1. Support
  2. Knowledge base
  3. 100000879

How to backup a remote server from different domain without domain-wide trust relationship with Media server.

Article: 100000879
Last Published: 2021-05-26
Ratings: 0 1
Product(s): Backup Exec

Problem

How to backup a remote server from different domain without domain-wide trust relationship with Media server.

 

Solution

The Windows machine from a different domain can be backed up, provided they are in same network (subnet and IP range)  and Remote Agent for Windows installed on the remote machine with publishing enabled.  A user account of the different domain having Local Administrative Rights on the remote Windows Machine from that domain or a domain admin account of the other domain needs to be added to Backup Exec and use it for backup of particular remote machine..
 
1. Install the "Remote Agent for Windows Servers" to the Remote machine, needed to be backed up. 
 
Refer to:
How to install the Backup Exec 15 and above Agent for Windows (a.k.a. Remote Agent, AWS. RAWS)
 
2. Enable the publishing on Remote Agent for Windows Servers:
 
Refer:  https://www.veritas.com/docs/000036060 
 
3. If Firewall is present between the Backup Exec Server and the Remote Server, then the following PORTS needs to be opened on the FIREWALL:

 
PORT NUMBER
 
TYPE OF CONNECTION
 
10000
 
CONTROL
 
49152 onwards (Example-Dynamic Ports, like: 50000 to 50025)
 
DATA
 
6101 (by default)
 
REMOTE AGENT PUBLISHING
 

  Note: A DYNAMIC PORT is a Port which is not permanently bound to any connection (once the backup is complete, the port is released).
 
Note: It is recommended to keep a range of ports opened instead of just one because a dynamic port can be engaged by any other application and cause can cause data connection issues. Therefore keep at least 25 ports opened for the remote system.
 
Enable Remote Agent TCP dynamic port range: Example: 5000 - 5025.
 
If a port range is not specified, Backup Exec attempts to use the full range of dynamic ports available the backups or restores may fail in Firewall/TCP Filtered Domain Environment because of it.
For more details on using backup with firewall, refer : https://www.veritas.com/docs/000029930

4. Add a new logon account {eg: Remote-Domain-Name\Administrator} {*Note: Do not make it Default}.
Refer:  How to add or edit a Backup Exec logon account.
 
5. Go to any existing selection list or to a new selection list and expand the "Windows System" under the "Favorite Resources". Now It should be able to see and  allow to select the Remote Server and run the backup.
 

 

Was this content helpful?

Article Languages