RHEL/CentOS 7 and later Firewall - How to add firewall rules for NetVault in a Firewalld (4040609)

Red Hat/CentOS 7 and later use firewalld replacing IPtables.

Firewalld / IPtables is in use on the client and/or the NV Server and rules must be added or else backups/restores will fail.

From a linux client you can either accept everything from the NetVault Server using:

firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="NVServerIP" accept"
firewall-cmd --reload

OR use only source/destination ports:

firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT \ 0 -m tcp -p tcp --dport 20031:20131 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT \ 0 -m udp -p udp --dport 20031:20131 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT \ 0 -m tcp -p tcp --sport 20031:20131 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT \ 0 -m udp -p udp --sport 20031:20131 -j ACCEPT
firewall-cmd --reload

If you use the second part of the resolution then you need to use the txtconfig utility to set the ports to be used by the client and check "Client is outside firewall" option in WebUI Manage Client