Veritas NetBackup™ AdvancedDisk Storage Solutions Guide

103
Veritas NetBackup™ AdvancedDisk Storage Solutions Guide UNIX, Windows, Linux Release 8.0

Transcript of Veritas NetBackup™ AdvancedDisk Storage Solutions Guide

Veritas NetBackup™AdvancedDisk StorageSolutions Guide

UNIX, Windows, Linux

Release 8.0

Veritas NetBackup™ AdvancedDisk Storage SolutionsGuide

Last updated: 2016-11-15

Legal NoticeCopyright © 2016 Veritas Technologies LLC. All rights reserved.

Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas TechnologiesLLC or its affiliates in the U.S. and other countries. Other names may be trademarks of theirrespective owners.

This product may contain third party software for which Veritas is required to provide attributionto the third party (“Third Party Programs”). Some of the Third Party Programs are availableunder open source or free software licenses. The License Agreement accompanying theSoftware does not alter any rights or obligations you may have under those open source orfree software licenses. Refer to the third party legal notices document accompanying thisVeritas product or available at:

https://www.veritas.com/about/legal/license-agreements

The product described in this document is distributed under licenses restricting its use, copying,distribution, and decompilation/reverse engineering. No part of this document may bereproduced in any form by any means without prior written authorization of Veritas TechnologiesLLC and its licensors, if any.

THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIEDCONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIEDWARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE ORNON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCHDISCLAIMERS ARE HELD TO BE LEGALLY INVALID. VERITAS TECHNOLOGIES LLCSHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES INCONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THISDOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION ISSUBJECT TO CHANGE WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be commercial computer softwareas defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq."Commercial Computer Software and Commercial Computer Software Documentation," asapplicable, and any successor regulations, whether delivered by Veritas as on premises orhosted services. Any use, modification, reproduction release, performance, display or disclosureof the Licensed Software and Documentation by the U.S. Government shall be solely inaccordance with the terms of this Agreement.

Veritas Technologies LLC500 E Middlefield RoadMountain View, CA 94043

http://www.veritas.com

.

Technical SupportTechnical Support maintains support centers globally. All support services will be deliveredin accordance with your support agreement and the then-current enterprise technical supportpolicies. For information about our support offerings and how to contact Technical Support,visit our website:

https://www.veritas.com/support

You can manage your Veritas account information at the following URL:

https://my.veritas.com

If you have questions regarding an existing support agreement, please email the supportagreement administration team for your region as follows:

[email protected] (except Japan)

[email protected]

DocumentationThe latest documentation is available on the Veritas website:

https://sort.veritas.com/documents

Documentation feedbackYour feedback is important to us. Suggest improvements or report errors or omissions to thedocumentation. Include the document title, document version, chapter title, and section titleof the text on which you are reporting. Send feedback to:

[email protected]

You can also see documentation information or ask a question on the Veritas community site:

http://www.veritas.com/community/

Veritas Services and Operations Readiness Tools (SORT)Veritas Services and Operations Readiness Tools (SORT) is a website that provides informationand tools to automate and simplify certain time-consuming administrative tasks. Dependingon the product, SORT helps you prepare for installations and upgrades, identify risks in yourdatacenters, and improve operational efficiency. To see what services and tools SORT providesfor your product, see the data sheet:

https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf

Chapter 1 Introducing AdvancedDisk ............................................... 7

About the AdvancedDisk storage option .............................................. 7

Chapter 2 Licensing AdvancedDisk ................................................... 9

About the AdvancedDisk license ....................................................... 9Licensing AdvancedDisk ................................................................. 9

Chapter 3 Configuring AdvancedDisk ............................................. 11

Configuring the AdvancedDisk option ............................................... 12About AdvancedDisk file system requirements ................................... 13Configuring credentials for CIFS storage and disk storage units ............. 14About AdvancedDisk storage servers ............................................... 15About AdvancedDisk data movers ................................................... 16About AdvancedDisk preferred or required read servers ....................... 16About data encryption for AdvancedDisk storage ................................ 18About key management for encryption of NetBackup AdvancedDisk

storage ................................................................................. 19Configuring key management for NetBackup AdvancedDisk storage

encryption ............................................................................. 21Setting up the KMS database for NetBackup AdvancedDisk

storage encryption ............................................................ 21Creating a KMS key group for NetBackup AdvancedDisk storage

encryption ....................................................................... 23Creating a KMS key for NetBackup AdvancedDisk storage

encryption ....................................................................... 24Saving a record of the KMS key names for NetBackup

AdvancedDisk storage encryption ........................................ 25Configuring an AdvancedDisk storage server ..................................... 27

AdvancedDisk storage server configuration options ....................... 38About AdvancedDisk disk pools ....................................................... 39Configuring a CIFS disk volume for AdvancedDisk encryption ............... 41Configuring an AdvancedDisk disk pool ............................................ 42

NetBackup nbdevconfig command options for AdvancedDisk diskpools ............................................................................. 51

Contents

AdvancedDisk disk pool properties ............................................. 53Configuring an AdvancedDisk storage unit ......................................... 55

AdvancedDisk storage unit properties ......................................... 57About AdvancedDisk storage unit recommendations ...................... 58

About storage lifecycle policies ........................................................ 59Creating a storage lifecycle policy .................................................... 60

Storage Lifecycle Policy dialog box settings ................................. 62Creating a backup policy ................................................................ 65Resilient Network properties ........................................................... 66Specifying resilient connections ....................................................... 69

Chapter 4 Managing AdvancedDisk ................................................ 72

Managing AdvancedDisk storage servers .......................................... 72Viewing AdvancedDisk storage servers ....................................... 73Determining AdvancedDisk storage server state ........................... 73Viewing AdvancedDisk storage server attributes ........................... 73Removing AdvancedDisk storage server attributes ........................ 74Removing an AdvancedDisk storage server from disk pool access

..................................................................................... 75Deleting an AdvancedDisk storage server ................................... 75

Managing AdvancedDisk disk pools ................................................. 76Viewing AdvancedDisk disk pools .............................................. 76About changing the AdvancedDisk disk pool size .......................... 76Adding volumes to an AdvancedDisk disk pool ............................. 77Changing AdvancedDisk disk pool properties ............................... 77Determining AdvancedDisk disk pool state .................................. 79Changing AdvancedDisk disk pool state ...................................... 79Determining AdvancedDisk disk volume state .............................. 79Changing AdvancedDisk disk volume state .................................. 80Merging AdvancedDisk disk pools ............................................. 81Removing a volume from an AdvancedDisk disk pool .................... 81Inventorying a NetBackup disk pool ............................................ 82Deleting an AdvancedDisk disk pool ........................................... 83

About monitoring AdvancedDisk storage capacity and usage ................ 83Monitoring NetBackup disk activity ................................................... 84Viewing AdvancedDisk disk reports .................................................. 85Displaying detailed AdvancedDisk storage usage information ................ 86

NetBackup disk volume capacity and usage reference ................... 87Displaying KMS key information for AdvancedDisk encryption ............... 89

5Contents

Chapter 5 Toubleshooting AdvancedDisk ...................................... 92

About unified logging ..................................................................... 92About using the vxlogview command to view unified logs ................ 93Examples of using vxlogview to view unified logs .......................... 94

About legacy logging ..................................................................... 95Creating NetBackup log file directories for AdvancedDisk ............... 97

NetBackup AdvancedDisk log files ................................................... 97AdvancedDisk troubleshooting ........................................................ 99Resolving an incorrect storage type problem .................................... 100

Index .................................................................................................................. 102

6Contents

Introducing AdvancedDiskThis chapter includes the following topics:

■ About the AdvancedDisk storage option

About the AdvancedDisk storage optionThe NetBackup AdvancedDisk storage option lets you use the disk storage that isexposed to NetBackup as a file system for backups. Storage can be direct attachedstorage (DAS), network attached storage (NAS), or storage area network (SAN)storage.

NetBackup requires exclusive access to the storage for capacity management andload balancing.

Table 1-1 describes some of the benefits of AdvancedDisk storage.

Table 1-1 AdvancedDisk features and benefits

BenefitFeature

NetBackup discovers the storage and uses NetBackupstorage units and backup policies to use the storage.

Easy to deploy and use

Lets you increase storage unit capacity by adding disks. Onlyadd the capacity required, then update the NetBackup diskpools. Logical units of storage span physical boundaries, soyou do not have to create new NetBackup storage units orchange the backup policies.

Simplified growth

Multiple storage units can share a disk pool. Space isallocated dynamically as required. Automatic space allocationreduces the risk of backup failure.

Storage sharing

1Chapter

Table 1-1 AdvancedDisk features and benefits (continued)

BenefitFeature

NetBackup predicts the size of the backup and selects thestorage on which the backup fits best. The goal is to avoidout-of-space conditions and disk spanning.

Best fit selection

Load balancing can occur at two levels, as follows:

■ Storage servers. If you have more than one storageserver, NetBackup chooses the least busy media serverfor each backup. Load balancing increases theperformance and the success of backup jobs.

■ Storage unit groups. If you have more than one storageunit, you can choose the storage unit group LoadBalanceoption. If the destination of each storage unit is a separatedisk pool, NetBackup chooses the least busy disk pool.

Load balancing

NetBackup expires backup images when the storage that isconsumed reaches a threshold. The disk pool high watermark applies to both individual disk volumes and to disk pools.

Intelligent capacitymanagement

You can classify data based on its importance and manageit differently throughout each stage of its life. After it has beenduplicated, data can be selectively expired based on therelative importance to the business. you can ensure thatimportant backups are available for rapid restore for longerperiods, ensuring your recovery time objectives.

Storage lifecycle

Figure 1-1 shows a media server and attached disks.

Figure 1-1 AdvancedDisk storage example

Disk volumes Network file systemmounts

NetBackup media servers function asboth storage servers and data movers

AdvDiskPool_Gold AdvDiskPool_Silver

8Introducing AdvancedDiskAbout the AdvancedDisk storage option

Licensing AdvancedDiskThis chapter includes the following topics:

■ About the AdvancedDisk license

■ Licensing AdvancedDisk

About the AdvancedDisk licenseAdvancedDisk is a feature that is licensed separately from base NetBackup.

See “Licensing AdvancedDisk” on page 9.

If you remove the license key or if it expires, the following restrictions apply:

■ You cannot create the disk pools or the storage units that referenceAdvancedDisk disk pools.

■ NetBackup jobs that attempt to use the disk pools or the storage units that arebased on disk pools fail. The error message indicates that the feature is notlicensed.

NetBackup does not delete the disk pools or the storage units that reference thedisk pools. You can use them again if you enter a valid license.

Licensing AdvancedDiskNo special installation is required for the NetBackup components of AdvancedDisk.However, you must enter a license. If you installed the license when you installedor upgraded NetBackup, you do not need to perform this procedure.

Enter the license on the NetBackup master server. The following proceduredescribes how to use theNetBackup Administration Console to enter the license.

2Chapter

To license AdvancedDisk

1 On the Help menu of the NetBackup Administration Console on theNetBackup master server, select License Keys.

2 In the NetBackup License Keys dialog box, click New.

3 In the Add a New License Key dialog box, enter the license key and click Addor OK.

4 In the NetBackup License Key dialog box, click Close.

5 Restart all the NetBackup services and daemons.

10Licensing AdvancedDiskLicensing AdvancedDisk

Configuring AdvancedDiskThis chapter includes the following topics:

■ Configuring the AdvancedDisk option

■ About AdvancedDisk file system requirements

■ Configuring credentials for CIFS storage and disk storage units

■ About AdvancedDisk storage servers

■ About AdvancedDisk data movers

■ About AdvancedDisk preferred or required read servers

■ About data encryption for AdvancedDisk storage

■ About key management for encryption of NetBackup AdvancedDisk storage

■ Configuring key management for NetBackup AdvancedDisk storage encryption

■ Configuring an AdvancedDisk storage server

■ About AdvancedDisk disk pools

■ Configuring a CIFS disk volume for AdvancedDisk encryption

■ Configuring an AdvancedDisk disk pool

■ Configuring an AdvancedDisk storage unit

■ About storage lifecycle policies

■ Creating a storage lifecycle policy

■ Creating a backup policy

■ Resilient Network properties

3Chapter

■ Specifying resilient connections

Configuring the AdvancedDisk optionThis section provides an overview of how to configure the NetBackup AdvancedDiskoption.

Table 3-1 describes the configuration tasks.

To configure a base NetBackup environment, see the NetBackup Administrator'sGuide, Volume I:

http://www.veritas.com/docs/DOC5332

Table 3-1 AdvancedDisk configuration tasks

SectionTaskStep

See “About AdvancedDisk file systemrequirements” on page 13.

Learn about file systemrequirements

Step 1

See “About AdvancedDisk storage servers”on page 15.

See “About AdvancedDisk data movers”on page 16.

See “About AdvancedDisk disk pools” on page 39.

Learn about storage servers,data movers, and disk pools

Step 2

The Key Management Service is required if youuse data encryption for the AdvancedDisk storage.

See “About data encryption for AdvancedDiskstorage” on page 18.

See “About key management for encryption ofNetBackup AdvancedDisk storage” on page 19.

See “Configuring key management for NetBackupAdvancedDisk storage encryption” on page 21.

Optionally, configure the KeyManagement Service

Step 3

See “Configuring an AdvancedDisk storage server”on page 27.

Configure a storage serverStep 4

For theAdvancedDisk_crypt disk type, you mustconfigure CIFS volumes before you can add themto the disk pool.

See “Configuring a CIFS disk volume forAdvancedDisk encryption” on page 41.

Optionally, configure CIFSdisk volumes

Step 5

12Configuring AdvancedDiskConfiguring the AdvancedDisk option

Table 3-1 AdvancedDisk configuration tasks (continued)

SectionTaskStep

See “Configuring an AdvancedDisk disk pool”on page 42.

Configure a disk poolStep 6

See “Configuring an AdvancedDisk storage unit”on page 55.

Configure a storage unitStep 7

See “About storage lifecycle policies” on page 59.

See “Creating a storage lifecycle policy”on page 60.

Create a storage lifecyclepolicy

Step 8

See “Creating a backup policy” on page 65.Create a backup policyStep 9

See “Resilient Network properties” on page 66.Optionally, configure resilientnetwork connections

Step 10

About AdvancedDisk file system requirementsAdvancedDisk can read and write any nonshared file system that NetBackupsupports. However, AdvancedDisk is subject to any operating system or file systemrequirements or limitations. Requirements and limitations may exist beyond thosementioned in this topic.

For supported file systems, see the NetBackup operating system compatibility listat the Veritas Support website, as follows:

http://www.netbackup.com/compatibility

The following are additional requirements and limitations for file systems:

Windows Common Internet File System (CIFS) requirements:

■ Ensure that the Windows disk shares are configured to reconnect on login.■ Networked mapped devices are not visible to Windows services; therefore,

NetBackup cannot discover CIFS disk volumes. You must use the WindowsUniversal Naming Convention (UNC) to specify the CIFS volumes that youwant to use for AdvancedDisk disk pools.

■ You must configure two Windows services to use the same credentials.See “Configuring credentials for CIFS storage and disk storage units”on page 14.

■ You cannot delete a disk pool that is created by specifying volumes (such asfor CIFS volumes). The disk pool exists until you delete its storage server.

CIFS

13Configuring AdvancedDiskAbout AdvancedDisk file system requirements

Network File System (NFS) requirements:

■ You must use manual mount points. Automatic mount and unmount can changemount points, which may cause disk resources to be unavailable.

■ The NFS server that exports the mount points must be configured to allowroot access to the file systems.

■ NFS uses a file system paradigm to manage objects. Therefore, carefullychoose the volumes to include in the disk pool.For example, NetBackup does not filter out common file system mount points,such as / and /usr on UNIX and Linux systems. You should not use thosemount points for storage.

■ Veritas recommends that you do not span backup images across NFS volumesin an AdvancedDisk disk pool. File system full conditions cannot be detectedadequately. Therefore, a disk pool based on NFS volumes should be comprisedof only one volume.

NFS

Veritas recommends that you do not span backup images across ZFS volumesin an AdvancedDisk disk pool. File system full conditions cannot be detectedadequately. Therefore, a disk pool based on ZFS volumes should be comprisedof only one volume.

ZFS

Disk pool configuration may affect how you configure your file systems.

See “Configuring an AdvancedDisk disk pool” on page 42.

Configuring credentials for CIFS storage and diskstorage units

For Common Internet File System (CIFS) storage with AdvancedDisk and BasicDiskstorage units, the following two NetBackup services on Windows computers requirematching account credentials:

The NetBackup Client Service is either bpcd.exe orbpinetd.exe, depending on NetBackup release level.Regardless of the binary file name, the service requires thecredentials.

NetBackup Client Service

The NetBackup Remote Manager and Monitor Service binaryfile name is nbrmms.exe.

NetBackup Remote Managerand Monitor Service

The following items describe the requirements for the account and credentials:

■ Both of the services must run under the same Windows user account.

■ The account must be the same account that the Windows operating systemuses for read and write access to the CIFS share.

14Configuring AdvancedDiskConfiguring credentials for CIFS storage and disk storage units

■ Configure the account and the credentials on the media server or media serversthat have a file system mount on the CIFS storage. Then, configure Windowsso that the two aforementioned services use that account.

If account credentials are not configured properly, NetBackup marks all CIFSAdvancedDisk and BasicDisk storage units that use the UNC naming conventionas DOWN.

To configure service credentials for CIFS storage and disk storage units

◆ In Windows, configure both the NetBackup Client Service and the NetBackupRemote Manager and Monitor Service so they meet the credential requirements.Those requirements are described previously in this document.

See your Windows operating system documentation for the procedures. Howto configure Windows is beyond the scope of the NetBackup documentation.

About AdvancedDisk storage serversA storage server is a NetBackup media server that mounts the disk storage andwrites data to and reads data from the disk storage.

For AdvancedDisk, NetBackup media servers function as both storage servers anddata movers.

See “About AdvancedDisk data movers” on page 16.

Multiple storage servers can exist. The storage servers share the storage equally.

If you configure more than one storage server, be aware of the following:

■ Each media server must mount the file systems of all the disk volumes within adisk pool.

■ The mount points must be the same on each media server.NetBackup does not validate mount points, so you must ensure that the mountpoints are the same for each media server. You also must ensure that the mountpoints are valid.

■ To obtain a consolidated list of disk volumes, NetBackup queries every mediaserver. For large sets of servers, queries may affect performance.

■ Disk volume status is monitored on a single media server. Which server monitorsthe status can change. Therefore, a change in disk volume availability on onemedia server may not be reflected in the disk volume status NetBackup reports.

An AdvancedDisk storage server can have the attributes that can help you manageyour restore and your duplication traffic.

See “About AdvancedDisk preferred or required read servers” on page 16.

15Configuring AdvancedDiskAbout AdvancedDisk storage servers

Storage servers are either AdvancedDisk type or AdvancedDisk_crypt type.

See “About data encryption for AdvancedDisk storage” on page 18.

Whether or not you want to specify storage server attributes or use encryptiondetermines how you configure the storage servers.

See “Configuring an AdvancedDisk storage server” on page 27.

About AdvancedDisk data moversA data mover transfers data from primary storage (a NetBackup client) to secondarystorage during backups. It also can move data back to primary storage duringrestores and from secondary storage to tertiary storage during duplication.

You do not configure data movers separately. For AdvancedDisk, NetBackup mediaservers function as both storage servers and data movers. Data movers areconfigured when you configure storage servers.

About AdvancedDisk preferred or required readservers

When you configure a storage server, you can specify that you want it to be preferredor required for restore jobs. You also can specify whether a server should be requiredfor the read side of duplication jobs. These attributes can help manage the restoreand the duplication traffic.

The following are the requirements to configure encryption:

■ You must use the nbdevconfig command to configure the storage servers andthe disk pools.

■ You must use the -setattribute option when you configure the storage serversand the disk pools.Table 3-2 describes the possible arguments for the -setattribute option.

See “Configuring an AdvancedDisk storage server” on page 27.

16Configuring AdvancedDiskAbout AdvancedDisk data movers

Table 3-2 Preferred or required read server descriptions

DescriptionArgument

The server is preferred for the read side of restore operations. You canconfigure more than one server as preferred for restore.

If you configure preferred for restore but not required for restore,NetBackup considers preferred storage servers for jobs first. If none areavailable, NetBackup considers any configured storage server.

Normal NetBackup load balancing occurs among all storage serversmarked PrefRestore.

PrefRestore

The server is required for the read side of restore operations. You canconfigure more than one server as required for restore.

If you configure required servers for restore but not preferred servers,jobs queue until a required server is available to execute the job. Otherservers are never considered for restore jobs. Normal NetBackup rulesfor job retry apply.

If you configure both preferred and required storage servers and a requiredserver is not available, NetBackup considers preferred servers for jobs.If none are available, jobs queue until a required or preferred server isavailable. Other servers are never considered for restore jobs.

Normal NetBackup load balancing occurs for all required servers. Loadbalancing does not occur between the required and preferred servers.

ReqRestore

The server is required for the read side of duplication operations. Youcan configure more than one server as required for duplication.

If any server is configured as required for duplication, NetBackup considersonly required for duplication servers for jobs. If a required server isunavailable, jobs queue until a required server is available to execute thejob. Normal NetBackup rules for job retry apply.

Required for duplication also applies to storage server allocation forsynthetic backup operations.

ReqDuplicate

Only the media servers that are configured in the storage unit are considered forjobs. Therefore, if you configure a subset of the disk pool media servers in a storageunit, NetBackup selects from those servers only.

If you use the preferred or required restore or duplication attributes for a storageserver, the following may occur:

■ A restore operation uses a storage server that does not have a PrefRestore

or ReqRestore attribute. Reasons may be as follows:

17Configuring AdvancedDiskAbout AdvancedDisk preferred or required read servers

■ The destination disk pool does not include a storage server with a restoreor a duplication attribute.

■ A preferred or required storage server cannot be used because it isunavailable (NetBackup considers it DOWN).

■ A restore or a duplication operation is queued.The reason may be that a preferred or required storage server cannot be usedbecause it is unavailable (NetBackup considers it DOWN).

If you do not configure preferred or required restore servers, NetBackup uses normalcriteria to select a media server for restore or duplication. (That is, if you configuremore than one storage server.)

Information about how NetBackup balances storage unit and media server load isavailable.

See “Maximum concurrent jobs” in the NetBackup Administrator’s Guide, VolumeI:

http://www.veritas.com/docs/DOC5332

You can use preferred or required restore servers rather than the Media hostoverride host property.

Information about the Media host override property is available.

See “General Server properties” in the NetBackup Administrator’s Guide, VolumeI:

http://www.veritas.com/docs/DOC5332

About data encryption for AdvancedDisk storageYou can encrypt your data on the storage that you use for AdvancedDisk. Thefollowing are the requirements to configure encryption:

■ You must configure the NetBackup Key Management Service so that NetBackupcan manage the encryption keys. NetBackup uses KMS to manage encryptionkeys. You must use NetBackup commands to configure both the KeyManagement Service and the AdvancedDisk storage server.See “About key management for encryption of NetBackup AdvancedDisk storage”on page 19.

■ You must use the nbdevconfig command to configure the storage servers andthe disk pools.

■ You must use the AdvancedDisk_crypt type when you configure the storageservers and the disk pools.

18Configuring AdvancedDiskAbout data encryption for AdvancedDisk storage

After you configure KMS andAdvancedDisk_crypt storage servers and disk pools,NetBackup uses encryption for backup jobs to those disk pools.

Note:NetBackup does not span volumes for theAdvancedDisk_crypt type of diskpool.

See “About AdvancedDisk disk pools” on page 39.

AdvancedDisk encryption is supported on a subset of operating systems thatNetBackup supports. For supported systems, see the NetBackup compatibility listson the NetBackup support landing page.

http://www.netbackup.com/compatibility

More information about data-at-rest encryption and security is available.

See the NetBackup Security and Encryption Guide:

http://www.veritas.com/docs/DOC5332

About key management for encryption ofNetBackup AdvancedDisk storage

NetBackup uses the Key Management Service (KMS) to manage the keys for thedata encryption for disk storage. KMS is a NetBackup master server-basedsymmetric key management service. The service runs on the NetBackup masterserver. An additional license is not required to use the KMS functionality.

NetBackup uses KMS to manage the encryption keys for AdvancedDisk storage.

See “About data encryption for AdvancedDisk storage” on page 18.

The following table describes the encryption keys that are required for the KMSdatabase.

Table 3-3 Encryption keys required for the KMS database

DescriptionKey

The Host Master Key protects the key database. The Host MasterKey requires a pass phrase and an ID. KMS uses the pass phraseto generate the key.

Host Master Key

A Key Protection Key protects individual records in the keydatabase. The Key Protection Key requires a pass phrase and anID. KMS uses the pass phrase to generate the key.

Key Protection Key

19Configuring AdvancedDiskAbout key management for encryption of NetBackup AdvancedDisk storage

The following table describes the encryption keys that are required for each storageserver and volume combination.

Table 3-4 Encryption keys required for each storage server and volumecombination

DescriptionKey

A key group key protects the key group. Each storage server and volume combination requiresa key group, and each key group key requires a pass phrase. The key group name must use theformat for the storage type that is described as follows:

For AdvancedDisk storage, the format depends on the operating system type that hosts thestorage, as follows:

■ UNIX storage: storage_server_name:volume_name

The following items describe the requirements for the key group name components forAdvancedDisk storage on UNIX:■ storage_server_name: You must use the same name that you use for the storage

server. The name can be a fully-qualified domain name or a short name, but it must bethe same as the storage server.

■ The colon (:) is required after the storage_server_name.■ volume_name: Use the last directory name in the storage path for the volume_name.

For example, use backups if the storage path is /mnt/disk/backups.■ Windows storage: storage_server_name:

The following items describe the requirements for the key group name components forAdvancedDisk storage on Windows:■ storage_server_name: You must use the same name that you use for the storage

server. The name can be a fully-qualified domain name or a short name, but it must bethe same as the storage server.

■ The colon (:) is required after the storage_server_name.

A key group

Each key group that you create requires a key record. A key record stores the actual key thatprotects the data for the storage server and volume.

A key record

See “Configuring key management for NetBackup AdvancedDisk storage encryption”on page 21.

More information about KMS is available in the NetBackup Security and EncryptionGuide:

http://www.veritas.com/docs/DOC5332

20Configuring AdvancedDiskAbout key management for encryption of NetBackup AdvancedDisk storage

Configuring key management for NetBackupAdvancedDisk storage encryption

For AdvancedDisk storage, encryption is optional. If you do not use encryption, youdo not have to configure key management. To use encryption, you must firstconfigure key management by using NetBackup commands. See Table 3-5.

Table 3-5 Configure key management by using NetBackup commands

InstructionsTaskStep

See “About key management for encryption ofNetBackup AdvancedDisk storage” on page 19.

Learn about NetBackup keymanagement

Step 1

See “Setting up the KMS database for NetBackupAdvancedDisk storage encryption” on page 21.

Set up the KMS databaseStep 2

Each storage server and volume combinationrequires a key group.

See “Creating a KMS key group for NetBackupAdvancedDisk storage encryption” on page 23.

Create the key groupsStep 3

Each key group requires a key record. The keyrecord contains the encryption key.

See “Creating a KMS key for NetBackupAdvancedDisk storage encryption” on page 24.

Create the key recordsStep 4

The record of the key names lets you recreate thekeys if they are lost.

See “Saving a record of the KMS key names forNetBackup AdvancedDisk storage encryption”on page 25.

Save a record of the keynames

Step 5

Setting up the KMS database for NetBackup AdvancedDisk storageencryption

Setting up the KMS database is the first task in the process of configuring theNetBackup Key Management Service by using NetBackup commands.

See “Configuring key management for NetBackup AdvancedDisk storage encryption”on page 21.

21Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

To set up the KMS database

1 On the NetBackup master server, create the KMS database by running thenbkms command with the -createemptydb option, as follows:

UNIX: /usr/openv/netbackup/bin/nbkms -createemptydb

Windows: install_path\Veritas\NetBackup\bin\nbkms.exe-createemptydb

The following prompt appears:

Enter the Host Master Key (HMK) passphrase (or hit ENTER to use a

randomly generated HMK). The passphrase will not be displayed on

the screen.

Enter passphrase :

2 Enter a pass phrase for the host master key (HMK) or press Enter to create arandomly generated key.

After you enter the Host Master Key pass phrase, the following prompt appears:

An ID will be associated with the Host Master Key (HMK) just

created. The ID will assist you in determining the HMK associated

with any key store.

Enter HMK ID :

3 Enter an ID for the HMK. This ID can be anything descriptive that you want touse to identify the HMK.

After you enter the Host Master Key ID, the following prompt appears:

Enter the Key Protection Key (KPK) passphrase (or hit ENTER to

use a randomly generated KPK). The passphrase will not be

displayed on the screen.

Enter passphrase :

4 Enter a pass phrase for the Key Protection Key or press Enter to create arandomly generated key.

After you enter the Key Protection Key pass phrase, the following promptappears:

An ID will be associated with the Key Protection Key (KPK) just

created. The ID will assist you in determining the KPK associated

with any key store.

Enter KPK ID :

22Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

5 Enter an ID for the KPK. The ID can be anything descriptive that you want touse to identify the KPK.

6 Start the NetBackup Key Management Service on the master server. You cando so in the Activity Monitor of the NetBackup Administration Console.

After you start the service, the initial database setup is complete.

7 After you set up the database, create key groups for the volumes in the diskpool.

See “Creating a KMS key group for NetBackup AdvancedDisk storageencryption” on page 23.

Creating a KMS key group for NetBackup AdvancedDisk storageencryption

Creating a KMS key group is the second task in the process of configuring theNetBackup Key Management Service manually.

See “Configuring key management for NetBackup AdvancedDisk storage encryption”on page 21.

A key group is a container for key records. Each storage server and volumecombination requires a key group in the following format:

■ UNIX storage: storage_server_name:volume_name

■ Windows storage: storage_server_name:

To create a KMS key group

1 On the NetBackup master server, create a key group by using the nbkmsutil

command and the -createkg option. The format of the command depends onthe operating system of the host or hosts to which the storage is attached, asfollows:

Storage on UNIX:

/usr/openv/netbackup/bin/admincmd/nbkmsutil -createkg -kgname

storage_server_name:volume_name

Storage on Windows:

install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil -createkg

-kgname storage_server_name:

The following is the criteria for the key group name:

■ For the storage_server_name, you must use the same name that you usefor the storage server. The name can be a fully-qualified domain name ora short name, but it must be the same as the storage server.

23Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

■ The colon (:) is required after the storage_server_name.

■ For the volume_name on UNIX host storage, specify the name of the lastdirectory in the storage path. For example, use backups if the storage pathis /mnt/disk/backups.Storage hosted on windows servers does not require a volume_name.

2 After you create the key groups, create a key record for each group.

See “Creating a KMS key for NetBackup AdvancedDisk storage encryption”on page 24.

Creating a KMS key for NetBackup AdvancedDisk storage encryptionCreating a KMS key is the third and the final task in the process of configuring theNetBackup Key Management Service manually.

See “Configuring key management for NetBackup AdvancedDisk storage encryption”on page 21.

Each key group requires at least one key record. The key record contains theencryption key itself and information about the key. The key is used to encrypt anddecrypt data.

Note: If you create more than one key for a key group, only the last key remainsactive.

24Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

To create a KMS key

1 On the NetBackup master server, create a key record by using the nbkmsutil

command and the -createkey option.

UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -createkey

-keyname keyname -kgname key_group_name -activate

Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil-createkey -keyname keyname -kgname key_group_name -activate

Use the key group name that you configured when you created the key group.

See “Creating a KMS key group for NetBackup AdvancedDisk storageencryption” on page 23.

You are prompted to enter a pass phrase:

Enter a passphrase:

2 Enter and then re-enter a pass phrase; this pass phrase should differ from anypass phrases that you entered already.

3 Save a record of the pass phrase.

See “Saving a record of the KMS key names for NetBackup AdvancedDiskstorage encryption” on page 25.

Saving a record of the KMS key names for NetBackup AdvancedDiskstorage encryption

Veritas recommends that you save a record of the encryption key names and tags.The key tag is necessary if you need to recover or recreate the keys.

See “Configuring key management for NetBackup AdvancedDisk storage encryption”on page 21.

25Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

To save a record of the key names

1 To determine the key group names, use the following command on the masterserver:

UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkgs

Windows: install_path\ProgramFiles\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkgs

The following is example output:

Key Group Name : UX_Host.example.com:backups

Supported Cipher : AES_256

Number of Keys : 1

Has Active Key : Yes

Creation Time : Tues Oct 01 01:00:00 2013

Last Modification Time: Tues Oct 01 01:00:00 2013

Description : -

FIPS Approved Key : Yes

Key Group Name : Win_Host.example.com:

Supported Cipher : AES_256

Number of Keys : 1

Has Active Key : Yes

Creation Time : Tues Oct 01 01:05:00 2013

Last Modification Time: Tues Oct 01 01:05:00 2013

Description : -

FIPS Approved Key : Yes

26Configuring AdvancedDiskConfiguring key management for NetBackup AdvancedDisk storage encryption

2 For each key group, write all of the keys that belong to the group to a file. Runthe command on the master server. The following is the command syntax:

UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkeys -kgname

key_group_name > filename.txt

Windows: install_path\ProgramFiles\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkeys

-kgname key_group_name > filename.txt

The following is example output:

nbkmsutil.exe -listkeys -kgname UX_Host.example.com:backups >

encrypt_keys_UX_Host.example.com_backups.txt

Key Group Name : UX_Host.example.com:backups

Supported Cipher : AES_256

Number of Keys : 1

Has Active Key : Yes

Creation Time : Tues Oct 01 01:00:00 2013

Last Modification Time: Tues Oct 01 01:00:00 2013

Description : -

FIPS Approved Key : Yes

Key Tag : 867d710aa7f4c64dcdd2cec6...cce

d0c831c1812c510acd05

Key Name : AdvDisk_Key

Current State : ACTIVE

Creation Time : Tues Oct 01 01:05:00 2013

Last Modification Time: Tues Oct 01 01:05:00 2013

Description : -

FIPS Approved Key : Yes

Number of Keys: 1

3 Include in the file the pass phrase that you used to create the key record.

4 Store the file in a secure location.

Configuring an AdvancedDisk storage serverConfigure in this context means to configure as a storage server a NetBackup mediaserver that can mount the storage.

See “About AdvancedDisk storage servers” on page 15.

27Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

How you configure an AdvancedDisk storage server depends on several factors,as follows:

If you want to encrypt the storage, you must use the NetBackupnbdevconfig command.

For theAdvancedDisk_crypt type of storage server, you mustspecify the -st option with a value of 5.

See “About data encryption for AdvancedDisk storage”on page 18.

See “To configure an AdvancedDisk storage server by usingthe command line” on page 29.

Encrypted storage

If you want to specify preferred or required attributes for thestorage server, you must use the NetBackup nbdevconfigcommand.

See “About AdvancedDisk preferred or required read servers”on page 16.

See “To configure an AdvancedDisk storage server by usingthe command line” on page 29.

Storage server attributes

Veritas recommends that you use the Storage ServerConfiguration Wizard to configure the AdvancedDisk typeof storage server.

See “To configure an AdvancedDisk storage server by usingthe wizard” on page 29.

No encryption or attributes

You can configure multiple storage servers for the same storage. Doing so providesload balancing and redundancy in case of a storage server failure. The followingprocedures explain how to configure multiple storage servers.

When you configure an AdvancedDisk storage server, it also is configured as adata mover.

See “About AdvancedDisk data movers” on page 16.

28Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

To configure an AdvancedDisk storage server by using the command line

1 Run the following command on the NetBackup master server or the mediaserver:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevconfig -creatests

-storage_server hostname -stype server_type -st 5 -media_server

hostname [-setattribute attribute]

Windows: install_path\NetBackup\bin\admincmd\nbdevconfig -creatests

-storage_server hostname -stype server_type -st 5 -media_server

hostname [-setattribute attribute]

The arguments for the command options are in a different topic. The argumentsinclude those for encryption, for attributes, and so on.

See “AdvancedDisk storage server configuration options” on page 38.

2 To verify that the storage server was configured correctly, run the followingcommand:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevquery -liststs -u

Windows: install_path\NetBackup\bin\admincmd\nbdevquery -liststs

-u

The following is an excerpt of the command output that shows the properstorage type for AdvancedDisk (Formatted Disk, Direct Attached):

Storage Server : AdvDiskServer.example.com

Storage Server Type : AdvancedDisk_crypt

Storage Type : Formatted Disk, Direct Attached

State : UP

3 After the storage server is created, you can do the following.

■ To configure another storage server, go to step 1 and then repeat the stepsin this procedure.

■ If you have finished configuring storage servers, configure a disk pool.See “Configuring an AdvancedDisk disk pool” on page 42.

To configure an AdvancedDisk storage server by using the wizard

1 In the NetBackup Administration Console, select either NetBackupManagement or Media and Device Management.

2 In the right pane, click Configure Disk Storage Servers.

29Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

3 On the Welcome panel, the types of storage servers that you can configuredepend on the options for which you are licensed, as follows:

Select AdvancedDisk and then click Next. The behavior depends on whetheryou have separate media servers in your environment, as follows:

Storage Server Configuration Summary panelappears.

Go to step 5.

A master server but no mediaservers

The Add Storage Server panel appears.

Continue to step 4.

Media servers are installed

30Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

4 On the Add Storage Server panel, select the media server that you want toconfigure as an AdvancedDisk storage server from theMedia server drop-downlist. Then, click Next.

The following is an example of the wizard panel:

The Storage Server Configuration Summary panel appears.

31Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

5 On the Storage Server Configuration Summary panel, verify the selections.If OK, click Next to configure the storage server.

The following is an example of the wizard panel:

The Storage Server Configuration Status panel appears.

32Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

6 The Storage Server Configuration Status wizard panel describes the statusof the operation, as follows:

After the storage server is created, you can do the following:

Click Close and then repeat the steps in this procedure.

Configure another storage server if you want to configuremultiple AdvancedDisk storage servers for the storage thatis allocated for the disk pool. When you configure the finalstorage server, then continue and create the disk pool.

Configure anotherstorage server

Ensure that Create a disk pool using the storage serverthat you have just created is selected and then click Next.

Configure a disk pool if you have finished configuring thestorage servers that can access the disk pool.

Continue with the next step.

Configure a disk pool

33Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

7 The Volume Selection panel displays the volumes available on the storageserver. If you selected more than one storage server, volumes that are commonto all of them appear.

The following is an example of the wizard panel:

To specify a Common Internet File System (CIFS) disk volume, click Add NewVolume. In the Add New Volume dialog box, enter the Windows UniversalNaming Convention (UNC) pathname of the CIFS volume and then clickValidate and Add.

Select the volumes to use for the disk pool. NetBackup does not filter outcommon file system mount points, such as / and /usr. Therefore, carefullychoose the volumes to include in a disk pool.

34Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

See “About AdvancedDisk file system requirements” on page 13.

Click Next. The Additional Disk Pool Information wizard panel appears.

8 On the Additional Disk Pool Information panel, enter the values for the diskpool and then click Next.

See “AdvancedDisk disk pool properties” on page 53.

The following is an example of the wizard panel:

The Summary wizard panel appears after you click Next.

35Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

9 On the Summary panel, verify the selections. If OK, click Next.

The following is an example of the wizard panel:

The Status wizard panel appears after you click Next.

36Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

10 On the Status panel, monitor the progress of the operation.

The following is an example of the wizard panel:

After the disk pool is created, you can do the following:

Ensure that Create a storage unit using the disk pool thatyou have just created is selected and then click Next. TheStorage Unit Creation wizard panel appears. Continue to thenext step.

Configure a storageunit

Click Close.

You can configure one or more storage units later.

See “Configuring an AdvancedDisk disk pool” on page 42.

Exit

37Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

11 Enter the appropriate information for the storage unit.

The following is an example of the wizard panel:

See “AdvancedDisk storage unit properties” on page 57.

Click Next to create the storage unit.

12 After NetBackup configures the storage unit, the Finished panel appears. ClickFinish to exit from the wizard.

AdvancedDisk storage server configuration optionsThe following are the nbdevconfig command options that are used to configurestorage servers.

38Configuring AdvancedDiskConfiguring an AdvancedDisk storage server

Table 3-6 Options to configure AdvancedDisk storage server

DescriptionOption

The name of the NetBackup media server that has a file system mount on thestorage.

-storage_serverstorage_server

For AdvancedDisk with encryption, use AdvancedDisk_crypt, otherwise useAdvancedDisk.

Note: If you specify AdvancedDisk_crypt as the -stype, you must specify an-st value of 5 on the command line.

-stype server_type

A numeric value that specifies the storage server properties. For AdvancedDisk,the default value is 5 (direct attached, formatted disk).

Note: For an AdvancedDisk_crypt -stype, you must specify -st 5 on thecommand line.

-st storage_type

Use the same name as the storage server name.-media_server hostname

An attribute to apply to the storage server for the read side of restore or duplicationoperations. The following are the attributes:

■ PrefRestore. The storage server is preferred for the read side of restoreoperations. More than one storage server can have the PrefRestore attribute.

■ ReqRestore. The storage server is required for the read side of restoreoperations. More than one storage server can have the ReqRestore attribute.

■ ReqDuplicate. The storage server is required for the read side of duplicationoperations. More than one storage server can have the ReqDuplicateattribute.

See “About AdvancedDisk preferred or required read servers” on page 16.

-setattribute attribute

About AdvancedDisk disk poolsA disk pool represents disk volumes on the underlying disk storage. NetBackupaggregates the disk volumes into pools of storage you can use for backups. A diskpool is the storage destination of a NetBackup storage unit.

Disk pools are either AdvancedDisk type or AdvancedDisk_crypt type.

See “About data encryption for AdvancedDisk storage” on page 18.

For the AdvancedDisk_crypt disk type on CIFS storage, you must configure thedisk volumes before you configure the disk pool.

See “Configuring a CIFS disk volume for AdvancedDisk encryption” on page 41.

See “Configuring an AdvancedDisk disk pool” on page 42.

39Configuring AdvancedDiskAbout AdvancedDisk disk pools

Veritas recommends that disk pool and disk volume names be unique across yourenterprise.

The following are disk pool and volume considerations for AdvancedDisk storage:

If an AdvancedDisk disk pool is a storage destination in a storagelifecycle policy, NetBackup capacity management applies. If you sharethe volumes in an AdvancedDisk disk pool with other users, NetBackupcannot manage disk pool capacity or storage lifecycle policies correctly.

Capacitymanagement

NetBackup selects disk volumes based on available capacity andpredicted size of the backup. NetBackup tries to write backup data toa single volume.

Volume selection

If necessary, backup images span disk volumes in a disk pool.(Exception: NetBackup does not span volumes for theAdvancedDisk_crypt type of disk pool.) Backup images do not spanacross multiple disk pools.

To reduce disk spanning, each volume in a disk pool should be largerthan your largest backup. NetBackup then can store your largest backupon a single volume if that volume does not contain other backup images.

Note: Some file systems limitations can affect whether or notNetBackup can detect file system capacity accurately. On those filesystems, Veritas recommends that you do not span backup imagesacross volumes.

See “About AdvancedDisk file system requirements” on page 13.

Disk spanning

NetBackup assumes that all disk volumes within a disk pool are similarin size and performance characteristics. Although you can use dissimilardisk volumes in a disk pool, performance may be unpredictable.

If you have the disk volumes that have significantly differentcharacteristics, group them into multiple disk pools. Each of those diskpools should contain the volumes that have similar characteristics.

Disk size andperformance

NetBackup queues backup and restore jobs if insufficient resourcesare available.

To limit the possibility of write contention between backup jobs (andtherefore job queuing), ensure that a disk pool contains a sufficientnumber of volumes. The number of volumes should be equal to orgreater than: the total number of maximum concurrent jobs that areallowed in all of the storage units that use a disk pool.

Disk contention

The AdvancedDisk storage implementation presents mounted filesystems as disk volumes to NetBackup. Therefore, you can useAdvancedDisk disk pools with the volume managers that work at a levelcloser to the hardware than the file system.

Volume managers

40Configuring AdvancedDiskAbout AdvancedDisk disk pools

Configuring a CIFS disk volume for AdvancedDiskencryption

AdvancedDisk_crypt and CIFS only.

For theAdvancedDisk_crypt disk type, you must use the NetBackup nbdevconfig

command to specify each CIFS disk volume for the disk pool. You must also usethe UNC notation to specify the volumes (NetBackup cannot discover WindowsCommon Internet File System (CIFS) disk volumes).

See “About AdvancedDisk file system requirements” on page 13.

Veritas recommends that disk volume and disk pool names be unique across yourenterprise.

You must first configure storage servers.

See “Configuring an AdvancedDisk storage server” on page 27.

To configure an AdvancedDisk disk volume by using the command line

1 On the NetBackup master server, configure the volume by using the followingcommand:

nbdevconfig -createdv -storage_server hostname -stype server_type

-dv disk_volume_name -dp disk_pool_name

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\NetBackup\bin\admincmd

The following describe the options:

The name of the NetBackup media server that hasa file system mount on the storage.

-storage_server hostname

For AdvancedDisk with encryption, useAdvancedDisk_crypt, otherwise useAdvancedDisk.

-stype server_type

The name of the disk volume; use UNC notation.-dv disk_volume_name

The name of the disk pool for the volume.-dp disk_pool_name

2 Repeat step 1 for each disk volume that you want to add.

41Configuring AdvancedDiskConfiguring a CIFS disk volume for AdvancedDisk encryption

Configuring an AdvancedDisk disk poolHow you configure an AdvancedDisk disk pool depends on the type, as follows:

You must use the nbdevconfig command if you configured anAdvancedDisk_crypt type of storage server. NetBackup encryptsthe backup data on the AdvancedDisk_crypt type of disk pool.

See “To configure an AdvancedDisk disk pool by using thenbdevconfig command” on page 43.

NetBackup cannot discover Windows Common Internet FileSystem (CIFS) disk volumes. For CIFS storage, you must usethe UNC notation to specify the volumes.

See “About AdvancedDisk file system requirements” on page 13.

See “Configuring a CIFS disk volume for AdvancedDiskencryption” on page 41.

AdvancedDisk_crypttype

Veritas recommends that you use the Disk Pool ConfigurationWizard to configure the AdvancedDisk type of disk pool.

When you configure a storage server, that wizard continues tothe Disk Pool Configuration Wizard. Therefore, you may notneed to invoke the disk pool wizard separately.

See “To configure an AdvancedDisk disk pool by using the wizard”on page 44.

NetBackup cannot discover Windows Common Internet FileSystem (CIFS) disk volumes. For CIFS storage, you must usethe UNC notation to specify the volumes.

See “About AdvancedDisk file system requirements” on page 13.

AdvancedDisk type

Veritas recommends that disk volume and disk pool names be unique across yourenterprise.

You must first configure storage servers.

See “Configuring an AdvancedDisk storage server” on page 27.

42Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

To configure an AdvancedDisk disk pool by using the nbdevconfig command

1 On the host that has a file system mount on the storage, discover the volumesthat are available and write them to a text file. If you intend to use multiplehosts to read to and write from the storage, use any of the hosts. The followingis the NetBackup command to use, depending on your operating system:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevconfig -previewdv

-storage_server hostname -stype server_type > filename

Windows: install_path\NetBackup\bin\admincmd\nbdevconfig -previewdv

-storage_server hostname -stype server_type > filename

The following describe the options:

The name of the NetBackup media server that hasa file system mount on the storage.

-storage_server hostname

For AdvancedDisk with encryption, useAdvancedDisk_crypt, otherwise useAdvancedDisk.

-stype server_type

The name of the file into which to write the volumeinformation. Veritas recommends that you use aname that describes its purpose.

> filename

2 Copy the file that you created in step 1 to the master server.

43Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

3 In a text editor, delete the line for each volume that you do not want to be inthe disk pool. Do not delete the blank line at the end of the file.

Each volume that is listed in the file must be exposed to each AdvancedDiskstorage server on the same mount point.

4 Configure the disk pool by using the following command, depending on youroperating system:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevconfig -createdp -dp

disk_pool_name -stype server_type -storage_servers hostname...

-dvlist filename [-reason "string"] [-lwm low_watermark_percent]

[-max_io_streams n] [-comment comment] [-M master_server] [-reason

"string"]

Windows: install_path\NetBackup\bin\admincmd\nbdevconfig -createdp

-dp disk_pool_name -stype server_type -storage_servers hostname...

-dvlist filename [-reason "string"] [-lwm low_watermark_percent]

[-max_io_streams n] [-comment comment] [-M master_server] [-reason

"string"]

The nbdevconfig command options are described in a different topic.

See “NetBackup nbdevconfig command options for AdvancedDisk disk pools”on page 51.

To configure an AdvancedDisk disk pool by using the wizard

1 In the NetBackup Administration Console, select either NetBackupManagement or Media and Device Management.

2 From the list of wizards in the right pane, click Configure Disk Pool.

44Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

3 On the Welcome panel, the types of disk pools that you can configure dependon the options for which you are licensed.

The following is an example of the wizard panel:

Select AdvancedDisk and then click Next. The Storage Server Selectionwizard panel appears.

45Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

4 On the Storage Server Selection panel, all NetBackup media servers thatyou configured as AdvancedDisk storage servers appear.

The following is an example of the wizard panel:

Select the NetBackup media servers that you want to function as storageservers for this disk pool and then click Next. The Volume Selection wizardpanel appears.

46Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

5 The Volume Selection panel displays the volumes available on the storageserver. If you selected more than one storage server, volumes that are commonto all of them appear.

The following is an example of the wizard panel:

To specify a Common Internet File System (CIFS) disk volume, click Add NewVolume. In the Add New Volume dialog box, enter the Windows UniversalNaming Convention (UNC) pathname of the CIFS volume and then clickValidate and Add.

Select the volumes to use for the disk pool. NetBackup does not filter outcommon file system mount points, such as / and /usr. Therefore, carefullychoose the volumes to include in a disk pool.

47Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

See “About AdvancedDisk file system requirements” on page 13.

Click Next. The Additional Disk Pool Information wizard panel appears.

6 On the Additional Disk Pool Information panel, enter the values for the diskpool and then click Next.

See “AdvancedDisk disk pool properties” on page 53.

The following is an example of the wizard panel:

The Summary wizard panel appears after you click Next.

48Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

7 On the Summary panel, verify the selections. If OK, click Next.

The following is an example of the wizard panel:

49Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

8 After NetBackup creates the disk pool, a wizard panel describes the successfulaction.

The following is an example of the wizard panel:

After NetBackup creates the disk pool, you can do the following:

Ensure that Create a storage unit using the disk pool thatyou have just created is selected and then click Next. TheStorage Unit Creation wizard panel appears. Continue tothe next step.

Configure a storage unit

Click Close.

You can configure one or more storage units later.

See “Configuring an AdvancedDisk disk pool” on page 42.

Exit

50Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

9 On Storage Unit Creation wizard panel, enter the appropriate information forthe storage unit.

The following is an example of the wizard panel:

See “AdvancedDisk storage unit properties” on page 57.

Click Next to create the storage unit.

10 After NetBackup configures the storage unit, the Finished panel appears. ClickFinish to exit from the wizard.

NetBackup nbdevconfig command options for AdvancedDisk diskpools

Table 3-7 shows the options that you can use when you use the nbdevconfig

command to configure an AdvancedDisk disk pool

51Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

Table 3-7 nbdevconfig command options for AdvancedDisk disk pools

DescriptionOption

A comment that is associated with the disk pool.-comment comment

The name of the disk pool. Use the same name that you used when you configuredthe disk volumes.

-dp disk_pool_name

The name of the file that contains the information about the volumes for the diskpool.

-dvlist filename

The high_watermark setting is a threshold that triggers the following actions:

■ When an individual volume in the disk pool reaches the high_watermark,NetBackup considers the volume full. NetBackup chooses a different volumein the disk pool to write backup images to.

■ When all volumes in the disk pool reach the high_watermark, the disk poolis considered full. NetBackup fails any backup jobs that are assigned to astorage unit in which the disk pool is full. NetBackup also does not assign newjobs to a storage unit in which the disk pool is full.

■ NetBackup begins image cleanup when a volume reaches thehigh_watermark; image cleanup expires the images that are no longer valid.For a disk pool that is full, NetBackup again assigns jobs to the storage unitwhen image cleanup reduces any disk volume's capacity to less than thehigh_watermark.If the storage unit for the disk pool is in a capacity-managed storage lifecyclepolicy, other factors affect image cleanup.

The default is 98%.

-hwm high_watermark

The Low water mark is a threshold at which NetBackup stops image cleanup.

The Low water mark setting cannot be greater than or equal to the High watermark setting.

The default is 80%.

-lwm low_watermark

The name of the master server.-M master_server

52Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

Table 3-7 nbdevconfig command options for AdvancedDisk disk pools(continued)

DescriptionOption

Select this option to limit the number of read and write streams (that is, jobs) foreach volume in the disk pool. A job may read backup images or write backupimages. By default, there is no limit.

When the limit is reached, NetBackup chooses another volume, if available. If notavailable, NetBackup queues jobs until a volume is available.

Too many jobs that read and write data may degrade disk performance becauseof disk thrashing. (Disk thrashing is when the read and write heads move betweenthe cylinders excessively as they seek the data for competing jobs.)

Fewer streams may improve throughput, which may increase the number of jobsthat complete in a specific time period.

A starting point is to divide the Maximum concurrent jobs of all of the storageunits by the number of volumes in the disk pool.

-max_io_streams n

The reason that you create the disk pool.-reason "string"

The name of each storage server that has a file system mount on the storage.Specify all NetBackup media servers that are storage servers for this disk pool.

-storage_servers hostname

For AdvancedDisk with encryption, use AdvancedDisk_crypt, otherwise useAdvancedDisk.

-stype server_type

AdvancedDisk disk pool propertiesTable 3-8 describes the disk pool properties.

Table 3-8 AdvancedDisk disk pool properties

DescriptionProperty

The disk pool name.Name

The storage server or storage servers.

All NetBackup media servers that have a mount on the storage are listed. They share thestorage for read and write purposes.

Storage server

The disk volumes that comprise the disk pool.Disk volumes

The total amount of space available in the disk pool.Total size

The total raw, unformatted size of the storage in the disk pool.Total raw size

A comment that is associated with the disk pool.Comment

53Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

Table 3-8 AdvancedDisk disk pool properties (continued)

DescriptionProperty

The High water mark setting is a threshold that triggers the following actions:

■ When an individual volume in the disk pool reaches the High water mark, NetBackupconsiders the volume full. NetBackup chooses a different volume in the disk pool to writebackup images to.

■ When all volumes in the disk pool reach the High water mark, the disk pool is consideredfull. NetBackup fails any backup jobs that are assigned to a storage unit in which the diskpool is full. NetBackup also does not assign new jobs to a storage unit in which the diskpool is full.

■ NetBackup begins image cleanup when a volume reaches the High water mark; imagecleanup expires the images that are no longer valid. For a disk pool that is full, NetBackupagain assigns jobs to the storage unit when image cleanup reduces any disk volume'scapacity to less than the High water mark.If the storage unit for the disk pool is in a capacity-managed storage lifecycle policy, otherfactors affect image cleanup.

The default is 98%.

High water mark

The Low water mark is a threshold at which NetBackup stops image cleanup.

The Lowwater mark setting cannot be greater than or equal to theHigh water mark setting.

The default is 80%.

Low water mark

Select this option to limit the number of read and write streams (that is, jobs) for each volumein the disk pool. A job may read backup images or write backup images. By default, there isno limit.

When the limit is reached, NetBackup chooses another volume, if available. If not available,NetBackup queues jobs until a volume is available.

Too many jobs that read and write data may degrade disk performance because of diskthrashing. (Disk thrashing is when the read and write heads move between the cylindersexcessively as they seek the data for competing jobs.)

Fewer streams may improve throughput, which may increase the number of jobs that completein a specific time period.

A starting point is to divide the Maximum concurrent jobs of all of the storage units by thenumber of volumes in the disk pool.

Limit I/O streams

Select or enter the number of read and write streams to allow per volume.

Many factors affect the optimal number of streams. Factors include but are not limited to diskspeed, CPU speed, and the amount of memory.

per volume

54Configuring AdvancedDiskConfiguring an AdvancedDisk disk pool

Configuring an AdvancedDisk storage unitCreate one or more storage units that reference the disk pool.

The Disk Pool ConfigurationWizard lets you create a storage unit; therefore, youmay have created a storage unit when you created a disk pool. To determine ifstorage units exist for the disk pool, see the NetBackup Management > Storage> Storage Units window of the NetBackup Administration Console.

See “About AdvancedDisk storage unit recommendations” on page 58.

More information about storage units is available. See the NetBackup Administrator'sGuide, Volume I:

http://www.veritas.com/docs/DOC5332

55Configuring AdvancedDiskConfiguring an AdvancedDisk storage unit

To configure a storage unit from the Actions menu

1 In theNetBackupAdministration Console, in the left pane, selectNetBackupManagement > Storage > Storage Units.

2 Click Actions > New > Storage Unit.

3 Complete the fields and set the options in the New Storage Unit dialog box.

See “AdvancedDisk storage unit properties” on page 57.

4 Click OK.

56Configuring AdvancedDiskConfiguring an AdvancedDisk storage unit

AdvancedDisk storage unit propertiesThe following are the configuration options for a disk pool storage unit.

Table 3-9 AdvancedDisk storage unit properties

DescriptionProperty

Enter a unique name for the new storage unit. The name can describe the type of storage.The storage unit name is the name used to specify a storage unit for policies and schedules.The storage unit name cannot be changed after creation.

Storage unit name

Select Disk as the storage unit type.Storage unit type

Select AdvancedDisk for the disk type.Disk type

Select the disk pool that contains the storage for this storage unit.

All disk pools of the specified Disk type appear in the Disk pool list. If no disk pools areconfigured, no disk pools appear in the list.

Disk pool

Specify the NetBackup media servers that can move data to and from the disk pool for thisstorage unit. Only the media servers that are configured as storage servers appear in themedia servers list.

Specify the media server or servers as follows:

■ To allow any server in the media server list to access the disk storage (default), selectUse any available media server.

■ To restrict the media servers that can access the disk storage, select Only use thefollowing media servers. Then, select the media servers to allow. The selection listincludes only the media servers that are configured as storage servers for the disk pool.

NetBackup selects the media server to use when the policy runs.

Media server

Specify the maximum number of write jobs that NetBackup can send to a disk storage unitat one time. (Default: one job. The job count can range from 0 to 256.) This settingcorresponds to the Maximum concurrent write drives setting for a tape storage unit.

NetBackup queues jobs until the storage unit is available. If three backup jobs are scheduledand Maximum concurrent jobs is set to two, NetBackup starts the first two jobs andqueues the third job. If a job contains multiple copies, each copy applies toward theMaximum concurrent jobs count.

Maximum concurrent jobs controls the traffic for backup and duplication jobs but notrestore jobs. The count applies to all servers in the storage unit, not per server. If you selectmultiple media servers in the storage unit and 1 for Maximum concurrent jobs, only onejob runs at a time.

The number to enter depends on the available disk space and the server's ability to runmultiple backup processes.

Warning: A Maximum concurrent jobs setting of 0 disables the storage unit.

Maximum concurrentjobs

57Configuring AdvancedDiskConfiguring an AdvancedDisk storage unit

Table 3-9 AdvancedDisk storage unit properties (continued)

DescriptionProperty

Specify the largest fragment size that NetBackup can create to store backups.

The default maximum fragment size for a disk storage unit is 524,288 megabytes. Tospecify a maximum fragment size other than the default, enter a value from 20 megabytesto 524,288 megabytes.

Backups to disk are usually fragmented to ensure that the backup does not exceed themaximum size that the file system allows.

If an error occurs in a backup, the entire backup is discarded. The backup restarts fromthe beginning, not from the fragment where the error occurred. (An exception is for backupsfor which checkpoint and restart are enabled. In that case, fragments before and includingthe last checkpoint are retained; the fragments after the last checkpoint are discarded.)

Maximum fragment size

About AdvancedDisk storage unit recommendationsYou can use storage unit properties to control how NetBackup moves backup andduplication data.

For example, you can configure a favorable client-to-server ratio for important clientsby using the storage unit Media server setting.

See “About AdvancedDisk storage unit recommendations” on page 58.

You also can use the storage unit Maximum concurrent jobs setting to controlthe backup or the duplication traffic that is sent to the media servers.

See “About throttling traffic to the media servers” on page 59.

About configuring a favorable client-to-server ratioFor a favorable client-to-server ratio, you can use one disk pool and configuremultiple storage units to separate your backup traffic. Because all storage units usethe same disk pool, you do not have to partition the storage.

For example, assume that you have 100 important clients, 500 regular clients, andfour media servers. You can use two media servers to back up your most importantclients and two media servers to back up your regular clients.

The following example describes how to configure a favorable client-to-server ratio:

■ Configure the media servers for AdvancedDisk and configure the storage.

■ Configure a disk pool.

58Configuring AdvancedDiskConfiguring an AdvancedDisk storage unit

■ Configure a storage unit for your most important clients (such as STU-GOLD).Select the disk pool. Select Only use the following media servers. Select twomedia servers to use for your important backups.

■ Create a backup policy for the 100 important clients and select the STU-GOLDstorage unit. The media servers that are specified in the storage unit move theclient data to the storage server.

■ Configure another storage unit (such as STU-SILVER). Select the same diskpool. SelectOnly use the followingmedia servers. Select the other two mediaservers.

■ Configure a backup policy for the 500 regular clients and select the STU-SILVERstorage unit. The media servers that are specified in the storage unit move theclient data to the storage server.

Backup traffic is routed to the wanted data movers by the storage unit settings.

Note: NetBackup uses storage units for media server selection for write activity(backups and duplications) only. For restores, NetBackup chooses among all mediaservers that can access the disk pool.

About throttling traffic to the media serversYou can use the Maximum concurrent jobs settings on disk pool storage units tothrottle the traffic to the media servers. Effectively, this setting also directs higherloads to specific media servers when you use multiple storage units for the samedisk pool. A higher number of concurrent jobs means that the disk can be busierthan if the number is lower.

For example, two storage units use the same set of media servers. One of thestorage units (STU-GOLD) has a higher Maximum concurrent jobs setting thanthe other (STU-SILVER). More client backups occur for the storage unit with thehigher Maximum concurrent jobs setting.

About storage lifecycle policiesA storage lifecycle policy (SLP) is a storage plan for a set of backups. An SLP isconfigured within the Storage Lifecycle Policies utility.

An SLP contains instructions in the form of storage operations, to be applied to thedata that is backed up by a backup policy. Operations are added to the SLP thatdetermine how the data is stored, copied, replicated, and retained. NetBackupretries the copies as necessary to ensure that all copies are created.

59Configuring AdvancedDiskAbout storage lifecycle policies

SLPs offer the opportunity for users to assign a classification to the data at thepolicy level. A data classification represents a set of backup requirements, whichmakes it easier to configure backups for data with different requirements. Forexample, email data and financial data.

SLPs can be set up to provide staged backup behavior. They simplify datamanagement by applying a prescribed behavior to all the backup images that areincluded in the SLP. This process allows the NetBackup administrator to leveragethe advantages of disk-based backups in the near term. It also preserves theadvantages of tape-based backups for long-term storage.

TheSLPParameters properties in theNetBackupAdministration Console allowadministrators to customize how SLPs are maintained and how SLP jobs run.

Best-practice information about SLPs appears in the following document:

http://www.veritas.com/docs/TECH208536

Creating a storage lifecycle policyA storage lifecycle policy (SLP) is a storage plan for a set of backups. The operationsin an SLP are the backup instructions for the data. Use the following procedure tocreate an SLP that contains multiple storage operations.

To add a storage operation to a storage lifecycle policy

1 In theNetBackup Administration Console, selectNetBackupManagement> Storage > Storage Lifecycle Policies.

2 Click Actions > New > New Storage Lifecycle Policy (Windows) or Actions> New > Storage Lifecycle Policy (UNIX).

60Configuring AdvancedDiskCreating a storage lifecycle policy

3 In the New Storage Lifecycle Policy dialog box, enter a Storage lifecyclepolicy name.

4 Add one or more operations to the SLP. The operations are the instructionsfor the SLP to follow and apply to the data that is specified in the backup policy.

If this is the first operation added to the SLP, click Add.

If this is not the first operation in the SLP, add an operation that is eitherhierarchical or non-hierarchical:

To create a hierarchical operation, select an operation to become the sourceof the next operation. Click Add. The new operation is a child of the selectedoperation. The child is indented under the parent operation.

To create a non-hierarchical operation, do not select an operation. Anon-hierarchical operation means that the operation does not have a parentand child relationship with another operation. The new operation is not indented.

5 In the Properties tab of the New Storage Operation dialog box, select anOperation type. If you're creating a child operation, the SLP displays onlythose operations that are valid based on the parent operation that you'veselected.

The name of the operation reflects its purpose in the SLP:

■ Backup

■ Duplication

■ Import

6 Configure the properties for the operation.

61Configuring AdvancedDiskCreating a storage lifecycle policy

7 The Window tab displays for the following operation types: Backup FromSnapshot, Duplication, Import, Index From Snapshot, and Replication. Ifyou'd like to control when the secondary operation runs, create a window forthe operation.

8 Click the Advanced button in the Properties tab to display options about howthe window should behave if the window closes and a secondary operation isnot yet complete.

9 Click OK to create the operation.

10 Add additional operations to the SLP as needed. (See step 4.)

11 Change the hierarchy of the operations in the SLP if necessary.

12 ClickOK to create the SLP. NetBackup validates the SLP when it is first createdand whenever it is changed.

13 Configure a backup policy and select a storage lifecycle policy as the Policystorage.

See “Creating a backup policy” on page 65.

Storage Lifecycle Policy dialog box settingsTheNew Storage Lifecycle Policy dialog box and theChange Storage LifecyclePolicy dialog box contain the following settings.

Figure 3-1 Storage Lifecycle Policy tab

62Configuring AdvancedDiskCreating a storage lifecycle policy

Table 3-10 Storage Lifecycle Policy tab

DescriptionSetting

The Storage lifecycle policy name describes the SLP. The name cannot be modified afterthe SLP is created.

Storage lifecyclepolicy name

The Data classification defines the level or classification of data that the SLP is allowedto process. The drop-down menu contains all of the defined classifications as well as theAny classification, which is unique to SLPs.

TheAny selection indicates to the SLP that it should preserve all images that are submitted,regardless of their data classification. It is available for SLP configuration only and is notavailable to configure a backup policy.

The Data classification is an optional setting.

One data classification can be assigned to each SLP and applies to all operations in theSLP.

If a data classification is selected (other than Any), the SLP stores only those images fromthe policies that are set up for that data classification. If no data classification is indicated,the SLP accepts images of any classification or no classification.

The Data classification setting allows the NetBackup administrator to classify data basedon relative importance. A classification represents a set of backup requirements. When datamust meet different backup requirements, consider assigning different classifications.

For example, email backup data can be assigned to the silver data classification and financialdata backup may be assigned to the platinum classification.

A backup policy associates backup data with a data classification. Policy data can be storedonly in an SLP with the same data classification.

Once data is backed up in an SLP, the data is managed according to the SLP configuration.The SLP defines what happens to the data from the initial backup until the last copy of theimage has expired.

Data classification

The Priority for secondary operations option is the priority that jobs from secondaryoperations have in relationship to all other jobs. The priority applies to the jobs that resultfrom all operations except for Backup and Snapshot operations. Range: 0 (default) to99999 (highest priority).

For example, you may want to set the Priority for secondary operations for a policy witha gold data classification higher than for a policy with a silver data classification.

The priority of the backup job is set in the backup policy on the Attributes tab.

Priority for secondaryoperations

63Configuring AdvancedDiskCreating a storage lifecycle policy

Table 3-10 Storage Lifecycle Policy tab (continued)

DescriptionSetting

Use the Add, Change, and Remove buttons to create a list of operations in the SLP. AnSLP must contain one or more operations. Multiple operations imply that multiple copiesare created.

The list also contains the columns that display information about each operation. Not allcolumns display by default.

For column descriptions, see the following topic:

Operations

Use the arrows to indicate the indentation (or hierarchy) of the source for each copy. Onecopy can be the source for many other copies.

Arrows

The Active and Postponed options appear under State of Secondary OperationProcessing and refer to the processing of all duplication operations in the SLP.

Note: The Active and Postponed options apply to duplication operations that createtar-formatted images. For example, those created with bpduplicate. The Active andPostponed options do not affect the images that are duplicated as a result of OpenStorageoptimized duplication, NDMP, or if one or more destination storage units are specified aspart of a storage unit group.

These options do not apply if either the source media server or the destination media serveris not at NetBackup 7.6 or later.

■ EnableActive to let secondary operations continue as soon as possible. When changedfrom Postponed to Active, NetBackup continues to process the images, picking upwhere it left off when secondary operations were made inactive.

■ Enable Postponed to postpone the secondary operations for the entire SLP. Postponeddoes not postpone the creation of duplication jobs, it postpones the creation of imagesinstead. The duplication jobs continue to be created, but they are not run until secondaryoperations are active again.All secondary operations in the SLP are inactive indefinitely unless the administratorselects Active or until the Until option is selected and an activation date is indicated.

Active

and

Postponed

Click this button to see how changes to this SLP can affect the policies that are associatedwith this SLP. The button generates a report that displays on the Validation Report tab.

This button performs the same validation as the -conflict option performs when usedwith the nbstl command.

Validate AcrossBackup Policies button

64Configuring AdvancedDiskCreating a storage lifecycle policy

Creating a backup policyThe easiest method to set up a backup policy is to use the Policy ConfigurationWizard. This wizard guides you through the setup process by automatically choosingthe best values for most configurations.

Not all policy configuration options are presented through the wizard. For example,calendar-based scheduling and the Data Classification setting. After the policy iscreated, modify the policy in the Policies utility to configure the options that are notpart of the wizard.

Note:Do not use the Policy Configuration Wizard to configure policies for ReplicationDirector.

Using the Policy Configuration Wizard to create a backuppolicyUse the following procedure to create a backup policy with the Policy ConfigurationWizard.

To create a backup policy with the Policy Configuration Wizard

1 In theNetBackup Administration Console, in the left pane, clickNetBackupManagement.

2 In the right pane, click Create a Policy to begin the Policy ConfigurationWizard.

3 Click Next to start the wizard and follow the prompts.

Click Help on any wizard panel for assistance while running the wizard.

Creating a backup policy without using the PolicyConfiguration WizardUse the following procedure to create a backup policy in the NetBackupAdministration Console without using the Policy Configuration Wizard.

To create a policy without the Policy Configuration Wizard

1 In the NetBackup Administration Console, in the left pane, expandNetBackup Management > Policies.

2 On the Actions menu, click New > Policy.

3 Type a unique name for the new policy in the Add a New Policy dialog box.

4 If necessary, clear the Use Policy Configuration Wizard check box.

65Configuring AdvancedDiskCreating a backup policy

5 Click OK.

6 Configure the attributes, the schedules, the clients, and the backup selectionsfor the new policy.

Resilient Network propertiesThe Resilient Network properties appear for the master server, for media servers,and for clients. For media servers and clients, the Resilient Network propertiesare read only. When a job runs, the master server updates the media server andthe client with the current properties.

The Resilient Network properties let you configure NetBackup to use resilientnetwork connections for backups and restores. A resilient connection allows backupand restore traffic between a client and a NetBackup media server to functioneffectively in high-latency, low-bandwidth networks such as WANs. The data travelsacross a wide area network (WAN) to media servers in a central datacenter.

NetBackup monitors the socket connections between the remote client and theNetBackup media server. If possible, NetBackup re-establishes dropped connectionsand resynchronizes the data stream. NetBackup also overcomes latency issues tomaintain an unbroken data stream. A resilient connection can survive networkinterruptions of up to 80 seconds. A resilient connection may survive interruptionslonger than 80 seconds.

The NetBackup Remote Network Transport Service manages the connectionbetween the computers. The Remote Network Transport Service runs on the masterserver, the client, and the media server that processes the backup or restore job.If the connection is interrupted or fails, the services attempt to re-establish aconnection and synchronize the data.

NetBackup protects only the network socket connections that the NetBackup RemoteNetwork Transport Service (nbrntd) creates. Examples of the connections that arenot supported are:

■ Clients that back up their own data (deduplication clients and SAN clients)

■ Granular Recovery Technology (GRT) for Exchange Server or SharePoint Server

■ NetBackup nbfsd process.

NetBackup protects connections only after they are established. If NetBackup cannotcreate a connection because of network problems, there is nothing to protect.

Resilient connections apply between clients and NetBackup media servers, whichincludes master servers when they function as media servers. Resilient connectionsdo not apply to master servers or media servers if they function as clients and backup data to a media server.

66Configuring AdvancedDiskResilient Network properties

Resilient connections can apply to all of the clients or to a subset of clients.

Note: If a client is in a different subdomain than the server, add the fully qualifieddomain name of the server to the client’s hosts file. For example,india.veritas.org is a different subdomain than china.veritas.org.

When a backup or restore job for a client starts, NetBackup searches the ResilientNetwork list from top to bottom looking for the client. If NetBackup finds the client,NetBackup updates the resilient network setting of the client and the media serverthat runs the job. NetBackup then uses a resilient connection.

Figure 3-2 Master server Resilient Network host properties

Table 3-11 describes the Resilient Network properties.

67Configuring AdvancedDiskResilient Network properties

Table 3-11 Resilient Network dialog box properties

DescriptionProperty

The Host Name or IP Address of the host. The address canalso be a range of IP addresses so you can configure morethan one client at once. You can mix IPv4 addresses andranges with IPv6 addresses and subnets.

If you specify the host by name, Veritas recommends thatyou use the fully qualified domain name.

Use the arrow buttons on the right side of the pane to moveup or move down an item in the list of resilient networks.

Host Name or IP Address

Resiliency is either ON or OFF.Resiliency

Note: The order is significant for the items in the list of resilient networks. If a clientis in the list more than once, the first match determines its resilient connectionstatus. For example, suppose you add a client and specify the client IP addressand specify On for Resiliency. Suppose also that you add a range of IP addressesas Off, and the client IP address is within that range. If the client IP address appearsbefore the address range, the client connection is resilient. Conversely, if the IPrange appears first, the client connection is not resilient.

The resilient status of each client also appears as follows:

■ In the NetBackup Administration Console, select NetBackup Management> Policies in the left pane and then select a policy. In the right pane, aResiliency column shows the status for each client in the policy.

■ In the NetBackup Administration Console, select NetBackup Management> Host Properties > Clients in the left pane. In the right pane, a Resiliencycolumn shows the status for each client.

Other NetBackup properties control the order in which NetBackup uses networkaddresses.

The NetBackup resilient connections use the SOCKS protocol version 5.

Resilient connection traffic is not encrypted. Veritas recommends that you encryptyour backups. For deduplication backups, use the deduplication-based encryption.For other backups, use policy-based encryption.

Resilient connections apply to backup connections. Therefore, no additional networkports or firewall ports must be opened.

68Configuring AdvancedDiskResilient Network properties

Note: If multiple backup streams run concurrently, the Remote Network TransportService writes a large amount of information to the log files. In such a scenario,Veritas recommends that you set the logging level for the Remote Network TransportService to 2 or less. Instructions to configure unified logs are in a different guide.

See the NetBackup Logging Reference Guide.

Specifying resilient connectionsUse the following procedure to specify resilient connections for NetBackup clients.

See “Resilient Network properties” on page 66.

Alternatively, you can use the resilient_clients script to specify resilientconnections for clients:

■ Windows: install_path\NetBackup\bin\admincmd\resilient_clients

■ UNIX: /usr/openv/netbackup/bin/admincmd/resilient_clients

To specify resilient connections

1 In theNetBackupAdministrationConsole, expandNetBackupManagement> Host Properties > Master Servers in the left pane.

2 In the right pane, select the master server on which to specify properties.

3 On the Actions menu, click Properties.

4 In the properties dialog box left pane, select Resilient Network.

5 In the Resilient Network dialog box, use the following buttons to manageresiliency for clients:

69Configuring AdvancedDiskSpecifying resilient connections

To add resilient settings

1 Click Add.

The Add Resilient Network Settings dialog box appears

2 Enter a client host name, an IP address, or an address range.

If you specify the client host by name, Veritas recommends thatyou use the fully qualified domain name.

For address ranges, use Classless Inter-Domain Routing (CIDR)notation (for example, 192.168.100.0/24 or fd00::/8).

3 Ensure that the Resiliency On option is selected.

4 Click Add.

5 Repeat until you have finished entering clients or address ranges.

6 When you finish adding network settings, click Close.

Add

If you select multiple hosts in the NetBackup Administration Console,the entries in the Resilient Network list may appear in different colors,as follows:

■ The entries that appear in black type are configured on all of thehosts.

■ The entries that appear in gray type are configured on some of thehosts only.

For the entries that are configured on some of the hosts only, you canadd them to all of the hosts. To do so, select them and click Add To All.

Add To All

To change resilient settings

1 Select the client host name, the IP address, or the address range.

2 Click Change.

The Change Resilient Network Settings dialog box appears

3 Select the desired Resiliency setting.

4 Click OK.

Change

Remove the select host or address rang

1 Select the client host name, the IP address, or the address range.

2 Click Remove.

The client is removed immediately; a confirmation dialog box doesnot appear.

Remove

70Configuring AdvancedDiskSpecifying resilient connections

Move an item in the list of items

1 Select the client host name, the IP address, or the address range.

2 Click the appropriate button to move up the item or move down theitem.

The order of the items in the list is significant.

See “Resilient Network properties” on page 66.

6 After specifying resilient connections, click OK.

The settings are propagated to the affected hosts through normal NetBackupinter-host communication, which can take up to 15 minutes.

7 If you want to begin a backup immediately, restart the NetBackup services onthe master server.

71Configuring AdvancedDiskSpecifying resilient connections

Managing AdvancedDiskThis chapter includes the following topics:

■ Managing AdvancedDisk storage servers

■ Managing AdvancedDisk disk pools

■ About monitoring AdvancedDisk storage capacity and usage

■ Monitoring NetBackup disk activity

■ Viewing AdvancedDisk disk reports

■ Displaying detailed AdvancedDisk storage usage information

■ Displaying KMS key information for AdvancedDisk encryption

Managing AdvancedDisk storage serversAfter you configure AdvancedDisk, you can perform various tasks to manage storageservers.

See “Viewing AdvancedDisk storage servers” on page 73.

See “Determining AdvancedDisk storage server state” on page 73.

See “Viewing AdvancedDisk storage server attributes” on page 73.

See “Removing AdvancedDisk storage server attributes” on page 74.

See “Removing an AdvancedDisk storage server from disk pool access” on page 75.

See “Deleting an AdvancedDisk storage server” on page 75.

4Chapter

Viewing AdvancedDisk storage serversUse the NetBackup Administration Console to view a list of storage serversalready configured.

To view AdvancedDisk storage servers

◆ In the NetBackup Administration Console, in the left pane, expand Mediaand Device Management > Credentials > Storage Server.

The right pane, labeled All Storage Servers, shows all configured storageservers. AdvancedDisk storage servers show AdvancedDisk in the ServerType column.

Determining AdvancedDisk storage server stateUse the NetBackup nbdevquery command to determine the state of anAdvancedDisk storage server.

To determine AdvancedDisk storage server status

◆ Run the following command:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevquery -liststs -stype

AdvancedDisk -storage_server server_name -U

Windows: install_path\NetBackup\bin\admincmd\nbdevquery -liststs

-stype AdvancedDisk -storage_server server_name -U

The State field of the command output shows either UP or DOWN.

Viewing AdvancedDisk storage server attributesUse the NetBackup nbdevquery command to view the storage server attributes.

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\NetBackup\bin\admincmd

73Managing AdvancedDiskManaging AdvancedDisk storage servers

To view AdvancedDisk storage server attributes

◆ Run the following command on the NetBackup master server or a storageserver:

nbdevquery -liststs -storage_server storage_server -stype

AdvancedDisk –U

The following is example output:

Storage Server : advdsk_server.example.com

Storage Server Type : AdvancedDisk

Storage Type : Formatted Disk, Direct Attached

State : UP

Flag : PrefRestore

This example output is shortened; more flags may appear in actual output.

Removing AdvancedDisk storage server attributesUse the nbdevconfig command to remove the following storage server attributes:

■ Preferred restore server (PrefRestore)

■ Required restore server (ReqRestore)

■ Required duplication server (ReqDuplicate)

See “About AdvancedDisk preferred or required read servers” on page 16.

Attributes are added when you use the nbdevconfig command to configure astorage server.

See “Configuring an AdvancedDisk storage server” on page 27.

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\NetBackup\bin\admincmd

To remove AdvancedDisk storage server attributes

◆ Run the following command on the NetBackup master server or on a storageserver:

nbdevconfig -changests -storage_server storage_server -stype

AdvancedDisk -clearattribute attribute

74Managing AdvancedDiskManaging AdvancedDisk storage servers

Removing an AdvancedDisk storage server from disk pool accessUse the nbdevconfig command to remove a storage server so that it no longercan access a disk pool. If NetBackup jobs exist that use that storage server, youcannot remove the storage server.

Warning: If you remove the only storage server, data may be lost. NetBackupcannot access the disk pool and the backup images on the disk pool.

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\NetBackup\bin\admincmd

To remove an AdvancedDisk storage server from disk pool access

1 For every storage unit that specifies the storage server (media server) in Useone of the following media servers, clear the check box that specifies themedia server.

This step is not required if the storage unit is configured to use any availablemedia server.

2 If only one storage server exists, change the state of all disk pools on the arrayto DOWN. To do so, use the following command:

nbdevconfig -changestate -stype AdvancedDisk -dp disk_pool_name

-state DOWN

3 Remove the storage server. The following is the command syntax:

nbdevconfig -changedp -stype AdvancedDisk -dp disk_pool_name

-del_storage_servers storage_server

Deleting an AdvancedDisk storage serverIf you delete a storage server, NetBackup removes the storage server only fromyour configuration.

The media server is not deleted from your configuration. To delete the media server,use the NetBackup nbemmcmd command.

If a disk pool is configured from the disk volumes that the storage server manages,you cannot delete the storage server.

Warning:Do not delete a storage server if its storage contains unexpired NetBackupimages. If you do, data loss may occur.

75Managing AdvancedDiskManaging AdvancedDisk storage servers

To delete an AdvancedDisk storage server

1 In the NetBackup Administration Console, expand Media and DeviceManagement > Credentials > Storage Server.

2 On the Edit menu, select Delete.

3 Click Yes in the confirmation dialog box.

Managing AdvancedDisk disk poolsAfter you configure AdvancedDisk, you can perform various tasks to manage yourAdvancedDisk disk pools.

See “Viewing AdvancedDisk disk pools” on page 76.

See “About changing the AdvancedDisk disk pool size” on page 76.

See “Adding volumes to an AdvancedDisk disk pool” on page 77.

See “Changing AdvancedDisk disk pool properties” on page 77.

See “Determining AdvancedDisk disk pool state” on page 79.

See “Changing AdvancedDisk disk pool state” on page 79.

See “Determining AdvancedDisk disk volume state” on page 79.

See “Changing AdvancedDisk disk volume state” on page 80.

See “Merging AdvancedDisk disk pools” on page 81.

See “Removing a volume from an AdvancedDisk disk pool” on page 81.

See “Inventorying a NetBackup disk pool” on page 82.

See “Deleting an AdvancedDisk disk pool” on page 83.

Viewing AdvancedDisk disk poolsUse the NetBackup Administration Console to view configured disk pools.

To view disk pools

◆ In theNetBackup Administration Console tree, in the left pane, selectMediaand Device Management > Devices > Disk Pools.

The list appears in the right pane.

About changing the AdvancedDisk disk pool sizeTwo methods exist to change the size of a disk pool, as follows:

76Managing AdvancedDiskManaging AdvancedDisk disk pools

■ If you use a logical volume manager, you can use it to change the size of a diskvolume by adding LUNs to it. If you do, you must inventory the disk pool so thatNetBackup reads the new size of the pool.See “Inventorying a NetBackup disk pool” on page 82.

■ If you do not use a logical volume manager, you can change the size by addingor removing volumes from the disk pool.See “Adding volumes to an AdvancedDisk disk pool” on page 77.See “Removing a volume from an AdvancedDisk disk pool” on page 81.

Adding volumes to an AdvancedDisk disk poolYou can expand a disk pool’s capacity by adding disk volumes to the disk pool.The names of the new volumes must differ from the names of the volumes in thecurrent disk pool.

The NetBackup storage units that use the disk pool use the additional storagecapacity automatically. You do not have to change the storage units.

(By default, NetBackup automatically increases disk pool capacity if the capacityof the underlying disk volumes increases. Similarly, NetBackup decreases thecapacity of a disk pool if the underlying disk volume capacity decreases.)

Table 4-1 Add volumes process for an AdvancedDisk disk pool

ProcedureTask

See “Configuring an AdvancedDisk disk pool”on page 42.

Create a disk pool from the newdisk volumes on the storageserver.

When you merge the disk pools, specify the original diskpool as the primary one. NetBackup deletes thesecondary disk pool after the merge.

See “Merging AdvancedDisk disk pools” on page 81.

Merge the disk pools.

Changing AdvancedDisk disk pool propertiesYou can change the storage server for a disk pool and change the properties of adisk pool.

To add volumes to a disk pool, you must use a different procedure.

See “Adding volumes to an AdvancedDisk disk pool” on page 77.

77Managing AdvancedDiskManaging AdvancedDisk disk pools

To change disk pool properties

1 In the NetBackup Administration Console, in the left pane, expand Mediaand Device Management > Devices > Disk Pools.

2 In the right pane, select the disk pool that you want to change.

3 Click Edit > Change.

4 In theChange Disk Pool dialog box, change storage servers or the properties.

See “AdvancedDisk disk pool properties” on page 53.

5 Click OK.

78Managing AdvancedDiskManaging AdvancedDisk disk pools

Determining AdvancedDisk disk pool stateDisk pool state is UP or DOWN.

To determine AdvancedDisk disk pool state

1 In the NetBackup Administration Console, in the left pane, select Mediaand Device Management > Device Monitor.

2 Select the Disk Pools tab.

3 The state is displayed in the Status column.

Changing AdvancedDisk disk pool stateYou can change the state of a NetBackup disk pool. Pool states are UP or DOWN.

To change the state to DOWN, the disk pool must not be busy. If backup jobs areassigned to the disk pool, the state change fails. Cancel the backup jobs or waituntil the jobs complete.

To change AdvancedDisk disk pool state

1 In the NetBackup Administration Console, in the left pane, select Mediaand Device Management > Device Monitor.

2 Select the Disk Pools tab.

3 Select the disk pool.

4 Select either Actions > Up or Actions > Down.

Determining AdvancedDisk disk volume stateUse the NetBackup nbdevquery command to determine the state of the volumesin AdvancedDisk disk pools.

To determine AdvancedDisk disk volume state

◆ Display the state of the volumes in a disk pool by using the following command:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevquery -listdv -U

-stype server_type -dp disk_pool_name

Windows: install_path\NetBackup\bin\admincmd\nbdevquery -listdv

-U -stype server_type -dp disk_pool_name

The following items describe the arguments for the options:

79Managing AdvancedDiskManaging AdvancedDisk disk pools

For the server type, use one of the following types:

■ AdvancedDisk for nonencrypted storage.■ AdvancedDisk_crypt for encrypted storage.

-stype server_type

The name of the disk pool.

To display the disk volumes in all disk pools of the specifiedtype, omit the -dp option.

dp disk_pool_name

The command displays all of the volumes in the disk pool. The state is eitherUP or DOWN.

.

Changing AdvancedDisk disk volume stateUse the NetBackup nbdevconfig command to change disk volume state. The stateis UP or DOWN.

To change the state to DOWN, the disk pool in which the volume resides must notbe busy. If backup jobs are assigned to the disk pool, the state change fails. Cancelthe backup jobs or wait until the jobs complete.

NetBackup jobs still read from and write to a disk pool that has a downed volume,but the downed volume is unavailable.

To change the AdvancedDisk disk volume state

1 Determine the name of the disk volume.

See “Determining AdvancedDisk disk volume state” on page 79.

2 Change the disk volume state. The following is the command syntax:

UNIX: /usr/openv/netbackup/bin/admincmd/nbdevconfig -changestate

-stype server_type -dp disk_pool_name –dv vol_name -state state

Windows: install_path\NetBackup\bin\admincmd\nbdevconfig-changestate -stype server_type -dp disk_pool_name –dv vol_name

-state state

The following items describe the arguments for the options:

For the server type, use one of the following types:

■ AdvancedDisk for nonencrypted storage.■ AdvancedDisk_crypt for encrypted storage.

-stype server_type

80Managing AdvancedDiskManaging AdvancedDisk disk pools

The name of the disk pool.-dpdisk_pool_name

The name of the disk volume.-dv vol_name

Specify UP or DOWN. RESET sets the internal state to UP,sets committed_space to zero, and sets the precommittedspace to zero.

-state state

Merging AdvancedDisk disk poolsUse the NetBackup nbdevconfig command to merge existing disk pools.

NetBackup updates the catalog records to show the correct location of the backupimages in those disk pools.

If the secondary disk pool is referenced by storage units, you must first delete thosestorage units.

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\netbackup\bin\admincmd

To merge AdvancedDisk disk pools

1 Change the state of each disk pool to DOWN.

See “Changing AdvancedDisk disk pool state” on page 79.

If backup jobs are assigned to a disk pool, the state change fails. Cancel thebackup jobs or wait until the jobs complete.

2 Merge the disk pools. The following is the command syntax. The primary diskpool is the one you want to retain; nbdevconfig deletes the secondary diskpool after the merge.

nbdevconfig –mergedps –stype AdvancedDisk -primarydp

disk_pool_name -secondarydp disk_pool_name

3 Change the state of the primary disk pool to UP.

See “Changing AdvancedDisk disk pool state” on page 79.

Removing a volume from an AdvancedDisk disk poolUse the nbdevconfig command to remove a volume from a disk pool. The followingare the prerequisites:

■ NetBackup image fragments cannot exist on the disk volume.

81Managing AdvancedDiskManaging AdvancedDisk disk pools

■ NetBackup jobs cannot be active on the disk volume.

By default, NetBackup automatically decreases disk pool capacity if you remove adisk volume.

The following is the path to the nbdevconfig command:

■ UNIX: /usr/openv/netbackup/bin/admincmd

■ Windows: install_path\NetBackup\bin\admincmd

To remove a volume from an AdvancedDisk disk pool

1 Change the disk volume state to DOWN.

See “Changing AdvancedDisk disk volume state” on page 80.

2 Change the disk pool state to DOWN.

See “Changing AdvancedDisk disk pool state” on page 79.

3 Remove the volume by using the nbdevconfig command. The following is thecommand syntax:

nbdevconfig -deletedv -stype AdvancedDisk -dp disk_pool_name –dv

vol_name

4 Change the disk pool state to UP.

See “Changing AdvancedDisk disk pool state” on page 79.

Inventorying a NetBackup disk poolAn inventory of a NetBackup disk pool reads the capacity of the disk volumes inthe pool. An inventory operation lets you update NetBackup with the new capacityvalues if you do the following:

■ Increase or decrease the size of the disk volumes in a disk pool.

■ Add volumes to or remove volumes from a disk pool.

How you increase or decrease the underlying storage capacity depends on yourstorage implementation. You must complete that process before you inventory thedisk pool.

To inventory a NetBackup disk pool

1 in the NetBackup Administration Console, select Media and DeviceManagement > Devices > Disk Pools.

2 On the Actions menu, select Inventory Disk Pools.

3 In the Inventory Disk Pool dialog box, select the disk pool to inventory andthen click Start Inventory.

82Managing AdvancedDiskManaging AdvancedDisk disk pools

4 To update the NetBackup catalog with the capacity values returned by theinventory, click Update Configuration.

5 To inventory another disk pool, go to step 3.

6 To exit, click Close.

Deleting an AdvancedDisk disk poolIf you delete a disk pool, NetBackup removes it from your configuration.

If a disk pool is the storage destination of a storage unit, you must first delete thestorage unit.

Warning: Do not delete a disk pool that contains unexpired NetBackup images; ifyou do, data loss may occur.

To delete an AdvancedDisk disk pool

1 In the NetBackup Administration Console, in the left pane, select Mediaand Device Management > Devices > Disk Pools.

2 Select a disk pool

3 Click Edit > Delete.

4 In the Delete Disk Pool dialog box, verify that the disk pool is the one youwant to delete and then click OK.

AboutmonitoringAdvancedDisk storage capacityand usage

Table 4-2 describes the ways that you can monitor storage capacity and usage.

Table 4-2 Monitor storage capacity and usage

DescriptionWhat

The Disk Pools window displays a value that was storedwhen NetBackup polled the disk pools. NetBackup polls every5 minutes; therefore, the value may not be as current as thevalue that is displayed in the Storage Server window.

To display the window, select Media and DeviceManagement > Devices > Disk Pools.

The NetBackupAdministration Console DiskPools window

83Managing AdvancedDiskAbout monitoring AdvancedDisk storage capacity and usage

Table 4-2 Monitor storage capacity and usage (continued)

DescriptionWhat

See “Viewing AdvancedDisk disk reports” on page 85.The NetBackup Disk Poolstatus report

The storage server view displays real-time values.

To display the window, select Media and DeviceManagement > Credentials > Storage Servers.

NetBackup AdministrationConsole Storage Serverwindow

See “Displaying detailed AdvancedDisk storage usageinformation” on page 86.

The nbdevquery command

The NetBackup OpsCenter also provides information about storage capacity andusage.

See the NetBackup OpsCenter Administrator's Guide:

http://www.veritas.com/docs/DOC5332

Monitoring NetBackup disk activityYou can monitor NetBackup disk-related activity and status by viewing theNetBackup log files.

Some NetBackup commands or processes write messages to their own log files.Other processes use Veritas unified log (VxUL) files. VxUL uses a standardizedname and file format for log files. An originator ID (OID) identifies the process thatwrites the log messages.

Table 4-3 shows the NetBackup logs for disk-related activity.

The messages that begin with a sts_ prefix relate to the interaction with the storagevendor software plug-in. Most interaction occurs on the NetBackup media servers.

Table 4-3 NetBackup logs

Processes that use the IDVxUL OIDActivity

Messages appear in the log files for the followingprocesses:

■ The bpbrm backup and restore manager■ The bpdbm database manager■ The bpdm disk manager■ The bptm tape manager for I/O operations

N/ABackups andrestores

84Managing AdvancedDiskMonitoring NetBackup disk activity

Table 4-3 NetBackup logs (continued)

Processes that use the IDVxUL OIDActivity

The nbjm job manager.117Backups andrestores

The nbemm process.111Deviceconfiguration

The Disk Service Manager process that runs in theEnterprise Media Manager (EMM) process.

178Deviceconfiguration

The Storage Server Interface process that runs in theRemote Manager and Monitor Service. RMMS runson media servers.

202Deviceconfiguration

The Remote Disk Service Manager interface (RDSM)that runs in the Remote Manager and Monitor Service.RMMS runs on media servers.

230Deviceconfiguration

To view and manage VxUL log files, you must use NetBackup log commands.Information about how to use and manage logs on NetBackup servers is available.

See the NetBackup Logging Reference Guide:

http://www.veritas.com/docs/DOC5332

Viewing AdvancedDisk disk reportsThe NetBackup disk reports include information about the disk pools, disk storageunits, disk logs, images that are stored on disk media, and storage capacity.

Table 4-4 describes the disk reports available.

Table 4-4 Disk reports

DescriptionReport

The Images on Disk report generates the image list present on thedisk storage units that are connected to the media server. Thereport is a subset of the Images on Media report; it shows onlydisk-specific columns.

The report provides a summary of the storage unit contents. If adisk becomes bad or if a media server crashes, this report can letyou know what data is lost.

Images on Disk

85Managing AdvancedDiskViewing AdvancedDisk disk reports

Table 4-4 Disk reports (continued)

DescriptionReport

The Disk Logs report displays the media errors or the informationalmessages that are recorded in the NetBackup error catalog. Thereport is a subset of the Media Logs report; it shows onlydisk-specific columns.

Disk Logs

The Disk Storage Unit Status report displays the state of diskstorage units in the current NetBackup configuration.

For disk pool capacity, see the disk pools window in Media andDevice Management > Devices > Disk Pools.

Multiple storage units can point to the same disk pool. When thereport query is by storage unit, the report counts the capacity ofdisk pool storage multiple times.

Disk Storage UnitStatus

The Disk Pool Status report displays the state of disk pool storageunits. This report displays only when a license that enablesNetBackup disk features is installed.

Disk Pool Status

To view disk reports

1 In the NetBackup Administration Console, in the left pane, expandNetBackup Management > Reports > Disk Reports.

2 Select the name of a disk report.

3 In the right pane, select the report settings.

4 Click Run Report.

Displaying detailed AdvancedDisk storage usageinformation

The NetBackup nbdevquery command lets you display detailed information aboutthe storage use of disk pools and disk volumes.

86Managing AdvancedDiskDisplaying detailed AdvancedDisk storage usage information

To determine the disk volume storage usage

1 Determine the names of all AdvancedDisk disk pools in your NetBackup domain:

nbdevquery -listdp -stype AdvancedDisk

V7.5 DiskPool-AdvDisk 1 201.00 201.00 3 98 80 -1 adv_server.example.com

2 Determine disk volume names in the AdvancedDisk disk pool:

nbdevquery -listdv -stype AdvancedDisk -dp disk_pool_name

Replace disk_pool_name with the name of the disk pool for which you want todetermine the volume names.

The following is example output:

V7.5 DiskPool-AdvDisk AdvancedDisk /advdisk_disc1 @aaaak 0.00 0.00 100 1 0 1 0 0 14

V7.5 DiskPool-AdvDisk AdvancedDisk /advdisk_disc2 @aaaal 200.00 79.75 60 1 0 1 0 0 14

V7.5 DiskPool-AdvDisk AdvancedDisk /advdisk_disc3 @aaaam 1.00 1.00 0 1 0 1 0 0 14

3 Display the usage information for a specific AdvancedDisk disk volume:

nbdevquery -listdv -stype AdvancedDisk -dp disk_pool_name -dv

disk_volume_name -D

Replace disk_pool_name with the name of the disk pool for which you want todetermine the volume names. Replace disk_volume_name with the name ofthe disk volume for which you want to display usage information.

The output from the command includes the following fields:

total_capacity : 214748364800

total_phys_capacity : 214748364800

free_space : 85625798656

free_phys_space : 85625798656

potential_free_space: 0

committed_space : 0

precommitted_space : 0

See “NetBackup disk volume capacity and usage reference” on page 87.

NetBackup disk volume capacity and usage referenceNetBackup determines the space available for backups on a volume by using thefollowing formula:

Available space equals free_space plus potential_free_space minuscommitted_space.

87Managing AdvancedDiskDisplaying detailed AdvancedDisk storage usage information

The potential_free_space value is used only for a disk volume that is capacitymanaged. A disk volume is capacity managed when its disk pool is capacitymanaged. A disk pool is capacity managed when it is a destination in a storagelifecycle policy and the Retention Type is Capacity managed.

Table 4-5 describes the capacity values that NetBackup uses for space calculations.

Table 4-5 Disk capacity values

DescriptionField

The total size of the disk.

This value is derived from the file system and is updated at1-minute intervals.

total_capacity

For the purposes of AdvancedDisk, total_capacity andtotal_phys_capacity should have the same values.

total_phys_capacity

The amount of free space on the disk.

This value is derived from the file system and is updated at1-minute intervals.

free_space

For the purposes of AdvancedDisk, free_space andfree_phys_space should have the same values.

free_phys_space

The sum of all of the fragments on the disk that NetBackupduplicated as part of a storage lifecycle policy and that are eligiblefor expiration. A fragment becomes eligible for expiration when ithas been duplicated successfully.

NetBackup calculates potential_free_space a the end ofduplication sessions and expiration sessions.

The potential_free_space value may become stale betweencomputations. However, the next computation provides an accuratevalue.

potential_free_space

The estimated size of all of the jobs-in-progress that write to thevolume, based on the following:

■ For an existing backup, NetBackup uses the size of the mostrecent backup plus 20%.

■ For a new backup (including user backups), NetBackup usesthe capacity of the disk volume over the high-water mark. Forexample, on a 2-TB volume that has a 98% high-water mark,NetBackup uses 40 GBs.

■ For duplication jobs, NetBackup uses the size of the sourceimage.

committed_space

88Managing AdvancedDiskDisplaying detailed AdvancedDisk storage usage information

Table 4-5 Disk capacity values (continued)

DescriptionField

The precommitted_space is a helper value forcommitted_space. NetBackup decrements the value while abackup job runs. Each time NetBackup updates the capacity andfree space information, NetBackup updates the value ofcommitted_space to the current value ofprecommitted_space.

This process ensures that all capacity-related values are updatedat the same time to provide the most accurate usage descriptionfor the disk volume.

precommitted_space

DisplayingKMSkey information for AdvancedDiskencryption

You can use the nbkmsutil command to list the following information about thekey groups and the key records:

See To display KMS key group information.Key groups

See To display KMS key information.Keys

Note: Veritas recommends that you keep a record key information. The key tagthat is listed in the output is necessary if you need to recover keys.

89Managing AdvancedDiskDisplaying KMS key information for AdvancedDisk encryption

To display KMS key group information

◆ To list all of the key groups, use the nbkmsutil with the -listkgs option. Thefollowing is the command format:

UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkgs

Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil-listkgs

The following is example output on UNIX hosted storage. On Windows, thevolume name is not used.

Key Group Name : AdvDiskServer1.example.com:AdvDisk_Volume

Supported Cipher : AES_256

Number of Keys : 1

Has Active Key : Yes

Creation Time : Tues Jan 01 01:00:00 2013

Last Modification Time: Tues Jan 01 01:00:00 2013

Description : -

90Managing AdvancedDiskDisplaying KMS key information for AdvancedDisk encryption

To display KMS key information

◆ To list all of the keys that belong to a key group name, use the nbkmsutil withthe -listkgs and -kgname options. The following is the command format:

UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkeys -kgname

AdvDiskServer1.example.com:AdvDisk_Volume

Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil-listkeys -kgname AdvDiskServer1.example.com:

The following is example output on UNIX hosted storage. On Windows, thevolume name is not used.

Key Group Name : AdvDiskServer1.example.com:AdvDisk_Volume

Supported Cipher : AES_256

Number of Keys : 1

Has Active Key : Yes

Creation Time : Wed Nov 30 16:53:48 2011

Last Modification Time: Wed Nov 30 16:53:48 2011

Description : -

Key Tag : 867d710aa7f4c64dcdd2cec6...cced0c831c1812c510acd05

Key Name : dp-key

Current State : ACTIVE

Creation Time : Tues Jan 01 01:00:00 2013

Last Modification Time: Tues Jan 01 01:00:00 2013

Description : -

Number of Keys: 1

91Managing AdvancedDiskDisplaying KMS key information for AdvancedDisk encryption

ToubleshootingAdvancedDisk

This chapter includes the following topics:

■ About unified logging

■ About legacy logging

■ NetBackup AdvancedDisk log files

■ AdvancedDisk troubleshooting

■ Resolving an incorrect storage type problem

About unified loggingUnified logging and legacy logging are the two forms of debug logging used inNetBackup. All NetBackup processes use one of these forms of logging. Serverprocesses and client processes use unified logging.

Unified logging creates log file names and messages in a standardized format.These logging files cannot be easily viewed with a text editor. They are in binaryformat and some of the information is contained in an associated resource file. Onlythe vxlogview command can assemble and display the log information correctly.

Unlike legacy logging, unified logging does not require that you create loggingsubdirectories. Log files for originator IDs are written to a subdirectory with thename specified in the log configuration file. All unified logs are written tosubdirectories in the following directory:

install_path\NetBackup\logsWindows

/usr/openv/logsUNIX

5Chapter

You can access logging controls in the NetBackup Administration Console. Inthe left pane, expand NetBackup Management > Host Properties > MasterServers or Media Servers. Double-click the server you want to change. In the leftpane of the dialog box, click Logging.

You can also manage unified logging by using the following commands:

Modifies the unified logging configuration settings.vxlogcfg

Manages the log files that the products that support unified logginggenerate.

vxlogmgr

Displays the logs that unified logging generates.

See “Examples of using vxlogview to view unified logs” on page 94.

vxlogview

These commands are located in the following directory:

install_path\NetBackup\binWindows

/usr/openv/netbackup/binUNIX

See the NetBackup Commands Reference Guide for a complete description aboutthese commands.

More information about legacy logging is available.

See “About legacy logging” on page 95.

About using the vxlogview command to view unified logsUse the vxlogview command to view the logs that unified logging creates. Theselogs are stored in the following directory.

/usr/openv/logsUNIX

install_path\NetBackup\logsWindows

Unlike the files that are written in legacy logging, unified logging files cannot beeasily viewed with a text editor. The unified logging files are in binary format, andsome of the information is contained in an associated resource file. Only thevxlogview command can assemble and display the log information correctly.

You can use vxlogview to view NetBackup log files as well as PBX log files.

To view PBX logs using the vxlogview command, do the following:

93Toubleshooting AdvancedDiskAbout unified logging

■ Ensure that you are an authorized user. For UNIX and Linux, you must haveroot privileges. For Windows, you must have administrator privileges.

■ To specify the PBX product ID, enter -p 50936 as a parameter on the vxlogview

command line.

vxlogview searches all the files, which can be a slow process. Refer to the followingtopic for an example of how to display results faster by restricting the search to thefiles of a specific process.

Examples of using vxlogview to view unified logsThe following examples demonstrate how to use the vxlogview command to viewunified logs.

Table 5-1 Example uses of the vxlogview command

ExampleItem

vxlogview -p 51216 -d allDisplay all theattributes of the logmessages

Display the log messages for NetBackup (51216) that show onlythe date, time, message type, and message text:

vxlogview --prodid 51216 --display D,T,m,x

Display specificattributes of the logmessages

Display the log messages for originator 116 (nbpem) that wereissued during the last 20 minutes. Note that you can specify -onbpem instead of -o 116:

# vxlogview -o 116 -t 00:20:00

Display the latest logmessages

Display the log messages for nbpem that were issued during thespecified time period:

# vxlogview -o nbpem -b "05/03/15 06:51:48 AM"-e "05/03/15 06:52:48 AM"

Display the logmessages from aspecific time period

94Toubleshooting AdvancedDiskAbout unified logging

Table 5-1 Example uses of the vxlogview command (continued)

ExampleItem

You can use the -i option to specify an originator for a process:

# vxlogview -i nbpem

The vxlogview -i option searches only the log files that thespecified process (nbpem) creates. By limiting the log files that ithas to search, vxlogview returns a result faster. By comparison,the vxlogview -o option searches all unified log files for themessages that the specified process has logged.

Note: If you use the -i option with a process that is not a service,vxlogview returns the message "No log files found." A processthat is not a service has no originator ID in the file name. In thiscase, use the -o option instead of the -i option.

The -i option displays entries for all OIDs that are part of thatprocess including libraries (137, 156, 309, etc.).

Display results faster

You can search the logs for a particular job ID:

# vxlogview -i nbpem | grep "jobid=job_ID"

The jobid= search key should contain no spaces and must belowercase.

When searching for a job ID, you can use any vxlogviewcommand option. This example uses the -i option with the nameof the process (nbpem). The command returns only the log entriesthat contain the job ID. It misses related entries for the job that donot explicitly contain the jobid=job_ID.

Search for a job ID

See the NetBackup Commands Reference Guide for a complete description of thevxlogview command. The guide is available through the following URL:

http://www.veritas.com/docs/DOC5332

About legacy loggingLegacy logging and unified logging are the two forms of debug logging used inNetBackup. All NetBackup processes use either unified logging or legacy logging.

See “About unified logging” on page 92.

95Toubleshooting AdvancedDiskAbout legacy logging

In legacy debug logging, each process creates log files of debug activity in its ownlogging directory. The NetBackup legacy debug log directories are located in thefollowing directories:

install_path\NetBackup\logsinstall_path\Volmgr\debug

Windows

/usr/openv/netbackup/logs/usr/openv/volmgr/debug

UNIX

These top-level directories can contain a directory for each NetBackup process thatuses legacy logging. By default, NetBackup creates only a subset of all of thepossible log directories. For example, the following directories are created by defaulton UNIX servers:

■ nbfp

■ nbliveup

■ nblogadm

■ user_ops

To enable logging for all of the NetBackup processes that use legacy logging, youmust create the log file directories that do not already exist, unless you use theLogging Assistant. For more information about the Logging Assistant, see theNetBackup Administrator's Guide, Volume I. The guide is available at the followinglocation:

http://www.veritas.com/docs/DOC5332

You can use the following batch files to create all of the debug log directories atonce:

■ Windows: install_path\NetBackup\Logs\mklogdir.bat

■ UNIX: usr/openv/netbackup/logs/mklogdir

See the NetBackup Commands Reference Guide for a complete description aboutthe mklogdir command. The guide is available at the following location:

http://www.veritas.com/docs/DOC5332

After the directories are created, NetBackup creates log files in the directory thatis associated with each process. A debug log file is created when the processbegins. Each log file grows to a certain size before the NetBackup process closesit and creates a new log file.

96Toubleshooting AdvancedDiskAbout legacy logging

To enable debug logging for the NetBackup Status Collection Daemon (vmscd),create the following directory before you start nbemm.

install_path\Volmgr\debug\vmscd\Windows

/usr/openv/volmgr/debug/vmscdUNIX

As an alternative, you can restart vmscd after creating the directory.

Creating NetBackup log file directories for AdvancedDiskBefore you configure your NetBackup feature, create the directories into which theNetBackup commands write log files. Create the directories on the master serverand on each media server that you use for your feature. The log files reside in thefollowing directories:

■ UNIX: /usr/openv/netbackup/logs/

■ Windows:install_path\NetBackup\logs\

More information about NetBackup logging is available in the NetBackup LoggingReference Guide, available through the following URL:

http://www.veritas.com/docs/DOC5332

To create log directories for NetBackup commands

◆ Depending on the operating system, run one of the following scripts:

UNIX: /usr/openv/netbackup/logs/mklogdir

Windows: install_path\NetBackup\logs\mklogdir.bat

To create the tpconfig command log directory

◆ Depending on the operating system, create the debug directory and thetpcommand directory (by default, the debug directory and the tpcommand directorydo not exist). The pathnames of the directories are as follows:

UNIX: /usr/openv/volmgr/debug/tpcommand

Windows: install_path\Veritas\Volmgr\debug\tpcommand

NetBackup AdvancedDisk log filesYou can monitor NetBackup AdvancedDisk activity and status by viewing theNetBackup log files.

97Toubleshooting AdvancedDiskNetBackup AdvancedDisk log files

Some NetBackup commands or processes write messages to their own log files.For those commands and processes, the log directories must exist so that the utilitycan write log messages.

See “Creating NetBackup log file directories for AdvancedDisk” on page 97.

Other processes use Veritas unified log (VxUL) files. Each process has acorresponding VxUL originator ID. VxUL uses a standardized name and file formatfor log files. To view VxUL log files, you must use the NetBackup vxlogview

command.

More information about how to view and manage VxUL log files is available. Seethe NetBackup Logging Reference Guide:

http://www.veritas.com/docs/DOC5332

The following are the component identifiers for log messages:

■ An sts_ prefix relates to the interaction with the plug-in that writes to and readsfrom the storage.

■ An encrypt prefix relates to interaction with the encryption plug-in.

■ A KMSCLIB prefix relates to interaction with the NetBackup Key ManagementService.

Most interaction occurs on the NetBackup media servers. Therefore, the log fileson the media servers that you use for disk operations are of most interest.

Warning: The higher the log level, the greater the affect on NetBackup performance.Use a log level of 5 (the highest) only when directed to do so by a Veritasrepresentative. A log level of 5 is for troubleshooting only.

Specify the NetBackup log levels in the Logging host properties on the NetBackupmaster server. The log levels for some processes specific to certain options are setin configuration files as described in Table 5-2.

Table 5-2 describes the logs.

98Toubleshooting AdvancedDiskNetBackup AdvancedDisk log files

Table 5-2 NetBackup logs

ProcessesOIDActivity

Messages appear in the log files for the following processes:

■ The bpbrm backup and restore manager.■ The bpdbm database manager.■ The bpdm disk manager.■ The bptm tape manager for I/O operations.

The log files reside in the following directories:

■ UNIX: /usr/openv/netbackup/logs/■ Windows:install_path\NetBackup\logs\

N/ABackups andrestores

The nbjm Job Manager.117Backups andrestores

The bpdbm database manager log files.

The log files reside in the following directories:

■ UNIX: /usr/openv/netbackup/logs/bpdbm■ Windows:install_path\NetBackup\logs\bpdbm

N/AImage cleanup,verification, import,and duplication

The nbemm process.111Deviceconfiguration

The Disk Service Manager process that runs in the Enterprise Media Manager (EMM)process.

178Deviceconfiguration

The Storage Server Interface process that runs in the Remote Manager and MonitorService. RMMS runs on media servers.

202Deviceconfiguration

The Remote Disk Service Manager interface (RDSM) that runs in the Remote Managerand Monitor Service. RMMS runs on media servers.

230Deviceconfiguration

AdvancedDisk troubleshootingThe following may help you troubleshoot AdvancedDisk:

99Toubleshooting AdvancedDiskAdvancedDisk troubleshooting

Table 5-3 AdvancedDisk troubleshooting

SolutionProblem

If NetBackup cannot access the storage, one possible cause is that the storage serverwas created with the incorrect nbdevconfig storage type (-st) value. AnAdvancedDisk storage server -st value is 5 (formatted disk, directly attached); valuesother than 5 are incorrect.

More procedural information is available about resolving this problem.

See “Resolving an incorrect storage type problem” on page 100.

Unable to access storage

AdvancedDisk does not support Common Internet File System (CIFS). If you try toconfigure multiple storage servers, NetBackup returns the following message:

DSM does not support to use multiple Windows Storage Serversfor server type: AdvancedDisk.

Multiple storage servers onWindows

If a volume becomes unmounted, NetBackup changes the volume state to DOWN.NetBackup jobs that require that volume fail.

To change the volume state to UP, mount the file system

Volume state changes toDOWN when volume isunmounted

If recovery mechanisms do not protect a disk that fails, the backup images on that diskare lost. Operating system read and write errors may occur for the volume thatrepresents the disk. NetBackup cannot use that volume because of the errors, andNetBackup jobs may fail.

To prevent NetBackup from trying to read from or write to the disk, you must changethe volume state to DOWN in NetBackup. If the volume represents other disks that stillfunction, those disks are not available because the volume state is DOWN. You maybe able to read from the volume by mounting it manually. If so, you may be able torecover image fragments from any disks that did not fail.

If you replace a failed disk, you can use the same mount point for the replacementdisk. Change the volume state to UP, and NetBackup uses that volume again.

Any valid backup images on that volume are available for restores.

Disk failure - AdvancedDisk

Resolving an incorrect storage type problemFirst determine the storage server value to verify that the storage server was createdwith the incorrect nbdevconfig storage type value. Then proceed to resolving theproblem if necessary.

100Toubleshooting AdvancedDiskResolving an incorrect storage type problem

To determine the storage server value

◆ Invoke the following command on the master server or a media server thatfunctions as a storage server:

The following output shows an incorrect value for AdvancedDisk:

Storage Server : halo

Storage Server Type : AdvancedDisk

Storage Type : Formatted Disk, Network Attached

To resolve an incorrect storage type problem

1 Delete all disk pools that use the storage server.

2 Delete the storage server.

3 Reconfigure the storage server.

4 Recreate the disk pools.

5 If necessary, specify the new disk pools in the storage units.

If you recreated the disk pools with the same names as the ones you deleted,this step is not necessary.

See “AdvancedDisk troubleshooting” on page 99.

101Toubleshooting AdvancedDiskResolving an incorrect storage type problem

AActive secondary operations 64AdvancedDisk

CIFS requirements 13license key for 9load balancing 8NFS requirements 14volume managers 40

AdvancedDisk disk storage units 14

BBackup

operation 63BasicDisk storage units

credentials for CIFS 14bpcd client process 14bpinetd client process 14

CCIFS

configuring for AdvancedDisk encryption 41credentials for disk storage units 14for AdvancedDisk 34, 47for AdvancedDisk encryption 41–42

Ddata classifications

in storage lifecycle policies 60, 63disk pools

changing the state 79Duplication

optimized 64

Eencryption

see also 19

FFQDN or IP Address property in Resilient Network

host properties 68

Jjob ID search in unified logs 95

Llegacy logging 96

directories 96locations 96

license keyfor AdvancedDisk 9

logginglegacy 96

MMedia Server Deduplication Pool

changing the state 79Media server storage unit setting 57mklogdir.bat 96

NNBRMMS (NetBackup Remote Management and

Monitor Service) 14NDMP

storage units 64

OOpenStorage

optimized duplication 64OpenStorage Disk Option 59

Ppolicies

changing properties 65creating 65

Postponed secondary operations 64Priority for secondary operations 63

Index

RReplication Director

Policy Configuration Wizard, unsupported 65Resiliency property in Resilient Network host

properties 68Resilient connection

Resilient Network host properties 66Resilient Network host properties 66

FQDN or IP Address property in 68Resiliency property in 68

Sserver

NetBackupdebug logs 96snapshots

operation type 63Status Collection Daemon 97storage lifecycle policies

Active secondary operations 64best practices document 60Data classification setting 63hierarchy 61operations 60Postponed secondary operations 64Priority for secondary operations 63Storage lifecycle policy name 63utility 59Validate Across Backup Policies button 64

storage unit groupsand storage lifecycle polices 64

Ttroubleshooting

AdvancedDisk disk failure 100AdvancedDisk volume state changes to DOWN

when volume is unmounted 100multiple AdvancedDisk storage servers on

Windows 100unable to access AdvancedDisk storage 100

UUNC path

with CIFS and AdvancedDisk storage units 15with CIFS and BasicDisk storage units 15

unified logging 92format of files 93location 92

VValidate Across Backup Policies button in SLP 64Validation Report tab 64vmscd 97vmscd directory 97volume managers with AdvancedDisk 40vxlogview command 93

with job ID option 95

Wwizards

Policy Configuration 65

103Index