VMware VS4-ENT-PL-A Setup Guide - Page 116

Linked Mode Troubleshooting, Con Firewall Access by Opening Selected Ports

Page 116 highlights

vSphere Installation and Setup Linked Mode Troubleshooting If you are having trouble with your Linked Mode group, consider the following points. When you have multiple vCenter Server instances, each instance must have a working relationship with the domain controller and not conflict with another machine that is in the domain. Conflicts can occur, for example, when you clone a vCenter Server instance that is running in a virtual machine and you do not use sysprep or a similar utility to ensure that the cloned vCenter Server instance has a globally unique identifier (GUID). If the domain controller is unreachable, vCenter Server might be unable to start. You might be unable to change the Linked Mode configuration of the affected vCenter Server system. If this occurs, resolve the problem with the domain controller and restart vCenter Server. If resolving the problem with the domain controller is impossible, you can restart vCenter Server by removing the vCenter Server system from the domain and isolating the system from its current Linked Mode group. The DNS name of the machine must match with the actual machine name. Symptoms of machine names not matching the DNS name are data replication problems, ticket errors when trying to search, and missing search results from remote instances. NOTE Make sure your Windows and network-based firewalls are configured to allow Linked Mode. Configure Firewall Access by Opening Selected Ports vCenter Server uses Microsoft ADAM/AD LDS to enable Linked Mode, which uses the Windows RPC port mapper to open RPC ports for replication. When you install vCenter Server in Linked Mode, the firewall configuration on any network-based firewalls must be modified. Incorrect configuration of firewalls can cause licenses and roles to become inconsistent between instances. Procedure u Configure Windows RPC ports to generically allow selective ports for machine-to-machine RPC communication. Choose one of the following methods. n Change the registry settings. See http://support.microsoft.com/kb/154596/en-us. n Use Microsoft's RPCCfg.exe tool. See http://support.microsoft.com/kb/908472/en-us. Configuring VMware vCenter Server - tc Server Settings in vCenter Server Starting with vCenter Server 5.1, VMware Tomcat Server settings can no longer be configured through the Windows user interface. vCenter Server versions 5.1 and later use VMware vCenter Server - tc Server, an enterprise version of Apache Tomcat 7. Tomcat version 7 does not provide a control panel in the Windows user interface. Instead, you configure Tomcat by editing configuration files manually. You can adjust the JVM maximum heap size for vCenter Server,vCenter Inventory Service, and ProfileDriven Storage Service. For JVM heap size recommendations, see "Hardware Requirements for vCenter Server, the vSphere Web Client, vCenter Inventory Service, and vCenter Single Sign-On," on page 17. Settings for Java options are stored in the following files. n vCenter Server. installation_directory\VMware\Infrastructure\tomcat\conf\wrapper.conf n vCenter Inventory Service. installation_directory\VMware\Infrastructure\Inventory Service\conf\wrapper.conf 116 VMware, Inc.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276

Linked Mode Troubleshooting
If you are having trouble with your Linked Mode group, consider the following points.
When you have multiple vCenter Server instances, each instance must have a working relationship with the
domain controller and not conflict with another machine that is in the domain. Conflicts can occur, for
example, when you clone a vCenter Server instance that is running in a virtual machine and you do not use
sysprep or a similar utility to ensure that the cloned vCenter Server instance has a globally unique identifier
(GUID).
If the domain controller is unreachable, vCenter Server might be unable to start. You might be unable to
change the Linked Mode configuration of the affected vCenter Server system. If this occurs, resolve the
problem with the domain controller and restart vCenter Server. If resolving the problem with the domain
controller is impossible, you can restart vCenter Server by removing the vCenter Server system from the
domain and isolating the system from its current Linked Mode group.
The DNS name of the machine must match with the actual machine name. Symptoms of machine names not
matching the DNS name are data replication problems, ticket errors when trying to search, and missing
search results from remote instances.
N
OTE
Make sure your Windows and network-based firewalls are configured to allow Linked Mode.
Configure Firewall Access by Opening Selected Ports
vCenter Server uses Microsoft ADAM/AD LDS to enable Linked Mode, which uses the Windows RPC port
mapper to open RPC ports for replication. When you install vCenter Server in Linked Mode, the firewall
configuration on any network-based firewalls must be modified.
Incorrect configuration of firewalls can cause licenses and roles to become inconsistent between instances.
Procedure
u
Configure Windows RPC ports to generically allow selective ports for machine-to-machine RPC
communication.
Choose one of the following methods.
n
Change the registry settings. See
.
n
Use Microsoft's
RPCCfg.exe
tool. See
.
Configuring VMware vCenter Server - tc Server Settings in vCenter
Server
Starting with vCenter Server 5.1, VMware Tomcat Server settings can no longer be configured through the
Windows user interface. vCenter Server versions 5.1 and later use VMware vCenter Server - tc Server, an
enterprise version of Apache Tomcat 7. Tomcat version 7 does not provide a control panel in the Windows
user interface. Instead, you configure Tomcat by editing configuration files manually.
You can adjust the JVM maximum heap size for vCenter Server,vCenter Inventory Service, and Profile-
Driven Storage Service. For JVM heap size recommendations, see
“Hardware Requirements for vCenter
Server, the vSphere Web Client, vCenter Inventory Service, and vCenter Single Sign-On,”
on page 17.
Settings for Java options are stored in the following files.
n
vCenter Server.
installation_directory
\VMware\Infrastructure\tomcat\conf\wrapper.conf
n
vCenter Inventory Service.
installation_directory
\VMware\Infrastructure\Inventory
Service\conf\wrapper.conf
vSphere Installation and Setup
116
VMware, Inc.