment and your Active Directory server, you must make sure that all of the necessary ports are opened.
• If you have a firewall between your VMware Cloud Foundation environment and you Backup Server, please contact your system backup vendor for a list of the required open ports. 

 

 

 

Port	Protocol	Services
22	TCP	SSH
53	TCP/UDP	DNS
67, 68	TCP/UDP	DHCP
123	TCP/UDP	NTP
111	TCP/UDP	RPCBind
2049	TCP	NFSD (Transactions from NFS storage devices)
4045	TCP/UDP	Lockd  (NFS Lock Manager)
32767	TCP/UDP	Mountd
32766	TCP/UDP	Statd
135	TCP	Port is designated for Active Directory authentication
389	TCP/UDP	This port must be open on the local and all remote instances of vCenter Server. This is the LDAP port number for the Directory Services for the vCenter Server group.
2014	TCP	RPC port for all VMCA (VMware Certificate Authority) APIs
2020	TCP	VMware Authentication Framework Service
443	TCP	HTTPS access vCenter Server access to ESXi hosts Default SSL Web port vSphere Client access to vCenter Server vSphere Client access to ESXi hosts WS-Management vSphere Client access to vSphere Update Manager Third-party network management client connections to vCenter Server HTTPS access vCenter Server access to ESXi hosts Default SSL Web port vSphere Client access to vCenter Server vSphere Client access to ESXi hosts WS-Management vSphere Client access to vSphere Update Manager
8443	TCP	Nodemanager
9443	TCP	LCM vSphere Web Client Access
	IGMP	IGMP snooping
	Conntrack	Establish, Related
	ICMP	Echo-Request
	ICMP	Echo-Reply

Additional Information

For more Information regarding port requirements with other VMware Products:-

• Port requirements for  vCenter Server 6.x  https://kb.vmware.com/s/article/2106283
• Port requirements for Esxi Host https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-171B99EA-15B3-4CC5-8B9A-577D8336FAA0.html
• Port requirements for vSphere/vSAN https://kb.vmware.com/s/article/2106283
• Port requirements for NSX https://kb.vmware.com/s/article/2079386
• Port requirements for vRealize Operations Manager (Page 19) https://docs.vmware.com/en/vRealize-Operations-Manager/6.6/vrealize-operations-manager-66-reference-architecture-guide.pdf
• Port requirements for vRealize Log Insight https://docs.vmware.com/en/vRealize-Log-Insight/4.5/com.vmware.log-insight.administration.doc/GUID-AF74E989-DBF7-4AD3-A0E8-5F30EFE65FEF.html
• Port requirements for vRealize Automation https://docs.vmware.com/en/vRealize-Automation/7.3/com.vmware.vra.install.upgrade.doc/GUID-33B9CFD2-FF2C-4DCA-A5BF-878D211F59F1.html