vCenter Server becomes inaccessible after switching the network adapter on the VC VM from a portgroup on a standard switch to one on a virtual distributed switch

Products

• VMware vCenter Server

Issue/Introduction

• vCenter Server is connected to the management network over a standard switch (VSS)
  
  
• Attempting to Edit Settings on the vCenter VM and change the portgroup connected to the network adapter results in
  • The vSphere UI no longer works properly. It may show a connection problem or may appear to be connected but pages say that the user does not have permissions to access information that should be available. 
  • Pings fail to the vCenter server's management IP address
  • If VM settings are checked from the ESXi host client, the network adapter may appear to be properly connected to the target portgroup
• To restore vCenter to the management network, the adapter must be connected back to the VSS' portgroup again. This can be done in a browser connected to the host where the vCenter VM is running.

Cause

 

• vCenter Server VM requires a valid network connection to remain accessible.

• When its NIC is moved to a vDS port group with static or dynamic binding (rather than ephemeral), the port assignment depends on vCenter itself.

• Because vCenter is the VM being migrated, it cannot assign its own port, resulting in loss of connectivity.

• This creates a circular dependency: vCenter needs to be online to manage the vDS, but moving its NIC to the vDS disconnects it.

 

Resolution

 

• Connect the vCenter Server VM to an ephemeral port group on the vDS.

  • Ephemeral binding allows ESXi hosts to assign ports directly without requiring vCenter.

• Alternatively, add a temporary second NIC to the vCenter VM:

  • Keep one NIC on the vSS port group.

  • Connect the second NIC to the vDS ephemeral port group.

  • Verify connectivity before removing the vSS NIC.

  • Procedure:

 

1. 1. 1. Create an ephemeral port group on the vDS with the same VLAN as the vSS management port group.

      2. Edit the vCenter VM settings

      3. Add a second network adapter.

      4. Connect it to the ephemeral port group.

      5. Verify vCenter connectivity (ping, login).

      6. Once stable, remove the original NIC connected to the vSS port group.

 

 

Additional Information

For reference:

• Migrating from Standard to Distributed vSwitch
• Configuring Standard vSwitch (vSS) or virtual Distributed Switch (vDS) from the command line in ESXi
• Static (non-ephemeral) or ephemeral port binding on a vSphere Distributed Switch