Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup servers
  6. PREFERRED_NETWORK option for NetBackup servers
  7. source[/subnet]
  8. Source binding evaluation
Veritas NetBackup™ Administrator's Guide, Volume I

Source binding evaluation

The prospective source binding list is provided by the operating system and consists of all of the local plumbed interfaces that are not loopback (127.0.0.0/8, ::1) and not link-local (169.254.0.0/16, fe80::/64).

The PREFERRED_NETWORK entries are then evaluated in the sort order by longest subnet first, then position when subnets are equal. Any local interfaces that match a source entry are moved to a second list if still present in the first list. Any local interfaces that match a target PROHIBITED entry are removed from the first list if not already moved to the second list.

If local interfaces were moved to the second list, that list becomes the tentative binding list. If the second list is empty, and interfaces were removed from the first list, then the shortened first list becomes the tentative binding list.

If a destination matches the target of an entry with a source, the tentative binding list is searched for the first match to an entry in source. If a match is found, that interface becomes the source requested by NetBackup for the outbound connection.

Otherwise, if the tentative binding list is the shortened first list, then it becomes the source binding list for the outbound connection.

Otherwise, ANY becomes the source binding list for the outbound connection.

Note:

If the source binding list is not ANY, most operating systems will arbitrarily use the first interface in the list provided by the application. Because of this behavior, it is best to not use PROHIBITED entries for local interfaces and to minimize the use of source entries.

Feedback

Was this page helpful?
Previous

source[/subnet]

Next

PREFERRED_NETWORK examples

Feedback

Was this page helpful?