Need help backing up a server out of my domain

[jpl]

We have a VPS (virtual private server) with our hosting provider that is co-located in our building.  I have complete administrator access to the server.  It's Windows Server 2008 R2.  It is in a workgroup, oustide of my domain.  I manually installed the Backup Exec Remote Agent for Windows (RAW) but I cannot establish a trust from the Remote Agent utility or the User-Defined selections on the media server.  I added the appropriate logon account as well but it keeps rejecting it:  error:  The direcotry of file was not found, or could not be accessed. 

I saw other posts that mentioned opening up ports which I probably need to do but I'm unsure how, if someone could elaborate on this, that'd be great.  Or if you have any other suggestions that would be great. 

[ZeRoC00L]

The network port between BE and the BE Agent is normally 10000 so first check if that port is open between the servers.

[jpl]

It's not open on the server w/ the agent installed.  When I tried to open it and ran a netstat it had the IP of 0.0.0.0, not the actual IP of the server.  This is new territory for me so please bear w/ me. 

[ZeRoC00L]

See this technote about the ports:
http://www.symantec.com/business/support/index?page=content&id=TECH43579

 But probably you need to open it on a firewall between your Backup Exec media server and the (remote) backup exec agent.

[Simon_B_]

Look at this technote which describes the ports in use which have to be opened on the firewall: http://www.symantec.com/business/support/index?page=content&id=TECH49563

Most essentially: Port 6101 has to be opened on your BE Server side, and Port 10000 on the VPS side. Also be aware that you need to correctly configure S-NAT and D-NAT for getting this setup to work.

Easiest way would be to estabilsh a vpn connection between your BE server (or the BE server's network) and the VPS.

[CraigV]

Hi jpl,

Have you got a local administrator created on that server outside of your domain? And have you put this into your BE media server's user accounts? Ideally when you browse to it, you'd then select the newly created account...

[jpl]

Unfortunately our firewall is using port 10000 for our Cisco VPN client which cannot be changed.  Not sure a VPN connection would be feasible because we have live hosted websites on the server that needs backed up.

Yes, I have the local admin account on the server out of the domain and I put in the BE media server logon accounts.  When I do browse to it in the User-Defined selctions, I select the admin account for the server but still no luck.

I think we're going to try to get a 2nd NIC in the server and point it to our network or have the company where the server is located do the backups. I'll keep you posted but I the outcome - if I get it working to use BE or an alternative method.  Thanks for your responses.

[CraigV]

...a second NIC would work, but you can also try to change the RAWS port using the TN below:

http://www.symantec.com/business/support/index?page=content&id=TECH24256

[jpl]

I have made some progress.  I changed the RAW port to 9000 and made edits to our firewall.  However, I'm still not seeing the server in the list. I have added it to the User-Defined Selections and I have to manually add the exclude/include selections.  I tested the credentials and it said it was successful but when I run a test job, I get the error:

"The media server could not connect to the remote computer.  The remote computer may not be running the Backup Exec Remote Agent for Windows/Linux.  make sure that the correct version of the Remote Agent is installed and running on the target computer."
and
"Remote Agent not detected on computer"

I know the remote agent is running on the target computer. 

[jpl]

I am going to reinstall the agent, this time pushing it from the media server which is working so far.  I'll update on the progress.

[Kevin_Cotreau]

You are going to need more ports than just 9000 (changed from 10000). That is just for control. My guess is you need to open the NETBIOS ports between 135-139 as in the document below to see the selections. You also need a range of upper TCP ports open (two per simultaneous backup you plan on doing). You will set these in Tools>Options>Network and Security>Enable remote agent TCP dynamic port range. This might be why your backup failed.

http://www.symantec.com/business/support/index?page=content&id=TECH49563

http://www.symantec.com/business/support/index?page=content&id=TECH24463 (old version, but good diagrams)

[Colin_Weaver]

Also you have to change Port 10000 to 9000 on every Backup Exec server in your environment it is not enough to only change the affected remote agent server, all media Servers and Remote agents have to be on the same port

[jpl]

Based on this article, I only had to change it on the one remote server, not all of them:  http://www.symantec.com/business/support/index?page=content&id=TECH24256.  Is that not accurate information?

[jpl]

We nixed the 2nd NIC idea and opened up the firewall ports.  I was able to successfully backup the remote server.  However, now I cannot backup other servers.  I have opened the services file on the other servers that are backed up and entered the port 9000 but the job still fails saying that it cannot communicate with the media server.  If I remove the port 9000 from the media server, I backup the local servers but then cannot backup the remote server!  Thoughts on how to resolve this next issue?