NetVault 12.2 - Administration Guide

Table 18. Firewall filtering rules
From	To	TCP/UDP	Source port	Destination port
Server	Client	TCP	Connect ports for inter-machine connection setup specified on the NetVault Backup Server	20031
Client	Server	TCP	Connect ports for inter-machine connection setup specified on the NetVault Backup Clients	20031
Server	Client	TCP	Connect ports for message channels specified on NetVault Backup Server	Listen Ports for Message Channels specified on the NetVault Backup Clients
Client	Server	TCP	Listen ports for message channels specified on the NetVault Backup Clients	Connect Ports for Message Channels specified on the NetVault Backup Server
Server	Client	UDP	20031	20031
Client	Server	UDP	20031	20031
Server	Client	TCP	Listen ports for devices specified on the NetVault Backup Server and Clients	Connect ports for devices specified on the NetVault Backup Clients
Client	Server	TCP	Connect ports for devices specified on NetVault Backup Clients	Listen ports for devices specified on NetVault Backup Server and Clients

Firewall configuration example

This example illustrates the network port requirements for a NetVault Backup system with the following configuration:

•

Number of drives: 6

•

Number of clients with one plug-in: 10

•

Number of clients with two plug-ins: 2

Table 19. Example: Port requirement calculation
NetVault Backup machine	Port type	Requirement	Total ports	Example port range
Server (with locally attached storage device)	Connect ports for inter‑machine connection setup	Minimum two ports per client	24	50300-50323
	Connect ports for NetVault Backup message channels	Minimum three ports per client	40	50200-50239
	Listen ports for devices	Minimum two ports per drive	12	50100-50111
Client	Connect ports for inter‑machine connection setup	Minimum two ports per client (These ports can be the same as the ports specified on the server side.)	24	50300-50323
	Listen ports for NetVault Backup message channels	Minimum three ports per client	40	50500-50539
	Connect ports for devices	Minimum two ports per drive	12	50400-50411

The following table illustrates the firewall filtering rules for this system.

Table 20. Example: Firewall filtering rules
From	To	TCP/UDP	Source port	Destination port
Server	Client	TCP	50300-50323	20031
Client	Server	TCP	50300-50323	20031
Server	Client	TCP	50200-50237	50500-50537
Client	Server	TCP	50500-50537	50200-50237
Server	Client	UDP	20031	20031
Client	Server	UDP	20031	20031
Server	Client	TCP	50100-50111	50400-50411
Client	Server	TCP	50400-50411	50100-50111

Locating a client

The clients that reside in a different subnet are not included in the list of available clients. You can use the Find Machine option to locate and add such clients.

To locate and add a client that is not discovered automatically:

Start the client addition wizard, and then click Find Machine.

On the Find Client page, type the Fully Qualified Domain Name (FQDN) or IP address of the client, and click Find.

After the machine is located, complete Step 3 through Step 6 in the section Adding a client to the NetVault Backup Server.

NOTE: NetVault Backup reports an error if it fails to locate the specified client on the network. An error can occur for reasons such as the following:

•

The NetVault Backup software is not installed on the machine.

•

The NetVault Backup Service is not running on the machine.

•

The DNS lookup table or the machine’s host table cannot be contacted.

Checking communication through a firewall

When adding a client that resides outside the firewall, you can perform a firewall test to check if the server and client can communicate through the firewall. You can also perform this test to check connectivity for existing clients.

To check if the server and client can communicate through a firewall:

To check connectivity for new clients, start the client addition wizard, and then click Firewall Test.

— or —

To check connectivity for existing clients, open the Manage Clients page. Select the client, and then click Firewall Test.

In the Check Connection dialog box, provide the following details.

Table 21. Check connection
Option	Description
NetVault Client Name	For new clients, type the NetVault Backup name of the machine. For existing clients, the name is displayed as a read-only property.
NetVault Client Address	For new clients, type the IP address of the machine. For existing clients, the IP address is displayed as a read-only property.
UDP Port	The default UDP port for NetVault Backup. It is set to 20031. If you have configured NetVault Backup to use a different port, change this value.
TCP Port	The default UDP port for NetVault Backup. It is set to 20031. If you have configured NetVault Backup to use a different port, change this value.
Timeout	The timeout interval is set to 15 seconds by default.

Click Test. This command checks if TCP, UDP, and messaging connectivity is available between the server and client, and displays the result in the dialog box.


	IMPORTANT: The firewall test option checks the connectivity to the Stats Manager process on the specified server or client machine. If this process is not running on the client, the test fails. However, the client may still be accessible for backup. In any case, it is an abnormal situation and should be corrected.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

NetVault 12.2 - Administration Guide

Firewall filtering rules

Firewall configuration example

Locating a client

Checking communication through a firewall