Configuring the ESX Server host firewall for SSH

To ensure that the SSH service is enabled in the ESX Server firewall through the Virtual Infrastructure Client:

1.     Log in to the VirtualCenter or directly to the ESX Server host with the Virtual Infrastructure Client as an administrative user.

2.     Click the ESX Server from the inventory.

3.     Click the Configuration tab.

4.     Click the Security Profile Link.

5.     Review the Firewall properties and ensure that SSH Server is listed under Incoming Connections. If SSH Server is not listed:

a.     Click Properties.

b.     Select the SSH Server check box.

c.     Click OK.

Note: If you want to be able to use SSH from the ESX Server host, ensure that the SSH Client option is checked using the same steps as outlined above.

Alternatively to enable this from the ESX Server service console:

1.     Log in to the ESX Server service console as root .

2.     Type the following command to determine if the sshServer port is enabled on the firewall:

[root@server]# esxcfg-firewall -q sshServer
Service sshServer is blocked.

3.     Type the following command to open the firewall port in case it is blocked:

[root@server]# esxcfg-firewall -e sshServer

Note: To close the SSH server port, type esxcfg-firewall -d sshServer.

Note: If you want to be able to use SSH from the ESX Server host, sshClient must be enabled using the same steps as outlined above