【问题描述】
在一次esxi 6.5补丁修复过程中，在DMZ区集群执行升级remediate时，报错提示：Host cannot download files from VMware vSphere Update Manager patch store. Check the network connectivity and firewall setup, and check esxupdate logs for details.
VUM logs also show bellow error stack:
‘HostUpdateDepotManager’ 14168 ERROR] [scanHost20, 371] result for host: esxihost2.domain.local (entity: host-9895) shows error :
-----Result Begin (esxihost2.domain.local)-----
1.50
4
Failed to download metadata.
http://192.168.1.123:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.0.0-metadata.zip
None
(‘http://192.168.1.123:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.0.0-metadata.zip’, ‘/tmp/tmptVJYa1’, ‘[Errno 12] Timeout: <urlopen error timed out>’)
You will see similar entries in vum-server.log as mentioned below,
vum-server.log
2019-04-17T18:39:26.421Z warning vmware-vum-server[7F1897F5D700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
2019-04-17T18:39:26.573Z warning vmware-vum-server[7F188936E700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
2019-04-17T18:39:26.593Z warning vmware-vum-server[7F188926A700] [Originator@6876 sub=Libs] SSL_Connect: SECURITY WARNING: Should use SSL_ConnectAndVerify instead
You will see similar entries in esxupdate.log as mentioned below,
Host cannot download files from VMware vSphere Update Manager patch store. Check the network connectivity and firewall setup, and check esxupdate logs for details.
[Errno 4] IOError: <urlopen error [Errno -3] Temporary failure in name resolution>’
【问题原因】
1、检查vUM的网络配置，发现默认端口采用9084
2、ESXi host is unable to communicate with Update Manager through port 9084.
【处理】
开启每台主机9084 端口到V’UM的通信
1、检查集群所在NSX edge上防火墙，将管理集群与DMZ集群之间开通9084端口。
2、如果网络打通麻烦，就考虑本地补丁生i就