Configuring NetApp and IBM Spectrum Protect for snapshot difference incremental backups
You must configure the NetApp file server connection information to run the snapshot difference incremental backup command on the backup-archive client. You must also use the set password command to specify the file server host name, and the password and user name that is used to access the file server.
Procedure
-
Establish a console session on the NetApp filer and define a new user on the file server by
using the following steps:
- Add the user ID to a group that permits users to log in to the file server with http and running API commands.
-
From the file server, enter the following command to list the user ID to verify the settings
and verify that the output is similar:
useradmin user list snapdiff_user
Name: snapdiff_user Info: Rid: 131077 Groups: snapdiff_group Full Name:
For 7-mode NetApp filers:
Allowed Capabilities: login-http-admin,api-*
For clustered-data ONTAP NetApp filers, the only capability that is required is
ontapapi
with theadmin
role. -
If the security.passwd.firstlogin.enable option for the user ID on the
NetApp server is set to on, ensure that all groups have the
login-telnet and cli–passwd* capabilities.
Tip: When security.passwd.firstlogin.enable option is enabled, the user ID is set to expired when created. The user cannot run any commands, including snapshot differential incremental, until their password is changed. Users in groups that do not have these capabilities cannot log in to the storage system. For information about defining a user ID and a password on the NetApp file server, see the NetApp documentation.
-
Configure the NetApp Data ONTAP built-in HTTP server to allow remote administrative sessions to
the NetApp filer.
- If you plan to use a plain HTTP connection for snapshot differential backups, turn on the httpd.admin.enable option on the NetApp filer.
- If you plan to use a secure HTTPS connection for snapshot differential backups (by specifying the -snapdiffhttps option), turn on the httpd.admin.ssl.enable option on the NetApp filer.
-
From the IBM
Spectrum Protect client node, test the
connection between the IBM
Spectrum Protect client computer and
the NetApp ONTAP server to ensure that firewalls or other NetApp configuration options do not
prevent you from connecting to the NetApp server.
Tip: See the NetApp ONTAP documentation for instructions on how to test the connection.
-
Export the NetApp volumes and consider the following settings:
Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Windows.
- Map the NetApp volumes by using CIFS.
- Ensure the NetApp volumes have the NTFS security setting.
-
Export the NetApp volumes and consider the following settings:
Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Linux hosts.
- Map the NetApp volumes by using an NFS mount.
- Ensure the NetApp volumes have the UNIX security setting
-
Set the user ID, and password on the backup-archive client for the user ID that you created in
step 1 using the following steps:
- Log in as the root user ID.
- Log on as the user with read/write access to the CIFS share.
-
From the backup-archive client command line, enter the following command:
Substitute the following values:dsmc set password –type=filer my_file_server snapdiff_user newPassword