vCenter network recovery: Distributed Switch connectivity loss

Products

• VMware vCenter Server

Issue/Introduction

• vCenter Server is inaccessible via network after an unplanned outage or restoration from a previous backup.
• The Distributed Virtual Switch (vDS) or specific management port groups are missing from the environment.
• Physical network adapter (vmnic) reports a "Link Down" state.
• Attempts to reconfigure network adapters on a vDS fail with: Invalid configuration for device '##'.
• Error: Addition or reconfiguration of network adapters attached to non-ephemeral distributed virtual port groups is not supported.

Environment

• VMware vSphere ESXi 7.x / 8.x
• VMware vCenter Server 7.x / 8.x
• vSphere Distributed Switch (vDS)

Cause

This issue occurs when vCenter is offline and cannot provide the required port bindings for static (non-ephemeral) port groups on a vDS. This often follows a restoration where the vCenter database does not match the current host vDS configuration.

Resolution

Build a temporary Standard Switch (vSS) to restore vCenter connectivity.

1. Identify the Port ID, vmnic, and vDS name: esxcli network vswitch dvs vmware list
2. Remove a vmnic from the vDS: esxcfg-vswitch -Q <vmnic> -V <PortID> <vDSName> (Note: If LACP is configured on the physical switch, break the LAG first.)
3. Add a new Standard Switch: esxcli network vswitch standard add --vswitch-name=Recovery-vSS
4. Create a recovery Port Group: esxcli network vswitch standard portgroup add --portgroup-name=Recovery-PG --vswitch-name=Recovery-vSS
5. Assign the removed vmnic to the new switch: esxcli network vswitch standard uplink add --uplink-name=<vmnic> --vswitch-name=Recovery-vSS
6. If using a tagged management VLAN, set the VLAN ID: esxcli network vswitch standard portgroup set --portgroup-name=Recovery-PG --vlan-id <VLAN_ID>
7. Log in to the ESXi host directly via the vSphere Client.
8. Edit vCenter VM settings and map the Network Adapter to the Recovery-PG.
9. Once vCenter is online, migrate networking back to the vDS and delete the Recovery-vSS.

Additional Information

• To prevent future lockouts, configure an Ephemeral Port Binding port group for the vCenter management network.
• For assistance, see Contact Broadcom Support.