On DOM0 (host xcp-ng) traffic is filtered by iptables. So iptables -L will show which ports are open. Everything else will be rejected by default. For testing, you can stop iptables. If that helps, add rules. Keep in mind that XCP-NG is based on CentOS. So you can easily find an answer on Google for any question.