Ports
The following tables list network ports that must be opened to manage inbound and outbound traffic.
From  | To  | Protocol  | Port  | Notes  | 
|---|---|---|---|---|
Backup server  | Source Linux machine with SAP HANA  | TCP  | 6162  | Default port used by Linux Management Agent.  | 
TCP  | 22  | Default SSH port used as a control channel (without Linux Management Agent).  | ||
TCP  | 2500 to 3300  | Default range of ports that Veeam Backup & Replication uses as data transmission channels. For every TCP connection that a backup process uses, Veeam Backup & Replication assigns one port from this range.  | ||
Source Linux machine with SAP HANA  | Backup repository  | TCP  | 2500 to 3300  | Default range of ports that Veeam Backup & Replication uses as data transmission channels. For every TCP connection that a backup process uses, Veeam Backup & Replication assigns one port from this range.  | 
From  | To  | Protocol  | Port  | Notes  | 
|---|---|---|---|---|
Backup server, Veeam Backup & Replication console  | Mount server  | TCP  | 6170  | Port used for connections to the mount service.  | 
Backup server, Veeam Backup & Replication console  | SAP Web Services  | TCP  | 1129, 5<xx>14 where <xx> is the number of the instance  | Ports used for establishing an HTTPS connection to SAP Web Services. Port 1129 is used by the SAP Control web service and port 5<xx>14 is used by the SAP Start web service.  | 
TCP  | 1128, 5<xx>13 where <xx> is the number of the instance  | Ports used for establishing an HTTP connection to SAP Web Services. Port 1128 is used by the SAP Control web service and port 5<xx>13 is used by the SAP Start web service.  | ||
Backup server, Veeam Backup & Replication console  | Target SAP HANA System  | TCP  | 3<xx>13 where <xx> is the number of the instance  | Port used for establishing an SSL connection to the target SAP HANA system database when restoring tenant databases.  | 
Backup repository  | Target Linux machine with SAP HANA  | TCP  | 2500 to 3300  | Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with SAP HANA.  | 
Target Linux machine with SAP HANA  | Backup repository  | TCP  | 2500 to 3300  | Default range of ports used for managing data transfer during restore to the original (remote) machine or another Linux machine with SAP HANA.  |