NetBackup 5200 and 5220 appliance ports (for firewall between primary and media server)
In addition to the ports used by NetBackup, the 52xx appliances also provide for both in-band and out-of-band management. The out-of-band management is through a separate network connection, the Remote Management Module (RMM), and the Intelligent Platform Management Interface (IPMI). Open these ports through the firewall as appropriate to allow access to the management services from a remote laptop or KVM (keyboard, video monitor, mouse).
The following table describes the ports to open inbound to the NetBackup appliance.
Table: Inbound ports
Source | Destination | Port | Service | Description |
|---|---|---|---|---|
Command line | Appliance | 22 | ssh | In-band management CLI |
Web browser | Appliance | 80 | http | In-band management GUI |
Web browser | Appliance | 443 | https | In-band management GUI |
Web browser | Appliance IPMI | 80 | http | Out-of-band mgmt (ISM+ or RM*) |
Web browser | Appliance IPMI (firmware > 2.13) | 443 | https | Out-of-band management (ISM+ or RM*) |
NetBackup ISM+ | 5020/5200 Appliance IPMI | 5900 | KVM | CLI access, ISO & CDROM redirection |
NetBackup ISM+ | 5020/5200 Appliance IPMI | 623 | KVM | (optional, utilized if open) |
Symantec RM* | 5220/5x30 Appliance IPMI | 7578 | RMM | CLI access |
Symantec RM* | 5220/5x30 Appliance IPMI | 5120 | RMM | ISO & CD-ROM redirection |
Symantec RM* | 5220/5x30 Appliance IPMI | 5123 | RMM | Floppy redirection |
Symantec RM* | 5220/5x30 Appliance IPMI | 7582 | RMM | KVM |
Symantec RM* | 5220/5x30 Appliance IPMI | 5124 | CDROM | |
Symantec RM* | 5220/5x30 Appliance IPMI | 5127 | USB or Floppy |
+ NetBackup Integrated Storage Manager
* Symantec Remote Management - Remote Console.
Note:
Ports 7578, 5120, and 5123 are for the unencrypted mode. Ports 7528, 5124, and 5127 are for the encrypted mode.
Open these ports outbound from the appliance to allow alerts and notifications to the indicated servers.
Table: Outbound ports
Source | Destination | Port | Service | Description |
|---|---|---|---|---|
Appliance | Call Home server | 443 | https | Call Home notifications to Veritas |
Appliance | SNMP Server | 162* | SNMP | Outbound traps and alerts |
Appliance | SCSP host | 443 | https | Download SCSP certificates |
* This port number can be changed within the appliance configuration to match the remote server.