NetBackup IT Analytics Data Collector Installation Guide for Fabric Manager

Last Published:
Product(s): NetBackup IT Analytics (11.1)
  1. Fabric Manager Data Collection overview
    1.  
      Introduction
    2.  
      Fabric Manager: Collection of SAN switch data
    3.  
      Switch zone alias collection
  2. Pre-Installation setup for Brocade switch
    1.  
      Pre-Installation setup for Brocade switch
    2.  
      Prerequisites for adding Data Collectors (Brocade switch)
    3.  
      Upgrade troubleshooting: Brocade BNA SMI-S (CIM) server and Java 11
    4.  
      Supported switches
    5.  
      Brocade switches: Default ports and firewall considerations
    6.  
      Installation overview (Brocade switch)
    7.  
      Brocade switch Data Collector policy
  3. Pre-Installation setup for Cisco switch
    1.  
      Pre-Installation setup for Cisco switch
    2.  
      Prerequisites for adding Data Collectors (Cisco switch)
    3.  
      Upgrade troubleshooting: Cisco DCNM SMI-S (CIM) server and Java 11
    4.  
      Cisco switches: Default ports and firewall considerations
    5.  
      Installation overview (Cisco switch)
    6.  
      Cisco switch Data Collection policy
    7.  
      Before you start Cisco switch Data Collection
  4. Pre-Installation setup for Brocade Zone alias
    1.  
      Pre-Installation setup for Brocade zone alias
    2.  
      Prerequisites for adding Data Collectors (Brocade zone alias)
    3.  
      Brocade switches: Default ports and firewall considerations
    4.  
      Installation overview (Brocade zone alias)
    5.  
      Brocade zone alias Data Collector policy
  5. Pre-Installation setup Cisco Zone alias
    1.  
      Pre-Installation setup Cisco zone alias
    2.  
      Prerequisites for adding Data Collectors (Cisco zone alias)
    3.  
      Cisco switches: Default ports and firewall considerations
    4.  
      Installation overview (Cisco Zone Alias)
    5.  
      Cisco zone alias Data Collector policy
  6. Installing the Data Collector software
    1.  
      Introduction
    2.  
      Installing the WMI Proxy service (Windows host resources only)
    3.  
      Testing WMI connectivity
    4.  
      Considerations to install Data Collector on non-English systems
    5.  
      Install Data Collector Software on Windows
    6.  
      Install Data Collector software on Linux
    7.  
      Deploy Data Collector in native Kubernetes environment
    8.  
      Configure Data Collector manually for Veritas NetBackup
  7. Validating Data Collection
    1.  
      Validation methods
    2.  
      Data Collectors: Vendor-Specific validation methods
    3. Working with on-demand Data Collection
      1.  
        View real-time logging during an on-demand collection
    4.  
      Using the CLI check install utility
    5.  
      List Data Collector configurations
  8. Uninstalling the Data Collector
    1.  
      Uninstall the Data Collector on Linux
    2.  
      Uninstall the Data Collector on Windows
  9. Manually starting the Data Collector
    1.  
      Introduction
  10. Appendix A. Firewall configuration: Default ports
    1.  
      Firewall configuration: Default ports

Upgrade troubleshooting: Cisco DCNM SMI-S (CIM) server and Java 11

With the introduction of support for Java 11, older versions of Cisco DCNM may encounter compatibility issues. The following section covers potential workarounds. Collection occurs from the SMI-S (CIM) server component of the DCNM the data collector is collecting from. The version of Java used by NetBackup IT Analytics disables some insecure TLS algorithms by default. If collection fails with the following error in the collector logs, the version of Cisco DCNM may be incompatible and not allow collection using the TLS algorithms enabled by default with Java 11.

Failed to establish JDBC connection to: jdbc:jtds:sqlserver://...
java.sql.SQLException: Network error IOException: null
at net.sourceforge.jtds.jdbc.JtdsConnection.<init>
(JtdsConnection.java:437)

Upgrade Cisco DCNM to the latest version to enable secure collection. If upgrade is not possible, a workaround can be attempted to restore compatibility. If the following steps do not resolve the issue, your version of Cisco DCNM is not supported.

  1. Edit <collector install dir>/java/conf/security/java.security.

  2. Search for jdk.tls.disabledAlgorithms.

  3. Copy the existing lines and comment (to have a backup for easy restore).

    #jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
#    EC keySize < 224, 3DES_EDE_CBC, anon, NULL
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
    EC keySize < 224, 3DES_EDE_CBC, anon, NULL

  4. One at a time, remove an algorithm from the jdk.tls.disabledAlgorithms and test the collection, starting at the last algorithm and working backward. Stop once you reach an algorithm containing 'keySize <'.

    • Remove one algorithm - for example NULL

      jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, 
DH keySize < 1024, \
    EC keySize < 224, 3DES_EDE_CBC, anon

    • Save the file.

    • Run checkinstall and verify collection succeeds.

    • If checkinstall does not succeed, restore jdk.tls.disabledAlgorithms to its original state.

  5. Change to DH keySize<768 - for example.

    jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA,
DH keySize < 768, \
EC keySize < 224, 3DES_EDE_CBC, anon, NULL

    • Save the file.

    • Run checkinstall and verify collection succeeds.

  6. If a working configuration is found, restart the collector service.