NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring and notifications
- Section I. Configuring hosts
- Section II. Configuring storage and backups
- Configuring storage
- About storage configuration
- Create a Media Server Deduplication Pool (MSDP) storage server
- Create a Cloud storage, OpenStorage, or AdvancedDisk storage server
- Create a disk pool
- Create a storage unit
- Create a universal share
- Using image sharing from the NetBackup web UI
- Troubleshooting storage configuration
- Troubleshooting universal share configuration issues
- Create a Media Server Deduplication Pool (MSDP) storage server for image sharing
- Managing protection plans
- Managing classic policies
- Managing backup images
- Configuring storage
- Section III. Managing credentials
- Managing credentials for workloads and systems that NetBackup accesses
- About credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Managing credentials for workloads and systems that NetBackup accesses
- Section IV. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- Set a passphrase for disaster recovery
- About trusted primary servers
- Access keys
- Configuring authentication options
- Section V. Managing role-based access control
- About role-based access control in NetBackup
- Configuring RBAC roles
- Configuring RBAC
- Notes for using NetBackup RBAC
- Add AD or LDAP domains
- Add a custom RBAC role
- Edit or remove a role a custom role
- View users in RBAC
- Add a user to a role (non-SAML)
- Add a user to a role (non-SAML, smart card user without AD or LDAP domain association or mapping)
- Add a user to a role (SAML)
- Remove a user from a role
- Default RBAC roles
- Administrator
- Default AHV Administrator
- Default Cloud Administrator
- Default NetBackup Command Line (CLI) Administrator
- Default Kubernetes Administrator
- Default NetBackup Kubernetes Operator Service
- Default Microsoft SQL Server Administrator
- Default Oracle Administrator
- Default RHV Administrator
- Default SaaS Administrator
- Default Resiliency Administrator
- Default Security Administrator
- Default Storage Administrator
- Default Universal Share Administrator
- Default VMware Administrator
- Configuring RBAC
- RBAC permissions
- About role permissions
- Global > BMR
- Global > NetBackup Web Management Console Administration
- Global > NetBackup management
- Access hosts
- Agentless hosts
- Anomalies
- CLI sessions
- Data classifications
- Email notifications
- Event logs
- NetBackup hosts
- Image sharing
- NetBackup backup images
- Jobs
- Licensing
- Media server
- Remote primary server certificate authority
- Resiliency
- Resource limits
- Retention levels
- Servers > Trusted primary servers
- Cloud providers
- CloudPoint servers
- WebSocket servers
- Global > Protection
- Global > Security
- Access control
- Security events
- Certificate management
- Disaster recovery passphrase
- Identity provider and SAML certificate configuration
- Key Management Services (KMS)
- Passphrase constraints
- Service principal configuration
- Global security settings
- Trust versions
- API keys
- User certificates
- User sessions and authentication
- Global > Storage
- Assets
- Protection plans
- Credentials
- Manage access
- Section VI. Managing detection and reporting
- Managing deployment
- Managing Resiliency Platforms
- NetBackup SaaS Protection
- NetBackup Flex Scale
- Managing Bare Metal Restore (BMR)
- Troubleshooting the NetBackup Web UI
Approve or add mappings for a host that has multiple host names
A NetBackup host can have multiple host names. For example, both a private and a public name or a short name and a fully qualified domain name (FQDN). A NetBackup host may also share a name with other NetBackup host in the environment. NetBackup also discovers cluster names, including the host name and fully qualified domain name (FQDN) of the virtual name of the cluster.
See Examples of auto-discovered mappings for a cluster.
See Example of auto-discovered mappings for a cluster in a multiple NIC environment.
See Examples of auto-discovered mappings for SQL Server environments.
The NetBackup client name of a host (or the primary name) is automatically mapped to its host ID during certificate deployment. For successful communication between NetBackup hosts, NetBackup also automatically maps all hosts to their other host names. However, that method is less secure. Instead, you can choose to disable this setting. Then choose to manually approve the individual host name mappings that NetBackup discovers.
See Disable automatic mapping of NetBackup host names.
NetBackup automatically discovers many shared names or cluster names that are associated with the NetBackup hosts in your environment. Use the Mappings to approve tab to review and accept the relevant host names. When is enabled, the list shows only the mappings that conflict with other hosts.
Note:
You must map all available host names with the associated host ID. When you deploy a certificate to a host, the host name must map to the associated host ID. If it does not, NetBackup considers the host to be a different host. NetBackup then deploys a new certificate to the host and issues it a new host ID.
To approve the host names that NetBackup discovers
- On the left, select Security > Host mappings.
- Click the Mappings to approve tab.
- Click the name of the host.
- Review the mappings for the host and click Approve if you want to use the discovered mapping.
Click Reject if you do not want to associate the mapping with the host.
The rejected mappings do not appear in the list until NetBackup discovers them again.
- Click Save.
You can manually map the NetBackup host to its host names. This mapping ensures that NetBackup can successfully communicate with the host using the other name.
To map a host name to a host
- On the left, select Security > Host mappings.
- Select the host and click Manage mappings.
- Click Add.
- Enter the host name or IP address and click Save.
- Click Close.
Add a shared or a cluster name mapping if multiple NetBackup hosts share a host name. For example, a cluster name.
Note the following before you create a shared or a cluster name mapping:
NetBackup automatically discovers many shared names or cluster names. Review the Mappings to approve tab.
If a mapping is shared between an insecure and a secure host, NetBackup assumes that the mapping name is secure. However, if at run-time the mapping resolves to an insecure host, the connection fails. For example, assume that you have a two-node cluster with a secure host (node 1) and an insecure host (node 2). In this case, the connection fails if node 2 is the active node.
To map shared or cluster names to multiple NetBackup hosts
- On the left, select Security > Host mappings.
- Click Add shared or cluster mappings.
- Enter a Shared host name or cluster name that you want to map to two or more NetBackup hosts.
For example, enter a cluster name that is associated with NetBackup hosts in your environment.
- On the right, click Add.
- Select the NetBackup hosts that you want to add and click Add to list.
For example, if you entered a cluster name in step 3 select the nodes in the cluster here.
- Click Save.
For a cluster with hosts client01.lab04.com and client02.lab04.com, you may see the following entries. For each host, approve the mappings that are valid.
Host | Auto-discovered mapping |
|---|---|
client01.lab04.com | client01 |
client01.lab04.com | clustername |
client01.lab04.com | clustername.lab04.com |
client02.lab04.com | client02 |
client02.lab04.com | clustername |
client02.lab04.com | clustername.lab04.com |
When you have approved all valid mappings, you see the Mapped host or IP address settings that are similar to the following entries.
Host | Mapped Host Names/IP Addresses |
|---|---|
client01.lab04.com | client01.lab04.com, client01, clustername, clustername.lab04.com |
client02.lab04.com | client02.lab04.com, client02, clustername, clustername.lab04.com |
Backups of a cluster in a multi-NIC environment require special mappings. You must map the cluster node names to the virtual name of the cluster on the private network.
Table: Mapping host names for a cluster in a multi-NIC environment
Private name of Node 1 | Virtual name of the cluster on the private network |
Private name of Node 2 | Virtual name of the cluster on the private network |
For example, for a cluster in a multi-NIC environment with hosts client01-bk.lab04.com and client02-bk.lab04.com, you may see the following entries. For each host, approve the mappings that are valid.
Host | Auto-discovered Mapping |
|---|---|
client01-bk.lab04.com | clustername-bk.lab04.com |
client02-bk.lab04.com | clustername-bk.lab04.com |
When you have approved all valid mappings, you see the Mapped host or IP address settings that are similar to the following entries.
Host | Mapped Host Names/IP Addresses |
|---|---|
client01-bk.lab04.com | clustername-bk.lab04.com |
client02-bk.lab04.com | clustername-bk.lab04.com |
In Table: Example mapped host names for SQL Server environments, FCI is a SQL Server failover cluster instance. WSFC is Windows Server Failover Cluster.
Table: Example mapped host names for SQL Server environments
Environment | ||
|---|---|---|
FCI (cluster with two nodes) | Physical name of Node 1 | Virtual name of the SQL Server cluster |
Physical name of Node 2 | Virtual name of the SQL Server cluster | |
Basic or advanced availability group (primary and secondary) | Primary name | WSFC name |
Secondary name | WSFC name | |
Basic or advanced availability group, with an FCI (primary FCI and secondary FCI) | Primary FCI name | WSFC name |
Secondary FCI name | WSFC name | |
Physical name of Node 1 | Virtual name of the SQL Server cluster | |
Physical name of Node 2 | Virtual name of the SQL Server cluster |