Remove VAMI firewall rule when client IP is blocked by it.

Products

• VMware vCenter Server

Issue/Introduction

If a block firewall rule is set incorrectly, it could cause client IP address blocked by vCenter, and VAMI becomes inaccessible to remove the rule.

Resolution

To remove firewall rule(s) to stop blocking the client from vCenter, please follow the steps below:

1. Open Host Client of the ESXi where vCenter is deployed on.
2. Click "Virtual Machine" in the left panel.  Click " <vCenter-VM-Name> " to the VM's page.  
3. Click "Console" >> "Open browser console" to open a console window.
4. Press "Alt + F1" to open console, log in with root account. If console is unavailable, check "Troubleshooting Mode Options" from Enable Access to the Bash Shell.

5. Confirm it is at appliance shell by checking command line. It should start with "Command>". If not, switch to appliance shell with this command:

   appliancesh

6. Remove all firewall rules with this command:

   com.vmware.appliance.version1.networking.firewall.addr.inbound.delete --all true

7. Verify all firewall rules are removed by entering this command. There should be no output.

   com.vmware.appliance.version1.networking.firewall.addr.inbound.list

     
8. Now the firewall rule(s) is removed and vCenter is accessible again.