background image

Configuring Share Access

Chapter 6  Share and File Access

105

Configuring Share Access  

The GuardianOS supports share-level as well as file- and directory-level 

permissions (see “Windows ACLs” on page 107) for all local and Windows domain 

users and groups. 

Share Access Behaviors

Administrators tasked with devising security policies for the SnapServer will find 

the following share access behaviors of interest:

• Share access defaults to full control — 

The default permission granted to users 

and groups when they are granted access to the share is full control. You may 

restrict selected users and groups to read-only access.

• User-based share access permissions are cumulative — 

An SMB, AFP, HTTP, or 

FTP user's effective permissions for a resource are the sum of the permissions 

that you assign to the individual user account and to all of the groups to which 

the user belongs in the Share Access page. For example, if a user has read-only 

permission to the share, but is also a member of a group that has been given full-

access permission to the share, the user gets full access to the share.

• NFS access permissions are not cumulative — 

an NFS user's access level is based 

on the permission in the NFS access list that most specifically applies. For 

example, if a user connects to a share over NFS from IP address 192.168.0.1, and 

the NFS access for the share gives read-write access to 

*

 (All NFS clients) and 

read-only access to 192.168.0.1, the user will get read-only access.

• Interaction between share-level and file-level access permissions — 

When both 

share-level and file-level permissions apply to a user action, the more restrictive 

of the two applies. Consider the following examples:

Example A: 

More restrictive file-level access trumps more permissive share-level 

access.

Share Level

File Level

Result

Full control

Read-only to FileA

Full control over all directories and files in 
SHARE1 

except

 where a more restrictive file-level 

permission applies. The user has read-only 
access to FileA.

Summary of Contents for 5325301507 - Snap Server 4400 NAS

Page 1: ...Administrator Guide GuardianOS v6 0 For GuardianOS powered SnapServers and Expansion Arrays www overlandstorage com 10400272 001 ...

Page 2: ......

Page 3: ...crosoft Corporation Java and Solaris are registered trademarks of Sun Microsystems Inc Netscape is a registered trademark of Netscape Communications Corp AppleShare AppleTalk Macintosh and MacOS are registered trademarks of Apple Computer AIX and Tivoli are registered trademarks of IBM Corporation OpenView and HP UX are trademarks or registered trademarks of Hewlett Packard Company BrightStor Unic...

Page 4: ...Y DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POS...

Page 5: ...exported into or to a national or resident of any country to which the U S embargoes goods or to anyone on the U S Treasury Department s list of Specially Designated Nationals or the U S Commerce Department s Table of Denial Orders You agree to ascertain necessary licensing procedures and obtain required licenses before exporting or re exporting either You also agree to indemnify Overland Storage ...

Page 6: ...verse engineer the Program except as expressly permitted under applicable law c Remove or alter any of the copyright notices or other proprietary markings on any copies of the Program or d Perform publish or release benchmarks or other comparisons of the Program without CA s prior written consent 3 CA may immediately terminate this Agreement in the event of any failure to comply with any of the ab...

Page 7: ...cheduling Data Protection Tasks 18 Migrating Data from Legacy Servers to the SnapServer 19 Configuring the SnapServer as a Print Server 19 Configuring the SnapServer as a Simple Web Server 19 Configuring an APC Brand UPS 19 SnapExtensions 20 Wake on LAN Support 20 Chapter 2 Network Access to the Server 21 Viewing Current Network Settings 22 TCP IP Options 23 Configuring TCP IP Settings 25 Default ...

Page 8: ...ignments 44 Local Users and Groups 45 NIS Domain 47 Chapter 4 Storage Configuration and Expansion 49 Default Storage Configuration 50 Changing the Default Storage Configuration 51 RAIDs 51 Volumes 56 Quotas 60 Data Migration 61 Expansion Arrays 63 Disks and Units 67 Chapter 5 iSCSI Disks 77 Configuring iSCSI Initiators 78 iSCSI Configuration on the SnapServer 88 Creating iSCSI Disks 91 Configuring...

Page 9: ...6 Windows ACLs 107 Security Guides 109 Chapter 7 Snapshots 111 Snapshot Management and Usage 112 Estimating Snapshot Pool Requirements 113 Adjusting Snapshot Pool Size 114 Accessing Snapshots 114 Coordinating Snapshot and Backup Operations 115 Chapter 8 Disaster Recovery 117 Backing Up Server and Volume Settings 117 Backing Up the NetVault Database Directory 120 Recovering the NetVault Database 12...

Page 10: ... Chapter 10 Unicode 139 What is Unicode 139 Converting to Unicode 139 Unicode and Protocol Interaction 141 How Snapshots Interact with Unicode 143 Backing Up Unicode Servers 143 Unicode and Expansion Arrays 145 Appendix A Backup and Replication Solutions 147 Integrated Backup Solutions for the SnapServer 148 Off the Shelf Backup Solutions for the SnapServer 151 Backup of iSCSI Disks 166 Appendix B...

Page 11: ...e xi Appendix C Troubleshooting SnapServers 181 The Meaning of LED Indicators 182 System Reset Options 203 Networking Issues 205 Miscellaneous Issues 208 Phone Home Support 210 Appendix D GuardianOS Ports 213 Glossary 217 Index 229 ...

Page 12: ...xii SnapServer Administrator Guide ...

Page 13: ...s only to SnapServers with four 4 or more drives Users of the SnapServer 110 and SnapServer 210 are encouraged to consult the User s Guide for SnapServer 110 and 210 as their primary reference and to refer to this Administrator s Guide for advanced guidelines Service and Technical Support For an immediate response to a service inquiry use our Expert Knowledge Base System at http www snapserver com...

Page 14: ...t you type directly into a text field a command line or a Web page Buttons on a keyboard Courier Italic A variable for which you must substitute a value Courier Bold Commands you enter in a command line interface Right Click This document uses the Windows convention in describing keyboard access to context sensitive menus For example To rename a group right click a group and then select Rename Mac...

Page 15: ...Lists hardware specifications for SnapServers and Snap Disk expansion arrays User Guide for SnapServer 110 and 210 Provides an overview of the configuration and maintenance of the SnapServer 110 and 210 Release Notes html User CD Contains late breaking information corrections and known issues concerning SnapServers Upgrade html User CD Provides instructions for upgrading the GuardianOS software Sn...

Page 16: ...xvi SnapServer Administrator Guide ...

Page 17: ... SnapServer 410 is a 1U departmental file server with four hot swappable SATA disk drives and four USB ports SnapServer 520 The SnapServer 520 is a 1U departmental file server with four hot swappable SATA disk drives The SnapServer 520 supports multiple Snap Expansion S50 expansion arrays SnapServer 620 The SnapServer 620 is a 1U departmental file server with four hot swappable SATA disk drives an...

Page 18: ...rives It can be used to expand the capacity of the SnapServers 520 550 620 650 4500 and 18000 Snap Unit Description Feature Specification Network Transport Protocols TCP IP UDP IP AppleTalk Network Block Protocols iSCSI Network File Protocols Microsoft Networking CIFS SMB UNIX Network File System NFS 2 0 3 0 4 0 AppleTalk Filing Protocol AFP v2 0 v3 1 Hypertext Transfer Protocol HTTP HTTPS File Tr...

Page 19: ...SSL v2 3 128 bit Encryption Target Challenge Handshake Authentication Protocol CHAP for iSCSI SMTP Authentication and support for email encryption STARTTLS and TLS SSL encryption protocols Data Protection Snapshots for immediate or scheduled point in time images of the file system Local Backup with BakBone Netvault Workgroup Edition Network Backup with VERITAS NetBackup Backup Exec CA BrightStor A...

Page 20: ...dministration SnapCLI for volume system deployment SnapServer Manager utility platform independent SNMP MIB II and Host Resource MIB User disk quotas for Windows UNIX Linux Mac FTP FTPS Group disk quotas for UNIX Linux Environmental monitoring Email event notification and SNMP trap notification Data migration Feature Specification ...

Page 21: ... drive fault tolerance Note Available only on systems with four 4 or more drives RAID 6 drive striping with two parity drives Like a RAID 5 except that two drives are used for parity rather than one Provides moderate performance and reasonable space utilization with two drive fault tolerance Note Available only on systems with four 4 or more drives RAID 10 striped mirroring A combination of RAID 0...

Page 22: ...ives SnapServer 4200 4400 4500 SD10 SnapServer 18000 and SD30 do not support disabling write cache Email Authentication and Encryption Capability SMTP Authentication and Secure Connection have been added to the SnapServer email capabilities Wake on LAN SnapServer NAS N2000 supports Wake on LAN on Ethernet 1 and Ethernet 2 Feature New Functionality VSS VDS Support for iSCSI VSS Volume Shadow Copy S...

Page 23: ...ty Web root capability The SnapServer can now serve a default web root share and web page when users connect to the server via a web browser Automatic software update notification The WebUI displays an alert whenever software updates for GuardianOS or Snap EDR are available In addition SSM displays an alert when GuardianOS updates are available for any discovered servers and lists the available up...

Page 24: ...for NFS users with elimination of ancillary protocols single port accessibility new file system view and improved network management Note Kerberos based security and NFS v4 ACLs are not supported in this release of GuardianOS Expanded CLI Over 30 additional commands have been incorporated into the SnapCLI increasing the ability to perform configuration tasks using the CLI or CLI scripts Dynamic Ho...

Page 25: ...p tape devices using USB 2 0 as well as SCSI connections Improved share name support Share names can now be 27 characters long and can include spaces USB Print Server capability Multiple printers can be connected via USB ports to the SnapServer which can be configured to emulate a Windows or IPP print server Ethernet Port disabling Unused ethernet2 ports can now be disabled Windows Domain Authenti...

Page 26: ...ored Improved Quotas design The Quotas pages have been redesigned to simplify adding quotas for users and groups and to enhance usability Auto refresh feature An auto refresh selection has been added to the Home page When selected the server status is automatically updated at 45 or 90 second intervals Feature pre 4 1 New 4 1 Functionality RAID Sets The RAID Sets page contains a RAID Settings butto...

Page 27: ... including the admin user are managed from the Security Local Users page Select the admin user from the user list and click Properties to change the password Windows Networking Windows networking settings including domain joining are now located on a single page Network Windows View all disks formerly from Storage Devices page The new Storage Disks Units page displays a graphical view of all disks...

Page 28: ... can compare copy and configure settings for groups of GuardianOS SnapServers in a single operation Installing SSM You can download and install SSM using the SnapServerToolsInstall html file found on your SnapServer User CD SSM can be installed to all client platforms including Windows Macintosh OS X Linux and UNIX If you plan to run SSM on a Macintosh client you must upgrade the client to MacOS 1...

Page 29: ...ardianOS server to one or more different GuardianOS servers Scheduling operations to run during offpeak hours Operations can be scheduled to run on multiple GuardianOS servers during offpeak hours Automatic email notification of completed operations You can configure SSM to send an operations report CSV format upon completion of any operation Automatic notification of available GuardianOS updates ...

Page 30: ...while the current dialogue box is open will be displayed Connecting to the Server for the First Time SnapServers are preset to acquire an IP address from a DHCP server If no DHCP server is found on the network the SnapServer defaults to an IP address of 10 10 10 10 and you may not be able to see the server on your network You can discover a SnapServer using either the default server name or the SS...

Page 31: ...te the Initial Setup Wizard For instructions for using the Initial Setup Wizard see page 16 To Connect to a SnapServer Using SSM 1 Install and launch SnapServer Manager Install and launch SSM see page 12 on a machine residing on the same network segment as your SnapServer s Upon startup SSM displays the IP address of each SnapServer on its local network segment 2 If using a DHCP server skip to the...

Page 32: ...Settings The SnapServer time stamp applies when recording server activity in the event log Monitor Menu setting the create modify time on a file and when scheduling snapshot antivirus Snap EDR or Server to Server Synchronization pre GuardianOS v4 2 licenses only operations Edit the settings according to local conditions Note GuardianOS automatically adjusts for Daylight Saving Time based on the se...

Page 33: ...ration Tool Or for servers with no Snapshots license you can simply increase your default volume size in the Storage Volumes page Determining Capacity The factory default configuration reduces potential capacity in order to provide a high degree of data protection and backup capability By default SnapServers with four 4 to eight 8 disk drives are configured into a RAID 5 created during the manufac...

Page 34: ...a partition Navigate to Storage Snapshots in the browser based Administration Tool to schedule snapshots or modify the space available for storing snapshots Snapshots should be taken when the system is idle or under low data traffic Set up antivirus protection by clicking the SnapExtensions icon and then clicking CA Antivirus Click the checkbox to enable antivirus and click OK When the configurati...

Page 35: ...the browser opens to a user definable directory and optionally automatically loads a default HTML page when a user connects with a web browser to the root of the server e g http servername or http ipaddress To configure a web root on the SnapServer select Network Web in the Administration Tool For more information see Using WebRoot to Configure the SnapServer as a Simple Web Server on page 37 Conf...

Page 36: ...e disabled for Ethernet 1 and Ethernet 2 Wake on LAN is activated when another computer on the same LAN sends a magic packet to the SnapServer using a program designed to send magic packets Feature Description CA eTrust Antivirus Preinstalled antivirus software that is fully functional out of the box For information on configuring the software see CA eTrust Antivirus Software on page 125 Note A se...

Page 37: ... the SnapServer for load balancing and failover Network protocols control which network clients can access the server Topics in Network Access TCP IP Options Configuring TCP IP Settings Default Network Protocol Settings Windows Networking Configuration NFS Access Apple Networking Configuration FTP FTPS Access HTTP HTTPS Access DHCP Server Print Server Note The default settings enable access to the...

Page 38: ...IP networks subnets are all devices with IP addresses that have the same prefix Primary WINS Server The Windows Internet Naming Service server which locates network resources in a TCP IP based Windows network by automatically configuring and maintaining the name and IP address mapping tables Secondary WINS Servers Secondary Windows Internet Naming Service server s Ethernet Address The unique six d...

Page 39: ... default Standalone setting treats each port as a separate interface effectively disabling network bonding Network bonding treats two or more ports as a single channel for failover or load balancing purposes Load Balance ALB An intelligent software adaptive agent repeatedly analyzes the traffic flow from the server and distributes the packets based on destination addresses evenly distributing netw...

Page 40: ...ng of Auto enables automatic negotiation of the speed and duplex settings based on the physical port connection to a switch The speed setting establishes the rate of transmission and reception of data The duplex setting allows the Ethernet port to transmit and receive network packets simultaneously Note Auto is the only allowable setting for a Gigabit port Fixed The SnapServer may also be set to f...

Page 41: ...oses Load Balance ALB An intelligent software adaptive agent repeatedly analyzes the traffic flow from the server and distributes the packets based on destination addresses evenly distributing network traffic for optimal network performance All ports in the same ALB configuration need to be connected to the same switch Failover This mode uses one Ethernet port by default Ethernet1 as the primary n...

Page 42: ...Load Balancing Failover Switch Trunking or Link Aggregation Network bonding technology treats multiple ports as a single channel with the network using one IP address for the server Note This network bonding configuration is only applicable to SnapServers with more than one ethernet port To take advantage of network bonding all ports in the bonded team must be physically connected to the same netw...

Page 43: ...o initially connect to the server otherwise network throughput or connectivity to the server may be seriously impacted To use fixed duplex settings not applicable to gigabit the same fixed setting must be set on the server and switch Configure the Switch for Load Balancing If you select either the Switch Trunking or Link Aggregation network bonding configuration be sure the switch is configured co...

Page 44: ...unning NFS without client address restrictions Apple AFP Enabled Allows access over an AppleTalk or TCP IP network using the default zone FTP FTPS Enabled for FTP FTPS and Anonymous User Allows users to access files via FTP or FTPS Allows access using the anonymous user account which is mapped to the SnapServer s local guest user account HTTP HTTPS Internet Intranet Enabled Allows users to access ...

Page 45: ...y case Some are still sent via a single byte character set The Language Support option selected for Windows networking clients is used only to enable the server to accept file and folder names in a single byte character set Caution When Unicode is disabled do not name files and folders in character sets not included in this list e g Cyrillic Such files and folders may be impossible to open or dele...

Page 46: ...etworks use a domain controller to store user credentials The domain controller can validate all authentication requests on behalf of other systems in the domain Option Description Workgroup In a workgroup environment users and groups are stored and managed separately on each server in the workgroup Domain NT or ADS When operating in a Windows NT or Active Directory domain environment the SnapServ...

Page 47: ... Active Directory Authentication The SnapServer supports the Microsoft Windows 2000 2003 2008 family of servers that run in native ADS mode or in mixed NT ADS mode SnapServers can join Active Directory domains as member servers References to the SnapServer s shares can be added to organizational units OU as shared folder objects Note Windows 2000 domain controllers must run SP2 or later Guest Acco...

Page 48: ...all versions of Windows though some of the names change slightly from version to version e g My Computer in NT 2000 XP vs Computer in Vista 1 Right click the My Computer icon on your desktop and select Map Network Drive or open Windows Explorer and select Map Network Drive from the Tools menu 2 In the Map Network Drive dialog box select a drive or accept the default selection and type in the SnapS...

Page 49: ... display the contents of the share and your SnapServer will now behave like any other disk on your Mac To disconnect from the SnapServer drag its icon into the trash Windows SMB and security settings are configured from this page Before performing the configuration procedures provided here be sure you are familiar with the information provided in Support for Windows Networking SMB and Support for ...

Page 50: ...NFS access entries for each NFS enabled share Apple Networking Configuration Apple File Protocol AFP settings are configured on the Network Apple screen of the Administration Tool The default settings provide access to AFP clients over an AppleTalk or TCP IP network MacOS clients connecting over AFP can log in to the server either as local users on the SnapServer or as Windows NT or Active Directo...

Page 51: ...e Desktop and Finder By default the Chooser identifies SnapServer shares using only the share name To display both the share name and the server name the Add Server Name To Apple Shared Folder Names check box on the Network Apple screen of the Administration Tool is enabled by default This option allows Macintosh applications to differentiate between shared folders with the same share name on mult...

Page 52: ...r also supports explicit FTPS i e FTPES or Auth TLS Note If standard FTP is enabled only the data channel is encrypted for FTPS connections the control channel including user password is not encrypted To force FTPS to encrypt the control channel as well disable standard FTP Supported FTP Clients SnapServers have been tested with the most common FTP clients and work as expected based on the command...

Page 53: ... to Configure the SnapServer as a Simple Web Server When you enable the Web Root feature from the Network Web page you can configure your SnapServer to open automatically to an html page of your choice when a user enters http servername or http IP address in the browser field In addition files and directories underneath the directory you specify as the Web Root can be accessed by reference relativ...

Page 54: ...trator has enabled the Web Root feature see Using WebRoot to Configure the SnapServer as a Simple Web Server on page 37 This screen displays a list of all shares to which the user has access Users can navigate the share structure to locate and view or download files but they cannot modify or upload files For users with admin rights a key icon appears next to the file folder in the share Clicking t...

Page 55: ...onnect to the SnapServer over the network and use the printer similarly to using a printer shared by a Windows or CUPS server You can pause or resume the printer and monitor or cancel print jobs using the Administration Tool Configuring your SnapServer as a print server is a two part process Configure the printer on the SnapServer Configure the client to print via the SnapServer Configuring the Pr...

Page 56: ...ws in the URL field http servername 631 printers sharename where servername is the name or IP address of your SnapServer and sharename is the name of the printer Note 631 is the IPP port number If you experience difficulty adding the printer try the following 1 Navigate to Start Run and enter the server name as follows servername 2 After a delay you may be prompted for a user name and password Log...

Page 57: ...used the button will become a Resume Printer button which you can click to resume printing To Cancel or Check the Status of Print Jobs 1 Navigate to Server Printing and click the Status link next to your printer to open the Job Status window and see your print job queue 2 To cancel a print job click to put a check in the box next to the job you want to remove and click Cancel Selected Jobs You can...

Page 58: ...Print Server 42 SnapServer Administrator Guide ...

Page 59: ...may choose to join the SnapServer to a traditional Windows NT or Active Directory domain and Windows clients can then authenticate to the server using their domain credentials To accommodate NFS clients the SnapServer can also join an NIS domain and the SnapServer can look up user and group IDs maintained by the domain For authentication control beyond the guest account Macintosh and FTP client lo...

Page 60: ... a first come first served basis with preference given first to local users then Windows users then NIS users Consider the following when creating users and groups UIDs and GIDs from 0 100 are unavailable for use If you try to assign a UID or GID that is in use by NIS or the Windows domain or is less than 101 you will get an error message Default Local Users and Groups admin The admin user account...

Page 61: ...oup Macintosh and FTP clients initially access the server using the guest account If you require a higher degree of control over individual access to the file system for these clients you must create local accounts or in the case of Windows use Windows NT domain or Active Directory security Guidelines for Local Authentication Duplicating Client Login Credentials for Local Users and Groups To simpl...

Page 62: ...idually exempted from password expiration and character requirements This may be necessary for some special users such as users configured to perform backups See the Online Help for procedures to set password policy for local users The built in admin user is automatically exempt from all password policies Note Changing a user s UID will nullify any file system access permissions that apply to that...

Page 63: ... you make on the NIS server do not immediately appear on the SnapServer it may take up to 10 minutes for changes to be replicated Guidelines for Configuring NIS Handling UID GID Assignments Unless UID GID assignments are properly handled NIS users and groups may fail to display properly For guidelines on integrating compatible SnapServer UIDs see UID and GID Assignments on page 44 NIS identifies u...

Page 64: ...NIS Domain 48 SnapServer Administrator Guide ...

Page 65: ... share pointing to the volume The default storage configuration reserves 20 percent of the data space for snapshots including servers that require a license to activate snapshots If the default configuration is appropriate for your needs you need only create the directory structure set share access permissions and optionally schedule snapshots You may have requirements that demand a different conf...

Page 66: ... and the remaining 20 percent for snapshots Drives RAID SnapServer 110 1 disk RAID 0 SnapServer 210 2 disk RAID 0 SnapServer 410 SnapServer 520 SnapServer 550 SnapServer 620 SnapServer 650 4 disk RAID 5 No hot spare configured SnapServer N2000 4 disk RAID 5 12 disk RAID 6 SnapServer E2000 Snap Expansion S50 up to 12 disk JBOD Allocation Volume 80 of RAID capacity is allocated to the default volume...

Page 67: ...from the Storage RAID Sets screen of the Administration Tool SnapServers with four to eight drives ship with all disk drives configured as a RAID 5 SnapServers with twelve drives ship with all disk drives configured as a RAID 6 SnapServers with one or two drives ship with the drive s configured as a RAID 0 Before changing the default RAID configuration consider the following information on the Sna...

Page 68: ...the hot spare to rebuild itself without administrator intervention SnapServers offer two kinds of hot spares local and global Features RAID 0 RAID 1 RAID 5 RAID 6 RAID 10 Data Loss Risk Highest Lowest Low Lower Very Low Write Access Speeds Fastest Fast Medium Slower Faster Usable Capacity Highest Lowest High Medium Low Disks Required 1 or more 2 or more 3 or more 4 or more 4 or more Supports Hot S...

Page 69: ...ivity falls to a very low disk activity Once the activity rises above the idle threshold the background scan stops and waits for the activity to fall to the idle threshold again before resuming As a result there should be minimal to no impact on performance Once the disk scan has completed a pass on a given RAID set it waits a certain period of time before starting again Identifying Hot spares are...

Page 70: ... volumes beyond the capacity of a single RAID allows administrators to expand a volume without reconfiguring RAIDs and allows users to continue working as usual with no interruption Grouped RAIDs must be the same type you can group two RAID 1s or two RAID 5s e g you cannot group a RAID 1 and a RAID 5 Note Only RAIDS of the same PE physical extent size can be grouped If you are growing the volume o...

Page 71: ...sion arrays with no loss of capacity Deleting Grouped RAIDs Deleting the RAID Group will delete all member RAIDs all their volumes and shares and all their data If one RAID becomes inaccessible for any reason the entire RAID group will also become inaccessible Depending on the cause the RAID group may or may not be recoverable For example if a RAID group spans a host SnapServer and an expansion ar...

Page 72: ... volume will contain one or more iSCSI disks decrease the Snapshot pool size to zero For information about creating snapshots of iSCSI disks see Configuring VSS VDS for iSCSI Disks on page 93 Deleting Volumes Deleting volumes may move or disable certain third party applications that are installed on the user volume space The NetVault for GuardianOS Database Directory NVDB containing files that kee...

Page 73: ... this capacity to the volume by editing the Volume size field or clicking the Grow to Max Size button and then clicking OK Creating a New RAID If all capacity on the RAID is allocated and either 1 a sufficient number of drives to create a new RAID exists or 2 a RAID of the same type with excess capacity exists the Expand Volume button appears Click this button to create an additional RAID group th...

Page 74: ...Disable Enable Write Cache on a New Volume or To Disable Enable Write Cache on an Existing Volume Note When write cache is disabled on a volume disk cache is also disabled on all disk drives that are members of the RAID or RAID group hosting the volume This can impact performance on other volumes with write cache enabled that are hosted by the same RAID or RAID group Note Not all disk drives suppo...

Page 75: ...lly following a power outage or any other unconventional outage Repair errors It is recommended that you run this level if you suspect file system damage may have occurred e g if a previous Do not repair errors operation reported file system errors Repair errors aggressive It is only recommended that you run this level if you have been advised to do so by SnapServer Technical Support or if Repair ...

Page 76: ...ts For users and groups there are no pre assigned default quotas on the SnapServer When quotas are enabled on the SnapServer you can assign a default quota for all users or allow all users to have unlimited space on the volume Unless you assign individual user or group quotas all users and groups will receive the default quota How the SnapServer Calculates Usage In calculating usage the SnapServer...

Page 77: ...ration options can be specified Copy or move data Include subfolders Overwrite existing files Preserve the original permissions settings Note If you elect to preserve original permissions settings be sure to review Preserving Permissions Verify migrated data Note If you elect to verify migrated data all data will be read twice once for migration and once for comparison to the copied data This coul...

Page 78: ...l be Unix However when migrating from a Windows source to a Unix SnapTree permissions cannot be retained since Unix snaptrees are required to be Unix personality throughout Files and directories will inherit the Unix personality and will have a set of default Unix permissions Migrating from a GuardianOS Server When migrating from one GuardianOS server to another it is recommended that you maintain...

Page 79: ...on installing a SnapServer E2000 or a Snap Expansion S50 are provided in the Quick Start Guide that comes packaged with the array The guide is also available for download from http www snapserver com support SnapServer EXP E2000 The SnapServer EXP E2000 is a 2U expansion array with up to twelve SATA II or SAS disk drives or a combination of SAS and SATA disk drives up to a maximum of 12 It ships a...

Page 80: ... configuring a mixed drive array A Snap Expansion S50 expansion array is accessed and managed through the SnapServer to which it is connected The expansion array has no physical connection to the network After the S50 is installed and powered on see the Quick Start Guide for details the array s disk drives appear as unassigned drives allowing the administrator to configure RAIDs as necessary Prepa...

Page 81: ...age 67 The disk drives of an expansion array are completely integrated into the host SnapServer s logic The default RAID configurations can be deleted and the internal and external disk drives recombined as necessary For example to create one large RAID you could delete the existing RAIDs on both the host server and the expansion array then combine all drives into one high capacity storage system ...

Page 82: ...40 GB 4 x 160 rather than the expected 910 GB 160 3 x 250 Do not mix drives of different rotational speeds in the same column See Adding New Disk Drives to Increase Capacity on page 68 for illustrations of supported and unsupported drive configurations Integrating Orphan Expansion Units Expansion units that have been discovered by GuardianOS e g are physically connected to the SnapServer but have ...

Page 83: ...isk Drives to Increase Capacity Replacing Disk Drives on a RAID This section describes how to safely remove and replace drives to a degraded RAID After a fresh drive is inserted into the drive bay you must use the Administration Tool to add it to a RAID How RAIDs React to Disk Drive Removal RAID 0 nonredundant Removing a disk drive from a RAID 0 causes the RAID to fail This action renders any data...

Page 84: ...tes an additional copy of the original drive RAID 5 RAID 6 RAID 10 redundant You can add a hot spare to a RAID 5 RAID 6 or RAID 10 However you cannot add a new drive as a new member Adding New Disk Drives to Increase Capacity For those servers and expansion arrays that ship with fewer than the maximum number of disk drives additional drives can be added to the server or expansion array to increase...

Page 85: ...release the front lever Grasp the lever and pull to remove the drive blank from the chassis 4 With the drive carrier lever open slide the new disk drive into the chassis Once the drive is pushed all the way into the chassis close the drive carrier lever and press until it locks into place 5 Repeat Steps 3 and 4 for each drive blank you replace with a disk drive 6 Replace the bezel by sliding the p...

Page 86: ...isk drive for SnapServers are explained in the following sections Note If you have enabled the automatic incorporation of an unused disk feature the drive you insert a raw drive a drive with a non GuardianOS partition or an unassigned GuardianOS partitioned drive will be automatically incorporated into the RAID Skip Step 2 2 Configure the new drive as part of the RAID When you remove a drive from ...

Page 87: ...n slide the new drive into the chassis 5 Once the drive is pushed all the way into the chassis close the drive carrier lever and press until it locks into place 6 Replace the bezel by sliding the pegs on the right side of the bezel into the holes in the chassis 7 With the left side latch pressed in fit the left side of the bezel onto the front of the chassis When the bezel is positioned correctly ...

Page 88: ...On the closed handle of the failed disk drive insert your finger into the handle slot and pull out to open the handle 3 Pull to remove the drive from the chassis 4 Open the handle of the new drive If the handle is closed you cannot insert the disk drive completely into the bay 5 Insert the new disk drive making sure you push it forward until it is firmly seated and the handle begins to swing close...

Page 89: ...e left to release the latch 3 Open the handle and pull to remove the drive from the chassis 4 Release the latch on the new drive and open its handle If the handle is closed you cannot insert the disk drive completely into the bay 5 Insert the new disk drive making sure you push it forward until it is firmly seated and the handle begins to swing closed Then close the handle until it clicks into pla...

Page 90: ...the failed disk drive press the latch to the right 3 To remove the failed disk drive pull its handle 4 Release the latch on the new disk drive and open its handle If the handle is closed you cannot insert the disk drive completely into the bay 5 Insert the new disk drive Make sure you push it forward completely before you press the handle into place 6 Replace the front bezel Replacing a Disk Drive...

Page 91: ...e way forward before you close the handle 4 Close the font panel Replacing a Disk Drive on an SD30SA When the status LED is green and the fault LED is amber the drive has failed or is not working properly 1 Using the Torx driver T 10 provided unlock the disk drive by turning the lock screw counterclockwise until the red padlock icon in the lock indicator is no longer visible 2 To release the handl...

Page 92: ...o insert a new disk drive release the carrier handle by pressing the latch and insert the carrier all the way into the enclosure 5 Once the carrier is in the enclosure close the handle until you hear a click 6 Using the Torx driver lock the carrier into place by turning the lock screw clockwise until the red padlock icon is visible ...

Page 93: ...re iSCSI on both the client initiating the iSCSI connection and on the SnapServer Use the information presented here in conjunction with the documentation supplied with your initiator to install configure and connect the iSCSI initiator s to the SnapServer iSCSI Disk Limitations The iSCSI protocol limits the size of any iSCSI disk to 2TB The GuardianOS can maintain up to 256 iSCSI disks For Additi...

Page 94: ...and operating systems using Open iSCSI SuSE 10 RedHat 4 5 and CentOS 5 the readme files and help menus provide information on installing and configuring iSCSI Configuring iSCSI Initiators Overland Storage has qualified a number of software initiators PCI cards and drivers to interoperate with SnapServers See the iSCSI support page on our website for the latest information on supported versions of ...

Page 95: ...otherwise require local disk storage such as MS SQL Server 2000 and Exchange Server 2003 If you use the Microsoft initiator on Windows XP Windows 2003 Vista Windows 7 or Windows 2008 server services installed on iSCSI disks will start up automatically by default once you have configured them to persistently reconnect On the Windows 2000 server however you must edit the Windows registry to make the...

Page 96: ...ices dependent on the iSCSI Inititator service Editing the Windows Registry for MS Exchange Server or MS SQL Server Windows 2000 only 1 Install Exchange Server 2003 and configure it to use the iSCSI disk as the location to store database files 2 On a Windows workstation running Windows 2000 enter the following on the command line regedt32 3 Navigate to the Key a For Exchange Server HKey_Local_Mach...

Page 97: ...ing NTFS volume on a local disk within the Windows server initiating the connection 1 Right click My Computer and select Manage 2 The new formatted volume will appear in the Disk Management window 3 Right click the New Volume and select Change Drive Letter and Paths 4 Click Remove in the Change Drive Letter and Paths for New Volume dialog and click Yes to confirm drive letter removal 5 Right click...

Page 98: ...mand line utility called Diskpart that allows you to expand basic disks This utility ships with Windows 2003 Server and is available for download for Windows 2000 Server and XP Additional details on the Diskpart utility can be found in Microsoft Knowledge Base article Q300415 http support microsoft com kb 300415 Preparing to Expand a Microsoft Basic iSCSI Disk The following steps must be taken to ...

Page 99: ...the Microsoft initiator tool 2 Under Available Targets highlight the specific iSCSI disk s you expanded in the previous procedure 3 Click LogOn This will connect the initiator to the selected iSCSI target 4 Close the Microsoft initiator tool 5 Open the Disk Management tool by right clicking My Computer and selecting Manage In the Computer Management GUI select Disk Management Note The disk will au...

Page 100: ... Exit the Computer Management tool 11 Restart the necessary application services Configuring the QLogic QLA4010 and QLA4050 52c iSCSI Initiators for Microsoft Windows QLogic s QLA4010 and QLA4050 52c are iSCSI adapters that appear as a SCSI adapter instead of a network adapter in Windows Device Manager Before the QLA4010 or QLA4050 52c can successfully connect to iSCSI targets you must Set initiat...

Page 101: ...oftware initiator for UNIX supports Solaris 10 U4 Installation and configuration information for the QLogic QLA4010 4050 4052c HBA is included with the adapter and is also available for download from the QLogic website Information about the in box iSCSI intitiators is available from the RedHat Novell SuSE Linux and Sun Microsystems web sites Using CHAP Authentication to Enable Multiple Linux Syste...

Page 102: ...hentication is supported on NetWare 6 5 SP7 Note CHAP authentication is not supported on versions of NetWare 6 5 earlier than SP7 nor is it supported on pre GuardianOS 5 0 systems iSCSI implementation requires configuration using the NetWare Remote Manager or the command line in the Server Console For more information regarding installation and configuration of required NetWare components refer to...

Page 103: ...P authentication if desired Rescan if necessary to see the new iSCSI service Note On pre VMware ESX 3i systems you must open a port in your security profile to enable the iSCSI port From the Configuration tab select Security Profile click Properties and check the port for the iSCSI Initiator 4 Use the Add Storage option to configure your storage iSCSI Configuration for Mac GuardianOS supports the ...

Page 104: ...n separate volumes Back up an iSCSI Disk from the Client not the SnapServer An iSCSI disk is not accessible from a share and thus cannot be backed up from the SnapServer The disk can however be backed up from the client machine from which the iSCSI disk is managed Note While some third party agent based backup packages could technically back up an iSCSI disk on the SnapServer the result would be i...

Page 105: ...ite Cache Options with iSCSI Disks Note This section refers only to iSCSI disks For information about configuring write cache on GuardianOS volumes see Configuring Write Cache on page 58 To ensure the fastest possible write performance SnapServers can buffer up to 1GB of data to efficiently handle data being transmitted to a SnapServer This widely accepted method of improving performance is not wi...

Page 106: ...to iSCSI disks are disconnected before shutting down the server Ignore the Volume is Full Message When an iSCSI disk is created the volume allocates the specified capacity to the disk If all volume capacity is allocated to the iSCSI disk and email notification is enabled the SnapServer may generate a Volume is Full message This message indicates only that the volume capacity is fully allocated to ...

Page 107: ...r Be sure to read iSCSI Configuration on the SnapServer on page 88 before you begin creating iSCSI Disks Note You cannot delete or edit an iSCSI disk until all clients have been disconnected from that disk Click VSS VDS Access to add VSS VDS clients to the SnapServer See Configuring VSS VDS for iSCSI Disks on page 93 for more information To use CHAP authentication 1 Click to put a check in the Ena...

Page 108: ...itiators will be displayed To Delete an iSCSI Disk The system will not allow the deletion of an iSCSI disk when clients are connected the hostname and IQN name of all connected initiators will be displayed After disconnecting all client initiators click Delete and then follow the onscreen instructions to delete one or more iSCSI disks Label Description iSCSI Disk Name The name of each iSCSI disk V...

Page 109: ... snapshots are managed by the Windows client and represent the iSCSI disk not the Snap volume the iSCSI disk resides on They are not related to GuardianOS snapshots as described in Snapshots Note VSS iSCSI snapshot rollback is not currently supported The VDS hardware provider allows administrators to natively manage SnapServer iSCSI disks using any VDS compliant management console application Snap...

Page 110: ...Configuring VSS VDS for iSCSI Disks 94 SnapServer Administrator Guide ...

Page 111: ...trators can choose to apply Windows or UNIX style file level permissions to entire volumes or to directories at the root of a volume aka SnapTree directories These security based directory structures are referred to as SnapTrees File and directories in a Windows SnapTree can have either a Windows or UNIX security personality depending on the network protocol used to create the file or change permi...

Page 112: ...ify access at the individual share level Administrators can assign Read Write or Read Only share access to individual Windows and local users and groups Security permissions that have been applied to files and folders can be viewed from the Web View page of the Admin Tool For users with admin rights a key icon appears next to each file and folder in the share Clicking this icon displays a popup bo...

Page 113: ...ll continue to have the same permissions they had before and will continue to be enforced as they were This includes both UNIX permissions and POSIX ACLs When a Windows user changes permissions on a file or directory created pre GuardianOS 5 0 with a POSIX ACL the file will be updated to the new Windows security personality Share Level Permissions Share level permissions on GuardianOS are applied ...

Page 114: ...y default and whether that personality can be changed by users when changing permissions All top level volume directories as well as all directories inside the first level of a volume are considered SnapTrees For more information see SnapTrees and Security Models on page 100 NFS Share Access When controlling share access for NFS clients administrators can limit client access to the shares independ...

Page 115: ... Shares screen When creating a share you must set the following options Name Select a name for the new share Volume Select a volume from the drop down list Path Browse to the directory you want to use as the root of the share or type in the path to the share If the path does not exist when you click Browse or OK you will be asked if you want to create it Security Model If you create a share pointi...

Page 116: ...e the UNIX personality and vice versa Toggling Security Models The security model applied to a volume or SnapTree directory can be changed from the Security SnapTrees screen or when creating a share pointing to a volume root or SnapTree directory When changing security models the corresponding personality i e Windows for Windows Mixed and UNIX for UNIX is applied to the SnapTree directory itself w...

Page 117: ...s security personality Permissions will either be inherited according to the ACL of the parent directory if Windows or will receive a default ACL that grants the user full access only if the parent is UNIX or has no inheritable permissions Files and directories created by non SMB clients will have the UNIX personality UNIX permissions will be as set by the client per the user s local umask on the ...

Page 118: ...olume root directory has the Windows security model or Full Access to the owning user only Permissions for directories created by all other protocols will be set by the client per the client s umask From the Administration Tool If created in a UNIX volume permissions will be 777 rwxrwxrwx If created in a Windows Mixed volume permissions will allow all users to create delete and change permissions ...

Page 119: ...es Maintain at Least One Share at the Root of Each Volume A share to the root of a volume is recommended for backup purposes Security for any share at the root of the volume should be given special consideration Any user Property Description Share Name of each share Volume The volume the share points to Path The directory path on the volume Access The user level access defined for that share Full ...

Page 120: ...on any archived snapshots of the volume You create a snapshot share by selecting the Create Snapshot Share check box in the course of creating or editing a share Security Models SnapTrees and Shares In the course of creating a share that points to a volume or to a directory on the root of the volume aka SnapTree directory you must assign a security model to the volume or SnapTree directory Thereaf...

Page 121: ... page For example if a user has read only permission to the share but is also a member of a group that has been given full access permission to the share the user gets full access to the share NFS access permissions are not cumulative an NFS user s access level is based on the permission in the NFS access list that most specifically applies For example if a user connects to a share over NFS from I...

Page 122: ...ccess Creating Home Directories The Home Directories feature creates a private directory for every local or Windows domain user that accesses the system When enabling Home Directories from the Security Home Directories page the administrator creates or selects a directory to serve as the home directory root When a user logs in to the server for the first time after the administrator has enabled Ho...

Page 123: ...her shares If ID Mapping is enabled domain users and local users mapped to the same user will be directed to the domain user s home directory In some cases data in the local user s home directory will be copied to the domain user s home directory If a local user home directory accumulates files before the local and domain users are mapped and if the domain user s home directory is empty the local ...

Page 124: ...nt directory s ACL The owner of a file or directory always implicitly has the ability to change permissions regardless of the permissions established in the ACL In addition members of the SnapServer s local admin group as well as members of Domain Admins if the server is configured to belong to a domain always implicitly have take ownership and change ownership permissions Setting File and Directo...

Page 125: ...ect to the SnapServer Web View a In your browser enter http servername b Log in as a user with admin rights on the SnapServer using the Switch User link Note If Web Root is enabled log in to the administrative interface via http servername config then point your browser directly to a share to browse via http servername sharename 2 Browse Web View and click on the key icon to view security configur...

Page 126: ...d access rights for SnapServer network shares The SnapServer will need the name of your Active Directory domain the name and password of an administrative user within your Active Directory domain and the name of the organizational unit within the Active Directory tree in which the SnapServer will appear For more information about Windows Active Directory please see Support for Windows Network Auth...

Page 127: ...omponent of your backup strategy to ensure that all data in every backup operation is internally consistent and that no data is overlooked or skipped Note The Snapshot feature described here does not apply to snapshots for iSCSI disks Supported Windows servers can create native snapshots of iSCSI disks using VSS For more information see Configuring VSS VDS for iSCSI Disks on page 93 Topics in Snap...

Page 128: ...ts to restore selected directories or files have failed 2 Performing a rollback on a volume may invalidate the NetVault for GuardianOS NVDB directory for the volume and may also disable the antivirus software If you are using these features take the necessary precautions as described in Volumes on page 56 Scheduling Snapshots Snapshots should ideally be taken when your system is idle It is recomme...

Page 129: ... pool You can adjust the size of the pool up assuming unallocated space exists or down according to your needs If you find that your snapshot strategy does not require all of the space allocated to the snapshot pool by default consider decreasing snapshot pool capacity and reallocating the capacity to the file system To adjust the size of the snapshot pool navigate to the Storage Snapshots screen ...

Page 130: ...r example if RAID A with a snapshot pool of 50 GB is grouped with RAID B with a snapshot pool of 25 GB the resulting RAID group will have a snapshot pool of 75 GB Depending on the purpose you had in mind when grouping the RAIDs the result of combining the two snapshot pools may or may not be desirable and you will need to readjust the size as described previously Accessing Snapshots Snapshots are ...

Page 131: ...t a previous point in time or even roll back to a previous version of the file by creating a file copy to the current live volume Note The latest subdirectory is very useful for setting up backup jobs as the name of the directory is always the same and always points to the latest available snapshot Coordinating Snapshot and Backup Operations Like backups snapshots can be scheduled to recur at a de...

Page 132: ...ate a share to the root of the volume simply accept the default path Click Advanced Share Properties then select Create Snapshot Share 3 Set the backup software to archive the latest version of the snapshot The SnapServer makes it easy to configure your backup software to automatically archive the most recent snapshot Simply configure your backup software to copy the contents of the latest directo...

Page 133: ...ster recovery feature can also be used to clone one server to another by restoring the disaster recovery image from one server to another server Topics in Disaster Recovery Management Backing Up Server and Volume Settings Backing Up the NetVault Database Directory Recovering the NetVault Database Disaster Recovery Procedural Overview Cloning a Server Backing Up Server and Volume Settings In additi...

Page 134: ...the volume specific files when the snapshot is taken If you do not use snapshots to back up a volume to tape you must manually regenerate these files whenever you change ACL or quota information to ensure that you are backing up the most current volume settings Creating the SnapDRImage and Volume Files Creating a SnapDRImage that covers the scope of your server s configuration is essential to a su...

Page 135: ...to a safe location on another server or backup medium See The SnapDRImage File and the Volume Files for file names and paths This strategy ensures that if the file system on the SnapServer is corrupted the image file will be available to restore server settings The DRImage is also automatically placed in the root of the first user volume These files will be copied to tape as part of your regular b...

Page 136: ...d the specific piece of media targeted can be easily located to perform the recovery To Back up the NVDB Directory 1 From the NetVault Server either locally or remotely open the NetVault Backup window by clicking the Backup button on the command toolbar The NetVault Backup window displays the list of available clients in the Selections tab 2 Right click the NetVault Server acting as a client to it...

Page 137: ...aveset needed for the recovery of the NVDB 4 Add all devices previously added to the NetVault Server through the use of the Device Management window 5 From the Device Management window the media containing the backup saveset will be recognized as FOREIGN in its designated drive or library slot Scan the media before proceeding with the restore operation Restore Recommendations The following recomme...

Page 138: ...boxes can be double clicked to browse their individual contents 6 For a full database restore select each item in the tree Additionally open up root items to display their contents by double clicking them and then select all of their contents e g Events Notification and Reports Database items 7 Select the Restore Options tab and make sure that the Blank Reports Database Table option is selected 8 ...

Page 139: ...sed through Overland Storage will be lost If you have installed data replication or management utilities such as Snap EDR you will need to re install and or relicense them for use with the new server Note If you are restoring EDR Management Console settings you must recreate the RAID and volume configuration that matches the DRI settings then install and enable the EDR Management Console As an alt...

Page 140: ...ver the volume settings Cloning a Server The Disaster Recovery process can be used to clone a server in order to apply the same configuration to one or more servers To clone a server 1 Create a disaster recovery image on the source server refer to Creating the SnapDRImage and Volume Files 2 Copy the disaster recovery files from the source server to a client 3 Perform a disaster recovery restore pr...

Page 141: ...g the CA eTrust Antivirus GUI accessed from the SnapExtensions CA Antivirus screen of the Administration Tool This section outlines the major steps in configuring the antivirus software See the GUI online help for detailed descriptions of all options Note Some SnapServers require a license before CA eTrust Antivirus can be enabled Topics in Antivirus Configuration Antivirus Dependencies Launching ...

Page 142: ...link Resetting the Server Date and Time If the current server date and time are changed to an earlier date and time Server Date Time the change does not automatically propagate to any scheduled antivirus operations To synchronize scheduled antivirus operations with the new date and time settings you must reschedule each operation New jobs may be affected by the time change Be sure to check that ne...

Page 143: ...me you connect to the GUI it may take from 30 seconds to several minutes for the application to load depending on the speed of your connection 1 If you need to enable the antivirus software go to SnapExtensions CA Antivirus click the check box next to Enable and click OK 2 Click the Configure eTrust Antivirus link The splash screen opens first followed momentarily by the GUI login dialog box 3 Ent...

Page 144: ... system for viruses before running a snapshot Adjust your antivirus scan schedule to synchronize with your snapshot schedule so that any infected files are cured or removed before the snapshot is scheduled to fire Defining Scan Jobs This section provides an overview of the major choices available in configuring scan jobs Access these options by selecting Local Scanner Options from the Scanner Menu...

Page 145: ...g Check the Infected files option to put information in the log about files that are found to be infected Check the Clean files option to put information in the log about files that are scanned and are not infected Check the Skipped files option to put information in the log about files that have been excluded from the scan File Actions Description Report Only Default Reports when an infection is ...

Page 146: ...an results display in the lower pane of the Local Scanner View and the action taken with each file is listed in the Status column Scheduling a Scan Job A scan job is configured and scheduled in the Schedule New Scan Job dialog box To open this dialog box select the Scanner Schedule Scan Job Create command 1 Set scan options in the Scan and Selection tabs These options are summarized in Defining Sc...

Page 147: ...ed on To update SnapServers that do not have Internet access the following methods are available Method Description FTP Use FTP to download the update files from the Computer Associates FTP site You can also use FTP to distribute signature updates from one SnapServer or any FTP server to another Note When using FTP the user name and password are passed as clear text UNC Use UNC to distribute signa...

Page 148: ...OK Updating a SnapServer that does not have Internet Access If you have SnapServers that do not have Internet access use the following procedures to download the signature files to a machine with Internet access and then copy them to the SnapServer Note When retrieving signature updates the antivirus software attempts to connect to all the sites in the site list in the order they are listed To avo...

Page 149: ...nternet access you can perform the previous procedure on just one of them or any Windows SMB server and then configure your other SnapServers to get the update from that server automatically via SMB by specifying the UNC of the server containing the signature files Notes The following conditions must be met in order to distribute updates using UNC The correct Signature files must have been downloa...

Page 150: ... them or any FTP server and then configure your other SnapServers to get the signature updates from that server automatically via FTP 1 Navigate to Scanner Signature Update Options and click the Incoming tab 2 Click the Add button and select FTP in the Method list box 3 Enter the following information regarding the server on which the update file resides as follows In the Host Name field enter the...

Page 151: ...affic and minimize the dissemination of notifications that are not critical To set alert options select Alert Options from the Scanner menu The Alert Options dialog box contains the following tabs Tab Description Report Use the Alert Report options to specify where to send notification information and the Report Criteria options to manage how frequently messages from the General Event Log are repo...

Page 152: ... location You may want to use this option for example if you do not have another source for the data and you need to look at the file Or you may have a file that you want to analyze Note To restore a file to a different directory you must prepend the path to the directory with the string shares For example to restore a file to the SHARE1 sales directory enter the path as follows shares SHARE1 sale...

Page 153: ...ocal Scanner Displays summary information about scan jobs that have run RealTime Scanner Not Supported Scheduled Scanner Displays summary information on scheduled scans that have run General Events Displays the Event log for a given day Click a date to view all events that occurred that day Distribution Events Displays distribution events by date Click a date to view detailed information on the di...

Page 154: ...Log View 138 SnapServer Administrator Guide ...

Page 155: ...ames More information is available at http www unicode org Caution Once Unicode has been enabled on a GuardianOS SnapServer it is not possible to disable Unicode Enabling Unicode will alter the functionality of some third party applications and SnapExtensions that do not fully support Unicode Converting to Unicode To convert your GuardianOS SnapServer to Unicode complete the following steps Step 1...

Page 156: ...note the following The server reboots after Unicode has been enabled After rebooting the server will convert all file systems to Unicode file names which can take some time File systems are accessible during conversion During this time file names with extended characters in them before Unicode was enabled will appear with garbled characters before being converted to Unicode File system conversion ...

Page 157: ...ajority of Unicode characters Therefore in general all characters written by Windows and MacOS X clients will be properly retained and visible to other Windows and MacOS X clients and Unicode compliant protocols However if there are characters on the file system that are invalid UTF8 or are otherwise not mappable to the Unicode encoding method UCS2 used by the SMB protocol an escape sequence will ...

Page 158: ... include ISO 8859 1 ISO 8859 15 EUC JP and UTF8 Any extended characters on the file system that cannot be translated to the configured NFS code page will be returned to the NFS client with an escape sequence Escape sequences begin with The following two characters are the hexidecimal value of the characters in the filename for example you might see AB in a file name FTP FTP only supports ASCII cha...

Page 159: ...Snapshots Interact with Unicode Snapshots taken before the SnapServer was converted to Unicode are not compatable with the SnapServer once it has become Unicode enabled It is not recommended that a pre Unicode snapshot be used to restore a post Unicode server Note It is recommended if you have snapshots on your server from pre Unicode conversion you delete all snapshots once the server has been co...

Page 160: ...ackup Exec to backup via Unicode enabled Windows clients but any Unicode compliant Backup application should also work Bakbone NetVault over client 1 1 The UI displays garbage but the data is intact Symantec Backup Exec 10 d 11 d 12 d over SMB only Symantec NetBackup 6 5 CA ARCServe 11 5 12 0 over SMB only 1 EMC Legato Networker v7 3 7 4 over SMB only Snap EDR over Sync only Officially Supports Un...

Page 161: ...nt with a language compliant backup application Mixing languages example having Russian files on a server then using a German backup application will lead to data corruption Unicode and Expansion Arrays This section outlines how SnapServer expansion arrays interact with Unicode Unicode Converted Expansion Arrays When an expansion array is converted to Unicode it stays converted to Unicode This mea...

Page 162: ...t stays converted to Unicode If a non Unicode expansion array is attached to a Unicode converted SnapServer the expansion array will be automatically converted to Unicode when it is incorporated with the SnapServer Caution Converting to Unicode is a one way operation There is no undoing the conversion to Unicode if you change your mind ...

Page 163: ... 2 The tape drive library is attached to one of the SnapServers not applicable to the SnapServers 110 and 210 This appendix provides a brief description of the supported backup solutions and where applicable gives instructions on how to install the solutions on the SnapServer SnapServer Backup Backup and Replication Solutions BakBone NetVault for GuardianOS Snap EDR CA BrightStor ARCserve 11 5 12 ...

Page 164: ...akBone s NetVault server software preinstalled with a Workgroup Server license This license supports backup and recovery of data to the SnapServer from up to 5 heterogeneous clients Additional clients can be added with optional licenses Note SnapServers 110 210 and N2000 require an additional license to support NetVault For additional information on installing and configuring NetVault see the docu...

Page 165: ...e or more different SnapServers It comes preinstalled on some servers with a 45 day free trial or it can be downloaded from the SnapServer website Snap EDR consists of a Management Console and a collection of Agents The Management Console is installed on a central system It coordinates and logs the following data transfer activities carried out by the distributed Agents Replicates files between an...

Page 166: ...complete information on using Snap EDR see the Snap EDR Administrator s Guide available on the SnapServer website Option Description Click here to configure jobs Opens the Management Console where jobs can be scheduled Stop Service Stops all services Restart Service Restarts all services Caution Use only if you have encountered a problem and customer support advises you to restart the service Any ...

Page 167: ...addresses of the backup and media servers you plan to use with the SnapServer Use the Maintenance Host File Editor screen in the SnapServer s Administration Tool to supply a host name to ip address mapping that persists across system reboots SnapServer is seen by Backup software as a UNIX Linux client When you configure a backup server to see the agent or client running on the SnapServer assume th...

Page 168: ...to the SnapServer In the Administration Tool navigate to the Maintenance Host File Editor screen and click Add In the screen that opens enter the IP address of the backup or media server or enter one or both of the following as required by your backup software Host name long form Enter the fully qualified address for the backup server using the myserver mydomain com format Host name short form Ent...

Page 169: ...agent files are available from your BrightStor ARCserve CD but some ARCserve CDs may not contain all the required files To obtain the files you need contact Computer Associates If you have questions about the agent configuration refer to your CA ARCserve documentation Prepare the SnapServer 1 Connect to the SnapServer via SSH Note SSH v2 is required If you fail to connect to the server ensure that...

Page 170: ...hat volume 11 Create the following symbolic links from the new directories in arcserve to the opt directory ln s hd volumename arcserve opt CA Install CA ARCserve Agent 1 To install the agent files enter the following command at the prompt and press Enter rpm nodeps Uvh babagtux rpm lic rpm 2 Once the license is installed run the Install script by entering the following command at the prompt and p...

Page 171: ... a test backup Uninstall CA ARCserve Agent 1 If you still have the tar or install directory that you copied to the SnapServer when you installed the ARCserve Agent the uninstall script will be in that directory If you do not have the directory or tar copy the files again from the ARCserve CD or get them from Computer Associates 2 Make sure you have the script uninstall Type the following and follo...

Page 172: ...shell 4 Change to root by entering the following command su Give the root password same as admin password 5 Select a volume on which to put a directory called ralus Note If you later delete the volume the ralus directory is on you will need to reinstall the agent cd hd ls lists all the volumes df h shows volume usage 6 Determine which volume has the most available space by looking at the Avail col...

Page 173: ...ts file directly with a text editor Install Backup Exec RALUS Agent 1 From a network client create a ralusinstall directory on SHARE1 of the SnapServer then copy the RALUS agent tar file or contents of the RALUS agent CD to the directory 2 If you copied the files from the CD proceed to Step 3 If you downloaded the files from the Symantec website in SSH extract the files cd shares SHARE1 ralusinsta...

Page 174: ...can create a job using the UNIX agent a Create a Guardian Root login account on the Backup Exec server b Connect as root the password will be the same as the admin account password c Create a job and choose the Unix agent representing the SnapServer d Verify that you can connect to the agent configure a job and run the job Uninstall the Backup Exec RALUS AGENT 1 To uninstall the RALUS Agent you wi...

Page 175: ... the password for the admin account 3 You are placed into the CLI shell However a standard Linux shell must be used to install the agent To launch a shell type the following command and press Enter osshell 4 Change to root by entering the following command su Give the root password same as admin password 5 Select a volume on which to put a directory called openv Note If you later delete the volume...

Page 176: ... cd shares SHARE1 NBClients catalog anb client inst Follow the instructions choosing RedHat Linux choose 2 6 kernel version if available as the type 3 Once the NetBackup Client is installed reboot the server using the Administration Tool Maintenance Restart to start the client service 4 Verify that you can configure the UNIX client a Create a policy and add the SnapServer as a client b Look at the...

Page 177: ...ent files on the default share SHARE1 such that the path to the directory is shares SHARE1 agent This section describes how to install the EMC Legato NetWorker UNIX Linux client as well as special procedures EMC Legato NetWorker users must follow in order to perform backup and restore operations on the SnapServer Prepare the SnapServer 1 Connect to the server over SSH Note SSH v2 is required If yo...

Page 178: ...sr and opt usr cd networker mkdir opt usr opt usr ls to verify that the directories are there 9 If CA Antivirus has been installed you will have an opt directory If it has not been installed create an opt directory mkdir opt 10 Create links from the networker working volume to the root filesystem ln s hd vol_mnt X networker nsr ln s hd vol_mnt X networker opt nsr opt ln s hd vol_mnt X networker us...

Page 179: ... the following command and press Enter su 4 At the prompt enter the admin user password and press Enter 5 Use the cd command to change to the directory in the share for example cd shares SHARE1 agent 6 To unpackage the client files enter the following commands tar xvfz nw_linux86 tar gz 7 To install the NetWorker Agent rpm enter the following command rpm Uvh nodeps relocate usr hd vol_mnt X NetWor...

Page 180: ...rs use the following procedure 1 Open the NetWorker Administrator application 2 Click the Configuration tab 3 Click the User Groups menu item 4 Click on the Administrators group 5 In the Configuration box add one of the following user root hostname where hostname is the host name of the SnapServer for each SnapServer Or enter user root to add root for all SnapServers 6 Click OK Recover and Retriev...

Page 181: ...s original location recover s backupservername c snapservername f i shares SHARE1 data a where shares SHARE1 data is the path of the data you are restoring To recover data to a different location recover s backupservername c snapservername f i a R d shares SHARE1 relocated_data shares SHARE1 Data where shares SHARE1 relocated_data is the path to the new target location for the restore operation an...

Page 182: ...y entry to the systems running the Backup Exec Server and all of the Backup Exec agents backing up iSCSI disks After the Backup Exec Server or agent has been installed modify the registry to add the SnapServer as a Backup Exec VSS provider 1 Run the following command regedit 2 Navigate to the following key HKEY_LOCAL_MACHINE SOFTWARE Symantec Backup Exec For Windows Backup Exec Engine Misc VSSProv...

Page 183: ...x SnapCLI Commands Scripts in SnapCLI SnapCLI Syntax SnapCLI command syntax uses three parameters COMMANDS ARGUMENTS and OPTIONS To generate commands in SnapCLI use the following syntax COMMAND ARGUMENT OPTIONS where COMMAND is the name of one of the SnapCLI commands ARGUMENT is an action available for that command and OPTIONS are additional parameters for the command Once logged into the CLI ther...

Page 184: ... Note If instead of typing the word date you had typed d tab the word would have been completed for you If you entered d tab tab the word would have been completed and the available options displayed Command Arguments and Options Descriptions date timezones list available time zones get get server date time set OPTIONS day 1 31 month 1 12 year 1900 hour 0 23 minute 0 59 second 0 59 timezone 1 set ...

Page 185: ...led Note Free or low cost SSH applications are available over the Internet 2 Connect to the server using its name or IP address and log in as admin or any other member of admingp You will automatically be placed in the CLI shell Note SSH v2 is required If you fail to connect to the server ensure that your SSH client is configured to connect via SSH v2 Exiting SnapCLI To exit SnapCLI type exit The ...

Page 186: ...er domain get Get the domains known to the SnapServer and their properties domain list List the domains known to the SnapServer dri create Create a Disaster Recovery Image dri dri recover system Restore a Disaster Recovery Image dri dri recover volume Restore a Disaster Recovery Volume Image dri email get Get email notification settings email set Set email notification settings event clear Clear a...

Page 187: ...t Get information for a specific host file entry hostfile set Set information for a specific host file entry hostfile list List all host file entries idmap auto map View Save auto generated ID mappings idmap count Count number of ID mappings idmap group get Get ID mapping for a windows domain group idmap group remove Remove ID mapping for a windows domain group idmap group set Set ID mapping for a...

Page 188: ...pServer NFS Properties nis get Get current NIS settings nis set Set current NIS settings ntp get Get NTP client settings ntp set Set NTP client settings ntp_server get Get NTP Server settings ntp_server set Set NTP Server settings openfiles List the Open Files osupdate get Display status of last OS update osupdate load Perform an OS update passwordpolicy get Display Password Policy settings and st...

Page 189: ...oration and background disk properties reboot Reboot the SnapServer registration get Get registration status registration set Set registration key securitymodel get Get the security model on a SnapServer Volume securitymodel set Set the security model on a SnapServer Volume share create Create a share share delete Delete a share share get View a share share rename Rename a share share set Modify a...

Page 190: ...hot snapshot sched delete Delete specified snapshot schedule snapshot sched get Get specified snapshot schedule snapshot sched set Set specified snapshot schedule snapshot sched list List current snapshot schedules snapshot pool get Get snapshot pool properties snapshot pool set Set snapshot pool properties snapshot pool list List current snapshot pools snapshot rollback Start a rollback for the s...

Page 191: ...ete bond Remove a TCP IP bond unicode get Get current Unicode settings unicode set Enable Unicode on the system updatenotification get Get update notification properties updatenotification set Set update notification properties updatenotification check Check to see if updates are available ups get Get UPS settings and status ups set Set UPS settings user create Create a local user user delete Dele...

Page 192: ...delete Delete access for a VSS VDS client hostname web get Get current HTTP Web access settings web set Enable or Disable HTTP access to Web Administration interface windows get Get windows network settings windows set Set windows network settings clear Clear the screen exit Quit the command line log off and exit ssh bash session Note If user has started another shell the command exit will return ...

Page 193: ...i Avoid using Windows clients to create or edit scripts Place the script in a share that will never be part of a delete script 2 Log in to the SnapCLI see Logging into SnapCLI for instructions 3 Type osshell to get a bash prompt 4 At the prompt make sure the script is executable by typing the following and pressing Enter chmod x shares sharename scriptname where sharename is the name of the share ...

Page 194: ...user Create a user if the user does not exist then create it if CLI user get user name 1 dev null 2 1 then echo Creating user 1 CLI user create user name 1 password 2 dev null 2 1 if ne 0 then echo Creation of user 1 failed return 1 fi else echo User 1 already exists fi return 0 usage mgroup group_name mkgroup Create a group if the group does not exist then create it if CLI group get group name 1 ...

Page 195: ...does not exist create it if CLI share get share name 1 dev null 2 1 then echo Creating share 1 CLI share create share name 1 share volume 2 dev null 2 1 if ne 0 then echo Creating share 1 failed return 1 fi else echo Share 1 already exists fi return 0 usage rmuser user_name rmuser Delete the user if the user exists then delete it if CLI user get user name 1 dev null 2 1 then echo Deleting user 1 C...

Page 196: ... get share name 1 dev null 2 1 then echo Deleting share 1 CLI share delete share name 1 dev null 2 1 if ne 0 then echo Deletion of share 1 failed return 1 fi else echo Share 1 does not exist fi return 0 Create a user group and share then add the user to the group Main create a user a group and a share and add the user to the group mkuser USER PASSWORD mkgroup GROUP adduser2group USER GROUP mkshare...

Page 197: ... specific issues by clicking the Knowledge Base link on the SnapServer support page http www snapserver com kb Hardware Components Purchase additional hardware components from authorized SnapServer resellers To locate a reseller in your area select the How to Buy tab on the SnapServer home page http www snapserver com Field Service Documents Find a list of the hardware components available for you...

Page 198: ...d Drive Light Behavior SnapServer 18000 Status and Drive Light Behavior Snap Expansion S50 Enclosure Disk Drive APC Module and Controller Behavior Snap Disk 10 Disk Drive and Power Supply Module LEDs Snap Disk 30SA Disk Drive and Power Fan Module Behavior SnapServer NAS N2000 and EXP E2000 Status and Drive Light Behavior The SnapServer NAS N2000 has one System light two Network lights Ethernet1 le...

Page 199: ...unit is powered on but GuardianOS is not running Blinking green N2000 only GuardianOS is booted and operating normally Network LEDs N2000 only Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch ...

Page 200: ... Solid Blue SAS drive Disk drive installed properly but is not active Blinking Blue Disk drive installed properly and is active Bottom LED Solid Red Disk drive error All Drive LEDs E2000 only Blinking simultaneously UID identification from Disks Units page of Admin Tool Power Description Solid green The module is operating properly Solid amber Off The module has failed is not connected or the serv...

Page 201: ...status lights one network light and one disk light as shown in the following illustration Power and System LEDs These status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right Power LED Status LED Network LED and Disk LED Power Status Network Disk ...

Page 202: ...s powered on Off The server is powered off Status LED Blinking green The server is operating normally Blinking amber A thermal or other system problem was detected Blinking amber and green The server is in Maintenance Mode Network LED Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch Disk ...

Page 203: ...bottom of the bezel two LEDs for each drive For all disk drive LEDs the left light indicates drive status the right light indicates drive activity They operate as follows Power LED Solid green The server is powered on Off The server is powered off System LED Blinking green The server is operating normally Blinking amber A thermal or other system problem was detected Blinking amber and green The se...

Page 204: ...recommends that you become familiar with the operation of these lights Power System and LAN LEDs These status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The Disk Drive LEDs are below the status lights and the indentification Unit...

Page 205: ...Solid or blinking amber at boot time A problem was detected The server will not boot Blinking amber during normal operation A thermal or other system problem was detected Blinking amber and green The server is in Maintenance Mode LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an act...

Page 206: ...lowing illustration Solid amber Off Disk drive installed but not working correctly Off Off No disk drive installed Status LED left Activity LED right Power Description Solid green The module is operating properly Blinking green The module has failed or is not connected Solid amber Off The module has failed is not connected or the server has been turned off Status LED ...

Page 207: ... status lights are located to the right of the power button Looking at the server from the front the lights appear in the following order from left to right power LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The LEDs operate as described in the following tables Power LED Solid green The server is powered on Off The server is powered off System LED Double blink green The server is boo...

Page 208: ...cted Blinking amber and green The server is in Maintenance Mode System LED LAN 1 and LAN 2 LEDs Solid green The server is active and connected to the network on the network port Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch Status LED left Activity LED right Solid green Off Disk drive installed properly but is not active Solid green Blinking gree...

Page 209: ... LED system LED LAN 1 Ethernet1 LED and LAN 2 Ethernet2 LED The LEDs operate as described in the following tables Power LED Solid green The server is powered on Off The server is powered off 1 2 3 4 5 6 7 8 Power LED System LED LAN LEDs Disk Drive LEDs System LED Double blink green The server is booting up Triple blink green The server is shutting down Solid or blinking amber at boot time A proble...

Page 210: ...1 and LAN 2 LEDs Solid green The server is active and connected to the network Off The port is disconnected or the Ethernet cable is not connected or linked to an active switch Status LED left Activity LED right Solid green Off Disk drive installed properly but is not active Solid green Blinking green Disk drive installed properly and is active Solid amber Off Disk drive installed but not working ...

Page 211: ...odule The Monitoring Status screen of the Administration Tool indicates when a fan has failed When the cover of the chassis is removed the Fault LED on the failed module will be lit The Fault LED of a SnapServer 18000 fan module is identified in the following illustration To remove a failed fan module squeeze its handles together and lift the module out of the unit Fault LED ...

Page 212: ...he status of the enclosure These LEDs operate as described in the following table Disk Drive LEDs Each disk drive has three LEDs that indicate the status of the disk drive 1 2 3 4 LED Condition Indication 1 On Enclosure power on 2 On Fault on enclosure When a failure occurs on a controller or APC unit the enclosure LEDs indicate an enclosure fault 3 Solid green Host Link A solid green LED indicate...

Page 213: ...front of the unit also indicates the failure LED Condition Indication 1 N A Not used 2 Solid green Drive present and OK Solid amber Drive failed Off Drive not present 3 Solid green Drive present and idle Green random flash I O activity on disk drive Off Drive not present Power Fault LED Condition Indication Power Off Enclosure not powered on Green solid APC unit functioning normally Fault Off APC ...

Page 214: ...he Snap Disk 10 s disk drives and power module Disk Drive LEDs The Snap Disk 10 has two lights below each disk drive The Power light left indicates power The Status light right indicates system activity LED Condition Indication Master On Controller is current Master for enclosure Fault On 5 10 seconds only Enclosure is powering on On continuously Fault condition exists on controller FAULT SEP MAST...

Page 215: ...le Drive Status Drive Activity Condition of Disk Drive Green Amber flashing Disk drive installed and being accessed Green Not lit Disk drive installed properly but not being accessed Amber Not Lit Disk drive installed but not working correctly Not Lit Not Lit No disk drive installed Power Light Condition of Disk Drive Solid Green Power module is installed and working properly Off Power module is d...

Page 216: ... The Snap Disk 30SA has two LEDs at the edge of each disk drive as shown in the following illustration The LEDs operate as described in the following table Status Fault Condition of Disk Drive Solid green Off Disk drive installed properly but is not active Solid green Off Disk drive installed properly but is not active Solid green Solid amber Disk drive installed but not working correctly Off Off ...

Page 217: ...le together and then withdraw the module by pulling the handle towards you The LEDs operate as described in the following table Power AC Fan DC Condition of Power Fan Module Green Off Off Off Power and fan working properly Off Amber Off Amber AC power supply is disconnected Green Off Red Off Fan installed but not working correctly Off Off Off Off Module not seated properly or disconnected from ope...

Page 218: ... LED Normal Status Fault Description 1 Invalid Address Off Flashing amber Invalid Enclosure ID has been selected or the selection has changed since Power On 2 Power On Solid green Off Enclosure powered on 3 System Fault Solid amber Off System SCM fault 4 PSU Fault Solid amber Off PSU cooling fault or enclosure over temperature 5 Hub Mode not used not used n a 6 2GB Link Speed not used not used n a...

Page 219: ...artitions Note To install the GuardianOS you must obtain the appropriate GuardianOSImage file This file is available from Overland support Resetting the SnapServer to Factory Defaults The GuardianOS allows you to reset different components of the system Default settings can be found in the default configuration sections of this Guide Caution Each reset option requires a reboot of the server To pre...

Page 220: ...ence on reboot Performing System Resets Without Network Access Should access to the server be lost the Reset or LCD panel buttons can be used to reset server settings and re establish connectivity To Perform a Limited Reset Using the Reset Button On SnapServer 4200 and 4500 the Reset button is a white button located to the left of the black power button underneath the front bezel On the SnapServer...

Page 221: ...Administrator Tool Use the autonegotiate setting on both the switch and the server port You Have No Access to the SnapServer via HTTP When trying to access the SnapServer via HTTP the Web browser times out The server can be accessed using the ping command or Windows Explorer HTTP and HTTPS are both enabled by default on SnapServers Try typing HTTPS in the Web address rather than HTTP If you are ab...

Page 222: ... a message stating that the SnapServer will be going down in 5 minutes This is because the AFP protocol needs to be restarted To resolve this issue reconnect to the share Problems Occur with Domain Controller Authentication You are receiving the following errors in your error log SMB Domain Controller unavailable SMB Username not connected to Domain Controller This means that either your Domain Co...

Page 223: ...ment In some environments that include NT server systems this may cause the NT server to show warnings about having to force a master browser election in the event log You can prevent these warning messages by disabling the Master Browser option on the Network Windows screen You Try to Mount to a Share on Your SnapServer from Your Linux Workstation and You Receive an RPC Timeout Message Check the ...

Page 224: ...nectors on the Snap Disk 10 and the SnapServer Tightening the connectors by hand will not work You Are Unable to See Your Domain Users When Trying to Set Up Windows Security Permissions on File Folders The SnapServer GuardianOS has joined the Active Directory domain properly and you can see the domain users when you set Share permissions from the browser based Administration Tool Make sure the Win...

Page 225: ... The SnapServer has booted into Maintenance Recovery Mode This may be due to a boot failure in the previous boot attempt Try booting again If the server still returns to Maintenance Mode call Technical Support Power to the SnapServer Is Unexpectedly Cut Off Due to a Power Outage Overland Storage recommends that you use an uninterruptible power supply UPS with the SnapServer If you did not have a U...

Page 226: ...g the system as described in Performing System Resets Without Network Access on page 204 You Can Not Delete Files or Folders From an iSCSI Disk If an iSCSI disk is mounted to a folder not a letter drive in Windows you will not be able to delete files and folders inside that mount point The Windows Recycle Bin does not understand mount points so to avoid this problem either mount iSCSI disks to let...

Page 227: ...g Case if you have previously contacted technical support concerning the issue Case Number If you selected Existing Case above enter the case number provided by technical support Reply to Address Required This field defaults to the first email address entered as a recipient on the Server Email Notification screen If necessary enter at least one email address that will serve as the contact email ad...

Page 228: ...Phone Home Support 212 SnapServer Administrator Guide ...

Page 229: ...zip Zone Information Protocol 21 TCP UDP Network FTP ftp File Transfer Protocol FTP port sometimes used by File Service Protocol FSP 22 TCP UDP Server SSH ssh Secure Shell SSH service 25 TCP UDP Server Email Notification smtp Simple Mail Transfer Protocol SMTP 67 TCP UDP Network TCP IP bootps Bootstrap Protocol BOOTP services also used by Dynamic Host Configuration Protocol DHCP services 68 TCP UD...

Page 230: ...inux by Samba 138 TCP UDP Network Windows netbios dgm NETBIOS Datagram Services used in Red Hat Enterprise Linux by Samba 139 TCP UDP Network Windows netbios ssn NETBIOS Session Services used in Red Hat Enterprise Linux by Samba 161 TCP UDP Network SNMP snmp Simple Network Management Protocol SNMP 162 TCP UDP Network SNMP snmptrap Traps for SNMP 201 TCP UDP Network Apple at rtmp AppleTalk routing ...

Page 231: ...l CUPS Common UNIX Printing System 852 TCP Network NFS Used by rpc mountd 882 UDP Snap Finder SnapServer Manager Sysbroker Broadcast Discovery 933 UDP Network NFS Used by rpc statd 936 UDP Network NFS Used by rpc statd 939 TCP Network NFS Used by rpc statd 957 UDP Assist Used by assistrecv 959 TCP Assist Used by assistrecv 2005 TCP SnapExtensions SnapExtensio ns Bridge from Servlet to Snap Extensi...

Page 232: ...tVault NetVault 10001 TCP Snap Extension Snap Extension Shutdown Port 12000 TCP UDP Network Apple afp2overtcp Second NIC 12168 TCP CA Antivirus inoweb Admin Interface 16384 UDP Sysbroker Random Port 16388 UDP Sysbroker Random Port 20031 TCP SnapExtension BakBone NetVault NetVault Listening Port 24066 TCP poolmgr Used by bin poolmgr 32780 TCP WebUI tomcat Random Port 32781 TCP WebUI tomcat Random P...

Page 233: ...s authentication allows Active Directory users to connect to shares on the SnapServer The SnapServer supports the Microsoft Windows 2000 family of servers that run in native ADS mode or in mixed NT ADS mode AFP AppleTalk Filing Protocol A Local Area Network LAN architecture built into all Apple Macintosh computers agent A program that performs some information gathering or processing task in the b...

Page 234: ...ty of the peer using a three way handshake checksum The result of adding a group of data items that are used for checking the group The data items can be either numerals or other character strings treated as numerals during the checksum calculation The checksum value verifies that communication between two devices is successful CIFS Common Internet File System The default Windows protocol for comm...

Page 235: ...ers and groups of users A domain may also include multiple servers on the network To gain access to these network resources the user logs into the domain domain name The ASCII name that identifies the domain for a group of computers within a network Ethernet The most widely installed LAN technology 100Base T Ethernet provides transmission speeds of up to 100 Mbps Fast Ethernet or 1000Base T provid...

Page 236: ...uardianOSImage gsu An image file used to upgrade the GuardianOS half duplex A type of transmission that transfers data in one way at a time hidden share A share that restricts the display of the share via the Windows SMB Web View HTTP HTTPS FTP and AFP protocols host name The unique name by which a computer is known on a network It is used to identify the computer in electronic information interch...

Page 237: ...d host address It displays as four addresses ranging from 1 to 255 separated by periods iSCSI Internet SCSI iSCSI is a standard that defines the encapsulation of SCSI packets in TCP and then routing it using IP It allows block level storage data to be transported over widely used IP networks Jukebox A robotic tape backup device that stores numerous tape drives and uses a mechanical arm to bring th...

Page 238: ...DS and NIS users are not considered local MAC Media Access Control In the Open Systems Interconnection OSI model one of two sublayers of the Data Link Control layer Concerned with sharing the physical connection to the network among several computers Each Ethernet port has a unique MAC address SnapServers with dual Ethernet ports can respond to a request with either port and have two unique MAC ad...

Page 239: ...server by default NIS Network Information Service A network naming and administration system for smaller networks that was developed by Sun Microsystems NIS is a later version that provides additional security and other facilities The SnapServer accepts NIS users and groups node Any device including servers workstations or tape devices that are connected to a network also the point where devices a...

Page 240: ...ffers no redundancy and does not accept hot spares If a single disk drive fails every file in the RAID is rendered unavailable RAID 1 Mirrored Stores data on one disk drive and copies it to another drive in the RAID A RAID 1 must contain at least two disk drives one for the data space and one for redundancy Although the data space in a RAID 1 can never be larger than a single drive some administra...

Page 241: ...estore a volume to a previous state as archived in a snapshot without resorting to tape SCSI Small Computer System Interface A parallel interface standard used to attach peripheral devices such as robotic libraries to computers serial number The ten character alphanumeric number assigned by the manufacturer at the factory server number A numeric derived from the MAC address of your SnapServer s pr...

Page 242: ...f the RAID capacity is allocated to the snapshot pool snapshot share A virtual folder that allows access to all current snapshots at the same directory level as the original share on which it is based SnapTree Directory A directory residing in the root of a volume that is assigned a Windows or UNIX style security model The security model determines the file level security scheme that will apply to...

Page 243: ...nagement program that an event has occurred U A standard unit of measure for designating the height in computer enclosures and rack cabinets One U equals 1 75 inches For example a 3U server chassis is 5 25 inches high UI User Interface The User Interface is the graphical and textual presentation of the GuardianOS in your web browser UID User IDs A unique ID assigned to each user on a SnapServer fo...

Page 244: ...and displays a list of all shares Windows domain authentication Windows based networks use a domain controller to store user credentials The domain controller can validate all authentication requests on behalf of other systems in the domain The domain controller can also generate encrypted challenges to test the validity of user credentials Other systems use encrypted challenges to respond to CIFS...

Page 245: ...toshOS Antivirus and volume deletion 56 dependencies on other software components 124 distributing updates 131 enabling 20 excluding snapshots from 126 HTTP requirement 124 launching configuration GUI 125 scan job configuration 126 using logs 135 APC Brand UPS see UPS Authentication default settings 44 HTTPS HTTP 38 Kerberos 32 local 45 NIS domain 47 UID and GID assignments 44 B Backing up Uncode ...

Page 246: ...0 Disaster Recovery backing up server and volume settings 115 creating recovery files 116 procedures 121 Disk drives adding 68 automatic incorporation 53 hot swapping 68 replacing 67 Documents e mail feedback on xiii related to SnapServers xv E Ethernet see Gigabit Ethernet Expand Volume button 57 Exports file NFS 93 F Factory defaults resetting to 200 Failover see Network bonding Features changes...

Page 247: ...s 32 Knowledge Base 179 L LEDs understanding 180 Legato NetWorker installing agent 159 special backup and restore operations 162 Load balancing configuring server for 25 restrictions on 24 Local hot spares 52 Login to Admin Tool 15 to antivirus GUI 125 M MacintoshOS configuring client access 35 error messages for 203 launching SnapServer Manager on 13 required to run SnapServer Manager 12 supporte...

Page 248: ...twork Printer to the Client 41 Adding the Print Server to a Client Machine 41 Canceling Print Jobs 42 Configuring the Printer on the SnapServer 40 Deleting a Printer from the SnapServer 42 IPP port number 41 42 list of supported printers 40 Monitoring Print Jobs 42 Pausing the Printer 42 Q Quotas assigning and managing 60 backing up configuration 116 R RAID types defined 220 choosing 51 creating m...

Page 249: ...stimating storage requirements for 111 excluding from antivirus scans 126 excluding iSCSI Disks from 86 ways to adjust pool size 112 Snapshots and Unicode 141 SnapTree 98 Specifications GuardianOS 2 Speed duplex options 25 SSH 150 Standalone 27 T TCP IP configuration guidelines 27 configuring 25 options 23 Technical Support Telephone Numbers xiii Troubleshooting 179 Typographical Conventions xiv U...

Page 250: ...rol usage 60 W Wake on LAN Support 20 Web Server 38 Web View 39 WebRoot 38 Windows 142 connecting from a client 33 file and folder name support 30 guest account access 32 issues with master browser 204 issues with PDC 203 name resolution server support 30 restrict_anonymous 32 see also Active Directory see also Authentication Windows Client 142 ...

Reviews: