Veritas Access Appliance 8.2 Administrator's Guide
- Section I. Introducing Access Appliance
- Section II. Configuring Access Appliance
- Managing users
- Managing licenses
- Configuring the network
- About configuring the Access Appliance network
- About bonding Ethernet interfaces
- Bonding Ethernet interfaces
- Considerations for configuration a LACP bond
- Configuring DNS settings
- About Ethernet interfaces
- Displaying current Ethernet interfaces and states
- Configuring IP addresses
- Configuring IP addresses and FQDNs in a non-DNS environment
- Configuring VLAN interfaces
- Configuring NIC devices
- About configuring routing tables
- Configuring routing tables
- Changing the firewall settings
- Configuring Access Appliance in IPv4 and IPv6 mixed mode
- Support for multiple data subnets
- Adding console FQDN to the network and accessing the GUI using the console FQDN
- Configuring authentication services
- About configuring LDAP settings
- Configuring LDAP server settings
- Administering the Access Appliance cluster's LDAP client
- About Active Directory (AD)
- Configuring AD server settings
- Configuring entries for Access Appliance DNS for authenticating to Active Directory (AD)
- Configuring AD/LDAP using the GUI
- Configuring NSS lookup order
- Sign-in options for the Access Appliance UI
- Configuring user authentication using digital certificates or smart cards
- Section III. Managing Access Appliance storage
- Configuring storage
- About storage provisioning and management
- About configuring disks
- About configuring storage pools
- Configuring storage pools
- About quotas for usage
- Enabling, disabling, and displaying the status of file system quotas
- Setting and displaying file system quotas
- Setting user quotas for users of specified groups
- About quotas for CIFS home directories
- Workflow for configuring and managing storage using the Access Appliance CLI
- Displaying information for all disk devices associated with the nodes in a cluster
- Displaying WWN information
- Importing new LUNs forcefully for new or existing pools
- Initiating host discovery of LUNs
- Managing disks
- Access Appliance as an iSCSI target
- Configuring storage
- Section IV. Managing Access Appliance file access services
- Configuring the NFS server
- About using the NFS server with Access Appliance
- Using the kernel-based NFS server
- Accessing the NFS server
- Displaying and resetting NFS statistics
- Configuring Access Appliance for ID mapping for NFS version 4
- Configuring the NFS client for ID mapping for NFS version 4
- About authenticating NFS clients
- Setting up Kerberos authentication for NFS clients
- Using Access Appliance as a CIFS server
- About configuring Access Appliance for CIFS
- About configuring CIFS for Active Directory (AD) domain mode
- Adding an SPN entry on the Windows client
- About setting trusted domains
- About storing account information
- Storing user and group accounts
- Reconfiguring the CIFS service
- About mapping user names for CIFS/NFS sharing
- About the mapuser commands
- Adding, removing, or displaying the mapping between CIFS and NFS users
- Automatically mapping UNIX users from LDAP to Windows users
- About managing home directories
- About CIFS clustering modes
- About migrating CIFS shares and home directories
- Setting the CIFS aio_fork option
- Enabling CIFS data migration
- Using Access Appliance as an Object Store server
- About the Object Store server
- Use cases for configuring the Object Store server
- Configuring the Object Store server
- About buckets and objects
- File systems used for objectstore buckets
- Enabling WORM on buckets
- Object Access SSL certificate
- Object Access endpoints
- S3 with NFS use case
- S3 with NSP use case
- Configuring the S3 server using GUI
- Configuring the NFS server
- Section V. Managing Access Appliance security
- Managing security
- Setting up FIPS mode
- Configuring STIG
- Setting the banner
- Setting the password policy
- Immutability in Access Appliance
- Deploying certificates on Access Appliance
- Single Sign-On (SSO)
- Configuring multifactor authentication
- About multifactor authentication
- Considerations when configuring multifactor authentication
- Configuring multifactor authentication for your user account
- Disabling multifactor authentication for your user account
- Enforcing multifactor authentication for all users
- Configuring multifactor authentication for your user account when it is enforced in the cluster
- Resetting multifactor authentication for a user
- Section VI. Monitoring and troubleshooting
- Monitoring the appliance
- Configuring event notifications and audit logs
- About troubleshooting
- Monitoring command activity
- Monitoring alerts
- About alert management
- Monitoring events
- Viewing reports
- Viewing cluster storage usage
- Viewing file system usage
- About event notifications
- About severity levels and filters
- About SNMP notifications
- Configuring a syslog server
- Displaying events on the console
- Appliance log files
- Section VII. Provisioning and managing Access Appliance file systems
- Creating and maintaining file systems
- About creating and maintaining file systems
- About encryption at rest
- Considerations for creating a file system
- Best practices for creating file systems
- Choosing a file system layout type
- Determining the initial extent size for a file system
- About striping file systems
- About FastResync
- About fsck operation
- Enabling WORM on a file system
- Setting retention in files
- Setting WORM over NFS
- Manually setting WORM-retention on a file over CIFS
- About managing application I/O workloads using maximum IOPS settings
- Creating a file system
- Bringing the file system online or offline
- Listing all file systems and associated information
- Modifying a file system
- Managing a file system
- Destroying a file system
- Upgrading disk layout versions
- Creating and maintaining file systems
- Section VIII. Provisioning and managing Access Appliance shares
- Creating shares for applications
- Creating and maintaining NFS shares
- About NFS file sharing
- About the NFS shares
- Displaying file systems and snapshots that can be exported
- Exporting an NFS share
- Displaying exported directories
- About managing NFS shares using netgroups
- Unexporting a directory or deleting NFS options
- Exporting an NFS share for Kerberos authentication
- Mounting an NFS share with Kerberos security from the NFS client
- Exporting an NFS snapshot
- Creating and maintaining CIFS shares
- About managing CIFS shares
- About the CIFS shares
- Exporting a directory as a CIFS share
- Configuring a CIFS share as secondary storage for an Enterprise Vault store
- Exporting the same file system/directory as a different CIFS share
- About the CIFS export options
- Setting share properties
- Displaying CIFS share properties
- Hiding system files when adding a CIFS normal share
- Allowing specified users and groups access to the CIFS share
- Denying specified users and groups access to the CIFS share
- Exporting a CIFS snapshot
- Deleting a CIFS share
- Modifying a CIFS share
- Making a CIFS share shadow copy aware
- About managing CIFS shares for Enterprise Vault
- Integrating Access Appliance with Data Insight
- Section IX. Managing Access Appliance storage services
- Configuring episodic replication
- About Access Appliance episodic replication
- How Access Appliance Replication works
- Starting Access Appliance episodic replication
- Setting up communication between the source and the destination clusters
- Setting up the file systems to replicate
- Setting up files to exclude from an episodic replication unit
- Scheduling the episodic replication
- Defining what to replicate
- About the maximum number of parallel episodic replication jobs
- Managing an episodic replication job
- Replicating compressed data
- Displaying episodic replication job information and status
- Synchronizing an episodic replication job
- Behavior of the file systems on the episodic replication destination target
- Accessing file systems configured as episodic replication destinations
- Configuring an episodic replication job using the GUI
- Episodic replication job failover and failback
- Configuring continuous replication
- About Access Appliance continuous replication
- How Access Appliance continuous replication works
- Starting Access Appliance continuous replication
- Setting up communication between the source and the destination clusters
- Setting up the file system to replicate
- Managing continuous replication
- Displaying continuous replication information and status
- Unconfiguring continuous replication
- Preserving the file system on the destination cluster
- Cloud tiering with continuous replication
- Configuring Enterprise Vault with continuous replication
- Configuring a continuous replication job using the GUI
- Continuous replication failover and failback
- Addition of multiple file systems to a Replicated Volume Group
- Using snapshots
- Using instant rollbacks
- About instant rollbacks
- Creating a space-optimized rollback
- Creating a full-sized rollback
- Listing Access Appliance instant rollbacks
- Restoring a file system from an instant rollback
- Refreshing an instant rollback from a file system
- Bringing an instant rollback online
- Taking an instant rollback offline
- Destroying an instant rollback
- Creating a shared cache object for Access Appliance instant rollbacks
- Listing cache objects
- Destroying a cache object of a Access Appliance instant rollback
- Configuring episodic replication
- Section X. Reference
- Index
Managing an episodic replication job
You can manage an episodic replication job using the replication episodic job commands. The commands are required only on the source system.
The replication episodic job enable, replication episodic job sync, replication episodic job disable, replication episodic job abort, replication episodic job pause, and replication episodic job resume commands change the status of an existing episodic replication job.
You can use the replication episodic job modify, and replication episodic job destroy commands to modify or destroy an episodic replication job definition.
The replication episodic job enable command starts episodic replication immediately and initiates episodic replication after every subsequent set frequency interval. When an episodic replication job is created it is disabled by default, and you must enable the job to start episodic replication.
To enable an episodic replication job
- To enable an episodic replication job, type the following command:
Replication> episodic job enable job_name
job_name
Specify the name of the episodic replication job you want to enable.
At each frequency interval, a fresh file system Storage Checkpoint is taken and episodic replication is started against the new Storage Checkpoint. If a previous episodic replication run has not completed, a new Storage Checkpoint is not taken and the current run is skipped.
Note:
Running the replication episodic job enable command on a previously aborted episodic replication job automatically restarts the job.
The Replication episodic job sync command lets you start an episodic replication job, but then stops the episodic replication job after one iteration (full or incremental) is complete. You can use this command to recover from the secondary site in the event that the primary file system is completely destroyed. This command can also be used if you want to run an episodic replication job at a predefined time using a script or a cron job.
See Synchronizing an episodic replication job .
The Replication> episodic job disable command drops the episodic replication job from the schedule and waits for any already running iterations to complete. The Replication> episodic job disable command disables a job definition which is in one of these states: ENABLED, PAUSED, or FAILED. This process can take some time if the network is slow or if a large amount of data has changed since the last episodic replication run.
To disable an episodic replication job
- To disable an episodic replication job, type the following command:
Replication> episodic job disable job_name
job_name
Specify the name of the episodic replication job you want to stop.
Note:
If episodic replication has been configured on a WORM-enabled file system, the replication episodic job disable command is restricted unless all the user data on the file system is deleted.
The replication episodic job abort command forcefully cancels an episodic replication job even if it is in progress. Aborting an episodic replication job may leave Storage Checkpoints mounted on the source system and the target file system may be left in an intermediate state.
To abort an episodic replication job
- To abort an episodic replication job, type the following command:
Replication> episodic job abort job_name
job_name
Specify the name of the episodic replication job you want to abort.
Note:
If episodic replication has been configured on a WORM-enabled file system, the replication episodic job abort command is restricted unless all the user data on the file system is deleted.
The Replication> episodic job pause command immediately stops the episodic replication job. You must use the Replication> episodic job resume command to resume the episodic replication job from where it was paused. When episodic replication is resumed, the episodic replication job replicates the set of selected files before pausing the job, and attempts to replicate as much of the latest data as possible. This action allows the customer to have two recovery point objectives (RPO). When the episodic replication job is paused, the episodic replication frequency option is disabled. Once the episodic replication job is resumed, the frequency option resumes for subsequent iterations. The pause and the resume functions let you manage the episodic replication job based on workload requirements.
To pause and resume an episodic replication job
- To pause an episodic replication job, type the following command:
Replication> episodic job pause job_name
Where job_name is the name of the episodic replication job you want to pause.
- To resume an episodic replication job, type the following command:
Replication> episodic job resume job_name
Where job_name is the name of the episodic replication job you want to resume.
Note:
You cannot start or sync a paused job. You can abort a paused job. However, if synchronization is performed on a paused job that has been aborted, the last RPO for the paused job is not available.
The replication episodic job modify command lets you modify debugging or setting tunables on an episodic replication job definition.
The addition or removal of a file system from the source episodic replication unit or the destination episodic replication unit is not supported. To remove a specific file system from the episodic replication unit you must destroy the episodic replication job and recreate the episodic replication job with the new set of file systems in the episodic replication unit. To add a specific file system from an existing episodic replication unit, you can either create a new episodic replication job with a new source episodic replication unit and target episodic replication unit, or destroy the episodic replication job and recreate it with the new set of file systems in the episodic replication unit to use the same job name.
The replication episodic job modify debug command lets you enable or disable debugging on a given job.
To modify debugging on an episodic replication job
- To modify debugging on an episodic replication job definition, enter the following command:
Replication> episodic job modify debug job_name on|off
job_name
Specify the episodic replication job name you want to modify.
The replication episodic job modify tunables command lets you modify the job configuration to use multiple network connections (sockets) for replicating data from source to target. In configurations where WAN latency is high, it is recommended to use multiple connections for significantly increased throughput. After the tunables are set for a job, only one job is supported.
To modify tunables on an episodic replication job
- To modify tunables on an episodic replication job definition, enter the following command:
Replication> episodic job modify tunables job_name netconn rw_count
job_name
Specify the episodic replication job name you want to modify.
netconn
Specify the number of connections.
rw_count
Specify the number of threads.
The increased number of connections is effective in case of a relatively small number of large files. For large number of small files, full sync performance may be slower with increased number of connections.
The replication episodic job destroy command destroys a job definition. This command completely removes the specified job from the configuration, cleans up any saved job-related statistics, and removes any Storage Checkpoints. The episodic replication job must be disabled before the job definition can be destroyed.
To destroy an episodic replication job definition
- To destroy a job definition, enter the following command:
Replication> episodic job destroy job_name
Where job_name is the name of the job definition you want to delete. Make sure that the job is not enabled.
Using the replication episodic job destroy command with the force option removes the local job irrespective of the job state, and all episodic replication units are disassociated from the job. Cluster configurations, which are part of the job, are not modified.
Note:
If episodic replication has been configured on a WORM-enabled file system, the replication episodic job destroy and replication episodic job destroy force commands are restricted unless all the user data on the file system is deleted.
Note:
When setting up episodic replication, Veritas does not advise you to make any modifications or deletions on the target side of the file system. In the event that some or all of the target data is modified or deleted, you must re-create the episodic replication job from the source cluster to resume episodic replication services.
To re-create an episodic replication job
- To re-create an episodic replication job, you must first delete the job definition. Enter the following command on the source cluster:
Replication> episodic job destroy job_name
Where job_name is the name of the job definition you want to delete. Make sure that the job is not enabled.
- Re-create the job definition:
Replication> episodic job create job_name src_repunit tgt_repunit link_name schedule_name [evpsn] [metadata_only] [ev_partition_path]
You can reuse the source episodic replication unit, target episodic replication unit, link, and schedule names.
To modify the existing replication IP
- To modify the existing virtual IP specified in an episodic replication job, enter the following command:
Replication> episodic config modifyip link_name src_ip_addr tgt_ip_addr [src_netmask] [tgt_netmask]
link_name
The name of the link.
src_ip_addr
The virtual IP of the source cluster.
tgt_ip_addr
The virtual IP of the destination cluster.
src_netmask
The netmask/prefix of the source replication IP address
tgt_netmask
The netmask/prefix of the destination replication IP address