NetBackup™ 10.0 Application Guide
- Product overview
- Release notes
- Geting started
- Creating NetBackup application instances
- Managing NetBackup application instances
- Managing application instances from Flex Appliance and NetBackup
- Accessing NetBackup primary and media server instances for management tasks
- Managing users on a primary or media server instance
- Running NetBackup commands on a primary or media server application instance
- Monitoring NetBackup services on a NetBackup primary server instance
- Mounting an NFS share on a NetBackup primary server instance
- Setting environment variables on primary and media server instances
- Storing custom data on a primary or media server instance
- Modifying or disabling the nbdeployutil utility on a primary server instance
- Disabling SMB server signing on a media server instance
- Establishing trust with a NetBackup 7.7.3 primary server instance
- Accessing NetBackup WORM storage server instances for management tasks
Managing an isolated recovery environment on a Flex Appliance WORM storage server instance
Once you have configured an isolated recovery environment (IRE) on a WORM storage server instance, you can manage it from the WORM storage server shell. Use the following commands.
To view the SLP windows from the primary server to the WORM instance:
setting ire-network-control show-slp-windows production_primary_server=<production domain> production_primary_server_username=<production username> ire_primary_server=<IRE domain> ire_primary_server_username=<IRE username>
Where:
<production domain> is the fully qualified domain name (FQDN) of the primary server in your production environment.
<production username> is the username of a NetBackup user with permission to list SLPs and SLP windows in the production environment.
<IRE domain> is the FQDN of the primary server in the IRE. Use the same hostname that you used for the target primary server when you configured the SLPs in the production environment.
<IRE username> is the username of a NetBackup user with permission to list the SLPs and storage units in the IRE.
For example:
production_primary_server=examplePrimary.domain.com production_primary_server_username=appadmin ire_primary_server=exampleIREPrimary.domain.com ire_primary_server_username=appadmin
Note:
The start times in the output of this command are in the production primary server's time zone. If the production environment and the IRE are in different time zones, make sure that you adjust the start times accordingly if you change the air gap schedule.
To view the allowed IP addresses and subnets:
setting ire-network-control show-allows
To add IP addresses and subnets to the allowed list:
setting ire-network-control allow-subnets subnets=<CIDR subnets or IP addresses>
Where <CIDR subnets or IP addresses> is a comma-separated list of the allowed IP addresses and subnets, in CIDR notation.
For example:
setting ire-network-control allow-subnets subnets=10.80.120.208,10.84.48.0/20
Note:
The IRE primary server, the IRE media servers, and the DNS server for the IRE must be included in the allowed list. If all of these servers are in the same subnet, only the subnet is required to be in the allowed list.
To remove the IP addresses and subnets from the allowed list:
setting ire-network-control allow-subnets subnets=,
To view the daily air gap schedule:
setting ire-network-control show-schedule
To change the air gap schedule:
setting ire-network-control set-schedule start_time=<time> duration=<duration>
For example:
setting ire-network-control set-schedule start_time=10:00:00 duration=03:00:00
Note:
The SLP replication window on the production domain must be configured to be open at the same time as the IRE schedule.
To stop the air gap schedule:
setting ire-network-control delete-schedule
To view the current network status and check whether the external network is open or closed:
setting ire-network-control external-network-status
To manually open the external network:
setting ire-network-control external-network-open
To manually close the external network and resume the air gap schedule:
setting ire-network-control resume-schedule