VMware ESXi Host Configuration Guide (v6.7, 7.0 & 8.0) for VMMakers
To establish a fast and secure connection between VMMakers and your VMware ESXi virtualization host, configure firewall ports and service credentials as outlined below.
1. Required Firewall Ports:
Ensure the following TCP ports are open between your management server and ESXi host:
- TCP 443 (HTTPS): Main VMware vSphere API and pyVmomi control calls.
- TCP 902 (Auth & NFC): VMware authentication daemon and remote console validation.
- TCP 8333 (HTML5 Web Console): Secure WebSocket proxy for web browser console access.
2. Service User Privileges:
You may use the root account or create a dedicated administrative user with the following role privileges:
VirtualMachine.Interact.*(Power On, Power Off, Reset, Guest Operations)VirtualMachine.Config.*(Add Disk, Edit Memory, CPU Reconfiguration)Datastore.AllocateSpace(Cloning and snapshot provisioning)Network.Assign(Binding VM network interfaces to port groups)
3. Virtual Switch & Port Group Setup:
Under Networking → Port Groups on ESXi:
- Ensure your standard vSwitch (e.g.
vSwitch0) has promiscuous mode and MAC address changes enabled if assigning multiple IPs or routed subnets. - Assign the correct VLAN ID (or 0 for untagged traffic).
- Verify that the VM Network name matches the network defined in your VMMakers IP pool.
4. Datastore & Storage Configuration:
We strongly recommend using Thin Provisioning on SSD/NVMe datastores to maximize disk efficiency and enable instantaneous template cloning.
