关于VMware ESX Server客户端连接不上等问题的解决
crond (pid 9701) is running...
Chain INPUT (policy ACCEPT 9169 packets, 4606K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 10249 packets, 7082K bytes)
pkts bytes target prot opt in out source destination
Incoming and outgoing ports blocked by default.
Enabled services: CIMSLP VCB swISCSIClient CIMHttpsServer vpxHeartbeats LicenseClient sshServer
Opened ports:
gpm (pid 9623) is running...
ipmi_msghandler module loaded.
ipmi_si_drv module loaded.
ipmi_devintf module loaded.
/dev/ipmi0 exists.
Table: filter
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
irqbalance is stopped
iSCSI driver is not loaded
Usage: /etc/init.d/megaraid_sas_ioctl {start|stop|restart}
vmware-hostd (pid 7750) is running...
/etc/init.d/microcode_ctl: reading microcode status is not yet supported
Usage: /etc/init.d/mptctlnode {start|stop|restart}
Configured devices:
lo eth1 eth2 vswif0
Currently active devices:
lo vmnic1 vmnic0 vmnic4 vmnic3 vswif0
rpc.mountd is stopped
nfsd is stopped
rpc.statd is stopped
nscd is stopped
ntpd is stopped
cimserver (pid 9748) is running...
portmap is stopped
The random data source exists
rdisc is stopped
saslauthd is stopped
smartd is stopped
snmpd is stopped
snmptrapd is stopped
sshd (pid 1967 1923) is running...
syslogd (pid 1717) is running...
klogd (pid 1721) is running...
Usage: (halt|reboot|start) {start}
The vmnixmod kernel module is loaded.
The VMkernel is loaded.
vmware-aam is not running[ OK ]
Usage: vmware-autostart {start|stop|restart}
none
VMware VMkernel authorization daemon is running (pid 9712).
vmware-vpxa is running
webAccess (pid 9650) is running...
winbindd is stopped
openwsmand (pid 9788) is running...
xinetd (pid 9614) is running...
ypbind is stopped
Nightly yum update is disabled.
A．
检查软件兼容性
vCenter Server软件版本号必需高于/等于置管ESX的版本 ；
vSphere Client软件版本号必需高于/等于被访问的vCenter版本；
vSphere Client软件版本号必需高于/等于被访问的ESX版本 ；
在使用Update Manager时必需保持vCenter、vSphere Client、Update Manager这三者的版本是一致的。
更多VI 架构组件的兼容性请查阅使用文档与以下软件兼容手册：
vSphere Compatibility Matrix
http://www.vmware.com/resources/compatibility/docs/vSphere_Comp_Matrix.pdf
VMware Infrastructure Compatibility Matrixes
http://www.vmware.com/pdf/vi3_35/esx_3/r35/vi3_35_25_compat_matrix.pdf
B．
检查网络：
1.使用PING命令测试网络连接，如果PING命令测试不成功。请检查：
vCenter与ESX所在的Vlan
检查vCenter和ESX的网关与网络配置
物理链路检查
2.
检查虚拟交换机配置
esxcfg-vswitch –l
esxcfg-vswif –l
esxcfg-nics –l
3.
检查服务器端口开放情况
查看ESX防火墙端口开放：esxcfg-firewall –q
查看服务器端口使用情况netstat -na
4.
检查物理交换机QOS配置
5.
vCenter到ESX的网络是否经过NAT地址转换
C．
检查存储状态，ESX是否BOOT FROM SAN
检查存储连接
vSphere Client –Configuration-Storage Adaptes
vSphere Client –Configuration-Storage
执行”esxcfg-mpatch -l”查看已连接的存储
执行”esxcfg-scsidevs –l”,查看已签名的SCSI设备
确认存储空间
在ESX执行”vdf -h”检查各分区存储使用情况
vSphere 4服务控制台的文件系统
查看存放Service Console的虚拟磁盘
#vsd –l
vsa0:0:0 /dev/sda
查找Service Console的VMDK路径
#vsd –g
/vmfs/volumesesxconsole.vmdk
D.
vCenter与ESX配置检查：
1.
vCenter与ESX系统的配置会影响到程序的正常运行
检查/etc/hosts文件的默认记录是否存在(hosts文件中127.0.0.1该条系统自带解析记录不可删除)
127.0.0.1 localhost.localdomain localhost
2.
查看HOSTD与VPXA进程是否正在运行
#ps –ef | grep hostd
#ps –ef | grep vpxa
（如果HOSTD与VPXA程序没有在运行，可直接执行以下命令启动：
启动HOSTD：
# /bin/sh /usr/bin/vmware-watchdog -s hostd -u 60 -q 5 -c /usr/sbin/vmware-hostd-support /usr/sbin/vmware-hostd /etc/vmware/hostd/config.xml –u
启动VPXA
#/bin/sh /opt/vmware/vpxa/bin/vmware-watchdog -s vpxa -u 30 -q 5 /opt/vmware/vpxa/sbin/vpxa
3.
重新启动HOSTD与VPXA检查程序是否异常
#service mgmt-vmware restart
#service vmware-vpxa restart
（重启如果提示如下，说明重启服务正常
[root@vsphere1 ~]# service mgmt-vmware restart
Stopping VMware ESX Management services:
VMware ESX Host Agent Watchdog [ OK ]
VMware ESX Host Agent [ OK ]
Starting VMware ESX Management services:
VMware ESX Host Agent (background) [ OK ]
Availability report startup (background) [ OK ]
[root@vsphere1 ~]# service vmware-vpxa restart
Stopping vmware-vpxa: [ OK ]
Starting vmware-vpxa: [ OK ]）
它们的工作目录在/etc/init.d/，如果不能正常启动服务请查看KB :http://kb.vmware.com/kb/ 1003490
4.
审核vpxa代理配置文件：
文件地址:/etc/opt/vmware/vpxa/vpxa.cfg
5.
审核hostd配置文件：
文件地址:/etc/vmware/esx.conf
6.
在vCenter指定管理ESX的地址
Vi client—login to vCenter—Administration—vCenter Server Settings—Runtime Settings—Managed IP Address—vCenter Server Managed IP:
7.
检查vCenter的SSL验证
Vi client—login to vCenter—Administration—vCenter Server Settings—SSL Settings—去掉”vCenter requires verified host SSL certificates”的勾选。
综上：如果仔细检查并执行以上每一项没有问题，但是ESX在vCenter中状态依旧不正常，请执行以下操作：
1. 使用VI Client连接到vCenter
2. 停止该cluster的 HA与DRS
3. 右键有故障的ESX -> Disconnect -> 再次右键将该ESX从vCenter上移除
4. 使用root用户登录到ESX执行以下操作
i. 执行命令停止系统管理服务的运行
service mgmt-vmware stop
service vmware-vpxa stop
ii. 删除vpxa Agent程序
rpm –qa |grep vpxa
rpm –e <上一条指令返回的结果>
iii. 将vpxa旧的配置文件改名
Esx 3.5 配置文件的路径
mv /etc/opt/vmware/vpxa/vpxa.cfg /etc/opt/vmware/vpxa/vpxa.cfg.old
Esx 4.0 配置文件的路径
mv /etc/opt/vmware/vpxa/vpxa.cfg /etc/opt/vmware/vpxa/vpxa.cfg.old
5. 登录ESX 的命令行终端：
#service iptables stop
# chkconfig --level 35 iptables off
6. service mgmt-vmware start
7. 重新将ESX添加到vCenter
8. 启用HA与DRS