Linux iptables configuration for Symantec Backup Exec
Here I have described , how to enable the backup exec agent ports on Linux iptables configuration
Restart the backup exec server
Now login to the linux machine and enable access for this port range (31821-32829) and the Backup Exec agent VRTSralus which is running on the port 10000 (default port for VRTSralus).
If webmin is running on the port 10000, edit /etc/webmin/miniserv.conf and change the default port to 10001
#iptables -A INPUT -p tcp --dport 10000 -j ACCEPT
#iptables -A INPUT -p tcp --dport 32821:32829 -j ACCEPT
#service iptables save
#service iptables restart
Also you can manually edit and /etc/sysconfig/iptables and add the below mentioned line
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 32821:32829 -j ACCEPT
For other document refer IPTABLES label
Here I have described , how to enable the backup exec agent ports on Linux iptables configuration
By default Symantec backup exec will be running on dynamic ports . So we have to manually configure the dynamic port range in the backup exec server.
To configure the dynamic port range manually, follow the below steps.
In the symantec backup exec go to
Tools -- Options -- Network Security and check Enable remote agent TCP dynamic port range
and specify the ports range manualy . Port range 31821-32829
Restart the backup exec server
Now login to the linux machine and enable access for this port range (31821-32829) and the Backup Exec agent VRTSralus which is running on the port 10000 (default port for VRTSralus).
If webmin is running on the port 10000, edit /etc/webmin/miniserv.conf and change the default port to 10001
#iptables -A INPUT -p tcp --dport 10000 -j ACCEPT
#iptables -A INPUT -p tcp --dport 32821:32829 -j ACCEPT
Now Save and restart iptables
# iptables-save > /etc/sysconfig/iptables
or#service iptables save
#service iptables restart
Also you can manually edit and /etc/sysconfig/iptables and add the below mentioned line
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 32821:32829 -j ACCEPT
For other document refer IPTABLES label

In this example, the Port range, 31821-32829, specified in the Backup Exec network security settings is different than the port range, 32821:32829, specified in the iptables entry.
ReplyDeleteIn Backup Exec 2012, the network security settings are in a slightly different place, but once you find them, this example works as described.