book
Article ID: 344860
calendar_today
Updated On:
Issue/Introduction
Symptoms:
Convergence fails with below errors:
converge_status.log
===
escription": "Converge vCenter with external PSC to embedded PSC",
"end_time": "xxxx-xx-xx 15:07:17",
"id": "",
"message": "Verifying replication failed.",
"msg_id": "37",
"progress": 100,
"start_time": "xxxx-xx-xx 14:42:14",
"status": "FAILED",
"subtask": [
{
"key": "verifyreplication",
"value": {
"description": "Verify replication complete",
"status": "FAILED"
}
======
vmafd-firstboot.py_16333_stdout.log
========
2021-02-23T03:41:35.475Z Check if replication is complete
2021-02-23T03:41:35.475Z Running command: ['/usr/lib/vmware-vmdir/bin/vdcrepadmin', '-f', 'showpartnerstatus', '-h', 'localhost', '-u', 'Administrator']
2021-02-23T03:41:35.507Z Replication is still in progress: Partner: <Hostname>
Host available: Yes
Status available: No
2021-02-23T03:42:08.540Z Check if replication is complete
2021-02-23T03:42:08.541Z Running command: ['/usr/lib/vmware-vmdir/bin/vdcrepadmin', '-f', 'showpartnerstatus', '-h', 'localhost', '-u', 'Administrator']
2021-02-23T03:42:08.575Z Replication is still in progress: Partner: <Hostname>
Host available: Yes
Status available: No
2021-02-23T03:42:08.575Z Replication complete status: False
2021-02-23T03:42:08.575Z Set vmdir mode to standalone
2021-02-23T03:42:08.575Z Starting service [lwsmd]
=====
Environment
VMware vCenter Server 6.7.x
VMware vCenter Server 6.5.x
Cause
Ports 389,636,2012,2014,2020 needs to be open directional between PSC and vCenter
Resolution
1. Open the below ports bi-directional between PSC and vCenter
389
636
2012
2014
2020
2. Enforce firewall rules on VC and PSC
iptables -A port_filter -p tcp --dport 389 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables -A port_filter -p tcp --dport 636 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables -A port_filter -p tcp --dport 2012 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables -A port_filter -p tcp --dport 2014 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables -A port_filter -p tcp --dport 2020 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables-save
3. Retry convergence