TCP and UDP ports required to access VMware vRealize Orchestrator

Products

• VMware Aria Suite

Issue/Introduction

This article lists the TCP and UDP ports for VMware vRealize Orchestrator

Resolution

TCP and UDP ports for VMware vRealize Orchestrator:
 

Product	Port	Protocol	Source	Target	Purpose
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	25	TCP	vRealize Orchestrator Server (formerly known as VMware vCenter Orchestrator)	SMTP Server	Email notifications
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	80	TCP	vRealize Orchestrator Server (formerly known as VMware vCenter Orchestrator)	vCenter Server	Used to obtain virtual infrastructure and virtual machine information from orchestrated vCenter Server(s) through the vCenter API (Shared sessions)
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	389	TCP/UDP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	LDAP Server	LDAP Authentication
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	443	TCP	vRealize Orchestrator Server (formerly known as VMware vCenter Orchestrator)	vCenter Server	Used to obtain virtual infrastructure and virtual machine information from orchestrated vCenter Server(s) through the vCenter API
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	636	TCP	vRealize Orchestrator Server (formerly known as VMware vCenter Orchestrator)	LDAP Server	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) uses LDAP authentication and group membership to determine role authorization in LCM and access to VMs/requests. This is the SSL secured LDAP protocol LDAPS (the SSL pendent of 389). This is used for secured LDAP authentication
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	1433	TCP	vRealize Orchestartor Server	Microsoft SQL Server	vRealize Orchestrator Server to Microsoft SQL Server for vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Database
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	1521	TCP	vRealize Orchestrator Server	Oracle Database Server	vRealize Orchestrator Server to Oracle for vRealize Orchestrator Database
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	3306	TCP	vRealize Orchestrator Server	MySQL Server	vRealize Orchestrator Server to MySQL Server for vRealize Orchestrator Database
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	5432	TCP	vRealize Orchestrator Server	PostgresSQL Server	vRealize Orchestrator Server to PostgresSQL Server for vRealize Orchestrator Database
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8230	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client	vRealize Orchestrator Server	Lookup port – The main port to communicate with vRealize Orchestrator Configurator server (JNDI port). All other ports communicate with the vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Configurator smart client through this one. It is part of the JBoss Application server infrastructure
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8240	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Command port – The application communication port (RMI container port), it is used for remote invocations. It is part of the JBoss Application server infrastructure.
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8244	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Data port used to access all vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) data models, such as workflows and policies. It is part of the JBoss application server infrastructure.
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8250	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Messaging port – The Java messaging port used to dispatch events. It is part of the JBoss Application server infrastructure
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8280	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Port used by vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server to connect to the Web front-end via HTTP
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8281	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Port used by vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server to connect to the Web front-end via HTTPS
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8281	TCP	vCenter Server	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	Port used by vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server to connect to vCenter Server to communicate with the vCenter API
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8282	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client PC	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Server	HTTP server port – Port used by the HTTP connector to connect to the Web frontend.
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8283	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client PC	vRealize Orchestrator Server	HTTPS server port – Port used by HTTP connector to connect to the Web frontend. Requires Jetty to be configured for SSL.
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8286	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client PC	vRealize Orchestrator Server	Java messaging port used for dispatching events.
vRealize Orchestrator (formerly known as VMware vCenter Orchestrator)	8287	TCP	vRealize Orchestrator (formerly known as VMware vCenter Orchestrator) Client PC	vRealize Orchestrator Server	SSL secured Java messaging port used for dispatching events.
Realize Business Advanced/Enterprise	80/8080	TCP	Web Browser	vRealize Business Advanced/Enterprise	Port used to login (HTTP) to the vRealize Business UI.
vRealize Business Advanced/Enterprise	443	TCP	Web Browser	vRealize Business Advanced/Enterprise	Port used to login (HTTPS) to the vRealize Business UI.
vRealize Business Advanced/Enterprise	1521	TCP	vRealize Business Advanced/Enterprise	Oracle RDBMS	Port used by vRealize Business to connect to Oracle DB
vRealize Business Advanced/Enterprise	389/3268	TCP	vRealize Business Advanced/Enterprise	LDAP Server	Listen port in the LDAP/AD server that vRealize Business connects to for synchronizing users.
vRealize Business Advanced/Enterprise	32xx range	TCP	vRealize Business Advanced/Enterprise	Oracle DB	When a firewall is present between vRealize Business and Oracle DB servers, the 3200 range ports need to be opened on the firewall. Calls from vRealize Business to Oracle DB server originate on port 1521, but DB server uses a variety of random ephemeral ports in the 3200 range for return calls. If these are not opened, calls between vRealize Business and Oracle DB will hang. Use network monitoring applications such as Wireshark to verify these ephemeral ports.