Veritas NetBackup™ 53xx Appliance Initial Configuration Guide

  • Modified Date: 2017-11-06

Guidelines for NetBackup 53xx initial configuration

Review the following guidelines before you perform the initial configuration on a new 53xx appliance:

Table: NetBackup 53xx appliance configuration guidelines

Parameter

Description

Connectivity during initial configuration

When you perform the appliance initial configuration, you must take precautions to avoid loss of connectivity. Any loss of connectivity during initial configuration results in failure.

The computer that you use to configure the appliance should be set up to avoid the following events:

  • Conditions that cause the computer to go to sleep

  • Conditions that cause the computer to shut down or to lose power

  • Conditions that cause the computer to lose its network connection

Required names and addresses

Before the configuration, gather the following information:

  • Network IP addresses, netmask, and gateway IP addresses for the appliance

  • Network names for all appliances

  • DNS or host information

    Note:

    If DNS is used, make sure that the network names of all appliances and the master server are DNS resolvable (FQDN and short name).

    If DNS is not used, make sure that you enter the proper host entries for the appliance during the initial configuration.

  • Names for NetBackup storage units

    The Storage Name fields appear only when you configure the appliance as a media server. You can change the default names or leave them.

    Note:

    Only the storage unit name can be customized during the media server role configuration.

    The default values that appear in the NetBackup Administration Console for the storage units and disk pools are as follows:

    • For the AdvancedDisk:

      Default storage unit name: stu_adv_<hostname>

      Default disk pool name: dp_adv_<hostname>

    • For the NetBackup Deduplication:

      Default storage unit name: stu_disk_<hostname>

      Default disk pool name: dp_disk_<hostname>

    Note:

    The short host name for the appliance always appears in the default storage unit and disk pool names.

Default user name and password

New NetBackup appliances are shipped with the following default log-in credentials:

  • User name: admin

  • Password: P@ssw0rd

    Note:

    When you perform the initial configuration, you are not required to change the default password. However, to increase the security of your environment Veritas recommends that you change the default password immediately. As a best practice, the password should be changed periodically. Make sure to keep a record of the current password in a secure location.

Default Maintenance user password

The appliance comes configured with a known default password for the Maintenance user account. You should change this password either before or immediately after the initial configuration to prevent unauthorized access to the appliance maintenance mode. Note that you must provide the Maintenance user password to Veritas Technical Support in the event that the appliance requires troubleshooting services.

Each initial configuration procedure includes a step that describes how to change the default maintenance user password.

Firewall port usage

Make sure that the following ports are open on any firewall that exists between a master server and a media server:

  • 13724 (vnetd)

  • 13720 (bprd)

  • 1556 (PBX)

For more information about firewall ports for NetBackup and the NetBackup appliance, see the following tech note on the Veritas Support website:

https://www.veritas.com/support/en_US/article.TECH178855

Media server role

The NetBackup 53xx series appliances can only be configured as a media server.

Before you configure this appliance as a media server, the master server that you plan to use with it must be updated with the new appliance media server name. Whether the master server is a NetBackup appliance or a traditional NetBackup master server, the name of the new appliance media server must be added to the Additional Servers list on the master server.

Adding the new appliance media server name to the master server before the new appliance is configured provides the following benefits when performing the initial configuration on the new appliance:

  • Provides the appropriate network communication that allows the media server to become part of the NetBackup domain.

  • Allows the media server to create the storage server and the disk pool entries.

To configure this appliance as a media server, you have to deploy the security certificates on the appliance to trust the master server. A CA certificate and a host ID-based certificate must be deployed from the master server that you plan to use with this appliance. The CA certificate is automatically downloaded and deployed if you select to trust the master server.

To deploy the host ID-based certificate:

  • If the security level of the master server is Very High, you need to manually enter an authorization token to deploy the host ID-based certificate to the media server.

  • If the security level of the master server is High or Medium, the authentication token is not required. The host ID-based certificate is automatically deployed to the media server.

Note:

Regardless of the master security level, if the appliance is ever factory reset or re-imaged, a reissue token is required when the appliance is reconfigured.

If the security certificates have been deployed on the appliance media server, you are not requested to deploy them again during the role configuration.

For more information about security certificates, refer to the chapter Security certificates in NetBackup in the NetBackup Security and Encryption Guide.

See Configuring a master server to communicate with an appliance media server.

High Availability

Starting with appliance release version 3.1, you can deploy 53xx series appliances for a high availability (HA) solution. An HA configuration uses two NetBackup 53xx appliances that are designated as a compute node and a partner node. These nodes are connected to each other and also to specific channels on the same Primary Storage Shelf.

Note:

A NetBackup appliance HA configuration must use two identical appliances with regard to model number and hardware configuration. This requirement applies to all of the I/O configurations for each model. For example, use two model 5330 appliances with configuration D or two model 5340 appliances with configuration D. You cannot use one model 5330 appliance with configuration D and one model 5340 appliance with configuration D.

You can set up an HA configuration as follows:

  • New system installations

    Perform the initial configuration on one NetBackup 53xx appliance (compute node), then set up the HA configuration on this same node. Next, perform the initial configuration on the other appliance (partner node). Finally, complete the HA configuration on the compute node by adding the configured partner node.

  • Existing systems

    The existing components must first be upgraded as follows:

    Master server: Traditional NetBackup (non-appliance) master servers must be upgraded to NetBackup release version 8.1 or later. NetBackup appliance master servers must be upgraded to appliance release version 3.1 or later.

    Media server (existing model 5330): This appliance must be upgraded to appliance release version 3.1 or later.

    After these upgrades are completed, set up the HA configuration on the existing 5330 compute node. Next, perform the initial configuration on the partner node. Finally, complete the HA configuration on the compute node by adding the partner node.

    Note:

    Model 5340 appliances ship with software version 3.1 and do not require an upgrade.

When you set up the HA configuration, the host name and the IP address of the first configured or existing media server are automatically reassigned as the virtual host name and IP address for the HA configuration. You must provide a new host name and IP address for this media server at that time.

Note:

If you plan to use Active Directory (AD) authentication, do not set up the HA configuration until after you update the AD server with the host names and IP addresses of the HA configuration. The virtual host name and virtual IP address, along with the host name and IP address for each node are required on the AD server before setting up the HA configuration. Otherwise, AD users may experience problems when they access the system.

If you plan to use a NetBackup client to manage the NetBackup jobs, add the three host names to the bp.conf file on the client: the host name of the two nodes and the new host name.

Disk storage option licenses

The appliance comes with a not for resale (NFR) license key that expires after a specific period of time. The appliance does not provide a warning message that this license key is about to expire. Therefore, Veritas recommends that you change this key to a permanent key after you install and configure the appliance. See the NetBackup Appliance Administrator's Guide for information and instructions on how to view and change a license key.

Replace the NFR keys with permanent keys before they expire.

Optimized Share Reserve storage

If you plan to use the Copilot feature, it is recommended that you create any Optimized Share Reserve during the initial configuration. An Optimized Share Reserve can also be created after the initial configuration is completed. For example, when you add an Expansion Storage Shelf to an existing or operational 53xx appliance.

An Optimized Share Reserve can be created only as follows:

  • The configuration must be performed through the NetBackup Appliance Shell Menu.

  • The appliance hardware configuration must include at least one Expansion Storage Shelf.

  • All storage space on the Expansion Storage Shelf must be dedicated for Optimized Share Reserve use. The minimum size for a reserve is 114 TB.

  • AdvancedDisk and MSDP partitions must reside on a different shelf. They cannot coexist on the dedicated shelf with the Optimized Share Reserve.

NetBackup version compatibility

NetBackup appliance Release 3.1 includes NetBackup version 8.1.

For this appliance media server, the associated master server and clients must use the appropriate software version as follows:

  • Appliance master server

    The appliance master server that you plan to use with this appliance media server must use appliance software version 3.1 or later. If the appliance master server currently uses an earlier version, it must be upgraded to version 3.1 before you configure this appliance.

  • Traditional NetBackup master server

    To use this appliance media server with a traditional NetBackup master server, the master server must use NetBackup version 8.1 or later. If the NetBackup master server currently uses an earlier version, it must first be upgraded to version 8.1 before you configure this appliance.

  • Clients

    NetBackup clients must use the same or an earlier software version as the appliance. Clients cannot run at a later version than the appliance. For example, a client with NetBackup version 8.1 can only be used with an appliance server with version 3.1 or earlier. Client add-ons must also be the same version as the client version.

Guidelines for NetBackup 53xx initial configuration

Review the following guidelines before you perform the initial configuration on a new 53xx appliance:

Table: NetBackup 53xx appliance configuration guidelines

Parameter

Description

Connectivity during initial configuration

When you perform the appliance initial configuration, you must take precautions to avoid loss of connectivity. Any loss of connectivity during initial configuration results in failure.

The computer that you use to configure the appliance should be set up to avoid the following events:

  • Conditions that cause the computer to go to sleep

  • Conditions that cause the computer to shut down or to lose power

  • Conditions that cause the computer to lose its network connection

Required names and addresses

Before the configuration, gather the following information:

  • Network IP addresses, netmask, and gateway IP addresses for the appliance

  • Network names for all appliances

  • DNS or host information

    Note:

    If DNS is used, make sure that the network names of all appliances and the master server are DNS resolvable (FQDN and short name).

    If DNS is not used, make sure that you enter the proper host entries for the appliance during the initial configuration.

  • Names for NetBackup storage units

    The Storage Name fields appear only when you configure the appliance as a media server. You can change the default names or leave them.

    Note:

    Only the storage unit name can be customized during the media server role configuration.

    The default values that appear in the NetBackup Administration Console for the storage units and disk pools are as follows:

    • For the AdvancedDisk:

      Default storage unit name: stu_adv_<hostname>

      Default disk pool name: dp_adv_<hostname>

    • For the NetBackup Deduplication:

      Default storage unit name: stu_disk_<hostname>

      Default disk pool name: dp_disk_<hostname>

    Note:

    The short host name for the appliance always appears in the default storage unit and disk pool names.

Default user name and password

New NetBackup appliances are shipped with the following default log-in credentials:

  • User name: admin

  • Password: P@ssw0rd

    Note:

    When you perform the initial configuration, you are not required to change the default password. However, to increase the security of your environment Veritas recommends that you change the default password immediately. As a best practice, the password should be changed periodically. Make sure to keep a record of the current password in a secure location.

Default Maintenance user password

The appliance comes configured with a known default password for the Maintenance user account. You should change this password either before or immediately after the initial configuration to prevent unauthorized access to the appliance maintenance mode. Note that you must provide the Maintenance user password to Veritas Technical Support in the event that the appliance requires troubleshooting services.

Each initial configuration procedure includes a step that describes how to change the default maintenance user password.

Firewall port usage

Make sure that the following ports are open on any firewall that exists between a master server and a media server:

  • 13724 (vnetd)

  • 13720 (bprd)

  • 1556 (PBX)

For more information about firewall ports for NetBackup and the NetBackup appliance, see the following tech note on the Veritas Support website:

https://www.veritas.com/support/en_US/article.TECH178855

Media server role

The NetBackup 53xx series appliances can only be configured as a media server.

Before you configure this appliance as a media server, the master server that you plan to use with it must be updated with the new appliance media server name. Whether the master server is a NetBackup appliance or a traditional NetBackup master server, the name of the new appliance media server must be added to the Additional Servers list on the master server.

Adding the new appliance media server name to the master server before the new appliance is configured provides the following benefits when performing the initial configuration on the new appliance:

  • Provides the appropriate network communication that allows the media server to become part of the NetBackup domain.

  • Allows the media server to create the storage server and the disk pool entries.

To configure this appliance as a media server, you have to deploy the security certificates on the appliance to trust the master server. A CA certificate and a host ID-based certificate must be deployed from the master server that you plan to use with this appliance. The CA certificate is automatically downloaded and deployed if you select to trust the master server.

To deploy the host ID-based certificate:

  • If the security level of the master server is Very High, you need to manually enter an authorization token to deploy the host ID-based certificate to the media server.

  • If the security level of the master server is High or Medium, the authentication token is not required. The host ID-based certificate is automatically deployed to the media server.

Note:

Regardless of the master security level, if the appliance is ever factory reset or re-imaged, a reissue token is required when the appliance is reconfigured.

If the security certificates have been deployed on the appliance media server, you are not requested to deploy them again during the role configuration.

For more information about security certificates, refer to the chapter Security certificates in NetBackup in the NetBackup Security and Encryption Guide.

See Configuring a master server to communicate with an appliance media server.

High Availability

Starting with appliance release version 3.1, you can deploy 53xx series appliances for a high availability (HA) solution. An HA configuration uses two NetBackup 53xx appliances that are designated as a compute node and a partner node. These nodes are connected to each other and also to specific channels on the same Primary Storage Shelf.

Note:

A NetBackup appliance HA configuration must use two identical appliances with regard to model number and hardware configuration. This requirement applies to all of the I/O configurations for each model. For example, use two model 5330 appliances with configuration D or two model 5340 appliances with configuration D. You cannot use one model 5330 appliance with configuration D and one model 5340 appliance with configuration D.

You can set up an HA configuration as follows:

  • New system installations

    Perform the initial configuration on one NetBackup 53xx appliance (compute node), then set up the HA configuration on this same node. Next, perform the initial configuration on the other appliance (partner node). Finally, complete the HA configuration on the compute node by adding the configured partner node.

  • Existing systems

    The existing components must first be upgraded as follows:

    Master server: Traditional NetBackup (non-appliance) master servers must be upgraded to NetBackup release version 8.1 or later. NetBackup appliance master servers must be upgraded to appliance release version 3.1 or later.

    Media server (existing model 5330): This appliance must be upgraded to appliance release version 3.1 or later.

    After these upgrades are completed, set up the HA configuration on the existing 5330 compute node. Next, perform the initial configuration on the partner node. Finally, complete the HA configuration on the compute node by adding the partner node.

    Note:

    Model 5340 appliances ship with software version 3.1 and do not require an upgrade.

When you set up the HA configuration, the host name and the IP address of the first configured or existing media server are automatically reassigned as the virtual host name and IP address for the HA configuration. You must provide a new host name and IP address for this media server at that time.

Note:

If you plan to use Active Directory (AD) authentication, do not set up the HA configuration until after you update the AD server with the host names and IP addresses of the HA configuration. The virtual host name and virtual IP address, along with the host name and IP address for each node are required on the AD server before setting up the HA configuration. Otherwise, AD users may experience problems when they access the system.

If you plan to use a NetBackup client to manage the NetBackup jobs, add the three host names to the bp.conf file on the client: the host name of the two nodes and the new host name.

Disk storage option licenses

The appliance comes with a not for resale (NFR) license key that expires after a specific period of time. The appliance does not provide a warning message that this license key is about to expire. Therefore, Veritas recommends that you change this key to a permanent key after you install and configure the appliance. See the NetBackup Appliance Administrator's Guide for information and instructions on how to view and change a license key.

Replace the NFR keys with permanent keys before they expire.

Optimized Share Reserve storage

If you plan to use the Copilot feature, it is recommended that you create any Optimized Share Reserve during the initial configuration. An Optimized Share Reserve can also be created after the initial configuration is completed. For example, when you add an Expansion Storage Shelf to an existing or operational 53xx appliance.

An Optimized Share Reserve can be created only as follows:

  • The configuration must be performed through the NetBackup Appliance Shell Menu.

  • The appliance hardware configuration must include at least one Expansion Storage Shelf.

  • All storage space on the Expansion Storage Shelf must be dedicated for Optimized Share Reserve use. The minimum size for a reserve is 114 TB.

  • AdvancedDisk and MSDP partitions must reside on a different shelf. They cannot coexist on the dedicated shelf with the Optimized Share Reserve.

NetBackup version compatibility

NetBackup appliance Release 3.1 includes NetBackup version 8.1.

For this appliance media server, the associated master server and clients must use the appropriate software version as follows:

  • Appliance master server

    The appliance master server that you plan to use with this appliance media server must use appliance software version 3.1 or later. If the appliance master server currently uses an earlier version, it must be upgraded to version 3.1 before you configure this appliance.

  • Traditional NetBackup master server

    To use this appliance media server with a traditional NetBackup master server, the master server must use NetBackup version 8.1 or later. If the NetBackup master server currently uses an earlier version, it must first be upgraded to version 8.1 before you configure this appliance.

  • Clients

    NetBackup clients must use the same or an earlier software version as the appliance. Clients cannot run at a later version than the appliance. For example, a client with NetBackup version 8.1 can only be used with an appliance server with version 3.1 or earlier. Client add-ons must also be the same version as the client version.

Get Support