Open TCP port 8443 inbound to java nbwmc on the primary server (8.0 - 9.1).Open TCP port 8080 inbound to java nbwmc on the primary server (8.0 - 8.1.1).If using HTTP or HTTPS to access web services on the primary server: (new in 8.0).The TCP port for vnetd/13724 must be open bi-directional between the hosts.It must be configured on both the connecting and accepting hosts primary, media server, and/or client.If using the Resilient Network/Client feature for connections to legacy services: (7.5).For that reason, it is recommended that the TCP port for vnetd/13724 remain open bi-directional between NetBackup hosts. Note: The firewall behaviors described in the bullet above also apply to any other TCP port that is blocked, but attempted to be used. If the firewall returns an immediate TCP RESET, there will be minimal delay before the connction failure is detected.This will introduce delays before NetBackup can detect a connection failure. If the service cannot be reached via the TCP port for PBX/1556 and the TCP port for vnetd/13724 is blocked by a firewall which silently discards the TCP SYN packet, then the operating system connect() API will wait for TCP SYN retry/timeout before failing the connection attempt.
Hosts running NetBackup 7.x - 8.x will retry connections to legacy services via the TCP port for vnetd/13724 if the connection cannot be established via the TCP port for PBX/1556.Java/Windows admin consoles to primary and media servers requires the TCP port for PBX/1556, bi-directional.SAN Client to/from primary/media servers requires the TCP port for PBX/1556, bi-directional.Client to storage server requires the TCP ports for spad/10102 and spoold/10082 for Client Direct backup and restore.Clients require the TCP port for PBX/1556 to be open either to the primary server or to a media server that can act as a http proxy tunnel for web service calls (new in 8.1).Client to primary server requires the TCP port for PBX/1556 for Client Direct restores.Note: This includes all XBSA-based agents (e.g policy types DataStore, DB2, Informix, Oracle, SAP, SQL-Server, Sybase, Teradata, etc) and any clients that backup to schedules of type Application Backup, User Backup, or User Archive. Client to primary server requires the TCP port for PBX/1556 for client-initiated (user or application), but not server-initiated, operations.Media server to client requires the TCP port for PBX/1556.Media server to media server requires the TCP port for PBX/1556, bi-directional.TLS/SSL protocol must be allowed on the TCP port for PBX/1556 inbound to the primary server (new in 8.0).Primary server to client requires the TCP port for PBX/1556 if performing stream discovery, application discovery, or if the clients perform user-directed backup/archive/restore, or client-directed application backup/list/restore.Primary server to/from media servers requires the TCP port for PBX/1556, bi-directional.
SolutionThe TCP ports used by NetBackup in the default configuration are as follows: This does not include port requirements for communication with services that run on previous version hosts, remote EMM Server, or other legacy processes. Which TCP ports must be open through a firewall for NetBackup (NB) 7.x, 8.x and 9.x hosts to communicate with each other?
0 kommentar(er)
