Default Port | Protocol or Description | Source | Target | Description |
80 | HTTP | SRM | Remote vCenter Server | All management traffic to SRM Server goes to port 80 on the vCenter Server proxy system. |
443 | HTTPS | SRM | vCenter Server | Default SSL web port |
902 | TCP | SRM | Remote ESXi host | Traffic from the SRM Server on the recovery site to ESX hosts when recovering or testing virtual machines with IP customization, with configured callout commands on recovered virtual machines, or that use raw disk mapping (RDM). All NFC traffic for updating or patching the VMX files of virtual machines that are replicated using vSphere Replication use this port. |
Default Port | Protocol or Description | Source | Target | Endpoints or Consumers |
80 | TCP | SRM | Remote vCenter Server | All management traffic to SRM Server goes to port 80 on the vCenter Server proxy system. |
80 | TCP | SRM | Local vCenter Server | Management traffic to the local vSphere Replication management server (VRMS) goes to port 80 on the local vCenter Server proxy system. |
443 | TCP | SRM | vCenter Server | Default SSL web port for incoming TCP traffic |
902 | TCP and UDP | SRM | Remote ESXi host | Traffic from the SRM server on the recovery site to ESXi hosts when recovering or testing virtual machines with IP customization, with configured callout commands on recovered virtual machines, or that use raw disk mapping (RDM). All NFC traffic for updating or patching the VMX files of virtual machines that are replicated using vSphere Replication use this port. |
1433 | TCP | SRM | Microsoft SQL Server | SRM connectivity to Microsoft SQL Server (for SRM database) |
1521 | TCP | SRM | Oracle Database Server | SRM database connectivity to Oracle |
1526 | TCP | SRM | Oracle Database Server | SRM database connectivity to Oracle |
5000 | TCP | SRM | IBM DB2 Database Server | SRM database connectivity to IBM DB2 |
8095 | SOAP | vCenter Server and vSphere Client | SRM | From the vCenter Server proxy to the SRM Server (intrasite only). |
9007 | TCP | SRM External API Client | SRM | Used by external API clients for task automation. |
9085 | HTTP | vCenter Server | SRM | HTTP interface for downloading the UI plug-in and icons. This port must be accessible from the vCenter Server proxy system. |
9086 | HTTPS | vCenter Server | SRM | SRM client plug-in download between the vCenter Server proxy and SRM. |
Port |
Source |
Target |
Description |
9086 |
vCenter Server |
SRM server target site |
vCenter and target SRM communication |
9086 |
SRM server |
SRM server on target site |
SRM to SRM communication |
443 |
SRM |
PSC and vCenter |
SRM to vCenter communication – local and remote |
Default Port | Protocol or Description | Source | Target | Endpoints or Consumers |
80 | TCP | vSphere Replication appliance | Remote vCenter Server | All management traffic to the vSphere Replication appliance goes to port 80 on the vCenter Server proxy system. |
80 | HTTP | vSphere Replication appliance | Remote ESXi host | Used to establish the connection before initial replication starts |
902 | TCP and UDP | vSphere Replication server in the vSphere Replication appliance | Remote ESXi host | Used by vSphere Replication servers to send replication traffic to the destination ESXi hosts. |
5480 | vSphere Replication appliance virtual appliance management interface (VAMI) web UI (vSphere Replication 5.x) | Browser/plugin | vSphere Replication appliance | Administrator's web browser./Used for ngplugin transfer to vCenter. |
8043 | SOAP | vCenter Server Proxy | vSphere Replication appliance | From the vCenter Server proxy to the vSphere Replication appliance (intrasite only). |
8123 | SOAP | vSphere Replication appliance | vSphere Replication server | Management traffic from the vSphere Replication appliance to additional vSphere Replication servers (intrasite only). |
10443 | HTTPS | vSphere Web Client on the primary site | vCenter Server / Inventory Service on the secondary site | The vSphere Replication UI uses the Inventory Service of the remote vCenter Server to list target datastores. |
10443 | HTTPS | vSphere Web Client on the secondary site | vCenter Server / Inventory Service on the primary site |
During recovery, if you selected the option to synchronize the latest changes, the vSphere Web Client on the secondary site requires connectivity back to the vCenter Inventory Service on the primary site. |
31031 | Initial replication traffic | ESXi host on primary site | vSphere Replication server in the vSphere Replication appliance | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |
44046 | Ongoing replication traffic | ESXi host on primary site | vSphere Replication server in the vSphere Replication appliance | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |
Default Port | Protocol or Description | Source | Target | Endpoints or Consumers |
80 | TCP | vSphere Replication management server | Remote vCenter Server | All management traffic to the vSphere Replication management server goes to port 80 on the vCenter Server proxy system. |
80 | HTTP | vSphere Replication management server | Remote ESXi host | Used to establish the connection before initial replication starts |
902 | TCP and UDP | vSphere Replication management server and vSphere Replication server | Remote ESXi host | Used by vSphere Replication servers to send replication traffic to the destination ESXi hosts. |
8043 | SOAP | vCenter Server Proxy | vSphere Replication management server | From the vCenter Server proxy to the vSphere Replication management server (intrasite only). |
8080 | VRMS virtual appliance management interface (VAMI) web UI | Browser | VRMS 1.0.x | Administrator's web browser. |
8123 | SOAP | vSphere Replication management server | vSphere Replication server | Management traffic from the vSphere Replication management server to the vSphere Replication servers (intrasite only). |
Default Port | Protocol or Description | Source | Target | Endpoints or Consumers |
902 | TCP and UDP | vSphere Replication server | Remote ESXi host | Traffic (specifically the NFC service to the destination ESXi servers) between the vSphere Replication server and the ESXi hosts on the same site. |
5480 | VAMI web UI for any additional vSphere Replication servers | Browser | vSphere Replication server | Administrator's web browser. |
8123 | SOAP | vSphere Replication management server | vSphere Replication server | Management traffic from the vSphere Replication appliance or VRMS to the vSphere Replication servers (intrasite only). |
31031 | Initial replication traffic | ESXi host on primary site | vSphere Replication server | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |
44046 | Ongoing replication traffic | ESXi host on primary site | vSphere Replication server | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |
Port | Protocol or Description | Source | Target | Endpoints or Consumers |
80 | SOAP | SRM and vSphere Replication appliance or VRMS | Remote vCenter Server | Management traffic between SRM Server instances and vSphere Replication appliances or VRMS. |
8043 | SOAP | vSphere Client | vSphere Replication appliance 5.x or VRMS 1.0.x | To allow the SRM UI to verify vSphere Replication appliance or VRMS certificates. |
8095 | SOAP | vSphere Client | SRM | To allow the SRM UI to verify SRM Server certificates. |
31031 | Initial replication traffic | ESXi host | vSphere Replication appliance 5.x or vSphere Replication server | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |
44046 | Ongoing replication traffic | ESXi host | vSphere Replication appliance 5.x or vSphere Replication server | From the ESXi host at the protected site to the vSphere Replication appliance or vSphere Replication server at the recovery site. |