Configuring file services fails with error: "The operation is not allowed in the current state. vSAN File Service is not enabled on this host yet"

search cancel

book

calendar_today

VMware vSAN VMware vSAN 8.x VMware vSAN 7.x

Symptoms:

After enabling vSAN File Services, the file services VM's have deployed initially, but you see that one or more of the "Upgrade vSAN file service tasks" for the File Services VM's (FSVM's) fails with " "The operation is not allowed in the current state. vSAN File Service is not enabled on this host yet":

You may also see an error in Skyline Health: "vSAN Health Service - File Service - File Server Health"
Your vSAN networking may be using a vSphere Standard Switch (vSS)

This is due to incorrect or inconsistent configuration of the FSVM's, the vSwitches, and/or the physical network switches and related physical cabling, SFP's, etc.

Verification:

Verify that the FSVM's have connectivity between each other, to/from any required gateways, and to/from the DNS/Active Directory servers.
- Please contact Broadcom support for assistance with verifying the connectivity from within the FSVM's.

Ensure that the FSVM's are configured with the correct port group:
- In the Host & Clusters inventory view: Choose host -> VM's Tab -> Right-click File Service VM -> Edit Settings -> Under the network adapter's settings, locate the "Network label" or "Port Group" field.

Ensure that that the port group configured on the on the vSwitch(es) that is used for the File Services network is using the correct security policies, VLAN, etc. on all hosts in the vSAN cluster.
- For a port group defined on a vSphere Standard Switch (vSS), see TechDocs: Securing Standard Switch Ports with Security Policies
- For a port group defined on a vSphere Distributed Switch (vDS), see TechDocs: Secure vSphere Distributed Switches and Distributed Port Groups
  - NOTE: By default, Mac Learning and Forged Transmits are enabled as part of the vSAN File Services enablement process for a provided vDS port group
Work with your network team/vendor(s) as needed to correct any physical networking issues discovered in the connectivity in the verification testing above.
NOTE: While it is possible to use a vSS for vSAN related networking, the best practice is to use a vSphere Distributed Switch (vDS) to ensure best Consistency/Manageability, Performance, Recoverability, and Security across all nodes in the vSAN cluster.
- See Related TechDocs: Routing and Switching Requirements

thumb_up Yes

thumb_down No