NovaBackup DC 5 Windows System Checks

Transcription

1 NovaBackup DC 5 Windows System Checks Document version 1.5 NovaStor Software GmbH

2 Contents Copyright 3 Introduction 4 Pre-install checks 5 Network... 5 NIC driver... 5 Hostname... 5 Network configuration... 5 IP resolution... 5 Network share check... 6 Windows Firewall rules... 6 Command server... 6 Backup server... 6 Backup client... 6 Pre-operational checks 7 Tape library basic... 7 Disable removable storage manager service... 7 Tape library operational mode... 7 SCSI addresses... 7 Tape library access... 8 Tape library advanced... 9 Tape library driver details... 9 Barcodes... 9 Drive occupancy Operational checks 12 Hiback ping Commandserver can not resolve client name Remote executor port blocked by firewall Client can not resolve backup server name... 13

3 Copyright The information in this publication is subject to change without notice and is provides AS IS WITHOUT WARRANTY OF ANY KIND. THE ENTIRE RISK ARISING OUT OF THE USE OF THIS INFORMATION REMAINS WITH RECIPIENT: IN NO EVENT SHALL NOVASTOR BE LIABLE FOR ANY DIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE OR OTHER DAMAGES WHATSOEVER (INCLUDING WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION OR LOSS OF BUSINESS INFORMATION), EVEN IF NOVASTOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. The limited warranties for NOVASTOR products are exclusively set forth in the documentation accompanying such products. Nothing herein should be construed as constituting a further or additional warranty. This publication does not constitute an endorsement of the product or products that were tested. The configuration or configurations tested or described may or may not be the only available solution. This test is not a determination or product quality or correctness, nor does it ensure compliance with any federal state or local requirements. Hewlett-Packard, HP, and HP-UX are registered trademarks of Hewlett-Packard Company. IBM and AIX are registered trademarks of IBM Corporation. Linux is a registered trademark of Linus Torvald. Microsoft and Windows are registered trademarks of Microsoft Corporation. Oracle is a registered trademark, Oracle8, and Oracle9 are trademarks or registered trademarks of Oracle Corporation. SAP, R/3 and other SAP products and services possibly mentioned in this manual as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. Sun, Sun Microsystems, Solaris, and Java are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. UNIX is a registered trademark in the U.S. and other countries, licensed exclusively through X/Open Company, Ltd. Other product and company names mentioned herein may be trademarks of their respective companies. NOVASTOR believes the information in this publication is accurate as of its publication date; such information is subject to change without notice. Copyright 2013 NovaStor Software GmbH This product includes software developed by the Apache Software Foundation ( This product includes software developed by The Cryptix Foundation Limited ( copyright The Cryptix Foundation Limited. All rights reserved. This product includes software which is redistributed under MOZILLA Public License and NETSCAPE Public License ( This product includes software developed by Sun Microsystems, Inc. ( copyright Copyright 2002 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rights reserved. This product includes code licensed from RSA Security, Inc.. Some portions licensed from IBM are available at

4 Introduction In many cases, Windows server installations differ from each other with respect how the system is configured. This document shall help to find pitfalls on Windows servers in preinstall and post-install situations.

5 Pre-install checks Network NIC driver Open the Windows Device Manager on the backupserver (Start->Computer- >Properties->DeviceManager). Check the driver for the network interfaces (Properties->Driver- >DriverDetails). Update the NIC driver. Apply the same actions to the commandserver. Hostname In a DOS box on the prospective command server and/or backup server check the following property. Command: hostname obtain the name of the commandserver system Network configuration In a DOS box on the prospective command server and/or backup server check the following property. Command: ipconfig /all (ifconfig on Linux/UNIX) obtain the networks the commandserver is working in identify ISCSI networks identify DHCP usage, if it uses DHCP deactivate it, never use infinite lease time instead IP resolution In a DOS box on the prospective command server and/or backup server check the following property. Command: nslookup {hostname} see if the hostname is network resolvable the hostname must resolve to one IP address, if it resolves to more than one, correct this the hostname must not resolve to an ISCSI IP address the hostname must not resolve to , but to an IP addressable by the clients

6 Network share check Command: [none] check if network shares to be used as disk mediapool folders are r/w accessible obtain the username which has r/w access to that folders Windows 2008 Refer to to check which network settings are appropriate to maximize the network thruput on your Windows 2008 server. Teamed NICs Drastical thruput limitations on HP servers running Windows 2008 with 2 teamed network NICs have been observed. The cases observed two 1 GB NICs were temed to one 2 GB interface exposing one IP address. The performance limitations in the observed cases were less that 5% of the theoretical thruput (here 2 GB). The workaround to raise the performance at least to the maximum possible thruput of one NIC is to unteam the cards and use one IP per NIC. Firewall rules Baseport is a TCP port number which defines a port range of 2 ports used for the communication between NovaBacku DataCenter components. The firewall rules necessary to allow undisturbed traffic between the systems are shown below. Command server Firewall rules: Incoming: Baseport+0 (GUI) Baseport+1 (Executor) Outgoing: Baseport+0 (GUI) Baseport+1 (Executor) Backup server Firewall rule: Incoming: (Backup service) Backup client Firewall rule: Incoming: Baseport+1 (Executor)

7 Pre-operational checks In NodesManager create the backupserver. This will create (and start) the library control service on port Tape library basic Disable removable storage manager service The Windows removable storage manager prevents NovaBackup DataCenter pf properly accessing tape drives in a tape library. Therefore it is strongly recommended to disable the respective RSM service in the service manager of the backup server. Tape library operational mode In the operator panel or the web interface of the tape library set the operational mode to Random. Random mode allows random access to tape media slots. This is one pre-requisite for the work with tape mediapools. SCSI addresses In a DOS box on the backup server check the following properties. Change directory to {installdir}\hiback\tape in the DOS box. Command: hiscsi -scan obtain the SCSI addresses of all targets visible on that system obtain driver state of the tape library and tape drive targets The result must show a Changer entry and at least one Tape entry in the Device column like in the following example: Name C Device Vendor Product A3B0S3L0 N Changer? OVERLAND LXB A3B0S4L0 Y Tape0 HP Ultrium 2-SCSI A3B0S15L0 N Process ADAPTEC HostRAID \\.\SCSI3: with (3) devices The Name column shows the SCSI device address in the following format: A{adapter#}B{bus#}S{SCSI ID}L{SCSI LUN}

8 Tape library access In a DOS box on the backup server check the following properties. Change directory to {installdir}\hiback\tape in the DOS box. Create simple tape library config file called hijacc.cfg containing control: The address of the change in the A#B#S#L# format port:12001 wait:30 skip:fast eject:no type:hijacc driveaddr:1:/dev/null and store it in file named hijacc.cfg. The entry for control: must contain the SCSI address obtained by the hiscsi scan command described earlier in this document. Command: ophijacc -c hijacc.cfg -cmd 1 4 lines must show up containing the element addressing scheme of the library, for instance Handlers : 1 Address: 0 Import/Export: 0 Address: 0 Drives : 1 Address: 240 Slots : 11 Address: 1 for a tape library of type Overland LibraryExpress Mediachanger. If these lines do not appear, go to "Tape library driver details" in the next section.

9 Tape library advanced Tape library driver details Open the Windows Device Manager on the backupserver (Start->Computer- >Properties->DeviceManager). Check the driver for the tape library (Properties->Driver->DriverDetails). If basic check 3. failed, and libxprmc.sys (Microsoft Driver xxxxx) was installed, install the vendor driver for the tape library. Repeat basic check 3. If basic check 3. failed, and the vendor driver for the tape library was installed, install libxprmc.sys (Microsoft Driver xxxxx) Note: deinstall the tape library before you install the Microsoft native libxprmc.sys (Microsoft Driver xxxxx). The tape library device then might show up as deactivated, which is intended. Repeat basic check 3. Barcodes NovaBackup DataCenter tape library control needs media with barcodes and a tape library capable of reading barcodes. Open a DOS box, change directory to {installdir}\hiback\tape and run command: ophijacc -c hijacc.cfg -cmd 5,1,100 This command creates an output like in the example below: Slot 1 of 11: full NDW030L2 Slot 2 of 11: full NDW031L2 Slot 3 of 11: full NDW032L2 Slot 4 of 11: full NDW020L2 Slot 5 of 11: full NDW017L2 Slot 6 of 11: full NDW013L2 Slot 7 of 11: full NDW014L2 Slot 8 of 11: full NDW015L2 Slot 9 of 11: full NDW016L2 Slot 10 of 11: full NDW018L2 Slot 11 of 11: full NDW019L2 The output shows the data slot occupancy of the tape library. If a slot is shown as full a tape is inside the slot. If the full is followed by a string, this string shows the barcode label of the tape medium inside the slot, for example NDW030L2.

10 Drive occupancy NovaBackup DataCenter tape library control initially needs empty tape drives to obtain SCSI addresses for the tapedrives. This is especially necessary when attaching a tape library to a backup server. If the drive is occupied, you will receive an mmf report error message: To check if the tapedrive is occupied in beforehand, open a DOS box, change directory to {installdir}\hiback\tape and run command: ophijacc -c hijacc.cfg -cmd 4 This command creates an output like in the example below: Drive Drive 1: 00065L4 2: empty The output shows a drive (1) that is occupied already by medium with barcode label L4. The drive (2) is empty. You can dismount the medium from drive (1) and move it to an empty slot using: ophijacc -c hijacc.cfg -cmd 5,empty to show empty slots which can be used to move the medium to. Output example: Slot 27 of 92: empty Slot 31 of 92: empty Slot 40 of 92: empty

11 Now use ophijacc -c hijacc.cfg -cmd 7,1,27 to dismount (command 7) the tape medium from drive 1 to slot 27.

12 Operational checks Hiback ping With Hiback ping you check 1. Commandserver ability to resolve client name 2. Commandserver ability to connect to client remote executor 3. Client datamover functionality 4. Client ability to resolve backup server name 5. Client ability to connect to backup server 6. Backup server mediapool/device configuration and availability Open the commandserver GUI and navigate to Backup/Restore -> BackupJobs. In the list of backup jobs, mark an existing backup job, push right-mouse and choose [Ping] from the dropdown list. If all the checks went fine, you will see a popup box similar to the following: Commandserver can not resolve client name If already the commandserver actions 1. and/or 2. fail you will see a popup box similar to the following:

13 In this popup box you see Data: This is the default address (ModesManager property) of the client. The message tells us that this address could not be connected by a TCP (stream socket) connection. Reasons can be: Client IP address changed Firewall (also Windows firewall) blocks remote executor port on the way from commandserver to client Client remote executor service is not running Remote executor port blocked by firewall If a firewall blocks the remote executor port, you will see the following in a DOS box on the commandserver for a short time (TCP parameterization dependent) after the Hiback ping was executed: Command: netstat -ano findstr SYN Result: TCP : :32334 SYN_SENT 2904 The contents of the result line shows the protocol (TCP), the sender IP:senderport, the receiver IP:remote-executor port the TCP connection state (SYN_SENT) the ID of the process opening the connection to the client The SYN_SENT TCP connection state is the typical indicator for a firewall blockec remote executor port on the client side. Client can not resolve backup server name If the client can not resolve the name of the backup server you will see a popup box similar to the following:

14