Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup servers
  6. CONNECT_OPTIONS option for NetBackup servers
NetBackup™ Administrator's Guide, Volume I

CONNECT_OPTIONS option for NetBackup servers

The CONNECT_OPTIONS apply to connections to the local host only, as follows (they do not apply to connections to remote hosts):

  • Whether subsequent call-back connections with host use the traditional call-back method, use vnetd, or use a PBX/vnetd forwarding connection.

  • Whether connections to host use reserved or a non-reserved source port number.

Table: CONNECT_OPTIONS information

Usage

Description

Where to use

On NetBackup primary servers or media servers.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

CONNECT_OPTIONS = host [ 0 | 1 | 2 ]
[ 0 | 1 | 2 ]

The following variables are defined:

Host is a host name local to this host. You may have multiple CONNECT_OPTIONS entries in the configuration, and localhost overrides other local host names. If a local host name is not specified in any CONNECT_OPTIONS entries, the values from the DEFAULT_CONNECT_OPTIONS option are used.

See DEFAULT_CONNECT_OPTIONS option for NetBackup servers.

 

The first setting indicates the type of port to use as the source port for connections to service daemons on host:

0 = Connections on this computer should be from a reserved source port number.

1 = Connections on this computer should be from a non-reserved source port number that is selected from the CLIENT_PORT_WINDOW range. (The default is 1.)

In the NetBackup web UI, open the media server host properties and select Universal settings.

2 = Use the method that the DEFAULT_CONNECT_OPTIONS configuration option defines.

See Universal settings properties.

 

The second setting indicates the call-back method to use with host. (This method applies if bpcd cannot be reached using ports 1556 or 13724.)

0 = Use the traditional call-back method. Host connects back to a random port number that this computer has selected from the SERVER_RESERVED_PORT_WINDOW range, or SERVER_PORT_WINDOW range as determined by the first setting.

1 = Use the vnetd no call-back method. Connect to vnetd instead of a random port. Attempt to connect to port 1556 before attempting to connect to vnetd.

2 = Use the method that the DEFAULT_CONNECT_OPTIONS configuration option defines (default).

Example 1

The configuration file can contain CONNECT_OPTIONS settings for local host names.

CONNECT_OPTIONS = localhost 0 0

In this example, local connections to daemons on the local host shark attempt to use port 1556. If the previous attempt was unsuccessful, then the connections try vnetd. If the connections are successful using 1556 or vnetd, then both settings are ignored.

$ bptestbpcd -host shark
0 0
10.82.105.11:40402 -> 10.82.105.11:1556
10.82.105.11:40404 -> 10.82.105.11:1556

Example 2

CONNECT_OPTIONS = host 0 1

In this example:

  • Call-back connections are to vnetd on this computer.

  • The source ports for the daemon connection are bound from the reserved port number range.

Example 3

CONNECT_OPTIONS = host 1 1

In this example:

  • Call-back connections are to vnetd on this computer.

  • The source ports for the daemon connection are bound from the non-reserved port number range.

Equivalent NetBackup web UI property

Hosts > Host properties > Select the primary server or media server > Firewall.

See Firewall properties.

Feedback

Was this page helpful?
Previous

COMPUTE_IMAGE_ENTROPY for NetBackup primary servers

Next

DATAACCESS_AUDIT_INTERVAL_HOURS for NetBackup primary servers

Feedback

Was this page helpful?