This is an archive version of the document. To get the most up-to-date information, see the current version.

Used Ports

When you add new backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports on this servers. These rules allow communication between the components. In this topic, you can find the full list of required ports.

Important

For Debian, SLES, RHEL/CentOS distributions, you must create firewall or security rules manually. For more information, see this Veeam KB article.

AHV Backup Proxy Server

The following table describes network ports that must be opened to ensure proper communication of the AHV Backup Proxy with backup infrastructure components.

From	To	Port	Protocol	Notes
Browser	AHV Backup Proxy server	443, 8100	HTTPS	Port used by web console of AHV Backup Proxy.
AHV Backup Proxy	Nutanix REST API	9440	HTTPS	Port used to communicate with Nutanix REST API.
	Veeam Backup & Replication server	10006	TCP	Port used to connect to Veeam Backup & Replication.
	Nutanix AHV server (Cluster Virtual IP, Cluster ISCSI Data Services IP, Cluster CVM IPs)	3205, 3260	TCP/iSCSI	Ports used for connections to disks on Nutanix AHV VMs.
	Veeam backup repository (or gateway server)	2500-3300*	TCP	Default range of ports used as transmission channels for jobs and restore sessions. For every TCP connection that a job uses, one port from this range is assigned.
	Ubuntu Security and OS Update repository (security.ubuntu.com, archive.ubuntu.com)	80	HTTP	Required to get OS security updates.
	OS Update repository (packages.microsoft.com)	443	HTTPS	Required to get OS updates.
	Veeam Updater repository (repository.veeam.com, cloudfront.net)	443	TCP	Required to download AHV Backup Proxy packages and information on available product updates.
	Nginx repository (nginx.org/packages/, nginx.org/packages/keys/)	443	TCP	Required to download nginx packages.

* This range of ports applies to newly added backup infrastructure components. If you upgrade to Veeam Backup & Replication 10.0 from earlier versions of the product, the range of ports from 2500 to 5000 applies to the already added components.

Veeam Backup & Replication Server

The following table describes network ports that must be opened to ensure proper communication of Veeam Backup & Replication with backup infrastructure components.

From	To	Port	Protocol	Notes
AHV Backup Proxy, Veeam Backup & Replication console and Veeam ONE server	Veeam Backup & Replication server	8543	HTTPS	Port used by AHV Platform Service (the main service of Nutanix AHV Plug-in).
Veeam Backup & Replication server	FLR helper appliance	22	TCP	Port used to connect to the file-level restore helper appliance.
	Veeam Backup & Replication server	6172	HTTPS	Port used by AHV Platform Service to connect to a component that enables communication with the Veeam Backup & Replication database.
	Nutanix AHV cluster	9440	HTTPS	Port used by AHV Platform Service to connect to AHV cluster.
	AHV Backup Proxy	443, 8100	HTTPS	Port used by AHV Platform Service to connect to AHV Backup Proxy.

Note

For the list of ports used by the backup server to communicate with backup repositories, see the Veeam Backup & Replication User Guide, section Used Ports.

vPower NFS Service

The vPower NFS Service is a Microsoft Windows service that runs on a Microsoft Windows machine and enables this machine to act as an NFS server. The vPower NFS Service is required to perform such operations as file-level restore and Instant Recovery.

Note

For the full list of ports required for Performing File-Level Restore, see the Veeam Backup & Replication User Guide, section Used Ports.

From	To	Port	Protocol	Notes
Nutanix AHV cluster	Microsoft Windows server running vPower NFS Service	111	TCP UDP	Standard port used by port mapper service.
1058+ or 1063+	TCP UDP	Default mount port. The number of port depends on where the vPower NFS Service is located: 1058+: If the vPower NFS Service is located on the backup server. 1063+: If the vPower NFS Service is located on a separate Microsoft Windows machine. If port 1058/1063 is occupied, the succeeding port numbers will be used.
2049+	TCP UDP	Standard NFS port. If port 2049 is occupied, the succeeding port numbers will be used.

From

Port

Protocol

Notes

Nutanix AHV cluster

Microsoft Windows server running vPower NFS Service

111

TCP

UDP

Standard port used by port mapper service.

1058+ or 1063+

TCP

UDP

Default mount port. The number of port depends on where the vPower NFS Service is located:

1058+: If the vPower NFS Service is located on the backup server.
1063+: If the vPower NFS Service is located on a separate Microsoft Windows machine.

If port 1058/1063 is occupied, the succeeding port numbers will be used.

2049+

TCP

UDP

Standard NFS port. If port 2049 is occupied, the succeeding port numbers will be used.