Ports
The following tables describe network ports that must be opened to enable communication between Veeam Agent operating in the standalone mode and other backup infrastructure components.
To learn about ports required to enable proper work of Veeam Agent for Oracle Solaris managed by Veeam Backup & Replication, see Ports in the Veeam Backup & Replication User Guide.
Communication Between Veeam Agent for Oracle Solaris Components
To ensure proper communication between Veeam Agent components, you must allow local traffic for the following ports on the Veeam Agent computer:
Protocol | Port | Notes |
|---|---|---|
TCP | 2500 to 3000 | Default range of ports used locally on the Veeam Agent computer for communication between Veeam Agent components during data transmission. For every TCP connection that a backup job uses, one port from this range is assigned. |
TCP | 32768 to 65535 | Default range of ephemeral ports used locally on the Veeam Agent computer for communication between Veeam Agent components during data transmission. For every TCP connection that a backup job uses, one port from this range is assigned. |
TCP | 33049+, 111 | Ports used locally by the embedded NFS server during file-level restore. If port 33049 is occupied, the succeeding port numbers will be used. |
Communication with Veeam Backup Servers
To ensure proper communication between Veeam Agent and Veeam backup server, you must allow network traffic for the following ports:
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Agent computer | Veeam backup server | TCP | 10006 | Default port used for communication with the Veeam backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. |
TCP | 443 | Port used by Veeam Agent to obtain authentication tokens from Veeam Backup Identity Service. | ||
Veeam backup server | Veeam Agent computer | TCP | 2500 to 3300 | Ports used by Veeam backup server to perform file-level restore launched from Veeam Backup & Replication. |
Communication with Veeam Backup & Replication Repositories
To ensure proper communication between Veeam Agent and Veeam backup repositories, you must allow outgoing network traffic for the following ports:
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Agent computer | Linux or Microsoft Windows server acting as a backup repository | TCP | 6162, 2500 to 3000 | Default ports used as data transmission channels. |
Shared folder SMB (CIFS) share | TCP | 445, 139, | Ports used as a data transmission channel from the Veeam Agent computer to the target SMB (CIFS) share. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. | |
Shared folder NFS share | TCP | 111, | Standard NFS ports used as a data transmission channel from the Veeam Agent computer to the target NFS share. |
Communication with Object Storage
The following table describes network ports that must be opened to ensure proper communication with object storage if you back up data to object storage directly or to object storage added as a Veeam backup repository with the direct connection mode.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Agent computer | Amazon S3 object storage | TCP | 443 | Used to communicate with the Amazon S3 object storage through the following endpoints:
All AWS service endpoints are specified in the AWS documentation. |
80 | Used to verify the certificate status through the following endpoints:
Consider that certificate verification endpoints (CRL URLs and OCSP servers) are subject to change. The actual list of addresses can be found in the certificate itself. | |||
IBM Cloud object storage | TCP | Depends on device configuration | Used to communicate with IBM Cloud object storage. | |
S3 compatible object storage | TCP | Depends on device configuration | Used to communicate with S3 compatible object storage. |