7 NBU Virtual Appliance

NetBackup Virtual Appliance
Technical Presentation
Hakim Benzit
Sr Systems Engineer
Contents

Technical Presentation
Introduction to NetBackup NetBackup Virtual Appliance Additional Information and

1 Appliances 2 Features and Capabilities 3 Resources
2 2016 Veritas Technologies LLC. All rights reserved.

Introduction to NetBackup Appliances
NetBackup Appliances family
NetBackup Virtual Appliance NetBackup 5240 Appliance NetBackup 5330 Appliance
Virtual Appliance Combined NetBackup NetBackup Master Dedicated NetBackup

Master/Media Server and/or Media Server Media Server
2 TB back-end storage 201 TB max storage 687 TB max storage
limit Enterprise hardware Enterprise hardware
vSphere 5.5 and 6.0 platform platform
Remote or Moderate data Demanding data

branch offices center workloads center workloads

Features and Capabilities
Cost-effective addition to the NetBackup
Appliances family designed for the protection of
remote or branch offices
Introduction

Data protection for remote and branch office locations
Remote or Branch Office Primary Data Center

VPN
VMware 5.5/6.0 VM
WAN FRIENDLY REPLICATION 5240

NetBackup (A.I.R./Optimized Duplication) Physical
Virtual Appliance Appliances
(2TB back-end storage limit) 5330 (5330 and 5240)

Virtual Appliance targeted use case
Virtual Appliance Use Case

Protection of remote or branch office locations
Virtual Appliance For Remote and Branch Offices

Combined NetBackup Master and
Media Server solution
2 TB back-end storage limit
Requires vSphere 5.5 or 6.0

Configuration details
Virtual Appliance Configuration

Specifications and other details
Virtual Appliance Virtual Machine Resources
SPECIFICATIONS
8 vCPUs
16 GB RAM
Virtual Networking
Single NIC configuration (vmxnet3)
Appliance Deployment Method
OVF template

Configuration details
Virtual Appliance Hardware Layout

Disk volume information
Virtual Appliance System Disk Volume Basic Disk Volume

Volume Space Volume Space
/ 90 GB /msdp 2000 GB
/repository 992 MB /advdisk 30 GB
/inst 49 GB /msdpcat 20 GB
/logs 98 GB /nbucat 30 GB
/boot 477 MB /config 50 GB
reserved 257 GB
swap 16 GB

Deployment - requirements
Virtual Appliance Deployment

Deployment requirements
VMware vCenter Server user account

REQUIREMENTS
DEPLOYMENT
Access to the vSphere Web Client

vSphere version 5.5 or 6.0 vCenter ESXi
vCenter Server account must have minimum privileges
required to deploy an OVF template

Deployment - prerequisites

Deployment prerequisites
Datacenter and storage AdvancedDisk/MSDP

INFORMATION
details pool names and storage

REQUIRED
Appliance hostname/IP units

Netmask and Gateway IP New admin/maintenance
account passwords
DNS information Default appliance password: P@ssw0rd

Deployment - stages

Deployment stages
OVF Deployment Automatic Configuration

Deployment Wizard invoked Virtual Appliance created and
STAGE 1
STAGE 2
and user inputs gathered booted for the first time
User inputs validated by wizard Auto-configured as master
(but not checked) Success if deployment stage
OVF/OVA copied to VMware inputs are correct

Combined Master and Media Server solution
Virtual Appliance Role

Combined Master/Media Server deployed as separate NetBackup domain
Combined Master/Media Server Separate NetBackup Domain
Performs functions of NetBackup Virtual Appliances creates new

Master Server and Media Server NetBackup domain
(no additional media server)
Copying of backup images to
Controls policies and schedules, central NetBackup data center
and manages storage (domain) achieved using A.I.R.

Connecting On-Premises to Cloud: The Virtual
Appliance Family
ROBO A Primary Datacenter
or
VA Service Provider
OPTIMIZED DEDUPLICATION
ROBO B WAN FRIENDLY REPLICATION
VA
Expand Backup Service Levels to ROBO while ..
Minimizing CapEx impact Minimize the expertise required to deploy

Maximize use of virtual & storage estate Minimize costs by standardizing
Minimize bandwidth required Maximize Disaster Recovery Readiness
1
NetBackup 3.0 Virtual Appliance Technical Presentation
3
Key attributes
Virtual Appliance Key Attributes
Target Infrastructure Supported Roles

VMware 5.5 Master/media server only
VMware 6.0 Creates a new NBU domain
Storage Configuration Networking/Deployment

2 TB front-end license Single NIC configuration
2 TB back-end storage limit OVA deployment
Security Data Protection

Symantec Data Center Security Auto Image Replication (A.I.R.)
Matches physical appliance Remote-to-DC protection

Differences and limitations
Virtual Appliance vs. Hardware-based Appliances

Differences in features and capabilities
Storage Requirements Restricted Features

Requires approximately No NDMP Support
2.66 TB of available storage No Copilot Support
Disk Configurations No OST Support
No Cloud Storage Support
Supports AdvancedDisk
and MSDP disk pools only No Tape, Library and FC Support

Resiliency and redundancy
Virtual Appliance Resiliency

Redundancy built into NetBackup Virtual Appliance at multiple levels
Secure, hardened OS platform
MANAGEMENT
CallHome and proactive services
SOFTWARE
Integrated journaling file system Threat Protection

Storage management capabilities Intrusion Detection Policies
In-flight AES encryption Single Patch Installation
At-rest AES encryption Pre and post-patch checkpoints
Support for Storage Unit Groups Policy-driven data duplication

Software components
NetBackup Virtual Appliance Software Specifications
Operating System
Veritas Appliance Operating System (VxOS)
VxOS
Based on RedHat Linux

redhat
base
Only required packages installed for optimal security
NetBackup Appliance Software

Appliances
NetBackup Appliance software release 3.0

Symantec Data Center Security
v3.0
Streamlined software components for optimal security

Virtual Appliance management options
Virtual Appliance Management Options

Administrator access
ADMIN CONSOLE
Command line secure shell (SSH) Standard NetBackup administrator
COMMAND LINE
console
Supports most administration
functions Java based
Can be use in place of Appliance Supports all administrative
Web Console functions

Hardened appliance operating system
Hardened Appliance Operating System

Preventing unauthorized access to the core operating system of NetBackup Appliances
Virtual Appliance
Minimized Attack Surface
Root account masked
Unneeded packages removed
Security vulnerabilities closed

Veritas AutoSupport system
Veritas AutoSupport
Offering customers an automated, accelerated support experience
Veritas Secure Operations Center

GLOBAL APPLIANCE UPTIME METERS CALLHOME ENABLED
! BY REGION Analytics
Veritas Appliance Customers
AMERICAS
GLOBAL ALERTS Open Resolved

AVERAGE TIME 97%
TO RESOLUTION Ticketing
EMEA
76% SFDC
HW TICKETS
APJ
87% Replacement
! AMERICAS EMEA APJ
Monitoring

Software updates and patching
Appliance Software Updates

Unified patching and updates
Unified Patching Checkpoint Rollback

One patch updates the entire Revert to a previous appliance
software stack configuration
Operating system platform and Pre-upgrade checkpoint

components Post-upgrade checkpoint
NetBackup core software User-directed checkpoint
Security features Factory checkpoint


Policy-based IPS and IDS protection
Intrusion Prevention Intrusion Detection

IPS Real-time proactive IDS Real-time monitoring and
enforcement auditing
Intrusion/Malware Prevention Host Intrusion Detection

OS Hardening File Integrity Monitoring
Application Control Configuration Monitoring
Privileged User access control Track and Monitor user access
Vulnerability & Patch Mitigation Logging and Event Reporting

WAN Optimization
WAN Optimization (WAN Opt)

Built-in Packet Delay Congestion Control (PDCC) technology
WAN Optimization Benefits

Improved Auto Image Replication performance
Better results in high-latency network conditions
WAN Opt
Operates on individual TCP connections

Performance improvements
No additional network overhead

Replicating backup images to a central NetBackup data center
Virtual Appliance Backup Image Replication

Uses Auto Image Replication (AIR) and controlled Storage Lifecycle Policies (SLP)
Domain A (Remote or Branch Office) Domain B (Central Data Center)

Client (A) Virtual Appliance Master/Media (A) 5240 Master (B) 5330 Media (B) Tape (B)
SLP
SLP
Import
OST Device
Backup
Event
WAN
OST Optimized Duplicate

Duplication Copy
METADATA Catalog Data
IMAGE Backup Data

Troubleshooting
25 NetBackup 3.0 Virtual Appliance Technical Presentation

Troubleshooting Automatic Configuration
If an error occurs during the automatic configuration process, the OVF
deployment wizard behaves as if the deployment was successful.
However, if you log on to the NetBackup Virtual Appliance Shell Menu and run
the Main > Appliance > Status command, the appliance appears to be
in a factory state and is not configured as a master appliance.
The following are a few common reasons for the automatic configuration to fail:
Typos in the deployment wizard
Incorrect IP addresses
Incorrect host name or DNS information
Failures to correctly forward and reverse lookup given hostname

Troubleshooting Automatic Configuration
You can check the following logs for additional details to help determine the
exact error that occurred:
The deployment log contains high-level information about deployment failures
Note: This log only exists if a deployment failure has occurred
The boot log contains more in-depth information about deployment failures and other
errors
Log on to the NetBackup Virtual Appliance Shell Menu and enter the Main > Support >
Logs > Browse command
At the LOGROOT/> prompt, enter cd APPLIANCE and then less deployment.log or
boot.log
If there is network access to the host, you can access the logs via NFS/CIFS
share by Logs > Share > Open on the appliance

Troubleshooting Recovering from Failed Automatic
Configuration
To manually configure the appliance networking from the NetBackup Appliance
Shell Menu
1. Open an SSH session to the appliance to log on to the NetBackup Appliance
Shell Menu.
2. Navigate to the Main > Network view and enter the following command to
configure the IP address of a single network that you want your appliance to
connect to:
Configure IPAddress NetMask GatewayIPAddress eth1
Where IPAddress is the new IP address, Netmask is the netmask that corresponds to the IP address,
and GatewayIPAddress is the IP address of the default gateway for the interface.
The IPAddress and the GatewayIPAddress can be IPv4 or IPv6. Only global-scope and unique-local
IPv6 addresses are allowed.

Configuration
3. From the Main > Network view, use the following command to set the
appliance DNS domain name:
DNS Domain Name
Where Name is the new domain for the appliance.
4. From the Main > Network view, us the following command to add the DNS
name server to your appliance configuration:
DNS Add NameServer IPAddress
Where IPAddress is the IP address of the DNS server.
The address can be either IPv4 or IPv6. Only global-scope and unique local IPv6 addresses area
allowed

Configuration
5. From the Main > Network view, use the following command to set the host
name for your appliance:
Hostname Set Name
Where Name is a short host name of a fully qualified domain name (FQDN) for the appliance. As a
best practice, Veritas recommends that you use FQDN.
Caution: The host name can only be set during initial deployment. After the initial deployment has
completed successfully, the only way to change the hostname is to redeploy the appliance.
Note: If you plan to configure Active Directory (AD) authentication on this appliance, the host name
must be 15 characters or less. Otherwise, AD configuration can fail.

Configuration
6. Use the following command to set the role of the appliance. This command
will ask all the standard questions of role configuration.
Main > Appliance > Master
7. Use the following command to verify that the networking and the role
configuration were successful:
Main > Appliance > Status
The command out put should contain a message similar to the following:
Appliance Version is 3.0
Appliance is configured as master appliance.

Configuration
Since the NetBackup catalog backup policy is not automatically created in this
scenario, make sure that you create your own catalog backup policy after you
complete the other configuration steps.
If this did not solve the issue, redeploy the appliance.

Troubleshooting - Network
Most common failures will be networking confirm that IP address, Gateway,
DNS domain(s) and hostname were all set correctly using the CLISH
Confirm forward and reverse lookup is working for the hostname
If you see Waiting for network connection multiple times in boot.log, you may
have a network issue
If unable to set any of the network parameters a clear error message can be
found in deployment.log
ERROR: NetBackup role configuration failed
ERROR: Check the boot log

Troubleshooting NBVA Storage Cap Enforcement
Storage cap is set at 2TB, if additional storage is configured on the appliance that
exceeds this cap, this is considered an unsupported configuration and all the disk
pools are marked down.
How customers would get into this situation:
If they add configure additional virtual disks
If they increase size of deployed disks
If they configure additional OST/Cloud disk pools
When/How this is detected:
Every 15 minutes NBU will check for integrity of NBVA
What happens when this is detected:
If unsupported disk configuration is detected then all the Disk Pools configured on the NBVA will
be marked as DOWN
No backups / restore operations can be run once Disk Pools are marked down
Disk Pools can not be marked up manually

Troubleshooting NBVA Storage Cap Enforcement
How to resolve this:
Delete unsupported OST disk pools / disk volumes / virtual disks that were added to the
NBVA.
It might take up to 15 minutes for NBU to detect this change and to mark all disk pools as up
again.
During these 15 minutes, disks will stay down and errors will continue to get logged in
bperror log.

Known limitations
NetBackup Virtual Appliance Web Console is not supported
Veritas Remote Management interface is not supported
Recovery operations such as checkpoints and factory reset is not available
Cannot add additional media servers to the appliance
Backend storage cannot be expanded beyond 2 TB (4 TB roadmap)
Copilot is not available
Storage features not supported: Network features not supported:

Fibre Channel/Transport
Tape devices and libraries
SAN Client
NetBackup Cloud Storage VLAN
The NetBackup Open Storage option (OST) Link Aggregation (bonds)
ipsec
iSCSI

Screenshots

vSphere Client UI / Resource Allocation

vSphere Client UI / Performance-UPDATE

Summary
NBVA is a new offering that is meant for remote offices
NBVA is not designed to work with large workloads
Performance is very much dependent on underlying hardware and the load on
the virtual infrastructure
We strongly recommend thick provisioned disks but we cannot force this
There is limited disk space on NBVA, be aware of this when enabling logs

Thank you!
Hakim Benzit
Hakim.Benzit@veritas.com
Copyright 2016 Symantec Corporation. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Symantec Corporation
or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either
express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

7 NBU Virtual Appliance

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

7 NBU Virtual Appliance

Transféré par

Droits d'auteur :

Formats disponibles

NetBackup Virtual Appliance

NetBackup Virtual Appliance

Introduction to NetBackup NetBackup Virtual Appliance Additional Information and

2 2016 Veritas Technologies LLC. All rights reserved.

NetBackup Virtual Appliance NetBackup 5240 Appliance NetBackup 5330 Appliance

Virtual Appliance Combined NetBackup NetBackup Master Dedicated NetBackup

Remote or Moderate data Demanding data

3 2016 Veritas Technologies LLC. All rights reserved.

NetBackup Virtual Appliance

Remote or Branch Office Primary Data Center

WAN FRIENDLY REPLICATION 5240

5 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Use Case

Virtual Appliance For Remote and Branch Offices

6 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Configuration

Virtual Appliance Virtual Machine Resources

7 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Hardware Layout

Virtual Appliance System Disk Volume Basic Disk Volume

8 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Deployment

VMware vCenter Server user account

Access to the vSphere Web Client

9 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Deployment

Datacenter and storage AdvancedDisk/MSDP

details pool names and storage

Appliance hostname/IP units

10 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Deployment

OVF Deployment Automatic Configuration

11 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Role

Combined Master/Media Server Separate NetBackup Domain

Performs functions of NetBackup Virtual Appliances creates new

12 2016 Veritas Technologies LLC. All rights reserved.

Expand Backup Service Levels to ROBO while ..

Minimizing CapEx impact Minimize the expertise required to deploy

Virtual Appliance Key Attributes

Target Infrastructure Supported Roles

Storage Configuration Networking/Deployment

Security Data Protection

14 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance vs. Hardware-based Appliances

Storage Requirements Restricted Features

15 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Resiliency

Secure, hardened OS platform

Integrated journaling file system Threat Protection

16 2016 Veritas Technologies LLC. All rights reserved.

NetBackup Virtual Appliance Software Specifications

Based on RedHat Linux

NetBackup Appliance Software

NetBackup Appliance software release 3.0

17 2016 Veritas Technologies LLC. All rights reserved.

Virtual Appliance Management Options

18 2016 Veritas Technologies LLC. All rights reserved.

Hardened Appliance Operating System

19 2016 Veritas Technologies LLC. All rights reserved.

Veritas Secure Operations Center

GLOBAL ALERTS Open Resolved

! AMERICAS EMEA APJ

20 2016 Veritas Technologies LLC. All rights reserved.