BE and Firewall problems

[David_Grayston]

Hi,

I've done my best to read all the existing KB articles and forum postings but can't resolve my problem.

Our BE 9.1 server is behind a firewall and the workstations I need to backup are outside. I've set the TCP Dynamic port ranges. Test Runs are successful. But when I do a backup I get the following in the debug logs on the workstation:

588 1/20/2005 11:56:25: ndmpdDataConnect: Rant is attempting data connection on IP: 10.10.10.11
588 1/20/2005 11:56:25: ndmpdDataConnect: Rant is attempting data connection on Port: 21002
588 1/20/2005 11:56:46: ERROR: ndmpdDataConnect: connect error: 10060
588 1/20/2005 11:56:46: ndmpdDataConnect: Rant is attempting data connection on IP: 128.195.12.13
588 1/20/2005 11:56:46: ndmpdDataConnect: Rant is attempting data connection on Port: 21002
588 1/20/2005 11:57:07: ERROR: ndmpdDataConnect: connect error: 10060

It seems to try to connect to the private IP which won't work, and then to the public IP of the firewall device (not the public IP of the BE Server - one-to-one NAT).

The debug logs on the server show:

ac4 1/20/2005 11:56:25: OpenListenSocket: Media server IP address: b0a0a0a
ac4 1/20/2005 11:56:25: OpenListenSocket: Media server port: a52
ac4 1/20/2005 11:57:07: ERROR: Error: Cannot connect / not connected
ac4 1/20/2005 11:57:07: TF_InitMediaServerConnection: dataConnect failed with error code : 23

I'm stumped as to what to try next. David

[SANDEEP_PILLAY]

Backup Exec uses NDMP port 10000 to communicate between the media server and the remote server. Make sure that you have opened this port from both the machines so that they can communicate. Backup Exec uses atleast 2 ports for each resource to be backed make sure that you have opened enough ports for backup.

Please refer to the following technote:

- VERITAS Backup Exec (tm) 9.0 for Windows Servers has improved support for backups of remote computers.
http://seer.support.veritas.com/docs/255831.htm
You may also refer to the following technotes as an additional information.

- When using VERITAS Backup Exec (tm) 9.0, during a backup/restore job of a remote computer behind a firewall, the error "Unable to attach to one of the drives" may occur.
http://seer.support.veritas.com/docs/258334.htm

- All selections for a remote server in VERITAS Backup Exec (tm) 9.x for Windows Servers are unavailable for selection.
http://seer.support.veritas.com/docs/255500.htm
ADDITIONAL INFORMATION:

- How to change the default port used by the VERITAS Backup Exec (tm) 9.x Remote Agent for Windows Servers

http://seer.support.veritas.com/docs/255174.htm

We hope this will help.

[Abhinav_Bindroo]

No reply for 3 days