A virtual machine (VM) comes back from a reboot, a host reboot or a vSphere HA restart, and its network adapter shows as disconnected in the vSphere Client. The quick fix is to tick Connected and move on.
Ticking Connected is a change. It does not tell you why the adapter came up disconnected or whether it will happen again, and the checkbox alone does not show that the guest's network or its applications have recovered. Broadcom documents at least three different causes: a cleared setting, a port the host could not find, and a timing issue on ephemeral port groups. This guide shows how to tell them apart by reading the VM's settings and log. It changes nothing.
This guide is based on source research only. Nothing in it was run. VM, host and port group names below are fictional.
What Broadcom documents
| Source | What it says |
|---|---|
| KB 317134 (ESXi 7.x, 8.x, 9.x) | The cause is that "the Connect at Power On checkbox is deselected under the virtual machine network adapter device status". It can be left unchecked when the VM is created, or changed later. With it unchecked, the VM "starts disconnected" when "powered on, rebooted, or restarted during an HA failover". |
| KB 413851 (all versions) | A VM deployed from a template, cloned or restored from backup may have Connect At Power On not selected. The option "may be deselected for certain operations (like template deployment or restoration)" to avoid IP conflicts. The same can apply to a CD/DVD drive. |
| KB 436747 (vSphere 8.x) | After a VM is registered from the host command line, the adapter does not come up connected even though "Connect at Power on" is checked. The port group uses static port binding. vmware.log shows "failed to connect 'Ethernet0' to DV Port" and "Virtual device 'Ethernet0' will start disconnected". The host does not assign distributed switch port IDs without vCenter. |
| KB 368679 (ESXi 8.0.x, 7.0.x, 6.x) | On an ephemeral distributed port group, a host sync between the VM's power-off and its power-on can leave the adapter disconnected. This "happens to VMs with the configuration 'connect at power-on' selected for the network adapter as well". |
| KB 445427 (ESXi and vCenter 8.0.x) | After a host reboot, VMs across several VLANs lose their default gateway because the gateway is a firewall VM whose adapters "came up disconnected". It presents as "a broad, multi-VLAN outage rather than a single-VM problem". |
Two settings are involved, and neither one measures connectivity:
- Connected is the virtual device's connection state as observed now.
- Connect at power on is the configured intent for the device's state when the VM starts. KB 436747 and KB 368679 both describe adapters that came up disconnected with it selected, so it is an intent, not a guarantee.
The value you read today may not be the value at the incident start; it can have been changed since. Whether the guest actually reaches the network is a third, separate observation. KB 445427 asks for both settings to be checked on the gateway VM.
Before you start
- Read access to the VM's settings in the vSphere Client (Edit Settings, each Network adapter, Device Status). Open the dialog to read it, then cancel.
- Read access to the VM's
vmware.logfor the boot in question, through someone with datastore access. Reading it does not change the VM. Log lines name a device such asEthernet0(KB 436747); record how that device maps to the adapter in the settings, or record the mapping as unconfirmed. - The network behind each adapter: a standard switch port group or a distributed port group. Only for a distributed port group, read its port binding (static or ephemeral) from the port group's settings. The vSphere 8.0 page Edit General Distributed Port Group Settings defines static binding as assigning a port "when the virtual machine connects" and ephemeral as "No port binding". For a standard switch, record binding as "not applicable".
- How the VM got to its current state: newly deployed from a template, cloned, restored, registered from the host command line, a hypervisor power-off and power-on (from vCenter or from the host), a guest OS restart only, or an HA restart.
- Records from around that start, if retained: the VM's power-off and power-on tasks, any host sync or reconfigure of the adapter, and any change to the adapter's settings since. Without a dated configuration record from that start, today's checkbox is a current observation only. A missing entry in a task list does not show that the setting was unchanged.
Do not tick Connected, change Connect at power on, power-cycle, re-register or run a network test while you collect this. Each is a change, and power-cycling can destroy the timing evidence for the ephemeral case.
Step 1: record the device state, one record per adapter
| Field | Value |
|---|---|
| VM, host, ESXi and vCenter versions, observation time with time zone | As read |
| Adapter | Label as shown (for example Network adapter 1), its log device name (for example Ethernet0) and how that mapping was established, or "unconfirmed" |
| Network | Port group name; standard switch or distributed port group; the network the adapter is meant to be on |
| Port binding | Static or ephemeral for a distributed port group; "not applicable" for a standard switch |
| Connect at power on, as read now | Checked or unchecked |
| Connect at power on at the incident start | A dated configuration record showing this adapter's value at that start, or "unknown". The absence of a visible change or reconfigure entry is recorded as such, not as evidence of the value. |
| Connected, as read now | Checked or unchecked |
| Guest connectivity | Observed separately, or "not observed" |
| What happened before the boot | Template deployment, clone, restore, host command-line registration, hypervisor power-off and power-on (from vCenter or the host), guest OS restart only, host reboot or HA restart |
vmware.log for that boot, for this adapter's device |
Any line containing "will start disconnected" or "failed to connect" |
| Power, host sync and reconfigure records around that start | As retained, or "not available" |
On a VM with several adapters, keep a separate record for each. A log line for one device says nothing about another adapter.
If the adapter is missing from the VM's hardware list entirely, this guide does not apply. KB 425783 covers an adapter removed from inside the guest operating system, which is a different case from a disconnected one.
Step 2: match the record
| Record | Reading | Documented path (owner's change, not part of this guide) |
|---|---|---|
| Connect at power on is unchecked, and the record shows it was unchecked at the incident start (any network type) | Consistent with KB 317134: the adapter was set to start disconnected. After a template deployment, clone or restore, this may have been done deliberately (KB 413851). If only today's value is known, record "consistent, not confirmed for that start". | Confirm with the VM owner that the copy is safe to put on the network. Selecting Connect at power on, or connecting the adapter, is then a separate change decision. Selecting it affects the next start and is not evidence that the network has recovered. |
| Checked; distributed port group with static binding; the VM was registered from the host command line; this adapter's log shows "failed to connect ... to DV Port" | Consistent with KB 436747: the host could not find a distributed port for the adapter | KB 436747: unregister and register the VM through vCenter, not the host |
| Checked; distributed port group with ephemeral binding; retained records show the VM powered off, then powered on from the host, with a host sync between them and a reconfigure of this adapter after power-on | Consistent with KB 368679. On power-on from the host, the host gives the adapter a host-assigned port; vCenter then creates a normal port and reconfigures (rekeys) the adapter onto it. If a host sync captured the VM while still powered off, that reconfigure carries the "disconnected" state and disconnects the adapter. | KB 368679's resolution is a VM reboot, as a separately planned change for a matching case |
| Checked; ephemeral binding; those timing records are not available, or only the guest OS restarted | Candidate only, timing evidence missing. The absence of a "failed to connect" line is not evidence of the KB 368679 sequence. | Keep the record as unresolved. A reboot is not planned as if this were diagnosed. |
| Many VMs on several VLANs lose their gateway after one host reboot | A reason to read the gateway VM's adapters (KB 445427). The symptom alone does not show that a gateway adapter is the cause. | Record each gateway adapter separately; follow KB 445427 only if those records match it |
| Checked, and none of the above fits | Not explained by the cited sources | Keep the record and the log lines, and escalate |
The table is an editorial grouping of the KBs. The static and ephemeral rows apply only to an adapter on a positively identified distributed port group. For a standard switch port group, binding is not applicable, and only the first and last rows and the log apply. For static binding, this guide uses only the KB 436747 log signature and does not explain how vCenter assigns distributed ports.
Worked example (fictional)
fin-app-02 was restored from backup on Thursday afternoon and powered on. It has no network. It has one adapter. The record reads:
| Field | Value |
|---|---|
| Adapter | Network adapter 1; Ethernet0 in the log, the VM's only network device |
| Network | PG-FIN-120, distributed port group, static binding |
| Connect at power on, as read now | Unchecked |
| Connect at power on at the start | Unknown. No configuration record from that start is retained. The task list shows the restore and the power-on and no visible reconfigure, but its coverage of the interval since is not established. |
| Connected, as read now | Unchecked |
| Guest connectivity | Not observed; the adapter is disconnected |
| Before the boot | Restored from backup, then powered on |
vmware.log |
No "failed to connect" line for Ethernet0 |
Reading it:
- Connect at power on is unchecked now; its value at that start is unknown. A missing reconfigure entry does not show the setting was unchanged. The record is consistent with KB 317134, not confirmed for that start.
- The VM is a restore. KB 413851 says restore operations may clear this option on purpose to avoid IP conflicts.
- The question for the owner is whether the original
fin-app-02is still running on the same network. That is answered first. Selecting Connect at power on, and connecting the adapter, are then separate recorded changes, and network access is confirmed afterwards by its own check, not by the checkbox.
Contrasting record (fictional)
web-07 is restarted after patching. Its only adapter (Ethernet0) is on an ephemeral distributed port group. Connect at power on is checked, Connected is unchecked, and vmware.log has no "failed to connect" line. The VM was not re-registered. The patch record shows a guest OS restart only, and no power-off, power-on, host sync or reconfigure record is available for that start.
KB 368679's sequence needs a power-off, a power-on from the host and a host sync between them, so this record does not establish it. The case stays a candidate with timing evidence missing. Ticking Connected now would change the record, so it is captured first. Any reconnection or reboot is a separate owner decision, not a diagnosed fix.
Troubleshooting
| Symptom | Check | Avoid |
|---|---|---|
| A restored or cloned VM has no network | Connect at power on, then whether the original is still on the network (KB 413851) | Connecting the copy before you know |
| The adapter is disconnected after an HA restart | Connect at power on (KB 317134) | Assuming HA caused it |
| Connect at power on is checked but the adapter is still disconnected | Switch type, port binding (distributed port groups only), how the VM was registered and powered on, and this adapter's vmware.log lines |
Unchecking and rechecking the box to "reset" it |
| The checkbox looks wrong now, but was it at the boot? | Change and task records since that start | Treating today's value as the value at the incident |
vmware.log says the adapter "will start disconnected" after a failed DV Port connection |
Whether the VM was registered from the host command line (KB 436747) | Registering it from the host again |
| Many VMs on different VLANs lost their gateway after a host reboot | The Device Status of each of the gateway VM's adapters (KB 445427) | Troubleshooting each VM one by one, or naming the gateway as the cause from the symptom alone |
| The adapter is missing, not disconnected | KB 425783 | Following this guide |
Acceptance checks
- For each adapter: its identity and log device mapping (or "unconfirmed"), network type, binding (or "not applicable"), Connect at power on and Connected as read now, evidence of the setting at the incident start (or "unknown"), and what happened before the boot are recorded, with the VM, host, versions and observation time.
vmware.logfor that boot was read for "will start disconnected" and "failed to connect" for that adapter's device.- Each adapter is matched to one row in Step 2, marked as a candidate where the row's evidence is missing, or marked as not explained.
- For a restored or cloned VM, the owner confirmed the original is not on the same network before reconnecting.
- No adapter, VM power state, registration or network setting was changed while collecting the record.
- Any later reconnection is handed on as a separate change, and network recovery is confirmed by its own check, not by a checkbox.
Risk notes
- Connecting a restored or cloned copy can create a duplicate IP or MAC address on the network. KB 413851 explains that clearing Connect at power on can be deliberate for this reason.
- Re-registering a VM is a change to inventory. KB 436747 says to do it through vCenter, as a planned change.
- Rebooting the VM is an outage for that VM. It is KB 368679's resolution for a matching case, not a diagnostic step.
- A gateway VM's adapter state affects every VM behind it. KB 445427 shows how one disconnected adapter looks like a multi-VLAN outage.
These are source-documented behaviours. Expert review and a lab check are still needed before any change to a vSphere environment.
Learning notes
- Connected is the observed device state; Connect at power on is the configured intent for a start. Neither one measures whether the guest reaches the network.
- An unchecked Connect at power on explains a disconnected start only if it was unchecked at that start.
- Template deployments, clones and restores may leave the option unchecked on purpose.
- If the option is checked on a distributed port group, the binding and this adapter's log lines can point to a missing distributed port. The ephemeral host-sync case needs timing records; without them it stays a candidate.
- Keep one record per adapter. When many VMs lose their gateway at once, read each of the gateway VM's adapters first; the symptom alone does not prove the cause.
References
| Source | Version scope | Date |
|---|---|---|
| KB 317134: Virtual machine network adapters are unchecked after a reboot or High Availability failover | ESXi 7.x, 8.x, 9.x | Page metadata 23 April 2026; retrieved 2026-11-03 |
| KB 413851: Newly deployed or restored virtual machine unable to connect to the network or CD/DVD when powered on | All versions | Page metadata 10 October 2025; retrieved 2026-11-03 |
| KB 436747: VM's network adapter fails to connect post power on | vSphere 8.x | Page metadata 17 April 2026; retrieved 2026-11-03 |
| KB 368679: VNIC is disconnected after VM power on | ESXi 8.0.x, 7.0.x, 6.x | Page metadata 7 November 2024; retrieved 2026-11-03 |
| KB 445427: VM network adapters disconnected after ESXi host reboot | ESXi and vCenter 8.0.x | Page metadata 24 June 2026; retrieved 2026-11-03 |
| KB 425783: vnic disconnected after user removed it from guest OS | Not stated | Page metadata 7 October 2026; retrieved 2026-11-03 |
| Edit General Distributed Port Group Settings (supplementary: port binding meaning only) | vSphere 8.0 | Page shows "Last Updated October 28, 2026"; retrieved 2026-11-03 |
Related articles
- Duplicate IP or MAC address after a VM clone or restore, for what to check before a copy is connected.
- Static IP lost after a VM restore or virtual NIC change, for the guest side once the adapter is connected.