Brownfield import precheck fails with an error "Failed to fetch vCenter network details from example.com during import operation"

Products

• VCF Operations

Issue/Introduction

After running the prechecks for importing the vCenter in SDDC Manager, the operation "Import an Existing vCenter to Create a Workload Domain" fails with the error: "Could not extract vCenter network configuration for vCenter with address example.com"

/var/log/vmware/vcf/sddc-manager-ui-app/sddcManagerServer.log

YYYY-MM-DD HH:MM:SS.800+0000 VERBOSE [9b224108637241cb] [services/util.js, http-post-logs, logRequestBody:288] Incoming request /plugin/api/client/logs has body {"body":{"YYYY-MM-DD HH:MM:SS.015Z":{"additionalMessage":[{"error":{"arguments":["example.com"],"causes":[{"message":"Could not extract vCenter network configuration for vCenter with address 'example.com'","type":"java.lang.IllegalStateException"}],"errorCode":"FETCHING_VC_NETWORK_DETAILS_DURING_IMPORT_FAILED","message":"Failed to fetch vCenter network details from example.com during import operation","referenceToken":"#######"},"headers":{"lazyUpdate":null,"normalizedNames":{}},"message":"Http failure response for https://example.net/vcf-operations/plug/sddc-108/plugin/api/v1/sddcs/imports: 400 OK","name":"HttpErrorResponse","ok":false,"status":400,"statusText":"OK","url":"https://example.net/vcf-operations/plug/sddc-108/plugin/api/v1/sddcs/imports"}],"isClientLog":true,"level":"ERROR","message":"HttpError"}},"id":"#########-####-####-####-############"}

/var/log/vmware/vcf/domainmanager/domainmanager.log may show a similar entry:

YYYY-MM-DD HH:MM:SS.240+0000 WARN  [] [c.v.v.v.s.b.util.BrownfieldCertUtil,http-nio-127.0.0.1-7200-exec-1]  Certificate is already trusted.
YYYY-MM-DD HH:MM:SS.249+0000 WARN  [] [c.v.v.v.s.b.util.BrownfieldCertUtil,http-nio-127.0.0.1-7200-exec-1]  Certificate is already trusted.
YYYY-MM-DD HH:MM:SS.260+0000 WARN  [] [c.v.v.v.s.b.util.BrownfieldCertUtil,http-nio-127.0.0.1-7200-exec-1]  Certificate is already trusted.
YYYY-MM-DD HH:MM:SS.264+0000 DEBUG [] [c.v.v.s.c.s.SecurityConfigurationServiceImpl,http-nio-127.0.0.1-7200-exec-1]  Security config retrieved {"fipsMode":true}
YYYY-MM-DD HH:MM:SS.264+0000 DEBUG [] [c.v.e.s.c.c.v.vsphere.VcManagerBase,http-nio-127.0.0.1-7200-exec-1]  Connecting to https://example.com:443/sdk
YYYY-MM-DD HH:MM:SS.271+0000 DEBUG [] [c.v.v.s.t.DynamicTrustManager,http-nio-127.0.0.1-7200-exec-1]  Checking validity of certificate chain O=VMware, L=Palo Alto, ST=California, C=US, CN=example.com, SerialNumber=################
YYYY-MM-DD HH:MM:SS.271+0000 DEBUG [] [c.v.v.s.t.DynamicTrustManager,http-nio-127.0.0.1-7200-exec-1]  Certificate chain O=VMware, L=Palo Alto, ST=California, C=US, CN=example.com, SerialNumber=################ is valid
YYYY-MM-DD HH:MM:SS.277+0000 WARN  [] [c.v.v.v.c.h.i.HttpProtocolBindingBase,http-nio-127.0.0.1-7200-exec-1]  Asynchronous execution requested but no Executor configured. The request will be executed as synchronous one.
YYYY-MM-DD HH:MM:SS.301+0000 INFO  [] [c.v.e.s.c.c.v.vsphere.VsphereClient,http-nio-127.0.0.1-7200-exec-1]  Successfully logged in to Connecting to https://example.com:443/sdk
YYYY-MM-DD HH:MM:SS.301+0000 DEBUG [] [c.v.e.s.c.c.v.vsphere.VcManagerBase,http-nio-127.0.0.1-7200-exec-1]  Searching for powered on VM with address example.com
YYYY-MM-DD HH:MM:SS.435+0000 DEBUG [] [c.v.e.s.c.c.v.vsphere.VsphereClient,http-nio-127.0.0.1-7200-exec-1]  Destroying 1 open views
YYYY-MM-DD HH:MM:SS.441+0000 INFO  [] [c.v.e.s.common.util.NetworkService,http-nio-127.0.0.1-7200-exec-1]  Resolved FQDN example.com to an IP 10.1.0.0
YYYY-MM-DD HH:MM:SS.443+0000 DEBUG [] [c.v.v.s.c.s.SecurityConfigurationServiceImpl,http-nio-127.0.0.1-7200-exec-1]  Security config retrieved {"fipsMode":true}
YYYY-MM-DD HH:MM:SS.663+0000 INFO  [] [c.v.v.s.https.vapi.VapiClientFactory,http-nio-127.0.0.1-7200-exec-1]  Closed session for user [email protected] created on YYYY-MM-DD HH:MM:SS
YYYY-MM-DD HH:MM:SS.663+0000 ERROR [] [c.v.v.v.s.b.u.BrownfieldImportUtil,http-nio-127.0.0.1-7200-exec-1]  Could not extract vCenter network configuration for vCenter with address 'example.com'
java.lang.IllegalStateException: Could not extract vCenter network configuration for vCenter with address 'example.com'
        at com.vmware.evo.sddc.sddcmanager.helper.ColocatedVcVmDeploymentDataUtil.lambda$getVcVmNetworkConfig$10(ColocatedVcVmDeploymentDataUtil.java:171)
        at java.base/java.util.Optional.orElseThrow(Optional.java:403)
        at com.vmware.evo.sddc.sddcmanager.helper.ColocatedVcVmDeploymentDataUtil.getVcVmNetworkConfig(ColocatedVcVmDeploymentDataUtil.java:168)
YYYY-MM-DD HH:MM:SS.665+0000 ERROR [] [c.v.v.v.c.v.BrownfieldImportController,http-nio-127.0.0.1-7200-exec-1]  Failed to fetch vCenter network details from example.com during import operation
com.vmware.evo.sddc.orchestrator.exceptions.OrchTaskException: Failed to fetch vCenter network details from example.net during import operation
YYYY-MM-DD HH:MM:SS.665+0000 ERROR [] [c.v.v.v.c.v.BrownfieldImportController,http-nio-127.0.0.1-7200-exec-1]  Failed to fetch vCenter network details from example.com during import operation
com.vmware.evo.sddc.orchestrator.exceptions.OrchTaskException: Failed to fetch vCenter network details from example.net during import operation
        at com.vmware.vcf.vimanager.services.brownfield.util.BrownfieldImportUtil.fetchVcNetworkDetails(BrownfieldImportUtil.java:93)

Environment

VCF 9.X

Cause

The actual IP address of the vCenter is 10.0.1.0, but the NAT IP address 10.1.0.0 was used instead

Resolution

• All FQDNs used for the different components must be resolvable to an unique IP.
• NAT (Network Address Translation) for the vCenter Server IP is not supported.

Additional Information

Reference link: Import an Existing vCenter to Create a Workload Domain