Laptop Backup to Veeam Backup Server over AWS EC2 Instance

[rezwan_mahbub]

Hello,

I need help in activating my laptop backup using a VBR server that I have already installed over one of my EC2 Instance.

I am planning to take the backup of my laptop on that VBR (over the internet). I have tried to open few Inbound and outbound ports in my EC2 Security Group but somehow the VBR server is not being able to connect my Laptop over the internet and configure itself in the Windows Agent (already installed not configured in my laptop).

Inbound Rules
https://u.pcloud.link/publink/show?code ... 2VYXakOxj7
Outbound Rules
https://u.pcloud.link/publink/show?code ... nBkV08XYeV

Please let me know, if this is not possible or I am missing any step in doing so.

[Egor Yakovlev]

Hi Rezwan,

It is best to work over secure VPN instead of exposing ports over public internet.
Anyhow, I can see you are missing transport ports opened, those start with 2500 as well as RPC ports for communication.

/Cheers!

[rezwan_mahbub]

Hello Egor Yakovlev,

I have tried adding the below outbound ports:
2500 - 3300 & 49152 - 65535
And the following inbounds:
49152 - 65535, 2500 - 3300

I have also tried to stop Windows firewall in my Laptop

But Still the issue is persistent.

https://u.pcloud.link/publink/show?code ... 6Ss7Re1N67

[Egor Yakovlev]

Are you sure rescan fails due to networking?
What errors you see in the session?

p.s. Technical Support is always at your disposal at my.veeam.com or directly from VAW UI

[rezwan_mahbub]

At last connected. May be my Official Network was firewalled against some of the ports.

However can not still take backup for the following error.

https://u.pcloud.link/publink/show?code ... G8fjcs5WR7

[Egor Yakovlev]

172.31 is within private network range.
What server that is? Did you end up with VPN to AWS?

[rezwan_mahbub]

Nope, I am not using any VPN to AWS. Please help to get me a solution to get out of it.
By the way, how much will it cost for an hour VPN (to N Virginia) to my laptop. If you are aware

[Egor Yakovlev]

Question of 172.31 still remains.
If its yet another server within AWS infrastructure, that is just purely unsupported configuration with VAW trying to communicate with Repository behind NAT...

As for the VPN, there is a multitude of free offerings, like VeeamPN.

[rezwan_mahbub]

Thanks for the advice of using VeeamPN(free). I have successfully launched VeeamPN and also connected to my VBR server by routing my entire network traffic through VeeamPN, however I end up with the same screen as above.
https://u.pcloud.link/publink/show?code ... G8fjcs5WR7

I learned how to connect though VPN - but I think there is something wrong in the VBR server setting. Can anybody help.

[Dima P.]

Rezwan,

Based on the screenshot agent was able to connect to repository (that's why you see 'required backup infrastructure resources have been assigned'). Something is going on with the target repository itself.

Can you please clarify:
1. What repository you are using and how it's configured?
2. Which mode is used to manage agent machine in the question (standalone / managed by Veeam B&R)?

Thank you!

[rezwan_mahbub]

Question of 172.31 still remains.
If its yet another server within AWS infrastructure, that is just purely unsupported configuration with VAW trying to communicate with Repository behind NAT...

As for the VPN, there is a multitude of free offerings, like VeeamPN.

Thanks Egor and Dima,

With VeeamPN I have established a point to point VPN and then I could take a backup over VPN easily. However, I couldn't route the VPN on internal IP over the VPC (creating the VBR under the same VPC and keeping under the required subnet). There is a double bandwidth requirement in this case.
I would be glad if someone can help me solving this final issue. If it requires NAT, then AWS will charge additional for that - would be glad if VeeamPN can do that for me.

[Dima P.]

Hello Rezwan,

We are glad to help but, honestly, without getting answers from you related to your setup questions we cant do that

If you feel unconfutable discussing your infrastructure via public forums please raise a support ticket and continue with our support team. In such case please do not forget to share the case ID. Thank you!

[rezwan_mahbub]

Hi Dima,

Here are your answers:
1. What repository you are using and how it's configured? -- I am using Veeam Backup and Replication 11, installed in a AWS EC2 instance.
2. Which mode is used to manage agent machine in the question (standalone / managed by Veeam B&R)? - Currently I am taking Backups from all Physical Infrastructures, not managed by VBR, all pushed using Windows Agents (from laptop and other AWS EC2 instances).

[rezwan_mahbub]

Is it possible to create a point to site VPN (point{my laptop} to site{AWS VPC}) without the help of NAT gateway? NAT gateway is expensive in AWS

[Dima P.]

1. What repository you are using and how it's configured? -- I am using Veeam Backup and Replication 11, installed in a AWS EC2 instance.

Veeam B&R server and repository are no the same machine?

2. Which mode is used to manage agent machine in the question (standalone / managed by Veeam B&R)? - Currently I am taking Backups from all Physical Infrastructures, not managed by VBR, all pushed using Windows Agents (from laptop and other AWS EC2 instances).

So that's a standalone agent deployment to a Veeam B&R repo? You must make sure that Veeam Agent has direct connection to your Veeam B&R server & Repository whenever backup job kicks in.

Is it possible to create a point to site VPN (point{my laptop} to site{AWS VPC}) without the help of NAT gateway? NAT gateway is expensive in AWS

Should be possible yes. To avoid VPN usage you can try Veeam Cloud connect solution which allows agent to connect with backup infrastructure over the WAN.