Installation Guide. Tandberg Data DPS1000 Series Model: DPS1100 and DPS1200, Release: 1.3

Transcription

1 Installation Guide Tandberg Data DPS1000 Series Model: DPS1100 and DPS1200, Release: 1.3

2

3 Contents Preface v About this guide v Audience v Typographical conventions v Related documentation vi Support vi 1 Preparing for Deployment Authenticating with CHAP Determining whether to use jumbo frames Increasing storage space with DPS Expansion Module Exporting to physical tape with a physical tape device Enabling isns Configuring DPS1000 Series Accessing the web interface Configuring ports Configuring system settings Setting up certificates Using DPS1000 Series with isns Configuring initiators Setting up virtual tape libraries Adding user accounts Uninstalling DPS1000 Series Configuring Windows Initiators Configuration overview Adding initiators in DPS1000 Series Providing connection information Providing users with information required for the connection wizard Providing users with information required to connect manually Providing users with driver updates Providing access to iscsi initiator Enabling CHAP authentication on DPS1000 Series Connecting to DPS1000 Series Connecting with the connection wizard Connecting manually with no authentication Connecting manually with authentication Installing additional drivers For initiators that use CA ARCserve Backup For initiators that use HP Data Protector For initiators that use IBM Tivoli Storage Manager For initiators that use Microsoft Windows Backup Utility For initiators that use Symantec Backup Exec Adding virtual tape drives Contents iii

4 4 Configuring Linux Initiators Configuration overview Providing connection information Installing the iscsi initiator Editing the iscsi node name Enabling CHAP authentication on DPS1000 Series Adding an initiator to DPS1000 Series Configuring authentication on the initiator Connecting to DPS1000 Series Adding virtual tape drives Troubleshooting DPS1000 Series issues Initiator issues A Bar Code Label Specification for LTO Ultrium Cartridges Index iv Contents

5 Preface Welcome to the DPS1000 Series Installation Guide. Tandberg Data DPS1000 Series is a data protection solution that enables Internet Small Computer System Interface (iscsi) desktop systems and backup servers to perform backup and recovery operations. DPS1000 Series provides a shared system that can be used by up to 100 individual iscsi initiators as a private tape library. This guide enables you to plan and perform DPS1000 Series deployment. About this guide The DPS1000 Series Installation Guide is designed to help you plan your DPS1000 Series deployment and configure DPS1000 Series. The following chapters are included: Preparing for Deployment Describes configuration decisions that must be made before deployment begins. Configuring DPS1000 Series Describes how to set up the default users and configure DPS1000 Series settings. Configuring Windows Initiators Describes how to connect Windows initiators to DPS1000 Series. Configuring Linux Initiators Describes how to connect Linux initiators to DPS1000 Series. Troubleshooting Describes problems you might encounter while operating DPS1000 Series and provides suggestions for resolving the problems. In addition, the following appendices are included: XpanTape Specifications Lists the technical specifications for DPS1000 Series. Bar Code Label Specification for LTO Ultrium Cartridges Lists the bar code label specifications required for the tapes used by a physical tape device. Audience This guide is designed for use by anyone deploying DPS1000 Series. Familiarity with system and network configuration is highly recommended. The instructions in this guide were written under the assumption that you have read the DPS1000 Series Technical Overview, which provides an introduction to product functionality and concepts, and performed the tasks in the DPS1000 Series Quick Setup Guide. Typographical conventions This guide uses the following typographical conventions: Convention Bold Description Used for file names, field names, URLs, interface elements that are clicked/selected, and information that must be used literally. Preface v

6 Convention Bold Italic Italics Monospace Monospace Italic Blue Text Description Represents variables within file names, command syntax, URLs, or other literal text. Used for emphasis, book titles, and variables. Used for text that is displayed on-screen, command names and arguments (syntax), code, and command-line text. Represents variables within command syntax, code, or command-line text. Used for cross-references. This icon is used to note the user is responsible for performing the procedure that follows. Related documentation In addition to this installation guide, the DPS1000 Series documentation library includes DPS1000 Series Technical Overview, which provides an introduction to product functionality and concepts DPS1000 Series Quick Setup Guide, which provides instructions for installing the hardware and configuring DPS1000 Series on the network DPS1000 Series help set, which provides detailed instructions for working with the web interface DPS1000 Series Release Notes, which provides information about system requirements, known issues, and other information about the current release DPS Expansion Module Installation and Administration Guide, which provides instructions for unpacking, cabling, powering, and configuring Tandberg Data DPS Expansion Module, the external array that can be attached to DPS1000 Series for additional storage Support For service and support assistance, contact your authorized service and support representative directly. For Technical Support, refer to vi Preface

7 Preparing for Deployment Tandberg Data DPS1000 Series is a data protection solution that enables Internet Small Computer System Interface (iscsi) desktop systems and backup servers to perform backup and recovery operations. DPS1000 Series provides a shared system that can be used by up to 100 individual iscsi initiators as a private tape library. Each tape library supports up to eight virtual tape drives. If the DPS1100 is deployed, up to 32 virtual tape drives can be connected to DPS1000 Series simultaneously. If the DPS1200 is deployed, up to 64 virtual tape drives can be connected simultaneously. For a complete overview of DPS1000 Series, see the DPS1000 Series Technical Overview. To make more informed choices about your deployment, you should review this chapter before you deploy and configure DPS1000 Series. Authenticating with CHAP DPS1000 Series supports Challenge Handshake Authentication Protocol (CHAP) with Message-Digest algorithm 5 (MD5) to validate the target or the target and initiators. DPS1000 Series supports one-way authentication that validates the iscsi initiator, and it supports mutual authentication that validates both the initiator and the target (DPS1000 Series). If you want to use CHAP for authentication, determine whether you want one-way or mutual authentication. For information about configuring DPS1000 Series and initiators for CHAP, see Configuring Windows Initiators on page 9. Determining whether to use jumbo frames Jumbo frames are Ethernet frames that can carry a higher payload than other frames and may enable better performance. Jumbo frames are not available in all environments; however, if your network topology (including initiators, switches, and so on) supports them, you should enable jumbo frames during deployment. In DPS1000 Series, jumbo frames can be enabled for the iscsi ports, but not for the management port. For information about enabling jumbo frames in DPS1000 Series, see Configuring ports on page 4. Note If your network does not support jumbo frames, do not enable them on initiators or DPS1000 Series. Doing so may result in dropped SCSI commands and unexpected behavior. 1

8 Increasing storage space with DPS Expansion Module DPS Expansion Module is an optional external storage array that can be connected to DPS1000 Series to increase the amount of storage space for virtual tapes. For information about installing DPS Expansion Module, see the DPS Expansion Module Installation and Administration Guide. Exporting to physical tape with a physical tape device You can connect an optional physical tape device to DPS1000 Series to export virtual tapes to physical tape. Refer to the documentation for the physical library for installation instructions. You must also create bar code labels for each cartridge that will be used with DPS1000 Series. See Bar Code Label Specification for LTO Ultrium Cartridges on page 37 for information about how to property label cartridges. Note If a StorageLibrary T24 will be used, you must also enable the library to identify the type of media installed in the library when it scans bar codes. With this option enabled, the bar code scan includes two extra digits: L2 for an LTO-2 data cartridge, L3 for an LTO-3 data cartridge, or L4 for an LTO-4 data cartridge. Refer to the StorageLibrary T24 documentation for more information. Enabling isns Internet Storage Name Service (isns) enables you to manage multiple storage devices from a central location. This is useful if you have multiple DPS1000 Series appliances in your environment and want initiators to have access to a subset of them. For information about enabling the isns client on DPS1000 Series, see Help, which is available within the web interface. 2 Preparing for Deployment

9 Configuring DPS1000 Series You must configure the default user accounts, the DPS1000 Series appliance, and initiators. Accessing the web interface The DPS1000 Series web interface enables you to configure and manage DPS1000 Series. To access the web interface 1. If necessary, determine the IP address of the DPS1000 Series appliance. a. Access the appliance through the console using any terminal program. For example, to access DPS1000 Series from Microsoft Windows using the HyperTerminal connection wizard, select All Programs Accessories Communications HyperTerminal from the Start menu. In the HyperTerminal connection wizard, enter a connection name, choose an icon to associate with the connection, and click OK. In the Connect To dialog box, select a communications port and click OK. COM1 is the port used by most systems. Depending on your version of HyperTerminal, you may be required to click the Configure button to display the Properties dialog box for the selected communications port. In the Properties dialog box, set the following information: Bits per second = 9600 Data bits = 8 Parity = None Stop bits = 1 Flow control = None Click OK. b. At the command prompt, enter one of the following to verify the configuration of the DPS1000 Series Management port: For the DPS1100: netconfig -f eth0 For the DPS1200: netconfig -f eth2 The IP address, gateway, and netmask are listed. 2. Launch a web browser. 3

10 3. Enter where ip_address is the management network interface address. The browser may display a warning page and certificate errors. DPS1000 Series ships with a self-signed certificate that is used to sign its audit log and to establish a secure communication channel between your browser and the DPS1000 Series web application server, through Secure Sockets Layer (SSL). This self-signed certificate may cause your browser to display a certificate warning for the following reasons: Many browsers warn you when a web application employs a self-signed certificate, which is are not considered as secure as a certificate signed by a Certificate Authority. When the DPS1000 Series default self-signed certificate is created, a temporary hostname is used for the appliance. During deployment, this hostname most likely changed. Many browsers warn you when the hostname on the certificate and the hostname on the appliance do not match. 4. If the browser displays a warning, accept the certificate or add an exception (depending on your browser) and continue to the web interface. 5. Log in as the admin or str_admin user, which are the default user accounts: The admin account is assigned the Appliance Administrator role, which enables this user to perform appliance configuration. The str_admin account is assigned the Storage Administrator role, which enables this user to set up the initiators, configure the virtual tape libraries, create users, and perform other tasks. For more information about roles, see Managing users in the Security section of the help set, which is available within the web interface. Configuring ports Before you configure the DPS1000 Series ports, gather the following information: Name Description Your Value Hostname DNS domain DNS IP address iscsi port 0: IP address An optional system hostname for the appliance. The name of the domain in which the Domain Name System (DNS) server belongs. You can set up to three DNS domains. Not required if using DHCP. The IP address of the DNS server. You can set up to three DNS IP addresses. Not required if using DHCP. The IP address of iscsi port 0. Not required if using DHCP, in which case this port is automatically named hostname-iscsi0. 4 Configuring DPS1000 Series

11 Name Description Your Value iscsi port 0: Subnet mask iscsi port 0: Jumbo frame settings iscsi port 1: IP address iscsi port 1: Subnet mask iscsi port 1: Jumbo frame settings The netmask that corresponds to the IP address for iscsi port 0. Not required if using DHCP. Whether jumbo frames will be enabled for iscsi port 0. For information about whether to enable this option, see Determining whether to use jumbo frames on page 1. The IP address of iscsi port 1. This is only required if you have connected iscsi port 1 to the network. Not required if using DHCP, in which case this port is automatically named hostname-iscsi1. The netmask that corresponds to the IP address for iscsi port 1. This is only required if you have connected iscsi port 1 to the network. Not required if using DHCP. Whether jumbo frames will be enabled for iscsi port 1. For information about whether to enable this option, see Determining whether to use jumbo frames on page 1. To configure port settings 1. Log in as the admin user. 2. On the Configuration menu, click Edit Network Port Settings. 3. Set the hostname and click Apply. You can optionally set the DNS domain and DNS IP address, too. After you set the hostname, users can access the web interface using the following address: Changes may be required to the DNS server to include this hostname. 4. In the iscsi Port 0 section, choose whether to use jumbo frames, set the IP address and subnet mask for the iscsi port, and click Apply. Or, select Use DHCP to gather this information from a DHCP server and click Apply. Repeat this step for iscsi port 1, if you have connected that port to the network as well. Note If your network does not support jumbo frames, do not enable them on initiators or DPS1000 Series. Doing so may result in dropped SCSI commands and unexpected behavior. Configuring DPS1000 Series 5

12 Configuring system settings Before you configure the system settings, gather the following information: Name Description Your Value Time configuration SMTP server SMTP port Subject line prefix From address for messages SMTP username SMTP password The appliance time. To use a Network Time Protocol (NTP) server, you must have the name of the NTP server and the current time zone. DPS1000 Series provides default NTP servers. To manually set the time, you need the current date and time. The hostname of a Simple Mail Transfer Protocol (SMTP) server. The port number for a SMTP server. This number is usually 25. The text that you would like to use as the Subject line of any sent to users. This text makes it easy for users to identify from DPS1000 Series. The address that you would like to appear in the From line of any sent to users. Bounced messages are returned to this address. The username required to access the SMTP server. (This is not required for all SMTP configurations.) The corresponding password required to access the SMTP server. (This is not required for all SMTP configurations.) To configure system settings 1. Log in as the admin user. 2. On the Configuration menu, click Edit System Settings. In the Appliance Clock area, configure NTP or set the time and click Apply. In the SMTP Settings area, configure SMTP and click Apply. You can also send a test in the Test SMTP area. 6 Configuring DPS1000 Series

13 Setting up certificates Replace the self-signed certificate with a certificate signed by a Certificate Authority. For more information, see Managing certificates in the Security section of Help, which is available within the web interface. Using DPS1000 Series with isns Internet Storage Name Service (isns) enables you to manage multiple storage devices from a central location. To use DPS1000 Series with isns 1. Set up your isns server. 2. In the DPS1000 Series web interface, enable the DPS1000 Series isns client. Refer to Enabling isns in the Configuration section of Help, which is available within the web interface. When you connect initiators to DPS1000 Series, follow the steps defined for isns. Configuring initiators Initiators must be configured before they can back up or restore data on DPS1000 Series. For instructions on connecting initiators, see Configuring Windows Initiators on page 9 or Configuring Linux Initiators on page 25. Setting up virtual tape libraries When you add an initiator, DPS1000 Series automatically creates a virtual tape library with five virtual tapes. You may want to add or remove virtual tapes or perform other operations to further configure this virtual tape library. For more information, see Managing initiators and Managing virtual tape libraries in the Administration section of Help, which is available within the web interface. Adding user accounts After deployment, you may want to create additional user accounts or assign other roles to the default accounts. For more information about users and roles, see the DPS1000 Series Technical Overview or refer to Managing users in the Security section of Help, which is available within the web interface. Uninstalling DPS1000 Series Contact Support for information about uninstalling DPS1000 Series. Configuring DPS1000 Series 7

14 8 Configuring DPS1000 Series

15 Configuring Windows Initiators Initiators must be configured before they can back up data on or restore data from DPS1000 Series. This chapter describes configuring Windows initiators. For information about configuring Linux initiators, see Configuring Linux Initiators on page 25. Configuring Windows initiators involves tasks in DPS1000 Series and on the initiator. In this chapter, tasks performed by you in DPS1000 Series are labeled Storage Administrator because this is the role required for these tasks. Tasks performed on the initiator are labeled User. Note It is your responsibility to provide your users with the information required to successfully configure their initiators and back up to DPS1000 Series. No DPS1000 Series end-user documentation is provided, although this chapter provides examples of the type of information required for end users. Configuration overview The steps required to configure an initiator vary depending on the type of authentication used when initiators connect to DPS1000 Series. By default, no authentication is used. You can enable Challenge Handshake Authentication Protocol (CHAP) with Message-Digest algorithm 5 (MD5) for authentication. DPS1000 Series supports one-way authentication that validates the iscsi initiator and mutual authentication that validates both the initiator and the target (DPS1000 Series). Determine the authentication type before you begin configuring initiators. The following is an overview of the steps needed to configure Windows initiators: 1. The Storage Administrator adds the initiator to DPS1000 Series. See Adding initiators in DPS1000 Series on page The Storage Administrator provides the user with connection information for the initiator. See Providing connection information on page The Storage Administrator provides the user with driver updates for the initiator. See Providing users with driver updates on page The Storage Administrator provides access to the iscsi initiator to the user. See Providing access to iscsi initiator on page If authentication is used, the Storage Administrator enables CHAP authentication. See Enabling CHAP authentication on DPS1000 Series on page 13. 9

16 6. The User connects the initiator to DPS1000 Series. See Connecting to DPS1000 Series on page The User updates drivers on the initiator, if necessary. See Installing additional drivers on page The Storage Administrator adds additional virtual tape drives if an initiator needs access to more than one. See Adding virtual tape drives on page 23. Adding initiators in DPS1000 Series If CHAP authentication is not enabled, an initiator is automatically created for any iscsi client that connects to DPS1000 Series. Storage Administrator task To add an initiator 1. On the DPS1000 Series Administration menu, click Manage VTLs. 2. On the Manage VTLs page, click Add Initiator. 3. In the Add Initiator area, provide the information required for the type of authentication. See Providing connection information on page 10 for a description and example of this information. iscsi Name Initiator CHAP name (one-way and mutual authentication) Target CHAP secret (one-way and mutual authentication) Target CHAP name (mutual authentication only) Initiator CHAP secret (mutual authentication only) Note The initiator CHAP secret and the target CHAP secret cannot be the same. 4. To allow this initiator to back up and retrieve data on DPS1000 Series, select Allow initiator to connect. Otherwise, clear this option. 5. Click Save. Providing connection information The information that you must provide to users varies based on whether they will be using the connection wizard. Providing users with information required for the connection wizard Storage Administrator task To download the configuration file and connection wizard 1. On the DPS1000 Series Administration menu, click Manage VTLs. 2. In the Initiators table, click next to the initiator. 10 Configuring Windows Initiators

17 3. Save the file to your computer. 4. In the Tips pane (displayed when you click at the top of the page), click Initiator Setup Files. 5. On the Initiator Setup Files page, click Download the Connection Wizard. 6. Save the EXE file to your computer. 7. Send the configuration file and the connection wizard to the user, who must install them on the initiator. Note that the configuration file contains the CHAP password. Be sure to secure this file when sending it to the end user. For example, you can use secure , secure file transfer, directory permissions, or encryption to secure the file. Providing users with information required to connect manually Storage Administrator task If the user must connect to DPS1000 Series manually, you must provide users with connection information. Name Description Authentication Alias iscsi Name Initiator CHAP name Target CHAP secret An optional name that identifies an initiator within DPS1000 Series. The Internet Small Computer System Interface (iscsi) Qualified Name of the initiator in the following format: iqn.yyyy-mm.domain_name:computer_name For example: iqn com.mycompany:mycomputer In Microsoft iscsi Initiator, the iscsi name is displayed on the General tab in the Initiator Node Name field. It is recommended that you use the default iscsi Name configured on the initiator. The name required to authenticate the initiator for CHAP. In Microsoft iscsi Initiator, this name must be characters in length and by default is the same as the iscsi Name. A password required to authenticate the target (DPS1000 Series) for CHAP. For Microsoft iscsi Initiator, this password must be characters in length. Note that the initiator CHAP secret and the target CHAP secret cannot be the same. None One-way Mutual None One-way Mutual One-way Mutual One-way Mutual Configuring Windows Initiators 11

18 Name Description Authentication Target CHAP name Initiator CHAP secret The name required to authenticate the target (DPS1000 Series) for CHAP. (Only some iscsi initiators require this name.) For Microsoft iscsi Initiator, this name must be 1-18 characters in length. A password required to authenticate the initiator for CHAP. For Microsoft iscsi Initiator, this password must be characters in length. Note that the initiator CHAP secret and the target CHAP secret cannot be the same. Mutual Mutual Providing users with driver updates Storage Administrator task Users can download and install drivers manually or using the connection wizard. If your users back up data using Windows Backup Utility or Symantec Backup Exec, they must use the Tandberg Data StorageLoader changer driver for DPS1000 Series. If they do not have this changer driver installed, they may be prompted to update to this driver when they connect the initiator to the DPS1000 Series changer. Otherwise, they may have to update the driver after they connect the initiator. Users may also have to update the driver for the drive. Typically, there is no need to download this driver because the hardware update wizard will find it automatically (if Windows Update is in use). However, you can download the drivers manually (as described below) in case the wizard cannot find the driver. Unless your users will install the drivers using the connection wizard, you should download the drivers and provide your users with the appropriate drivers for their operating system before they begin. To download the drivers manually 1. Click on the menu bar. 2. In the Tips pane, click Initiator Setup Files. 3. Click Download the Virtual Library drivers. 4. Save the ZIP file to your computer as necessary. Providing access to iscsi initiator Storage Administrator task Users can configure their initiators using Microsoft iscsi Initiator for Windows systems or the iscsi initiator available on other operating systems. If the initiator uses an iscsi HBA 12 Configuring Windows Initiators

19 (host bus adapter) card, the initiator should be configured using the tool that comes with the HBA. Ensure that your users have access to an iscsi initiator. The procedures in this chapter reference Microsoft iscsi Initiator. Windows 2008 systems should already have Microsoft iscsi Initiator installed on them. However, the latest version of iscsi Initiator may need to be installed on other Windows operating systems. Enabling CHAP authentication on DPS1000 Series Storage Administrator task If you want to enable authentication between DPS1000 Series and the initiator, complete the following steps. Otherwise, skip to Connecting to DPS1000 Series on page 13. To enable CHAP authentication 1. On the DPS1000 Series Configuration menu, click Edit System Settings. 2. Select CHAP Authentication Required. 3. Click Apply. Connecting to DPS1000 Series Users can connect to DPS1000 Series using the connection wizard or manually. Connecting with the connection wizard User task To connect using the connection wizard 1. Save the DPS1000 Series Connection Wizard and configuration file in the same directory on the initiator. The Storage Administrator will provide you with these files. 2. Double-click the EXE file to run the wizard. 3. Follow the steps in the wizard to install the necessary drivers and connect to DPS1000 Series. If you are using a backup management application other than Microsoft Windows Backup Utility, choose the custom installation and do not install the drivers. Instead, install the drivers manually. Refer to Installing additional drivers on page 19. If Windows displays a message that the driver has not passed Windows Logo testing, click Continue Anyway and finish the wizard. Connecting manually with no authentication User task This procedure provides steps for using Microsoft iscsi Initiator. You will need a different set of steps if another iscsi initiator is installed on the client. Configuring Windows Initiators 13

20 To connect manually 1. Open Microsoft iscsi Initiator. 2. If the initiator must connect to DPS1000 Series using a custom name, complete these steps: a. On the General tab, click Change. b. In the Initiator Node Name Change dialog box, type the new iscsi name and click OK. 3. Click the Discovery tab. 4. Add iscsi port information as follows: a. In the Target Portals area, click Add. b. On the Add Target Portal dialog box, type the IP address or hostname of the iscsi port to which you are connecting in the IP Address or DNS Name field. Here is an example hostname: DPS1000 Series-B02YVK-iscsi0. c. Click OK. 5. In the iscsi Initiator Properties dialog box, click the Targets tab. Note If the targets do not display on this page, click Refresh. If the targets still do not display, the initiator may not be enabled to make connections. Contact Support. 14 Configuring Windows Initiators

21 6. Log on to the changer using the following steps: a. Click the iscsi name for the changer ( changer is appended to its name) and click Log On. The Log On to Target dialog box is displayed. b. Select Automatically restore this connection when the system boots. Note Do not select this option if more than 32 initiators will be connected when the DPS1100 is deployed. Do not select this option if more than 64 initiators will be connected when the DPS1200 is deployed. Instead, have initiators connect only when they are ready to back up data. c. Click Advanced. d. On the Advanced Settings dialog box, select Microsoft iscsi Initiator from the Local adapter list. e. From the Source IP list, select your IP address. f. From the Target Portal list, select your target portal, which you entered in the Add Target Portal dialog box. g. Click OK to close the Advanced Settings dialog box. h. Click OK to close the Log On To Target dialog box. i. If you are prompted for a new driver, browse to the location of the changer driver provided by your Storage Administrator. 7. Repeat the previous step to log on to the drive. (If there is more than one drive, log on to each.) You do not need to update the driver for the drive at this time. 8. Close Microsoft iscsi Initiator. Connecting manually with authentication User task This procedure provides steps for using Microsoft iscsi Initiator. You will need a different set of steps if another iscsi initiator is installed on the client. To connect manually with CHAP authentication 1. Open Microsoft iscsi Initiator. 2. If the initiator must connect to DPS1000 Series using a custom name, complete these steps: a. On the General tab, click Change. b. In the Initiator Node Name Change dialog box, type the new iscsi name and click OK. Configuring Windows Initiators 15

22 3. If configuring mutual authentication, complete these steps: a. On the General tab, click Secret. The CHAP Secret Setup dialog box is displayed. b. On the CHAP Secret Setup dialog box, type the initiator CHAP secret and click OK. 4. Click the Discovery tab. 5. If using isns server, perform the following steps: a. In the isns Servers area, click Add. b. In the Add isns Server dialog box, type the IP address or hostname of the isns server and click OK. c. Skip to step Add iscsi port information as follows: a. In the Target Portals area, click Add. b. On the Add Target Portal dialog box, type the IP address or hostname of the iscsi port to which you are connecting in the IP Address or DNS Name field. 16 Configuring Windows Initiators

23 c. Click Advanced. d. On the Advanced Settings dialog box, select CHAP logon information. e. In the User name field, type the initiator CHAP name. f. In the Target secret field, type the target CHAP secret. g. If configuring mutual authentication, select Perform mutual authentication. h. Click OK. i. Click OK to close the Add Target Portal dialog box. 7. Log on to the changer as follows: a. Click the Targets tab. Configuring Windows Initiators 17

24 b. Select the changer from the list ( changer is appended to its name) and click Log On. c. In the Log On To Target dialog box, select Automatically restore this connection when the system boots. Note Do not select this option if more than 32 initiators will be connected when the DPS1100 is deployed. Do not select this option if more than 64 initiators will be connected when the DPS1200 is deployed. Instead, have initiators connect only when they are ready to back up data. d. Click Advanced. e. On the Advanced Settings dialog box, select Microsoft iscsi Initiator from the Local adapter list. f. From the Source IP list, select your IP address. g. From the Target Portal list, select your target portal, which you entered in the Add Target Portal dialog box. h. Select CHAP logon information. i. In the User name field, type the initiator CHAP name. j. In the Target secret field, type the target CHAP secret. k. If configuring mutual authentication, select Perform mutual authentication. 18 Configuring Windows Initiators

25 l. Click OK. m. Click OK to close the Log On to Target dialog box. n. If you are prompted for a new driver, browse to the location of the changer driver provided by your Storage Administrator. 8. Repeat the previous step to log on to the drive. (If there is more than one drive, log on to each.) You do not need to update the driver for the drive at this time. 9. Close Microsoft iscsi Initiator. Installing additional drivers If you do not install drivers using the connection wizard, you may need to update the drivers for the DPS1000 Series changer and tape drive manually. For initiators that use CA ARCserve Backup User task On each initiator that uses CA ARCserve Backup, you must install an updated changer driver (if you were not prompted to do so during setup) and an updated tape drive driver. To update the drivers 1. Right-click on My Computer and click Manage. 2. In the Computer Management window, click Device Manager. 3. Expand the Medium Changer area on the right to check the medium changer: If the medium changer is Tandberg Data StorageLoader, continue with step 6. If the medium changer is not Tandberg Data StorageLoader, continue with step 4. If the medium changer is not available, check the Targets tab in iscsi Initiator to verify that you are connected to DPS1000 Series. 4. Right-click the medium changer and click Update driver. Configuring Windows Initiators 19

26 5. Follow the steps in the Hardware Update Wizard to find and install the driver that you downloaded before you configured the initiator. 6. Expand the Tape drives area on the right. If the tape drive does not display in this area, expand the Other area. 7. Right-click the drive and click Update driver. 8. Follow the steps in the Hardware Update Wizard to automatically find and install the correct driver. If the wizard cannot find the driver, use the driver that you downloaded before you configured the initiator. 9. Close the Computer Management window. For initiators that use HP Data Protector User task No additional configuration is required for HP Data Protector. For initiators that use IBM Tivoli Storage Manager User task Initiators that use IBM Tivoli Storage Manager (TSM) must use the TSM driver for the DPS1000 Series changer and tape drive, which are available by default. To verify the connection to DPS1000 Series 1. Right-click on My Computer and click Manage. 2. In the Computer Management window, click Device Manager. 3. Expand the Medium Changer area on the right to check the medium changer. If the medium changer is not available, check the Targets tab in iscsi Initiator to verify that you are connected to DPS1000 Series. 20 Configuring Windows Initiators

27 For initiators that use Microsoft Windows Backup Utility User task On each initiator that uses the Windows Backup Utility, you must install an updated changer driver (if you were not prompted to do so during setup) and an updated tape drive driver. To update the drivers 1. Right-click on My Computer and click Manage. 2. In the Computer Management window, click Device Manager. 3. Expand the Medium Changer area on the right to check the medium changer: If the medium changer is Tandberg Data StorageLoader, continue with step 6. If the medium changer is not Tandberg Data StorageLoader, continue with step 4. If the medium changer is not available, check the Targets tab in iscsi Initiator to verify that you are connected to DPS1000 Series. 4. Right-click the medium changer and click Update driver. 5. Follow the steps in the Hardware Update Wizard to find and install the driver that you downloaded before you configured the initiator. 6. Expand the Tape drives area on the right. If the tape drive does not display in this area, expand the Other area. 7. Right-click the drive and click Update driver. 8. Follow the steps in the Hardware Update Wizard to automatically find and install the correct driver. If the wizard cannot find the driver, use the driver that you downloaded before you configured the initiator. 9. Close the Computer Management window. If you cannot see tapes in the Media Pools area of the Computer Management window, refer to the following: Virtual tapes not seen by Windows Backup Utility on page 34 Virtual tapes not recognized by Windows Backup Utility after import on page 35 Configuring Windows Initiators 21

28 For initiators that use Symantec Backup Exec User task On each initiator that uses Symantec Backup Exec, you must install an updated changer driver (if you were not prompted to do so during setup). To update the drivers 1. Right-click on My Computer and click Manage. 2. In the Computer Management window, click Device Manager. 3. Expand the Medium Changer area on the right to check the medium changer: If the medium changer is Tandberg Data StorageLoader, you can skip the remaining steps. If the medium changer is not Tandberg Data StorageLoader, continue with step 4. If the medium changer is not available, check the Targets tab in iscsi Initiator to verify that you are connected to DPS1000 Series. 4. Right-click the medium changer and click Update driver. 5. Follow the steps in the Hardware Update Wizard to find and install the driver that you downloaded before you configured the initiator. If the wizard cannot find the driver, use the driver that you downloaded before you configured the initiator. 6. Close the Computer Management window. 22 Configuring Windows Initiators

29 Adding virtual tape drives Storage Administrator task If an initiator needs access to more than one virtual tape drive, this optional procedure enables you to add a virtual tape drive. To add a virtual tape drive 1. On the Administration menu, click Manage VTLs. 2. In the Initiators table, click next to the initiator associated with the virtual tape library. 3. In the Virtual Tape Library area, click. 4. In the confirmation dialog box, click OK. DPS1000 Series automatically adds the virtual tape drive to the list of targets in the iscsi initiator. The user must then log in to the new tape drive. Configuring Windows Initiators 23

30 24 Configuring Windows Initiators

31 Configuring Linux Initiators Initiators must be configured before they can back up data on or restore data from DPS1000 Series. This chapter describes configuring Linux initiators. For information about configuring Windows initiators, see Configuring Windows Initiators on page 9. Configuring Linux initiators involves tasks in DPS1000 Series and on the initiator. In this chapter, tasks performed by you in DPS1000 Series are labeled Storage Administrator because this is the role required for these tasks. Tasks performed on the initiator are labeled User. Note It is your responsibility to provide your users with the information required to successfully configure their initiators and back up to DPS1000 Series. No DPS1000 Series end-user documentation is provided, although this chapter provides examples of the type of information required for end users. Configuration overview The steps required to configure an initiator vary depending on the type of authentication used when initiators connect to DPS1000 Series. By default, no authentication is used. You can enable Challenge Handshake Authentication Protocol (CHAP) with Message-Digest algorithm 5 (MD5) for authentication. DPS1000 Series supports one-way authentication that validates an iscsi initiator and mutual authentication that validates both the initiator and the target (DPS1000 Series). Determine the authentication type before you begin configuring initiators. The following is an overview of the steps needed to configure Linux initiators: 1. The Storage Administrator provides the user with connection information for the initiator. See Providing connection information on page The User installs the iscsi initiator. See Installing the iscsi initiator on page The User edits the iscsi node name on the initiator. See Editing the iscsi node name on page If authentication is used: a. The Storage Administrator enables CHAP authentication. See Enabling CHAP authentication on DPS1000 Series on page 28. b. The Storage Administrator adds the initiator to DPS1000 Series. See Adding an initiator to DPS1000 Series on page 28. c. The User configures authentication on the initiator. See Configuring authentication on the initiator on page

32 5. The User connects the initiator to DPS1000 Series. See Connecting to DPS1000 Series on page The Storage Administrator adds additional virtual tape drives if an initiator needs access to more than one. See Adding virtual tape drives on page 31. Providing connection information Storage Administrator task Before users can connect their initiators to DPS1000 Series, you must provide users with connection information. Name Description Authentication iscsi port 0: IP address or hostname iscsi port 1: IP address or hostname Alias iscsi name Initiator CHAP name The IP address or hostname for iscsi port 0. This IP address is available on the DPS1000 Series Home page. Each initiator should connect to only one of the iscsi ports. The IP address or hostname for iscsi port 1. The IP address is available on the DPS1000 Series Home page. (This is only needed if both iscsi ports are used.) Each initiator should connect to only one of the iscsi ports. A optional name that identifies an initiator within DPS1000 Series. The default value of the alias may be based on the initiator s hostname; therefore, the user may have this information (see Editing the iscsi node name on page 27). The Internet Small Computer System Interface (iscsi) Qualified Name of the initiator, which varies according to the Linux distributor, in the following format: iqn.yyyy-mm.domain_name:computer_name For example: iqn com.redhat:mycomputer. It is recommended that you use the default iscsi name configured on the initiator, which may be based on the initiator s hostname. Therefore, the user may have this information (see Editing the iscsi node name on page 27). The name required to authenticate the initiator for CHAP. None One-way Mutual None One-way Mutual None One-way Mutual None One-way Mutual One-way Mutual 26 Configuring Linux Initiators

33 Name Description Authentication Target CHAP secret Target CHAP name Initiator CHAP secret A password required to authenticate the initiator for CHAP. Note that the initiator CHAP secret and the target CHAP secret cannot be the same. The name required to authenticate the target (DPS1000 Series) for CHAP. (Only some iscsi initiators require this name.) A password required to authenticate the target (DPS1000 Series) for CHAP. Note that the initiator CHAP secret and the target CHAP secret cannot be the same. One-way Mutual Mutual Mutual Installing the iscsi initiator User task Before you begin, obtain connection information from your Storage Administrator. Then, perform the following steps on the command line to install the iscsi initiator (on Red Hat Enterprise Linux). To install the iscsi initiator 1. To search for the most recent version of the iscsi initiator, enter yum search iscsi 2. To install the iscsi initiator, enter yum install iscsi-initiator-utils Editing the iscsi node name User task By default, the hostname of the initiator is specified in the iscsi configuration file. If the host name is not specified in the file or if you wish to change the initiator name, complete the following steps: To edit the iscsi node name 1. Open the /etc/iscsi/initiatorname.iscsi file in a text editor. 2. Add or edit the InitiatorName parameter to specify the initiator name. Here is an example: InitiatorName=iqn com.redhat:dpsrhel52 Configuring Linux Initiators 27

34 3. Optionally, specify an alias for the initiator by editing the InitiatorAlias parameter. Here is an example: InitiatorAlias=crdsrhel52 4. Save and close the file. Enabling CHAP authentication on DPS1000 Series Storage Administrator task If you want to enable authentication between DPS1000 Series and the initiator, complete the following steps. Otherwise, skip to Connecting to DPS1000 Series on page 30. To enable CHAP authentication 1. On the DPS1000 Series Configuration menu, click Edit System Settings. 2. Select CHAP Authentication Required. 3. Click Apply. Continue to the next procedure. Adding an initiator to DPS1000 Series Storage Administrator task If you enabled CHAP authentication, you must add an initiator to DPS1000 Series before the user connects the initiator. Complete the following steps to add an initiator using the DPS1000 Series web interface. Otherwise, skip to Connecting to DPS1000 Series on page 30. To add an initiator 1. On the DPS1000 Series Administration menu, click Manage VTLs. 2. On the Manage VTLs page, click Add Initiator. 3. In the Add Initiator area, provide the following information. See Providing connection information on page 26 for a description and example of this information. Alias iscsi Name Initiator CHAP name (one-way and mutual authentication) Target CHAP secret (one-way and mutual authentication) Target CHAP name (mutual authentication only) Initiator CHAP secret (mutual authentication only) Note The initiator CHAP secret and the target CHAP secret cannot be the same. 4. To allow this initiator to back up and retrieve data on DPS1000 Series, select Allow initiator to connect. Otherwise, clear this option. 5. Click Save. 28 Configuring Linux Initiators

35 Configuring authentication on the initiator User task If authentication was enabled, you must configure authentication on the initiator before connecting the initiator to DPS1000 Series. On Linux, Open-iSCSI supports CHAP authentication; see for more information about this iscsi implementation. Note For steps 3 and 4 below, the usernames and passwords specified for the node.session and discovery.sendtargets parameters must match. However, the initiator CHAP secret and target CHAP secret specified for mutual authentication cannot be the same. If authentication was not enabled, skip to Connecting to DPS1000 Series. To configure CHAP authentication on the initiator 1. Open the /etc/iscsi/iscsid.conf file in a text editor. 2. To enable CHAP authentication, uncomment these lines by removing the pound sign (#) from the beginning of the line and set the parameters to CHAP: node.session.auth.authmethod = CHAP discovery.sendtargets.auth.authmethod = CHAP 3. To set a CHAP username and password for authenticating the initiator for one-way and mutual authentication, uncomment the following lines and specify the username and password: node.session.auth.username = initiator_chap_name node.session.auth.password = target_chap_secret discovery.sendtargets.auth.username = initiator_chap_name discovery.sendtargets.auth.password = target_chap_secret 4. To set a CHAP username and password for authenticating the target for mutual authentication, uncomment the following lines and specify the username and password: node.session.auth.username_in = target_chap_name node.session.auth.password_in = initiator_chap_secret discovery.sendtargets.auth.username_in = target_chap_name discovery.sendtargets.auth.password_in = initiator_chap_secret 5. Save and close the file. Configuring Linux Initiators 29

36 Connecting to DPS1000 Series User task You can connect directly to DPS1000 Series or you can connect through isns using OpeniSCSI. Before you begin, obtain connection information from your Storage Administrator. Then, perform the following steps on the command line. To connect an initiator directly to DPS1000 Series 1. To discover the available targets, enter the following command: iscsiadm -m discovery -t sendtargets -p ip_address where ip_address is the IP address of one of the DPS1000 Series iscsi ports. A list of target devices is displayed. Here is an example of the output: :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-changer :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-changer :3260,1 iqn com.mycompany:b02yvk.0.dps-vtl-drive :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-drive-0 2. To connect the initiator to DPS1000 Series, enter the following: iscsiadm -m node -T target_name -p target_portal -l where target_name is the iscsi qualified name of the target and target_portal is the IP address of one of the target devices. Example: iscsiadm -m node -T iqn com.mycompany:b02yvk.0.dps-vtlchanger-0 -p l Here is an example of the output: Logging in to [iface: default, target: iqn com.mycompany:b02yvk.0.dps-vtl-changer-0, portal: ,3260] Login to [iface: default, target: iqn com.mycompany:b02yvk.0.dps-vtl-changer-0, portal: ,3260]: successful 3. Repeat step 2 for the changer and drives on the IP address for which the discovery was performed (in step 1). If no authentication is used, DPS1000 Series automatically adds this initiator to its list of initiators and creates a virtual library. To connect an initiator through isns User task 1. Open the /etc/iscsi/iscsid.conf file in a text editor. 2. Edit the following line to specify the IP address of the isns server. isns.address = isns_server_ip_address 30 Configuring Linux Initiators

37 3. Uncomment the following line by removing the pound sign (#) from the beginning of the line and specify a port number provided by your Storage Administrator: #isns.port = Save and close the file 5. Perform a discovery using isns by entering the following command: iscsiadm -m discovery -t isns A list of target devices is displayed. Here is an example of the output: :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-changer :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-changer :3260,1 iqn com.mycompany:b02yvk.0.dps-vtl-drive :3260,0 iqn com.mycompany:b02yvk.0.dps-vtl-drive-0 6. To connect the initiator to DPS1000 Series, enter the following command: iscsiadm -m node -T target_name -p target_portal -l Here is an example of this command: iscsiadm -m node -T iqn com.mycompany:b02yvk.0.dps-vtlchanger-0 -p l Here is an example of the output: Logging in to [iface: default, target: iqn com.mycompany:b02yvk.0.dps-vtl-changer-0, portal: ,3260] Login to [iface: default, target: iqn com.mycompany:b02yvk.0.dps-vtl-changer-0, portal: ,3260]: successful 7. Repeat step 6 for a changer and all drives on the same IP address returned by the discovery (in step 5). Adding virtual tape drives Storage Administrator task If an initiator needs access to more than one virtual tape drive, this optional procedure enables you to add a virtual tape drive. To add a virtual tape drive 1. On the Administration menu, click Manage VTLs. 2. In the Initiators table, click next to the initiator associated with the virtual tape library. 3. In the Virtual Tape Library area, click. 4. In the confirmation dialog box, click OK. DPS1000 Series automatically adds the virtual tape drive to the list of targets in the iscsi initiator. The user must then log in to the new tape drive. Configuring Linux Initiators 31

38 32 Configuring Linux Initiators

39 Troubleshooting The following sections describe issues you might encounter while operating DPS1000 Series and provide suggestions for resolving the issues. DPS1000 Series issues Use the following to troubleshoot DPS1000 Series and its virtual tape library. Troubleshooting DPS1000 Series drives Appliance drive problems are indicated in the web interface. The following illustration shows the drives, which are located on the front of the appliance. Front of the DPS1100 Front of the DPS1200 In the web interface, the RAID Status area of the Home page shows the status of each drive in the RAID array. If one of the blocks in the RAID Status area is red (indicating a problem drive), hold your pointer over it to show which drive has a problem. If you encounter a single drive error, the data on the appliance will remain safe, but the aggregate performance of the RAID may be severely limited. If another drive fails, you will lose data. Backups may not complete in a timely manner until the drive is replaced. 33