Veritas NetBackup™ 52xx Appliance Initial Configuration Guide

Last Published:
Product(s): Appliances (3.2)
Platform: NetBackup Appliance OS

About appliance configuration guidelines

Use the following configuration guidelines when you deploy new appliances:

Table: Appliance configuration guidelines

Parameter

Description

Connectivity during initial configuration

When you perform the appliance initial configuration, Veritas recommends that you take precautions to avoid loss of connectivity. Any loss of connectivity during initial configuration results in failure.

The computer that you use to configure the appliance should be set up to avoid the following events:

  • Conditions that cause the computer to go to sleep

  • Conditions that cause the computer to shut down or to lose power

  • Conditions that cause the computer to lose its network connection

NetBackup Appliance Web Console access

Starting with NetBackup appliance software version 2.6.0.4, the NetBackup Appliance Web Console is accessible only over HTTPS on the default port 443. Port 80 over HTTP has been disabled.

The exception to this change is in NetBackup appliance software version 2.6.1. With that version, the NetBackup Appliance Web Console is accessible only over HTTPS on the default port 80.

Required names and addresses

Before the configuration, gather the following information:

  • Network IP addresses, netmask, and gateway IP addresses for the appliance

  • Network names for all appliances

  • DNS or host information

    If DNS is used, make sure that the network names of all appliances and the master server are DNS resolvable (FQHN and short name).

    If DNS is not used, make sure that you enter the proper host entries for the appliance during the initial configuration.

    Note:

    The Domain Name Suffix is appended to the host name and cannot be changed after the initial configuration is completed. If you need to change the suffix or move the appliance to a different domain at a later time, you must perform a factory reset first, and then perform the initial configuration again.

  • Password for appliance access

    The default password for appliance access is P@ssw0rd.

  • Names for NetBackup storage units

    The Storage Name fields appear when you configure the appliance role. You can change the default names or leave them.

    The default values that appear in the NetBackup Administration Console for the storage units and disk pools are as follows:

    • For the AdvancedDisk:

      Default storage unit name: stu_adv_<hostname>

      Default disk pool name: dp_adv_<hostname>

    • For the NetBackup Deduplication:

      Default storage unit name: stu_disk_<hostname>

      Default disk pool name: dp_disk_<hostname>

Note:

The short host name of the appliance appears as the default storage unit name and the disk pool name.

Default user name and password

New NetBackup appliances are shipped with the following default log-in credentials:

  • User name: admin

  • Password: P@ssw0rd

Note:

When you perform the initial configuration, you are not required to change the default password. However, to increase the security of your environment you should change the password periodically. Make sure to keep a record of the current password in a secure location.

Default Maintenance user password

The appliance comes configured with a known default password for the Maintenance user account. You should change this password either before or immediately after the initial configuration to prevent unauthorized access to the appliance maintenance mode. Note that you must provide the Maintenance user password to Veritas Technical Support in the event that the appliance requires troubleshooting services.

Each initial configuration procedure includes a step that describes how to change the default Maintenance user password.

Firewall port usage

Make sure that the following ports are open on any firewall that exists between a master server and a media server:

  • 13724 (vnetd)

  • 13720 (bprd)

  • 1556 (PBX)

For more information about firewall ports for NetBackup and the NetBackup appliance, see the following tech note on the Veritas Support website:

https://www.veritas.com/support/en_US/article.TECH178855

Media server role

Before you configure a NetBackup appliance as a media server, the master server that you plan to use with it must be updated with the new appliance media server name. Whether the master server is a NetBackup appliance or a traditional NetBackup master server, the name of the new appliance media server must be added to the Additional Servers list on the master server.

Adding the new appliance media server name to the master server before the new appliance is configured provides the following benefits when performing the initial configuration on the new appliance:

  • Provides the appropriate network communication that allows the media server to become part of the NetBackup domain.

  • Allows the media server to create the storage server and the disk pool entries.

Security certificate requirements

NetBackup Appliance release 3.2 introduces support for external certificate authority certificates. This feature provides an alternative to using the NetBackup Certificate Authority for host verification and security. To configure this appliance as a media server, you have to deploy security certificates on the appliance to trust the master server.

If the master server is operating with an external CA issued certificate only, this appliance media server requires configuration with an issued certificate from the same external CA. For CA certificate provisioning, the Host certificate, Trusted certificate, Private Key certificate file, and the use of a Certificate Revocation List (CRL) are all required to proceed with the media server role configuration.

If the master server uses both an external CA issued certificate and a NetBackup CA-signed certificate, you can choose to configure this media server appliance with a certificate issued by the same external CA or with a NetBackup CA-signed certificate. If the master server is using a NetBackup CA-signed certificate only, a CA certificate and a host ID-based certificate must be deployed from the master server that you plan to use with this appliance. The CA certificate is automatically downloaded and deployed if you select to trust the master server.

To deploy the host ID-based certificate:

  • If the security level of the master server is Very High, you need to manually enter an authorization token to deploy the host ID-based certificate to the media server.

  • If the security level of the master server is High or Medium, the authentication token is not required. The host ID-based certificate is automatically deployed to the media server.

Note:

Regardless of the master security level, if the appliance is ever factory reset or re-imaged, a reissue token is required when the appliance is reconfigured.

If the security certificates have been deployed on the appliance media server, you are not requested to deploy them again during the role configuration.

For more information about security certificates, refer to the chapter Security certificates in NetBackup in the NetBackup Security and Encryption Guide.

See Configuring a master server to communicate with an appliance media server.

Disk storage option licenses

The appliance comes with a not for resale (NFR) license key that expires after a specific period of time. The appliance does not provide a warning message that this license key is about to expire. Therefore, Veritas recommends that you change this key to a permanent key after you install and configure the appliance. See the NetBackup Appliance Administrator's Guide for information and instructions on how to view and change a license key.

Replace the NFR keys with permanent keys before they expire.

More Information

About appliance system configuration sequence