cancel
Showing results for 
Search instead for 
Did you mean: 

Backup a server on dmz from lan

EranB-IL
Not applicable
Hi all

My backup server is in the lan .
i want to back up a server that is located on DMZ
all ports from lan to DMZ are open, but the backup program
fails to contact the agent on the remote server.
which port is needed to be open from dmz to lan to make the agent contact the backup server in the lan?
(when i opend all ports from dmz to lan it worked)

i use backup exec 9.1

thank you .
5 REPLIES 5

Keith_Langmead
Level 6
Have a look at http://seer.support.veritas.com/docs/243104.htm, it says it's written for v8.6, but the networking principles shouldn't be any different, and I haven't come across a technote for the more recent versions.

SANDEEP_PILLAY
Level 6
Hi,

In additionto the above reply, please refer to the following technotes:

- VERITAS Backup Exec (tm) 9.0 for Windows Servers has improved support for backups of remote computers.
http://seer.support.veritas.com/docs/255831.htm

- All selections for a remote server in VERITAS Backup Exec (tm) 9.x for Windows Servers are unavailable for selection.
http://seer.support.veritas.com/docs/255500.htm

- How to change the default port used by the VERITAS Backup Exec (tm) 9.x Remote Agent for Windows Servers
http://seer.support.veritas.com/docs/255174.htm

We hope this will help.

Abhinav_Bindroo
Level 6
Assuming the solution provided is correct. Also, there is no response from the customer within 2 days from the last reply by Veritas

Herbert_Aquino
Not applicable
I'm also having this same issue. I worked with tech support and she suggested opening certain TCP ports from our internal network to the DMZ - pretty much the same advice I got from several support articles. Finally, out of frustration, we opened all ports bidirectionally and we are still having issues. The servers on the DMZ are not part of the Domain.

Blab_Cap
Not applicable
I'm relatively new to BE but quite familiar with other backup products and windows though.
DMZ backup bacame a challenge issue in our organization.
I want to find the answer because we want to use BE as the unified platform for our organization the way we want it.

So far I found erroneous statements in BE docs regarding the ports.

Here're a few snippets from the logs:
"Network control connection is established between 172.xx.162.50:3039 <--> 172.xx.163.104:10000
Network data connection is established between 172.xx.162.50:3074 <--> 172.xx.163.104:3341
...
Network control connection is established between 172.xx.162.50:3039 <--> 172.xx.163.104:10000
Network data connection is established between 172.xx.162.50:3229 <--> 172.xx.163.104:1167
..."
==
Beside the ports question and FW config. which must be answered here
authontication michanism is not bublished anywhere.
I want to have a complete description or white paper on this issue, including
If these questions are not possible to answer here I want them escalated to the appropriate people. DMZ servers have a very customized lockdown which may prevent us from establishing backup session.
Please reply to my personal mail: sarmin.v@mellon.com if needed.
Thank you .
P.S. Do not even try to write off. I've read already all forum postings.