I am facing a vSAN CVM Management Port (3261) Issues with Heartbeat Synchronization

[asshley675]

Hi everyone,

Few days back I was setting up vSAN CVM Free version with two ESXi 7 nodes in a cluster. Everything was working fine until I started noticing an intermittent issue with the management port (port 3261) randomly becoming unavailable. This is causing the CVM UI to report LUN availability problems, even though my iSCSI targets remain online and synchronized.
I was suspecting that a vulnerability scan from Greenbone's OpenVAS might be contributing to this issue. However, I am not entirely sure how to proceed in addressing this, because I read this article and I was not able understand anything:
[url=http://forums.starwindsoftware.com/viewtopic.php?t=6815]http://forums.starwindsoftware.com/viewtopic.php?t=6815

Has anyone experienced a similar issue or have any suggestions on how to fix this? It will be grateful for you help

[yaroslav (staff)]

Hi,

please exclude 3260 and 3261 from scans as it is interfering with the connectivity.

[elenagilbert]

I think vulnerability scans might be the culprit. You should exclude management ports (3260, 3261) from scans to prevent interference and resolve the issue.

[inboardsullen]

If you suspect OpenVAS is causing the problem, configure the vulnerability scanner to exclude port 3261 from its scans. This may prevent the scanner from interrupting the management port.

[yaroslav (staff)]

Please tune your scanners to fit StarWind's best practices.

[NaomiFowler]

try excluding the port from the scan, check for firewall or security policies blocking the port, and review your vSAN and ESXi configurations for stability. Additionally, check the logs for any related errors that could help pinpoint the cause of the problem.

[yaroslav (staff)]

Hi,

Thanks for your advice. Please see my answer above.

[DerrickGislason]

Hello
The cause of the problem is many, where do you think it lies mainly?

[yaroslav (staff)]

This is expected. 3261 port is used for management. Leave it be, please.

[amora321]

I'm curious if you've tried checking the logs in CVM or ESXi host, to determine if the time port 3261 lost connection coincides with OpenVAS scanning? Because if so, I think a temporary solution is to configure firewall or limit scanning IP can help you minimize the problem.