Ports
The following links lead to tables that list network ports that must be opened to ensure proper communication of components in the Veeam Plug-in management infrastructure.
Communication Between Veeam Backup & Replication Components
For general requirements for ports that must be opened to ensure proper communication of the backup server with backup infrastructure components, see the Ports section in the Veeam Backup & Replication User Guide.
In addition to general port requirements applicable to a Veeam backup server, the backup server used in the Veeam Plug-in management scenario must have the following ports opened:
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Veeam Backup Server | Computer with Veeam Plug-in (Microsoft Windows) | TCP | 6184+ | Default port used for communication with Veeam Plug-in. If port 6184 is already in use, Veeam Plug-in Service tries to use the next port number in the allocated range (6184 to 6194). Once the service takes the next available port, it makes it the default port for all subsequent connections. |
TCP | 135, | Default ports used for communication with the Veeam Installer Service. Port 135 is used for WMI queries. WMI queries are mandatory to back up failover clusters and optional to provide faster Veeam Plug-in deployment. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. Ports 6160 and 11731 are used to deploy Veeam Plug-in on the computer. If the backup repository server role and the mount server role are assigned to different servers in your infrastructure, you must open ports described in the Mount Server Connections subsection of the Veeam Backup & Replication User Guide. | ||
Computer with Veeam Plug-in (Linux) | TCP | 22, | Port 22 is used to establish an SSH connection from the Veeam Backup Server to the computer with Veeam Plug-in. Ports 6160 and 6162 are used for default connection to the computer with Veeam Plug-in using Veeam Transport Service and Veeam Deployer Service. | |
TCP | 6162 | Default port used by the Veeam Data Mover. | ||
TCP | 2500 to 3300 | Default range of ports used for communication between Veeam Plug-in components during data transmission. For every TCP connection that a backup job uses, one port from this range is assigned. | ||
Distribution Server | TCP | 135, | Ports on a Microsoft Windows server used for deploying the Distribution Server component. Port 135 is optional. This port is used to provide faster Veeam Plug-in deployment. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. Ports 6160 and 11731 are used by the Veeam Installer Service. These ports together with port 445 are mandatory to deploy the Distribution Server component. | |
TCP | 49152 to 65535 | Dynamic RPC port range. For more information, see this Microsoft KB article. | ||
TCP | 9380 | Default port used for communication with the Veeam Distribution Service. | ||
Distribution Server | Computer with Veeam Plug-in (Microsoft Windows) | TCP | 49152 to 65535 | Dynamic RPC port range. For more information, see this Microsoft KB article. The port range is required for communication with the Veeam Installer Service. |
TCP | 6160, | Ports on the computer used for deploying Veeam Plug-in. | ||
Computer with Veeam Plug-in (Linux) | TCP | 22, | Port 22 is used to establish an SSH connection for Veeam Plug-in packages transmission and deployment control. After Veeam Plug-in is deployed, ports 6160 and 6162 are used for default connection to computer with Veeam Plug-in using Veeam Transport Service and Veeam Deployer Service. | |
Computer with Veeam Plug-in (Microsoft Windows) | Veeam Backup Server | TCP | 10005 | Default port used by Veeam Plug-in operating in the managed mode for communication with the Veeam Backup server. Data between the computer with Veeam Plug-in and backup repositories is transferred directly, bypassing Veeam backup servers. |
Computer with Veeam Plug-in (Linux, Unix) | TCP | 10006 | Default port used for communication with the Veeam Backup server. Data between the computer with Veeam Plug-in and backup repositories is transferred directly, bypassing Veeam backup servers. |
Communication with Veeam Backup Repositories
The following table describes network ports that must be opened to ensure proper communication between Veeam Plug-in and Veeam backup repositories.
From | To | Protocol | Port | Notes |
|---|---|---|---|---|
Computer with Veeam Plug-in | Linux server performing the role of a backup repository | TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. |
Microsoft Windows server performing the role of a backup repository | TCP | 49152 to 65535 | Dynamic RPC port range. For more information, see this Microsoft KB article. | |
TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. | ||
Shared folder CIFS (SMB) share | TCP | 137 to 139, | Ports used as a transmission channel from the Computer with Veeam Plug-in to the target CIFS (SMB) share. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. | |
Gateway Microsoft Windows server | TCP | 137 to 139, | If a CIFS (SMB) share is used as a backup repository and a Microsoft Windows server is selected as a gateway server for this CIFS share, these ports must be opened on the gateway Microsoft Windows server. Ports 137 to 139 are used by backup infrastructure components to communicate using NetBIOS. | |
TCP | 49152 to 65535 | Dynamic RPC port range. For more information, see this Microsoft KB article. | ||
TCP | 2500 to 3300 | Default range of ports used as data transmission channels. For every TCP connection that a job uses, one port from this range is assigned. |
Communication Between Veeam Plug-in Components
The following sections describe network ports that must be opened to enable proper communication between Veeam Plug-in components: