【問題描述】
在一次esxi 6.5補丁修復過程中，在DMZ區集羣執行升級remediate時，報錯提示：Host cannot download files from VMware vSphere Update Manager patch store. Check the network connectivity and firewall setup, and check esxupdate logs for details.
VUM logs also show bellow error stack:
‘HostUpdateDepotManager’ 14168 ERROR] [scanHost20, 371] result for host: esxihost2.domain.local (entity: host-9895) shows error :
-----Result Begin (esxihost2.domain.local)-----
1.50
4
Failed to download metadata.
http://192.168.1.123:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.0.0-metadata.zip
None
(‘http://192.168.1.123:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.0.0-metadata.zip’, ‘/tmp/tmptVJYa1’, ‘[Errno 12] Timeout: <urlopen error timed out>’)
You will see similar entries in vum-server.log as mentioned below,
vum-server.log
2019-04-17T18:39:26.421Z warning vmware-vum-server[7F1897F5D700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
2019-04-17T18:39:26.573Z warning vmware-vum-server[7F188936E700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
2019-04-17T18:39:26.593Z warning vmware-vum-server[7F188926A700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
You will see similar entries in esxupdate.log as mentioned below,
Host cannot download files from VMware vSphere Update Manager patch store. Check the network connectivity and firewall setup, and check esxupdate logs for details.
[Errno 4] IOError: <urlopen error [Errno -3] Temporary failure in name resolution>’
【問題原因】
1、檢查vUM的網絡配置，發現默認端口採用9084
2、ESXi host is unable to communicate with Update Manager through port 9084.
【處理】
開啓每臺主機9084 端口到V’UM的通信
1、檢查集羣所在NSX edge上防火牆，將管理集羣與DMZ集羣之間開通9084端口。
2、如果網絡打通麻煩，就考慮本地補丁生i就