You may also need to open port 9443 for (MGT1 <-- VC1) and (MGT1 <-- VC2), as I think the url for the actual web console is vc1.your.domain.here:9443 Are you able to see anything on the firewall ...