Firewall and network port requirements
If a firewall is configured, ensure that the firewall settings allow access to the services and ports used by NetBackup Flex Scale.
Table: NetBackup Flex Scale ports and services
Port/Type/Direction | Source | Destination | Purpose |
|---|---|---|---|
22/TCP IN, OUT | SSH client machines | NetBackup Flex Scale management IP | SSH login to host and containers |
NetBackup Flex Scale Management IP | NetBackup Flex Scale Data IP | ||
53/TCP, UDP IN, OUT | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP | DNS servers | DNS resolution |
25/TCP IN, OUT | NetBackup Flex Scale Management IP | SMTP | Sending alerts mail (Email notifications) |
389 /TCP, UDP OUT | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP | LDAP | LDAP |
636/TCP, UDP OUT | |||
14161/TCP IN, OUT | NetBackup Flex Scale Management IP of both clusters | Console IP of both clusters Management server FQDN/IP of both clusters | Appliance NetBackup Flex Scale infrastructure management UI |
8443/TCP IN, OUT | Jump host/laptop IP to connect web UI | NetBackup Flex Scale Management IP | Cluster configuration web UI (used while configuring the cluster by connecting to a node using its public IP address) |
14155/TCP, UDP IN | NetBackup Flex Scale Management IP of both clusters | Heartbeat IP of both clusters | VCS Global Cluster Option (GCO) |
4001/TCP, UDP IN | Management Network Client IP Data Network Client IP Jumphost or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP | mountd NFS mount protocol |
755/TCP, UDP IN | Management Network Client IP Data Network Client IP Jump host or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NFS statd port |
757/TCP, UDP IN | Management Network Client IP Data Network Client IPJumphost or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NFS statd port |
756 TCP, UDP IN | Management Network Client IP Data Network Client IP Jump host or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NFS statd port |
4045/TCP, UDP IN | Management Network Client IP Data Network Client IP Jumphost or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | lockd Processes the lock requests |
6667/TCP IN, OUT | Management Network Client IP Data Network Client IP Jump host or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | VXRSH |
11211/TCP IN, OUT | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | Memcached port |
7443/TCP IN | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | Hostagent |
7080/TCP IN | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | Hostagent |
111/TCP, UDP IN | Management Network Client IP Data Network Client IP NetBackup Flex Scale Private IP Jumphost or laptop | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | RPC portmapper services |
8080/TCP IN | Management Network Client IP Data Network Client IP NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP NetBackup Primary server | One GUI NetBackup Flex Scale web UI |
67/TCP, UDP IN, OUT | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | DHCP |
68/TCP, UPD IN, OUT | |||
8514/TCP IN | NetBackup Flex Scale Management IP Management Network Client IP | NetBackup Flex Scale Management IP | Log transfer service |
2380, 2379/TCP IN | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | ETCD |
2049/TCP, UDP IN | NetBackup Flex Scale Data IP Media Server Data Network Client IP | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP Target Storage Server | DataDomain OpenStorage ports nfs++ |
20048/TCP, UDP IN | NetBackup Flex Scale Management IP Management Network Client IP | NetBackup Flex Scale Management IP | portmapper, NFS, and mountd |
445 /TCP IN | CIFS (for the Log/Install shares) | ||
139 /TCP IN | CIFS client to server communication | ||
161/TCP, UDP IN, OUT | Management Network Client IP Jump server or desktop SNMP Server for monitoring | NetBackup Flex Scale Management IP IPMI IP | SNMP |
60337/UDP IN | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | |
514/UDP IN, OUT | NetBackup Flex Scale Management IP | Syslog Server | rsyslog log forwarding |
123 /UDP IN,OUT | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP | NTP servers | NTP synchronization |
50000 to 50005/UDP IN, OUT | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | LLT |
5353/UDP IN, OUT | |||
51002/UDP IN, OUT | NetBackup Flex Scale Private IP | NetBackup Flex Scale Private IP | LLT over RDMA |
51001/UDP IN, OUT | |||
162/TCP IN, OUT | Jump server or desktop | NetBackup Flex Scale Management IP IPMI IP | SNMP Monitoring |
623/TCP IN | Jump server or desktop | IPMI IP | KVM (optional, used if open) |
17990/TCP IN | Jump server or desktop | IPMI IP | iLO |
17988/TCP IN | |||
80/TCP IN | Jump server or desktop | IPMI IP | HTTP |
8199/TCP IN, OUT | NetBackup Flex Scale Management IP of both clusters | NetBackup Flex Scale Management IP of both clusters Replication IP of both clusters | Used by Veritas Volume Replicator (VVR) for communication between the vradmind daemons on the Primary and the Secondary.(Required only when catalog replication is configured) |
4145/TCP, UDP IN, OUT | NetBackup Flex Scale Management IP of both clusters | NetBackup Flex Scale Management IP of both clusters Replication IP of both clusters | Volume Replicator Connection Server |
3269/TCP, UDP IN, OUT | All Clients All Vcenter Servers All ESXi Servers Jjump server or desktop All Primary Servers Ops Center NetBackup IT Analytics | NetBackup Flex Scale Data IP | LDAP GC SSLAD/LDAP SSL/TLS access |
8989/TCP IN, OUT | NetBackup Flex Scale Management IP of both clusters | NetBackup Flex Scale Management IP of both clusters Replication IP of both clusters | Volume Replicator Resync Utility |
You might need access to additional ports based on the NetBackup features that you plan to use. The following table lists the NetBackup ports and services that you might require for NetBackup Flex Scale. For more details about the ports that are used by NetBackup, see the Veritas NetBackup™ Network Ports Reference Guide on SORT.
Table: NetBackup ports and services
Port/Type/Direction | Source | Destination | Purpose |
|---|---|---|---|
13724/TCP IN, OUT | NetBackup Flex Scale Data IP NetBackup clients | NetBackup Flex Scale Data IP NetBackup clients | NetBackup vnetd (NetBackup Network service) |
443/TCP IN, OUT | Jump host/laptop IP to connect we bUI | NetBackup Primary IP NetBackup Flex Scale Data IP NetBackup Flex Scale Management IP | NetBackup web UI |
1556/TCP IN, OUT | NetBackup Primary IP All NetBackup media IP NetBackup clients | NetBackup Primary IP All NetBackup media IP | NetBackup PBX |
10101/TCP IN | Management Network Client IP Data Network Client IP NetBackup Flex Scale Private IP NetBackup Clients | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | MSDP Controller and Proxy |
10100/TCP IN | |||
10102/TCP IN, OUT | Management Network Client IP Data Network Client IP NetBackup Flex Scale Private IP NetBackup Clients | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | Deduplication Manager (spad) |
10082/TCP IN, OUT | Deduplication Engine (spoold) | ||
10086/TCP IN | NetBackup web service | ||
13786/TCP IN | NetBackup (OpsCenter report generation, primary server) | ||
13783/TC IN | NetBackup (nbatd, primary server, previously vopied) | ||
13782/TCP IN | NetBackup (bpcd, primary and media servers, clients) | ||
13701/TCP IN | Management Network Client IP Data Network Client IP NetBackup Clients | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NetBackup (vmd, Media servers) |
13702/TCP IN | NetBackup (robotic and control daemons, media servers) | ||
13703 to 13719/TCP IN | NetBackup services | ||
13720/TCP IN | NetBackup (bprd, primary server) | ||
13721 TCP IN | NetBackup (bpdbm, primary server) | ||
13722/TCP IN | NetBackup (nbazd, primary server, previously bpjava-msvc) | ||
13723/TCP IN | NetBackup (bpjobd, primary server) | ||
8446/TCP IN | Management Network Client IP Data Network Client IP NetBackup Flex Scale Private IP Copilot Client | NetBackup Flex Scale Management IP NetBackup Flex Scale Data IP NetBackup Flex Scale Private IP | NetBackup (Copilot) |
Note the following conventions used in the tables above:
NetBackup Flex Scale Management IP: IP address assigned to eth1 or bond interface (eth1,eth2)
NetBackup Flex Scale Data IP: Media, Storage, Primary Server IP address, Secondary Data Network IP address (IP assigned to eth5, eth7 or bond of eth5 and eth7)
NetBackup Flex Scale Private IP: IP address assigned to eth4, eth6
Management Network Client IP: Any machine that the customer wants to reach to NetBackup Flex Scale cluster nodes management IP for some business use case (Any Linux, Windows Machine or syslog server or monitoring server, jump host )
Data Network Client IP: Any NetBackup supported client machine that the customer wants to reach to NetBackup Flex Scale cluster nodes Data IP for some business use case. (Any Linux, Windows Machine, NBU Clients, DB clients, Fibre Channel Clients, VMware Clients, CloudCatalyst, CloudStore, Copilot, OpenStorage, Kubernetes, Microsoft SQL server, MySQL, Nutanix AHV, HBASE, Hadoop, Hyper-V, mongoDB, openStack, Oracle)