The following tables describe network ports that must be opened to ensure proper communication of components in the Veeam Agent management infrastructure.
Veeam Backup & Replication Connections
For information about network ports that must be opened to ensure proper communication of the backup server with backup infrastructure components, see the Used Ports section in the Veeam Backup & Replication User Guide.
In addition to general port requirements applicable to a Veeam backup server, the backup server used in the Veeam Agent management scenario must have the following ports opened:
From | To | Protocol | Port | Notes |
Veeam Backup Server | Veeam Agent Computer (Microsoft Windows) | TCP | 6184 | Default port used for communication with the Veeam Agent for Microsoft Windows Service. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. |
TCP | 6160, 11731 | Default ports used for communication with the Veeam Installer Service. | ||
Veeam Agent Computer (Linux) | TCP | 22 | Default port used as a control channel from the Veeam Backup Server to the Veeam Agent computer. | |
Distribution Server | TCP | 135, 137 to 139, 445 | Ports on a Microsoft Windows server required for deploying the Distribution Server component. | |
TCP | 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. | ||
TCP | 9380 | Default port used for communication with the Veeam Distribution Service. | ||
Distribution Server | Veeam Agent Computer (Microsoft Windows) | TCP | 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. The port range is required for communication with the Veeam Installer Service. |
Veeam Agent Computer (Linux) | TCP | 22 | Default port used to establish an SSH connection for the purpose of Veeam Agent packages transmission and deployment control. |
Veeam Agent Computers Connections
From | To | Protocol | Port | Notes |
Veeam Agent Computer (Microsoft Windows) | Veeam Backup Server | TCP | 10005 | Default port used for communication with the Veeam Backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. |
Veeam Agent Computer | TCP | 9395, 6183 | Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. | |
Veeam Agent Computer (Linux) | Veeam Backup Server | TCP | 10006 | Default port used for communication with the Veeam Backup server. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. |
Veeam Agent Computer | TCP | 9395, 6183 | Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Linux Service. | |
Communication with Veeam Backup & Replication Repositories | ||||
Veeam Agent Computer | Linux server performing the role of a backup repository | TCP | 22 | Port used as a control channel from the Veeam Agent computer to the target Linux host. |
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Microsoft Windows server performing the role of a backup repository | TCP | 1025 to 5000 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. | |
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Shared folder CIFS (SMB) share | TCP | 135, 137 to 139, 445 | Ports used as a transmission channel from the Veeam Agent computer to the target CIFS (SMB) share. | |
Gateway Microsoft Windows server | TCP | 135, 137 to 139, 445 | If a CIFS (SMB) share is used as a backup repository and a Microsoft Windows server is selected as a gateway server for this CIFS share, these ports must be opened on the gateway Microsoft Windows server. | |
TCP | 1025 to 5000 49152-65535 | Dynamic RPC port range. For more information, see https://support.microsoft.com/kb/929851/en-us. | ||
TCP | 2500 to 5000 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
