Auto Recovery operations require communication between vCenter, ESX servers, access nodes, and MediaAgents. If firewalls are present, open the required ports before you perform Auto Recovery operations.
If the MediaAgent and access node are installed on different machines, open the required ports on both systems.
Required ports for VMware Auto Recovery
| Port | Protocol | Source | Destination | Purpose |
|---|---|---|---|---|
| 443 | SSL HTTPS | MediaAgent and access node | vCenter and ESX server | VMware management and web service communication. |
| 902 | TCP (VMware NFC) | MediaAgent and access node | ESX server | Data transfer operations that use VMware vStorage APIs for Data Protection (VADP). |
| 8400 (default) | TCP | Required when a VM group uses multiple access nodes. The CVD port is used to establish communication between access nodes. |
vCenter and ESXi communication
Open port 443 and 902 for bidirectional communication between the MediaAgent, access node, vCenter Server, and ESX servers.
If vCenter Server uses a non-default HTTPS port, open that port as well.
Note
Operations that use VDDK 5.5 can fail when vCenter Server is configured to use a non-default port. For more information, see KB Article VMW0013.
Multiple access nodes
If a VM group uses multiple access nodes, ensure that the access nodes can communicate with each other.
The CVD port (8400 by default) is used to establish communication between access nodes.
To allow communication between access nodes across networks, configure the required network routes.
Additional ports for test failover and live mount
Features that use the 3dnfs service, including VMware test failover and live mount operations, require additional firewall ports.
Open the following ports between the ESX server and the MediaAgent that runs the 3dnfs service.
For Linux virtual machines, a Linux access node can host the 3dnfs service and act as the MediaAgent used for these operations.
Note
If IPv6 is enabled on both the ESX server and the MediaAgent, 3dnfs communication uses IPv6.
| Port | Protocol | Source | Destination | Purpose |
|---|---|---|---|---|
| 2049 | TCP | ESX server | MediaAgent | NFS communication for mounted snapshots. |
| 111 | TCP, UDP | ESX server | MediaAgent | SUN RPC PortMapper service used to discover NFS and mount ports. |
| User-defined port | TCP | ESX server | MediaAgent | Mount service port used by the 3dnfs service. In firewalled environments, create the nMount3Port additional setting on the MediaAgent that runs the 3dnfs service and specify an available TCP port to use as the mount service port. After you create the setting, restart Commvault services. |