You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named…

To configure Hyper-V Replica using Kerberos authentication, the replica server must be prepared to accept incoming replication traffic over HTTP on the default port 80. The Windows Defender Firewall on the replica server, Server1, blocks this traffic by default. Therefore, the predefined inbound firewall rule named "Hyper-V Replica HTTP Listener (TCP-In)" must be enabled. This rule specifically allows the necessary traffic for Kerberos-based replication, fulfilling the requirements of the scenario. Enabling the server as a replica in Hyper-V Settings is also required, but enabling the firewall rule is a distinct and necessary step to allow network communication.

A. The Hyper-V Replica Broker is a role configured on a failover cluster to act as a replication endpoint. Server1 is a standalone server, not a cluster, so it does not use a Replica Broker.

B. Live migration is a separate technology used for moving running virtual machines between Hyper-V hosts with no downtime. It is not related to Hyper-V Replica, which is an asynchronous disaster recovery solution.

C. The Hyper-V Replica HTTPS Listener (TCP-In) rule is for port 443. This port is used for certificate-based authentication, not the Kerberos authentication specified in the question.

1. Microsoft Learn

Deploy Hyper-V Replica

"Step 3: Configure the firewall". This document states

"To allow replication between the servers

you need to ensure the Windows Firewall allows Hyper-V Replica traffic... For Kerberos authentication (HTTP)

enable the rule Hyper-V Replica HTTP Listener (TCP-In)."

2. Microsoft Learn

Hyper-V Replica Architecture

"Security and Firewall Considerations". This section details the network protocols and ports used. It explicitly mentions

"Hyper-V Replica includes a predefined inbound firewall rule “Hyper-V Replica HTTP Listener (TCP-In)” to enable replication traffic. You need to manually enable this rule."

3. Microsoft Learn

Set up Hyper-V Replica

"Enable Hyper-V Replica". This guide details the setup wizard options

clarifying the authentication methods: "If you select Use Kerberos authentication (HTTP)

replication data will be unencrypted... The wizard automatically creates a firewall exception to allow traffic on the specified ports (80 for HTTP and 443 for HTTPS)." This confirms that enabling the firewall rule for HTTP (port 80) is the correct action for Kerberos.