We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Backup

Site-to-Site Deployment

  • Last updated on

This article assumes each Barracuda Backup appliance in the deployment is physically installed and connected to the network.

In a site-to-site deployment, a Barracuda Backup appliance acts as a backup or "private cloud" to replicate data from one or more Barracuda Backup appliances. Each Barracuda Backup appliance can send data to one or more other Barracuda Backup appliances. In the following image, a target Barracuda Backup appliance acts as a backup to two other Barracuda Backup appliances:



Use the following steps to configure your Barracuda Backup appliance.

Create a Barracuda Cloud Control Account

You must have a Barracuda Cloud Control account to use Barracuda Backup. If you do not already have an account, follow these steps:

  1. Go to the following URL: http://login.barracudanetworks.com/
  2. Complete the fields on the Create New Account page, and click Submit.

Configure the IP Address and Network Settings

By default, the Barracuda Backup appliance is configured to obtain an IP address on your network using DHCP. If you want to assign it a static IP address instead, you can configure it using the console administration interface. If not, skip the following steps:

To configure the Barracuda Backup appliance to use a static IP address:

  1. Connect a monitor and keyboard to the Barracuda Backup appliance.
  2. Use your arrow keys to highlight the DHCP/Static field.
  3. Using the spacebar select Static for your IP address assignment preference.
  4. Enter the IP Address, Netmask, Default Gateway, Primary DNS Server, and Secondary DNS Server (optional) as appropriate for your network.
  5. Click Enter on the Commit Changes box.

Once changes are committed, the Barracuda Backup appliance attempts to connect to Barracuda Networks.

The LAN and Internet boxes on the console administration interface are green when the Barracuda Backup appliance is determined to be online. The Barracuda box remains red until it is linked to an account later in the installation process.

Enter Encryption Key

This section only applies to the Barracuda Encrypted Backup appliance models 6090, 8090, 9090, and 10090. If you are not configuring an encrypted device, continue with Configure your Corporate Firewall.

  1. Use the Barracuda Console to access the configuration menu using the credentials admin / admin.
  2. Use the arrow keys to highlight Disk Encryption in the left pane.
  3. Press Enter to switch from read mode to edit mode.
  4. Use the arrow keys to highlight the Change Encryption Key section in the right pane.

     Use the arrow keys to navigate between the fields in the right pane.

  5. Type a new encryption key that meets the password requirements listed on-screen in the Enter New Key and Confirm New Key fields.

    Important: The Barracuda Encrypted Backup appliance ships with a default security key. Once you enter a new encryption key, the key is known only to you; Barracuda cannot retrieve your key.

  6. Optionally, type a new power-on password in the Enter Password and Confirm Password fields.

    The power-on password is optional. If you select to use the power-on password, you are prompted to enter the password each time the appliance boots up.

  7. Navigate to Save, and press Enter. The confirmation screen displays.

  8. Press Enter to continue and return to the Barracuda Console.

  9. In the System Configuration screen, use the down arrow to navigate to and select Exit, and press Enter.

Configure Your Corporate Firewall

If the Barracuda Backup appliance is located behind a corporate firewall, you may need to open the following ports to allow communication between the Barracuda Backup appliance and the Internet. In site-to-site deployment, you can specify the ports to use for replication on the Backup > Replication page, or optionally, you can replicate over ports 5120-5129.

  • Ports 80, 443, 1194, and 5120-5129 outbound for both TCP and UDP traffic. The ports are used to transfer data to either Barracuda Cloud Storage or to another Barracuda Backup appliance over the Internet. In site-to-site deployment, data can be replicated either over ports 5120-5129 or over a set of ports you specify on the Backup > Replication page.

    If you would like to restrict the outbound network traffic on these ports to Barracuda Cloud Storage, contact Barracuda Networks Technical Support for a list of the IP addresses to allow.

Activate Your Appliance

Your Barracuda Backup appliance must be linked to your Barracuda Cloud Control Account before you can initiate data backups. See the following articles for details on linking a Barracuda Backup appliance:

Add the Appliance Name and Location

Use the System > Barracuda Backup Appliance Settings page to view or modify the Barracuda Backup appliance details including name, time zone, physical location, and display group:

  • Barracuda Backup Appliance Name – Name used to identify the currently selected Barracuda Backup appliance in the web interface
  • Backup Appliance Time Zone – The time zone where the currently selected Barracuda Backup appliance is located
  • Barracuda Backup Appliance Location – The physical location of the Barracuda Backup appliance including city, state, and country
  • Barracuda Backup Appliance Display Group – The display group in which the Barracuda Backup appliance resides
    • Manage your display groups – Click to add or remove a display group in the Admin > Display Groups page
  • Backup Export Tool Settings – Set up the Backup Export Tool.

Create Display Groups (Optional)

If you have multiple Barracuda Backup appliances, you can manage them by creating display groups on the Admin > Display Groups page.

See the Display Groups Page for more information.


This section describes how to configure backups.

Add Systems and Select Data Sources

There may be more than one data source on each server, and each can have unique back up characteristics.

Create Backup Schedules

Once you configure computers and data sources, create granular backup schedules. Select specific sets of data to back up and configure multiple schedules for each source, each with different sets of data selected. See the Schedules Page for more information.

See the Schedules Page for more information.

Create Data Retention Policies

Data is retained based on a traditional grandfather-father-son (daily-weekly-monthly) rotation model. You can specify how long to keep daily, weekly, monthly, and yearly backups by creating data retention policies. Different retention policies can be created for different sets of data including files, data backed up by a Barracuda Backup Agent, and email messages.

You can create one policy for all of the computers and data sources on a Barracuda Backup appliance or multiple policies that each include some subset of the data.

Modify Replication Rate Limit (Optional)

Rate limits control the data replication rate to Barracuda Cloud Storage or other offsite storage locations. You can limit Internet bandwidth consumption during peak usage times, and schedule backups for non-peak hours.

See the Rate Limit Page for more information.

Exclude Files from a Backup (Optional)

You can create exclusion rules that use pattern matching to identify directory or file names that are not to be backed up. Files which are typically excluded from backups include temporary files, music, movies and other files which are not essential for business needs in the Backup > Exclusions page.

See the Exclusions Page for more information.

Check Backup Reports

View reports on an ongoing basis as needed. The Reports > Backup page contains detailed backup reports. A list of in progress backups displays at the top of the page, and once a backup is complete, a detailed report displays in a table by device. Click Details following the report you want to view.

See the Reports Page for more information.


This section describes how to secure your Barracuda Backup appliances.

Communication and Configuration

Administration and backup configuration that is set using the Barracuda Backup web interface is sent to the Barracuda Backup appliance via a 256-bit encrypted VPN tunnel. The Barracuda Backup appliance uses HTTPS port 1194 to send status updates to Barracuda Backup. Data transfers are initiated by the Barracuda Backup appliance rather than by Barracuda Cloud Storage or a remote Barracuda Backup appliance.

Data Transmission and Storage

Data transferred between your network and Barracuda Cloud Storage, or between your network and a remote Barracuda Backup appliance, is always encrypted. File parts are AES 256-bit symmetrically encrypted before they are stored, and they remain encrypted until a restore is requested.

Management Access

  • Monitor Activity – You can check the user activity page periodically for authentication attempts, changes to settings, and updates to account information. Go to the Admin > User page to see all activity for an account, including logins and when a user has enabled or disabled replication.
  • Restrict Logins by IP Address – You can restrict access to Barracuda Backup to one or more IP addresses. On the Admin > Users page, click Edit to edit a user account; enter an IP address or a range.
  • Secure Network Access – HTTPS is used for secure web browser communication with Barracuda Backup unless logging in to the local web interface.


Data transfers from the local Barracuda Backup appliance to a receiving Barracuda Backup appliance are always encrypted. Data is stored compressed and encrypted at rest on the receiving Barracuda Backup appliance; the local Barracuda Backup appliance does not store in an encrypted or compressed state. Barracuda Backup utilizes an aggressive combination of symmetrical and asymmetrical encryption. The United States government recently approved 192-bit AES encryption as the preferred method for protecting top-secret information. The Barracuda Backup solution starts with even higher 256-bit AES encryption. In addition, Barracuda Networks has developed a proprietary advanced digital cataloging system that breaks down your data into small pieces and tracks the changes of these parts over time, and strips the original meta identifiers from your files.

As data is transmitted to the remote Barracuda Backup appliance, your symmetrically-encrypted data parts are compressed and sent over your Internet connection with an asymmetrically-encrypted key.


This section describes how to configure replication.


  • Only the Barracuda Backup appliance 490 and higher can act as a backup to other Barracuda Backup appliances, although any Barracuda Backup appliance can send data.
  • Data can be backed up to both a second Barracuda Backup appliance and to Barracuda Cloud Storage. Data that is backed up on a second Barracuda Backup appliance cannot be backed up yet again onto another Barracuda Backup appliance.
  • For every Terabyte of data replicated, Barracuda Networks recommends a 1.5 Mbps or T1 connection.
  • You must have the serial number and replication code of the destination. These can be found by selecting the destination Barracuda Backup appliance and looking at its Backup > Replication page.

Barracuda Backup appliances used to back up data from one or more Barracuda Backup appliances are known as destinations. Data from one Barracuda Backup appliance can be replicated to one or more destinations.

Firewall Ports

For maximum security, place your device behind a corporate firewall.

If your Barracuda Backup appliance is located behind a corporate firewall, open the following ports on your firewall to ensure proper operation:

Port Direction TCP UDP Usage
22 Out Yes No Technical Support Services
80 Out Yes Yes Communication
443 Out Yes Yes Communication
1194 Out Yes Yes Communication
5120-5129* Out Yes Yes Replicate data to Barracuda Cloud Storage

*Barracuda Backup uses these ports to securely transfer data over the Internet to the offsite
storage location. Contact Barracuda Technical Support to restrict outbound network traffic on these ports to only reach Barracuda Networks.

Verify Retention Policies

Make sure that your retention policies are configured before configuring replication. Otherwise you may waste bandwidth copying data that does not need to be replicated. On the Barracuda Backup Server, go to the Backup > Retention Policies page and verify that the retention policies are configured before configuring replication to avoid copying data that does not need replication.

Verify Internet connectivity between the local and remote Barracuda Backup Server(s). Configuring a secure VPN connection between multiple Barracuda Backup Servers ensures the highest level of security.

Configure Replication

To configure data replication,

  1. Log in and select the Barracuda Backup appliance to which you want to add a replication destination, and go to the Backup > Replication page.
  2. Click Add a Target.

  3. In the Add Replication Target page, enter the target Barracuda Backup details in the Replication Target Information section, or select an appliance on your account from the drop-down menu to automatically populate this section.
  4. In the Rate Limit section, select the Default Rate Limit; by default, Barracuda Backup uses Full Speed as the default rate limit.
  5. Optionally, you can enable an Alternate Rate Limit.
  6. Click Save.

Once a target is added, it appears in the Sending Data To table. If the status displays as online and reporting successfully (status_success.png), the two systems are able to communicate.

You can select to replicate all data to a target appliance or to Barracuda Cloud Storage. If you want to send data from diverse sources to both of these options, do not select Replicate all data to this target. Instead, edit each data source on the Backup > Sources page, and specify where its data is to be replicated.

This option is not available in Local Control.

Edit Replication Settings
  1. Log in and go to the Backup > Replication page.
  2. Click the Settings (SettingsIcon16x16.png) icon in the Target List section.
  3. In the Replication Target Information section, you can modify the destination IP address, disable data replication, modify rate limits, and specify whether to send all data on the Barracuda Backup appliance to this target.
Remove a Barracuda Backup Appliance

To permanently remove a replication destination, click Remove in the Target List.

Disable Replication

Pausing replication causes data from the appliance to be queued for 24 hours; data replication automatically resumes after 24 hours. To temporarily disable replication, clear the Enable data replication setting on the Backup > Replication page.

Send Data To/Receiving Data From

Destination Barracuda Backup appliances display in the Sending Data To table. If a Barracuda Backup appliance is acting as a destination for another Barracuda Backup appliance, it displays in the Receiving Data From table.


Loss of Communication

If there is a loss of communication between the Barracuda Backup appliance and its backup destinations, the data to be be backed up is queued and errors are generated. Data is queued until the issue is resolved. The queue size in the table on the Backup > Replication page indicates how much data is waiting to be replicated. Not all of this data is actually copied to the destination; some of it is deduplicated as the replication proceeds. Only those parts that are not already stored in the remote location are sent over the Internet.

See the Replication Page for more information.


Only the Barracuda Backup appliance 490 and higher can act as a backup to other Barracuda Backup appliances, although any Barracuda Backup appliance can send data.

To restore from a replication destination,

  1. Log in to the Barracuda Backup web interface, and select the receiving Barracuda Backup appliance from which to restore.
  2. Go to the Restore > Restore Browser page, and in the left pane select the sending Barracuda Backup appliance from which you are receiving data:
  3. Expand the sending Barracuda Backup appliance to review its backup sources, and click on the server or computer from which to restore; the contents displays in the right pane:
  4. In the Contents section, click Restore next to the file or directory you wish to restore; the Restore window displays.
  5. In the Restore to field, enter the hostname or IP address of the restore to location. In the Path section, select the Original Path, or designate a new location.
  6. Click Start Restore. Once the restore is complete, go to Reports > Restore to verify the restore completed successfully.

Last updated on