HCX deployments require setting various ports for communication between services on the HCX appliance itself and between HCX pairs at the source and destination sites.

The following ports must be allowed in HCX deployments:

  • The source site firewalls must be configured to allow outbound connections to the destination HCX systems.

  • The destination site firewalls must be configured to allow inbound connections from the source HCX system.
  • Connections initiated from the source HCX to the destination HCX.

  • Connections within a single HCX site, either at the source or destination environment. These connections never traverse from source to destination or from destination to source.

  • Connections made when the HCX is added as a solution in a vRealize Operations installation.

For a complete list of network port and protocol requirements, see VMware Ports and Protocols.