Unable to SSH to vCenter server - connection fails with "network error: permission denied"
Article ID: 435805
Updated On:
Products
Issue/Introduction
- When attempting to connect to a vCenter Server via SSH, the connection fails with the error
network error: permission denied. - The SSH service is confirmed as "Running" in the vCenter Appliance Management Interface (VAMI), but connections from specific administrative workstations or jump boxes are rejected.
- You've already validated the vCenter firewall and there are no blocks for ssh port
- SSH access to the vCenter server is successful when initiated from a VM on the same subnet.
Environment
VMware vCenter Server
Cause
- This is an environmental networking issue since the SSH works from a VM on same subnet as the vCenter server.
- A firewall, Access Control List (ACL), or security software is blocking traffic on port 22 between the source and the vCenter Server.
Resolution
Verify local connectivity: Attempt to SSH to the vCenter Server from a virtual machine or host located on the same VLAN or subnet.
Confirm Service Status: Ensure the SSH service is enabled and the vCenter firewall is not configured to drop local traffic.
Check Intermediate Firewalls: If local connectivity works but the jumpbox fails, work with your internal network team to inspect the network path for port 22 blocks.
Test alternative targets: Attempt to SSH to the another VM or host within the same subnet as vCenter server from the same jumpbox. If this also fails, the issue is confirmed to be at the network layer.
If the issue persists even after confirming no blockage from the physical firewall or if you need any further assistance, feel free to open a case with Broadcom Support Team.
Additional Information
Feedback
