Open topic with navigation
Firewalls
If your source and target are on opposite sides of a firewall, you will need to configure your hardware to accommodate communications. You must have the hardware already in place and know how to configure the hardware ports. If you do not, see the reference manual for your hardware.
- Double-Take ports—Ports 6320, 6325, and 6326 are used for Double-Take communications and must be open on your firewall. Also, Double-Take uses ICMP pings, by default, to monitor the source for failover. You should configure your hardware to allow ICMP pings between the
source and target. If you cannot, you will have to configure Double-Take to monitor for a failure using the Double-Take service. See the failover instructions for your specific job type.
- Microsoft WMI and RPC ports—Some features of Double-Take (push installations, DNS failover, and host-level Hyper-V WAN failover) use WMI (Windows Management Instrumentation) which uses RPC (Remote Procedure Call). By default, RPC will use ports at random above 1024, and these ports must be open on your firewall. RPC ports can be configured to a specific range by specific registry changes and a reboot. See the Microsoft Knowledge Base article 154596 for instructions.
- Microsoft File Share and Directory ports—Double-Take push installations will also rely on File Share and Directory ports, which must be open on your firewall. Check your Microsoft documentation if you need to modify these ports.
- Microsoft File Share uses ports 135 through 139 for TCP and UDP communications.
- Microsoft Directory uses port 445 for TCP and UDP communications.
- ESX ports—If you are using VirtualCenter or an ESX host, port 443 is also required and must be opened.
You need to configure your hardware so that the Double-Take ports, Microsoft Windows ports, and ESX ports. applicable to your environment are open. Since communication occurs bidirectionally, make sure you configure both incoming and outgoing traffic.
There are many types of hardware on the market, and each can be configured differently. See your hardware reference manual for instructions on setting up your particular router.