Installing Zerto Virtual Replication : Zerto Virtual Replication DR Architecture
  
Zerto Virtual Replication DR Architecture
The following diagram shows how the main Zerto Virtual Replication components are deployed across sites to provide disaster recovery across these sites.
The following architecture diagram shows the ports that must be opened in the firewalls on all sites.
Zerto Virtual Replication can be installed at multiple sites and each of these sites can be paired to any of the other sites.
Zerto Virtual Replication supports both the protected and recovery sites being managed by a single System Center Virtual Machine Manager. For example, in the following scenario:
From a branch office, to the main office, both managed by the same System Center Virtual Machine Manager.
From one host to a second host, both managed by the same System Center Virtual Machine Manager.
To the same host but using different storage for recovery.
it is recommended to install Zerto Virtual Replication in the main office site where protected machines will be recovered.
The following table provides basic information about the ports shown in the above diagram by Zerto Virtual Replication.
Port
Purpose
4005
Log collection between the ZVM and site VRAs.
4006
Communication between the ZVM and local site VRAs and the site VBA.
4007
Control communication between protecting and peer VRAs.
4008
Communication between VRAs to pass data from protected virtual machines to a VRA on a recovery site.
4009
Communication between the ZVM and local site VRAs to handle checkpoints.
8100
Communication between the ZVM and the SCVMM (System Center Virtual Machine Manager).
9779
Communication between ZVM and ZSSP (Zerto Self Service Portal).
9989
Communication between ZCM, and ZCM GUI and ZCM REST APIs.
9080*
Communication between the ZVM, Zerto Powershell Cmdlets, Zerto VSS Agent and Zerto Diagnostic tool.
9081*
Communication between paired ZVMs**
Note:  
When a single SCVMM is used for both protection and recovery, only one ZVM is installed and port 9081 is not used.
Recovery to a different SCVMM uses port 9081 between the ZVMs in each site.
9180*
Communication between the ZVM and the VBA.
9669*
Communication between ZVM and ZVM GUI and ZVM REST APIs, and the ZCM.
Communication between every Hyper-V host and the Zerto Virtual Manager.
*The default port provided during the ZVR installation which can be changed during the installation.
**When the same System Center Virtual Machine Manager is used for both the protected and recovery sites, Zerto Virtual Replication is installed on one site only and this port can be ignored.