If you have a firewall between two ESXi hosts and you want to allow transactions between the hosts or use vCenter Server to perform any source or target activities, such as VMware High Availability (HA) traffic, migration, cloning, or vMotion, you must configure a connection through which the managed hosts can receive data.

To configure a connection for receiving data, open ports in the following ranges:

902 (server-to-server migration and provisioning traffic)

2050–2250 (for HA traffic)

8000 (for vMotion)

8042–8045 (for HA traffic)

Refer to the firewall system administrator for additional information on configuring the ports.