EMC/Legato Networker VCB Interoperability Module

Januari 22, 2010 at 10:28 am 8 komentar


EMC/Legato Networker VCB Interoperability Module


(c) 2006-2008 VMware, Inc.

Overview

This interoperability module enables offloaded backups for data stored
in virtual machines using VMware Consolidated Backup (VCB) version 1.0.x/1.1.x/1.5.x
and EMC/Legato Networker version 7.3, 7.3.2Jumbo, 7.4, 7.4.1 or 7.4.2This module depends on VCB already being installed and configured
prior to its installation/configuration. For details on how to set up
VMware Consolidated Backup, consult the Virtual Machine Backup
Guide.It is also assumed that EMC/Legato Networker version 7.3, 7.3.2Jumbo,
7.4, 7.4.1 or 7.4.2 is already installed and configured.This document covers the following topics:

Features of the LNIM

LNIM enables file-level backup for virtual machines running any
version of Microsoft Windows that is supported by VMware ESX Server
version 3.0.x/3.5.x or ESXi. It also enables full virtual machine (full VM)
backup for all virtual machines running on VMware ESX Server version
3.0.x/3.5.x or ESXi.Backup is supported for virtual disks backed by VMFS files or by raw
device mappings in logical compatibility mode.Backing up Raw Devices in Physical Compatibility Mode is not
supported.

LNIM Installation on the Backup Proxy

This section assumes that the backup proxy is already known as a
Client to Networker Server.In order to configure Networker to use VCB on the backup proxy, the
following steps need to be performed:

  1. Unzip the .zip file containing the LNIM into the VCB install
    directory on the backup proxy. (C:\Program Files\VMware\VMware
    Consolidated Backup
    by default). This will create a subdirectory
    named legato in the VCB install directory.
  2. Open a command prompt (cmd.exe) and change the current
    directory to the legato directory created in step (1).
    For example:
      C:
      cd "\Program Files\VMware\VMware Consolidated Backup Framework\legato"
  • Run install.bat. This will copy save_vcb.bat to
    Networker’s bin directory. This Alternate Save Command will
    be used for each backup job running on the VCB proxy.
  • Configuring Networker for VCB

    Setting an Alternate Save Command for the VCB Proxy Client

    Networker has to be configured to use an Alternate Save Command when
    performing backup on the VCB proxy. Here is how to configure this:First, start the Networker Administration application for the
    Networker service managing your VCB proxy:

    1. Start the Networker Management Console.
    2. Select the Enterprise icon.
    3. In the left-hand pane, select the Networker Server that manages
      your VCB proxy. (This might be the VCB proxy itself).
    4. Click on this Networker Server. In the right-hand pane, now
      right-click on the Networker entry for this server, and
      select Launch Application… from the context menu.
    5. This will launch the Networker Administration
      application.

    Now set up an alternate save command:

    1. In the icon row on the top, click on Configuration.
    2. In the left-hand pane, click on Clients.
    3. Select the VCB proxy client from the Clients list in the
      right-hand pane.
    4. Right-click on the VCB proxy client and select
      Properties… from the context menu. This will pop up
      the Properties dialog for the VCB client.
    5. In the Properties window, click on the tab labeled
      Apps & Modules.
  • In the Backup section, insert save_vcb.bat
    in the field labeled Backup command.
  • Using Networker and VCB with SSPI Authentication

    With VCB 1.5 you have the option to use SSPI (Security Support
    Provider Interface) authentication when running against VirtualCenter
    2.5 or newer. This removes the requirement of having to store login
    credentials for a backup user in the VCB configuration file
    config.js.This text assumes that you have already set up a suitable user account
    for this on the VCB proxy and the VC Server and configured VCB for
    SSPI as described in the Virtual Machine Backup Guide in the
    Section Setting up a VCB Proxy, subsection Configuring
    USERNAME and PASSWORD
    . This documents assumes that the user
    account that was created for this purpose is vcbuser.You now need to reconfigure Networker such that it will run backup
    jobs under the vcbuser account instead of the default
    SYSTEM account, since SYSTEM cannot be used in
    conjunction with SSPI for remote authentication:

    1. Start the Networker Management Console as described
      above, in the section on Setting up an alternate save command.
    2. In the icon row on the top, click on Configuration.
    3. In the left-hand pane, click on Clients.
    4. Select the VCB proxy client from the Clients list in the
      right-hand pane.
    5. Right-click on the VCB proxy client and select
      Properties… from the context menu. This will pop up
      the Properties dialog for the VCB client.
    6. In the Properties window, click on the tab labeled
      Apps & Modules.
  • In the Access section, enter the name of the SSPI
    user account under Remote User and the corresponding
    password under Password.
  • Note that in order to configure VCB for SSPI the USERNAME variable in config.js must be set to __sspi__ and the PASSWORD setting must be set to an empty string:

        USERNAME = "__sspi__";
        PASSWORD = "";

    Adding Virtual Machines to Protect

    Overview

    Adding a virtual machine to protect with EMC/Legato Networker involves the
    following steps:

    • For file-level backups:
      • Turning off the Windows Change Journal in the protected virtual machine
        (if it has previously been turned on).
    • Adding a Save Set to the VCB proxy configuration that
      corresponds to the type of backup desired (full VM or
      file level) for the virtual machine. The Save Set entry has to conform
      to a specific syntax that will be outlined in section Adding a Save Set to the Proxy Configuration. In the case of
      file-level backup, it also encodes which files and directories to back up
      within the virtual machine’s disk(s).

    Steps for Configuring File-Level Virtual Machine Backups

    Turning off the Windows Change Journal in the Virtual Machine

    The Windows Change Journal is disabled by default. Unless you (or
    some backup application you have installed in the virtual machine) has
    specifically enabled the Windows Change Journal in a protected virtual
    machine, you can skip this section.
    When performing incremental or differential backups, Networker can use
    different methods to determine which files have changed since the
    previous backup. Networker can either use the archive bit
    or timestamps. Furthermore, Networker can consult the Windows
    Change Journal
    for incremental backups.Since backup using VCB is always performed on snapshots of virtual
    machine disk images, only timestamp-based incremental backup will
    work. Therefore, Networker must be configured to use timestamps for
    incremental backups and the Change Journal has to be ignored.The LNIM takes care of configuring Networker to use timestamps instead
    of the archive bit. Normally, the Networker Change Journal
    Manager
    can be used to force EMC/Legato Networker to ignore the
    Windows Change Journal on a given volume.However, since the Networker Change Journal Manager can only change
    settings for currently mounted volumes, you cannot use it to disable
    the Change Journal for virtual machine backups. Instead, you have to
    make sure that the Change Journal is disabled in the virtual machines
    that you want to protect using Networker.This can be done by performing the following steps on any virtual
    machine that you intend to protect using Networker that has the
    Windows Change Journal enabled:

    1. Log into the virtual machine using an account with administrative
      privileges.
    2. Open a command shell (cmd.exe).
    3. For each volume (drive letter) in the virtual machine run the following
      command:fsutil usn deletejournal /D <driveletter>:For example, for a virtual machine with drives C:,
      D: and F:, you would run the following commands:fsutil usn deletejournal /D C:fsutil usn deletejournal /D D:fsutil usn deletejournal /D F:

    Adding a Save Set to the Proxy Configuration

    Overview

    Virtual machines to be protected are identified by using a special
    convention for the Save Sets specified for the VCB proxy. These Save
    Sets also determine whether a full VM or a file-level backup is being
    performed. While this section explains the format and conventions for
    VCB save sets, the next one will outline how to add save sets to your
    EMC/Legato Networker configuration.There are three options for backing up virtual machine data. You can
    back up

    • all files and directories within a virtual machine’s disk(s),
    • only specific files or directories within a virtual machine’s disk(s), or
    • perform a full VM backup of the virtual machine.

    Next, a Save Set needs to be added to the VCB proxy configuration
    describing what needs to be backed up for this particular virtual
    machine.The Save Set has to conform to the following convention:

         VM:<VM's_DNSName><SUFFIX>

    where

    VM’s DNS Name
    Is the fully qualified domain name (FQDN) for the virtual machine
    to be protected.
    SUFFIX
    encodes the type (file/full VM) of backup as well as the list of
    files/directories to be backed up (if applicable). Possible values for
    Suffix are:
    • (no suffix) to back up all files and directories
      within a virtual machine’s disk(s).
    • A list of paths on the virtual machine’s disk(s), separated by
      : (colons). (For examples see below).
    • :*FULL* to perform a full VM backup.

    Examples

      Backing up all the files for virtual machine
      winxp-ceci.eng.vmware.com:
      VM:winxp-ceci.eng.vmware.com

      Backing up C:\Data on buvm01.eng.vmware.com:
      VM:buvm01.eng.vmware.com:C\Data

      Backing up C:\Documents And Settings and D:\OraData on
      dbserv.company.com:
      VM:dbserv.company.com:C\Documents And Settings:D\OraData

      Performing a full VM backup of myvm.company.com:
      VM:myvm.company.com:*FULL*

    How to Add a Save Set using the Networker Administrator UI

    In order to add a Save Set that corresponds to the syntax outlined
    above using the EMC/Legato Networker Administrator UI, the following steps
    have to be performed:

    1. Start the Networker Administration application as outlined
      here.
    2. In the icon row on the top, click on Configuration.
    3. In the left-hand pane, click on Clients.
    4. Select the VCB proxy client from the Clients list in the
      right-hand pane.
    5. Right-click on the VCB proxy client and select
      Properties… from the context menu. This will pop up
      the Properties dialog for the VCB client.
    6. Under the General tab, add the Save Set as a new line
      in the field labeled Save set.
    7. If the Save Set All is still listed under Save set,
      you should consider removing it, or the local file system on the
      VCB proxy will be backed up as well.
    8. Click OK when you are done.

    VSS Log Spew

    When using EMC/Legato Networker with VCB, you will see the following
    message being logged by savegrp when a VCB backup job is
    being run:
    save: VSS snapshot failed with error 0x8004230f -- Unexpected VSS provider
    This message can safely be ignored. VCB backups are performed on
    snapshots and hence additional snapshotting by VSS is not
    required. You can avoid this log message by preventing Networker from
    using VSS on the VCB proxy:In order to do this, just add the following (pseudo) Save Set to your
    VCB proxy’s configuration:
    VSS:*=OFF

    Restoring Virtual Machine Data

    Overview

    The Virtual Machine Backup Guide lists three options for performing
    file-level restore for data backed up from virtual machines using
    VCB:

    1. Centralized Restore
    2. Per-Group Restore
    3. Per-virtual machine Restore

    In scenario (1), the backup administrator manually performs the
    restore procedure. One way of implementing this is to expose the
    target directory of the virtual machine as a CIFS share to the backup
    proxy. Use Networker User on the VCB proxy to restore the
    desired file to this network share.Another implementation is to copy the files to a shared network drive
    that both the backup proxy and the virtual machine have access
    to. Next, copy the restored files back in place from within the
    virtual machine.For options (2) and (3) the EMC/Legato Networker Client software
    (Networker User) has to be installed in some or all virtual
    machines. When restoring data for a virtual machine, keep in mind that
    the respective backups are associated with the VCB proxy and not with
    the virtual machine’s DNS name.The Networker User application contains options for restoring
    files that were backed up by other clients. This is called a
    Redirected Restore. A virtual machine client can restore files
    belonging to other clients (proxy) only when the user/the virtual
    machine has been given permission to do so.This can be configured on the Networker Server:

    1. Start the Networker Administration application as outlined
      here.
    2. In the icon row on the top, click on Configuration.
    3. In the left-hand pane, click on Clients.
    4. Select the VCB proxy client from the Clients list in the
      right-hand pane.
    5. Right-click on the VCB proxy client and select
      Properties… from the context menu. This will pop up
      the Properties dialog for the VCB client.
    6. Under the Globals (2 of 2) tab, add an entry conforming to
      <[USER>@]<Client> to the Remote access
      field, to allow an alternate client to perform restores for the
      virtual machines backed up by this proxy Client:
      <Client>
    is the name of the alternate Networker Client that is supposed
    to perform restores for virtual machines backed up by this proxy Client.
    <User>
    is an optional user Id, to further restrict restore permissions
    on Client, should this be desired.

    For more information, just click on Field Help and consult the
    section on the Remote access field.

  • Click OK to confirm the changes.
  • See Best Practices for an example on how to
    set up per-group restores using EMC/Legato Networker.

    Troubleshooting

    save_vcb.bat, the alternate save command used by VCB on the
    proxy writes log messages to to the standard output and error
    streams. These streams are captured by Networker’s nsrexecd
    and get sent to the Networker Server where they are logged to the
    daemon.log file in Networker’s log directories.If a backup job has failed, you should be able to check for errors in
    this log file.It is also a good practice, to use savegrp to manually run
    backups for a given Save Set for troubleshooting.

    Best Practices

    Using DNS Aliases

    Why is this useful?

    It is recommended that you use use different DNS aliases for the
    backup proxy to back up different groups of virtual machines. This
    practice has the following advantages:

    • More Fine-Grained Restore Permission Control:EMC/Legato Networker associates rights to do a restore of backed up
      data not with a Save Set, but with the backed up client. Since
      all virtual machines are backed up by the VCB proxy, all
      backups have identical restore/browse rights. This may create a
      security problem for the backup administrator should he/she
      need to grant different restore rights for backups made from
      different virtual machines.
    • Moving Groups of virtual machines to a New Backup
      Proxy:
      Another benefit of using multiple DNS aliases is the ability to
      move backup for a particular group of virtual machines to a
      different proxy in a way that is transparent to your backup
      software. — If you find yourself in the position of having to
      add a second backup proxy to your setup (because of capacity
      problems after growing your server farm), you can just
      associate one of the DNS aliases with the new proxy.

    Example: Networker using DNS Aliases for the VCB proxy

    In this example we assume that there are three virtual machines
    belonging to the Human Resources Department (hr1.company.com,
    hr2.company.com, hr3.company.com
    ) and ten virtual machines
    belonging to the Engineering Department (eng01.company.com, ...,
    eng10.company.com
    ).We want two different sets of permissions to be associated with these
    virtual machine backups: One set of permissions for data backed up
    from the Human Resources virtual machines and another set of
    permissions to be associated with data backed up from Engineering
    virtual machines.This can be achieved by performing the following steps:

    1. Create two DNS aliases for the Backup Proxy, VM_HR
      and VM_ENG. The easiest way to do this is to edit
      the hosts file on the Networker Server (which does
      not necessarily have to be the backup proxy). For example:<IP-addr> VM_HR VM_ENG proxy.company.com
    2. Register two new Networker Clients, VM_HR and
      VM_ENG. When creating the clients, make sure that each uses
      save_vcb.bat as an alternate save command. This is described
      in the section on Configuring Networker for VCB.Note: The Networker UI might warn you that this client is an alias of
      an already existing client or might not let you create these clients.
      In this case, just re-enter the name of the client you are about to create in
      the Aliases section of the Create Client dialog.
    3. Add Save Sets for virtual machines belonging to
      the Human Resources Department to the client VM_HR (according to
      section Adding Virtual Machines to Protect).
      Do the same thing for the Engineering virtual machines and for
      the VM_ENG client respectively.
    4. Schedule your backups for Engineering and for Human Resources using the
      proxy aliases VM_HR and VM_ENG respectively.

    Backups performed by VM_HR and VM_ENG will be done
    on the VCB proxy but will be associated with different client names
    (VM_ENG and VM_HR respectively). For restore you
    will have to specify VM_ENG or VM_HR as client names
    to see the corresponding backups.You can now independently configure permissions for performing
    Redirected Restores for VM_HR and VM_ENG as
    described in section Restoring Virtual Machine
    Data
    .


    Entry filed under: Applications, backup, EMC, VMware. Tags: .

    McAfee products’ coverage for Aurora McAfee SNS Notice: Network Security Signature Sets Released

    8 Komentar Add your own

    • 1. afghantime.info  |  April 21, 2013 pukul 12:31 pm

      The actual fact that every one of the drip coffee makers make coffee as part of the identical form, only
      a few drip coffee brewers are really created
      equal! along with therefore many separate designs and
      designs to select from it is significant so that you can perform some
      researching . These coffee makers, although the company are less acquainted, offer one thing countless for coffee fans,
      whether or not through the sheer type of coffee styles and
      also flavors available for pod gadgets, and/or familiar World taste developed.

      Balas
    • 2. ASVAB Practice Test  |  Juni 12, 2013 pukul 10:56 am

      Usually I do not learn article on blogs, however I would like to say that this write-up very
      compelled me to take a look at and do so! Your writing style has been surprised
      me. Thank you, very nice post.

      Balas
    • 3. otterbox iphone 5 best buy  |  Agustus 29, 2013 pukul 2:06 am

      I’m always amazed when it comes to these types of designs. The creativity and illustration skills are simply brilliant. Fantastic collection.

      Balas
    • 4. Nancy  |  September 14, 2013 pukul 11:24 am

      Howdy would you mind sharing which blog platform you’re working with? I’m going to start my own blog in the near future but I’m having a tough time selecting between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your layout seems different then most blogs and I’m looking for something completely unique. P.S Apologies for getting off-topic but I had to ask!

      Balas
    • 5. Florene  |  September 15, 2013 pukul 1:06 am

      Very quickly this web page will be famous among all blogging and site-building viewers, due to it’s good articles or reviews

      Balas
    • 6. Kyle  |  September 15, 2013 pukul 1:33 am

      It’s genuinely very complicated in this active life to listen news on TV, so I simply use internet for that purpose, and obtain the most recent information.

      Balas
    • 7. Patrice  |  September 15, 2013 pukul 5:52 pm

      Nice post. I learn something totally new and challenging on blogs I stumbleupon every day. It’s always interesting to read through articles from other authors and practice something from other sites.

      Balas
    • 8. Carroll  |  September 16, 2013 pukul 1:51 pm

      I have to thank you for the efforts you have put in writing this site. I really hope to see the same high-grade blog posts from you in the future as well. In truth, your creative writing abilities has encouraged me to get my very own blog nowđŸ˜‰

      Balas

    Tinggalkan Balasan

    Isikan data di bawah atau klik salah satu ikon untuk log in:

    Logo WordPress.com

    You are commenting using your WordPress.com account. Logout / Ubah )

    Gambar Twitter

    You are commenting using your Twitter account. Logout / Ubah )

    Foto Facebook

    You are commenting using your Facebook account. Logout / Ubah )

    Foto Google+

    You are commenting using your Google+ account. Logout / Ubah )

    Connecting to %s

    Trackback this post  |  Subscribe to the comments via RSS Feed


    Calender

    Januari 2010
    S S R K J S M
    « Okt   Feb »
     123
    45678910
    11121314151617
    18192021222324
    25262728293031

    Top Rated

    Blog Stats

    • 33,851 hits

    Klik tertinggi

    • Tak ada

    %d blogger menyukai ini: