Used Ports

In this article

    To enable proper work of Veeam Plug-ins, make sure that the following ports are open.

    SAP HANA Server

    The following table describes network ports that must be opened to ensure proper communication of the SAP HANA server and backup infrastructure components.

    From

    To

    Protocol

    Port

    Notes

    SAP HANA server where Veeam Plug-in is installed

    Veeam Backup & Replication server

    TCP

    10006

    Default port used for communication with the Veeam Backup & Replication server.

    Note that data between Veeam Plug-ins and backup repositories is transferred directly, bypassing the Veeam Backup & Replication server.

    Backup repository server or gateway server*

    TCP

    2500 to 3300**

    Default range of ports used as data transmission channels. For every TCP connection that a backup process uses, one port from this range is assigned.

    * For NFS share, SMB share repositories, and Dell EMC Data Domain, HPE StoreOnce deduplication storage appliances, Veeam Backup & Replication uses an auxiliary backup infrastructure component — gateway server. For details, see the Gateway Server section of the Veeam Backup & Replication User Guide.

    ** This range of ports applies to newly added backup infrastructure components. If you upgrade to Veeam Backup & Replication 10.0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components.

    Backup Repositories and Gateway Servers

    On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. These rules allow communication between the components. Depending on the type of backup repositories that you use for Veeam Plug-in backups, the following ports must be open to allow communication between backup infrastructure components.

    From

    To

    Protocol

    Port

    Notes

    Veeam Backup & Replication server

    Backup repository server or gateway server*

    TCP

    2500 to 3300**

    Default range of ports used as data transmission channels. For every TCP connection that a backup process uses, one port from this range is assigned.

    Direct Attached Storage

    Veeam Backup & Replication server

     

    Linux server used as a backup repository or gateway server

    TCP

    22

    Port used as a control channel from the Veeam Plug-in server to the target Linux host.

    Microsoft Windows server used as a backup repository or gateway server

    TCP

    UDP

    135, 137 to 139, 445

    Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. Also, the ports are used to deploy Veeam components.

    TCP

    6160, 6162

    Default ports used by the Veeam Installer Service and Veeam Data Mover Service

    Network Attached Storage

    Gateway server

    (specified in the SMB share repository settings)

    SMB server

    TCP

    445

    Default port used by the SMB transport protocol.

    TCP

    UDP

    135, 137 to 139

    SMB/Netbios name resolution for the SMB protocol (needed in some cases). For details, see the Used Ports section of the Veeam Backup & Replication User Guide.

    Gateway server

    (specified in the NFS share repository settings)

    NFS server

    TCP

    UDP

    111, 2049

    Standard NFS ports used as a transmission channel from the gateway server to the target NFS share.

    Dell EMC Data Domain

    Veeam Backup & Replication server
    or
    Gateway server

    Dell EMC Data Domain

    For more information, see Dell EMC Documents.

    TCP

    111

    Port used to assign a random port for the mountd service used by NFS and DDBOOST. Mountd service port can be statically assigned.

    TCP

    2049

    Main port used by NFS. To change the port, you can use the ‘nfs set server-port’ command.  Note that the command requires SE mode.

    TCP

    2052

    Main port used by NFS MOUNTD. To change the port, you can use the 'nfs set mountd-port' command.  Note that the command requires SE mode.

    HPE StoreOnce

    Veeam Backup & Replication server
    or
    Gateway server

    HPE StoreOnce

    TCP

    9387

    Default command port used for communication with HPE StoreOnce.

    9388

    Default data port used for communication with HPE StoreOnce.

    ExaGrid

    Veeam Backup & Replication server

    ExaGrid

    TCP

    22

    Default command port used for communication with ExaGrid.

    Quantum DXi

    Veeam Backup & Replication server

    Quantum DXi

    TCP

    22

    Default command port used for communication with Quantum DXi.

    For detailed list of ports used by Veeam Backup & Replication server and backup repositories, see the Used Ports section of the Veeam Backup & Replication User Guide.