Tunnel Status shows Down between HCX IX appliances when a firewall exists between the connector and cloud sites

Products

• VMware HCX

Issue/Introduction

• From the HCX UI, on the Interconnect > Service Mesh > Appliances page, the Tunnel Status is Down.
• When running Data-Plane Diagnostics, there are one or more failed probes. These failures will indicate on which ports and in which directions the failures occurred.
• Testing connectivity between sites over the noted ports shows a communication failure, even when connections over other ports are successful.

Environment

• VMware HCX 4.11.x

Cause

The firewall between sites is blocking the ports noted in the failed probes from the Data-Plane Diagnostics.

Resolution

Ensure that the firewall is configured properly to allow traffic over all required ports between sites.

Additional Information

VMware HCX Ports and Protocols
Network Port and Protocol Requirements