SSH SFTP Client Client NFS ISCSI SAN

abled) 22 (TC Remote P) SFTP over SS Tech S upport H to be E nabled )

NTP Server

Syslog Server

SMB DHCP Server Server

Bi-Directional RPC Communication on dynamic TCP ports required between all vCenters in Linked Mode (via ADAM)

Remote ESXi

VCO Client

VCO DB

Remote vCenter (SRM)

123 (U DP) NT 514 P Clien (UD t P) R em ote 44 Sys 5(T 68 log (U CP) logg SM DP ing BC )D om HC mu PR nic eq ati ue on sts & Re sp on se

22 (TCP) SS (Requires H Remote Te ch Suppor t to be En

3260 (TCP) Software ISCSI & Hardware ISCSI HBAs

ESXi Hosts

ity t SH gm ctiv e )S CP ost M onn sole (T c 22 P) H VM Con (TC ed M 43 Host t to V 4 ) P ien ( T C Cl 02 & VI 9 ) 443 PS ( HT T er to s ices eros brow Kerb ord Serv ect uth edir sw P) R AM AD A eros Pas TC 80 ( 8 (TCP) P th Kerb AD Auth 8 D Au UDP) PM AM A & CP) P 445 (TCP 464 (T S 53 (UDP) DN
443 (TCP) Required for VCB and vcbMounter Communication & Backup

Linked Linked Linked vCenter vCenter vCenter

8230(TCP) Lookup 8240(TCP) Command 8244(TCP) JBoss Data 8250(TCP) Messaging 8282(TCP) HTTP 8283(TCP) HTTPS

1521 (TCP) ORACLE -or1433 (TCP) MS SQL -or3306 (TCP) MySQL -or5432 (TCP) PostgresSQL

(Requir es

Internal

Inter nal

DK ) S on CP cati 3(T uni 44 m m Co

389 (TC P PAM A &UDP) LDAP D Auth & - Kerbe ros 161 (UD 162 (UD P) SNM P) SN 902 P MP Polling (UD Trap P) H Send ear tbe at

389 (TCP) Bi-Direction LDAP P) authentication with Kerberos Re dir encryption between vCenters AD Server ec tt oH 88 ,44 TT 5( PS TC (4 P& 43 UD ) P) DNS Server AD Au th 53 en (UD tic 443 (T P) D ati CP) R NS on equir Comm ed for VCB unica an d v VCB Proxy tion & cbMo unter Backu p 389 (TCP&UDP) LDAP (Optional) 636 (TCP) LDAPS (Optional)

80 ,44 3( TC

80, 443 (TCP) SRM communication with remote vCenter. (80 is used for the initial connectionto the remote site. After the initial HTTP connection is made, the two sites establish an SSL connection over 443 for subsequent connections)

r ppe o tma Por rage t to RPC DP) NFS S e P&U UDP) terfac (T C 111 (TCP& ernel In 9 204 VMK

ole ns P Co M ess HTT PS n e V Acc ces HTT atio i ot m nt rv es unic Re lie Se ic P) VI C eb erv mm (TC P) t W b S n co 03 (TC gm We ugi 2,9 43 M mt Pl 90 4 CP) Mg RM (T P) ) S 80 TC CP 80 43 ( 7(T 84 , 900 95 80

8280 (TCP) HTTP 8281 (TCP) HTTPS

902(TCP) Communicate VM files over NFC for IP customization/RDMs Site Recovery Manager

Orchestrator

Internal
External API Client

8123 (TCP) SOAP 9007(TCP) WSDL 9008(TCP) HTTP

LDAP Server

389 (TCP) LDAP

ing 161 (UDP) SNMP Poll p Send 162 (UDP) SNMP Tra

d an ion load t wn g M SR ica P) mun in Do oadin 1433 (TCP) MS SQL l g ( TC 95 Com r Plu own -or80 ter te r D ns n Cen fo Ico e 1521,1526 (TCP) Oracle vC P) v TTP and -orC P) H gin (T lu 96 (TC 5000 (TCP) IBM DB2 80 085 UI p 9

(T 902 CP) p es U Push

VMware vCenter Server

SNMP Server
902(TCP) Heartbeat & VI Client to VM Console 443(TCP) vCenter Agent 5989(TCP) CIM Transaction Communication 623(UDP) DPM with IPMI (iLO/DRAC)
VMware Data Recovery

25(TC P) Em a
25(TC P)

vMA (vCLI)
427 (UDP) CIM Service Location Protocol (SLP) 443(TCP) Host to Host VM Migration and Provisioning 902 (TCP&UDP) Authentication, Provisioning, VM Migration 5900-5964(TCP) RFC Protocol for Mgmt tools 5988,5989 (TCP) CIM Client to CIM Secure Server 8000 (TCP) vMotion Communication of VMKernel Interface 80,8100,8200 (TCP&UDP) VMware FT 8182 (TCP&UDP) VMware HA 8301(UDP) dVS Port Info

ter is the conv ersio n

TC

80,443 (TCP) ESXi to VUM Forwards to 9084 9084 (TCP) ESXi listen for updates. 9000-9100 (TCP) Use if 80,443 are unavailable. Opened for scanning and remediation

VUM DB

CP)

80,4 Metad 43 (TCP) ata fo r Upda tes Oracle (TCP) 1521 -orL MS SQ (TCP) 1433

Update Manager

13 5, 13 7-1 39 ,&

www.vmware.com

tion t to s nica mu eque en Com the r betwe VC rds on to a i M icat UM forw s P) V roxy mmun for VU te File p (TC 80 verse AP Co plugin Upda O e C Ho s t S P) R (TCP) and V ad (TC lo 443 8084 VUM P) Up (TC 87 90

4 808

n tio ica mt un Mg m m ry Co ove VC Rec & R ata vD D P ) CP ) C (T 4 (T 3 44 202 2

il Noti ficatio ns Email Notifi cation s 152 1 (T CP) O 143 3 (T -or- racle C P) MS SQL

SRM DB

P& UD P

targ et

44 5(

vCen

443( TCP) Sys

Guided Consolidation Targets

443 (T

Data Recovery Appliance

Req uire d if

s to date ES X i

SMTP Server

8005,8006,8086, 31000, 31100 (TCP) Internal Communications Port 8083, 8085, 8087 (TCP) Internal Service Diagnostics 443 (TCP) vCenter API (Orch) 8281 (TCP) vCenter API (Orch)

tem Co

Connections & Ports in vSphere 5

Including Site Recovery Manager, Data Recovery, VUM, VCB, Orchestrator, and Converter by Zachary Widing Follow on Linkedin: http://www.linkedin.com/in/zackwiding
Source: Basic Outline based on Dudley Smiths Connection & Ports v10Q3 Source: http://kb.vmware.com/kb/1012382 Source: This document was created using the official Vmware icon and diagram library. Copyright 2009 VMware

nver sion
443(TCP)

vCenter Converter Client (only required if Converter Client & Server installed on different systems

vCenter Converter

22(TCP) Linux Source 137,138(UDP) 139(TCP) Hot migration. Not Required if the source does not use NetBIOS 443(TCP) Required if Converter Client & Server are installed on different systems 445(TCP) Required for Conversion. Not Required if the source uses NetBIOS 9089(TCP) Remote Agent Deployment 443 (TCP) Required fo r Linux Sour ces 22 (TCP)

902(TCP) Data Transport during cloning of system to be converted to target ESXi 443(TCP) Destination VM access when target is ESXi or vCenter

nal Inter

Helper

r te en vC et if rg d Ta ire on qu rsi Re ve P) on TC C 3( he 44 is t

VC DB

Physical Machine

VMware Machine

3rd Party Machine

3rd Party System Images

Source