This section covers typical connection settings for the Veeam Backup Enterprise Manager. Ports specific for Veeam Backup & Replication infrastructure components are described in the Veeam Backup & Replication User Guide.
In This Section
The following ports must be opened for Enterprise Manager operation and components interactions:
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup Enterprise Manager | Veeam backup server | TCP | 9392 | Default port used by Veeam Backup Enterprise Manager for collecting data from Veeam backup servers. Can be customized during Veeam Backup & Replication installation |
9393 | Default port used by the Veeam Guest Catalog service for catalog replication. Can be customized during Veeam Backup & Replication installation. | |||
2500 to 2600 | Ports used by the Veeam Guest Catalog service for replicating catalog data. | |||
135 | Default RPC port. | |||
49152 - 65535 (for Microsoft Windows 2008 and later) 1025 to 5000 (for Microsoft Windows 2003) | Dynamic RPC port range. For more information, see https://support.microsoft.com/en-us/kb/832017#method1 and http://support.microsoft.com/kb/929851/en-us | |||
SQL Server hosting the Enterprise Manager configuration database | TCP | 1433 | Port used for communication with Microsoft SQL Server hosting Enterprise Manager database - if database is deployed using default SQL server instance settings (see Step 6. Use Default Configuration below). Additional ports access may be needed depending on your configuration - for more information, see https://msdn.microsoft.com/en-us/library/cc646023(v=sql.120).aspx#BKMK_ssde | |
vCenter Server | TCP | 443 | Default port used for connection to vCenter Server and deploying Veeam plug-in for vSphere web client. Can be customized in Enterprise Manager. | |
Active Directory | TCP | 49152 - 65535 (for Microsoft Windows 2008 and later) 1025 to 5000 (for Microsoft Windows 2003) | Ports used by Enterprise Manager service to communicate to Active Directory; also used when performing Self-Service Restore. This is a default dynamic port range; for details, see http://support.microsoft.com/kb/832017/en-us#method1 | |
Microsoft Search Server (optional) | TCP | 9395 | Default port used by the optional Veeam Backup Search service integration component (usually intended for backward compatibility). Can be customized during Veeam Backup Search installation. | |
Veeam Backup Enterprise Manager | Veeam Backup Enterprise Manager service | TCP | 9394 | Default port used by IIS extension to communicate with Enterprise Manager. Can be customized during Enterprise Manager installation. |
Veeam Cloud Connect Portal | Veeam Backup Enterprise Manager service | TCP | 9397 | Default port used by IIS extension to communicate with Enterprise Manager. Built-in value, cannot be customized during installation. |
Browser | Veeam Backup Enterprise Manager web site (IIS extension) | HTTP | 9080 | Default ports used to communicate with the website. Can be customized during Enterprise Manager installation. |
HTTPS | 9443 | |||
Veeam Cloud Connect Portal web site (IIS extension) | HTTPS | 6443 | Default ports used to communicate with the website. Can be customized during Enterprise Manager installation. | |
Veeam Backup Enterprise Manager RESTful API client | Veeam Backup Enterprise Manager Restful API | HTTP | 9399 | Default ports used to communicate with Veeam Backup Enterprise Manager Restful API. Can be customized during Enterprise Manager installation. |
HTTPS | 9398 | |||
Veeam ONE Server | Veeam Backup Enterprise Manager | TCP | Dynamically assigned ports | If you are using Veeam Availability Suite and add Veeam Backup Enterprise Manager server to Veeam ONE scope, consider ports required to gather data through WMI. To learn about enabling and disabling WMI traffic, see http://msdn.microsoft.com/en-us/library/aa389286(v=vs.85).aspx and http://msdn.microsoft.com/en-us/library/aa822854(v=vs.85).aspx |
Enterprise Manager network connectivity diagram can be found here. During installation, Veeam Backup & Replication automatically creates firewall rules for default ports to allow communication for the application components.
Guest OS File Restore (Windows)
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup Enterprise Manager | Veeam backup server | TCP | 2500 - 6000 | Ports used for file download. |
Guest OS File Restore (Linux)
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup Enterprise Manager | Linux helper appliance | TCP | 2500 - 6000 | Ports used for file download. See Preparing for Linux Guest Files Search and Restore for information about helper appliance. |
For the list of ports used by the mount server associated with backup repository at file-level restore, please refer to this section of the Veeam Backup & Replication User Guide: https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=95#mount
For the list of ports used by the components involved in 1-Click restore to the original location, please refer to the corresponding tables in this section of the Veeam Backup & Replication User Guide.
SQL Server Database Restore
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Target remote SQL Server to which application items are restored | Mount server associated with backup repository | TCP | 3260 - 3270 | Ports are open for iSCSI traffic during SQL databases restore to the original SQL server. These ports are used during the restore process only. |
Oracle Database Restore
The following ports are open on Windows machines in case of 1-click database restore to the original Oracle server machine (remote machine).
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Target remote machine to which application items are restored | Machine running mount service* | TCP | 3260 - 3270 | Range of ports opened by Veeam for iSCSI traffic. Ports are open only during application item restore session. See also Scenario 1: 1-Click Restore to Original Location. |
The following table describes network ports open during database restore with custom settings.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Machine running mount service* | Oracle on Windows server | TCP | 49152-65535 | Recommended dynamic RPC port range for Microsoft Windows 2008 and later. For more information, refer to https://support.microsoft.com/en-us/kb/832017 |
TCP | 1025 - 1034 | Default port range for the runtime component installed on guest machine to support restore operations in most scenarios. Port is open only during application item restore. | ||
Oracle on Linux server | TCP | 22 | Default SSH port used as a control channel. | |
TCP | 2500 - 5000 | Default port range for data transmission. |
* - the mount server associated with the repository (if restoring from backup), or Veeam backup server (if restoring from replica)
