Forum Discussion

CYRKER's avatar
CYRKER
Level 2
5 years ago

Unable to open a SQL Connection for a Backup Job

Unable to open a SQL Connection for a Backup Job

--

Hello,
I try to build a Backup Job to backup a SQL Server.
Windows 2016 (virtual Vmware)
Microsoft SQL Server 2019

BackupExec Server 20.4
Windows 2016 (physical)

The BackupExec Server and the SQL Server are on 2 different VLAN, with a real firewall between them
The rest of the job is OK : System Sate, Files.
Only the "Microsoft SQL Server Instances" is failed :
"Failure to browse MSSQLSERVER"
"A network connection to the server could not be established"

"Query ...<too long and no copy possible> ...SQL2ld"

Of course, I try to allow all the mandatory network ports, and allow the domain account used on both side (BackupEXEC and SQL Server), and also disable dynamics network ports on SQL Server, and also reinstall BackupExec Agent.

But something still wrong ?

Regards,

 

20
Windows Server 2016

3 Replies

Sort By
  • CYRKER's avatar
    CYRKER
    Level 2
    5 years ago

    Hello,

    I also search on VERITAS KB datas without sucess.
    I also open an issue on Support side too, but no more success

    I also check many things :
    # network ports : 1433, 1434, 3527, 10000, (+ ip range 100 ports)
    # firewall rules (physical), not windows firewall (fully open)
    # disable dynamic SQL ports
    # same windows domain account :
    > used by the Backup Job
    > and also by the Windows Services SQL
    > SQL rôle and permissions (SSMS)
    > inside Local Admin Group
    > inside Local Backup Operators
    # licences with the option to backup databases
    # check connection from SSMS though network to SQL server
    # check connection from SQL Command tool though network to SQL server
    # Search Veritas Backup Logs : not too much details (not verbose ?)
    # Check SQL logs : the connection is allowed to the same windows domain account.
    # Check Firewall Logs : the connection is not blocked
    # ...
    # etc.

    I will spend time to update BackupExec 20.4 to 20.6, tomorrow.
    I hope the problem will be fixed.

    Regards

     

    • CYRKER's avatar
      CYRKER
      Level 2
      5 years ago

      https://www.veritas.com/support/en_US/article.100017825

      --

      Backup Exec for Windows Servers Ports:
       

      Service or Process Port Port Type

      Backup Exec Agent Browser (process=benetns.exe)6101TCP
      Backup Exec Remote Agent for Windows Servers (process=beremote.exe)10000TCP
      Backup Exec Server (process=beserver.exe)3527TCP
       6106TCP
      MSSQL$BKUPEXEC (process=sqlservr.exe)1125TCP
       1434 (ms-sql-m)UDP
      Backup Exec Remote Agent for NetWare10000 (Backup Exec 10.x)TCP
       6102 (Backup Exec 9.x)TCP
      Oracle Agent for Windows and Linux ServersRandom port unless 
       configured otherwise 
      DB2 Agent for Windows and Linux ServersRandom port unless 
       configured otherwise 
      Remote Agent for Linux or Unix Servers (RALUS)Default NDMP port, typically 
       10000TCP
      Kerberos88UDP
      NETBIOS135TCP, UDP
      NETBIOS Name Service137UDP
      NETBIOS Datagram Service138UDP
      NETBIOS Session Service139TCP
      NETBIOS (Windows 2000)445TCP
      DCOM/RPC3106TCP
      Backup Exec Remote Agent6103TCP
      Push Install -- Check for conflicts in message queue for CASO which is part of beserver.exe103xTCP
      Push Install -- SMB2445TCP
      SMTP email notification25 outbound from media serverTCP
      SNMP162 outbound from media serverTCP
      FTP21TCP
      HTTP80TCP
      HTTPS443TCP

      --

      Backup Exec for Windows Servers Listening Ports:
       
      First, it is important to understand the difference between using a port for listening versus for dynamic or ad-hoc communication.
       
      When Backup Exec for Windows Servers is not running any operations, the various services are listening on ports for incoming communication from other services and/or agents.
       
      During operations such as backups, a Backup Exec for Windows Server will first communicate to the Remote Agent on the static listening port (control connection) and then pass data back and forth using dynamic (ad-hoc) ports that are either random (by default) or can be configured to use a specific range. 
       
      More detail on limiting the port ranges for Remote Agent communications can be found in the Related Articles.
       Service Port Port Type
      Backup Exec Agent Browser (benetns.exe)6101TCP
      Backup Exec Remote Agent for Windows Server (beremote.exe)10000TCP
      Backup Exec Server (beserver.exe)3527, 6106TCP
      MSSQL$BKUPEXEC (sqlservr.exe)1125TCP
       1434UDP
      Backup Exec Remote Agent for NetWare10000, 6102TCP
      Remote Agent for Linux and UNIX Servers (RALUS)10000TCP
      DBA-initiated backups for Oracle and DB25633

      TCP

      Backup Exec Deduplication Engine (spoold.exe)10082TCP
      Backup Exec Deduplication Manager (spad.exe)                                                                  10102TCP
      Backup Exec Management Service (BackupExecManagementService.exe)50104TCP

       

      --

      Backup Exec Continuous Protection Server Ports:

      Service Port Port Type Editable Registry Key

      Network Helper Service (ENL)1804UDPHKLM\Software\veritas\Enl\Network
      CPA Data20481TCPHKLM\Software\veritas\Backup Exec CPS\Parameters\Communications\Ffxport
      CPA RPC20483TCPHKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrsastaticport
      CMS RPC20485TCPHKLM\Software\veritas\Backup Exec CPS\Para\Parameters\Rpc Interface\Rxrmsstaticport
      Web Restore Server Component (http)8181TCPTo change the Web Restore Server Component port numbers, see the following article given in the related section.
      Web Restore Server Component (https)8443TCPTo change the Web Restore Server Component port numbers, see the following article given in the related article section.

      --

      Backup Exec Continuous Protection Server "Local Only" Ports:
       

      Service Port Port Type Description

      Beremote.exe10000TCPUsed by RAWS
      SUIR.exe9000 - 9003TCPQuerying and controlling the indexing engine.
      VRTSweb.exe14300TCPThe admin control port for stopping and restarting the web server
      Vsr_dbsrv9.exe Database Service20487, 2638TCP, UDPThe database actively prevents remote connections from being made to these ports.
      WRG.exe (Web restore backend service)13730TCPThe web restore gateway

      --

      Backup Exec Desktop and Laptop Option Ports:
       

      Service or Process Port Port Type

      Server Message Block (SMB) communication135-139TCP/UDP
      Server Message Block (SMB) communication without NETBIOS445TCP/UDP
      SQL1434TCP/UDP
      DLOAdminSvcu.exe (DLO admin service)3999 in listening modeTCP/UDP

      --

      Backup Exec System Recovery Client Ports:
       

      Service Port Port Type

      DCOM1024-65535TCP
       135TCP
       137-139TCP

      --

      Backup Exec System Recovery Manager Ports:
       

      Service Port Port Type

      Web Service (https)8443TCP
      Web Service (http)8080TCP
      Publisher763TCP
      Index Publisher764TCP
      Console Smart RefreshNo Default: Configurable by User 

      --

      Backup Exec System Recovery Retrieve Ports:
       

      Service Port Port Type

      CPS Administration20485TCP
      HTTP for non-secure connection to the web server8080TCP
      HTTP for secure connection to the web server8443TCP

      --