Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup servers
  6. CONNECT_OPTIONS option for NetBackup servers and clients
Veritas NetBackup™ Administrator's Guide, Volume I

CONNECT_OPTIONS option for NetBackup servers and clients

The CONNECT_OPTIONS apply to connections to the local host only, as follows (they do not apply to connections to remote hosts):

  • Whether processes on host are reached:

    • By using the Veritas Exchange (PBX) or Veritas Network daemon (vnetd) port only.

    • By using the daemon ports only.

    • By first using the PBX, then the vnetd port, and then the daemon ports if needed.

  • Whether subsequent call-back connections with host use the traditional call-back method, use vnetd, or use a PBX/vnetd forwarding connection.

  • Whether connections to host use reserved or a non-reserved source port number.

Table: CONNECT_OPTIONS information

Usage

Description

Where to use

On NetBackup master servers, media servers, or clients.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

CONNECT_OPTIONS = host [ 0 | 1 | 2 ]
[ 0 | 1 | 2 ][ 0 | 1 | 2 | 3]

The following variables are defined:

Host is a host name local to this host. You may have multiple CONNECT_OPTIONS entries in the configuration, and localhost overrides other local host names. If a local host name is not specified in any CONNECT_OPTIONS entries, the values from the DEFAULT_CONNECT_OPTIONS option are used.

See DEFAULT_CONNECT_OPTIONS option for NetBackup servers and clients.

 

The first setting indicates the type of port to use as the source port for connections to service daemons on host:

0 = Connections on this computer should be from a reserved source port number. It is selected from the CLIENT_RESERVED_PORT_WINDOW range.

1 = Connections on this computer should be from a non-reserved source port number that is selected from the CLIENT_PORT_WINDOW range. (The default is 1.) If this option is selected for use with the daemon port and host is running a version of NetBackup older than 7.1, enable Allow non reserved ports for the selected host.

In the NetBackup Administration Console, see the Universal Settings dialog box under Host Properties > Media Servers.

2 = Use the method that the DEFAULT_CONNECT_OPTIONS configuration option defines.

See Universal Settings properties.

 

The second setting indicates the call-back method to use with host. (This applies if configured to use the daemon port or if bpcd cannot be reached using ports 1556 or 13724.)

0 = Use the traditional call-back method. Host connects back to a random port number that this computer has selected from the SERVER_RESERVED_PORT_WINDOW range, or SERVER_PORT_WINDOW range as determined by the first setting.

1 = Use the vnetd no call-back method. Connect to vnetd instead of a random port. If this computer is NetBackup 7.0.1 or later, attempt to connect to port 1556 before attempting to connect to vnetd. The connection is outbound to host if the third setting is 0 or 1. The connection is inbound from host if the third setting is 2.

2 = Use the method that the DEFAULT_CONNECT_OPTIONS configuration option defines (default).

 

The third setting affects which destination port number to use for connections to daemon services on host.

0 = Use vnetd if possible, to connect to a daemon on this computer. If it is not possible, connect by using the traditional port number of the daemon. If this host is NetBackup 7.0.1 or later, attempt to connect to port 1556 before attempting to connect to vnetd. If bpcd is reachable through port 1556 or vnetd, then the first two settings are ignored and all connections to host are outbound and use non-reserved ports.

1 = Use vnetd to connect to a daemon on host. If this computer is NetBackup 7.0.1 or later, attempt to connect to port 1556 before attempting to connect to vnetd. The traditional port number of the daemon is not used if the connection cannot be established using port 1556 or vnetd. If bpcd is reachable through port 1556 or vnetd, then the first two settings are ignored and all connections to host are outbound and use non-reserved ports.

2 = Use only the traditional port number of the daemon to connect to a daemon on host. If the daemon is bpcd, the second setting is then used to determine the call-back method.

3 = Use the method that the DEFAULT_CONNECT_OPTIONS configuration option defines (default).

Example 1

The configuration file can contain CONNECT_OPTIONS settings for local host names.

CONNECT_OPTIONS = localhost 0 0 0

In this example, local connections to daemons on local host shark attempt to use port 1556. If the previous attempt was unsuccessful, then the connections try vnetd. If that attempt is unsuccessful, the daemon port is used. If the connections are successful using 1556 or vnetd, then the first two settings are ignored.

$ bptestbpcd -host shark
0 0 1
10.82.105.11:40402 -> 10.82.105.11:1556
10.82.105.11:40404 -> 10.82.105.11:1556

Example 2

CONNECT_OPTIONS = host 0 1 2

In this example:

  • Connections to daemons on the local host must use the daemon port numbers.

  • Call-back connections are to vnetd on this computer.

  • The source ports for the daemon connection is bound from the reserved port number range.

Example 3

CONNECT_OPTIONS = host 1 1 2

In this example:

  • Connections to daemons on the local host must use the daemon port numbers.

  • Call-back connections are to vnetd on this computer.

  • The source ports for the daemon connection is bound from the non-reserved port number range.

Equivalent Administration Console property

NetBackup Management > Host Properties > Master Servers > Click Master Servers, Media Servers, Clients > Double-click on server > Firewall.

See Firewall properties.

Feedback

Was this page helpful?
Previous

CLIENT_RESERVED_PORT_WINDOW option for NetBackup servers and clients

Next

DEFAULT_CONNECT_OPTIONS option for NetBackup servers and clients

Feedback

Was this page helpful?