VCF 9.x new instance deployment fails at initial vCenter deployment phase
search cancel

VCF 9.x new instance deployment fails at initial vCenter deployment phase

book

Article ID: 443149

calendar_today

Updated On:

Products

VMware SDDC Manager / VCF Installer VMware Cloud Foundation

Issue/Introduction

VMware Cloud Foundation (VCF) deployment fails during the vCenter Server deployment phase. SDDC Manager (<IP-address>) cannot reach the target vCenter network (<IP-address>).

The VCF Installer shows the following or similar error messaging:

vCenter installation failed. Check logs under /var/log/vmware/vcf/domainmanager/ci-installer-##### for more details.

Environment

VMware Cloud Foundation 9.0.x
VMware vCenter Server 9.0.x
VMware SDDC Manager 9.0.x

Cause

Traffic is being dropped by an upstream physical firewall or Layer 3 gateway preventing bidirectional communication between the management subnet of the VCF Fleet and the target vCenter subnet.

Resolution

  • Engage the network administration team to verify routing tables on the Top of Rack (ToR) switches or upstream Layer 3 gateways. Ensure explicit routes exist between the Management subnet and the vCenter subnet.

  • Verify that no Access Control Lists (ACLs) or perimeter firewall policies are dropping the deployment traffic.

  • Configure the upstream network to allow bidirectional traffic for the following required ports and protocols:

    • TCP 22 (SSH)

    • TCP 443 (HTTPS)

    • TCP 5480 (VAMI)

    • ICMP (Echo Request and Echo Reply)

  • Confirm the physical switch ports connected to the target ESXi host uplinks are configured to trunk and pass the required vCenter VLAN.

  • Once bidirectional network reachability is validated, retry the vCenter Server deployment workflow from the VCF Installer appliance UI.

Additional Information

Security Design for the Management Domain for VMware Cloud Foundation

VMware Cloud Foundation - Ports and Protocols