VxRail: vCenter is Unable to Add a Node Back Using its FQDN
Résumé: After upgrade to 8.0.x, vCenter cannot add the node by its Fully Qualified Domain Name (FQDN), handshake errors; IP works, and a firewall blocking SSL traffic between vCenter and ESXi host is cause. ...
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Symptômes
Using the node's IP address works.
VCenter can reach the node on ports 443 and 22.
The user tried to generate the certificate on the node, but it still failed.
Reference Broadcom article VMware vSphere Update Manager had an unknown error while scanning host for upgrade on 6.7 U3
Vpxd.log:
2024-08-07T11:52:05.390Z info vpxd[250707] [Originator@6876 sub=vpxLro opID=lzjnobzy-1382-auto-12g-h5:70000638-d4] [VpxLRO] -- BEGIN lro-8542 -- datacenter-3 -- vim.Datacenter.queryConnectionInfoViaSpec -- 5221a2b0-37ba-501f-8a0a-96bb396d9578(52d9c116-18b2-4cc7-49a5-696a0a04ed45)
2024-08-07T11:52:05.696Z warning vpxd[252175] [Originator@6876 sub=IO.Connection opID=lzjnobzy-1382-auto-12g-h5:70000638-d4] Failed to SSL handshake; SSL(<io_obj p:0x00007fc0a92ff050, h:64, <TCP 'x.x.x.x : 59262'>, <TCP 'x.x.x.x : 443'>>), e: 104(Connection reset by peer), duration: 204msec
2024-08-07T11:52:05.696Z warning vpxd[252175] [Originator@6876 sub=HttpConnectionPool-000001 opID=lzjnobzy-1382-auto-12g-h5:70000638-d4] Failed to get pooled connection; <cs p:00007fc0d4858120, TCP:xxx.xxx.com:443 [xxx.xxx.com]>, SSL(<io_obj p:0x00007fc0a92ff050, h:64, <TCP 'x.x.x.x : 59262'>, <TCP 'x.x.x.x : 443'>>), duration: 305msec, N7Vmacore15SystemExceptionE(Connection reset by peer: The connection is terminated by the remote end with a reset packet. Usually, this is a sign of a network problem, timeout, or service overload.)
Cause
A firewall device was located between the vCenter and the ESXi host. The firewall is blocking SSL applications.
Résolution
Have the user engage their networking or security team to check for firewall policy settings.
If related traffic is blocked, they should see the relevant events on the firewall management page.
Informations supplémentaires
If you are facing this type of situation, you can also do a packet capture on vCenter and ESXi.
Produits concernés
VxRail, VxRail Appliance SeriesPropriétés de l’article
Numéro d’article: 000227682
Type d’article: Solution
Dernière modification: 14 sept. 2026
Version: 3
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.