Return
-
Title
VMware NBD backups fail with: NBD_ERR_NETWORK_CONNECT - Error 13 "You do not have access rights to this file" -
Description
VMware backups consistently fail with:"Failed to open virtual disk"CONTEXT:[13] You do not have access rights to this fileVDDK logs show:VDDK: Cnx_Connect: Error message: Failed to connect to server esxi1.local:902VDDK: NBD_ClientOpen: Couldn't connect to esxi1.local:902 Failed to connect to server esxi1.local:902VDDK: DISKLIB-DSCPTR: : "vpxa-nfc://[datastore1] vm1/vm1-000002.vmdk@esxi1.local:902" : Failed to open NBD extent.VDDK: DISKLIB-LINK : "vpxa-nfc://[datastore1] vm1/vm1-000002.vmdk@esxi1.local:902" : failed to open (NBD_ERR_NETWORK_CONNECT).VDDK: DISKLIB-CHAIN : "vpxa-nfc://[datastore1] vm1/vm1-000002.vmdk@esxi1.local:902" : failed to open (NBD_ERR_NETWORK_CONNECT).VDDK: DISKLIB-LIB : Failed to open 'vpxa-nfc://[datastore1] vm1/vm1-000002.vmdk@esxi1.local:902' with flags 0x1e NBD_ERR_NETWORK_CONNECT (2338).VDDK: VixDiskLib: Unable to locate appropriate transport mode to open disk. Error 13 (You do not have access rights to this file) at 4905.VDDK: VixDiskLib: VixDiskLib_OpenEx: Cannot open disk [datastore1] vm1/vm1-000002.vmdk. Error 13 (You do not have access rights to this file) at 5026.VDDK: VixDiskLib: VixDiskLib_Open: Cannot open disk [datastore1] vm1/vm1-000002.vmdk. Error 13 (You do not have access rights to this file) at 5064.Failed to open vmdktelnet to esxi1 on port 902 also fails. -
Cause
Connections on ESXis NFC port 902 are not allowed, either due to firewall between the proxy and ESXis or ESXi networking configuration rules.Additionally this issue may also occur when the proxy server cannot resolve the ESXi name or IP. -
Resolution
1) Verify whether connections are possible to the ESXi on port 902:telnet esxi1 902should return the below message if connection is allowed:220 VMware Authentication Daemon Version 1.10: SSL Required, ServerDaemonProtocol:SOAP, MKSDisplayProtocol:VNC2) If telnet on port 902 works, but we still cannot connect to the ESXi during backup, verify forward and reverse DNS lookup resolve correctly for the ESXi from the backup proxy3) Using vSphere, edit the Networking section for the ESXi in question and ensure the backup proxy IP address is added to the list of allowed addresses for port 902 (NFC).Repeat for all ESXi servers and test the backup which should now complete.