Johans2
2 Iron

Ports to be open to backup client in DMZ

Jump to solution

Hi,

I have to backup data stored on a server having Legato client running but that machine is in another DMZ than the Legato server.

Which ports or range of ports do i have to open on the firewall to be able to backup that server ?

Rgds,

Johan

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Mark_Bellows
3 Argentium

Re: Ports to be open to backup client in DMZ

Jump to solution

Hi Johan

The information you need can be found in the attached file, or from Powerlink at Support > Technical Documentation and Advisories > Software ~ J-O ~ Documentation > NetWorker Family > Technical Notes. The document is titled Configuring TCP Networks and Network Firewalls for EMC NetWorker.

On page 4, the following information is provided:

Reserved ports

The NetWorker host performs backups and recoveries by using a number of TCP ports (service and connection ports). Two of the TCP ports, 7937 and 7938, are reserved by the NetWorker host and are used as follows:

- Port 7937 as a service port for the nsrexecd daemon.

- Port 7938 as a service port for the EMCR NetWorker portmapper.

The EMC NetWorker portmapper (also referred to as lgtomapper) runs as a thread of the nsrexecd daemon.

In addition, port 514 is used as a fallback connection if communication with nsrexecd cannot be established. To avoid potentially slow performance with the connection, ensure that port 514 is not blocked.

Please read the ENITRE document to gain a better understanding on how NetWorker ports can be configured to meet your needs.

Mark Bellows

2 Replies
Highlighted
Mark_Bellows
3 Argentium

Re: Ports to be open to backup client in DMZ

Jump to solution

Hi Johan

The information you need can be found in the attached file, or from Powerlink at Support > Technical Documentation and Advisories > Software ~ J-O ~ Documentation > NetWorker Family > Technical Notes. The document is titled Configuring TCP Networks and Network Firewalls for EMC NetWorker.

On page 4, the following information is provided:

Reserved ports

The NetWorker host performs backups and recoveries by using a number of TCP ports (service and connection ports). Two of the TCP ports, 7937 and 7938, are reserved by the NetWorker host and are used as follows:

- Port 7937 as a service port for the nsrexecd daemon.

- Port 7938 as a service port for the EMCR NetWorker portmapper.

The EMC NetWorker portmapper (also referred to as lgtomapper) runs as a thread of the nsrexecd daemon.

In addition, port 514 is used as a fallback connection if communication with nsrexecd cannot be established. To avoid potentially slow performance with the connection, ensure that port 514 is not blocked.

Please read the ENITRE document to gain a better understanding on how NetWorker ports can be configured to meet your needs.

Mark Bellows

tech88kur
3 Argentium

Re: Ports to be open to backup client in DMZ

Jump to solution

If the firewall is between the VADP proxy host and ESX server hosting VM client machines,

ensure that bi-directional TCP/IP connections can be established on port 902 between the

VADP proxy host and the ESX servers.

Port 443 should be open bidirectional between NetWorker server and vCenter server.

and

Ports --> 7937-9936, 514 and 111 bidirectionally