02-17-2020 08:18 AM
Unable to open a SQL Connection for a Backup Job
--
Hello,
I try to build a Backup Job to backup a SQL Server.
Windows 2016 (virtual Vmware)
Microsoft SQL Server 2019
BackupExec Server 20.4
Windows 2016 (physical)
The BackupExec Server and the SQL Server are on 2 different VLAN, with a real firewall between them
The rest of the job is OK : System Sate, Files.
Only the "Microsoft SQL Server Instances" is failed :
"Failure to browse MSSQLSERVER"
"A network connection to the server could not be established"
"Query ...<too long and no copy possible> ...SQL2ld"
Of course, I try to allow all the mandatory network ports, and allow the domain account used on both side (BackupEXEC and SQL Server), and also disable dynamics network ports on SQL Server, and also reinstall BackupExec Agent.
But something still wrong ?
Regards,
02-17-2020 10:18 AM - edited 02-17-2020 10:26 AM
Hello,
I also search on VERITAS KB datas without sucess.
I also open an issue on Support side too, but no more success
I also check many things :
# network ports : 1433, 1434, 3527, 10000, (+ ip range 100 ports)
# firewall rules (physical), not windows firewall (fully open)
# disable dynamic SQL ports
# same windows domain account :
> used by the Backup Job
> and also by the Windows Services SQL
> SQL rôle and permissions (SSMS)
> inside Local Admin Group
> inside Local Backup Operators
# licences with the option to backup databases
# check connection from SSMS though network to SQL server
# check connection from SQL Command tool though network to SQL server
# Search Veritas Backup Logs : not too much details (not verbose ?)
# Check SQL logs : the connection is allowed to the same windows domain account.
# Check Firewall Logs : the connection is not blocked
# ...
# etc.
I will spend time to update BackupExec 20.4 to 20.6, tomorrow.
I hope the problem will be fixed.
Regards
02-17-2020 10:39 AM - edited 02-17-2020 10:42 AM
https://www.veritas.com/support/en_US/article.100017825
--
Backup Exec for Windows Servers Ports:
Service or Process Port Port Type
Backup Exec Agent Browser (process=benetns.exe) | 6101 | TCP |
Backup Exec Remote Agent for Windows Servers (process=beremote.exe) | 10000 | TCP |
Backup Exec Server (process=beserver.exe) | 3527 | TCP |
6106 | TCP | |
MSSQL$BKUPEXEC (process=sqlservr.exe) | 1125 | TCP |
1434 (ms-sql-m) | UDP | |
Backup Exec Remote Agent for NetWare | 10000 (Backup Exec 10.x) | TCP |
6102 (Backup Exec 9.x) | TCP | |
Oracle Agent for Windows and Linux Servers | Random port unless | |
configured otherwise | ||
DB2 Agent for Windows and Linux Servers | Random port unless | |
configured otherwise | ||
Remote Agent for Linux or Unix Servers (RALUS) | Default NDMP port, typically | |
10000 | TCP | |
Kerberos | 88 | UDP |
NETBIOS | 135 | TCP, UDP |
NETBIOS Name Service | 137 | UDP |
NETBIOS Datagram Service | 138 | UDP |
NETBIOS Session Service | 139 | TCP |
NETBIOS (Windows 2000) | 445 | TCP |
DCOM/RPC | 3106 | TCP |
Backup Exec Remote Agent | 6103 | TCP |
Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe | 103x | TCP |
Push Install -- SMB2 | 445 | TCP |
SMTP email notification | 25 outbound from media server | TCP |
SNMP | 162 outbound from media server | TCP |
FTP | 21 | TCP |
HTTP | 80 | TCP |
HTTPS | 443 | TCP |
--
Backup Exec Agent Browser (benetns.exe) | 6101 | TCP |
Backup Exec Remote Agent for Windows Server (beremote.exe) | 10000 | TCP |
Backup Exec Server (beserver.exe) | 3527, 6106 | TCP |
MSSQL$BKUPEXEC (sqlservr.exe) | 1125 | TCP |
1434 | UDP | |
Backup Exec Remote Agent for NetWare | 10000, 6102 | TCP |
Remote Agent for Linux and UNIX Servers (RALUS) | 10000 | TCP |
DBA-initiated backups for Oracle and DB2 | 5633 | TCP |
Backup Exec Deduplication Engine (spoold.exe) | 10082 | TCP |
Backup Exec Deduplication Manager (spad.exe) | 10102 | TCP |
Backup Exec Management Service (BackupExecManagementService.exe) | 50104 | TCP |
--
Backup Exec Continuous Protection Server Ports:
Service Port Port Type Editable Registry Key
Network Helper Service (ENL) | 1804 | UDP | HKLM\Software\veritas\Enl\Network |
CPA Data | 20481 | TCP | HKLM\Software\veritas\Backup Exec CPS\Parameters\Communications\Ffxport |
CPA RPC | 20483 | TCP | HKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport |
CMS RPC | 20485 | TCP | HKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport |
Web Restore Server Component (http) | 8181 | TCP | To change the Web Restore Server Component port numbers, see the following article given in the related section. |
Web Restore Server Component (https) | 8443 | TCP | To change the Web Restore Server Component port numbers, see the following article given in the related article section. |
--
Backup Exec Continuous Protection Server "Local Only" Ports:
Service Port Port Type Description
Beremote.exe | 10000 | TCP | Used by RAWS |
SUIR.exe | 9000 - 9003 | TCP | Querying and controlling the indexing engine. |
VRTSweb.exe | 14300 | TCP | The admin control port for stopping and restarting the web server |
Vsr_dbsrv9.exe Database Service | 20487, 2638 | TCP, UDP | The database actively prevents remote connections from being made to these ports. |
WRG.exe (Web restore backend service) | 13730 | TCP | The web restore gateway |
--
Backup Exec Desktop and Laptop Option Ports:
Service or Process Port Port Type
Server Message Block (SMB) communication | 135-139 | TCP/UDP |
Server Message Block (SMB) communication without NETBIOS | 445 | TCP/UDP |
SQL | 1434 | TCP/UDP |
DLOAdminSvcu.exe (DLO admin service) | 3999 in listening mode | TCP/UDP |
--
Backup Exec System Recovery Client Ports:
Service Port Port Type
DCOM | 1024-65535 | TCP |
135 | TCP | |
137-139 | TCP |
--
Backup Exec System Recovery Manager Ports:
Service Port Port Type
Web Service (https) | 8443 | TCP |
Web Service (http) | 8080 | TCP |
Publisher | 763 | TCP |
Index Publisher | 764 | TCP |
Console Smart Refresh | No Default: Configurable by User |
--
Backup Exec System Recovery Retrieve Ports:
Service Port Port Type
CPS Administration | 20485 | TCP |
HTTP for non-secure connection to the web server | 8080 | TCP |
HTTP for secure connection to the web server | 8443 | TCP |
--
02-18-2020 09:45 PM
Telnet command can be used to check the port connectivity. Please check following article for steps :
https://www.veritas.com/support/en_US/article.100022930
Thanks and Regards,
Riyaj