Search <book_title>...

Veritas NetBackup™ Deduplication Guide

Last Published: 2020-09-14

Product(s): NetBackup (8.3.0.1)

About MSDP mutli-domain VLAN Support

MSDP supports multi-domain NetBackup setups. In a multi-domain set-up, it is important for master servers from other domains to connect with the MSDP storage server and the master server of the NetBackup domain that contains the MSDP server. The master servers and media servers must have multiple network interfaces and host names in a multi-domain setup.

When you configure MSDP VLAN, the local NetBackup domain and the other NetBackup domain must have the NetBackup version 8.2 or later.

An example for using an MSDP VLAN

The following table describes the hierarchy that is used in the example:

NetBackup domain A	NetBackup domain B
`masterA - (10.XX.30.1/24)` `masterA2 - (10.XX.40.1/24)` `mediaA - (10.XX.30.2/24)` `mediaA2 - (10.XX.40.2/24)`	`masterB - (10.XX.40.3/24)` `mediaB - (10.XX.40.4/24)`

NetBackup domain A

NetBackup domain B

masterA - (10.XX.30.1/24)

masterA2 - (10.XX.40.1/24)

mediaA - (10.XX.30.2/24)

mediaA2 - (10.XX.40.2/24)

masterB - (10.XX.40.3/24)

mediaB - (10.XX.40.4/24)

masterA is the master server of domain A and has two host names and IP addresses. mediaA is the media server of domain A and has two host names and IP addresses. MSDP storage server is created on media server mediaA.

To let domain B access the MSDP storage server on mediaA of domain A, run the following steps:

Create an MSDP storage server on media server mediaA of NetBackup domain A. (NetBackup Administration Console > Media and Device Management > Configure Disk storage servers > Media Server Deduplication Pool)
Run following command on mediaA to create a new MSDP user testuser1 with password testuser1pass:
spauser -a -u "testuser1" -p "testuser1pass"
Servers in the domain B can only access IP like 10.XX.40.*, so masterA2 is used as the master server host name of domain A.
Run following command on mediaB to get a CA certificate and a host certificate from masterA:
nbcertcmd -GetCACertificate -server masterA2
nbcertcmd -GetCertificate -server masterA2 -token <token_string>
If the nbcertcmd - GetCACertificate displays the error "The server name does not match any of the host names listed in the server's certificate", refer to the following article to add more host name to master server:
https://www.veritas.com/support/en_US/article.100034092
Create an MSDP OpenStorage server on mediaB of NetBackup domain B. NetBackup Administration Console > Media and Device Management > Configure Disk storage servers > OpenStorage).
The OpenStorage server name mediaA2 is used as the host name that has the IP address 10.XX.40.*.
OpenStorage server type is PureDisk, user name is testuser1, and password is testuser1pass. You must enter the server type as PureDisk.

Now mediaB of NetBackup domain B can use the MSDP storage server mediaA2 and the network IP address 10.XX.40.*

If an external CA is used in the NetBackup setup, you do not need to run the nbcertcmd - GetCACertificate and the nbcertcmd - GetCertificate commands. If NetBackup domain A and NetBackup domain B do not use the same external CA, you must synchronize the external root CA between the two NetBackup domains for MSDP communication. If the servers have multiple host names, then the Subject Alternative Name field of the external certificate must contain all the host names.