Ports
The following tables list network ports that must be opened to manage inbound and outbound traffic.
Oracle on Windows
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Backup server | Source machine with Oracle | TCP, UDP | 135, 137 to 139, 445 | Ports used to deploy the runtime coordination process on the source machine. |
TCP | 49152 to 65535 | Dynamic RPC range used by the runtime coordination process that is deployed on the source machine for application-aware processing.1 For more information, see this Microsoft article. | ||
TCP | 6167 | For archived logs shipping Port used by the runtime coordination process on the source machine from which archived logs are collected. | ||
Source machine with Oracle | Backup server | TCP | 49152 to 65535 | Dynamic RPC range used by the runtime coordination process that is deployed on the source machine for application-aware processing.1 |
Log shipping server, backup repository | TCP | 2500 to 3300 | For archived logs shipping Default range of ports used for data transfer over the network. Log shipping server is used in case the direct connection to the backup repository is not possible. For more information, see the Log Shipping Servers section of the Veeam Backup & Replication User Guide. |
1 If you use default Microsoft Windows firewall settings, you do not need to configure dynamic RPC ports: during setup, Veeam Backup & Replication automatically creates a firewall rule for the runtime process. If you use firewall settings other than default ones or application-aware processing fails with the RPC function call failed error, you need to configure dynamic RPC ports. For more information on how to configure RPC dynamic port allocation to work with firewalls, see this Microsoft KB article.
Oracle on Linux
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Backup server | Source machine with Oracle | TCP | 6162 | Default port used by Linux Management Agent. |
TCP | 22 | Default SSH port used as a control channel (without Linux Management Agent). | ||
TCP | 2500 to 3300 | For archived logs shipping Default range of ports used for managing data transfer over the network. Log shipping server is used in case the direct connection to the backup repository is not possible. For more information, see the Log Shipping Servers section of the Veeam Backup & Replication User Guide. | ||
TCP | 6167 | For archived logs shipping Port used by the runtime process on the source machine from which archived logs are collected. | ||
Source machine with Oracle | Log shipping server, backup repository | TCP | 2500 to 3300 | For archived logs shipping Default range of ports used for managing data transfer over the network. Log shipping server is used in case the direct connection to the backup repository is not possible. For more information, see the Log Shipping Servers section of the Veeam Backup & Replication User Guide. |
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Backup server, Veeam Backup & Replication console, mount server associated with the backup repository (only for Instant Recovery or restore from Enterprise Manager) | Target Windows machine with Oracle, staging server | TCP | 49152 to 65535 | Recommended dynamic RPC port range for Microsoft Windows Server 2008 or later. For more information, see this Microsoft article. |
TCP | 1025 to 1075 | Default range of ports for the runtime component installed on the target or staging Oracle server to support restore operations. Each runtime component uses the next available port in the range, and only during application item restore. Note: You must manually open this port range in Microsoft Windows Firewall. | ||
TCP | 6160, 11731 | Ports used by the Veeam Installer Service for connections to the target Windows machine with Oracle. | ||
Target Linux machine with Oracle | TCP | 22 | Default SSH port used as a control channel. | |
Backup repository | Target Linux machine with Oracle | TCP | 2500 to 3300 | Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Oracle. |
Target Linux machine with Oracle | Backup repository | TCP | 2500 to 3300 | Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with Oracle. |
Target Windows machine with Oracle, staging server | Mount server associated with the backup repository | TCP | 3260 to 3270 | Range of ports opened by Veeam Backup & Replication to manage iSCSI traffic during restore to the target machine. This port range is opened only during application item restore. |