Veritas NetBackup™ Appliance Administrator's Guide

Last Published:
Product(s): Appliances (5.1.1)
Platform: NetBackup Appliance OS
  1. Overview
    1.  
      About NetBackup appliances
    2.  
      About the Primary Server role
    3.  
      About the media server role
    4. About accessing the NetBackup Appliance Web Console
      1.  
        Web browsers supported by the appliance
      2.  
        Disabling the Untrusted Connection page in Mozilla Firefox
    5. About the NetBackup Appliance Shell Menu
      1.  
        Logging in to the NetBackup Appliance Shell Menu
      2.  
        Limitations of the NetBackup Appliance Shell Menu
      3.  
        Command limitations on appliances that are not configured
    6. About appliance console components
      1.  
        About using the links on the title bar
      2.  
        Accessing and using help
      3.  
        About using Web browser bookmarks
      4.  
        Avoiding CSRF (Cross Site Request Forgery)
    7.  
      About the NetBackup Appliance Web Console login page
    8.  
      NetBackup appliance home page
    9.  
      Common tasks in NetBackup appliance
    10.  
      About the NetBackup appliance documentation
  2. Monitoring the NetBackup appliance
    1.  
      About monitoring the NetBackup appliance
    2. About hardware monitoring and alerts
      1. Monitor > Hardware options
        1.  
          Hardware components that are monitored
      2.  
        About Email notification from a NetBackup appliance
    3. About Symantec Data Center Security on the NetBackup appliance
      1.  
        Monitor > SDCS Events
      2.  
        Viewing SDCS audit log details
      3.  
        Filtering SDCS audit logs
      4.  
        Setting the SDCS audit log retention specification
      5. About Symantec Data Center Security Downloads
        1.  
          Downloading the IPS and IDS policies from the NetBackup appliance
      6.  
        Connecting to the SDCS server
      7.  
        Revert SDCS to unmanaged mode on a NetBackup appliance
  3. Managing a NetBackup appliance from the NetBackup Appliance Web Console
    1.  
      About the Manage views
    2. About storage configuration
      1.  
        Manage > Storage
      2.  
        Manage > Storage > Shares
      3.  
        About Universal shares migration
      4.  
        Checking partition details
      5.  
        Resizing a partition
      6.  
        Resize dialog
      7.  
        Troubleshooting resize-related issues
      8.  
        Moving a partition
      9.  
        Move dialog
      10.  
        Moving the MSDP partition from a base disk to an expansion disk for optimum performance
      11.  
        Scanning storage devices from the NetBackup Appliance Web Console
      12.  
        Adding the storage space from a newly available disk
      13.  
        Removing an existing storage disk
      14.  
        Monitoring the progress of storage manipulation tasks
      15.  
        Scanning storage devices using the NetBackup Appliance Shell Menu
      16. About Copilot functionality and Share management
        1.  
          About Optimized Shares and the Optimized Share Reserve
        2.  
          Creating a Share
        3.  
          Editing a Share
        4.  
          Deleting a Share
        5.  
          Moving a Share
        6.  
          Creating the Optimized Share Reserve
        7.  
          Deleting the Optimized Share Reserve
        8.  
          Viewing Share information from the NetBackup Appliance Shell Menu
        9.  
          NFS export options
      17. About viewing storage space information using the Show command
        1.  
          Viewing all storage information
        2.  
          Viewing disk information
        3.  
          Viewing partition information
        4.  
          Viewing the partition distribution on disks
      18.  
        About storage email alerts
    3. About appliance supported tape devices
      1.  
        Adding external robots to the NetBackup appliance
    4. About configuring Host parameters for your appliance
      1.  
        Manage > Host > Data Buffer options
      2.  
        Configuring data buffer parameters
      3.  
        Manage > Host > Lifecycle options
      4.  
        Configuring lifecycle parameters
      5. About configuring deduplication solutions
        1.  
          Adding the deduplication solution to a 52xx media appliance
        2.  
          Manage > Host > Deduplication
        3.  
          Configuring deduplication parameters
      6. About BMR integration
        1.  
          Manage > Host > Advanced options
        2.  
          Enabling BMR from the NetBackup Appliance Web Console
      7. Manage > Host > IPMI options
        1.  
          Resetting the IPMI
    5. Manage > Appliance Restore
      1. About creating an appliance checkpoint
        1.  
          Creating an appliance checkpoint
        2.  
          Checkpoint creation status
        3.  
          Creating an appliance checkpoint from the appliance shell menu
      2. About rollback to a checkpoint
        1.  
          About appliance rollback
        2.  
          About appliance rollback validation
        3.  
          Rollback to an appliance checkpoint from the NetBackup Appliance Web Console
        4.  
          About checkpoint rollback status
        5.  
          Rollback to an appliance checkpoint from the appliance shell menu
      3. About NetBackup appliance factory reset
        1.  
          Factory reset best practices
        2.  
          Starting a factory reset from the appliance shell menu
    6. Manage > License
      1.  
        Managing license keys on the NetBackup appliance
      2.  
        Adding a permanent license key if an evaluation license key expires
      3.  
        Generate and install an appliance license
    7. About the Migration Utility
      1.  
        Manage > Migration Utility > Configure Migration
      2.  
        Manage > Migration Utility > Migration Status
      3.  
        Configuring a new migration task
      4.  
        Viewing the migration task status
      5.  
        Best practices for migration utility
    8. Software release updates for NetBackup Appliances
      1.  
        Manage > Software Updates
      2.  
        Installing a NetBackup appliance software update using the NetBackup Appliance Shell Menu
      3.  
        Appliance servers to upgrade
      4.  
        Installing NetBackup PSF add-ons using the NetBackup Appliance Shell Menu
    9. About installing EEBs
      1.  
        Installing an EEB
    10. About installing NetBackup Administration Console and client software
      1.  
        Installing NetBackup client software through an NFS share
      2.  
        Downloading NetBackup client packages to a client from a NetBackup appliance
    11. Manage > Additional Servers
      1.  
        Managing additional servers to the appliance
    12.  
      Manage > File Manager
    13. Manage > High Availability
      1.  
        Monitoring a high availability configuration from the NetBackup Appliance Web Console
  4. Managing NetBackup appliance using the NetBackup Appliance Shell Menu
    1.  
      Expanding the bandwidth on the NetBackup appliance
    2.  
      About configuring the maximum transmission unit size
    3. About OpenStorage plugin installation
      1.  
        Installing the OpenStorage plugin
      2.  
        Uninstalling the OpenStorage plugin
    4. About mounting a remote NFS
      1.  
        Mounting a remote NFS drive
      2.  
        Unmounting an NFS drive
    5. About running NetBackup commands from the appliance
      1. About NetBackup administrator capabilities
        1.  
          Running NetBackup commands from the NetBackup appliance
        2. Creating a NetBackup touch file from the NetBackup appliance
          1.  
            Loading the NetBackup notify scripts
        3.  
          About NetBackup operating system commands
        4.  
          Best practices for running NetBackup commands from the NetBackup appliance
        5.  
          Known limitations of running NetBackup commands from the NetBackup appliance
      2. Creating NetBackup administrator user accounts
        1.  
          Logging on as a NetBackup administrator
        2.  
          Managing NetBackup administrator user account passwords
        3.  
          Auditing NetBackup administrator accounts
      3.  
        Deleting NetBackup administrator user accounts
      4.  
        Viewing NetBackup administrator user accounts
    6. About Auto Image Replication between appliances
      1. About Auto Image Replication between NetBackup appliances
        1.  
          Prerequisites for Auto Image Replication
        2. Configuring a replication target
          1.  
            Determining the appliance deduplication password
      2.  
        About Auto Image Replication between NetBackup appliances and deduplication appliances
    7. About forwarding logs to an external server
      1.  
        Uploading certificates for TLS
      2.  
        Enabling log forwarding
      3.  
        Changing the log forwarding interval
      4.  
        Viewing the log forwarding configuration
      5.  
        Disabling log forwarding
    8. About high availability configuration
      1.  
        Checking the status
      2.  
        Getting the asset tag
      3.  
        Switching the services over
      4.  
        Removing a node
    9. About data erasure
      1.  
        Configuring the data erasure
      2.  
        Viewing the data erasure status
      3.  
        Aborting the data erasure
  5. Understanding the NetBackup appliance settings
    1.  
      About modifying the appliance settings
    2. Settings > Notifications
      1. Settings > Notifications > Alert Configuration
        1.  
          Configuring alert settings
        2. About SNMP
          1.  
            About the Management Information Base (MIB)
        3. About Call Home
          1.  
            Enabling and disabling Call Home from the appliance shell menu
          2.  
            About AutoUpdate for Upgrade Readiness Check
          3.  
            Configuring a Call Home proxy server from the NetBackup Appliance Shell Menu
          4.  
            Understanding the Call Home workflow
          5.  
            About the Product Improvement Program
      2. Settings > Notifications > Login Banner
        1.  
          Creating the appliance login banner
        2.  
          Removing the appliance login banner
      3.  
        About AutoSupport
    3. Settings > Network
      1.  
        VLAN configuration for NetBackup Appliances
      2. Settings > Network > Network Settings
        1. About WAN Optimization
          1.  
            How to enable WAN optimization for a network interface port or a network interface port bond
          2.  
            How to disable WAN optimization for a network interface port or a network bond
          3.  
            Viewing the WAN optimization status
        2.  
          Network and VLAN configuration guidelines
        3.  
          Creating a bond
        4.  
          Tagging VLAN
        5.  
          Adding static route
      3. Settings > Network > Fibre Transport
        1.  
          About the HBA port mode configuration table
        2.  
          Configuring Fibre Transport settings
        3.  
          Configuring Fibre Transport to other NetBackup appliances
      4. Settings > Network > Host
        1.  
          Changing DNS and Host Name Resolution (non-DNS) configuration settings
      5.  
        About IPv4-IPv6-based network support
    4.  
      Settings > Date and Time
    5. Settings > Authentication
      1. About configuring user authentication
        1.  
          Generic user authentication guidelines
      2. About authorizing NetBackup appliance users
        1.  
          NetBackup appliance user role privileges
      3.  
        Settings > Authentication
      4. Settings > Authentication > LDAP
        1.  
          Adding an LDAP server configuration
        2.  
          Importing an LDAP server configuration
        3.  
          Setting the SSL certification
        4.  
          Exporting an LDAP configuration
        5.  
          Unconfiguring LDAP user authentication
        6.  
          Enabling the LDAP server configuration
        7.  
          Disabling the LDAP server configuration
        8.  
          Deleting LDAP configuration parameters
        9.  
          Adding LDAP configuration parameters
        10.  
          Adding an LDAP attribute mapping
        11.  
          Deleting an LDAP attribute mapping
      5. Settings > Authentication > Active Directory
        1.  
          Adding an Active Directory server configuration
        2.  
          Unconfiguring the Active Directory user authentication
      6. Settings > Authentication > User Management
        1.  
          Adding appliance users
        2.  
          Deleting appliance users
        3.  
          Adding appliance user groups
        4.  
          Deleting appliance user groups
        5.  
          Granting roles to users and user groups
        6.  
          Revoking roles from users and user groups
        7.  
          Synchronizing the user groups
    6.  
      Settings > Password Management
  6. Troubleshooting
    1.  
      Viewing log files using the Support command
    2.  
      Where to find NetBackup appliance log files using the Browse command
    3. About disaster recovery
      1.  
        Recovering a NetBackup appliance primary server using NetBackup catalog restore
    4.  
      Gathering device logs on a NetBackup appliance
  7. Deduplication pool catalog backup and recovery
    1.  
      Deduplication pool catalog backup policy
    2.  
      Automatic configuration of the deduplication pool catalog backup policy
    3.  
      Manually configuring the deduplication pool catalog backup policy
    4.  
      Manually updating the deduplication pool catalog backup policy
    5.  
      Recovering the deduplication pool catalog
  8.  
    Index

About Symantec Data Center Security on the NetBackup appliance

Note:

After an upgrade, the appliance SDCS agent is automatically set to unmanaged mode. If an appliance was running in managed mode before upgrade, make sure to reset that appliance back to managed mode after the upgrade is completed.

You must also update the appliance IPS and IDS policies on your SDCS management server. You cannot use the older policies to manage an appliance that is running the newer software version after upgrade. The new policies can be downloaded from the Monitor > SDCS Events page of the NetBackup Appliance Web Console. Also note that any custom rules or support exceptions you might have for the IPS and IDS policies are not available after an upgrade

Symantec Data Center Security: Server Advanced (SDCS) is a security solution offered by Symantec to protect servers in data centers. The SDCS software is included on the appliance and is automatically configured during appliance software installation. SDCS offers policy-based protection and helps secure the appliance using host-based intrusion prevention and detection technology. It uses the least-privileged containment approach and also helps security administrators centrally manage multiple appliances in a data center. The SDCS agent runs at startup and enforces the customized NetBackup appliance intrusion prevention system (IPS) and intrusion detection system (IDS) policies. The overall SDCS solution on the appliance provides the following features:

  • Hardened Linux OS components

    Prevents or contains malware from harming the integrity of the underlying host system as a result of OS vulnerabilities.

  • Data protection

    Tightly limits appliance data access to only those programs and activities that need access, regardless of system privileges.

  • Hardened appliance stack

    Appliance application binaries and configuration settings are locked down such that changes are tightly controlled by the application or trusted programs and scripts.

  • Expanded detection and audit capabilities

    Provides enhanced visibility into important user or system actions to ensure a valid and complete audit trail that addresses compliance regulations (such as PCI) as a compensating control.

  • Centralized managed mode operations

    Lets you use a central SDCS manager for an integrated view of security across multiple appliances as well as any other enterprise systems managed by SDCS.

The SDCS implementation on the appliance can operate in an unmanaged mode or a managed mode. By default, SDCS operates in an unmanaged mode and helps secure the appliance using host-based intrusion prevention and detection technology. The NetBackup appliance is in unmanaged mode, when it is not connected to the SDCS server. In unmanaged mode, you can monitor SDCS events from the NetBackup Appliance Web Console. Use the Monitor > SDCS Events page, to monitor the events logged. The events are monitored using the NetBackup appliance IDS and IPS policies. These policies are automatically applied at the time of initial configuration. Click Filter Logs to filter and view specific events.

In managed mode, the SDCS agent on the appliance continues to protect the appliance while also connecting to an external SDCS server for centralized management and log analysis. In managed mode, the appliance is connected to the SDCS server and the events are monitored using the SDCS management console. Using this mode multiple appliances can be monitored using a single SDCS server. SDCS agents are configured with each NetBackup appliance that are used to send events to the SDCS server.

Figure: SDCS implementation in managed mode illustrates SDCS in managed mode.

Figure: SDCS implementation in managed mode

SDCS implementation in managed mode

To set up managed mode, you can install the SDCS server and management console and then connect the appliance to an SDCS server.

Use Monitor > SDCS Events page to:

  • Download NetBackup Appliance IPS and IDS policies

  • Apply these polices using the SDCS management console

  • Connect the NetBackup appliances with the server

  • Monitor events for all the NetBackup appliances connected to this server.

Use Monitor > SDCS Events > Connect to SDCS server to:

  • Add SDCS server details

  • Download authentication certificate

  • Connect to the SDCS server

For complete information about the SDCS implementation on the appliance, refer to the NetBackup Appliance Security Guide.