Symantec Backup Exec Agent For Linux Firewall problems, backupexec

Symantec Backup Exec Agent For Linux Firewall problems, backupexec

If you have installed and configured Symantec Backup Exec Agent For Linux on Unix or Linux, but cannot access Symantec Backup Exec Agent on the Symantec Backup Exec Server, in this case, you should first check whether the Symantec Backup Exec Agent service on Unix or Linux is enabled. As shown in the following figure, you can confirm that the Symantec Backup Exec Agent service has been started. If the service is not started, run the/etc/init. d/VRTSralus. init start command to start the service. (Note: For some reason, I will replace the original server name with db-server)

[root@db-server ~]# lsof -i tcp:10000

COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME

beremote 3495 root    5u  IPv4  13184       TCP *:ndmp (LISTEN)

[root@db-server ~]# ps -ef | grep beremote

root      3495     1  0 Nov02 ?        00:00:09 /opt/VRTSralus/bin/beremote

root      5906  2573  0 12:02 pts/2    00:00:00 grep beremote

[root@db-server ~]# 

 

Next, let's see if we can telnet to the Linux server through port 10000, as shown below: Connection failure, so we can confirm that it is a firewall problem on Linux.

If you want to confirm, you can temporarily disable the Firewall service to test (service iptables stop ).

Then we need to configure the firewall. We need to use the following command to add the port number 10000.

Iptables-a input-s <Media Server IP>-d <Unix Server IP>-p tcp -- dport 10000-j ACCEPT

[root@db-server ~]# iptables -A INPUT -s 192.168.16.16  -d 192.168.16.3 -p tcp --dport 10000 -j ACCEPT

[root@db-server ~]# service iptables save

Saving firewall rules to /etc/sysconfig/iptables: [  OK  ]

[root@db-server ~]# service iptables restart

Flushing firewall rules: [  OK  ]

Setting chains to policy ACCEPT: filter [  OK  ]

Unloading iptables modules: [  OK  ]

Applying iptables firewall rules: [  OK  ]

Loading additional iptables modules: ip_conntrack_netbios_ns ip_conntrack_ftp [  OK  ]

[root@db-server ~]# 

As a result, the telnet test is continued and the problem persists. Check iptables and find the following information:

[Root @ db-server ~] # More/etc/sysconfig/iptables
# Generated by iptables-save v1.3.5 on Tue Nov 4 12:14:53 2014
* Filter
: Input accept [0: 0]
: Forward accept [0: 0]
: Output accept [46679: 7171562]
: RH-Firewall-1-INPUT-[0: 0]
-A input-j RH-Firewall-1-INPUT
-A input-s 192.168.16.16-d 192.168.16.3-p tcp-m tcp -- dport 10000-j ACCEPT
-A forward-j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT-I lo-j ACCEPT
-A RH-Firewall-1-INPUT-p icmp-m icmp -- icmp-type any-j ACCEPT
-A RH-Firewall-1-INPUT-p esp-j ACCEPT
-A RH-Firewall-1-INPUT-p ah-j ACCEPT
-A RH-Firewall-1-INPUT-d 224.0.0.20.- p udp-m udp -- dport 5353-j ACCEPT
-A RH-Firewall-1-INPUT-p udp-m udp -- dport 631-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m tcp -- dport 631-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m state -- state NEW-m tcp -- dport 8080-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m state -- state NEW-m tcp -- dport 8088-j ACCEPT
-A RH-Firewall-1-INPUT-m state -- state RELATED, ESTABLISHED-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m state -- state NEW-m tcp -- dport 21-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m state -- state NEW-m tcp -- dport 22-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m tcp -- dport 5901-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m tcp -- dport 5902-j ACCEPT
-A RH-Firewall-1-INPUT-p tcp-m state -- state NEW-m tcp -- dport 1521-j ACCEPT
-A RH-Firewall-1-INPUT-j REJECT -- reject-with icmp-host-prohibited
COMMIT
# Completed on Tue Nov 4 12:14:53 2014

This Linux Server version is Oracle Linux Server release 5.7. You need to modify the red section above to the following configuration, and then restart the iptables service. Solve the problem.

 

[root@nbolnx01 ~]# service iptables restart

Flushing firewall rules: [  OK  ]

Setting chains to policy ACCEPT: filter [  OK  ]

Unloading iptables modules: [  OK  ]

Applying iptables firewall rules: [  OK  ]

Loading additional iptables modules: ip_conntrack_netbios_ns ip_conntrack_ftp [  OK  ]

 

References:

Http://www.symantec.com/business/support/index? Page = content & id = TECH68258

How to check whether Symantec Backup exec agent is enabled

Perform the following actions on the server to be checked:
1. Click Start and run
2. Enter Services. msc
3. Check Backup Exec Remote Agent For Windows Systems
4. If it is displayed after the startup, It is started normally, and the other statuses are failed to start.
 
How does symantec backup exec Back Up Files in Linux?

My DFS is another computer. You can enter the UNC path to view it. When backup Exec 2010 is enabled, how does E0000F16 usually fail to find the backup media and power loss? That's all I know. You can refer to wkSZgu.