/
UTORrecover - NetWorker TCP/IP and Firewall Checklist

UTORrecover - NetWorker TCP/IP and Firewall Checklist

UTORrecover Checker

The utorrecover_checker.sh script runs a few checks to validate your host is ready to be on-boarded.

curl -s https://backups.eis.utoronto.ca/static/scripts/utorrecover_checker.sh | bash

Firewall Ports

Windows Installs: Ensure all 3 Windows firewalls (private, domain and public) are opened to the list of NetWorker Servers listed below.

Default Ports

Allow 7938/udp and 7937:9936/tcp from the UTORrecover NetWorker Backup Server IPs.

Customizing Ports

After upgrading or doing a fresh install of the NetWorker server you can run this command to see the ports set by NetWorker: nsrports. Output will look like this:

Service ports: 7937-9936 Connection ports: 0-0 # or Service ports: 7937-7943 Connection ports: 10001-10100

If you need to change them, you can run the following commands. They must be run separately, and you will need to stop and start NetWorker to have them take effect:

nsrports -S 7937-9936 nsrports -C 10001-11000

Client Firewall

Set up any firewall rules based on the ports defined above.

This set of scripts configures firewalld and ufw to allow bidirectional communication between the NetWorker Client and UTORrecover backup servers using the default port requirements.

curl -s https://backups.eis.utoronto.ca/static/scripts/utorrecover_firewalld.sh | bash
curl -s https://backups.eis.utoronto.ca/static/scripts/utorrecover_ufw.sh | bash

TCP/IP Requirements

The following requirements are checked when submitting a NetWorker client Connectivity request (How-to check NetWorker client connectivity for UTORrecover )

The NetWorker client, when configured as a DHCP client, must use a reserved address that is synchronized with DNS.
The name of the host that the hostname command returns on the system must match the name that the IP address resolves to when using the nslookup command.
Forward and reverse DNS lookups for the host are successful.
OS tools, for example, the nslookup command, must resolve the IP address of the host to the same hostname that you defined for the NIC that NetWorker uses.
The hostname must not contain an underscore character (_).
If the client has multiple IP addresses, configure a static route on the registered IP address to ensure connectivity with the UTORrecover NetWorker Backup Server IPs.

Linux

The /etc/hosts file on each Solaris and Linux NetWorker host must contain an entry for the IPv4 loopback address and the hostname. For example, on Linux the /etc/hosts file contains the following entries by default: 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4.The recommended value is 127.0.0.1 hostname hostname.domain localhost
(Optional) Adding the NetWorker Servers listed in "UTORrecover NetWorker Backup Server IPs" to the hosts file on your server, /etc/hosts on *nix based systems, will increase backup speeds by reducing DNS queries.

On a Linux NetWorker client, the NetWorker daemons cannot start when the IP address 127.0.0.1 is inaccessible on the loopback interface. This requirement is true even in an IPv6-only environment

Windows

(Optional) Adding the NetWorker Servers listed in "NetWorker Backup Server IPs" to the hosts file on your server, C:\Windows\System32\drivers\etc\hosts on Windows, will increase backup speeds by reducing DNS queries.
On Windows hosts, NetWorker does not require changes to the hosts file. It is recommendedthat you use the default hosts file settings for the IPv4 loopback address on Windows hosts.

 

University of Toronto - Since 1827