topic Re: CVO in Azure - NSG Rules (Kerberos) in ONTAP Discussions

CVO in Azure - NSG Rules (Kerberos)

tyrone_owen_1 — Wed, 04 Jun 2025 10:44:15 GMT

Hi,

I've noticed that the default Network Security Group for CVO has an allowed incoming rule for Kerberos TCP 749. Can anyone articulate why this is please?

Thanks

Re: CVO in Azure - NSG Rules (Kerberos)

ttran — Fri, 27 Nov 2020 02:49:47 GMT

Hello Tyrone_owen_1,

Port 749 is the default port used for the KDC administration daemon.

Regards,

Team NetApp

Re: CVO in Azure - NSG Rules (Kerberos)

darb0505 — Fri, 27 Nov 2020 04:46:55 GMT

Hi tyrone_owen,

As mention before by @ttran, port 749 is used for the kdc (kerberos) administration daemon.

Here is a link to the networking requirements for CVO in Azure incase you were wondering all the ports that are used in the SG.

Let us know if you have any additional questions regarding CVO in Azure or cloud in general

Thanks

Re: CVO in Azure - NSG Rules (Kerberos)

tyrone_owen_1 — Tue, 01 Dec 2020 08:53:13 GMT

Thanks

Probably my ignorance but isn't that an outbound port?

Re: CVO in Azure - NSG Rules (Kerberos)

darb0505 — Wed, 02 Dec 2020 06:42:42 GMT

It is both inbound and outbound. If you are using HA CVO then the inbound traffic will go through the Azure Load Balancer, which is why traffic from the Load Balancer should be open to any port/protocol.

Let me know if you have any further questions.

Thanks

Re: CVO in Azure - NSG Rules (Kerberos)

tyrone_owen_1 — Wed, 02 Dec 2020 09:00:03 GMT

Just to be clear, it is possible for the KDC administration daemon to initiate inbound traffic over 749 to a CVO appliance? In what circumstances please?

Thanks

Re: CVO in Azure - NSG Rules (Kerberos)

Mjizzini — Tue, 15 Dec 2020 08:12:12 GMT

Cloud Manager creates AWS security groups that include the inbound and outbound rules that the Connector and Cloud Volumes ONTAP need to operate successfully. Security group rules for AWS

For more information please visit the below link.

Can the configuration of AWS External Security Groups for CVO be changed?