cancel
Showing results for 
Search instead for 
Did you mean: 

Unable to open a SQL Connection for a Backup Job

CYRKER
Level 2

Unable to open a SQL Connection for a Backup Job

--

Hello,
I try to build a Backup Job to backup a SQL Server.
Windows 2016 (virtual Vmware)
Microsoft SQL Server 2019

BackupExec Server 20.4
Windows 2016 (physical)

The BackupExec Server and the SQL Server are on 2 different VLAN, with a real firewall between them
The rest of the job is OK : System Sate, Files.
Only the "Microsoft SQL Server Instances" is failed :
"Failure to browse MSSQLSERVER"
"A network connection to the server could not be established"

"Query ...<too long and no copy possible> ...SQL2ld"

Of course, I try to allow all the mandatory network ports, and allow the domain account used on both side (BackupEXEC and SQL Server), and also disable dynamics network ports on SQL Server, and also reinstall BackupExec Agent.

But something still wrong ?

Regards,

 

3 REPLIES 3

CYRKER
Level 2

Hello,

I also search on VERITAS KB datas without sucess.
I also open an issue on Support side too, but no more success

I also check many things :
# network ports : 1433, 1434, 3527, 10000, (+ ip range 100 ports)
# firewall rules (physical), not windows firewall (fully open)
# disable dynamic SQL ports
# same windows domain account :
> used by the Backup Job
> and also by the Windows Services SQL
> SQL rôle and permissions (SSMS)
> inside Local Admin Group
> inside Local Backup Operators
# licences with the option to backup databases
# check connection from SSMS though network to SQL server
# check connection from SQL Command tool though network to SQL server
# Search Veritas Backup Logs : not too much details (not verbose ?)
# Check SQL logs : the connection is allowed to the same windows domain account.
# Check Firewall Logs : the connection is not blocked
# ...
# etc.

I will spend time to update BackupExec 20.4 to 20.6, tomorrow.
I hope the problem will be fixed.

Regards

 

https://www.veritas.com/support/en_US/article.100017825

--

Backup Exec for Windows Servers Ports:
 

Service or Process Port Port Type

Backup Exec Agent Browser (process=benetns.exe)6101TCP
Backup Exec Remote Agent for Windows Servers (process=beremote.exe)10000TCP
Backup Exec Server (process=beserver.exe)3527TCP
 6106TCP
MSSQL$BKUPEXEC (process=sqlservr.exe)1125TCP
 1434 (ms-sql-m)UDP
Backup Exec Remote Agent for NetWare10000 (Backup Exec 10.x)TCP
 6102 (Backup Exec 9.x)TCP
Oracle Agent for Windows and Linux ServersRandom port unless 
 configured otherwise 
DB2 Agent for Windows and Linux ServersRandom port unless 
 configured otherwise 
Remote Agent for Linux or Unix Servers (RALUS)Default NDMP port, typically 
 10000TCP
Kerberos88UDP
NETBIOS135TCP, UDP
NETBIOS Name Service137UDP
NETBIOS Datagram Service138UDP
NETBIOS Session Service139TCP
NETBIOS (Windows 2000)445TCP
DCOM/RPC3106TCP
Backup Exec Remote Agent6103TCP
Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe103xTCP
Push Install -- SMB2445TCP
SMTP email notification25 outbound from media serverTCP
SNMP162 outbound from media serverTCP
FTP21TCP
HTTP80TCP
HTTPS443TCP

--

Backup Exec for Windows Servers Listening Ports:
 
First, it is important to understand the difference between using a port for listening versus for dynamic or ad-hoc communication.
 
When Backup Exec for Windows Servers is not running any operations, the various services are listening on ports for incoming communication from other services and/or agents.
 
During operations such as backups, a Backup Exec for Windows Server will first communicate to the Remote Agent on the static listening port (control connection) and then pass data back and forth using dynamic (ad-hoc) ports that are either random (by default) or can be configured to use a specific range. 
 
More detail on limiting the port ranges for Remote Agent communications can be found in the Related Articles.
 Service Port Port Type
Backup Exec Agent Browser (benetns.exe)6101TCP
Backup Exec Remote Agent for Windows Server (beremote.exe)10000TCP
Backup Exec Server (beserver.exe)3527, 6106TCP
MSSQL$BKUPEXEC (sqlservr.exe)1125TCP
 1434UDP
Backup Exec Remote Agent for NetWare10000, 6102TCP
Remote Agent for Linux and UNIX Servers (RALUS)10000TCP
DBA-initiated backups for Oracle and DB25633

TCP

Backup Exec Deduplication Engine (spoold.exe)10082TCP
Backup Exec Deduplication Manager (spad.exe)                                                                  10102TCP
Backup Exec Management Service (BackupExecManagementService.exe)50104TCP

 

--

Backup Exec Continuous Protection Server Ports:

Service Port Port Type Editable Registry Key

Network Helper Service (ENL)1804UDPHKLM\Software\veritas\Enl\Network
CPA Data20481TCPHKLM\Software\veritas\Backup Exec CPS\Parameters\Communications\Ffxport
CPA RPC20483TCPHKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport
CMS RPC20485TCPHKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport
Web Restore Server Component (http)8181TCPTo change the Web Restore Server Component port numbers, see the following article given in the related section.
Web Restore Server Component (https)8443TCPTo change the Web Restore Server Component port numbers, see the following article given in the related article section.

--

Backup Exec Continuous Protection Server "Local Only" Ports:
 

Service Port Port Type Description

Beremote.exe10000TCPUsed by RAWS
SUIR.exe9000 - 9003TCPQuerying and controlling the indexing engine.
VRTSweb.exe14300TCPThe admin control port for stopping and restarting the web server
Vsr_dbsrv9.exe Database Service20487, 2638TCP, UDPThe database actively prevents remote connections from being made to these ports.
WRG.exe (Web restore backend service)13730TCPThe web restore gateway

--

Backup Exec Desktop and Laptop Option Ports:
 

Service or Process Port Port Type

Server Message Block (SMB) communication135-139TCP/UDP
Server Message Block (SMB) communication without NETBIOS445TCP/UDP
SQL1434TCP/UDP
DLOAdminSvcu.exe (DLO admin service)3999 in listening modeTCP/UDP

--

Backup Exec System Recovery Client Ports:
 

Service Port Port Type

DCOM1024-65535TCP
 135TCP
 137-139TCP

--

Backup Exec System Recovery Manager Ports:
 

Service Port Port Type

Web Service (https)8443TCP
Web Service (http)8080TCP
Publisher763TCP
Index Publisher764TCP
Console Smart RefreshNo Default: Configurable by User 

--

Backup Exec System Recovery Retrieve Ports:
 

Service Port Port Type

CPS Administration20485TCP
HTTP for non-secure connection to the web server8080TCP
HTTP for secure connection to the web server8443TCP

--

Riyaj_S
Moderator
Moderator
Employee Accredited Certified

Telnet command can be used to check the port connectivity. Please check following article for steps :

https://www.veritas.com/support/en_US/article.100022930

Thanks and Regards,

Riyaj