Failed to validate command when restoring VM

[wksantiago]

When restoring VM I am getting a "Failed to validate command..."

Error is:
****************************************************************************************************************************
Failed to restore item "vm"
Failed to start server agent on the host "vm"
Failed to validate command "OpenPortIn for firewall port 2508" feedback
/usr/sbin/esxcfg-firewall -o 2508,tcp,in,veeamAgent returned none-zero code
-2508/etc/vmware/firewall/ibmTSM.xml - Permission denied at /usr/sbin/esxcfg-firewall line 164
****************************************************************************************************************************

The ESX hos has Local storage and an iSCSI connection to a NAS. It gives me the same error on both local drives and iSCSI LUN

When restoring to an ESXi the restore goes well.

Any clues or logs I should be looking?

Thanks,

[Vitaliy S.]

Hello William,

It seems like you have a firewall issue, please check that all required ports are open for a ESX host. Then try to restore once again.

Thanks!

[wksantiago]

Nope no Firewall involved. Veeam Backup is in the same LAN as the Hosts....

[Vitaliy S.]

William,

I was referring to the firewall on the ESX host, so please check Configuration -> Security Profile using vSphere Client.

[wksantiago]

I see.

It has the following Profile:

Incoming Connections:
Tivoli Storage manager Agent 1500(TCP)
CIM Server 5988(TCP)
CIM SLP 427 (UDP,TCP)
CIM Secure Server 5989(TCP)
SSH Server 22 (TCP)
Outgoing Connections:
NTP Client 123(UDP)
Tivoli Storage manager Agent 1500(TCP)
VMware Consolidated Backup 443,902 (TCP)
CIM SLP 427 (UDP, TCP)
VMware vCenter Agent 902(UDP)
vCenter Update Manager (80, 9000-9100 (TCP)
Software iSCSI Client 3260 (TCP)

Is there something else that is needed?

[Vitaliy S.]

Hm...judging by the error:

Code: Select all

Failed to validate command "OpenPortIn for firewall port 2508" feedback
/usr/sbin/esxcfg-firewall -o 2508,tcp,in,veeamAgent returned none-zero code
-2508/etc/vmware/firewall/ibmTSM.xml - Permission denied at /usr/sbin/esxcfg-firewall line 164

The account that is being used to connect to ESX host doesn't have enough permissions to open port 2508 for a restore job. Please try to use root credentials (or try to enable "Elevate account to root" and "Add account to the sudoers file automatically" options) for connection to specified ESX host. You can do that by editing ESX host's properties in the Veeam console.

Hope it helps!

[wksantiago]

Thanks Vitaliy, that worked like a champ!