IA L17 Auto Image Replication, a hands-on experience Hands-On Lab

IA L17 Auto Image Replication, a hands-on experience Hands-On Lab Description Get hands on with Storage Lifecycle Policies Auto Image Replication in this session, which includes several different scenarios involving replicating backups between NetBackup domains as well as a chance to try some of the new features in the NetBackup 7.6 release This lab assumes a familiarity with NetBackup administration including the configuration and execution of backup policies and storage lifecycle policies, configuring storage devices and host properties and performing restore operations using the BAR GUI. It also assumes a basic understanding of the concept of replicating backup images between domains for disaster recovery purposes. This lab consists of 6 separate exercises. You should aim to complete at least the first 3 exercises. At the end of this lab, you should be able to Configure a trusted master server relationship between two NetBackup domains Define SLPs for both the source and target side of an Auto Image Replication setup Apply the credentials for a remote storage server to an existing storage server Understand the concept of target retention Understand what attributes are applied to a target domain SLP when it is automatically created. Understand the concepts of bi-directional, one to many, many to one and cascaded replication

Notes for the Instructor Lead lab A brief presentation will introduce this lab session and discuss the key concepts demonstrated in the lab exercises. This lab guide provides you with step-by-step instructions for a series of 6 exercises. The lab is designed to be self paced and some exercises are optional, however you should aim to complete at least the first 3 exercises. Instructors will be present in the room to help you where needed and answer any questions you may have. Feel free to try other configurations that are not included in the exercises if time permits. Thank you for coming to our lab session. Notes for the Self Paced lab This lab guide provides you with step-by-step instructions for a series of 6 exercises. You can perform the exercises at your own pace but you should aim to complete at least the first 3 exercises. The other exercises are optional. Feel free to try other configurations that are not included in the exercises if time permits. Thank you for working through this lab session. 2 of 33

Introduction and Overview This lab is designed to emulate the behavior of configuring and operating Auto Image Replication across three locations which represent a global span. The lab setup consists of 3 virtual machines, each functioning as a separate NetBackup domain, call LONDON, LASVEGAS and SYDNEY. All 3 VMs are Windows 2003 64 bit running a beta version of NetBackup 7.6 and LONDON also has a beta version of OpsCenter 7.6 installed. Each server has two disk storage servers pre-configured; an AdvancedDisk storage server and a Media Server Deduplication (MSDP) storage server. The machines are designed to boot logged in as Administrator. Administrator password is symc4now. Some exercises require you to enter this password in GUIs. The storage server credentials for the MSDP storage servers are username fred and password barney. Again, some exercises will require you to enter these credentials. The examples in this guide use the Windows UIs but the java consoles are also available and you can use them if you prefer. The lab activities comprise a total of 6 exercises. It should be possible to complete each exercise in 10 minutes or less. Much of the set up of exercise 3, 4 and 6 can be completed while the previous exercise is running to save time. Finally please note that the naming conventions proposed for SLPs in the lab exercises are purely for guidance you can use any naming convention you choose. 3 of 33

Using OpsCenter to monitor the job progress Many of the exercises in this lab involve monitoring the progress of backups, replication operations and import operations. These can be monitored using the activity monitors on the individual master servers. However it s easier to monitor all the activity centrally by running OpsCenter from the master server LONDON: Launch OpsCenter on LONDON by going to Start->All Programs->Symantec OpsCenter-> WebUI login When the WebUI opens login with username Admin and password password Select the monitor tab. Click on the Job Summary by State pie chart to display the detailed job information: Note that information from all three domains is displayed in the same view. 4 of 33

What can go wrong a quick guide to troubleshooting common problem with the labs Problem: When adding a storage operation to an SLP I cannot select an operation type of duplication or replication Solution: Check you have the backup or import operation highlighted when you selected Add. Storage operations are hierarchical and secondary operation types are only available for storage operations that follow from the primary operations of backup and import. Problem: Creating a replication operation does not allow me to select a specific master server. Solution: Save the SLP definition. Click on the refresh button on the tool bar. This reloads the storage server information to pick up the changes in the previous section. Open the SLP definition again and modify the replication operation. Problem: When I modify the backup policy I don t see the storage lifecycle policy displayed in the Policy Storage pull down. Solution: Check the Data Classification for the backup policy matches the Data Classification for the SLP. Some things you might like to look at that are not covered in this lab There are several exciting features coming in NetBackup 7.6 that we don t have time to show you during this lab session. If you have the time we recommend you check out the following features: Duplication and replication jobs now display size and progress in the job monitor During the lab take a moment to check the progress of a duplication or replication job in the activity monitor. Secondary operation scheduling for storage operations When configuring the replication and duplication operations take a look at the Window tab on the GUI. Under NetBackup 7.6 it will be possible to define windows in which duplication and replication operations take place, allowing you to minimize resource contention and make the most of available bandwidth. Also note the check box to postpone creation of this copy on the Properties tab. This allows you to defer the creation of a target copy until the source copy is due to expire. Lifecycle parameters in master server host properties The various parameters associated with storage lifecycle policies used to be configured in a file called LIFECYCLE_POLICIES on the master server. Starting with NetBackup 7.6 they are held in the relational database and can be updated through the master server host properties. To view the lifecycle parameters in the administration GUI go to Host Properties -> Master Server -> SLP parameters. 5 of 33

Lab Exercise 1: Establish the trust relationship between master servers NetBackup 7.6 introduces the concept of trust relationships between domains performing Auto Image Replication. In NetBackup 7.6 the trust relationship enables the use of targeted A.I.R. to direct a replication operation to a specific target domain and import SLP. This exercise is performed on the master server LONDON and demonstrates two ways in which the trust relationship can be established. This exercise also establishes the replication credentials for the MSDP disk storage server on LONDON. Carry out the following steps on the master server LONDON: Open the NetBackup Administration GUI Go to Host Properties -> Master Server -> Servers Select the Trusted Master Servers tab and click on the Add button: In the dialog box add lasvegas as the trusted master server and then enter the username of lasvegas\administrator and the password symc4now. Note that, because the servers in this lab are not in Windows domains the username must be specified as <hostname>\administrator. For machines in Windows domains the username should be specified as <domain name>\administrator 6 of 33

Click on OK to save the new trusted master server information. (Note: Do not add the trusted master server relationship for SYDNEY at this time.) Click on OK to save the master server properties Now go to Media and Device Management -> Credentials -> Storage Servers Click on the Storage Server with the Server Type of PureDisk to open the Change Storage Server menu. 7 of 33

Select the Replication tab and click on Add to open the Add a Replication Target menu. From the target master server pull down select lasvegas The rest of the fields on the menu should pre-populate with the exception of the Password. Enter the password of barney and click on OK to save the changes. This will take you back to the Change Storage Server menu. 8 of 33

In step 10 above you will have noticed that there is also an option to add a new trusted master server at the time that you configure the replication target. We will now add the master server sydney as a trusted master server and add the replication target at the same time. Click on add to open the Add a Replication Target menu. 9 of 33

From the target master server pull down select (Add a new trusted master server). This will open the Add trusted master server dialog box. Enter the information for Sydney in the same way that you did for lasvegas in step 4 above: Click OK to return to the Add a replication target menu. All the fields will now be populated except the password. Enter the password of barney and click OK 10 of 33

Click OK again to exit the Change Server Settings menu. Finally exit the Administration GUI and re-launch it. This ensures that the changes you have just made are picked up correctly by future operations. Congratulations you have now successfully established trusted master servers relationships between LONDON and LASVEGAS and LONODN and SYDNEY. Note: You can confirm the trusted relationships have been established by launching the NetBackup Administration GUIs on LASVEGAS and SYDNEY, going to Host Properties -> Master Server -> Servers and checking the Trusted Master Servers tab in both cases you will see london listed as a trusted master server. 11 of 33

Lab Exercise 2: One-to-all A.I.R. In this exercise we will configure a simple one-to-all replication from LONDON to both LASVEGAS and SYDNEY and run a backup and replication. This is the way in which A.I.R. works in NetBackup 7.1 and 7.5 with images being replicated to all the target storage servers associated with a source storage server. On the master server LONDON: Exercise 2 One-to-all replication. 1. Create a storage lifecycle policy for called LONDON-ALL. Using the administration GUI on master server LONDON select NetBackup Management -> Storage -> Storage Lifecycle Policies and right click to create a New Storage Lifecycle Policy. Give the SLP the name LONDON-ALL 12 of 33

Add a Backup destination with storage unit set to LONDON-MSDP. Clicking on OK at this point will add the backup operation and take you back to the SLP definition. The backup operation will be highlighted. Keeping the backup operation highlighted select Add. 13 of 33

Select operation type Replication operation with Send the backups to: set to All replication targets and Retention type set to Fixed with a retention period of 3 months (level 5). 14 of 33

Press OK to add the replication operation. The SLP definition should look like this: Press OK to save the SLP definition. 2. Modify the backup policy called LONDON-NBU75 to use the SLP you have just created. Using the administration GUI on master server LONDON select NetBackup Management -> Policies. Select the policy called LONDON-NBU75 From the Policy Storage pull down on the policy LONDN-NBU75 select the SLP LONDON-ALL. 15 of 33

Hit OK to save the changes 3. Run the backup policy called LONDON-NBU75 and monitor the progress. Using the administration GUI on master server LONDON select NetBackup Management -> Policies. Right click on the policy LONDON-NBU75 and select Manual Backup. Press OK to start the backup Watch the activity monitor in the administration GUI on the master server LONDON for the backup job to complete. Wait a few minutes and watch for the replication job to complete On the master server LASVEGAS: 4. Check that the catalog has been populated correctly Watch the activity monitor for the import job to complete. Go to NetBackup Management -> Storage -> Storage Lifecycle Policies and note the import SLP LONDON-ALL has been automatically created with a single import operation 16 of 33

Select NetBackup Management -> catalog and press search now the imported catalog record is displayed. On the master server SYDNEY: 5. Check that the catalog has been populated correctly Watch the activity monitor for the import job to complete. Go to NetBackup Management -> Storage -> Storage Lifecycle Policies and note the import SLP LONDON-ALL has been automatically created with a single import operation Select NetBackup Management -> catalog and press search now the imported catalog record is displayed. Congratulations you have now completed a successful backup and replication to multiple target domains. 17 of 33

Lab Exercise 3 Targeted A.I.R. In this exercise we will configure a pair of SLPs which allow a backup made in the London domain to be replicated to the Las Vegas domain and imported. Exercise 3 Backup at London and replicate to Las Vegas To demonstrate the full sequence of events we will start by writing the backup to AdvancedDisk storage in the LONDON domain and then duplicate it to MSDP storage before replicating it to the LASVEGAS domain. In the LASVEGAS domain we will import the image on MSDP storage and then duplicate it to AdvancedDisk storage for long term retention. The first step is to create the import SLP on the master server LASVEGAS: 1. Create a storage lifecycle policy called WELCOME-TO-LASVEGAS. Using the administration GUI select NetBackup Management -> Storage - > Storage Lifecycle Policies and right click to create a New Storage Lifecycle Policy. Give the SLP the name WELCOME-TO-LASVEGAS. Add an Import destination with storage unit set to LASVEGAS-MSDP and a retention period set to 2 weeks. (Note that the retention period cannot be set to expire after copy.) Add a duplication operation using the destination storage unit of LASVEGAS_AD and set the retention type to target retention. 18 of 33

The resulting SLP should look like this: Press OK to save the SLP definition. On the master server LONDON: 2. Create a storage lifecycle policy called COPY-TO-LASVEGAS: Using the administration GUI select NetBackup Management -> Storage - > Storage Lifecycle Policies and right click to create a New Storage Lifecycle Policy. Give the SLP the name COPY-TO-LASVEGAS. Add a backup operation using the storage unit LONDON_AD with a fixed retention of 2 weeks Add a duplication operation using the storage unit LONDON-MSDP and set the retention type to expire on copy Add a replication operation with a fixed retention of 3 months and set the destination storage attributes to use the target master server lasvegas and the target import SLP WELCOME-TO-LASVEGAS. 19 of 33

The resulting SLP should look like this: 20 of 33

Press OK to save the SLP definition. 3. Modify the backup policy called LONDON-NBU76 to use the SLP COPY-TO-LASVEGAS Using the administration GUI on master server LONDON select NetBackup Management -> Policies. Select the policy called LONDON-NBU76 From the Policy Storage pull down on the policy LONDN-NBU75 select the SLP COPY- TO-LASVEGAS. Press OK to save the backup policy definition. 4. Run the backup policy called LONDON-NBU76 and monitor the progress. Using the administration GUI on master server LONDON select NetBackup Management -> Policies. Right click on the policy LONDON-NBU76 and select Manual Backup. Press OK to start the backup. Watch the activity monitor in the administration GUI on the master server LONDON for the backup job to complete. Wait a few minutes and watch for the duplication job to complete Wait a few minutes more and watch for the replication job to complete Note that the replication job is followed by an image cleanup job which performs the expire after copy operation on LONDON_MSDP Note: The backup, duplication and replication operations will take several minutes to complete. While you are waiting you may want to move on and configure exercise 4 or 5. On the master server LASVEGAS: 5. Check that the catalog has been populated correctly Watch the activity monitor for the import job and duplication job to complete. Select NetBackup Management -> catalog and press search now the imported catalog record is displayed. On the master server LASVEGAS start the BAR GUI. Add the client name LONDON to the client list and select it as the source client for restores. Choose select for restore to browse the contents of the backup. Congratulations you have now completed a successful backup and replication to multiple target domains. 21 of 33

Lab Exercise 4: Many-to-one A.I.R. In this exercise we will replicate backups from both LASVEGAS and SYDNEY to LONDON using the targeted AIR model. This exercise will demonstrate how the same SLP can be used to import images from multiple domains and with different data classifications. Exercise 4 Many to one replication The first step is to create the import SLP on the master server LONDON: 1. Create a storage lifecycle policy called WELCOME-TO-LONDON. Using the administration GUI select NetBackup Management -> Storage - > Storage Lifecycle Policies and right click to create a New Storage Lifecycle Policy. Give the SLP the name WELCOME-TO-LONDON. Set the Data classification to Any. Add an Import destination with storage unit set to LONDON-MSDP and a retention period set to 1 week. (Note that the retention period cannot be set to expire after copy.) Add a duplication operation using the storage unit LONDON-AD and set the retention type to target retention. Press OK to save the SLP definition. On the master server SYDNEY: 2. Add the storage server LONDON to the list of replication targets for the SYDNEY domain. Using the administration GUI on master server SYDNEY select Media and Device Management -> Credentials -> Storage Servers and click on the storage server name to open the Change Storage Server screen. Select the Replication tab and click on Add to open the Add a Replication Target menu. From the target master server pull down select london 22 of 33

The rest of the fields on the menu should pre-populate with the exception of the Password. Enter the password of barney and click on OK to save the changes. This will take you back to the Change Storage Server menu. When the replication target has been added press OK to save the changes. 3. Create a storage lifecycle policy for the SYDNEY domain called COPY-TO-LONDON. Using the administration GUI on master server SYDNEY select NetBackup Management -> Storage -> Storage Lifecycle Policies Click on the refresh button on the tool bar. This reloads the storage server information to pick up the changes in the previous section. Click on the new button on the tool bar to create a New Storage Lifecycle Policy. Give the SLP the name COPY-TO-LONDON. Set the Data Classification to Platinum Add a Backup destination with storage unit set to SYDNEY_MSDP. Add a replication operation and set the destination storage attributes to use the target master server london and the target import SLP WELCOME-TO-LONDON. Press OK to save the SLP definition. Press OK to save the SLP definition. 4. Modify the backup policy called SYDNEY-NBU75 to use the SLP COPY-TO-LONDON. Using the administration GUI on master server SYDNEY select NetBackup Management -> Policies. From the Data Classifications pull down select Platinum From the Policy Storage pull down on the policy SYDNEY-NBU75 select the SLP COPY-TO-LONDON. Press OK to save the backup policy definition. On the master server LASVEGAS: 23 of 33

5. Add the storage server LONDON to the list of replication targets for the LASVEGAS domain. Using the administration GUI on master server LASVEGAS select Media and Device Management -> Credentials -> Storage Servers and click on the storage server name to open the Change Storage Server screen. Select the Replication tab and click on Add to open the Add a Replication Target menu. From the target master server pull down select london The rest of the fields on the menu should pre-populate with the exception of the Password. Enter the password of barney and click on OK to save the changes. This will take you back to the Change Storage Server menu. When the replication target has been added press OK to save the changes. 6. Create a storage lifecycle policy for the LASVEGAS domain called COPY-TO-LONDON. Using the administration GUI on master server LASVEGAS select NetBackup Management -> Storage -> Storage Lifecycle Policies. Click on the refresh button on the tool bar. This reloads the storage server information to pick up the changes in the previous section. Click on the new button on the tool bar to create a New Storage Lifecycle Policy. Give the SLP the name COPY-TO-LONDON. Set the Data Classification to Gold. Add a Backup destination with storage unit set to LASVEGAS-MSDP. Add a replication operation and set the destination storage attributes to use the target master server london and the target import SLP WELCOME-TO-LONDON. Press OK to save the SLP definition. 7. Modify the backup policy called LASVEGAS-NBU75 to use the SLP COPY-TO-LONDON. Using the administration GUI on master server LASVEGAS select NetBackup Management -> Policies. From the Policy Storage pull down on the policy LASVEGAS-NBU75 select the SLP COPY-TO-LONDON. Press OK to save the backup policy definition. On the master server SYDNEY: 8. Run the backup policy called SYDNEY-NBU75 and monitor the progress. Using the administration GUI on master server SYDNEY select NetBackup Management -> Policies. Right click on the policy SYDNEY-NBU75 and select Manual Backup. Press OK to start the backup 9. Watch the activity monitor in the administration GUI on the master server SYDNEY for the backup job to complete. 10. Wait a few minutes and watch for the duplication job to complete On the master server LASVEGAS: 11. Run the backup policy called LASVEGAS-NBU75 and monitor the progress. Using the administration GUI on master server LASVEGAS select NetBackup Management -> Policies. Right click on the policy LASVEGAS-NBU75 and select Manual Backup. 24 of 33

Press OK to start the backup 12. Watch the activity monitor in the administration GUI on the master server LASVEGAS for the backup job to complete. 13. Wait a few minutes and watch for the duplication job to complete On the master server LONDON: 14. Watch the activity monitor for the import jobs to complete. Select NetBackup Management -> catalog and press search now the imported catalog record is displayed. Start the BAR GUI. Add the client name SYDNEY to the client list and select it as the source client for restores. Choose select for restore to browse the contents of the backup. Add the client name LASVEGAS to the client list in the BAR GUI and select it as the source client for restores. Choose select for restore to browse the contents of the backup. Congratulations! You have successfully completed a many-to-one replication activity. 25 of 33

Lab Exercise 5 (optional): Establishing a trusted master relationship locally In exercise 1 we saw how a trusted master server relationship can be established from a source master server provided login credentials for the target master server are know. In some organizations the sharing of login credentials may violate the security policy. This exercise show how the nbseccmd command can be used to set up a trust relationship without needing to share login credentials. On the master server LASVEGAS: 1. Open a command window 2. Run the command: nbseccmd setuptrustedmaster add -masterserver lasvegas remotemasterserver sydney -localonly 3. This will return the following warning message: On the master server SYDNEY: 1. Open a command window 2. Run the command: nbseccmd setuptrustedmaster add -masterserver sydney remotemasterserver lasvegas -localonly 3. This will report successful completion: When the command is issued on LASVEGAS it adds the local records and attempts to synchronize with SYDNEY. As no corresponding local records exist on SYDNEY the synchronization fails and the warning message is generated. 26 of 33

When the command is issued on SYDNEY it adds the local records and successfully synchronizes with LASVEGAS. To prove that the trusted relationship has been established correctly proceed with the following steps on the master server SYDNEY: 4. Configure the LASVEGAS storage server as a replication target for the SYDNEY storage server. Go to Media and Device Management -> Credentials -> Storage Servers Click on the Storage Server with the Server Type of PureDisk to open the Change Storage Server menu. Select the Replication tab and click on Add to open the Add a Replication Target menu. From the target master server pull down select lasvegas The rest of the fields on the menu should pre-populate with the exception of the Password. Enter the password of barney and click on OK to save the changes. This will take you back to the Change Storage Server menu. Click OK to save the changes 5. Create a storage lifecycle policy for the SYDNEY domain called COPY-TO-LASVEGAS. Using the administration GUI on master server SYDNEY select NetBackup Management -> Storage -> Storage Lifecycle Policies and right click to create a New Storage Lifecycle Policy. Give the SLP the name COPY-TO-LASVEGAS. Add a Backup destination with storage unit set to SYDNEY-MSDP. Add a replication operation and set the destination storage attributes to use the target master server lasvegas and the target import SLP WELCOME-TO- LASVEGAS Press OK to save the SLP definition. 6. Modify the backup policy called SYDNEY-NBU76 to use the SLP COPY-TO-LASVEGAS. Using the administration GUI on master server SYDNEY select NetBackup Management -> Policies. From the Policy Storage pull down on the policy SYDNEY-NBU76 select the SLP COPY-TO-LASVEGAS. Press OK to save the backup policy definition. 7. Run the backup policy called SYDNEY-NBU76 and monitor the progress. Using the administration GUI on master server SYDNEY select NetBackup Management -> Policies. Right click on the policy SYDNEY-NBU76 and select Manual Backup. Press OK to start the backup 8. Watch the activity monitor in the administration GUI on the master server SYDNEY for the backup job to complete. 9. Wait a few minutes and watch for the replication job to complete On the master server LASVEGAS: 10. Check that the replication has completed and catalog has been populated correctly Watch the activity monitor for the import job and duplication job to complete. 27 of 33

Select NetBackup Management -> catalog and press search now the imported catalog record is displayed. On the master server LASVEGAS start the BAR GUI. Add the client name SYDNEY to the client list and select it as the source client for restores. Choose select for restore to browse the contents of the backup. Congratulations! You have successfully created a trusted master server relationship and used it to replicate a backup from SYDNEY to LASVEGAS. 28 of 33

Lab Exercise 6 (optional): Cross-domain restore Best practice states that you should never allow the local copy of a backup to expire when you may still need to restore files from it. However there will inevitably be occasions where a restore is required and the only copy of the backup exists in the target domain. This exercise shows how selected files can be push restored from the master server in the target domain to a client in the source domain. This process is only recommended for small data volumes as it relies on data being rehydrated in the target domain and transmitted in non-deduplicated form to the source domain. On the master server LONDON: Exercise 6 Restore from Las Vegas to London 1. Add the master server LASVEGAS to the list servers in the host properties list of replication targets for the LASVEGAS domain. Open the NetBackup Administration GUI Go to Host Properties -> Client -> Servers Select the Additional Servers tab and click on the Add button and add the server lasvegas to the sever list. 29 of 33

On the master server LASVEGAS: 2. Using the BAR GUI, browse the backups of the server LONDON, select some files and restore them to LONDON to the list of replication targets for the LASVEGAS domain. Launch the BAR GUI and got to Specify NetBackup Machines and Policy Type : 30 of 33

Select Edit Client List and add London to the list Make London the source and destination client: 31 of 33

Go to Select for Restore, browse the London backup images and select some files to restore Restore the selected files to C:\temp on LONDON 32 of 33

Start the restore. When the restore completes, on the master server LONDON: 3. Verify the restored files can be viewed and read. Go to C:\temp and view the restored files Congratulations! You have successfully performed and cross-domain restore. Thank you for taking the time to work through this lab. 33 of 33