Standalone backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)
Post Reply
mazcredi
Influencer
Posts: 11
Liked: never
Joined: Dec 13, 2011 5:34 pm
Full Name: Mazen Credi
Contact:

B&R Repository Destination when not in server's domain

Post by mazcredi »

My Endpoint Backup node is in a DMZ while my VEEAM B&R Server is on my production network. The DMZ node is not a member of the production AD Domain. I've created a firewall rule to allow port 10001 from the node to the server. However, if I want to backup to a repository on the server, I get a message saying "No backup repositories are assigned to your Windows account" even though I have a number of repositories with permission of "Allow to everyone". Is it true then that only members of the same domain can backup to a repository?
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: B&R Repository Destination when not in server's domain

Post by Mike Resseler »

Hi,

What I did for this specific situation is created a backupuser in the domain (with a strong password) and used those credentials (DOMAIN\backupuser) to connect to the repository when going through the wizard

Is that something you can do in your situation?

Thanks

Mike
mazcredi
Influencer
Posts: 11
Liked: never
Joined: Dec 13, 2011 5:34 pm
Full Name: Mazen Credi
Contact:

Re: B&R Repository Destination when not in server's domain

Post by mazcredi »

Hi Mike,

Right. Yes I was able to access the repository like that. Now I am getting this error during the backup job:

"A connection attempt failed because the connected party did not properly respond"

I am thinking there may be an additional port that needs to be opened between the DMZ and my server. Do you happen to know which one(s) are needed?
mazcredi
Influencer
Posts: 11
Liked: never
Joined: Dec 13, 2011 5:34 pm
Full Name: Mazen Credi
Contact:

Re: B&R Repository Destination when not in server's domain

Post by mazcredi »

I beleive it is 2501
mazcredi
Influencer
Posts: 11
Liked: never
Joined: Dec 13, 2011 5:34 pm
Full Name: Mazen Credi
Contact:

Re: B&R Repository Destination when not in server's domain

Post by mazcredi »

Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: B&R Repository Destination when not in server's domain

Post by Mike Resseler »

Hi,

Sorry for my late reply... All ports specific for VEBF are described here: http://helpcenter.veeam.com/endpoint/10/used_ports.html

Did you got it running already?

Thanks

Mike
mazcredi
Influencer
Posts: 11
Liked: never
Joined: Dec 13, 2011 5:34 pm
Full Name: Mazen Credi
Contact:

Re: B&R Repository Destination when not in server's domain

Post by mazcredi »

Hi Mike,

Thanks for your reply and the helpful article.

It is working now but I did not need to open all the ports mentioned in the article. All I opened was the 10001 and the 2500 range between the Endpoint, the B&R Server and the Repository Server.
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: B&R Repository Destination when not in server's domain

Post by Mike Resseler »

Mazen,

Thanks for coming back to us! Appreciated

Cheers

Mike
danielbastos
Service Provider
Posts: 6
Liked: never
Joined: Feb 26, 2015 2:35 am
Full Name: Daniel Bastos
Location: Fortaleza, Ceará - Brasil
Contact:

Re: B&R Repository Destination when not in server's domain

Post by danielbastos »

You have to set permissions on Backup Repository in Veeam Server, because the default permission is Deny to all.
Set the permission to user used to connect to veeam server from Endpoint.
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: B&R Repository Destination when not in server's domain

Post by Dima P. »

Correct. Default permissions for default VBR repository (C:\Backup) is allow all, for the rest - permissions should be set manually via Endpoint Permissions control in VBR.
Post Reply

Who is online

Users browsing this forum: Bing [Bot], Google [Bot] and 40 guests