Convergence failed while setting up the first replication cycle.

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
Convergence fails with below errors:

converge_status.log
===
escription": "Converge vCenter with external PSC to embedded PSC",
    "end_time": "xxxx-xx-xx 15:07:17",
    "id": "",
    "message": "Verifying replication failed.",
    "msg_id": "37",
    "progress": 100,
    "start_time": "xxxx-xx-xx 14:42:14",
    "status": "FAILED",
    "subtask": [

 {
            "key": "verifyreplication",
            "value": {
                "description": "Verify replication complete",
                "status": "FAILED"
            }
======

vmafd-firstboot.py_16333_stdout.log
========

2021-02-23T03:41:35.475Z Check if replication is complete
2021-02-23T03:41:35.475Z Running command: ['/usr/lib/vmware-vmdir/bin/vdcrepadmin', '-f', 'showpartnerstatus', '-h', 'localhost', '-u', 'Administrator']
2021-02-23T03:41:35.507Z Replication is still in progress: Partner: <Hostname>
Host available: Yes
Status available: No
2021-02-23T03:42:08.540Z Check if replication is complete
2021-02-23T03:42:08.541Z Running command: ['/usr/lib/vmware-vmdir/bin/vdcrepadmin', '-f', 'showpartnerstatus', '-h', 'localhost', '-u', 'Administrator']
2021-02-23T03:42:08.575Z Replication is still in progress: Partner: <Hostname>
Host available: Yes
Status available: No
2021-02-23T03:42:08.575Z Replication complete status: False
2021-02-23T03:42:08.575Z Set vmdir mode to standalone
2021-02-23T03:42:08.575Z Starting service [lwsmd]
=====

Environment

VMware vCenter Server 6.7.x
VMware vCenter Server 6.5.x

Cause

Ports 389,636,2012,2014,2020 needs to be open directional between PSC and vCenter

Resolution

1. Open the below ports bi-directional between PSC and vCenter
      389
      636
      2012
      2014
      2020

2. Enforce firewall rules on VC and PSC
 
     iptables -A port_filter -p tcp --dport 389 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
     iptables -A port_filter -p tcp --dport 636 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
     iptables -A port_filter -p tcp --dport 2012 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
     iptables -A port_filter -p tcp --dport 2014 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
     iptables -A port_filter -p tcp --dport 2020 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
     iptables-save
    
3. Retry convergence