The following table outlines the ports (bi-directional) that have to be opened for migration data traffic to flow:
Source |
Destination |
Ports (TCP) |
Application ID |
Remote access |
CMP |
3389 |
Ms-rdp |
CMP |
vCenter (source and target) |
443, 902 |
Ssl, VMware |
CMP |
Physical |
135, 1024-65000 |
Active-directory, ms-virtualserver-6500 |
CMP |
Converter |
443 |
Ssl |
CMP |
ESX |
443, 902 |
Ssl, VMware |
Converter |
Source |
22, 135, 137-139, 443, 445, 9089, 9090 |
Ssh, active-directory, ms-netlogon, ssl, swyx-cds, symantec-endpoint-manager |
Converter |
ESX |
443, 902, 903 |
Ssl, VMware, kazaa |
Converter |
vCenter (source and target) |
443 |
Ssl |
Source server |
ESX |
443, 902, 903 |
Ssl, VMware, kazaa |
Linux Helper VM |
Source Linux Machine |
22 |
Ssh |
The preceding mentioned ports are to be opened on firewall for migration activity.
ICMP must be available between the IaaS Migration Portal Components (CMP, Converter) and vCenter/source machines.