NetBackup™ Deduplication Guide
- Introducing the NetBackup media server deduplication option
- Quick start
- Planning your deployment
- About MSDP storage and connectivity requirements
- About NetBackup media server deduplication
- About NetBackup Client Direct deduplication
- About MSDP remote office client deduplication
- About MSDP performance
- About MSDP stream handlers
- MSDP deployment best practices
- Provisioning the storage
- Licensing deduplication
- Configuring deduplication
- Configuring the Deduplication Multi-Threaded Agent behavior
- Configuring the MSDP fingerprint cache behavior
- Configuring MSDP fingerprint cache seeding on the storage server
- About MSDP Encryption using NetBackup Key Management Server service
- Configuring a storage server for a Media Server Deduplication Pool
- Configuring a disk pool for deduplication
- Configuring a Media Server Deduplication Pool storage unit
- About MSDP optimized duplication within the same domain
- Configuring MSDP optimized duplication within the same NetBackup domain
- Configuring MSDP replication to a different NetBackup domain
- About NetBackup Auto Image Replication
- Configuring a target for MSDP replication to a remote domain
- Creating a storage lifecycle policy
- Resilient network properties
- Editing the MSDP pd.conf file
- About protecting the MSDP catalog
- Configuring an MSDP catalog backup
- About NetBackup WORM storage support for immutable and indelible data
- Running MSDP services with the non-root user
- MSDP cloud support
- About MSDP cloud support
- Cloud space reclamation
- About the disaster recovery for cloud LSU
- About Image Sharing using MSDP cloud
- About MSDP cloud immutable (WORM) storage support
- About immutable object support for AWS S3
- About bucket-level immutable storage support for Google Cloud Storage
- About object-level immutable storage support for Google Cloud Storage
- About AWS IAM Role Anywhere support
- About Azure service principal support
- About NetBackup support for AWS Snowball Edge
- S3 Interface for MSDP
- Configuring S3 interface for MSDP on MSDP build-your-own (BYO) server
- Identity and Access Management (IAM) for S3 interface for MSDP
- S3 APIs for S3 interface for MSDP
- Disaster recovery in S3 interface for MSDP
- Monitoring deduplication activity
- Viewing MSDP job details
- Managing deduplication
- Managing MSDP servers
- Managing NetBackup Deduplication Engine credentials
- Managing Media Server Deduplication Pools
- Changing a Media Server Deduplication Pool properties
- Configuring MSDP data integrity checking behavior
- About MSDP storage rebasing
- Managing MSDP servers
- Recovering MSDP
- Replacing MSDP hosts
- Uninstalling MSDP
- Deduplication architecture
- Configuring and using universal shares
- Configuring universal share user authentication
- Using the ingest mode
- Enabling a universal share with object store
- Configure a universal share accelerator
- About the universal share accelerator quota
- Configuring isolated recovery environment (IRE)
- Configuring an isolated recovery environment using the web UI
- Configuring an isolated recovery environment using the command line
- Using the NetBackup Deduplication Shell
- Managing users from the deduplication shell
- About the external MSDP catalog backup
- Managing certificates from the deduplication shell
- Managing NetBackup services from the deduplication shell
- Monitoring and troubleshooting NetBackup services from the deduplication shell
- Managing S3 service from the deduplication shell
- Troubleshooting
- About unified logging
- About legacy logging
- Troubleshooting MSDP configuration issues
- Troubleshooting MSDP operational issues
- Trouble shooting multi-domain issues
- Appendix A. Migrating to MSDP storage
- Appendix B. Migrating from Cloud Catalyst to MSDP direct cloud tiering
- About direct migration from Cloud Catalyst to MSDP direct cloud tiering
- Appendix C. Encryption Crawler
Managing an isolated recovery environment on a NetBackup BYO media server
Once you have configured an isolated recovery environment on a NetBackup BYO media server, you can manage it from the media server.
Use the following commands:
To view the SLP windows from the primary server to the WORM instance:
/usr/openv/pdde/shell/bin/show_slp_windows --production_primary_server production primary server name --production_primary_server_username production primary server username --ire_primary_server target primary server name --ire_primary_server_username target primary server username
Where:
The production primary server name is the fully qualified domain name (FQDN) of the primary server in your production environment.
The production primary server username is the username of a NetBackup user with permission to list SLPs and SLP windows in the production environment.
The production primary server username must be in domain_name\user_name format on Windows.
The target primary server name is the FQDN of the primary server in the IRE. Use the same hostname that you used to configure the SLPs in the production environment.
The target primary server username is the username of a NetBackup user with permission to list the SLPs and storage units in the IRE environment.
For example:
The target primary server username must be in domain_name\user_name format on Windows.
production_primary_server=examplePrimary.domain.com production_primary_server_username=appadmin ire_primary_server=exampleIREPrimary.domain.com ire_primary_server_username=appadmin
To view the allowed IP addresses and subnets
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control show-allows
To add IP addresses and subnets to the allowed list
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control allow-subnets --subnets CIDR subnets or IP addresses
The CIDR subnets or IP addresses field is a comma-separated list of the allowed IP addresses and subnets, in CIDR notation.
For example:
/usr/openv/pdde/shell/bin/ire_network_control allow-subnets --subnets 10.60.120.208,10.74.48.0/20
Note:
The IRE primary server, the IRE media servers, and the DNS server for the IRE environment must be included in the allowed list. If all these servers are in the same subnet, only the subnet is required to be in the allowed list.
Note:
If your network environment is dual stack, ensure that both IPv4 and IPv6 subnets and IP addresses of the IRE domain are configured in allowed subnets. For example, if you specify only IPv6 subnets in the allowed subnet, all the IPv4 addresses are not allowed to access the IRE storage server.
To remove the IP addresses and subnets from the allowed list
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control allow-subnets --subnets
To view the daily air gap schedule
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control show-schedule
To change the air gap schedule
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control set-schedule --start_time time --duration duration [--weekday weekday in 0-6]
For example:
/usr/openv/pdde/shell/bin/ire_network_control set-schedule --start_time 10:00:00 --duration 03:00:00
Note:
The SLP replication window on the production domain must be configured to be open at the same time as the IRE schedule.
To stop the air gap schedule
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control delete-schedule [--weekday weekday in 0-6]
Note:
You can delete an IRE window for a specific weekday.
To view the current network status and check whether the external network is open or closed
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control external-network-status
To manually open the external network
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control external-network-open
To manually close the external network and resume the air gap schedule
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control resume-schedule
To add MSDP reverse connection
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control reverse-connection --add source msdp server [--remote_primary source primary server] [--local_addr local msdp server]
To remove MSDP reverse connection
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control reverse-connection --remove source msdp server
To list configured MSDP reverse connections
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control reverse-connection --list
To validate if a specific reverse connection works
- Run the following command:
/usr/openv/pdde/shell/bin/ire_network_control reverse-connection --validate source msdp server