NetBackup™ 10.1.1 Application Guide

Last Published:
Product(s): Appliances (3.3, 3.2, 3.1, 3.0)
Platform: Flex Appliance OS
  1. Product overview
    1.  
      Introduction to NetBackup applications for Flex Appliance
    2.  
      About the Flex Appliance documentation
  2. Release notes
    1.  
      NetBackup 10.1.1 application new features, enhancements, and changes
    2.  
      Supported upgrade paths to this release
    3.  
      Operational notes
  3. Geting started
    1.  
      Prerequisites before you can create NetBackup application instances
    2.  
      Installing the NetBackup Administration Console and client packages
  4. Creating NetBackup application instances
    1. Creating application instances
      1.  
        Creating a NetBackup primary server instance
      2.  
        Creating a NetBackup media server instance
      3.  
        Creating a NetBackup WORM storage server instance
  5. Managing NetBackup application instances
    1.  
      Managing application instances from Flex Appliance and NetBackup
    2. Accessing NetBackup primary and media server instances for management tasks
      1. Managing users on a primary or a media server instance
        1.  
          Adding and removing local users on a primary or a media server instance
        2.  
          Connecting an Active Directory user domain to a primary or a media server instance
        3.  
          Connecting an LDAP user domain to a primary or a media server instance
        4.  
          Changing a user password on a primary or a media server instance
      2. Running NetBackup commands on a primary or a media server application instance
        1.  
          Creating a NetBackup touch file on a primary or a media server application instance
        2.  
          Installing NetBackup notify scripts on a primary or a media server application instance
      3.  
        Monitoring NetBackup services on a NetBackup primary server instance
      4.  
        Mounting an NFS share on a NetBackup primary server instance
      5.  
        Setting environment variables on primary and media server instances
      6.  
        Storing custom data on a primary or a media server instance
      7.  
        Modifying or disabling the nbdeployutil utility on a primary server instance
      8.  
        Disabling SMB server signing on a media server instance
      9.  
        Enabling extra OS STIG hardening on a primary or a media server instance
      10.  
        Using a login banner on a primary or a media server instance
      11.  
        Using a primary server instance for disaster recovery
    3. Accessing NetBackup WORM storage server instances for management tasks
      1. Managing users from the deduplication shell
        1.  
          Adding and removing local users from the deduplication shell
        2.  
          Adding MSDP users from the deduplication shell
        3.  
          Connecting an Active Directory domain to a WORM storage server for Universal Shares and Instant Access
        4.  
          Disconnecting an Active Directory domain from the deduplication shell
        5.  
          Changing a user password from the deduplication shell
      2.  
        Managing VLAN interfaces from the deduplication shell
      3.  
        Viewing the lockdown mode on a WORM storage server
      4.  
        Managing the retention policy on a WORM storage server
      5.  
        Managing images with a retention lock on a WORM storage server
      6.  
        Auditing WORM retention changes
      7. Managing certificates from the deduplication shell
        1.  
          Viewing the certificate details from the deduplication shell
        2.  
          Importing certificates from the deduplication shell
        3.  
          Removing certificates from the deduplication shell
      8.  
        Managing FIPS mode from the deduplication shell
      9.  
        Encrypting backups from the deduplication shell
      10. Configuring an isolated recovery environment on a WORM storage server
        1.  
          Configuring data transmission between a production environment and an IRE WORM storage server
      11.  
        Managing an isolated recovery environment on a WORM storage server
      12.  
        Tuning the MSDP configuration from the deduplication shell
      13.  
        Setting the MSDP log level from the deduplication shell
      14. Managing NetBackup services from the deduplication shell
        1.  
          Managing the cyclic redundancy checking (CRC) service
        2.  
          Managing the content router queue processing (CRQP) service
        3.  
          Managing the online checking service
        4.  
          Managing the compaction service
        5.  
          Managing the deduplication (MSDP) services
        6.  
          Managing the Storage Platform Web Service (SPWS)
        7.  
          Managing the Veritas provisioning file system (VPFS) mounts
        8.  
          Managing the NGINX service
        9.  
          Managing the SMB service
      15. Monitoring and troubleshooting NetBackup services from the deduplication shell
        1.  
          About the support command

Configuring data transmission between a production environment and an IRE WORM storage server

Once the configuration of an isolated recovery environment (IRE) is completed, the production NetBackup hosts are no longer able to access the WORM storage server. You need to add MSDP reverse connections to allow data transmission between the production MSDP storage server and the IRE WORM storage server. Then you can add the replication operation.

To configure data transmission between a production environment and an IRE

  1. Open an SSH session to the IRE WORM storage server. Run the following command to determine if the external network is open:

    setting ire-network-control external-network-status

    If it is not, run the following command:

    setting ire-network-control external-network-open

  2. Depending on the type of certificate authority that you use for host communication, do one of the following:
    • If you use a NetBackup Certificate Authority, run the following commands to request the certificates from the production domain:

      setting certificate get-CA-certificate primary_server=<production primary server>

      setting certificate get-certificate primary_server=<production primary server> token=<token>

    • If you use an external certificate authority, run the following commands to enroll the certificates with the production domain:

      setting certificate enroll-external-certificates server=<production primary server>

  3. Run the following command to add an MSDP reverse connection:

    setting ire-network-control add-reverse-connection remote_storage_server=<production MSDP server> [remote_primary_server=<production primary server>] [local_storage_server=<IRE network interface>]

    Where:

    • <production MSDP server> is the fully qualified domain name (FQDN) of the MSDP server in your production environment.

    • [remote_primary_server=<production primary server>] is an optional parameter for the FQDN of the primary server in your production environment. This parameter is required if the IRE domain uses an alternative name to access the production primary server. This scenario usually occurs if the production primary server runs on multiple networks with multiple hostnames.

    • [local_storage_server=<IRE network interface>] is an optional parameter for the hostname of the network interface to use for image replication on the IRE storage server. This parameter is required if the network interface for replication is different than the IRE storage server name.

  4. If necessary, repeat the previous step to add additional MSDP reverse connections.
  5. If Auto Image Replication (AIR) is not already configured on the production domain, run the following command to copy the IRE schedule to the production domain as a storage lifecycle policy (SLP) window:

    setting ire-network-control sync-ire-window production_primary_server=<production primary server> production_primary_server_username=<production username> [slp_window_name=<SLP window name>]

    Where:

    • <production primary server> is the FQDN of the primary server in your production environment.

    • <production username> is the username of a NetBackup user with permission to list SLPs and SLP windows in the production environment. For Windows users, enter the username in the format <domain name>\<username>. For other users, enter the username only.

    • [slp_window_name=<SLP window name>] is an optional parameter to give a name for the SLP window. If you do not provide this parameter, the name of the SLP window is IRE_DEFAULT_WINDOW.

  6. If you do not have them already, create a source SLP on the production primary server and a target import SLP on the IRE primary server. See the section "Creating a storage lifecycle policy" in the NetBackup Deduplication Guide for details.

    Note:

    You cannot add the replication operation from NetBackup when you create the SLPs. Continue to the next step to add the replication operation.

  7. Run the following command to add the IRE WORM storage server as a replication target of the production NetBackup domain and to add the replication operation to the SLP:

    setting ire-network-control add-replication-op production_primary_server=<production primary server> production_primary_server_username=<production username> production_storage_server=<production storage server> ire_primary_server_username=<IRE username> source_slp_name=<production SLP name> target_import_slp_name=<IRE SLP name> target_storage_server=<target storage server> target_storage_server_username=<target storage server username> production_storage_unit=<MSDP storage unit> [slp_window_name=<slp window name>]

    Where:

    • <production primary server> is the FQDN of the primary server in your production environment.

    • <production username> is the username of a NetBackup user with permission to list SLPs and SLP windows in the production environment. For Windows users, enter the username in the format <domain name>\<username>. For other users, enter the username only.

    • <production storage server> is the FQDN of the production storage server in your production environment.

    • <IRE username> is the username for an administrator on the IRE primary server. For Windows users, enter the username in the format <domain name>\<username>. For other users, enter the username only.

    • <source SLP name> is the SLP name from the production primary server to add the replication operation to.

    • <target SLP name> is the import SLP name from the IRE primary server.

    • <target storage server> is the FQDN of the target WORM storage server in your IRE environment.

    • <target storage server username> is the username for an administrator on the target WORM storage server.

    • <MSDP storage unit> is the name of the MSDP storage unit that is the replication source in the source SLP.

    • [slp_window_name=<slp window name>] is an optional parameter for the name of the SLP window that is synced with the IRE schedule. This parameter must match the SLP window name from the previous step, if applicable. If you do not provide this parameter, the default name is used.

  8. If you opened the external network at the beginning of this procedure, run the following command to close it and resume the air gap schedule:

    setting ire-network-control resume-schedule