NetBackup™ for VMware Administrator's Guide
- Introduction
- About NetBackup for VMware
- About the virtual machine backups that include database data
- About the NetBackup appliance as a VMware backup host
- NetBackup for VMware components
- Appliance as backup host: component overview
- Media servers as backup or discovery hosts
- Overview of the VMware backup process
- NetBackup for VMware terminology
- Required tasks: overview
- Configuring RBAC roles for VMware administrators
- RBAC roles for the VMware administrator
- Assigning permissions at specific VMware object levels
- Create a custom role for a VMware server or datacenter
- Create a custom role for an Organization VDC administrator
- Create a custom role to manage specific VMs
- Manage permissions for a datacenter
- Manage permissions for a single VM
- Apply RBAC role permissions for a VM to other VMs
- Notes and prerequisites
- NetBackup for VMware: notes and restrictions
- Notes on VMware Virtual Volumes (VVols)
- NetBackup IPv6 parameter required for backups in VMware IPv6 environments
- NetBackup for VMware: notes on Linux virtual machines
- Notes on the NetBackup appliance as a VMware backup host
- NetBackup for VMware support for SAN multi-pathing
- NetBackup for VMware support for fault tolerant VMs
- NetBackup character restrictions for the Primary VM identifier
- In the policy Query Builder, display names, resource pool names, and vApp names are case-sensitive
- Notes on the hotadd transport mode
- Notes and limitations for tag usage in VMware Intelligent Policy queries
- Notes and limitations for the backup and restore of VMware tag associations
- Notes and limitations for the backup and restore of VMware storage policies
- Support for LVM thin pool based volumes
- VMware vSphere privileges
- About VMware vSphere privileges
- VMware vSphere privileges for virtual machine backups
- VMware vSphere privileges for a full VM restore
- VMware vSphere privileges to create an instant access VM
- VMware vSphere privileges for NetBackup plug-in operations
- VMware vSphere privileges for instant rollback
- VMware vSphere privileges for agentless SFR privileges
- VMware vSphere privileges for individual vmdk restore privileges
- VMware vSphere privileges for vApp restore and vApp restore to template
- Optional permissions for better integration with VMware vSphere
- Managing VMware servers
- About VMware discovery
- Add VMware servers
- Validate and update VMware server credentials
- Browse VMware servers
- Remove VMware servers
- Create an intelligent VM group
- Remove an intelligent VM group
- Add a VMware access host
- Remove a VMware access host
- Change resource limits for VMware resource types
- Setting privileges for posting events to vCenter
- Authentication token for the NetBackup vSphere plug-ins
- Validating VMware virtualization server certificates in NetBackup
- Configuring backup policies for VMware
- Configure a VMware policy
- Limit jobs per policy on the Attributes tab (for VMware)
- Backup options on the VMware tab
- Exclude disks tab
- Browse for VMware virtual machines
- Limiting the VMware servers that NetBackup searches when browsing for virtual machines
- Virtual machine host names and display names should be unique if VMs are selected manually in the policy
- Primary VM identifier option and manual selection of virtual machines
- About incremental backups of virtual machines
- Configuring incremental backups
- Storage Foundation Volume Manager volumes in the virtual machine
- Configuring a VMware Intelligent Policy
- About automatic virtual machine selection for NetBackup for VMware
- Support and use of VMware tag associations
- The basics of a NetBackup query rule
- Important notes on automatic virtual machine selection
- NetBackup requirements for automatic virtual machine selection
- Automatic virtual machine selection: Task overview
- Options for selecting VMware virtual machines
- About the Reuse VM selection query results option
- Configure automatic virtual machine selection
- Editing an existing query in Basic mode
- Using the Query Builder in Advanced mode
- AND vs. OR in queries
- Examples for the NetBackup Query Builder
- The IsSet operator in queries
- About selecting virtual machines by means of multiple policies
- Order of operations in queries (precedence rules)
- Parentheses in compound queries
- Query rules for resource pools
- Query rules for datacenter folders (host folder)
- Query rules for duplicate names
- Query rules for tags
- Query Builder field reference
- Test Query screen for VMware
- Test Query: Failed virtual machines
- Effect of Primary VM identifier parameter on Selection column in Test Query results
- Effect of Primary VM identifier parameter on VM Name column in Test query results
- Refreshing the display of virtual environment changes in the Query Builder
- Reducing the time required for VM discovery in a large VMware environment
- Use Accelerator to back up virtual machines
- About the NetBackup Accelerator for virtual machines
- Accelerator: full vs. incremental schedules
- How the NetBackup Accelerator works with virtual machines
- Accelerator notes and requirements for virtual machines
- Accelerator forced rescan for virtual machines (schedule attribute)
- Accelerator requires the OptimizedImage attribute
- Accelerator backups and the NetBackup catalog
- Accelerator messages in the backup job details log
- About reporting the amount of Accelerator backup data that was transferred over the network
- Replacing the Accelerator image size with the network-transferred data in NetBackup command output
- Configuring protection plans for VMware
- Malware scan
- Instant access
- Instant rollback
- Continuous data protection
- About continuous data protection
- CDP terminology
- CDP architecture
- Prerequisites
- Capacity-based licensing for CDP
- Steps to configure CDP
- Removing VMs from the CDP gateway
- Defining the CDP gateway
- Sizing considerations
- Limiting concurrent CDP backup jobs
- Controlling full sync
- Monitoring CDP jobs
- Using accelerators with CDP
- Recovering CDP protected VMs
- Some limitations of CDP
- Troubleshooting for CDP
- Backing up virtual machines
- VM recovery
- VMware agentless restore
- Restoring Individual files and folders from VMware backups
- Using NetBackup to back up Cloud Director environments
- About NetBackup for vCloud Director
- Notes on creating a NetBackup policy for vCloud
- Notes on restoring virtual machines into vCloud Director
- Recover VMware Cloud Director virtual machines
- Restore a vApp template that has multiple virtual machines
- Reducing the time required for VM discovery in a large vCloud environment
- Restore virtual machines with Instant Recovery
- About Instant Recovery for VMware
- Task overview for Instant Recovery for VMware
- Performance recommendations for Instant Recovery for VMware
- Requirements for Instant Recovery for VMware
- Notes on Instant Recovery for VMware
- Restarting the Client for NFS service on a Windows restore host
- Instant Recovery options on the nbrestorevm command
- Restoring a virtual machine with Instant Recovery for VMware
- Restoring a virtual machine to a different location with Instant Recovery for VMware
- Restoring individual files with Instant Recovery for VMware while the current virtual machine is running
- Job types for Instant Recovery for VMware
- Reactivating a restored virtual machine with Instant Recovery for VMware
- Protecting VMs using hardware snapshots and replication
- About virtual machines and hardware snapshots
- Deployment and architecture
- Features and applications supported
- Prerequisites for hardware snapshot and replication
- Operations supported with hardware snapshot
- Configuring a VMware policy to use hardware snapshots
- Configuring a VMware policy to use NetBackup snapshot manager replication
- Jobs in the Activity Monitor that use hardware snapshot for VMs
- Notes and limitations
- Troubleshooting with VMware hardware snapshot and replication operations
- Best practices and more information
- Troubleshooting VMware operations
- NetBackup logging for VMware
- Troubleshooting VMware backups
- Troubleshooting the restore of VMware and restores of files
- Troubleshooting the adding of VMware servers
- Troubleshooting the browsing of VMware servers
- Troubleshooting the status for a newly discovered VM
- Troubleshooting policy configuration
- Troubleshooting the download of files from an instant access VM
- Troubleshooting backups and restores of excluded virtual disks
- How to determine the ESX network that NetBackup used for the backup or restore
- Preventing browsing delays caused by DNS problems
- Changing the browsing timeout for virtual machine discovery
- Changing timeout and logging values for vSphere
- Credentials for VMware server are not valid
- Snapshot error encountered (status code 156)
- Conflict between NetBackup and VMware Storage vMotion with vSphere 5.0 or later
- Backup or restore job hangs
- VMware SCSI requirements for application quiesce on Windows
- VMware virtual machine does not restart after restore
- A restored VM may not start or its file system(s) may not be accessible
- NetBackup job fails due to update tasks on the VMware server
- The vSphere interface reports that virtual machine consolidation is needed
- Linux VMs and persistent device naming
- For a VMware virtual machine with Windows dynamic disks, a restore from incremental backup fails with a Windows restore host and the hotadd transport mode
- Simultaneous hotadd backups (from the same VMware backup host) fail with status 13
- Troubleshooting VMware tag usage
- Ensuring that guest customizations can be restored in vCloud Director
- Troubleshooting vmdk restore to existing VM
- Troubleshooting backups of virtual machines on Virtual Volumes (VVols)
- Issues with the CA certificate during installation of the NetBackup client on VMware Cloud (VMC)
- Appendix A. Configuring services for NFS on Windows
- About installing and configuring Network File System (NFS) for Granular Recovery Technology (GRT)
- About configuring services for NFS on Windows 2012 or 2016 (NetBackup for VMware)
- Disabling the Server for NFS (NetBackup for VMware)
- Disabling the Client for NFS on the media server (NetBackup for VMware)
- Configuring a UNIX media server and Windows backup or restore host for Granular Recovery Technology (NetBackup for VMware)
- Configuring a different network port for NBFSD (NetBackup for VMware)
- Appendix B. Backups of VMware raw devices (RDM)
VMware - Advanced attributes
The following additional parameters are available for VMware backups. In most situations, the best settings are the defaults.
Table: VMware advanced attributes
Configuration parameter | Description |
|---|---|
Virtual machine quiesce | This option is enabled by default. In the great majority of cases, you should accept the default. I/O on the virtual machine is quiesced before NetBackup creates the snapshot. Without quiescing file activity, data consistency in the snapshot cannot be guaranteed. If not consistent, the backed-up data may be of little or no value. If this option is disabled, the snapshot is created without quiescing I/O on the virtual machine. In this case, you must perform your own analysis for data consistency in the backup data. Caution: Veritas does not recommend that you disable quiesce. In most cases, this option should be enabled. Note: To use this option, VMware Tools must be installed on the virtual machine. Note: To use this option with Linux virtual machines, snapshot quiesce must be enabled in the Linux guest OS. |
Ignore Instant Recovery VMs | If this option is enabled (the default): NetBackup skips any virtual machine that was restored with Instant Recovery for VMware if the virtual machine is running from a NetBackup NFS datastore. When the virtual machine data files have been migrated to the production datastore, the virtual machine can be backed up. NetBackup identifies Instant Recovery virtual machines according to the following criteria:
If the virtual machine meets all these criteria, it is not backed up if this option is enabled. If this option is disabled: NetBackup backs up the virtual machine even if it is running from the NetBackup NFS datastore. |
Treat Tags as unset if unable to evaluate | Tags were introduced with VMware vCenter Version 5.1. The APIs to interface with the tagging service were not released until VMware vCenter Version 6.0. NetBackup for VMware supports the tags that are assigned to virtual machine objects starting with VMware vCenter Version 6.0. If you have a mixed vCenter environment, such as 5.1, 5.5, and 6.0: you can use this configuration parameter to modify how NetBackup treats tags for vCenter Version 5.1/5.5. This configuration parameter also applies to all versions of ESXi hosts whose credentials were added to the list. This option is disabled by default. If you use the tag field in the VMware Intelligent Policy query and your policy searches for virtual machines across a mixed vCenter environment, note: NetBackup reports the virtual machines that are discovered from vCenter Server 5.1/5.5 and ESXi hosts as failed if it needs to evaluate the tag portion of the query to make an include or exclude decision. When you enable this option NetBackup treats tags as unset. If you use the tag field in the VMware Intelligent Policy query and your policy searches for virtual machines across a mixed vCenter environment, note: NetBackup evaluates the tag part of the query as if no tags were set on the virtual machines that are discovered from vCenter Server 5.1, 5.5, and ESXi. |
Ignore diskless VMs | If this option is enabled: NetBackup does not back up a replicated (passive) VM in a vCenter Site Recovery Manager (SRM) environment if that VM has no vmdk files. NetBackup skips that VM and backs up the corresponding active VM, which has vmdk files. Note that virtual machines without vmdk files can occur in a vCenter SRM environment. If a replicated virtual machine has never been active, it is in passive mode and may have no vmdk files. Note: If this option is enabled and NetBackup does not have access to the vCenter where the active virtual machine runs: the policies in the Query Builder run without error; no attempt is made to back up the virtual machine. For the policies that use manual selection of virtual machines, backups fail with status 156, because the virtual machine cannot be located. If this option is disabled: NetBackup attempts to back up a virtual machine regardless of whether it has vmdk files. If the virtual machine has no vmdk files, the backup fails with status 156. |
Multiple organizations per policy | This option is disabled by default. If it is enabled, the query rules can select virtual machines from different vCloud Director organizations and back them up to the same storage unit. If you do not want backups of virtual machines from different organizations to be stored on the same drive, leave this option disabled. |
Continue VIP discovery if one vSphere login fails | Note: This option applies to VMware Intelligent Policies (VIP) only. When this option is set to Yes: For a VIP policy's discovery job, NetBackup ignores a failed logon to a vCenter and attempts to log on and discover VMs on other vCenters. On any vCenter that NetBackup can log on to, the VMs that match the VIP policy's query are backed up. When this option is set to No (the default): If the attempt to log on to a vCenter fails, the discovery job fails and no VMs are backed up for any vCenters. More information is available on the types of NetBackup jobs for VMware: See Using the Activity monitor to monitor virtual machine backups. |
Post vCenter events | Enables NetBackup to send backup related events to the vCenter server. The events appear in vSphere Client under Home > Inventory > Hosts and Clusters, Tasks & Events tab. See Viewing NetBackup activity in vSphere Client (HTML5). The following options are available:
Further information on is available: See Post vCenter events option (VMware advanced attributes). |
VMware server list | Specifies a colon-delimited list of virtual machine servers that NetBackup communicates with for this policy. In large virtual environments, you can use this list to improve backup performance: NetBackup communicates only with the servers that are in this list. For example, exclude from the list any vCenter or vCloud servers that do not contain virtual machines to be backed up by this policy. Also, if a duplicate of the virtual machine exists on a different server: the duplicate is not backed up if it resides on a server that is not included in this list. Important: IPv6 addresses are not supported in the field. Use fully qualified domain names or host names. Note: Each host name must match exactly the name as configured in the NetBackup credentials. Note: Separate the names with a colon (:) not a comma (,). This option does not affect either of the following: the list of all possible values in the Query Builder for automatic selection of virtual machines, or browsing of virtual machines for manual selection. If the list is blank (the default), NetBackup communicates with any servers in the virtual environment. |
VMDK compression | Used to specify the vmdk compression method. When this option is set to none (default) compression is not used during the backup job. NetBackup uses the preferred vmdk compression method when it opens VMDKs. Backup jobs automatically set the compression method to none if NetBackup is unable to read the vmdk with the preferred method. |
Snapshot retry count Sets the number of times the snapshot is retried. The default is 10. The range is 0 to 100. This option and the snapshot time-out and snapshot creation interval provide flexibility in the creation of snapshots. For most environments, the default values are usually best. In special circumstances, it may be helpful to adjust these settings. Example considerations are the size of the virtual machine and the processing load on the VMware server. Snapshot timeout (minutes) Sets a time-out period (in minutes) for completion of the snapshot. The default is 0, which means no time-out. If snapshots do not complete, set this option to a specific period to force a time-out. Consider using the snapshot creation interval to retry the snapshot at a later time. Snapshot creation interval (seconds) Determines the wait time (in seconds) before the snapshot is retried. The default is 10 seconds. The range is 0 to 3600. Perform snapshot without quiescing if quiesced snapshots fail This option is disabled by default. If it is enabled and a quiesced snapshot cannot be created, the snapshot is created without quiescing I/O on the virtual machine. The resulting snapshot is referred to as crash consistent. In this
case, you must perform your own analysis for data consistency in the backed-up
data. The associated snapshot job completes with a status of See the NetBackup Administrator's Guide, Volume I for details. Warning: In most cases, Veritas does not recommend enabling this option. NetBackup cannot guarantee that all required data has been flushed to disk when the snapshot occurs. The data that is captured in the snapshot may be incomplete. If this option is disabled, the backup fails if a quiesced snapshot cannot be created. |