HP D2D User manual

HP D2D NAS
Integration with Symantec™ Backup Exec™
2010
Abstract
This guide provides step by step instructions on how to configure and optimize Symantec Backup Exec 2010 in order to back
up to HP D2D Backup Systems using a CIFS backup target.
HP Part Number: EH985-90932
Published: February 2011
Edition: 1

© Copyright 2011 Hewlett-Packard Development Company, L.P.
Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial
Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under
vendor's standard commercial license.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express
warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall
not be liable for technical or editorial errors or omissions contained herein.
WARRANTY STATEMENT: To obtain a copy of the warranty for this product, see the warranty information website:
http://www.hp.com/go/storagewarranty
Linear Tape-Open, LTO, LTO Logo, Ultrium and Ultrium Logo are trademarks of Quantum Corp, HP and IBM in the US, other countries or both.
Microsoft, Windows, Windows NT, and Windows XP are U.S. registered trademarks of Microsoft Corporation.
Symantec and Backup Exec™ are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries.

Contents
1 Configure the D2D CIFS server.....................................................................4
More about authentication modes...............................................................................................4
Configuring User Authentication mode........................................................................................5
Configuring AD Authentication Mode..........................................................................................6
To join a domain.................................................................................................................6
To create shares and grant access permission..........................................................................8
2 Configure Backup Exec to use D2D CIFS Share............................................12
Create a D2D CIFS target for backup........................................................................................12
Create a Backup Exec Backup-to-disk folder...............................................................................13
3 Configure a backup rotation scheme...........................................................18
To create a media set..............................................................................................................18
To create backup policy...........................................................................................................20
Housekeeping considerations..............................................................................................24
About this guide..........................................................................................25
Intended audience..................................................................................................................25
Related documentation............................................................................................................25
Document conventions and symbols..........................................................................................25
HP technical support...............................................................................................................26
HP websites...........................................................................................................................26
Documentation feedback.........................................................................................................26
Index.........................................................................................................28
Contents 3

1 Configure the D2D CIFS server
The first step in configuring the D2D device as a target for backups from Symantec Backup Exec
is to configure the CIFS server on the D2D Backup System
On the D2D Web Management Interface navigate to the NAS — CIFS Server page and select Edit.
The available Authentication options for the CIFS server are:
•None – All shares created are accessible to any user from any client (this is the least secure
option)
•User – Local (D2D) User account authentication
•AD – Active Directory User account authentication
More about authentication modes
None: This authentication mode requires no username or password authentication and is the
simplest configuration. Backup Exec will always be able to use shares configured in this mode with
no changes to either server or Backup Exec configuration. However, this mode provides no data
security because anyone can access the shares and add or delete data.
User: In this mode it is possible to create “local D2D users” from the D2D Web Management
Interface. This mode requires the configuration of a respective local user on the Backup Exec media
server and configuration changes to the Backup Exec services. Individual users can then be assigned
access to individual shares on the D2D Backup System. This authentication mode is ONLY
recommended when the Backup Exec media server is not a member of an AD Domain.
AD: In this mode the D2D CIFS server becomes a member of an Active Directory Domain. In order
to join an AD domain the user needs to provide credentials of a user who has permission to add
computers and users to the AD domain. After joining an AD Domain access to each share is
controlled by Domain Management tools and domain users or groups can be given access to
individual shares on the D2D Backup System. This is the recommended authentication mode, if the
Backup Exec Media server is a member of an AD domain.
4 Configure the D2D CIFS server

Configuring User Authentication mode
1. Select the User authentication mode on the D2D Web Management Interface and click Update
to create a local user account on the D2D Backup System. Provide a User Name and Password
for the new user.
2. Use Server Manager to create a correspondingly named user on the Windows server that
hosts the Backup Exec Media server.
3. It is then necessary to configure Backup Exec to use this Local user account as the credentials
used to run its services. Do this from the Backup Exec interface by selecting Tools — Backup
Exec Services ….
Then click the Services Credentials button and provide the new User Name, Domain name
(local server name) and password.
Configuring User Authentication mode 5

4. Restart the Backup Exec services before continuing with configuration. Note, however, that
this is the ONLY user account that the Backup Exec Media server will be able to use to connect
to remote storage that requires authentication, so this account must be the same for any other
disk storage devices.
Configuring AD Authentication Mode
These are the steps required in order to configure backups in AD authentication mode:
•Join the D2D CIFS server to the AD Domain and configure DNS.
•Create or specify a user to be used for backups.
•Apply user permissions to D2D shares.
•Configure Backup Exec services to use the correct Domain account.
To join a domain
1. Connect to the D2D Web Management Interface, navigate to the NAS — CIFS Server page,
click Edit and choose AD from the drop-down menu. Provide the name of the domain that you
wish to join, e.g “mydomain.local”
2. Click Update. If the domain controller is found, a pop-up box will request credentials of a user
with permission to join the domain. (Note that joining or leaving the domain will result in
failure of any backup or restore operations that are currently running.) Provide credentials
(username and password) of a domain user that has permission to add computers to the
domain and click Register.
6 Configure the D2D CIFS server

3. After joining the domain, the DNS server should be automatically updated (if a DHCP server
is used) with Forward and Reverse Lookup zone entries, however, some DNS configurations
do not allow this. In this case, or if a DHCP is not used on the network, the user must also
configure the domain’s DNS server to be able to correctly manage the D2D shares, as
described in the next section.
To configure entries manually if the DNS server does not update automatically
From a Windows client server that has domain and DNS management tools installed launch
the DNS Management Tool. (From the command line type dnsmgmt.msc or launch DNS
from the Administrative Tools menu).
Create a new Host(A) record in the forward lookup zone for the domain to which the D2D
Backup System belongs with the hostname and IP address of the D2D Backup System.
Also create a Pointer(PTR) in the reverse lookup zone for the domain for the D2D Backup
System by providing the hostname and IP address.
Configuring AD Authentication Mode 7

To create shares and grant access permission
Now that the D2D Backup System is part of a domain and can be managed, it is possible to create
shares and grant access permission to them for domain account users or groups.
1. Create a share on the D2D Backup System that is going to be used as a backup target, by
selecting NAS — Shares from the D2D Web Management Interface and clicking Create.
Provide a share Name and Description, select the CIFS protocol and click Create.
2. Now that the D2D Backup System is a member of the domain its shares can be managed
from any computer on the domain by configuring a customized Microsoft Management Console
(MMC) with the Shared Folders snap-in. To do this first open a new MMC window by typing
mmc at the command prompt or from the Start Search box. This will launch a new empty MMC
window.
8 Configure the D2D CIFS server

3. To this empty MMC window add the Shared Folders snap-in. Select File — Add/Remove
Snap-in ..., then select Shared Folders from the left-hand pane.
4. Click Add > and in the dialog box choose the computer to be managed and select Shares
from the View options.
5. Click Finish and OK to complete the snap-in set up.
Configuring AD Authentication Mode 9

Note that the Folder Path field contains an internal path on the D2D Backup System.
6. Save this customized snap-in for future use.
7. Select the Share Permissions tab and Add a user or group of users from the domain.
Specify the level of permission that the users will receive and click Apply.
8. Now, from any Windows server on the domain, it is possible to access the newly created
share using the credentials of anyone who had been given permission to access the share. If
a permitted user is logged into Windows, access to the share will be granted automatically
with those permissions.
10 Configure the D2D CIFS server