Adaptec 5325301638 - Snap Server 4500 NAS, Administrator'S Manual

Page 1: ...Snap Server Administrator Guide GuardianOS v3 2 For GuardianOS powered Snap Servers and Snap Disk Expansion Arrays ...

Page 2: ......

Page 3: ...Microsystems Inc Netscape is a registered trademark of Netscape Communications Corp AppleShare AppleTalk Macintosh and MacOS are registered trademarks of Apple Computer BakBone and NetVault are trademarks of BakBone Software AIX is a registered trademark of IBM Corporation OpenView and HP UX are trademarks or registered trademarks of Hewlett Packard Company BrightStor Unicenter TNG ARCserve Inocul...

Page 4: ...IRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF ...

Page 5: ...o or to a national or resident of any country to which the U S embargoes goods or to anyone on the U S Treasury Department s list of Specially Designated Nationals or the U S Commerce Department s Table of Denial Orders You agree to ascertain necessary licensing procedures and obtain required licenses before exporting or re exporting either You also agree to indemnify Snap Appliance and assume all...

Page 6: ...ngineer the Program except as expressly permitted under applicable law c Remove or alter any of the copyright notices or other proprietary markings on any copies of the Program or d Perform publish or release benchmarks or other comparisons of the Program without CA s prior written consent 3 CA may immediately terminate this Agreement in the event of any failure to comply with any of the above ter...

Page 7: ...the Initial Setup Wizard 8 Configuring an APC Brand UPS 9 SnapExtensions 10 Add On Features 11 Finding More Information 12 Chapter 2 Network Access to the Server 13 TCP IP Options 14 Configuring TCP IP Settings 15 Default Protocol Access Settings 17 Windows SMB Access 17 NFS Access 19 Apple File Protocol Access 20 FTP Access 21 HTTP HTTPS Access 22 DHCP Server 22 Chapter 3 User Group Management 23...

Page 8: ...isk Management and Usage 41 Chapter 6 Share and File Access 45 Components and Options 46 SnapTrees Security Models 47 Creating Shares 48 Share Level Access Permissions 49 Setting File and Folder Permissions Windows 50 Chapter 7 Snapshots 55 Snapshot Management and Usage 55 Estimating Snapshot Pool Requirements 57 Adjusting Snapshot Pool Size 57 Accessing Snapshots 58 Coordinating Snapshot and Back...

Page 9: ... Scan Job Configuration and Scheduling 73 Signature Updates 75 Alert Options 79 The Move Directory 80 Log View 81 Chapter 10 Troubleshooting Snap Servers 83 The Meaning of LED Indicators 84 System Reset Options 92 Networking Issues 95 Miscellaneous Issues 99 Phone Home Support 100 Appendix 11Third Party Backup Applications 103 Preparing to Install a Third Party Backup Agent 104 Pre installation Ta...

Page 10: ...x Snap Server Administrator Guide ...

Page 11: ...nce com support Simply type in your question to view a list of possible resolutions to known issues However if none of the listed topics resolves your inquiry you can forward the question to our Technical Support department who will then e mail you with a response To obtain additional service or technical support for your Snap Server call 1 888 338 SNAP North America or 1 408 558 4657 Internationa...

Page 12: ...hasis The introduction of new terms File names Settings you select or enter in the Administration Tool Arial Bold Navigational paths command buttons and navigational links Arial Text you type directly into a text field a command line or a Web page Buttons on a keyboard Courier Italic A variable for which you must substitute a value Courier Bold Commands you enter in a command line interface Right ...

Page 13: ...arty backup agents The online help also provides detailed instructions on using the Administration Tool Release Notes html User CD Contains late breaking information corrections and known issues concerning Snap Servers Upgrade html User CD Provides instructions for upgrading the GuardianOS software Snap Server Manager Install html User CD Provides instructions for installing the Snap Server Manage...

Page 14: ...xiv Snap Server Administrator Guide ...

Page 15: ...on arrays Snap Server 15000 The Snap Server 15000 is a high performance 1U NAS head that supports multiple Snap Disk 30SA or Snap Disk 32SA expansion arrays and contains four redundant hot swappable disk drives Snap Disk 30SA The Snap Disk 30SA is a 3U expansion array with 16 hot swappable SATA disk drives Works with the Snap Servers 15000 and 18000 only Snap Disk 32SA The Snap Disk 32SA is a 3U e...

Page 16: ...0 HTTP HTTPS v1 1 File Transport Protocol FTP Network Client Types Microsoft Windows 95 98 ME NT 4 2000 XP 2003 Macintosh Systems OS 8 x 9 x X v10 x Sun Solaris v7 8 9 HP UX v11 AIX v4 3 3 5 3 Red Hat Linux v6 2 7 2 8 0 9 0 File Server Emulation Windows 2000 2003 NT 4 AppleShare 6 0 NFS v2 v3 Network Security CA eTrust Antivirus software Microsoft Active Directory Service ADS Windows NT Domain mem...

Page 17: ...tion RAID Options RAID 5 drive striping with parity For each array the size of one drive is reserved for parity Provides the best combination of performance and data protection RAID 1 drive mirroring One or more drives duplicate one drive for maximum data protection RAID 0 drive striping Large virtualdrive with data striped across all drives of the array to provide maximum performancewith no loss ...

Page 18: ...2000 Me XP or Dantz Retrospect Macintosh NDMP v2 3 Support Symantec PowerQuest DataKeeper software unlimited user license included for backup and restore of Windows clients Symantec PowerQuest V2i Protector Desktop Edition for image based backup and restore of Windows clients Compatible with Symantec PowerQuest V2i Protector Server Edition for image based backup and restore of Windows servers APC ...

Page 19: ...basis Installing Snap Server Manager You can download and install Snap Server Manager using the Install html file found on your Snap Server User CD Snap Server Manager can be installed to all client platforms including Windows Macintosh OS X Linux and UNIX The installation program allows you to download the required Java Virtual Machine JVM for each platform as necessary The client machine on whic...

Page 20: ... settings across any number of GuardianOS servers and identify when settings differ among servers For example comparing protocol access configuration for a group of servers may reveal that settings are consistent for Windows NFS and AFP but that differences exist among servers in HTTP HTTPS and FTP settings Scheduling operations to run during offpeak hours Operations can be scheduled to run on mul...

Page 21: ...default server name is SNAPnnnnnn where nnnnnn is the server number For example the name of a Snap Server with a server number of 610019 is SNAP610019 The server number is a unique numerics only string that appears on a label affixed to the inside of your Snap Server To view the label remove the front bezel 4200 and 4500 or read the LCD display 14000 and 18000 2 Connect to the server In a Web brow...

Page 22: ...e Snap Server time stamp applies when recording server activity in the event log Monitoring tab setting the create modify time on a file and when scheduling snapshot antivirus or S2S operations Edit the settings according to local conditions Changing the Administration Password The default administrator user name is admin and the default password is also admin A password must consist of 1 to 15 al...

Page 23: ... Initial Setup Wizard or at a later time by navigating to the System Register screen in the Administration Tooland clicking the Register Online Now link A separate browser window opens to a product registration form in which some of your product information is already entered Configuring an APC Brand UPS Snap Appliance recommends that you use a UPS with Snap Servers and Snap Disk expansion arrays ...

Page 24: ...ions of S2S The S2S data replication software has been redeveloped and now offers a more robust set of features than the previous versions of S2S The increased functionality of the new S2S is NOT COMPATIBLE with versions distributed prior to this release GuardianOS 3 1 S2S Evaluation Period The new S2S included with your Snap Server is fully operational for an evaluation period of 45 days but requ...

Page 25: ...s fully functional out of the box and requires no license For information on configuring the software see CA eTrust Antivirus BakBone NetVault Preinstalled backup software GuardianOS v3 0 later with a Workgroup Server license For information on installing and configuring NetVault see the documentation included with the NetVault CDs that shipped with your Snap Server NDMP Server Preinstalled NDMP a...

Page 26: ... the installation of third party backup agents The online help also provides detailed instructions on using the Administration Tool Release Notes html User CD Contains late breaking information corrections and known issues concerning Snap Servers Upgrade html User CD Provides instructions for upgrading the GuardianOS software Snap Server Manager Install html User CD Provides instructions for insta...

Page 27: ...nfigure the Snap Server for load balancing and failover Network protocols control which network clients can access the server Topics in Network Access TCP IP Options Configuring TCP IP Settings Default Protocol Access Settings Windows SMB Access NFS Access Apple File Protocol Access FTP Access HTTP HTTPS Access DHCP Server Tip The default settings enable access to the Snap Server via all protocols...

Page 28: ...currently supported Do not configure the switch ports that the Snap Server uses for GEC or FEC Tip Load balancing occurs only on Layer 3 routed protocols IP Failover This mode uses the first Ethernet port as the primary network interface and the second Ethernet port is held in reserve as the backup interface Redundant network interfaces ensure that an active port is available at all times If the p...

Page 29: ...iguration is not supported and will lead to unexpected results For a Network Bonding Configuration Load Balancing or Failover Network bonding technology treats two ports as a single channel with the network using one IP address for the server To take advantage of network bonding both ports must be physically connected to the network and a for load balancing connected to the same switch on the same...

Page 30: ...otherwise network throughput or connectivity to the server may be seriously impacted Changing from Auto to a Fixed Setting You can configure a fixed setting on the Network TCP IP screen in the browser based Administration Tool If you change this setting be sure to 1 configure the fixed setting in the Administration Tool first and second 2 configure the switch to the same fixed setting If you chang...

Page 31: ...r details in configuring these options Protocol Default Comments Windows CIFS SMB Enabled Allows access to Windows clients via the workgroup Workgroup NFS Enabled Allows universal access to all computers running NFS without client address restrictions Apple AFP Enabled Allows access over an AppleTalk or TCP IP network using the default zone FTP Enabled Allows access using the anonymous user accoun...

Page 32: ...ode page 1252 Microsoft Windows Code Page Latin 1 This code page developed by Microsoft as a Windows version of the Latin 1 code page contains most of the characters used in the US and Western Europe For additional information on this code page see the Microsoft specification Tip To determine the active code page on a Windows client open a DOS prompt and type chcp and then press Enter The active c...

Page 33: ...f a share and then clicking the NFS Access button along the bottom of the screen Support for NFS Consider the following technical information when configuring access for your NFS clients Supported Protocols Snap Servers support these versions of the NFS protocol Supported NFS Clients Snap Servers have been tested with these UNIX based networking clients Red Hat Linux 6 2 7 1 7 2 7 3 8 0 9 0 HP UX ...

Page 34: ...rver name the Add Server Name To check box on the Network AFP screen of the Administration Tool is enabled by default This option allows Macintosh applications to differentiate between shared folders with the same share name on multiple servers For example SHARE1 on SNAP61009 refers to the share named SHARE1 on the Snap Server named SNAP61009 Term Definitions Share A Snap Server share appears as a...

Page 35: ... 9 x and 10 x clients FTP Access FTP settings are configured on the Network FTP screen of the Administration Tool By default FTP clients can access the server using the anonymous user account which is mapped to the Snap Server s guest user account and AllUsers group account You can set share access and file access for anonymous FTP users by modifying permissions for these accounts For more granula...

Page 36: ...e Administration Tool Additionally you can require browser based clients to authenticate to the server Tip To access the CA eTrust Antivirus configuration interface on the Maintenance Antivirus screen HTTP must be enabled DHCP Server DHCP server settings are configured on the Network DHCP screen of the Administration Tool To configure the Snap Server as a DHCP server it must have a static IP addre...

Page 37: ...eyond the guest account Macintosh and FTP client login credentials can be duplicated locally on the sever Topics in User and Group Configuration Default User and Group Settings UID and GID Assignments Local Users and Groups Windows Workgroup or Domain NIS Domain Default User and Group Settings Snap Server default security configuration provides one share to the entire volume All network protocols ...

Page 38: ...r Local Users and Groups To simplify user access for Windows Workgroup or Macintosh clients duplicate their login credentials on the Snap Server That is create local accounts on the Snap Server that match those used to log into client workstations This strategy allows users to bypass the login procedure when accessing the Snap Server Caution This strategy applies only to local users Do not use dup...

Page 39: ...for Windows networking 1 you can enable guest account access to the Snap Server for all Windows clients 2 with ADS domains you can disable NetBIOS and 3 for NT and ADS domains you can specify a valid user name and password to join the domain Support for Windows Authentication This section summarizes important facts regarding the GuardianOS implementation of Windows authentication Function Navigati...

Page 40: ...n you use a dynamic domain server or a domain name server with an ADS server make sure the forward and reverse name lookup is correctly set up Interoperability with Active Directory Authentication The Snap Server supports the Microsoft Windows 2000 family of servers that run in native ADS mode or in mixed NT ADS mode Snap Servers can join Active Option Description Workgroup In a workgroup environm...

Page 41: ...a comment that makes the function of the account clear and 2 set the password to never expire NIS Domain NIS domains are configured on the Security NIS screen of the Administration Tool The Snap Server can join an NIS domain and function as an NIS client It can then read the users and groups maintained by the NIS domain Thus you must use the NIS server to make modifications Changes you make on the...

Page 42: ...NIS Domain 28 Snap Server Administrator Guide ...

Page 43: ...irements that demand a different configuration For example if the information on a Snap Server is mission critical but infrequently accessed creating a RAID 1 may be a more suitable configuration In another example some administrators prefer to keep certain sensitive data such as financial records in a separate file system for added security Topics in Storage Configuration Default Storage Configur...

Page 44: ...le in configuring the four disk drives of the 4500 the decision whether to include a hot spare in the RAID depends on the value you place on capacity vs high availability If capacity is paramount you would use all drives for storage if high availability were more important you Drives RAID Snap Server 18000 8 disk RAID 5 hot spare Snap Server 15000 Snap Server 4500 Snap Server 4200 4 disk RAID 5 No...

Page 45: ...strator groups the RAID from the expansion array with the existing RAID on the 4500 and then expands the size of the original volumes using the new storage from the expansion array Adapting to Unforeseen Requirements A Snap Server 14000 is originally configured by an administrator with two separate RAIDs each with its own hot spare Usage on the first RAID is higher than expected and lower on the s...

Page 46: ...reen as follows Hotspare of md0 RAID 1 Global Hotspare for md0 md1 md2 where the local hot spare is dedicated to a single RAID md0 and the global spare is available to three RAIDs md0 md1 and md2 Interaction When a drive in a RAID fails the system looks for a hot spare in the following order 1 If a local hot spare dedicated to the RAID exists use the local hot spare 2 If no local hot spare is avai...

Page 47: ...ntivirus software reside on the default volume If you delete the default volume these components will also be deleted To retain nvdb information you must back up the nvdb directory see page 63 before you delete the volume create your new storage configuration and then restore the directory After creating your new storage configuration you can reinstall the software by navigating to the Maintenance...

Page 48: ...model The security model of a volume determines the security model to which newly created SnapTree directory will default Security models for a volume can be changed on the Security SnapTrees screens Volume Management Tools The Snap Server offers several tools for monitoring and controlling how storage space on a volume is used Quotas Quotas are enabled viewed edited and deleted from the Storage Q...

Page 49: ...d group quota Expansion Arrays Snap Appliance offers three expansion arrays for increasing the capacity of Snap Servers The Snap Disk 10 The Snap Disk 10 storage subsystem is a 1U expansion array with four ATA disk drives and a single Serial ATA connector It ships as a 4 disk RAID 5 with no hot spare Up to two Snap Disk 10s can be connected to a Snap Server 4500 The Snap Disk 30SA The Snap Disk 30...

Page 50: ... install a SATA card on the Snap Server 4500 before connecting a Snap Disk 10 OS Requirements The Snap Server 4500 must have GuardianOS v2 6 or higher installed to interoperate with the Snap Disk 10 The Snap Disk 30SA The Snap Disk 30SA expansion array works only with a Snap Server 15000 head unit or Snap Server 18000 You can daisy chain up to seven Snap Disk 30SAs via optical and copper fibre cha...

Page 51: ... Preparing the Snap Server 18000 Some Snap Server 18000s ship with a fibre channel card installed for connectivity to Snap Disk 32SA expansion arrays If your server already has the fibre channel card no further preparation other than preparing rack space is necessary the Snap Disk 32SA comes with the necessary cables Otherwise you will need to purchase and install the Snap Appliance fibre channel ...

Page 52: ...ntire RAID inaccessible Caution 1 Host server disk drives and expansion array disk drives are logically interchangeable they are not physically interchangeable That is you cannot physically take a disk drive from an expansion array and place it in a host Snap Server Snap Server disk drives contain GuardianOS specific data that is lacking on expansion array disk drives 2 Do not mix drives of differ...

Page 53: ... attached to Port 1 of the host server s Serial ATA card and EXTN2 if connected to Port 2 On a Snap Server 15000 or 18000 the disk drives of the Snap Disk 30SA that is directly attached to the Snap Server is distinguished from those of the host server by the label EXTN1 Additional attached expansion arrays are labeled sequentially EXTN2 EXTN3 according to their position in the daisy chain Label De...

Page 54: ...a single enclosure select the name of the Snap Server Unit For multiple enclosures check the enclosures and select View Drives Label Description Snap Unit The bay in which the drive is seated Model Snap Server or Snap Disk Model Number Server Number Server number Drives The number of disk drives Status Current condition of the unit s disk drives Click the unit name for details All Drives OK One or...

Page 55: ...ds TCP IP Offload Engines and drivers to interoperate with Snap Server iSCSI Disks See the iSCSI Support page on our website for the latest information on third party software and hardware including information on the following Supported versions and models Known Restrictions on the iSCSI functionality imposed by each product Download installation and configuration information Topics in iSCSI Disk...

Page 56: ...at is required for data integrity Do not use snapshots on a volume containing an iSCSI Disk Running a snapshot on a volume containing an iSCSI Disk will abruptly disconnect any clients attempting to write to the server s iSCSI Disk and the resulting snapshot may contain inconsistent data iSCSI Multi Initiator Support The Support Multi Initiator checkbox allows two or more initiators to simultaneou...

Page 57: ...isable write cache for any other iSCSI Disk or any other resources on the Snap Server 2 The opportunity to enable disable write cache for an iSCSI Disk occurs only when the disk is created it cannot be toggled at a later date 3 Disabling write cache for an iSCSI Disk does not eliminate all potential risk of data loss due to an unexpected loss of power as each disk drive contains its own internal c...

Page 58: ...m will not allow the deletion of an iSCSI Disk when clients are connected After disconnecting all client initiators click Delete and then follow the onscreen instructions to delete one or more iSCSI disks Label Description iSCSI Disk Name The name of each iSCSI disk Volume The volume on which the iSCSI disk was created Device The path of the iSCSI disk file Authentication CHAP or none Size The siz...

Page 59: ...to NFS client machines The SMB and NFS protocols also part ways in their handling of file level permissions Administrators can choose to apply Windows or UNIX style file level permissions to entire volumes or to directories at the root of a volume aka SnapTree directories These security based directory structures are referred to as SnapTrees Files permissions in a Windows SnapTree are set from a W...

Page 60: ...reating a share you can either select an existing directory or create a new one Security Model If you create a share pointing to a volume or a SnapTree directory a security model must be selected Protocol Access Client access to the share can be restricted to specific protocols As a security precaution disable any protocols not needed by users of the share Share Access Share level access allows us...

Page 61: ...y SnapTree screens Caution Do not use spaces in naming a directory that is to serve as a share point The GuardianOS will recognize the directory but it will not be available for use as a mount point Instead use the underscore character to separate terms in a directory name SnapTree Functionality Function Description SnapTree Directory Ownership Default ownership differs according to the method use...

Page 62: ...en share is hidden from clients connecting from the SMB HTTP AFP and FTP but not NFS protocols For example assume SHARE1 is set as hidden Windows users will not see the share when viewing the server through Network Neighborhood or when performing a net view servername on the Snap Server Tip Windows users who have access rights to a hidden share can still access the share by entering the precise pa...

Page 63: ...ts to full control The default permission granted to users and groups when they are granted access to the share is full control You may restrict selected users and groups to read only access Share access permissions are cumulative A user s effective permissions for a resource are the sum of the permissions that you assign to the individual user account and to all of the groups to which the user be...

Page 64: ...and directories following the Windows security model the GuardianOS supports the use of the Windows NT 2000 or XP interface to set directory and file permissions for local and domain ADS users and groups on the Snap Server On a directory administrators can also set inheritance permissions that will be inherited by subordinate folders and files created within the directory Default File and Folder P...

Page 65: ...pecified on the domain controller For local users the primary group is AllLocalUsers For Windows domain users the primary group can be set on a Windows domain controller This setting is purely for compatibility with the GuardianOS security and is not significant in Windows security The user owner always has change permissions access Regardless of file level access settings a user owner has change ...

Page 66: ...older Read Data Read Attributes Read Extended Attributes Read Permissions Write Grants complete write access A combination of Create Files Write Data Create Folders Append Data Write Attributes and Write Extended attributes Execute UNIX and MacOS X only Allows programs and scripts to run Delete Grants the user the permission to delete the file directory Change Permissions Grants the user rights to...

Page 67: ...efore deciding whether to allow the user to perform the action The GuardianOS on the other hand uses the first applicable permission it finds to decide whether to allow the user to perform the action The GuardianOS searches for access permissions in the following order 1 User owner 2 User 3 Group owner 4 Group 5 Everyone When a match is found the search stops and the specified access permission is...

Page 68: ...Setting File and Folder Permissions Windows 54 Snap Server Administrator Guide ...

Page 69: ...g Snapshot Pool Size Accessing Snapshots Coordinating Snapshot and Backup Operations Related Information Isolate iSCSI Disks from Other Resources for Backup Purposes Snapshot Management and Usage This section describes snapshot components and dependencies The Snapshot Pool Snapshot data are stored on a RAID in a snapshot pool or space reserved within the RAID for this purpose Each RAID on the syst...

Page 70: ...es in the system may become out of sync in relation to each other The more data you have to back up the more time is required for the backup operation and the more likely these events are to occur By backing up the snapshot rather than the volume itself you greatly reduce the risk of archiving inconsistent data For instructions see Coordinating Snapshot and Backup Operations on page 59 NDMP and Sn...

Page 71: ...he volume s since the snapshot was created The following table describes minimum and maximum allocation cases Adjusting Snapshot Pool Size The current size of the snapshot pool for each RAID or RAID group can be viewed by navigating to the Storage Snapshots screen and clicking the adjust snapshot space link in the introductory text On the screen that opens you can adjust the pool up or down as nec...

Page 72: ...l share s path into the live volume Creating a Snapshot Share You create a snapshot share by selecting the Create Snapshot Share option in the course of creating a live volume share For example assume you create a share to a directory called sales and you select the Create Snapshot Share option When you connect to the server via Internet Explorer or other file browser two shares display SALES SALE...

Page 73: ...shot schedules you must create a share and snapshot share to the appropriate directory so that the backup software can access the snapshot For most backup purposes the directory specified should be one that points to the root of the volume so that all of the volume s data is backed up and available from the snapshot share 1 Create a snapshot for each volume you want to back up In the Administratio...

Page 74: ...pshot Share 3 Set the backup software to archive the latest version of the snapshot The Snap Server makes it easy to configure your backup software to automatically archive the most recent snapshot Simply configure your backup software to copy the contents of the latest directory within the snapshot share you created at the root of the volume For example assume the snapshot share named SHARE1_SNAP...

Page 75: ...ny Snap Server to its original state Topics in Disaster Recovery Management Backing Up Server and Volume Settings Backing Up the NetVault for GuardianOS NVDB Directory Recovering the NetVault Database Disaster Recovery Procedural Overview Backing Up Server and Volume Settings In addition to backing up the data stored on the Snap Server you may also back up its system and volume settings The Mainte...

Page 76: ...u change ACL or quota information to ensure that you are backing up the most current volume settings Creating the SnapDRImage and Volume Files Before you create the disaster recovery files make sure you have completed the following activities You have completely configured the Snap Server If you subsequently make any major changes to the configuration you must repeat the procedures described in th...

Page 77: ...NetVault Database be performed e g daily once all other backups have completed Target Specific Media for a NetVault Database Backup In the event that the NetVault Database needs to be recovered the specific piece of media targeted can be easily located to perform the recovery To Backup the NVDB Directory 1 From the NetVault Server either locally or remotely open the NetVault Backup window by click...

Page 78: ...necessary navigate to the Maintenance Add On Features screen and re enable the NetVault for GuardianOS software 3 Remove all media from the device s used by the NetVault Server except the media that contains the backup saveset needed for the recovery of the NetVault Database 4 Add all devices previously added to the NetVault Server through the use of the Device Management window 5 From the Device ...

Page 79: ...Items with check boxes at their left are single items that can be selected for inclusion while items without check boxes can be double clicked to browse their individual contents 6 For a full database restore select each item in the tree Additionally open up root items to display their contents by double clicking them and then select all of their contents e g Events Notification and Reports Databa...

Page 80: ...repair or reinstallation Maintenance mode consists of a series of HTML screens that allow you to perform the following functions Reinstall Reinstalls the GuardianOS overwriting any previous configurations and prompts you for the SnapDRImage file Upgrade Repair Either upgrades the GuardianOS from one version to another or applies the GuardianOSImage but preserves system settings Fresh install Reins...

Page 81: ...ot been compromised If the original configuration is intact and accessible skip to the next step Otherwise you must re create RAIDs or volumes as necessary to match the original configuration using one or more of the processes summarized below 1 Navigate to the Storage RAID Sets screen and click Create RAID Set Using the screens that follow recreate the original RAID configuration 2 Navigate to th...

Page 82: ... screen during the recovery process You are restricted to this screen so that you will not interrupt the recovery 1 Restore server settings Click Recover Server to open the Server Recovery screen and use the Browse button to locate the SnapDRImage file Click Recover And Reboot to start the operation Once the server configuration recovery operation is complete you can start the volume configuration...

Page 83: ...and management tasks are performed using the CA eTrust Antivirus GUI accessed from the Maintenance Antivirus screen of the Administration Tool This section outlines the major steps in configuring the antivirus software See the GUI online help for detailed descriptions of all options Topics in Antivirus Configuration Antivirus Dependencies Launching the CA eTrust Antivirus GUI The Local Scanner Vie...

Page 84: ...e current server date and time is reset to an earlier date and time System Date Time the change does not automatically propagate to any scheduled antivirus operations To synchronize scheduled antivirus operations with the new date and time settings you must reschedule each operation New jobs may be affected by the time change Be sure to check that new jobs have been executed if a date or time chan...

Page 85: ...nnect to the GUI it may take from 30 seconds to several minutes for the application to load depending on the speed of your connection 1 Navigate to the Maintenance Add On Features screen in the Administration Tool 2 Select CA Antivirus from the table 3 If you need to enable the antivirus software select Yes from the Enable eTrust InoculateIT pull down menu and then click Save The screen refreshes ...

Page 86: ...ory Displays the directory structure of the Snap Server As in Windows Explorer click folder icons to navigate the structure and display subfolders and files in the right hand pane Move Folder May contain infected files The administrator can instruct the software to automatically move infected files to this directory For more information see Scan Job Configuration and Scheduling on page 73 Schedule...

Page 87: ...the snapshot is scheduled to fire Defining Scan Jobs This section provides an overview of the major choices available in configuring scan jobs Access these options by selecting Local Scanner Options from the Scanner Menu Choosing an infection treatment Scan Tab You can instruct the software to perform one of the following file actions when an infected file is found Treatment Options for Infected F...

Page 88: ...files option to put information in the log about files that have been excluded from the scan Running a Manual Scan Job Before running a local scan job confirm that the scanner options are correctly configured as described in the previous section 1 In Local Scanner View select folders you want to scan The left hand pane displays the directory structure of the Snap Server A red check mark on a folde...

Page 89: ...on a regular basis by Computer Associates These updates are cumulative so they contain everything from all previous file updates plus the newest information on the latest infections If you have missed a recent update you only need to collect the latest signature file to have the most up to date protection Snap Servers are preconfigured to download signature updates from the CA FTP site at ftp ftpa...

Page 90: ...e Scanner Signature Update Options and click the Incoming tab 2 Select FTP in the list box and click Edit 3 In the Proxy Name field enter the IP address of the proxy server and click OK UNC Use UNC to distribute signature updates from one Snap Server to another or from any arbitrary SMB or Windows server Note that for UNC to work you must have the Enable Guest Account option set to Yes Security Wi...

Page 91: ...er or any FTP or Windows SMB server Tip If using a Snap Server copy the files to the root of a share You can configure other Snap Servers to automatically get their signature updates from a single Snap Server see following procedure To do so the update files must reside on the root of a share not a subdirectory within a share 3 Choose Scanner Signature Update Options and click the Incoming tab 4 C...

Page 92: ... of the share 4 Click OK The path you entered appears in Download Sources list box 5 Click Download Now To Distribute Files via FTP If you have more than one Snap Server with no Internet access you can perform the FTP download procedure on just one of them or any FTP server and then configure your other Snap Servers to get the signature updates from that server automatically via FTP 1 Choose Scann...

Page 93: ...down on message traffic and minimize the dissemination of notifications that are not critical To set alert options select Alert Options from the Scanner menu The Alert Options dialog box contains the following tabs The Tabs of the Alert Options Dialog Box Tab Description The Report Tab Use the Alert Report options to specify where to send notification information and the Report Criteria options to...

Page 94: ... it safely in a different location You may want to use this option for example if you do not have another source for the data and you need to look at the file Or you may have a file that you want to analyze Tip To restore a file to different directory you must prepend the path to the directory with the string shares For example to restore a file to the SHARE1 sales directory enter the path as foll...

Page 95: ...tion Description Local Scanner Displays summary information about scan jobs that have run RealTime Scanner Not Supported Scheduled Scanner Displays summary information on scheduled scans that have run General Events Displays the Event log for a given day Click a date to view all events that occurred that day Distribution Events Displays distribution events by date Click a date to view detailed inf...

Page 96: ...Log View 82 Snap Server Administrator Guide ...

Page 97: ...es by clicking the Knowledge Base link on the Snap Appliance support page http www snapappliance com support Hardware Components Purchase additional hardware components from authorized Snap Appliance resellers To locate a reseller in your area click the Where to Buy link on the Snap Appliance home page http www snapappliance com Field Service Documents Find a list of the hardware components availa...

Page 98: ...ds that you become familiar with the operation of these lights Power System and LAN LEDs These status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The LEDs operate as described in the following tables Power LED Blinking green The s...

Page 99: ...status light below the failed drive turns amber Solid amber The server has encountered a system error Blinking green then amber The server has booted to maintenance mode For more information see Using Maintenance Modes to Perform System Resets on page 93 LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network on the network port Off The port is disconnected or the Ethern...

Page 100: ...EDs operate as described in the following table Fan Supply LEDs If a fan module fails on a Snap Server 14000 a failure message appears on the front LCD display On the back of the server the status light to the left of the failed fan turns amber Power LEDs Module LEDs Condition of Module Steady green Green on both modules Turned on no problems Amber Amber on failed module Failed while installed and...

Page 101: ... LEDs operate as described in the following tables Power LED Solid green The server is powered on Off The server is powered off System LED Double blink green The server is booting up Triple blink green The server is shutting down Solid or blinking amber at boot time A problem was detected by BIOS The server will not boot Blinking amber during normal operation A thermal or other system problem was ...

Page 102: ...tor Lights The LEDs on a 18000 power module are identified in the following illustration Health LED left Activity LED right Solid green Solid green Disk drive installed properly but is not active Solid amber Solid green Off Disk drive installed but not working correctly Off Off No disk drive installed 18000 LED Indicators Power Fault AC Description Solid green Off Solid green Module is operating p...

Page 103: ...odule The Monitoring Status screen of the Administration Tool indicates when a fan has failed When the cover of the chassis is removed the Fault LED on the failed module will be lit The Fault LED of a Snap Server 18000 fan module is identified in the following illustration To remove a failed fan module squeeze its handles together and lift the module out of the unit Fault LED ...

Page 104: ...the following table Power Module LEDs The Snap Disk 10 power module has a single LED The LED operates as described in the following table Status light Activity light Status Light Activity Light Condition of Disk Drive Green Amber flashing Disk drive installed and being accessed Green Not lit Disk drive installed but not being accessed Amber Not lit Disk drive installed but not working properly Not...

Page 105: ...2SA Disk Drive LEDs The Snap Disk 30SA and Snap Disk 32SA have two LEDs at the edge of each disk drive as shown in the following illustration The LEDs operate as follows operate as follows Status Fault Status Fault Condition of Disk Drive Solid green Off Disk drive installed properly but is not active Blinking green Off Disk drive installed properly and actively reading writing information Solid g...

Page 106: ...following table System Reset Options Often the first thing to try in resolving anomalous behavior on a Snap Server is to reset the server to factory defaults Resetting the Snap Server to Factory Defaults Using Maintenance Modes to Perform System Resets Power AC Fan DC Condition of Power Fan Module Green Off Off Off Power and fan working properly Off Amber Off Amber AC power supply is disconnected ...

Page 107: ...en the server finishes rebooting the Login dialog box opens Enter the default admin password of admin and click OK The Initial Setup Wizard runs allowing you to reset the server name admin password and IP address Set Default ACLs For Volume volume name resets the file and directory ACLs on selected volumes to reset the Everyone group to full control Essentially all users will be able to access all...

Page 108: ... speed and bonding settings are returned to their defaults and the Administrator password is reset to the default admin The Snap Server then does a full boot 3 As in mode 1 clears the IP address stored on the network resets the server to use DHCP and resets speed duplex settings to autonegotiate Mode 3 additionally resets network bonding to standalone and resets all network protocols to factory de...

Page 109: ...g on both the switch and the server port You Have No Access to the Snap Server via HTTP When trying to access the Snap Server via HTTP the Web browser times out The server can be accessed using the ping command or Windows Explorer a HTTP and HTTPS are both enabled by default on Snap Servers Try typing HTTPS in the Web address rather than HTTP If you are able to access the server via HTTPS you can ...

Page 110: ...age stating that the Snap Server will be going down in 5 minutes This is because the AFP protocol needs to be restarted To resolve this issue reconnect to the share Problems Occur with Domain Controller Authentication You are receiving the following errors in your error log SMB Domain Controller unavailable SMB Username not connected to Domain Controller This means that either your PDC is down or ...

Page 111: ...re rapidly in a peer to peer Windows environment In some environments that include NT server systems this may cause the NT server to show warnings about having to force a master browser election in the event log You can prevent these warning messages by disabling the Master Browser option on the Networking Windows screen You Try to Mount to a Share on Your Snap Server from Your Linux Workstation a...

Page 112: ... upgrading your MacOS to 10 3 x or later will install an updated version of Safari and resolve this issue The S2S Managemenent Console does not Start Successfully You must allow popups on your client when connected to the Snap Server to view some error messages and to allow the management console to run You must also have the latest Java Virtual Machine JVM installed on your client to support S2S ...

Page 113: ...appens the NetVault client application may not be able to connect to the NetVault for GuardianOS server running on the Snap Server To resolve this issue simply disable and then re enable the NetVault for GuardianOS Server via the Maintenance Add On Features screen Power to the Snap Server Is Unexpectedly Cut Off due to a Power Outage Snap Appliance recommends that you use an uninterruptible power ...

Page 114: ...dministration Tool to set a new password The Snap Server 14000 or 18000 LCD is flashing A flashing LCD indicates a server panic In some cases rebooting the server may solve the problem However if this condition occurs more than once try resetting the system as described in Using Maintenance Modes to Perform System Resets on page 93 Phone Home Support Phone Home Support e mails system logs and file...

Page 115: ...l support concerning the issue Case Number If you selected Existing Case above enter the case number provided by technical support Reply to Address Required This field defaults to the first e mail address entered as a recipient on the System E mail Notification screen If necessary enter at least one e mail address that will serve as the contact e mail address for this issue To receive a copy of th...

Page 116: ...Phone Home Support 102 Snap Server Administrator Guide ...

Page 117: ... Enterprise Backup v10 0 Legato NetWorker v6 1 1 VERITAS NetBackup v3 4 1 VERITAS Backup Exec v8 6 v9 0 v9 1 VERITAS NetBackup 4 5 Feature Pack 6 for Windows Tip These backup packages do not support the backup of extended POSIX ACLs If you use one of these packages Snap Appliance strongly recommends you create a Snap Server disaster recovery image see page 62 before you perform a backup Agent Inst...

Page 118: ...ser CD or are available for download from the manufacturer s website You will need to copy these files usually delivered in a compressed format e g as rpm tgz or tar files to the Snap Server A secure shell SSH client To remotely install any backup agent on the Snap Server you must have a secure shell SSH client installed on a remote workstation The Snap Appliance SSH implementation is compatible w...

Page 119: ...le SSH on the Snap Server Navigate to the System SSH screen and in the Enable SSH pull down menu select Yes and then click Save Secure Shell is immediately available Caution Leaving SSH enabled is a security risk Snap Appliance strongly recommends that you disable SSH as soon as you complete the installation procedure 3 Create a directory on the Snap Server called agent You must create a directory...

Page 120: ... Tip Installing the BrightStor ARCserve backup agent on a Snap Server requires three agent rpm files These agent files are available from your BrightStor ARCserve CD but some ARCserve CDs may not contain all the required files To obtain the files you need contact Computer Associates 1 Connect to the Snap Server via SSH 2 At the prompt login as admin using the password you created for this account ...

Page 121: ...boot 10 Delete the agent files you copied to the Snap Server because they are no longer needed 11 To verify the success of the installation use your backup management software to configure and run a test backup Installing a VERITAS Backup Exec Agent To install the VERITAS Backup Exec UNIX Linux agent use the following procedure 1 Connect to the Snap Server via SSH and log in as admin using your ad...

Page 122: ...pt do one of the following If your Snap Server is configured in standalone mode multihoming enter y press Enter and then at the next prompt enter the IP address of the appropriate port and press Enter If your Snap Server is not configured in standalone mode enter n and press Enter 10 Answer the remaining prompts 11 To start the agent type the following command and press Enter etc rc d init d agent...

Page 123: ...and press Enter Tip At the end of the installation process a few errors will appear saying that the installer cannot find the CD ROM This is caused by the installer attempting to unpackage the Java files The required Java files are already on the Snap Server and are not a required component of the installation The VERITAS NetBackup client is now installed 8 Close the SSH client and then return to ...

Page 124: ...mes you created a directory on the Snap Server for the purposes of this installation at shares SHARE1 NBclientinstall 1 Connect to the Snap Server via SSH and log in as admin using your admin user password 2 To change to superuser enter the following command and press Enter su 3 At the prompt enter the admin user password and press Enter 4 To change to the NBclientinstall directory enter the follo...

Page 125: ...backup agent navigate to the Maintenance Shutdown Reboot screen and click Reboot 11 To verify the success of the installation use your backup management software to configure and run a test backup Errors Messages To Be Ignored Tip Towards the end of the installation errors about copying Java UI files that are of no consequence to backup functionality may display Simply ignore these messages You ma...

Page 126: ...er the admin user password and press Enter 5 To change to the agent directory enter the following command and press Enter cd shares SHARE1 agent 6 If you copied the files from a windows machine create you need to create a symbolic link by entering the following commands Otherwise skip to the next step cd NBClients anb Clients usr openv netbackup client Linux RedHat2 4 ln s bpbackup bparchive cd sh...

Page 127: ...ap Server 10 Delete the NBClients and Linux directories that you copied from the CD to the Snap Server as they are no longer needed 11 To verify the success of the installation use your backup management software to configure and run a test backup Errors Messages To Be Ignored Tip Towards the end of the installation errors about copying Java UI files that are of no consequence to backup functional...

Page 128: ...ARE1 agent 5 To unpackage the client files enter the following commands tar xvfz nw_linux86 tar gz cd LGTOclnt rpm Uvh nodeps lgtoclnt x x x i386 rpm where x x x is the version number 6 To start the Legato NetWorker daemon enter the following command at the console etc rc d init d networker start The NetWorker client is now installed 7 Close the SSH client and then return to the Administration Too...

Page 129: ...k OK Recover and Retrieve Operations The Legato NetWorker administrative interface does not support data recovery operations from a remote client for a Linux based operating system such as the GuardianOS To recover data you must execute one of the following CLI commands from an SSH client Recover The recover command restores data from a normal backup job Nsrretrieve The retrieve command restores d...

Page 130: ...rom an Archival Backup Operation 1 Using an SSH client connect to the Snap Server and login using the admin user name and password 2 To change to superuser enter the following command and press Enter su 3 At the prompt enter the admin user password and press Enter 4 Enter one of the following commands and then press Enter To retrieve data to its original location nsrretrieve f i s backupservername...

Page 131: ...uthentication allows Active Directory users to connect to shares on the Snap Server The Snap Server supports the Microsoft Windows 2000 family of servers that run in native ADS mode or in mixed NT ADS mode AFP AppleTalk Filing Protocol A local area network LAN architecture built into all Apple Macintosh computers agent A program that performs some information gathering or processing task in the ba...

Page 132: ...dentity of the peer using a three way handshake checksum The result of adding a group of data items that are used for checking the group The data items can be either numerals or other character strings treated as numerals during the checksum calculation The checksum value verifies that communication between two devices is successful CIFS Common Internet File System A specification for an Internet ...

Page 133: ...hin a network Ethernet The most widely installed local area network technology 10Base T Ethernet provide transmission speeds of up to 10 Mbps Fast Ethernet or 100Base T provides transmission speeds up to 100 Mbps and is typically used for LAN backbone systems supporting workstations with 10Base T cards Gigabit Ethernet provides an even higher level of backbone support at 1000 Mbps one Gigabit or o...

Page 134: ... by which a computer is known on a network It is used to identify the computer in electronic information interchange hot spare local or global A disk drive that can automatically replace a damaged drive in a RAID 1 or 5 If one disk drive in a RAID fails or is not operating properly the RAID automatically uses the hot spare to rebuild itself without administrator intervention A local hot spare is a...

Page 135: ...work address optional subnetwork address and host address It displays as four addresses ranging from 1 to 255 separated by periods Jukebox A robotic tape backup device that stores numerous tape drives and uses a mechanical arm to bring the drive to a station for reading and writing JVM Java Virtual Machine Software that converts Java bytecode into machine language and executes it A JVM allows an a...

Page 136: ...n the Open Systems Interconnection OSI model one of two sublayers of the Data Link Control layer Concerned with sharing the physical connection to the network among several computers Each Ethernet port has a unique MAC address Snap Servers with dual Ethernet ports can respond to a request with either port and have two unique MAC addresses maintenance mode A series of HTML screens that allow you to...

Page 137: ... NFS server by default NIS Network Information Service A network naming and administration system for smaller networks that was developed by Sun Microsystems NIS is a later version that provides additional security and other facilities The Snap Server accepts NIS users and groups node Any device including servers workstations or tape devices that are connected to a network also the point where dev...

Page 138: ...access speeds because it uses multiple physical devices to store the data However RAID 0 offers no redundancy and does not accept hot spares If a single disk drive fails every file in the RAID is rendered unavailable RAID 1 Mirrored Stores data on one disk drive and copies it to another drive in the RAID A RAID 1 must contain at least two disk drives one for the data space and one for redundancy A...

Page 139: ...p Servers and other Snap Server Storage Solutions SCSI Small Computer System Interface A parallel interface standard used to attach peripheral devices such as robotic libraries to computers serial number The ten character alphanumeric number assigned by the manufacturer at the factory server number A numeric derived from the MAC address of your Snap Server s primary Ethernet port that is used to u...

Page 140: ...f a volume that is assigned a Windows or UNIX style security model The security model determines the file level security scheme that will apply to files folders and subdirectories within the SnapTree directory SNMP Simple Network Management Protocol A system to monitor and manage network devices such as computers routers bridges and hubs SNMP views a network as a collection of cooperating communic...

Page 141: ... IDs A unique ID assigned to each user on a Snap Server for security purposes unassigned The state of a disk drive that is seated in a bay but has not been incorporated into a RAID UNC Universal Naming Convention In a network a way to identify a shared file in a computer without having to specify or know the storage device it is on In the Windows OS the UNC name format is as follows server_name sh...

Page 142: ...st the validity of user credentials Other systems use encrypted challenges to respond to CIFS SMB clients that request access to a share WINS Windows Internet Naming Service The server that locates network resources in a TCP IP based Windows network by automatically configuring and maintaining the name and IP address mapping tables workgroup A collection of computers that are grouped for sharing r...

Page 143: ...tten 93 100 AFP see MacintoshOS Antivirus and volume deletion 33 dependencies on other software components 70 distributing updates 77 enabling 11 excluding snapshots from 73 HTTP requirement 70 launching configuration GUI 71 scan job configuration 73 using logs 81 APC Brand UPS see UPS ATA see Serial ATA Card Authentication default settings 23 HTTPS HTTP 22 Kerberos 26 local 24 NIS domain 27 UID a...

Page 144: ...ing recovery files 62 procedures 66 recovering server volume configurations 68 Disk drives determining status of 38 distinguishing internal from external 38 Documents e mail feedback on xi related to Snap Servers xiii E Ethernet see Gigabit Ethernet Expand Volume button 34 Exports file NFS 45 EXTN 38 F Factory defaults resetting to 93 Failover see Network bonding Features new in this release 5 Fie...

Page 145: ...r for 15 restrictions on 14 Local hot spares 31 Login to Admin Tool 7 to antivirus GUI 71 M MacintoshOS configuring client access 20 error messages for 96 launching Snap Server Manager on 6 required to run Snap Server Manager 6 Sherlock support 21 supported clients 21 Maintenance Modes 93 Multihomed configurations 15 N NDMP enabling 11 NetVault backing up nvdb directory 63 restoring nvdb directory...

Page 146: ...ver registration Reset factory defaults 93 Reset Options 92 S S2S 10 Security file level access permissions 50 local authentication 24 resetting default ACLs for volumes 93 share level access permissions 49 Windows authentication 25 Security Model resetting for volume 47 Serial ATA Card 36 Server and volume settings backing up 61 Server name discovering 7 Server registration via Initial Setup Wiza...

Page 147: ...aphical Conventions xii U UPS 9 Users file level access for 50 quotas for 34 share level permissions 49 V VERITAS Backup Exec installing agent for 107 NetBackup installing agent for 109 Volumes and antivirus software 33 and NetVault database directory 33 as distinct from Macintosh volume 20 backing up configuration 61 effect of deleting on antivirus software 70 expanding capacity of 33 management ...

Page 148: ...134 Snap Server Administrator Guide ...