Configuring NetApp and IBM Storage Protect for snapshot difference incremental backups

You must configure the NetApp file server connection information to run the snapshot difference incremental backup command on the backup-archive client. Also use the set password command to specify the file server hostname, and the password and username that is used to access the file server.

1. Establish a console session on the NetApp cluster and define a new user and group on the cluster by using the following steps:
   1. Create a user and assign a role based on the following snapdiff version you want to use.

      Snapdiff version	Example
      Snapdiff v1 (depreciated in later release)	security login role create -role snapdiff_role -cmddirname DEFAULT -access readonly. security login role create -role snapdiff_role -cmddirname "vserver" -access readonly. security login role create -role snapdiff_role -cmddirname "volume snapshot" -access all. security login create -vserver <vserver>-user-or-group-name snapdiff_user -application ontapi -authentication-method password - role snapdiff_role -comment "SnapDiff User".
      Snapdiff v3	security login role create -vserver <vserver> -role snapdiff_role -cmddirname "snapdiff" -access all. security login role create -vserver <vserver> -role snapdiff_role -cmddirname "license" -access all. security login role show -vserver <vserver> -role snapdiff_role -cmddirname "volume snapshot" -access all. security login create -vserver <vserver> -user-or-group-name snapdiff_user -application http -authentication-method password -role snapdiff_role -comment "SnapDiff User".

   2. From the NetApp cluster, enter the following command to list the user and role to verify the settings and check that the output is similar:
      
      
   3. If the Require Initial Password Update on First Login option for the role is set, ensure to set an initial complex password and disable the Require Initial Password Update on First Login. Otherwise, add the application SSH for the user to login.
      
2. You need to turn on the snapdiff RPC server access by using the filer command. To enable or view the status of snapdiff RPC server access, refer to the following commands:
   • set advance

     To enable the snapdiff RPC server, login to the server and issue the set advance command. When you issue the command, a warning message is displayed, enter y to enable or n to cancel.

   • vserver snapdiff-rpc-server show
     The vserver snapdiff-rpc-server show command displays the status of the snapdiff RPC server. The command output depends on the specified parameters. If the command is issued without parameters, the command displays the following details:

     • The name of the Vserver.
     • Whether the snapdiff RPC server access is enabled.

     For information, see the vserver snapdiff-rpc-server show command.

   • To enable the RPC server on a specified storage virtual machine, issue the following command:

     set advanced
     vserver snapdiff-rpc-server on -vserver svmname

     Where svmname is the name of the storage virtual machine.

   Note: For each SVM you want to use SnapDiff v3, ensure that at least one logical interface uses a service-policy that contains the data-nfs service. The NFS Service does not need to be enabled. The Snapdiff v3 uses two communication channels:

   • REST for communication with the cluster.
   • RPC protocol for data retrieval.

   Important: To use Snapdiff v3, you must ensure that HTTP/HTTPS is configured and enabled by default in ONTAP with self-signed certificates. You must also verify that client-side setting is also completed.
3. Export the NetApp volumes and consider the following settings:
   Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Windows.

   • Map the NetApp volumes by using CIFS.
   • Ensure the NetApp volumes have the NTFS security setting.
4. Export the NetApp volumes and consider the following settings:
   Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Linux® hosts.

   • Map the NetApp volumes by using an NFS mount.
   • Ensure the NetApp volumes have the UNIX security setting
5. Set the user ID, and password on the backup-archive client for the user ID that you created in step 1 using the following steps:
   1. Log in as the root user ID.
   2. Log on as the user with read/write access to the CIFS share.
   3. From the backup-archive client command line, enter the following command:

      dsmc set password –type=filer my_file_server snapdiff_user newPassword

      Substitute the following values:

      my_file_server

      This value is the fully qualified host name of your NetApp file server.

      snapdiff_user

      This value is the user ID that you created in step 1.

      newPassword

      This value is the password for the user ID that you created in step 1.