Netbackup 7通信端口.doc

Symantec NetBackup 7 and firewalls Have you ever been frustrated over network communication issues when deploying NetBackup in heavily segmented or protected network environments? If you say yes, then please read on, perhaps there is some information below that could make your life easier. And, if you say no; wow, lucky bastard! :-) NetBackup depends on the network in order to be able to send control traffic as well as the backup/restore traffic over the LAN/SAN. In secured environments it is generally very complicated and time-consuming to find where the problem lies. Many companies use firewalls or access-lists in the routers/switches to control from, to, and how, and if the ports required for NetBackup are blocked, then you will have a problem.Symantec has released a document on ports used, but reading it is somewhat difficult, so I thought I should put it all in table form, and in a format that could be used to send to the security administrator or used in the change request system. Primarily, all communication use TCP at protocol, the exception being Granular Restore Technology (GRT) restores, where the UDP protocol is used for the NFS traffic. This is not covered in this article.So we will start with the default ports as most environments do not change the ports, then followed by each tier. Default ports Service Port Description VNETD 13724 ?NetBackup Network daemon. VERITAS_PBX 1556 ?VxPBX Symantec Private Branch Exchange Service VRTS-AT-PORT 2821 VxAT Symantec authentication service VRTS-AUTH-PORT 4032 VxAZ Symantec Authorization Service BPCD 13782 NetBackup Connection Daemon PDDE_CTRL 10102 PureDisk Controller PDDE_CR 10082 PureDisk Content Router BPRD 13720 NetBackup Request Daemon ?These eight ports are the primary ports used in almost all NetBackup environments using at least version 6.0. Support for 5.x clients and servers is very limited in NetBackup 7, as the main application communication protocols has changed as of version 6.0. Master s