Comprehensive data protection for all workloads
Post Reply
wksantiago
Enthusiast
Posts: 36
Liked: never
Joined: Apr 02, 2009 6:36 pm
Full Name: William K. Santiago
Contact:

Failed to validate command when restoring VM

Post by wksantiago »

When restoring VM I am getting a "Failed to validate command..."

Error is:
****************************************************************************************************************************
Failed to restore item "vm"
Failed to start server agent on the host "vm"
Failed to validate command "OpenPortIn for firewall port 2508" feedback
/usr/sbin/esxcfg-firewall -o 2508,tcp,in,veeamAgent returned none-zero code
-2508/etc/vmware/firewall/ibmTSM.xml - Permission denied at /usr/sbin/esxcfg-firewall line 164
****************************************************************************************************************************

The ESX hos has Local storage and an iSCSI connection to a NAS. It gives me the same error on both local drives and iSCSI LUN

When restoring to an ESXi the restore goes well.

Any clues or logs I should be looking?

Thanks,
Vitaliy S.
VP, Product Management
Posts: 27343
Liked: 2784 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Failed to validate command when restoring VM

Post by Vitaliy S. »

Hello William,

It seems like you have a firewall issue, please check that all required ports are open for a ESX host. Then try to restore once again.

Thanks!
wksantiago
Enthusiast
Posts: 36
Liked: never
Joined: Apr 02, 2009 6:36 pm
Full Name: William K. Santiago
Contact:

Re: Failed to validate command when restoring VM

Post by wksantiago »

Nope no Firewall involved. Veeam Backup is in the same LAN as the Hosts....
Vitaliy S.
VP, Product Management
Posts: 27343
Liked: 2784 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Failed to validate command when restoring VM

Post by Vitaliy S. »

William,

I was referring to the firewall on the ESX host, so please check Configuration -> Security Profile using vSphere Client.
wksantiago
Enthusiast
Posts: 36
Liked: never
Joined: Apr 02, 2009 6:36 pm
Full Name: William K. Santiago
Contact:

Re: Failed to validate command when restoring VM

Post by wksantiago »

I see.

It has the following Profile:

Incoming Connections:
Tivoli Storage manager Agent 1500(TCP)
CIM Server 5988(TCP)
CIM SLP 427 (UDP,TCP)
CIM Secure Server 5989(TCP)
SSH Server 22 (TCP)
Outgoing Connections:
NTP Client 123(UDP)
Tivoli Storage manager Agent 1500(TCP)
VMware Consolidated Backup 443,902 (TCP)
CIM SLP 427 (UDP, TCP)
VMware vCenter Agent 902(UDP)
vCenter Update Manager (80, 9000-9100 (TCP)
Software iSCSI Client 3260 (TCP)

Is there something else that is needed?
Vitaliy S.
VP, Product Management
Posts: 27343
Liked: 2784 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Failed to validate command when restoring VM

Post by Vitaliy S. »

Hm...judging by the error:

Code: Select all

Failed to validate command "OpenPortIn for firewall port 2508" feedback
/usr/sbin/esxcfg-firewall -o 2508,tcp,in,veeamAgent returned none-zero code
-2508/etc/vmware/firewall/ibmTSM.xml - Permission denied at /usr/sbin/esxcfg-firewall line 164
The account that is being used to connect to ESX host doesn't have enough permissions to open port 2508 for a restore job. Please try to use root credentials (or try to enable "Elevate account to root" and "Add account to the sudoers file automatically" options) for connection to specified ESX host. You can do that by editing ESX host's properties in the Veeam console.

Hope it helps!
wksantiago
Enthusiast
Posts: 36
Liked: never
Joined: Apr 02, 2009 6:36 pm
Full Name: William K. Santiago
Contact:

Re: Failed to validate command when restoring VM

Post by wksantiago »

Thanks Vitaliy, that worked like a champ! :)
Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests