Veritas Velocity™ User's Guide

Last Published:
Product(s): Velocity (2.8)
  1. Getting to know Velocity
    1.  
      Introducing Velocity
    2.  
      How to access the Velocity Cloud Console
    3.  
      About the Velocity Appliance
    4.  
      About the Velocity Storage Server administration interfaces
    5.  
      Using the Velocity shell menu
  2. Setting up Velocity
    1.  
      Velocity administrator's checklist for setting up Veritas Velocity
    2.  
      Database administrator's checklist for setting up Veritas Velocity
    3.  
      Sandbox user's checklist for setting up Veritas Velocity
    4. How to set up the Velocity Storage Server
      1.  
        Deploying the Velocity Storage Server image on a virtual machine
      2.  
        Velocity Appliance initial configuration requirements
      3.  
        Configuring network and storage settings for the Velocity Storage Server in a virtual environment
      4.  
        Registering the Velocity Storage Server
      5.  
        Joining the Velocity Storage Server to the Active Directory domain
      6.  
        Adding a Certificate Authority signed certificate to the Velocity Storage Server
    5. How to set up the Velocity Client
      1.  
        Testing the network path for Oracle communications
      2.  
        Configuring the Velocity Client for Linux
      3.  
        Configuring the Velocity Client for Solaris
      4.  
        Configuring the Velocity Client for Windows
    6.  
      Deleting a Velocity Client
    7.  
      Configuring a proxy server for Velocity
    8.  
      Required and optional ports for Velocity
    9.  
      Installing the NetBackup Client on the Velocity Storage Server
  3. Setting up the Velocity on-premises management server
    1.  
      How to set up the Velocity on-premises management server
    2.  
      Deploying the Velocity on-premises management server image on a virtual machine
    3.  
      Configuring the network settings for the Velocity on-premises management server
    4.  
      Configuring Active Directory/LDAP settings on the Velocity on-premises management server
    5.  
      Adding users to the Velocity on-premises management server
  4. Upgrading Velocity
    1.  
      How to upgrade to Velocity version 2.8
    2.  
      Finding the Velocity Storage Server and Velocity Client version numbers
    3.  
      Downloading and transferring software updates to the Velocity Storage Server
    4.  
      Removing previous upgrade files
    5.  
      Upgrading the Velocity Storage Server
    6.  
      Upgrading the Velocity Client for Linux
    7.  
      Upgrading the Velocity Client for Windows
    8.  
      Upgrading the Velocity Client for Solaris
  5. Velocity Storage Server
    1.  
      About the Velocity Storage Server
    2.  
      Viewing physical storage usage on the Velocity Storage Server
    3.  
      About reclaiming storage space on the Veritas Velocity Storage Server
    4.  
      Increasing meta and data storage capacity on the Velocity Storage Server
    5.  
      Deregistering a Velocity Storage Server
    6.  
      How to reset the Velocity Storage Server
  6. Users and roles
    1.  
      How to configure users and roles in Velocity
    2.  
      Adding users
    3.  
      Role-based access control
    4.  
      Adding roles
    5.  
      Deleting roles
    6.  
      Viewing details about all users and roles
    7.  
      Assigning users to an existing role
    8.  
      Removing users from a role
    9.  
      Changing the database sources that are assigned to a role
  7. Oracle database ingestion using Velocity
    1.  
      How to provide copies of Oracle databases for sandboxes in Velocity
    2.  
      Adding an Oracle database to ingest into Velocity
    3.  
      Ingesting an Oracle database into Velocity for the first time
    4.  
      Ingesting an Oracle database again after the first ingest
    5.  
      Canceling an Oracle database ingestion
    6. How to use copy preparation to mask or sanitize sensitive data
      1.  
        Masking sensitive data manually in database copies
      2.  
        Masking sensitive data in database copies by using a script
      3.  
        Masking sensitive data manually in database copies that are already ingested
      4.  
        Masking sensitive data by using a script in database copies that are already ingested
      5.  
        Disabling copy preparation for Oracle database copies
    7.  
      Ingesting an Oracle database into Velocity from the command line
    8.  
      About setting custom initialization parameters for a sandbox for an Oracle database copy
    9.  
      Editing default options for the ingest method for Oracle databases
  8. Oracle database ingestion using NetBackup CoPilot
    1.  
      How to set up NetBackup CoPilot to ingest Oracle databases into Velocity
    2.  
      Ingesting an Oracle database with NetBackup CoPilot
  9. Microsoft SQL Server database ingestion using Velocity
    1.  
      How to provide copies of SQL Server databases for sandboxes in Velocity
    2.  
      Adding a SQL Server database to ingest into Velocity
    3.  
      Ingesting a SQL Server database into Velocity
    4.  
      Editing default options for SQL Server database ingestion
    5.  
      Canceling a SQL Server database ingestion
  10. Database sources and copies
    1.  
      About database sources and copies
    2.  
      Viewing details of an Oracle database source
    3.  
      Viewing details of a SQL Server database source
    4.  
      Changing the nickname or description of a database source
    5.  
      Deleting a database source from Velocity
    6. About scheduling ingestions for a database source
      1.  
        Viewing the ingestion schedule for a database source
      2.  
        Adding an ingestion schedule to a database source
      3.  
        Editing the ingestion schedule for a database source
      4.  
        Deleting the ingestion schedule for a database source
      5.  
        Restarting scheduled database ingestions after changing the system time or time zone on the Velocity Storage Server
    7. Retention periods for database sources and copies
      1.  
        Changing the default retention period for a database source
      2.  
        Deleting the default retention period for a database source
      3.  
        Changing the retention date for a database copy
      4.  
        Deleting the retention date for a database copy
    8.  
      Viewing database copies
    9.  
      Viewing the number of sandboxes that were created from a database copy
    10.  
      Viewing the status of database copies
    11.  
      Deleting database copies
  11. Sandboxes
    1.  
      About sandboxes
    2.  
      Creating a sandbox from an Oracle database copy
    3.  
      Starting an Oracle database instance manually
    4.  
      Creating a sandbox from a SQL Server database copy
    5.  
      Starting a SQL database manually
    6.  
      Finding your sandbox
    7.  
      Viewing details about your sandboxes
    8.  
      Deleting a sandbox
    9.  
      Managing sandboxes when you restart the host Oracle Database server
    10.  
      Unmounting a sandbox from an Oracle host server
  12. Database recovery
    1.  
      Recovering an Oracle database
  13. Alerts and logs
    1.  
      Viewing alerts
    2.  
      Creating audit log reports
    3.  
      Redirecting the syslog messages
    4.  
      Viewing the syslog messages on a Red Hat Enterprise Linux computer
    5.  
      Viewing the syslog messages on a Windows computer
  14. Managing the Velocity physical appliance
    1. Configuring network address settings on the Velocity physical appliance
      1.  
        About IPv4-IPv6-based network support on the Velocity physical appliance
      2.  
        About NIC1 (eth0) port usage on the Velocity physical appliance
      3.  
        Creating a network interface bond (NIC bond) on the Velocity physical appliance
      4.  
        VLAN tagging on the Velocity physical appliance
      5.  
        Configuring static routes on the Velocity physical appliance
      6.  
        Configuring DNS and host name mapping on the Velocity physical appliance
      7.  
        Setting the host name for the Velocity physical appliance
      8.  
        Using a proxy server with the Velocity physical appliance
      9. About WAN optimization on the Velocity physical appliance
        1.  
          Configuring WAN optimization on the Velocity physical appliance
      10.  
        About the maximum transmission unit size on the Velocity physical appliance
      11.  
        Setting the date and time on the Velocity physical appliance
    2. About the Veritas Remote Management Console on the Velocity physical appliance
      1.  
        Configuring the IPMI port on the Velocity physical appliance
      2.  
        Managing IPMI users on the Velocity physical appliance
      3.  
        Resetting the IPMI on the Velocity physical appliance
    3. About Velocity physical appliance storage
      1.  
        Configuring the storage on the Velocity physical appliance
      2.  
        Viewing the storage on the Velocity physical appliance
    4. About users on the Velocity physical appliance
      1.  
        Creating appliance user accounts on the Velocity physical appliance
      2.  
        Deleting appliance user accounts on the Velocity physical appliance
      3.  
        Changing user passwords on the Velocity physical appliance
    5. About Velocity physical appliance checkpoints
      1.  
        Creating a custom checkpoint on the Velocity physical appliance
      2.  
        Restoring the Velocity physical appliance from a checkpoint
    6. About factory reset on the Velocity physical appliance
      1.  
        Restoring the Velocity physical appliance to a factory state
  15. Monitoring the Velocity physical appliance
    1. About Veritas AutoSupport on the Velocity physical appliance
      1.  
        Setting up AutoSupport on the Velocity physical appliance
    2.  
      Setting up email notifications on the Velocity physical appliance
    3.  
      Setting up SNMP notifications on the Velocity physical appliance
    4. Auditing the SDCS logs on the Velocity physical appliance
      1.  
        About SDCS event type codes and severity codes on the Velocity physical appliance
      2.  
        Changing the SDCS log retention settings on the Velocity physical appliance
    5.  
      Testing the Velocity physical appliance hardware
  16. Velocity physical appliance security
    1. About Velocity physical appliance user account privileges
      1. Velocity physical appliance user name and password specifications
        1.  
          Password encryption and handling on the Velocity physical appliance
    2. About the Velocity physical appliance intrusion detection system
      1.  
        Reviewing SDCS events on the Velocity physical appliance
    3. About Velocity physical appliance operating system security
      1.  
        Vulnerability scanning of the Velocity physical appliance
      2.  
        Disabled service accounts on the Velocity physical appliance
    4.  
      About data security on the Velocity physical appliance
    5.  
      About data integrity on the Velocity physical appliance
    6.  
      About the Velocity physical appliance ports
    7. Recommended IPMI settings on the Velocity physical appliance
      1.  
        Replacing the default IPMI SSL certificate on the physical appliance
  17. Best practices
    1.  
      Improving the performance of Veritas Velocity for Oracle Database
    2.  
      Stopping and starting all mounts
    3.  
      Protecting the Velocity on-premises management server
  18. Troubleshooting
    1.  
      NFS export paths where ingested Oracle Database sources are stored are inaccessible
    2.  
      NFS export path is not created during a database ingestion
    3.  
      Database ingestion fails with the Oracle error 'diskgroup {xx} space exhausted'
    4.  
      After restart of the vpfsd service, links to the applications are broken
    5.  
      Sandbox creation fails on an Oracle Database server
    6.  
      Sandbox creation fails for a SQL Server database copy
    7.  
      Sandbox creation fails after you use the --adGroups argument when you configure the Velocity Client for Windows
    8.  
      Sandbox creation may take longer than usual on Oracle Database 12c
    9.  
      A sandbox cannot be deleted from an Oracle Database server because the mount point is busy
    10.  
      Error occurs when registering the Velocity Client; provide the Oracle DBA with access to the Velocity registration files
    11.  
      Error occurs when a new sandbox name has the same name as a deleted sandbox
    12.  
      Ingestions and sandboxes are stuck 'In Progress' after the Velocity Storage Server is restarted
  19. Glossary
    1.  
      Glossary terms for Velocity
  20. Context-sensitive topics
    1.  
      Create Sandbox - Choose Database
    2.  
      Create Sandbox - Configure Host
    3.  
      Create Sandbox - Review Settings
    4.  
      Create Sandbox - Choose Database
    5.  
      Create Sandbox - Configure Host
    6.  
      Create Sandbox - Review Settings
    7.  
      Sandboxes window
    8.  
      Sandbox details
    9.  
      Sandbox details for an Oracle database copy
    10.  
      Sandbox details for a SQL Server database copy
    11.  
      Role Wizard - Select User Type
    12.  
      Role Wizard - Select Users
    13.  
      Role Wizard - Select Sources
    14.  
      Role Wizard - Review
    15.  
      Copies dialog
    16.  
      Database source details
    17.  
      Database Sources dialog
    18.  
      How to set up the Velocity Client
    19.  
      Schedule dialog
  21. Section I. Velocity shell menu commands
    1. Introduction
      1.  
        About Velocity commands
    2. Appendix A. Main > Manage > Storage
      1.  
        Manage > Storage > Configure
      2.  
        Manage > Storage > Show
    3. Appendix B. Main > Manage > Cloud
      1.  
        Main > Manage > Cloud
    4. Appendix C. Main > Manage > Software
      1.  
        Manage > Software > Cancel
      2.  
        Manage > Software > Delete
      3.  
        Manage > Software > Download
      4.  
        Manage > Software > DownloadProgress
      5.  
        Manage > Software > Install
      6.  
        Manage > Software > List
      7.  
        Manage > Software > Readme
      8.  
        Manage > Software > Rollback
      9.  
        Manage > Software > Share
      10.  
        Manage > Software > UpgradeStatus
    5. Appendix D. Main > Monitor
      1.  
        Monitor > Hardware
      2.  
        Monitor > MemoryStatus
      3.  
        Monitor > NetworkStatus
      4.  
        Monitor > SDCS
      5.  
        Monitor > Top
      6.  
        Monitor > Uptime
      7.  
        Monitor > Who
    6. Appendix E. Main > Network
      1.  
        Network > Configure
      2.  
        Network > Date
      3.  
        Network > DNS
      4.  
        Network > Gateway
      5.  
        Network > Hostname
      6.  
        Network > Hosts
      7.  
        Network > IPv4
      8.  
        Network > IPv6
      9.  
        Network > NetStat
      10.  
        Network > NTPServer
      11.  
        Network > LinkAggregation
      12.  
        Network > VLAN
      13.  
        Network > WANOptimization
      14.  
        Network > Ping
      15.  
        Network > Proxy
      16.  
        Network > SetProperty
      17.  
        Network > Show
      18.  
        Network > TimeZone
      19.  
        Network > TraceRoute
      20.  
        Network > Unconfigure
    7. Appendix F. Main > Settings
      1.  
        Settings > Alerts > CallHome
      2.  
        Settings > Alerts > Email
      3.  
        Settings > Alerts > SNMP
      4.  
        Settings > Security > Authentication > LocalUser
    8. Appendix G. Main > Support
      1.  
        Support > Checkpoint
      2.  
        Support > Collect
      3.  
        Support > DataCollect
      4.  
        Support > FactoryReset
      5.  
        Support > InfraServices
      6.  
        Support > IPMI
      7.  
        Support > Logs
      8.  
        Support > Maintenance
      9.  
        Support > Processes
      10.  
        Support > RAID
      11.  
        Support > Reboot
      12.  
        Support > ServiceAllowed
      13.  
        Support > Shutdown
      14.  
        Support > Test

Recommended IPMI settings on the Velocity physical appliance

Review this section to ensure that the Veritas Remote Management Console and the IPMI port are secure.

Users

  • Do not allow accounts with null user name or password.

  • It is recommended to have one administrative user.

  • It is recommended to disable the anonymous user.

  • To mitigate the CVE-2013-4786 vulnerability:

    • Use strong passwords to limit the effectiveness of offline dictionary attacks and brute force attacks. The recommended password length is 16-20 characters.

    • Change the password of the default user (sysadmin) as soon as possible.

    • Use Access Control Lists (ACLs) or isolated networks to limit access to the IPMI interface.

Login

Table: Login security settings

Settings

Recommended values

Failed login attempts

3

User Lockout time (min)

60 seconds

Force HTTPS

Yes

The Force HTTPS check-box must be enabled to ensure that the IPMI connection always takes place over HTTPS.

Web Session Timeout

1800

LDAP Settings

Veritas recommends that you should enable LDAP authentication, if possible in your environment.

SSL Upload

Veritas recommends that you import a new or custom SSL certificate.

Remote Session

Table: Remote session security settings

Settings

Recommended values

KVM Encryption

AES

Media Encryption

Enable

Cipher recommendation

  • Do not set cipher to zero on the IPMI channel

    Warning:

    If the cipher 0 enabled on a channel, it allows anyone to perform any IPMI action with no authentication, effectively subverting IPMI security entirely. Disable it at all costs.

  • Only use ciphers 3, 8, and 12.

Ethernet connection settings

Recommended to have a dedicated Ethernet connection for IPMI, that is you should avoid sharing the server's physical connection.

  • Use a static IP

  • Avoid DHCP