Return
-
Title
DMZ NetVault Server or Client Backups to DR4100/6000 device fail: Info & Troubleshooting -
Description
After introducing a hardware firewall, the NVBU Server or Clients behind the firewall can no longer back up the DR device's RDA container(s).A few possible errors seen:- "Failed to open a RDA connection to 'DR_HOSTNAME'. Error Code 6"
- "Error Code 27 'Connection Refused'
-
Cause
If there is a hardware DMZ firewall between the NVBU Server or Client and the DR device, the DR device must be ping-able, so ICMP must be allowed.DR Series system and RDS ports required for write operations:- Control channel uses TCP port 10011
- Data channel uses TCP port 11000
If the above are not allowed, then communications will fail. -
Resolution
Some Additional Troubleshooting:----------------------------** From the NetVault Server or Client:-- Can the NetVault Server or Client ping the IP of the DR device?-- Can the NetVault Server or Client ping the Hostname of the DR device?-- Does an 'nslookup' by IP from the NetVault Server or Client to the DR device succeed?-- Does an 'nslookup' by Hostname from the NetVault Server or Client to the DR device succeed?----------------------------** From the DR device:-- Does a 'ping' from the DR device back to the NetVault Server or Client succeed using the command below?network --ping --destination <NetVault Server or Client IP>-- Does an 'nslookup' from the DR device back to the NetVault Server or Client succeed using the command below?network --nslookup --destination <NetVault Server or Client hostname>----------------------------