Configuring NetApp and IBM Spectrum Protect for snapshot difference incremental backups

You must configure the NetApp file server connection information to run the snapshot difference incremental backup command on the backup-archive client. You must also use the set password command to specify the file server host name, and the password and user name that is used to access the file server.

Before you begin

Procedure

Establish a console session on the NetApp filer and define a new user on the file server by using the following steps:
1. Add the user ID to a group that permits users to log in to the file server with http and running API commands.
2. From the file server, enter the following command to list the user ID to verify the settings and verify that the output is similar:
```
useradmin user list snapdiff_user
```
```
Name: snapdiff_user
Info:
Rid: 131077
Groups: snapdiff_group
Full Name:
```
  For 7-mode NetApp filers:
```
Allowed Capabilities: login-http-admin,api-*
```
  For clustered-data ONTAP NetApp filers, the only capability that is required is ontapapi with the admin role.
3. If the security.passwd.firstlogin.enable option for the user ID on the NetApp server is set to on, ensure that all groups have the login-telnet and cli–passwd* capabilities.
  Tip: When security.passwd.firstlogin.enable option is enabled, the user ID is set to expired when created. The user cannot run any commands, including snapshot differential incremental, until their password is changed. Users in groups that do not have these capabilities cannot log in to the storage system. For information about defining a user ID and a password on the NetApp file server, see the NetApp documentation.
Configure the NetApp Data ONTAP built-in HTTP server to allow remote administrative sessions to the NetApp filer.
1. If you plan to use a plain HTTP connection for snapshot differential backups, turn on the httpd.admin.enable option on the NetApp filer.
2. If you plan to use a secure HTTPS connection for snapshot differential backups (by specifying the -snapdiffhttps option), turn on the httpd.admin.ssl.enable option on the NetApp filer.
3. From the IBM Spectrum Protect™ client node, test the connection between the IBM Spectrum Protect client computer and the NetApp ONTAP server to ensure that firewalls or other NetApp configuration options do not prevent you from connecting to the NetApp server.
  Tip: See the NetApp ONTAP documentation for instructions on how to test the connection.
Export the NetApp volumes and consider the following settings:
Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Windows.
- Map the NetApp volumes by using CIFS.
- Ensure the NetApp volumes have the NTFS security setting.
Export the NetApp volumes and consider the following settings:
Tip: See the NetApp documentation for details on exporting the NetApp volumes for use with Linux hosts.
- Map the NetApp volumes by using an NFS mount.
- Ensure the NetApp volumes have the UNIX security setting
Set the user ID, and password on the backup-archive client for the user ID that you created in step 1 using the following steps:
1. Log in as the root user ID.
2. Log on as the user with read/write access to the CIFS share.
3. From the backup-archive client command line, enter the following command:
```
dsmc set password –type=filer my_file_server snapdiff_user newPassword
```
  Substitute the following values:
  my_file_server
  
  This value is the fully qualified host name of your NetApp file server.
  
  snapdiff_user
  
  This value is the user ID that you created in step 1.
  
  newPassword
  
  This value is the password for the user ID that you created in step 1.