Ports

To enable proper work of Veeam Plug-ins, make sure that the following ports are open.

SAP HANA Server

The following table describes network ports that must be opened to ensure proper communication of the SAP HANA server and backup infrastructure components.

From	To	Protocol	Port	Notes
SAP HANA server where Veeam Plug-in is installed	Veeam Backup & Replication server	TCP	10006	Default port used for communication with the Veeam Backup & Replication server. Note that data between Veeam Plug-ins and backup repositories is transferred directly, bypassing the Veeam Backup & Replication server.
Backup repository server or gateway server*	TCP	2500 to 3300**	Default range of ports used as data transmission channels. For every TCP connection that a backup process uses, one port from this range is assigned.
SAP HANA server (local host)	TCP	6791+, 2500 to 3300**	Local connections between Veeam Plug-in and source Data Movers.

From

Protocol

Port

Notes

SAP HANA server where Veeam Plug-in is installed

Veeam Backup & Replication server

TCP

10006

Default port used for communication with the Veeam Backup & Replication server.

Note that data between Veeam Plug-ins and backup repositories is transferred directly, bypassing the Veeam Backup & Replication server.

Backup repository server or gateway server*

TCP

2500 to 3300**

Default range of ports used as data transmission channels. For every TCP connection that a backup process uses, one port from this range is assigned.

SAP HANA server (local host)

TCP

6791+,
2500 to 3300**

Local connections between Veeam Plug-in and source Data Movers.

* For NFS share, SMB share repositories, and Dell Data Domain, HPE StoreOnce deduplication storage appliances, Veeam Backup & Replication uses an auxiliary backup infrastructure component — gateway server. For details, see the Gateway Server section in the Veeam Backup & Replication User Guide.

** This range of ports applies to newly added backup infrastructure components. If you upgrade to Veeam Backup & Replication 10.0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components.

Backup Repositories and Gateway Servers

On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. These rules allow communication between the components. Depending on the type of backup repositories that you use for Veeam Plug-in backups, the following ports must be open to allow communication between backup infrastructure components.

From	To	Protocol	Port	Notes
Veeam Backup & Replication server	Backup repository server or gateway server*	TCP	2500 to 3300**	Default range of ports used as data transmission channels. For every TCP connection that a backup process uses, one port from this range is assigned.
Direct Attached Storage
Veeam Backup & Replication server	Linux server used as a backup repository or gateway server	TCP	22	Port used as a control channel from the Veeam Plug-in server to the target Linux host.
	Microsoft Windows server used as a backup repository or gateway server	TCP UDP	135, 137 to 139, 445	Ports used as a management channel from the Veeam Plug-in server to the Repository/Gateway server. Also, the ports are used to deploy Veeam components.
		TCP	6160, 6162	Default ports used by the Veeam Installer Service and Veeam Data Mover Service
Network Attached Storage
Gateway server (specified in the SMB share repository settings)	SMB server	TCP	445	Default port used by the SMB transport protocol.
	SMB server	TCP UDP	135, 137 to 139	SMB/Netbios name resolution for the SMB protocol (needed in some cases). For details, see the Used Ports section in the Veeam Backup & Replication User Guide.
Gateway server (specified in the NFS share repository settings)	NFS server	TCP UDP	111, 2049	Standard NFS ports used as a transmission channel from the gateway server to the target NFS share.
Dell Data Domain
Veeam Backup & Replication server or Gateway server	Dell Data Domain For more information, see this Dell KB article.	TCP	111	Port used to assign a random port for the mountd service used by NFS and DDBOOST. Mountd service port can be statically assigned.
		TCP	2049	Main port used by NFS. To change the port, you can use the nfs set server-port command. Note that the command requires SE mode.
		TCP	2052	Main port used by NFS MOUNTD. To change the port, you can use the nfs set mountd-port command. Note that the command requires SE mode.
HPE StoreOnce
Veeam Backup & Replication server or Gateway server	HPE StoreOnce	TCP	9387	Default command port used for communication with HPE StoreOnce.
Veeam Backup & Replication server or Gateway server	HPE StoreOnce	TCP	9388	Default data port used for communication with HPE StoreOnce.
ExaGrid
Veeam Backup & Replication server	ExaGrid	TCP	22	Default command port used for communication with ExaGrid.
Quantum DXi
Veeam Backup & Replication server	Quantum DXi	TCP	22	Default command port used for communication with Quantum DXi.
Fujitsu ETERNUS CS800
Veeam Backup & Replication server	Fujitsu ETERNUS CS800	TCP	22	Default command port used for communication with Fujitsu ETERNUS CS800.
Infinidat InfiniGuard
Veeam Backup & Replication server	Infinidat InfiniGuard	TCP	22	Default command port used for communication with Infinidat InfiniGuard.

For detailed list of ports used by Veeam Backup & Replication server and backup repositories, see the Used Ports section in the Veeam Backup & Replication User Guide.