Help with Backing up through firewall - BE 9.0 4454 2

[Raid5]

I have allowed tcp over ports 10,000 - 11,000 on the firewall from backup box to host machine. I have configured BE to use this range of ports for it's agents. BE still will not backup data "Communication error between Backup exec job engine and the remote agent. The remote server will go into the pre-processing state and then about 3 min later it will fail.
I can ping through the firewall to the remote server but cannot ping from outside to inside.

Anyhelp on this would be appreciated.

Thank You,
Raid5

 

[justin2000]

Raid5

You going to have to be able to ping from the outside to inside again, how is the data supposed to know how to get back?

Do the following tests..

Telnet to the remote server across the firewall from the backup server on port 10,000 - do you get a connection?
Do the same thing vice versa - do you get a connection?

It doesn't have to ping by name, Ip address is OK, but it must go both ways. If you can only do this via IP address, you need to setup user defined selections for the servers across the firewall.

 

[Qdog]

Dude, got some experience with this.

Configure BE at Tools > Options > Network for the following:
1. Enable media server TCP dynamic port range: open up 10100--10150 (ports coming in to the backup server)
2. Enable remote agent TCP dynamic port range: open up 10151--10200 (ports going out to remote servers)

Next, open up port 10000 going out to the remote server on other side of firewall.

Next, open up the range in #1 above coming in through firewall to the IP of the backup server.

Lastly, open up the range in #2 above going out to the remote server.

Remember the range you specify in #1 and #2 above will be used for ALL remote servers you backup, not just the servers on other side of firewall.

Lastly, if your firewall is using one-to-many Network Address Translation (NAT) you must configure port forwarding for the range in #1 above to the IP of the backup server or you will not be able to backup across that type of firewall with Backup Exec 9.

Good luck!

 

[Raid5]

Thanks for the help guys. I think we found a routing problem where pings from outside the network were going to the internet instead of back inside. I will fill you in on it when we get it figured out. Thanks for breaking it down Qdog. Between you and Justin 2000 I know I at least had BE configured correctly.