Configuring SnapMirror through a firewall.
All forms of SnapMirror and SnapVault use the standard bind/listen/accept sequence on a TCP socket. In an asynchronous SnapMirror or SnapVault relationship, the primary filer listens on TCP port 10566. The secondary filer, using an available user port (1024-65535), will connect to the primary filer or OSSV client on TCP port 10566 to initiate a transfer.
Note:
The firewall does not need to be open on ports 1024-65535.
If multi-path is configured for SnapMirror, then the secondary filer will also listen on TCP port 10565 for the additional multi-path connections.
Synchronous SnapMirror requires additional TCP ports, 10567 through 10569. For a Synchronous SnapMirror relationship the primary filer will listen on TCP ports 10566 and 10569. The secondary filer listens on TCP ports 10565, 10567 and 10568.
OSSV clients and Filers also allow for NDMP management of SnapMirror and SnapVault. Both primary and secondary systems listen on Port 10000 for NDMP communications. OSSV's NDMP listening port may be configured to any desired and unused TCP port.
An important consideration when configuring the firewall is to allow the socket connections to be initiated in either direction to allow the SnapMirror relationships to be reversed as needed or SnapVault data to be restored.
| TCP Listening Port | Primary System | Secondary Filer |
| 10000 | X | X |
| 10565 | | X |
| 10566 | X | |
| 10567 | | X |
| 10568 | | X |
| 10569 | X | |
Ismo.
