Unable to failover "Failed to connect to nfc service, Failed to connect to server###:902"

Products

• VMware Live Recovery

Issue/Introduction

Symptoms:

• Unable to perform planned migration or a test failover of the VM's using SRM.
• The test recovery might fail when trying to create a writable snapshot/configure storage:
  
  

 

 

Validation:

• The following log entries are observed in the vmware-dr.log file on the Site Recovery Manager (SRM) server:

2025-03-18T02:04:26.760-04:00 error vmware-dr[32393] [SRM@6876 sub=LocalSite.LocalVcServer opID=a7c49618-####-425d-####-9d7211eee17a-test:fc1b:####:a94e:####:6adb] [NfcDomain] Failed to connect to NFC service: Failed to connect to server example.com:902
2025-03-18T02:04:26.760-04:00 error vmware-dr[01771] [SRM@6876 sub=LocalSite.LocalVcServer opID=a7c49618-####-425d-####-9d7211eee17a-test:fc1b:####:a94e:####:0a53] [NfcDomain] Failed to connect to NFC service: Failed to connect to server example.com:902
2025-03-18T02:04:26.760-04:00 error vmware-dr[32350] [SRM@6876 sub=LocalSite.LocalVcServer opID=a7c49618-####-425d-####-9d7211eee17a-test:fc1b:####:a94e:####:3afe] [NfcDomain] Failed to connect to NFC service: Failed to connect to server example.com:902
2025-03-18T02:04:26.760-04:00 error vmware-dr[01771] [SRM@6876 sub=LocalSite.LocalVcServer opID=a7c49618-####-425d-####-9d7211eee17a-test:fc1b:####:a94e:####:0a53] [NfcDomain] Failed to connect (retry attempts left: 64):
--> (vim.HostServiceTicket) {
-->    host = "example.com",
-->    port = 902,
-->    sslThumbprint = "##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##",
-->    sslCertificate = <unset>,
-->    service = "nfc",
-->    serviceVersion = "1.1",
-->    sessionId = (not shown)
--> }
--> (dr.fault.NfcConnectFault) {
-->    faultCause = (vmodl.MethodFault) null,
-->    faultMessage = <unset>,
-->    host = "example.com",
-->    details = "Failed to connect to server example.com:902"
-->    msg = ""

Environment

VMware Site Recovery Manager 8.x
VMware Live Recovery 9.x

 

Cause

 NFC traffic on Port 902 was not allowed between DR site SRM (VMware Live Recovery) and the ESXi hosts at the recovery site.

Resolution

• Port 902 must be open and accessible between the DR site SRM (VMware Live Recovery) and the ESXi hosts at the recovery site.
• This enables traffic from the Site Recovery Manager server on the recovery site to the ESXi hosts during recovery or testing operations, including scenarios involving IP customization, callout commands on recovered VMs, or the use of Raw Device Mapping (RDM). Additionally, port 902 facilitates all NFC traffic related to the updating or patching of VMX files for virtual machines replicated using vSphere Replication

Additional Information

Port requirements for SRM (VMware Live Recovery)