Netbackup 7.5.0.4 Ports for Master Server Redhat Rhel5.2 to Client Server Windows 2008 R2 SP1

[kevin_b1]

Hello,

I have installed the Client Installation Software on our Windows Server. I opened ports bi-directional PBX 1556 and VNETD 13724 on the Windows Firewall and those ports are open on the Master Server. I am still receiving Status 58 when running a Daily Differential for All Local Drives.

I read to perform the following test:

Create bpcd folder under C:\Programs\Vertias\Netbackup\logs on the client and on the Master run the following command: bptestbpcd -client <client-name> -verbose and Check output for errors as well as log file client's bpcd log file.

I do not see where I can run the bptestbpcd when I go to /usr/openv/netbackup/bin on the Master Server

Can someone guide me where to run this test on the Master Server? I have already created the bpcd folder on the Client Server.

*Note:

- Master and Media server are the same

- We are running Netbackup 7.5.0.4 on a Linux RedHat RHEL5.2 version

- Client is a Windows 2008 R2 SP1

[kevin_b1]

Update:

I have found where the bptestbpcd location /usr/openv/netbackup/bin/admincmd

However, I no log file made it to the bpcd folder.

[kevin_b1]

Update:

After running the test I received the following: <16>bptestbpcd main: Function ConnectTOBPCD(vranger.dur.xxx.xxx) failed: 25 Cannot connect on socket

[kevin_b1]

Update I received the following message after running the test:

<16>bptestbpcd main: Function ConnectToBPCD(10.1.xx.xxx) failed: 25
cannot connect on socket

[Andrew_Madsen]

Kevin,

Let's try some simple troubleshooting first. Can you telnet from the master server to the client on ports 1556 and 13724? Can you telnet from the client to the master server on the same ports?

[Marianne]

Can you verify that NetBackup Client Services and Symantec Private Branch Exchange service is running on the client?

Is any other software (other than Windows Firewall) running on the client that will block port connection? (Some AV software will also do that.)

Have you tried to connect with Windows firewall disabled?

Please post output of 
bptestbpcd -client <client-name> -verbose -debug
This will show us port numbers that are attempted for connection and also confirm if hostname lookup is successful.

I agree with Andrew - try to telnet to vnetd and pbx on the client.

No log in bpcd is normally a sure sign that connection is blocked by firewall or some sort of security software.

PS:
Have you checked that OS firewall (iptables) on Linux server is stopped and disabled?

[kevin_b1]

Hello,

Andrew:

I cannot telnet from Master to Client on either port and vice versa. However, I can ping Master from Client and also ping from Client to Master

Marianne:

- Both Netbackup Client Service and Symantec Private Branch Exchange service are started.

- No other software is installed on the server that will block the ports from what I can tell. This is a VM that is running internally to host vranger.

- I prefer not to disable Windows Firewall but I can for testing purposes

- Here is the output for bptestbpcd -client <client-name> -verbose -debug

09:25:53.309 [13239] <2> bptestbpcd: VERBOSE = 5
09:25:53.310 [13239] <2> ConnectToBPCD: db_getCLIENT(10.1.15.76) failed: 227
09:25:53.310 [13239] <8> file_to_cache_item: [vnet_addrinfo.c:6555] fopen() failed ERRNO=2 FILE=/usr/openv/var/host_cache/1c8/9cc1e7c8+0,1,402,0,1,0+10.1.xx.xxx.txt
09:25:53.310 [13239] <2> vnet_cached_getaddrinfo_and_update: [vnet_addrinfo.c:1630] found via getaddrinfo NAME=10.1.xx.xxx SVC=NULL
09:25:53.310 [13239] <2> init_resilient_cache: [vnet_nbrntd.c:869] Initialize resilient cache. 0 0x0
09:25:53.310 [13239] <2> local_bpcr_connect: bpcr.c.278: connect_opts = 0x01000100 connect_opts2 = 0x01000100
09:25:53.310 [13239] <2> local_bpcr_connect: bpcr.c.285: connect_opts = 0x01000100
09:25:53.311 [13239] <2> local_bpcr_connect: bpcr.c.324: daemon_port_type = 0
09:25:53.311 [13239] <2> insert_if_not_dup: [vnet_addrinfo.c:5705] ignoring IPv6 link local 0 0x0
09:25:53.311 [13239] <8> file_to_cache_item: [vnet_addrinfo.c:6555] fopen() failed ERRNO=2 FILE=/usr/openv/var/host_cache/1c8/9cc1e7c8+veritas_pbx,1,20,2,1,0+10.1.xx.xxx.txt
09:25:53.312 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:906] using SVC=veritas_pbx PORT=1556
09:25:53.312 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:910] adjusted service name 1556
09:25:53.312 [13239] <2> vnet_cached_getaddrinfo_and_update: [vnet_addrinfo.c:1630] found via getaddrinfo NAME=10.1.15.76 SVC=veritas_pbx
09:25:53.312 [13239] <2> vnet_sortaddrs: [vnet_addrinfo.c:3945] sorted addrs: 1 0x1
09:25:53.312 [13239] <2> vnet_get_pref_netconnection: [vnet_addrinfo.c:4809] using interface  ANY
09:25:53.312 [13239] <8> file_to_cache_item: [vnet_addrinfo.c:6555] fopen() failed ERRNO=2 FILE=/usr/openv/var/host_cache/1c8/9cc1e7c8+vnetd,1,20,2,1,0+10.1.xx.xxx.txt
09:25:53.316 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:906] using SVC=vnetd PORT=13724
09:25:53.316 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:910] adjusted service name 13724
09:25:53.316 [13239] <2> vnet_cached_getaddrinfo_and_update: [vnet_addrinfo.c:1630] found via getaddrinfo NAME=10.1.xx.xxx SVC=vnetd
09:25:53.316 [13239] <2> vnet_sortaddrs: [vnet_addrinfo.c:3945] sorted addrs: 1 0x1
09:25:53.316 [13239] <2> vnet_get_pref_netconnection: [vnet_addrinfo.c:4809] using interface  ANY
09:25:53.316 [13239] <8> file_to_cache_item: [vnet_addrinfo.c:6555] fopen() failed ERRNO=2 FILE=/usr/openv/var/host_cache/1c8/9cc1e7c8+bpcd,1,20,2,1,0+10.1.xx.xxx.txt
09:25:53.319 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:906] using SVC=bpcd PORT=13782
09:25:53.319 [13239] <2> retry_getaddrinfo: [vnet_addrinfo.c:910] adjusted service name 13782
09:25:53.319 [13239] <2> vnet_cached_getaddrinfo_and_update: [vnet_addrinfo.c:1630] found via getaddrinfo NAME=10.1.15.76 SVC=bpcd
09:25:53.319 [13239] <2> vnet_sortaddrs: [vnet_addrinfo.c:3945] sorted addrs: 1 0x1
09:25:53.319 [13239] <2> vnet_get_pref_netconnection: [vnet_addrinfo.c:4809] using interface  ANY
09:25:53.320 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 1 0x1
09:26:03.320 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 2 0x2
09:26:13.321 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 3 0x3
09:29:02.326 [13239] <8> async_connect: [vnet_connect.c:1653] getsockopt SO_ERROR returned 110 0x6e
09:29:04.326 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 3 0x3
09:29:14.326 [13239] <8> async_connect: [vnet_connect.c:1653] getsockopt SO_ERROR returned 110 0x6e
09:29:16.326 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 3 0x3
09:29:26.326 [13239] <8> async_connect: [vnet_connect.c:1653] getsockopt SO_ERROR returned 110 0x6e
09:29:29.327 [13239] <2> async_connect: [vnet_connect.c:1477] connect in progress 3 0x3
09:30:54.326 [13239] <8> async_connect: [vnet_connect.c:1219] ran out of time before connect 301 0x12d
09:30:54.326 [13239] <8> async_connect: [vnet_connect.c:1219] ran out of time before connect 301 0x12d
09:30:54.326 [13239] <8> async_connect: [vnet_connect.c:1219] ran out of time before connect 301 0x12d
09:30:54.326 [13239] <16> connect_to_service: connect failed STATUS (18) CONNECT_FAILED
    status: FAILED, (44) CONNECT_TIMEOUT; system: (115) Operation now in progress; FROM 0.0.0.0 TO 10.1.xx.xxx 10.1.xx.xxx bpcd VIA pbx
    status: FAILED, (44) CONNECT_TIMEOUT; system: (115) Operation now in progress; FROM 0.0.0.0 TO 10.1.xx.xxx 10.1.xx.xxx bpcd VIA vnetd
    status: FAILED, (44) CONNECT_TIMEOUT; system: (115) Operation now in progress; FROM 0.0.0.0 TO 10.1.xx.xxx 10.1.xx.xxx bpcd
09:30:54.326 [13239] <8> vnet_connect_to_bpcd: [vnet_connect.c:279] connect_to_service() failed 18 0x12
09:30:54.326 [13239] <2> local_bpcr_connect: Can't connect to client 10.1.xx.xxx
09:30:54.326 [13239] <2> ConnectToBPCD: bpcd_connect_and_verify(10.1.xx.xxx, 10.1.xx.xxx) failed: 25
<16>bptestbpcd main: Function ConnectToBPCD(10.1.15.76) failed: 25
09:30:54.326 [13239] <16> bptestbpcd main: Function ConnectToBPCD(10.1.xx.xxx) failed: 25
<2>bptestbpcd: cannot connect on socket
09:30:54.326 [13239] <2> bptestbpcd: cannot connect on socket
<2>bptestbpcd: EXIT status = 25
09:30:54.326 [13239] <2> bptestbpcd: EXIT status = 25
cannot connect on socket

- We do not have the firewall turned on the Linux Machine so the iptables would not stop or disable the ports.

[Andrew_Madsen]

Most firewalls allow ping but not telnet. Since the client is a guest you have three potential firewalls in play:

1. The client's firewall
2. The firewall on the ESX host
3. Any firewall on the master server.

You could have even more firewalls depending on your network configuration. Disable the Windows firewall or create rules to allow 1556 and 137224 for TCP and UDP traffic from external and internal initiation.

[kevin_b1 · Accepted solution]

Update:

I turned off Windows Firewall and was able to successfully telnet from Master to Client

- I checked if the network connection was coming through Private or Public and it was Public.

- I did not select public on the Firewall rules. Once that was selected I was able to successfully backup that server on Netbackup.

Thank you for all your help

Instructions:

- Download the Client Software and merge both zip files

- Extract the new zip file

- Go through the Client Software Instructions

- Open ports 1556 and 13724 bi directional on Windows Firewall

- Test by telnet from Master to Client

- Re-run failed job