Symptoms

You get the error Unable to connect to farm <...>. Please make sure that <...> is online and the RAS Redundancy Service is running when trying to connect to the tenant's console:

Cause

Firewall blocks connection on TCP port 20001 between tenant broker and tenant.

Resolution

Please allow inbound connections on TCP port 20001 on both tenant broker and tenant sides.