Used Ports

When you add new backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on this servers. These rules allow communication between the components. In this topic, you can find the full list of required ports.

Important

For Debian, SLES, RHEL/CentOS distributions, you must create firewall or security rules manually. For more information, see this Veeam KB article.

AHV Backup Proxy Server

The following table describes network ports that must be opened to ensure proper communication of the AHV Backup Proxy with backup infrastructure components.

From

To

Port

Protocol

Notes

Browser

AHV Backup Proxy server

443, 8100

HTTPS

Port used by web console of AHV Backup Proxy.

AHV Backup Proxy

Nutanix REST API

9440

HTTPS

Port used to communicate with Nutanix REST API.

Veeam Backup & Replication server

10006

TCP

Port used to connect to Veeam Backup & Replication.

Nutanix AHV server
(Cluster Virtual IP, Cluster ISCSI Data Services IP, Cluster CVM IPs)

3205, 3260

TCP/iSCSI

Ports used for connections to disks on Nutanix AHV VMs.

Veeam backup repository (or gateway server)

2500-3300*

TCP

Default range of ports used as transmission channels for jobs and restore sessions. For every TCP connection that a job uses, one port from this range is assigned.

Ubuntu Security and OS Update repository

(security.ubuntu.com, archive.ubuntu.com)

80

HTTP

Required to get OS security updates.

OS Update repository

(packages.microsoft.com)

443

HTTPS

Required to get OS updates.

Veeam Updater repository

(repository.veeam.com, cloudfront.net)

443

TCP

Required to download AHV Backup Proxy packages and information on available product updates.

Nginx repository

(nginx.org/packages/, nginx.org/packages/keys/)

443

TCP

Required to download nginx packages.

* This range of ports applies to newly added backup infrastructure components. If you upgrade to Veeam Backup & Replication 10.0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components.

Veeam Backup & Replication Server

The following table describes network ports that must be opened to ensure proper communication of Veeam Backup & Replication with backup infrastructure components.

From

To

Port

Protocol

Notes

AHV Backup Proxy,

Veeam Backup & Replication console

and Veeam ONE server

Veeam Backup & Replication server

8543

HTTPS

Port used by AHV Platform Service (the main service of Nutanix AHV Plug-in).

Veeam Backup & Replication server

FLR helper appliance

22

TCP

Port used to connect to the file-level restore helper appliance.

Veeam Backup & Replication server

6172

HTTPS

Port used by AHV Platform Service to connect to a component that enables communication with the Veeam Backup & Replication database.

Nutanix AHV cluster

9440

HTTPS

Port used by AHV Platform Service to connect to AHV cluster.

AHV Backup Proxy

443, 8100

HTTPS

Port used by AHV Platform Service to connect to AHV Backup Proxy.

vPower NFS Service

Important

From

To

Port

Protocol

Notes

Nutanix AHV cluster

Microsoft Windows server running vPower NFS Service

111

TCP

UDP

Standard port used by port mapper service.

1058+ or 1063+

TCP

UDP

Default mount port. The number of port depends on where the vPower NFS Service is located:

  • 1058+: If the vPower NFS Service is located on the backup server.
  • 1063+: If the vPower NFS Service is located on a separate Microsoft Windows machine.

If port 1058/1063 is occupied, the succeeding port numbers will be used.

2049+

TCP

UDP

Standard NFS port. If port 2049 is occupied, the succeeding port numbers will be used.