NetBackup102 Network Ports Reference Guide
NetBackup102 Network Ports Reference Guide
Reference Guide
Release 10.2
NetBackup™ Network Ports Reference Guide
Last updated: 2023-03-17
Legal Notice
Copyright © 2023 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, Veritas Alta, and NetBackup are trademarks or registered trademarks
of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may
be trademarks of their respective owners.
This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
http://www.veritas.com
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan [email protected]
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
https://sort.veritas.com/documents
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community/
https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf
Contents
Index .................................................................................................................... 21
Chapter 1
About the NetBackup
network ports
This chapter includes the following topics:
By default, NetBackup uses ports from the ephemeral range for the source port.
Those ports are selected randomly from the range provided by the operating system.
Note: Configuring the Connect Options and other settings may change how source
and destination ports are selected. These settings and other non-default
configurations, are not discussed here. For details, see the NetBackup
Administrator's Guides, volume 1 and volume 2.
The following table lists the ports required by NetBackup to connect to various
services.
1 - It applies while you use the Resilient Network feature or when NetBackup 8.0
or earlier master server cannot reach a legacy service via PBX.
2 - This port is used to provide back-level media server support for the media servers
that are configured for cloud storage. Only media server versions 7.7.x to 8.1.2 are
supported.
NetBackup Ports 8
NetBackup media server ports
Ensure that the older media servers use this port. Communication with the master
server fails if the older media servers use a different port.
** It applies while you use the Resilient Network feature or when a NetBackup 8.0
or earlier media server cannot reach a legacy service via PBX.
+ This port is used to provide back-level media server support for the media servers
that are configured for cloud storage. Only media server versions 7.7.x to 8.1.2 are
supported.
Ensure that the older media servers use this port. Communication with the master
server fails if the older media servers use a different port.
When using the client-side deduplication, the client must also be able to
communicate with the MSDP media servers.
The following table lists the ports required by the client:
* It applies while you use the Resilient Network feature or when a NetBackup 8.0
or earlier client cannot reach a legacy service via PBX.
** Required while you use the Resilient Network feature.
performs network address translation (NAT). Such NetBackup clients are referred
to as NAT clients.
For more details on NAT support, refer to the NetBackup Administrator's Guide
Volume I.
NetBackup 8.3 and later versions support media servers in a private network that
are connected to the primary server in a public network through a device that
performs network address translation (NAT).
The TCP port used by the NetBackup Messaging Broker (nbmqbroker) service
must be open from the clients to the master server. The default port is 13781 unless
it is updated with the configureMQ command.
Note that the direction of connection initiation between servers and clients is
reversed. The TCP port for PBX/1556 must be open from the client to the servers
and need not be open from servers to clients.
For additional details see the article NetBackup support for NAT and PAT.
Note: The shutdown ports are honored only for local intra-host connections.
Therefore, they do not need to be open externally.
The HTTPS port (whichever is in use) should be open inbound to the primary server.
If the configurePorts script does not find one of the sets free (for example 8443
and 8205), it logs an error to the following file:
Windows:
NetBackup Ports 12
Configuring ports for the NetBackup legacy Web Services
install_path\NetBackup\wmc\webserver\logs\nbwmc_configurePorts.log
On UNIX and Linux, the following appears on the NetBackup system console:
configurePorts: WmcPortsUpdater failed with exit status <status_code>
When this error occurs, use the following procedure on the primary server to
manually configure the ports. The configurePorts command is in the following
location:
Windows:
install_path\NetBackup\wmc\bin\install\configurePorts
UNIX or Linux:
/usr/openv/wmc/bin/install/configurePorts
Note: NetBackup Web Services on the primary server require port 1024 or higher.
Do not use a port number that is less than 1024. Ports that are less than 1024 are
privileged and cannot be used with the NetBackup Web Services.
NetBackup Ports 13
Configuring ports for the NetBackup legacy Web Services
Example output:
You can configure one or two ports at a time. For example, to configure the
HTTPS port to 8553:
configurePorts -httpsPort 8553
Output:
Use this command as needed to configure a set of ports for HTTPS and
shutdown.
See Table 2-7 for a list of the port sets.
3 If the primary server is in a clustered environment, do the following:
■ Make sure that the same set of ports are free on all the cluster nodes: Do
step 1 on each node.
■ Reconfigure the ports on each node as required: Do step 2.
■ To override the ports that are used across all nodes, enter the following:
configurePorts –overrideCluster true
This command updates the following file on shared disk:
Windows:
install_path/NetBackup/var/global/wsl/portfile
UNIX or Linux:
/usr/openv/netbackup/var/global/wsl/portfile
The NetBackup installer for Web Services uses this file during installation
in a clustered mode.
Chapter 3
Other Network Ports
This chapter includes the following topics:
■ NetBackup 5200 and 5220 appliance ports (for firewall between master and
media server)
Note: MSDP with Client-Direct (client deduplication) and optimized duplication need
some ports to be opened.
During Client Direct restores, TCP port 1556 must be open between the NetBackup
client and the master server.
Other Network Ports 15
NetBackup 5200 and 5220 appliance ports (for firewall between master and media server)
Port Usage
10082 This is the NetBackup Deduplication Engine (spoold) port that is used by MSDP.
Open this port between:
10102 This is the NetBackup Deduplication Manager (spad) port that is used by MSDP.
Open this port between:
Ports 10082 and 10102 (MSDP) must also be open between the media server and
any storage servers that perform optimized duplications.
Note: If using Auto Image Replication (AIR) for optimized duplication, TCP ports
1556, 10082, and 10102 (MSDP) must be open between the NetBackup domains.
Note: For isolated recovery environment, TCP ports 1556, 10082, and 10102 are
required to be opened only at the NetBackup source domain.
NetBackup ISM+ 5020/5200 Appliance IPMI 5900 KVM CLI access, ISO &
CDROM redirection
Symantec RM* 5220/5x30 Appliance IPMI 5120 RMM ISO & CD-ROM
redirection
Note: Ports 7578, 5120, and 5123 are for the unencrypted mode. Ports 7528, 5124,
and 5127 are for the encrypted mode.
Open these ports outbound from the appliance to allow alerts and notifications to
the indicated servers.
Other Network Ports 17
NetBackup VMware ports
* This port number can be changed within the appliance configuration to match the
remote server.
443 NetBackup connects to TCP port 443 on the following VMware components:
Table 3-4 Ports used in NetBackup and the vSphere Web Client Plug-in
environment
Table 3-5 Ports that must be open in a Nutanix AHV cluster environment
Backup host TCP port 111 (port mapper) Nutanix AHV cluster
Backup host TCP port 9440 Nutanix AHV Prism Central server
Nutanix AHV cluster TCP port 111 (port mapper) Backup host
*Ports must be open bi-directional between AHV access host and AHV cluster. Port
9440 is open only inbound to the AHV cluster from the AHV access host.
Other Network Ports 19
Port requirements for Kubernetes operator deployment
Note: Review the Kubernetes configuration to ensure that the Kubernetes API server port
has not been changed from 443 to a non-default port; often 6443 or 8443.
Note: NetBackup Kubernetes Operator (KOps) and datamover pods have additional
requirements (new in NetBackup 10.0).
Kubernetes cluster TCP port 13724 bi-directional Primary and media server
if using Resilient Network.
The port number is defined in the CloudStore Service Container configuration file
(cloudstore.conf) as follows:
CSSC_PORT=5637
The configuration file resides in the following directory on the older media servers:
■ UNIX: /usr/openv/netbackup/db/cloud
■ Windows: install_pathVeritas\NetBackup\db\cloud
See the NetBackup Cloud Administrator's Guide for more details.
http://www.veritas.com/docs/DOC5332
Index
Symbols V
5200 and 5220 appliance 15 VERITAS_PBX
VNETD 5
C VMware ports 17
vSphere Web Client Plug-in ports 17
Client ports 8
CloudStore Service Container (nbcssc) port 19
W
D web UI ports 9
DataDomain ports 10
Deduplication 14
G
GRT ports 10
J
Java console ports 9
M
Master server ports 7
Media server ports 8
N
NAT and PAT 10
NDMP server ports 10
NetBackup CloudStore Service Container (nbcssc)
port 19
NetBackup ports 6
P
port numbers
CloudStore Service Container (nbcssc) 19
T
TCP ports 5