Thursday, August 5, 2010

VMware virtual machine NIC not working

For a Windows 2003 VM running on ESX appears to be ok, but cannot access the network. The NIC appears to be connected and server is functional, but pings fail.

If you check Windows event viewer, you will see an IPSec error like this:

Event ID 4292: The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions.

To fix, disable the IPSec service and reboot the VM.

If that does not work, as specified in the MS KB below, you will have to rebuild the registry policy.

To resolve this issue, delete the following registry subkey and then rebuild the policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Local

Delete the local policy registry subkey. To do this, follow these steps:

  1. Click Start, click Run, type regedit, and then click OK.
  2. In Registry Editor, locate and then click the following subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local
  3. On the Edit menu, click Delete.
  4. Click Yes to confirm that you want to delete the subkey.
  5. Quit Registry Editor

Rebuild a new local policy store. To do this, follow this step:

  1. Click Start, click Run, type regsvr32 polstore.dll, and then click OK.
References:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1000797

http://support.microsoft.com/kb/870910

No comments:

Post a Comment