Zurück
-
Titel
Ports Used by Recovery Manager for AD (all editions) -
Beschreibung
List of ports used by Recovery Manager for AD in all editions
-
Lösung
The following table lists ports used by the Recovery Manager for AD components.
COMPONENT INCOMING PORT ON TARGET DOMAIN CONTROLLER PROTOCOL TRAFFIC Backup Agent (manual installation) • Specified at the time of Backup Agent installation.
– OR –
• Specified in the Recovery Manager for Active Directory Settings dialog box.
By default, this is port 3843.TCP Recovery Manager console connections Backup Agent (automatic installation) 135 TCP RPC Locator Service 389 TCP LDAP 445 or 139 TCP Active Directory Domain Services Online Restore Wizard (when using agent restore method) 135 TCP RPC Locator Service 389 TCP LDAP 445 (recommended by Microsoft) or 139 TCP Active Directory Domain Services RPC dynamic port range
For more information on these ports, refer to the following Microsoft Support Knowledge Base articles at http://support.microsoft.com:
• How to configure RPC to use certain ports and how to help secure those ports by using IPsec (article ID: 908472)
• How to configure RPC dynamic port allocation to work with firewalls (article ID: 154596)
• The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008 (article ID: 929851)TCP Restore Agent connections Online Restore Wizard (when using agentless restore method) 389 TCP LDAP 445 TCP Active Directory Domain Services Online Restore Wizard for AD LDS (ADAM) Specified at the time of AD LDS (ADAM) installation on target domain controller TCP AD LDS (ADAM) connections Group Policy Restore Wizard 135 TCP RPC Locator Service 389 TCP and UDP LDAP 445 (recommended by Microsoft) or 139 TCP Active Directory Domain Services Repair Wizard 135 TCP RPC Locator Service 445 (recommended by Microsoft) or 139 TCP Active Directory Domain Services Recovery Manager console 25 TCP Simple Mail Transfer Protocol 135 TCP RPC Locator Service 389 TCP and UDP LDAP 445 (recommended by Microsoft) or 139 TCP Active Directory Domain Services • Specified at the time of Backup Agent installation.
– OR –
• Specified in the Recovery Manager for Active Directory Settings dialog box.
By default, this is port 3843.TCP Recovery Manager console connections 52132 TCP Replication Specified at the time of AD LDS (ADAM) installation on target domain controller TCP AD LDS (ADAM) connections - The ports for the Backup, Repair and Restore agents only need to be open on the Agent side, no ports need to be open on the Console side
- To back up group membership data, Recovery Manager for AD Forest Edition may need to connect to all global catalogs in the forest on port 389.
- To restore group membership data, Recovery Manager for AD Forest Edition may need to connect to all global catalogs in the forest on TCP port 135 and RPC randomly allocated high TCP ports 1024 - 65535.
- For Forest Recovery ensure that outgoing and incoming traffic is allowed on RPC randomly allocated high TCP ports 1024 - 65535 on both the Recovery Manager for AD Forest Edition computer and the Domain Controller. This is in addition to the RPC port 135 which should be opened from the RMADFE console to the DC(s). The FE agent can be configufred to comunicate on a specific RPC Port, more information can be found in SOL229520. If a specific port is specified then instead of the RPC range, this defined port can be opened.
COMPONENT PORTS TRAFFIC DIRECTION Forest Recovery Console TCP/UDP 389 LDAP - From RMADFE Console to FE Agent on DC TCP 445 and TCP 139 SMB - From RMADFE Console to FE Agent on DC (assuming backups are stored on DC). If the backups used for Forest Recovery then the FE Agent will need to communicate to the server hosting the backups on port 445 and 139 TCP 3268 LDAP - From RMADFE Console to Global Catalog
TCP 135 RPC endpoint mapper - From RMADFE Console to FE Agent on DC TCP 1024 - 65535 RPC Dynamic Ports - Once RPC chooses a dynamic port, the port in this range will be used by the agent and console to communicate on. The FE agent can be configured to communicate on a specific RPC Port, more information can be found in SOL229520. If a specific port is specified then instead of the RPC range, this defined port can be opened. Forest Recovery Agent TCP 139 and 445 SMB - Access to backups created by Recovery Manager for AD Forest Edition. This needs to be opened from the DC to wherever the backups are stored. If they are stored on the DC then these ports only need to be opened inbound from the RMADFE console to the FE Agent on the DC(s) TCP 1024 - 65535 RPC Dynamic Ports - Once RPC chooses a dynamic port, the port in this range will be used by the agent and console to communicate on. The FE agent can be configured to communicate on a specific RPC Port, more information can be found in SOL229520. If a specific port is specified then instead of the RPC range, this defined port can be opened.