tc458-96025 storeonce vsa user guide

HP StoreOnceVSA Backup system

AbstractThis is the user guide for HP StoreOnce VSA Backup system and is intended for users who install, operate and maintain theHP StoreOnce Backup system.

Always check www.hp.com/go/storage/docs for the most current documentation, including localized versions (in PDF format)for your product. (Search on Product Name and select the Product Manuals option.)

Refer to the Quick Specs on http://www.hp.com/go/storeonce for supported features for your model and the current status.

HP Part Number: TC458-96025Published: July 2014Edition: 2

http://www.hp.com/go/storage/docs

http://www.hp.com/go/storeonce

© Copyright 2011–2014 Hewlett-Packard Development Company, L.P.

Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, CommercialComputer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government undervendor's standard commercial license.

The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the expresswarranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shallnot be liable for technical or editorial errors or omissions contained herein.

Warranty

WARRANTY STATEMENT: To obtain a copy of the warranty for this product, see the warranty information website:

http://www.hp.com/go/storagewarranty

Acknowledgments

Linear Tape-Open, LTO, LTO Logo, Ultrium and Ultrium Logo are trademarks of Quantum Corp, HP and IBM in the US, other countries or both.

Microsoft, Windows, Windows NT, and Windows XP are U.S. registered trademarks of Microsoft Corporation. Intel and Itanium are trademarksor registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

The HP StoreOnce Backup system product firmware includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/).

Revision History

June 2013Revision 1First edition.

July 2014Revision 2Second edition, issued with the 3.11.0 version of HP StoreOnce software.

http://www.hp.com/go/storagewarranty

http://www.openssl.org/

http://www.openssl.org/

Contents1 Getting started...........................................................................................7

This guide................................................................................................................................7Overview of The HP StoreOnce Backup system.............................................................................7User types and user roles...........................................................................................................7Powering off and on..................................................................................................................8Deployment of the Virtual Storage Appliance...............................................................................8Navigating the HP StoreOnce Graphical User Interface (GUI)........................................................9Navigating the online help......................................................................................................10The StoreOnce CLI..................................................................................................................12Licensing...............................................................................................................................12Security Features....................................................................................................................12

2 StoreOnce functions..................................................................................14Overview of the HP StoreOnce page.........................................................................................14System information and status...................................................................................................14

3 VTL (Virtual Tape Libraries) functions...........................................................16VTL Configuration page...........................................................................................................16

iSCSI Settings tab..............................................................................................................16Libraries page........................................................................................................................16

Device Details tab..............................................................................................................17To create a new library (administrators only).....................................................................19To edit library details (administrators only)........................................................................20To delete a library (administrators only)............................................................................21

Emulation types for tape devices..........................................................................................21Interface Information tab.....................................................................................................22Active Connections tab.......................................................................................................23Cartridges tab...................................................................................................................23

To create a cartridge (administrators only)........................................................................25To delete a cartridge (administrators only)........................................................................25To delete all or a range of cartridges (administrators only)..................................................26To write protect a cartridge (administrators only)...............................................................26To edit maximum cartridge size (administrators only)..........................................................27To move or unload cartridges.........................................................................................27

Make Replication Target libraries visible to the host.....................................................................284 NAS functions..........................................................................................30

NAS Configuration page.........................................................................................................30CIFS Server tab......................................................................................................................30

Configuring user authentication............................................................................................32Configuring CIFS Server with AD and CIFS Share with AD domain users........................................34NFS Server tab.......................................................................................................................42Shares (NAS).........................................................................................................................43

Creating a CIFS share........................................................................................................45Creating an NFS share and setting permissions.....................................................................47

5 Replication functions.................................................................................50What is an appliance?............................................................................................................50

How do I identify the IP address of a Service Set?..................................................................51Status tab..............................................................................................................................52Partner Appliances (Replication)...............................................................................................52

Target Appliances tab........................................................................................................53Source Appliances tab.......................................................................................................55

Contents 3

Source Appliance Permissions tab........................................................................................56Local Settings (Replication) tab.................................................................................................57

General settings tab...........................................................................................................58Bandwidth Limiting tab.......................................................................................................59Blackout Windows tab........................................................................................................60

Event History (Replication) tab..................................................................................................60VT Mappings (Replication).......................................................................................................61

Source and target library mappings.....................................................................................62Running the replication wizard (virtual tape devices)...............................................................64Recovering a Source Appliance (Virtual Tape devices)............................................................67

NAS Mappings (Replication)....................................................................................................70Source and target share details............................................................................................71Running the replication wizard (NAS)...................................................................................72Recovering a Source Appliance (NAS shares)........................................................................76

Reverse replication using the wizard................................................................................76Promoting a Target Share over the WAN using NAS.........................................................79

6 HP StoreOnce Catalyst functions.................................................................80What is HP StoreOnce Catalyst?..............................................................................................80StoreOnce Catalyst terminology................................................................................................81StoreOnce Catalyst page.........................................................................................................81

StoreOnce Catalyst Status tab..............................................................................................82StoreOnce Catalyst Settings tab...........................................................................................83StoreOnce Catalyst Clients tab............................................................................................84StoreOnce Catalyst Blackout Windows tab............................................................................85StoreOnce Catalyst Bandwidth Limiting Windows tab.............................................................86

Catalyst Stores page...............................................................................................................87Store details tab................................................................................................................88Permissions tab (administrators only).....................................................................................90Item summary tab..............................................................................................................90Data jobs tab....................................................................................................................92Outbound copy jobs tab.....................................................................................................95Inbound copy jobs tab........................................................................................................99System information messages.............................................................................................103

7 Housekeeping function............................................................................105The Housekeeping page........................................................................................................105Configuring blackout windows................................................................................................108Pausing housekeeping...........................................................................................................108

8 StoreOnce reporting...............................................................................110Activity report.......................................................................................................................110Reporting page....................................................................................................................111

9 Storage Reporting..................................................................................113Storage Report.....................................................................................................................113

10 Access and Device Configuration............................................................114Device Configuration page....................................................................................................114User Management................................................................................................................114

To add a user (Admin only)...............................................................................................115To add a group (Admin only)............................................................................................116To modify a user..............................................................................................................117To delete a user or group (Admin only)...............................................................................118

Email..................................................................................................................................118Test email.......................................................................................................................119Events (Email)..................................................................................................................119

4 Contents

To manage email notifications...........................................................................................120Support Ticket......................................................................................................................120

Data collection................................................................................................................121Collect Data...............................................................................................................122Download data collection............................................................................................122Delete data collection..................................................................................................123

11 Events..................................................................................................124To delete events from the log..................................................................................................124

12 Basic troubleshooting............................................................................126Accessing the CLI.................................................................................................................126Password problems...............................................................................................................126Pulling a Support Ticket.........................................................................................................126Licensing problems...............................................................................................................127Multiple users.......................................................................................................................127Connecting to the StoreOnce Backup system from the backup application....................................127Timeout problems with NAS CIFS shares..................................................................................127NFS State handle error..........................................................................................................128If backup or replication fails...................................................................................................128Catalyst troubleshooting........................................................................................................129Performance.........................................................................................................................129StoreOnce Backup system configuration problems.....................................................................129Upgrade licenses..................................................................................................................129

13 Advanced troubleshooting......................................................................131Software update process.......................................................................................................131If the HP StoreOnce Backup system runs out of disk space..........................................................131Reduced performance using Data in Flight Encryption................................................................131

14 SNMP.................................................................................................132SNMP (Configuration)...........................................................................................................132

HP Systems Insight Manager.............................................................................................13215 Key Parameters.....................................................................................137

StoreOnce VSA Backup.........................................................................................................13716 Support and other resources...................................................................138

Contacting HP......................................................................................................................138Subscription service..........................................................................................................138

Related information...............................................................................................................138Websites........................................................................................................................138

Typographic conventions.......................................................................................................139Customer self repair..............................................................................................................139

A Upgrading to StoreOnce software, version 3.11.x........................................141Previous networking models...................................................................................................141Network model with StoreOnce software version 3.11.0 and later................................................142

Bonding modes...............................................................................................................142VLAN subnets with HP StoreOnce Backup................................................................................143

VLAN guidelines..............................................................................................................143Example network environment...........................................................................................144

Updating to StoreOnce 3.11.0 software....................................................................................144Worked example .................................................................................................................144

View current configuration.................................................................................................145Modifying the current configuration....................................................................................146

Best practise...............................................................................................................146To add a third subnet ......................................................................................................147To add VLAN subnets.......................................................................................................147

Contents 5

To modify the existing 10GbE portset and add a VLAN subnet..........................................147To create a new portset that is VLAN enabled and add a VLAN subnet..............................148

To add IP addresses to a subnet.........................................................................................148To add Data in Flight Encryption........................................................................................149

License requirements....................................................................................................149Configuring the client...................................................................................................149Configuring the StoreOnce Backup system......................................................................149Configuring IPsec on the media server...........................................................................150Encryption with replication...........................................................................................150

B Regulatory information............................................................................151Belarus Kazakhstan Russia marking.........................................................................................151Turkey RoHS material content declaration.................................................................................151Ukraine RoHS material content declaration..............................................................................151Warranty information............................................................................................................151

Index.......................................................................................................153

6 Contents

1 Getting startedThe following topics are covered in this chapter:

• This guide (page 7)

• Overview of HP StoreOnce Backup products (page 7)

• User types and user roles (page 7)

• Navigating the StoreOnce Graphical User Interface (GUI) (page 9)

• Navigating the online help (page 10)

• The StoreOnce CLI (page 12)

• Licensing (page 12)

This guideThis guide contains detailed information on using the StoreOnce GUI and includes some CommandLine Interface commands and troubleshooting information.

• Tasks available only in the StoreOnce GUI are described only in this guide.

• Tasks available in both the GUI and CLI are described in this guide. (The CLI command isdescribed in greater detail in the HP StoreOnce Backup system CLI Reference Guide.)

• Tasks only available in the CLI are described fully in the HP StoreOnce Backup system CLIReference Guide. Those tasks may not be described in this guide.

Overview of The HP StoreOnce Backup systemThe HP StoreOnce VSA extends the StoreOnce portfolio with the agility and flexibility of StoreOnceas a virtual appliance. Install into an existing vSphere (v5.x) environment without the need fordedicated hardware. Once installed and powered on, StoreOnce VSA is used by backup andrecovery applications as a backup target in the same way as physical StoreOnce appliances.StoreOnce VSA can be deployed using either SEM or via a vSphere client specific hardware. TheStoreOnce VSA is available to purchase by license, which includes HP StoreOnce Catalyst andReplication support.The StoreOnce VSA model, TC458A and D4T77A:

• Description: A virtual machine with ten 1TB disks

• Ports: 2 x 1GBE ports

• Storage expansion: Up to ten virtual disks of 1TB

• Interfaces supported: iSCSI only

User types and user roles

User rolesTwo roles define the permissions associated with a user; admin and user. Two default user accounts,one for each role, are created automatically when the system is installed:• Administrator: Authorized users can create and edit management and StoreOnce functions

via the GUI and CLI. The default login and password are Admin and admin. The permissionsrole of the Administrator is admin. You cannot delete this account, but you can and shouldmodify its password. Note that once the Admin account password has been changed, itspassword cannot be changed back to admin as this password is not sufficiently complex. The

This guide 7

only way to revert that password back to admin is via the HPresetpassword account which isonly available on the local console of the device.

• Operator: This account limits access to the GUI and CLI to monitoring and viewing. The defaultlogin and password are Operator and operator. The permissions role of the Operator is user.

User typesAfter installation, an Administrator can configure additional user accounts and assign permissionsroles (admin or user) and passwords to these users. See the HP StoreOnce Backup system userguide.There are three types of user accounts:• Local User (with an administrator or user permissions role): Local users log in locally.

• External User (with an administrator or user permissions role): User logs in as a domain user.An external user is a Microsoft Active Directory user.

• External Group (with an administrator or user permissions role): An external user is a MicrosoftActive Directory group. Members of the group log in as domain users. If after creating a groupyou then set up a member of that group as an individual user (external user) and give theman administrator role, that user will be an administrator, even if the group role is set to user.This is because role permissions set through Add User take precedence over role permissionsset through Add Group.

Any user with an admin role has the same permissions as the default Administrator. Any user witha user role will have the same permissions as the default Operator.

NOTE: To add external users or groups, first add the StoreOnce device to an AD domain.Connection to an AD Domain is configured through the NAS CIFS server tab on the StoreOnceGUI. See Configuring CIFS Server with AD and CIFS Share with AD domain users (page 34).

IMPORTANT: If Admin credentials are lost, the Admin password can be reset through the account“HPresetpassword”. This account is password protected and is only accessible from the StoreOnceconsole and CLI. HP recommends the end-user change the HPresetpassword password afterinstallation and store it in an offline Password Security tool.

TipTo identify current user rights view the title bar of the GUI. This shows your user Type, Name, andRole. See (page 10).

Powering off and onHP recommends using the CLI commands to power off and on the system instead of using the“power off” and “power on” controls on the hypervisor. See the HP StoreOnce VSA Deployomentand Configuration guide for more information.

Deployment of the Virtual Storage ApplianceHP StoreOnce VSA is a software-only version of the HP StoreOnce Backup System. Packaged asa virtual appliance, it can be deployed and run on a vmware vSphere hypervisor (v5.x) or Hyper-VManager installed by the customer. Once deployed, the customer has access to web managementvia the StoreOnce GUI or command line management via the CLI. The StoreOnce VSA BackupSystem supports 10 x 1 TB virtual disks.

8 Getting started

The customer is able to create the following backup target devices on the HP StoreOnce VSA:• Catalyst stores

• iSCSI VT libraries

• CIFS NAS sharesThe virtual appliance is fully compatible with StoreOnce hardware products for replication andCatalyst Copy functions and is fully integrated within HP StoreOnce Enterprise Manager, both forease of management and for ease of deployment.There are two methods of deployment:• Using Hyper-V Manager

• Using vSphere Client (v5.x)Instructions for deployment are in the HP StoreOnce VSA Deployment and Configuration guide.Please consult the guide to deploy your StoreOnce VSA backup system.

Navigating the HP StoreOnce Graphical User Interface (GUI)The HP StoreOnce GUI and CLI together make up the Management Console. While there is overlapin what operations you can perform, not all operations are available from both interfaces.The HP StoreOnce GUI is the main interface for:

• Monitoring the status and health of the HP StoreOnce Backup system and all configured backupdevices

• Creating and modifying VTL and NAS StoreOnce backup targets and Catalyst stores

• Managing replication relationships and housekeeping

To run the StoreOnce GUILog on to the StoreOnce GUI using a browser on any machine connected to the managementnetwork; see “User types and user roles” (page 7) for default login information. The HP StoreOnceBackup system uses a secure network connection.Enter: https://<IP_address> .

NOTE: Entering http: in the URL path will automatically forward to the https: secure networkconnection.

The StoreOnce GUI displays the Login prompt.

NOTE: The web browser requires Active Scripting or JavaScript enabled. If both are disabled,some browser buttons may not be displayed.

Navigating the HP StoreOnce Graphical User Interface (GUI) 9

GUI components

The GUI includes:• Title bar: Displays the HP StoreOnce Backup system model, the user name and role, and

contains the Logout and Help buttons.

NOTE: After 15 minutes of inactivity, the session times out and returns to the Login screen.

• System Status (top left side panel): Displays the last time the system was updated (the machinetime) and a count of event status categories.The three icons described below are used in the System Status area. They do not identify theevent that has affected the status. To view the individual events for more detail, select Eventsfrom the Navigator, as described in Events (page 124).

Indicates standard information.

Indicates a warning state. Attention is needed but the error is not critical to the successful operation ofthe device. For example, a single disk failure occurs or disks are installed in an expansion shelf butnot licensed.

Indicates a critical state. The system requires immediate attention. This icon may also appear in theDetails area of the screen with a red square background (rather than a red circle).

• Navigator (left side panel): Displays available GUI topics and enables navigation to selectedtopic pages. A + sign next to a topic indicates additional options; click + to expand theselection and click — to contract the selection.

• Topic page (main window): Initially, the main window displays the top-level StoreOnce topicpage. Select another topic from the Navigator to display the page for that selection. SomeTopic pages require selection of an item, such as a library, NAS share, or Catalyst store inthe top half of the page to display details specific to the selected item in the lower half ofpage. Some Topic pages include multiple tabs within the page, for example the VTL—Librariespage. Select a tab to display information and actions appropriate to that tab.

Navigating the online helpThe Help link in the top right-hand corner of each page displays context-sensitive information forthe current page.

10 Getting started

The following example displays the Help when selected from the NAS Mappings page.

• Click and drag on a side or a corner to expand or contract the Help window.

• The header displays the page where the help was called. Links navigate to the next or previouspages; the titles of the next and previous pages are beneath the respective links.

• The footer also provides navigation options. Select home to access the help Home page whichprovides access to the complete online help and Contents, Search, and Index options. Resizethe page to view all of the content.

Navigating the online help 11

The StoreOnce CLIThe StoreOnce Command Line Interface (CLI) provides an alternative way of administering andmonitoring the system. Some tasks are only accessible from the StoreOnce CLI.StoreOnce CLI commands require an SSH client application (freely available from the internet) andmust be run from a SSH terminal session as described in Accessing the CLI (page 126).See the HP StoreOnce Backup system CLI Reference Guide for more information about the StoreOnceCLI commands.

LicensingHP StoreOnce VSA has a single license that enables StoreOnce Catalyst and Replication. Thelicense also includes the security features of Data at Rest Encryption, Data in Flight Encryption, andSecure Erase.

Security FeaturesThe security features of Data at Rest Encryption, Data in Flight Encryption, and Secure Erase arepart of the VSA license.

NOTE: StoreOnce replication can be encrypted at the Network layer. This feature is included inthe Security license. See the HP StoreOnce Backup system CLI Reference Guide for more details;review the networking configuration commands such as net add encryption.

Data at Rest EncryptionWhen enabled, the Data at Rest Encryption security feature protects data at rest on a stolen,discarded, or replaced disk from forensic attack.Creation of a new VTL library, Catalyst store, or NAS share provides the option to enable encryptionif the license was already applied. Once enabled, encryption will automatically be performed onthe data before it is written to disk. Encryption cannot be disabled once it is configured for a library,Catalyst store, or NAS share.When creating an encrypted library, Catalyst store, or NAS share, the key store is updated withthe encryption key. This key store may be backed up and saved securely offsite in case the originalkey store is corrupted. However, keep only the latest version of the key store as a backup. The keystore on the StoreOnce Backup system is updated each time you create a library, Catalyst store,or NAS share. The StoreOnce CLI command that backs up the key store also encrypts it, ensuringit can only be decrypted by the HP StoreOnce backup system.

NOTE: Each configured library, Catalyst store, or NAS share uses a different key. The StoreOncesoftware automatically tracks which key is relevant to which device in the Key Store File. Keys areautomatically re-applied to the correct device if the key store file is restored.

IMPORTANT: Be very diligent about backing up your keystore if you are creating encryptedstores or libraries. See the HP StoreOnce Backup system CLI Reference Guide for more informationabout the StoreOnce CLI commands for backing up and restoring key stores.

Data in Flight EncryptionWhen enabled, the Data in Flight Encryption security feature protects data that is in transit fromforensic attack using the IPsec protocol. The data can be moving between two StoreOnce Backupappliances or a StoreOnce Backup appliance and a backup server.Data in Flight Encryption is configured using the net [add/modify/delete] encryptioncommands in the CLI; see the HP StoreOnce Backup system CLI Reference Guide for moreinformation.

12 Getting started

Secure EraseSecure Erase can be enabled for all store types. This feature enables allows secure erasure of datathat was backed up as part of a regular backup job. The Secure Erase feature can only be enabledafter store or library creation (edit the store or library to enable Secure Erase). All data written todisk once Secure Erase is enabled will be securely erased upon data deletion. For example, youmay have unintentionally backed up confidential data and need to be sure that it has been securelyerased. Work with the backup application to trigger the Secure Erase, for example by forcing theformat of a cartridge. The backup application sends the request to delete the data and the deletionis carried out as part of the Housekeeping function.

WARNING! To immediately remove data, ensure the backup application is configured correctly.Rotation and retention policies may need to be revisited to ensure that the data is expired.

NOTE: The Secure Erase process may take some time depending on the Housekeeping workload.

Only chunks not referenced by any other items can be securely erased. If a chunk is referencedby another item which is not marked for Secure Erase, then the referenced chunk will not be erased,securely or otherwise. Use the backup application when performing a Secure Erase on stores,shares, or libraries that have Secure Erase enabled.

Security Features 13

2 StoreOnce functionsThe following topics are covered in this chapter:

• Overview of the HP StoreOnce page (page 14)

• System information and status (page 14)

Overview of the HP StoreOnce pageThe initial page at GUI logon provides important information about system status and processesthat are running (see System information and status (page 14)).It also provides access to individual StoreOnce functions, which are available as sub topics (click+ to display them in the Navigator).

• VTL (Virtual Tape Libraries) functions (page 16)

• NAS functions (page 30)

• Replication functions (page 50)

• HP StoreOnce Catalyst functions (page 80)

• Housekeeping (page 105)

• StoreOnce reporting (page 110)

System information and status

System informationThis section provides information unique to an individual HP StoreOnce Backup system.

Table 1 System information parameters

DescriptionParameter

The model of StoreOnce Backup system.Type

The name of the StoreOnce Backup system.Name

The serial number of the StoreOnce Backup system (use this number when contacting HPSupport).

Serial Number

The software revision running on the StoreOnce Backup system.Software Revision

The IP addresses configured for the StoreOnce Backup system. This is the IP address thatyou should use when targeting backups and setting up replication mappings and Catalystjobs.

IP Address

If vLAN tagging has been configured on your network, there is an option to expand thelist so that you can see all the vLAN IP addresses that have been configured. For moreinformation about vLAN tagging, see your product’s HP StoreOnce Backup systemInstallation and Configuration guide.

14 StoreOnce functions

Table 1 System information parameters (continued)


HP StoreOnce VSA Backup systems may have up to two IP addresses depending on howthe network is configured. See the HP StoreOnce VSA Deployment and Configurationguide for more information.

StatusThis section provides details about the rolled-up system status of the system and the status of theservices running.

Table 2 Status parameters


The state of the system.Overall Status

The status of the background support processes such as EventManager andResourceManager.

StoreOnce Subsystem

The status of the VTL service.Virtual Tape

The status of the NAS service.NAS

The status of the StoreOnce Catalyst service.StoreOnce Catalyst

The status of the Replication service.Replication

The status of the Housekeeping service.Housekeeping

System information and status 15

3 VTL (Virtual Tape Libraries) functionsThe following topics are covered in this chapter:

• VTL page (page 16)

• Libraries page (page 16)

• Make Replication Target libraries visible to the host (page 28)

VTL Configuration pageSelect VTL from the HP StoreOnce menu to display the current VTL configuration.The HP StoreOnce–VTL page includes the following tabs:

• iSCSI Settings tab (page 16)

NOTE: Equivalent StoreOnce CLI commands are available for the tasks described in this section.See the HP StoreOnce Backup system CLI Reference Guide.

iSCSI Settings tabBy default, a new library is automatically created whenever a new server first connects to the HPStoreOnce Backup system using the iSCSI initiator. Users with an Admin login may use this pageto disable this feature.Click Edit and make sure the Auto Creation Enabled box is unchecked.

Libraries pageClick VTL — Libraries in the Navigator panel to display existing libraries.The top half of the Libraries page shows all libraries configured for the appliance. Click on a libraryto display its details in the lower half of the page. Users with an Admin login may edit these settingsand delete or create libraries.The lower half of the Libraries page contains tabs that display information relevant to the selectedlibrary:

• Device details tab (page 17)

• Interface information tab (page 22)

• Cartridges tab (page 23)

16 VTL (Virtual Tape Libraries) functions

Working with the Libraries list (top half of page)The Libraries list in the top half of the page provides columns of details.• To sort the list according to a column, click on the column heading and select Sort Ascending

or Sort Descending.• To hide or show columns, click on any column heading, select Columns and uncheck or check

the preferred columns.• Users with an Admin login may also create libraries. Click Create.

See Create a library (page 19) for more information.

• Users with an Admin login may edit details on some of the tabs for individual libraries (notall tabs have editable information). The relevant GUI buttons are on the tab. For example,each Edit button shall trigger edit mode only for the current tab. When in edit mode, eachtab shall have its own Update and Cancel buttons. If a user changes tab while in edit modea warning dialog advises that any changes they have made will be lost.The Delete button is on the Device Details tab only and will delete the entire library.

Table 3 Libraries parameters (top half of page)


Identifies the selected device (library). HP recommends usnig a name that identifies thehost or backup job with which it is associated.

Name

The role of the library, which may be non-replicating, replication source or replicationtarget.

Replication Role

The status of the library, which may be online, offline, notstarted, failed to start, stopping,creating, or deleting.

Status

Indicates whether the library is connected. Possible values are: Connected – A clientdevice is connected to any device (robotics or drive) within this library. Not Connected– No device is connected to this library.

Connection

The emulation type used by the backup software. It is selected when you create a device.Device Type

The number of cartridges or slots available on the device, which is determined by theEmulation types for tape device selected when the device was created. You can reduce

Cartridges / Slots

the number of slots in the Device Details tab for a library selected on this page, but thiswill only remove the highest empty slots. Once it reaches a slot number that containsdata, it will not allow you to reduce the number further on this page, even if earlier slotsare blank. You must first use the Cartridges tab to make the slot empty.

Identifies the port to which the host is connected for backup and restore. The number ofports available in the drop-down menu depends upon the interfaces that your modelsupports and your network configuration.There is always one iSCSI port.

Port

The amount of user data stored on the library.User Data Stored

The actual size used on disk (after deduplication).Size On Disk

The deduplication ratio achieved on the data on the library. If deduplication is disabled,the column displays “Dedupe Disabled.”

Dedupe Ratio

Device Details tabThis tab displays device-specific information for the selected library.Users with an Admin login may perform the following tasks from this tab:

• Create a library (page 19)

• Edit a library (page 20)

Libraries page 17

• Delete a library (page 21)

• Make Replication Target libraries visible to the host (page 28)

Table 4 Device Details tab

DescriptionField

The name used to identify a particular library. Enter a name that identifies the host or backupjob with which it is associated.

Library Name

The emulation type of the library. The HP StoreOnce Backup system supports a number ofemulation types. . See also Emulation types for tape device (page 21). The emulation type

Emulation Type

determines the available embedded drives and cartridge slots. For example, if you selectHP MSL G3 Series (2x24), the device emulates an MSL 2024 Library with two embeddedtape drives and a possible total of 24 cartridge slots. Consult your backup applicationtechnical support information for information about device types they support.

The drive emulation type, HP LTO–2, 3, 4, 5 or 6, determines the default capacity of thecartridges within the library device and the iSCSI inquiry string information provided to the

Drive emulation

backup application. Tape cartridge capacities can be increased at any time (but notdecreased), as long as the cartridge is blank, regardless of the drive emulation generationnumber.If you selected D2DBS Generic for the Library Emulation Type, Ultrium VT is an option fordrive emulation. This is a generic Ultrium device which is clearly identifiable as virtual.Where supported by the backup application, HP recommends that D2DBS Generic andUltrium VT are used in preference to the other emulation types.All drives on a library configured with the IBM-TS3500 emulation type will use the IBM-LTO3drive emulation type. If the library is then changed to a different emulation type, the driveswill change to the new emulation type.If you edit this field, the new setting applies only to the next drives that are created withinthe library, it is not retrospectively applied to existing drives.

Define the number of cartridge slots in the library. The number of slots available dependsupon the Emulation Type selected. Each slot is automatically populated with a new cartridgeupon creation. The cartridge capacity corresponds to the Drive Emulation type.

Total Number ofCartridge Slots

You can change the maximum size of the cartridge as long as it is blank. This means thatthe value can only be changed after the device is created and before it is accessed by thebackup application.

The default number of drives is determined by the Emulation Type selected. If increasing thenumber of drives, DO NOT exceed the maximum number of libraries and drives that a host

Number of Drives

can physically access: see StoreOnce key parameters (page 137). The number of drives canonly be edited during library creation from this field. After library creation, there is a separatebutton to Add/Remove drives.

Enables deduplication if the check box is selected (default); unselect to create anon-deduplication library. Deduplication cannot be enabled or disabled once the library iscreated.

Deduplication

The date the library was created is generated automatically.Creation Time

Identifies the port on the HP StoreOnce Backup system to which the device is connected.This will be the port used for the Library device as well as the default port for embedded

Media Changer Port

tape drives. The number of ports available in the drop-down menu depends upon theinterfaces that your model supports and your network configuration.There is always one iSCSI port.


Table 4 Device Details tab (continued)

DescriptionField

Enables configuration of the barcodes for the library to display six or eight characters. TheHP StoreOnce Backup system generates barcodes automatically for cartridges. When entering

Number of BarcodeCharacters

a barcode manually, 8 characters are required. If the 6–character barcode is selected, theStoreOnce Backup system will truncate to the top six characters, removing the top twocharacters of an 8–character barcode, i.e. barcode 1ABCDEFG will truncate to BCDEFG.The barcode is displayed with the truncated characters in brackets on the Cartridges tab,(1A)BCDEFG.

Enables Data at Rest Encryption if you applied a Security license. Encryption cannot beenabled or disabled once a library is created; it can only be enabled at library creation. If

Encryption Enabled

enabled, encryption is performed prior to writing data to disk for this library. The correctlicense must be applied to enable encryption.

Enables Secure Erase if you have applied the Security license. “None” leaves it disabled(default). To enable, select the number of preferred Overwrite Passes (1, 3, 5, or 7). This is

Secure Erase Mode

the number of times the data is written over after deletion. See “Secure Erase” (page 13)for information about the Secure Erase feature.

The backup application used on the system. This optional field is provided to assist withsupport troubleshooting and has no impact on performance or deduplication efficiency.

Backup Application

The type of data being protected by the backups. This optional field is provided to assistwith support troubleshooting and has no impact on performance or deduplication efficiency.

Data Type

This is the Initiator Node Name of the host that will back up to this device. You must enterit manually when you are creating a new device. If you are using the Microsoft iSCSI Initiator,

iSCSI Initiator Name(iSCSI devices only)

you can find the name by running the iSCSI Initiator on the host and copying the InitiatorNode Name from the General tab.

NOTE: iSCSI multi-initiator mode is not supported.

To create a new library (administrators only)HP recommends:

• Only configure the libraries that you need

• Only configure the number of cartridges that you are likely to need

NOTE: Refer to the HP StoreOnce Backup system Concepts and Configuration Guidelines,available on the HP Support web site, for guidelines on setting up a backup policy/job withinbackup applications. This document is helpful in determining the required number of libraries andcartridges.

You can add cartridge slots at a later date to expand the system and remove individual blankcartridges from a library without deleting the whole library.1. To create a new library device for the host, click Create in the upper left corner of the screen.2. Enter the appropriate details in the Device details tab (page 17).

To enable Data at Rest Encryption for the new library, configure it at this time by checking theEncryption Enabled box. This feature requires a license. If the license is not installed, aninformation message is displayed next to the check box stating Not Licensed. See “SecurityFeatures” (page 12) and “Licensing” (page 12) for more information.

NOTE: The Replication Wizard does not allow creation of an encrypted target library. If areplication target library needs encryption enabled, you must create the library on the targetappliance before replication mapping to it.

Libraries page 19

3. Click Create. The Cartridges tab is only generated after the library is created. The informationon the Interface Information tab is generated automatically.

NOTE: Once the library has been created, you can enable Secure Erase. See “Edit alibrary” (page 20) for more information.

Guidelines on creating librariesThe table below illustrates maximum configurations for libraries and drives, but this number maybe limited if you have already created NAS shares and Catalyst stores. For more detailed deviceconfiguration examples see the HP StoreOnce Concepts and Configuration Guidelines.

Table 5 Maximum number of libraries and drives/slots per library

StoreOnce VSA

16Maximum drives per library/appliance (D2DBS and ESLemulation)

96Maximum cartridges per library (D2DBS and ESL emulation)

3200Maximum cartridge size (GB)

To edit library details (administrators only)It is possible to edit some, but not all, device details after creating a library.• Delete cartridges by reducing the number of slots on the Devices page. This will only remove

the highest-numbered empty slots. Once the Delete operation reaches a slot number thatcontains a cartridge, it will not allow further reduction on the Details page, even if previousslots are empty. To open previous slots first use the Cartridges tab to delete the cartridge fromthe slot.

• Changing the cartridge size (by changing the emulation type) on this page will only changenewly-added cartridges; it does not change the size of cartridges that were already created.

• You can reduce the number of drives but, if you go to 0, the port setting will change to "NoPort".The Number of Drives field can only be edited during library creation. After library creation,there is a separate button to Add/Remove drives.

• You cannot change the library type to a type that has a smaller set of maximum values (e.g.number of cartridges) than is currently set.

• You cannot enable or disable deduplication.

• Once the library is created and the correct license is applied, the Secure Erase Mode boxappears on the Device Details tab. The selection box defaults to None, meaning Secure Eraseis disabled. To enable Secure Erase, select the preferred number of Overwrite Passes (1, 3,5, or 7). If enabled, this feature allows you to securely erase confidential data that may have


unintentionally been backed up as part of a regular backup job. See “SecurityFeatures” (page 12) and “Licensing” (page 12) for more information.

1. Select the device in the list to display its details and then click on Edit.

2. Amend details as appropriate and click Update to apply them.

To add/remove drives1. Click Add/Remove drive.2. The maximum number of drives is shown, below which you can edit the Number of Drives.3. Click OK. If you provide an invalid value the text box will be surrounded in a red border.

To delete a library (administrators only)Select the required device and then click Delete on the Device Details tab to delete it. You will beprompted to confirm deletion.

WARNING! All data on the device will be deleted. The library's deduplication store is also deleted.It may take some time to delete all the files and free space on the HP StoreOnce Backup system.If Secure Erase is enabled for this store, this data will be deleted securely.

Emulation types for tape devicesHP StoreOnce Backup systems emulate a range of physical tape devices listed in Emulation types.

Table 6 Emulation types for tape devices

DescriptionEmulation type

If supported by your backup application, this is the preferred emulation type because it doesnot emulate any physical library types in existence and is, therefore, clearly identifiable as

D2DBS Generic

a StoreOnce device. It is the most flexible emulation type available; however, backupapplication support varies by software vendor.If you have selected D2DBS Generic for the Library Emulation Type, you will be able toselect Ultrium VT for the drive emulation. This is a generic Ultrium device which is clearlyidentifiable as virtual. Backup application support for Ultrium VT is common, but not quiteas complete as the D2DBS library type, so its not possible to use it with all backup software.

NOTE: Symantec prefers their customers use this emulation type with BackupExec andNetbackup.

An enterprise tape library solution that allows you to configure up to 500 drives and up to4096 cartridges per library (HP 4900 = up to 16384 cartridges per library).

EML E Series

An enterprise tape solution that allows you to configure up to 500 drives and up to 4096cartridges per library (HP 4900 = up to 16384 cartridges per library).

ESL E Series

A tape library device that appears as a native IBM TS3500 device in a TSM environmentto allow use of standard IBM drivers. The emulation type is configured at the library level.

IBM-TS3500

Therefore, all drives on a library configured with the IBM-TS3500 emulation type will usethe IBM-LTO3 drive emulation type. If the library is then changed to a different emulationtype, the drives will change to the new emulation type.

A tape library device with a maximum of two embedded Ultrium tape drives and 24 cartridgeslots. It should be used when implementing rotation schemes which involve simultaneousbackup jobs to two devices. This emulation type is widely supported by backup applications.

MSL G3 Series (2x24)

Libraries page 21

Table 6 Emulation types for tape devices (continued)

DescriptionEmulation type

A tape library device with a maximum of four embedded Ultrium tape drives and 48 cartridgeslots. It should be used when implementing rotation schemes which involve simultaneous


backup jobs to more than two devices or those that use a large number of cartridges devices.This emulation type is widely supported by backup applications.

A tape library device with a maximum of eight embedded Ultrium tape drives and 96cartridge slots.


Flexible emulationThe ESL, EML and D2DBS emulations are particularly flexible because they allow you to configurea large number of drives per library. The main benefits are that a large number of drives allows:• more concurrent streams on backups which are throttled due to host application throughput,

such as multi-streamed backups from a database.• a single library (and therefore deduplication store) to contain similar data from backups that

must run in parallel to increase deduplication ratio.If using these flexible emulation types, the following factors should also be considered:• An important consideration when configuring VTL devices is that the library and each drive

that you configure for it counts as a separate device. There are practical limitations on thenumber of devices that each host and Fibre Channel switch or HBA can access. See StoreOncekey parameters (page 137).For iSCSI VTL devices, a single Windows or Linux host can only access a maximum of 64devices. A single library with 63 drives is the most that a single host can access. Configuringa single library with more than 63 drives will result in not all devices in the library being seen(which may include the library device). The same limitation could be hit with multiple librariesand fewer drives per library.

• The total device value also applies to NAS shares and Catalyst stores. If you configure thefull value as VTL devices, you will not be able to configure any NAS shares or Catalyst storesfor that .

• Refer to the HP StoreOnce Backup system Concepts and Configuration Guidelines for maximumand recommended values.

Interface Information tabThis tab shows interface information for the media changer and drives on the selected library.The information for the Interface Information tab is generated automatically and manual configurationis discouraged.The following information is provided for a device that is configured to use the Fibre Channelinterface.

iSCSI interfaceThe following information is provided for a device that is configured to use the iSCSI interface.


Table 7 iSCSI Interface Information

DescriptionField

The device name lists all of the devices for the specific Library. There will be an entry for theMedium Changer, and for each of the drives configured.

Device Name

This defines the port to which each media changer or drive is connected.Port

This is a unique serial number for the device. It is generated automatically by the HPStoreOnce Backup system and cannot be edited.

Device Serial Number

This is provided when the device is created.World Wide NodeName

This is generated automatically by the HP StoreOnce Backup system for iSCSI devices.iSCSI Target Name

This is generated automatically by the HP StoreOnce Backup system for iSCSI devices.iSCSI Alias

Active Connections tabThis shows the Session information of any active connections to the library; it displays informationabout open iSCSI sessions. All details are generated automatically and cannot be edited.If a device is showing as not connected, this indicates that the iSCSI Initiator on the host has notlogged on. Log on using the iSCSI Initiator and set the device as a Persistent Target for that hostto ensure that it will automatically log on again whenever the host is rebooted.

Cartridges tabThis tab shows cartridge information for the selected library.Users with an Admin login can perform the following tasks from this tab:

• Create a cartridge (page 25)

• Delete a cartridge (page 25)

• Write protect a cartridge (page 26)

• Edit maximum cartridge size (page 27)

• Move or unload a cartridge (page 27)

Libraries page 23

Table 8 Cartridge tab parameters

DescriptionField

Identifies each element of the library available to hold a cartridge. The types of elementsare:

Location

• Mail slot: a dedicated slot used to hold a cartridge that is ready for exporting to orimporting from physical tape. The Mail slot is not used with HP StoreOnce models.

• Tape drive: populated when there is activity on a cartridge. You can move a cartridgeinto a tape drive by using the Move Cartridge drop-down menu in Edit mode.

• Slot n: one of the standard library slots.

A barcode is an 8– or 6–digit, alphanumeric, unique identifier for a cartridge within the HPStoreOnce Backup system. Barcodes are shared with the backup application upon request.

Barcode

The backup application can choose to assign its own internal identifier to the cartridge but,if it does so, the backup application cannot assign this identifier to the Cartridge barcode.Barcodes are generated automatically but may be edited by the user. When editing thebarcode:• It must be unique and must not start with the letters “CLN” or “DG” because these are

reserved designations for cleaning and diagnostic cartridges.• It should be a minimum of 6 characters. Valid ASCII characters are A-Z, a-z, 0–9.

Barcodes are always displayed as 8 characters with letters in capitals on the StoreOnceGUI and CLI (padded with space characters) regardless of the size selected. However,if the Number of Barcode Characters is set to 6, only the rightmost 6 characters will bevisible to the backup software, i.e. barcode 1ABCDEFG will truncate to BCDEFG.(Truncated barcode characters are shown in brackets in the Cartridges tab.)

Check box indicates whether the slot is included in a replication mapping configuration. Itcannot be edited from this page.

Mapped Slot

The actual used capacity in MB or GB.Used Size

Defaults to the appropriate capacity for the drive emulation type selected on the Devicestab. This value may be changed if the Used Size is Blank, see below. The maximum valueallowed is 3200 GB.

Max Size

Check box that enables (checked) and disables (unchecked) write protection, see “Writeprotect a cartridge” (page 26).

Write Protected

Identifies when the cartridge was last written to and is useful when identifying data forcopying or exporting.

Last Written

NOTE: Additional columns appear when function buttons are selected below, such as Create,Move, and Delete.


Empty slotsEmpty slots are slots containing no cartridges and all the fields are empty.

• Tape drive row: A library consists of two devices: a tape drive and changer device. Thislocation refers to the tape drive element of the library and is normally only populated whenthe backup application on the host is writing to or reading from the library.

• Mail slot row: This location is the slot used for importing and exporting cartridges from alibrary. It is provided by StoreOnce virtual libraries for compatibility with backup applicationsbut is not used.

• Numbered slot row: This slot is empty after a Delete operation or after the backup applicationhas moved data to the mail slot for export.

Once a numbered slot is empty, the Create button may be used to create a new blank cartridge.

To create a cartridge (administrators only)

NOTE: You can only create a cartridge in an empty slot.

Click the Create button. In the Add Cartridge column, empty slots are checked.Select individual slots by clicking the appropriate check boxes. After selected the slots wherecartridges should be added, click Create.Alternatively, click Create all to create a blank cartridge of the size/emulation type selected whenthe library was first configured in all empty slots.

• If you create a cartridge in an empty slot, the backup application must inventory it (add it toits database or catalog) before the backup application can access the cartridge.

• If you create a cartridge in an empty mail slot, use the backup application to move the blanknew cartridge to an empty cartridge slot without requiring an inventory. This saves processingtime.

Restart the backup application services to see the new cartridges.

To delete a cartridge (administrators only)To delete individual cartridges, select individual slots by clicking the appropriate check boxes inthe Delete Cartridge column. Then click Delete.

Libraries page 25

CAUTION: A dialog is displayed, warning that all data will be lost and asking you to confirmthe Delete action.

NOTE: You cannot delete cartridges that are currently in drives, that are mapped for replication,or that are in the delete pending, erase pending, or creating state.

If you click Cancel, the cartridges will not be deleted and you remain in delete mode. Click Deleteto continue and the selected cartridges will be deleted. The GUI does not differentiate betweencartridges with data and blank cartridges.

NOTE: You can also delete cartridges by reducing the number of slots on the Devices page, butthis only removes the highest slots with no or blank cartridges. Once the Delete operation reachesa slot number that contains a cartridge with data, it will not reduce the number further on the Detailspage even if earlier slots are blank. First use the Cartridges tab to reconfigure the slots to a blankstate.

To delete all or a range of cartridges (administrators only)To delete all the cartridges in the library at once, click Delete All. This opens a window with severaloptions:

• Delete — Remove cartridges (default): completely deletes the cartridges

• Erase — Erase cartridge data: deletes the data but leaves the cartridge configurations intactYou can also determine which cartridges to delete or erase:

• All Cartridges

• Range: enter the first and last slot to be included in the delete or erase.Finally, if you select the “Delete cartridges with data” check box, cartridges containing data willbe deleted. If unselected, only blank cartridges are deleted. After all of the options are selected,click OK. A confirmation box appears; click OK.

NOTE: You cannot delete cartridges that are currently in drives, that are mapped for replication,or that are in the delete pending, erase pending, or create state.

To write protect a cartridge (administrators only)1. Click Edit for the selected library.2. Check the Write Protected check boxfor the cartridge(s).


3. Click Update. Your backup application will not be able to write any more data to thecartridge(s).

To edit maximum cartridge size (administrators only)The Max Size defaults to the appropriate capacity for the drive emulation type selected on theDevices tab, but this value is editable. The maximum value allowed is 3200 GB.

NOTE: The maximum size indicates the maximum amount of user data that can be written to thatcartridge, assuming uncompressed data; it will only be committed when data is written to it.Changing the maximum space does not affect actual disk usage or save disk space but may beuseful if you know you will be moving data to a physical tape with a smaller cartridge capacity.

1. Click Edit for the selected library.2. Select a value from the drop-down menu, and click Update.

To move or unload cartridgesYou can move cartridges, but only to an empty Location (tape drive or numbered slot).

• Click the Move button. The Move Cartridge drop-down menu lists available empty slots. (Emptynumbered slots are created when a cartridge is deleted.)

• Use the Unload all Cartridges button to return all cartridges to default slots.

Libraries page 27

The move and unload options may be useful to re-align the library configuration against the backupapplication. For example, if the backup application has crashed or if the backup application doesnot support the Move Medium command, the library and the backup application can become outof sync.

NOTE: You cannot move or unload cartridges that are in the delete pending, erase pending, orcreate state.

Make Replication Target libraries visible to the hostNOTE: See Replication functions (page 50) for more details on replication configuration.

Replication Target libraries are not normally visible to the host, but you can configure devices tomake them visible to backup applications. This allows the backup application to:• Move cartridges from storage slots to drives in the library.

• Perform read and verify operations on the cartridge (but not write).

• Perform load/unload operations on the tape device.

WARNING! Use with care. If the backup application can see both source and target libraries,the application cannot distinguish between the source library and the target library because thebarcodes are duplicated in the two locations.

Why make target libraries visible?It may be useful to make a target library visible to the backup application on the host to:• Confirm replication is working correctly and check the integrity of the replicated backup by

doing a test restore.• Perform manual tape copy jobs (sometimes called tape offload) to any tape device on the

network using the backup application.

IMPORTANT: You cannot change data on a Target library cartridge; you may only load ittemporarily into a physical tape device to read it.


Best practices for using this feature

WARNING! Failure to follow best practices may cause instability and damage to your backupsystem and data. Cartridges can be marked as unusable or the backup application can attemptto write to target cartridges.

• Verify no replication jobs to the selected target cartridge are in progress.

• Verify no backup jobs to the mapped source cartridges are scheduled.

• Verify the backup application media server instance to be used is not within the samecell/domain that can access the source cartridge.

• Import the data on the target cartridge into the backup application (this operation must berepeated after each replicate operation to the cartridge).

• Perform the desired operation on the cartridge, which may be:

Verify the cartridge using the backup application either with a verify command or byperforming a restore.

◦

◦ Copy the cartridge to a physical tape device connected to the media server.

How is a target device made visible?1. Create the replication mapping as normal. See Running the replication wizard (virtual tape

devices) (page 64), as appropriate.2. From the host that has access to the target library on the VTL — Libraries page, select the

target library in the Libraries list.3. Click Edit.4. The Port defaults to None. Select the appropriate iSCSI Port.5. Click Update.6. Make the target library visible from other hosts. Configure the Fibre Channel fabric to make

the host visible. Target visibility persists even if the power fails or if the replication mappingis removed.

NOTE: To remove target visibility, reset the Port to None.

Make Replication Target libraries visible to the host 29

4 NAS functionsThis page provides access to the following StoreOnce NAS functions:

• NAS Configuration (page 30), allows users to configure CIFS and NFS servers and permissions

• Shares (NAS) (page 43), allows users to view and manage NAS shares

NAS Configuration pageSelect NAS from the StoreOnce menu item to display the NAS configuration page.Two tabs allow configuration of a CIFS Server or an NFS Server for the shares.

• The CIFS server provides CIFS interface shares that provide backup targets to Windows servers.See CIFS Server tab (page 30).

• The NFS server provides NFS interface shares that provide backup targets to UNIX and Linuxservers. See NFS Server tab (page 42).

CIFS Server tabThere are two configuration stages when creating a backup target share that Windows users canaccess; both stages are implemented from the Web Management Interface:• Configure authentication for the StoreOnce Backup system CIFS server. These settings then

apply to the appliance and all NAS CIFS shares created on it.• Create NAS CIFS shares on the HP StoreOnce Backup system. See Creating a CIFS

share (page 45).

Configuring the CIFS server1. Select NAS on the StoreOnce GUI.2. Select the CIFS Server tab. It displays the authentication settings.

NOTE: The CIFS Server tab also shows the SMB Signing field. This feature improves securityat the protocol level and will be available in an upcoming release.

3. Click Edit to modify the authentication settings.Three authentication options provide different levels of security for CIFS NAS shares: None(default), User, and AD (Windows Active Directory). Before configuring the settings, determinethe appropriate setting for the particular network and collect any additional information thatmay be required to complete the configuration.

NOTE: AD authentication joins the StoreOnce Backup system to an AD domain and is notunique to NAS shares. It is also required when adding external users or external groups froman AD domain to the StoreOnce Backup system, see User Management (page 114).

30 NAS functions

• None (no authentication)This provides a simple CIFS server configuration that allows for the creation of shareswith no authentication. Any user or computer can mount and access the shares createdon the HP StoreOnce Backup system with this setting.

• User authenticationThis provides a method of securing the CIFS shares to be accessed only by specified userslocal to the CIFS Server. Once the server is configured to User mode, it is possible tocreate new local users by selecting Create User. See Configuring userauthentication (page 32) for more information.

• Active Directory (AD) authenticationThis allows the CIFS server to join a Windows Active Directory domain. Access toindividual CIFS shares is managed from the Windows domain controller server whichprovides the names of domain users and groups with access. See Configuring CIFS Serverwith AD and CIFS Share with AD domain users (page 34) for detailed instructions.

4. Click Update. A popup window will advise that if you update the CIFS Server settings, anybackup or restore jobs in progress for it will fail.

5. After reading the advisory, click Continue (or Cancel).

IMPORTANT: When switching authentication modes, the user must log out and back intothe Windows client before the new authentication settings will work.

6. The system is now configured to create CIFS NAS shares. See Creating a CIFS share (page 45).

Connecting to the NAS target device on WindowsTo access the NAS CIFS target device from a Windows server on the network, enter the followingin Windows Explorer:

• <StoreOnce server name>/<share name>Or <IP address>/<share name>.It is also possible to connect using \\<Fully Qualified domain name>\<sharename>.

NOTE:This information is also provided in the StoreOnce GUI for the share: Select a share underNAS–Shares and on the Share tab look for the Network Path.

• If User authentication was set for the CIFS server, a prompt will require a user name andpassword, which will be:<StoreOnce server name>\<user name> <password> or <StoreOnce IPaddress>\<user name> <password>.The share can also be mounted through the Map Network Drive utility in Windows or throughthe Command Prompt utility with the net use command.net use z:\\192.168.2.1\Share_3 /user:192.168.2.1\User1<password>

CIFS Server tab 31

This command will mount Share_3 available from StoreOnce device 192.168.2.1 locallyon the server on z: drive using local StoreOnce CIFS server User1 credentials.

• If AD authentication was set for the CIFS server, a prompt will require a user name andpassword, which will be:/user:mydomainname\mydomainuser<mydomainuserpassword>

The share can also be mounted through the Map Network Drive utility in Windows or throughthe Command Prompt utility with the net use command.net use z:\\192.168.2.1\Share_3 /user:192.168.2.1\User1<password>

This will mount Share_3 available from StoreOnce device 192.168.2.1 locally on the serveron z: drive using the ‘mydomainname’ domain user User1 and its credentials.

Configuring user authenticationOnce the server has been set to User mode, you can create new local users.1. On the CIFS Server tab select Create User.2. Provide a username and password and click Update.

These users can then be individually allowed to access any of the shares that are created.When creating a new user in User Authentication mode, the user must log out and back intoWindows before they can access the newly created share.

3. Navigate to HP StoreOnce—NAS-Shares to provide individual users access to specific shares.Create a NAS CIFS Share; on the Permissions tab. It shows No Access.

4. Click Edit and change it to Access. Click Update.

IMPORTANT: A warning is displayed to advise that any backup or restore jobs in progresswill fail.

Confirm the update by clicking Yes.5. In Windows, navigate to Computer, right click and select Map Network Drive...

Specify the drive letter for connection and the network path of the share.

32 NAS functions

6. Enter the user credentials.7. This provides the user with access to the share.

Deleting a user1. To delete a user, first disconnect the mapped share.

2. On the StoreOnce—NAS—Shares page, display the Permissions tab for the Share, and editit to be No Access.

CIFS Server tab 33

3. Navigate to the StoreOnce-NAS—CIFS Server tab. Select the user and click Delete.4. Click OK in the confirmation box. The user no longer exists in the system.

Configuring CIFS Server with AD and CIFS Share with AD domain usersTo grant external users or groups (AD domain users) access to NAS shares:1. Set the Authentication mode to AD on the NAS CIFS server tab. See “Configuring the CIFS

server” (page 30).2. Add the StoreOnce device to an AD domain. See “Adding the StoreOnce device to an AD

Domain” (page 35).3. Add any required users or groups to the active directory to grant access to the AD domain.

See “Adding users and groups to an AD domain” (page 36).4. Create and manage NAS shares on the AD domain. See “Managing shares on an AD domain”

(page 39).5. Create local administrators for the CIFS server. See “To create Local Administrators for the

CIFS server” (page 41).

NOTE: To create external users or groups on the StoreOnce Backup system (using the UserManagement GUI or CLI function), first use the NAS CIFS server tab to set the Authentication modeto AD, join an AD domain, and create any required users or groups. This is required even whennot using NAS shares as target devices.

Prerequisites• Domain Name

• Domain Controller running:

Windows server 2003◦◦ Windows server 2003 R2

◦ Windows server 2008

◦ Windows server 2008 R2

◦ Windows server 2012

◦ Windows server 2012 R2

• User account on Domain Controller, which should be the Domain Administrator or Delegateduser with Domain Administrative rights.

• User account on server running DNS to add entries.

• The system time on the StoreOnce Backup system must be correct and in sync with that of thedomain controller. Using the StoreOnce CLI time commands on the StoreOnce Backup systemto synchronize with a time server ensures accurate time keeping. See the HP StoreOnce Backupsystem CLI Reference Guide for details.

IMPORTANT: AD Domain Support: StoreOnce models support configuration in a multi-domaintree forest but do not support multi-forest domain topologies.

34 NAS functions

Adding the StoreOnce device to an AD DomainTo join a domain:1. Connect to the StoreOnce Web Management Interface and navigate to the NAS—CIFS Server

page.2. Select the Edit button and choose AD from the drop-down menu.

NOTE: You must manually create an entry for the StoreOnce appliance in the DNS serverso the appliance can be resolved using its domain qualified appliance name. The StoreOnceappliance will not automatically provide the information when joining the domain.

3. Provide the name of the intended domain, for example, “mydomain.local”.

4. Select Update. If the domain controller is found, a popup box will request credentials of auser with permission to join the domain.

IMPORTANT: Joining or leaving the domain will result in failure of any backup or restoreoperations that are currently running.

5. Provide the credentials (<User Name> and <Password>) of the Domain Administrator ora delegated user with Domain Administrative rights and select Register.

6. After a short delay (the time is dependent on the topology and size of the AD Domain) thecomputer will become a member of the domain and a Success dialog is displayed.

Configuring CIFS Server with AD and CIFS Share with AD domain users 35

7. Launch the “Active Directory Users and Computers” management tool (type dsa.msc fromthe command line or launch from Administrative Tools) to verify there is an entry for theStoreOnce device CIFS server and that the StoreOnce Backup system can be “managed”(Action—Manage from the menu) by the domain.

NOTE: Using Action—Manage might prompt an error message that the RPC server isunavailable because the StoreOnce appliance does not support all of the management systemsof a Windows server. However, this error does not prevent the management of shared folders.

Adding users and groups to an AD domainThe AD domain management tool interface varies by system. The following portrays one example.1. Open the active directory management tool. Navigate to the user folder.2. To create a new group in the AD domain:

• Right click on the Users folder and select Create a New Group.

36 NAS functions

• The AD domain address appears at the top of the dialog box (<domainname/users>).Enter a group name and select Global for group scope and Security for group type. ClickOK. This new group can be added on the CIFS server tab to provide NAS serverpermissions or added using the User Management tool to provide StoreOnce devicepermissions.

3. To create a new user in the AD domain:• Right click on the Users folder and select Create a New User.

• Enter the user’s first name and last name, full name, and a logon name. After the logonname the domain address is listed. This logon name and domain address is used to login to access the shares or device (username@domainname).


• Click Next. Enter a password and password confirmation. If User must change passwordat next login is selected and the user logs in through the CLI, the user will be promptedto change the password (only at the first login; subsequent logins will not require apassword change).

• Click Next. The final screen displays the user logon name and a mention of the requiredpassword change (if that was selected on the previous screen). Click Finish.

4. You can now grant access permissions to either NAS shares only on the NAS CIFS Server tabor to all StoreOnce features using the User Management tool.

38 NAS functions

Managing shares on an AD domainNow that the HP StoreOnce Backup system is part of a domain and can be managed, it is possibleto create shares and grant access permission to them for domain account users or groups. Thereare two ways for users to be granted access permissions to the NAS shares on the CIFS server:• As remote users configured through the Windows Computer Management tool: Run MMC

and install the computer management plug-in (management console). Once remote users areconfigured through the windows computer management tool (which must be run throughMMC), permissions can be applied per share using the StoreOnce GUI.

• As local users with Delegated Admin permissions configured through the HP StoreOnce GUI.These users have Admin rights to all shares created on the NAS CIFS server.

NOTE: The StoreOnce appliance only supports the Shared Folders utility within the WindowsComputer Management. Any other Windows Computer Management utilities are not supported.

1. Create a share on the Backup system to be used as a backup target by selecting NAS—Sharefrom the Web Management Interface and clicking Create.

2. Provide a share name and description, then select the CIFS protocol and click Create.

3. The share will start and its status will change to Online.4. Provide a list of users who can access this share through the Windows Computer Management

tool. Select the Shared Folders—Share option to display the available shares on the StoreOnceBackup system. In addition to the user configured shares, there will be two “default shares”called C$ and IPC$. These shares cannot be used for backup.


5. Select the newly created Backup share and select Properties from the Action menu.

6. Select the Share Permissions tab and Add a user or group of users from the domain, thenspecify the level of permission that the users will receive. Finally, select Apply.

40 NAS functions

7. It is now possible to access the newly created share from any Windows server on the domainusing the credentials of anyone who has permission to access the share. If a permitted useris logged into Windows, access to the share is granted automatically with those permissions.

IMPORTANT: When switching from None or User authentication mode to AD authenticationmode, HP recommends that the user logs out and back into the Windows client where theshare is mounted. This ensures the new authentication settings of the CIFS server are enforced.

NOTE: The HP StoreOnce Backup system does not support creating shares from WindowsComputer Management Consoles. Shares must be created from the StoreOnce ManagementConsole.

To create Local Administrators for the CIFS serverAfter adding the StoreOnce device to the AD domain, a new Local Administrators section appearson the lower half of the CIFS server tab. This allows the creation of users with Administrator accessto all shares created on the CIFS server. (The section provides a way of implementing DelegatedAdministration, which is not available for the StoreOnce device from the Active DirectoryManagement tool.)

IMPORTANT: When adding AD domain users through the CIFS server tab, the users areautomatically created as Local Administrators whether or not they are admin users on the ADdomain.


1. To add a user, click Create User.

2. Enter the domain name and user name and click Update.

Leaving an AD DomainThe user may wish to Leave an AD domain in order to:• Temporarily leave, then rejoin the same domain.

• Join a different AD Domain.

• Put the StoreOnce Backup system into either No Authentication or Local User Authenticationmodes.

The user can click the Leave AD option on the NAS—CIFS Server GUI page to leave. The user canthen rejoin the same domain. If joining a different AD domain or changing modes, the user clicksthe Edit button on the page and selects the new domain or mode.

NFS Server tabHP StoreOnce Backup systems provide an NFS interface that enables configuration of the HPStoreOnce Backup system with NFS file shares as target for backups from UNIX and Linux servers.Two configuration stages, implemented from the StoreOnce GUI, are used to create a file sharethat UNIX and Linux users can access.• Create a list of NFS hosts that can mount the NFS shares.

• Create NFS NAS shares on the StoreOnce Backup system and specify access permissions forlist of hosts, see Creating an NFS share and setting permissions (page 47).

Specifying NFS hosts1. Log on to the StoreOnce GUI for the appliance.2. Select NAS.3. Select the NFS Server tab.

42 NAS functions

4. Click Add and provide a Host Name and Description. Click Update.

NOTE: A host with the ‘*' wildcard, added by default, allows any host to access a share.You can have a maximum of 50 hosts on the NFS server (including the wildcard).

5. Create NFS NAS shares on the StoreOnce Backup system and specify access permissions fora list of hosts. See Creating an NFS share and setting permissions (page 47).

Connecting to the NAS share on UNIX or LinuxTo access the NAS share from a UNIX or Linux server on the network, use the mount command.The actual syntax of the command depends on the operating system.

IMPORTANT: See the HP StoreOnce Backup system Linux and UNIX Configuration Guide formore detailed information. Verify the correct mount options to ensure good performance anddeduplication ratio. These options may be different from normal use.

Problems connectingThe following sequence causes problems when connecting to an NFS share:1. Creating an NFS share and mounting it on a Linux box.2. Deleting the share on the StoreOnce Backup system without unmounting it from the Linux box.3. Recreating the share again using the same name.In this scenario, the Linux client assigns a new set of inodes to the new share, but when trying toaccess the old mount point uses the previous set of inodes and cannot connect.Reboot the host Linux system and the connection will work again.

Shares (NAS)This page is used to view and manage all NAS target devices (referred to as shares) for both CIFSand NFS servers.

IMPORTANT: It is important to understand that the HP StoreOnce network share is intended tobe used ONLY by backup applications that “back up to disk”. Do not use the NAS target deviceas a drag-and-drop general file store. The one exception to this rule is when using the NAS shareto seed an appliance for replication.

Shares (NAS) 43

Creating NAS sharesUsers with an Admin login may create NAS shares. The process varies slightly depending uponwhether creating a CIFS or NFS share, see:• CIFS: Creating a CIFS share (page 45)

• NFS: Creating an NFS share and setting permissions (page 47)Shares can be configured as version 2 (default) or version 1. The difference is in the maximumnumber of files per share permitted: 25,000 for version 1 shares and 1,000,000 for version 2shares. Configuring a version 1 share is only recommended for replication compatibility withanother appliance on an older software version that only supports version 1 shares. Onceconfigured, you can change the share version from 1 to 2 but you cannot change from 2 to 1. Themaximum number of shares depends upon the product model and the number of other devices(including VTL libraries and Catalyst stores) already created. See StoreOnce keyparameters (page 137).

Editing share detailsUsers with an Admin login may edit the Description, Write Protection, and Secure Erase settingsfor existing NAS shares. Write protection prevents access initially or protects data after it has beenbacked up for compliance purposes. Data at Rest Encryption cannot be edited; that feature is onlyenabled or disabled at the time of share creation.1. Select the share on the Shares page and click Edit.

NOTE:The Network Path field is not displayed when you select Edit. However, if you display theNetwork Paths tab, you can copy the share path if required. If your StoreOnce Backup systemis configured on a Virtual LAN, this tab will display all the VLAN IP addresses available forthat share.

If the correct license was applied, enable Secure Erase by selecting the number of OverwritePasses from the Secure Erase Mode drop down box. This field does not appear until after theshare is created.

2. Make the required changes and click Update.

44 NAS functions

NOTE: You can change a share from version 1 to version 2, but you cannot change fromversion 2 to version 1. In addition, you cannot change from version 1 to version 2 if replicationmapping is in place; you must first remove the replication mapping, ensure both the sourceand target devices are on StoreOnce software version 3.11.0 or higher (upgrade if necessary),change the source and target shares to version 2, and then reapply the replication mapping.

3. A popup window advises that if you update the Share settings, any backup or restore jobs inprogress will fail. Click Yes (or No).Applied changes take effect immediately. If the NAS server (service) must restart, a warningis provided to the user, which they can accept to allow all shares to temporarily go offline.You cannot change the share name after it is created.If a share is converted from Read/Write to Read Only, any open items will be forced closed,which may result in inconsistencies if they are being written to by a backup application. Theuser will be warned that this could occur before the change is made.

Deleting share detailsUsers with an Admin login may delete a share. Select the share in the list and click Delete.

Creating a CIFS share

A note about permissionsEach share has a Permissions tab. The options available on this tab depend on the type ofAuthentication selected when you configured the CIFS Server.

• If None (No Authentication) was selected, the Permissions tab is disabled.

• If User Authentication was selected, there will be a list of users. Set the access permissions forthat share for each user in the list to Access or No Access. See Configuring userauthentication (page 32) for an example.

• If AD Authentication was selected, share permissions are managed from the AD Domain. SeeConfiguring CIFS Server with AD and CIFS Share with AD domain users (page 34) for anexample.

To create a CIFS share1. Select NAS—Share on the StoreOnce GUI to display the Share page. This page is used to

manage all shares for both CIFS and NFS servers.

2. Click Create.

Shares (NAS) 45

3. Provide the following information:• Name: the name that will be used to identify the share in Windows.

• Description: a text description of the share (optional).

• Access Protocol: select CIFS.

• Share Version: leave as version 2, or change to version 1 if replicating to or from anexisting version 1 share. See “Creating NAS shares” (page 44) for a description of theshare types.

• Write Protection: Only used to prevent further backup to the share. If enabled, any backupjobs currently using that share will fail.

• Deduplication Enabled: Enables deduplication if the check box is selected (default); unselectto create a non-deduplication share. Deduplication cannot be enabled or disabled oncethe share is created.

• Encryption Enabled: To enable Data at Rest Encryption for the new share, check this box.This feature requires a special license. If the license is not installed, an information messageis displayed next to the check boxstating Not Licensed. See “Security Features” (page 12)and “Licensing” (page 12) for more information.

4. Click Create. It will take a few minutes for the status of the new share to go Online.5. After creating the share, if the correct license was applied the Secure Erase Mode drop down

box appears. Enable Secure Erase by selecting a number of Overwrite Passes. See “Editingshare details” (page 44).The Network Path details are provided by the Management Console and are displayed inthe format:<IP address>/<share name>.It is also possible to connect using:\\<Fully Qualified domain name>\<share name>.There may be multiple entries under the Network Path, depending upon how the network wasconfigured at installation. You can click on Show all network paths or use the Network Pathstab to display all available IP addresses.

6. If the CIFS server has been configured for User Authentication, select the share in the Shareslist to display the Permissions tab and list the users available on the server who can be assignedaccess to NAS target devices. You can amend permissions for individual NAS target devices.

46 NAS functions

Click Edit and check the appropriate Access or No Access button. Click Update to apply thechange.

7. The NAS target device is now available as a network drive and you can target it from thebackup application. It can also be mapped as a network drive in Windows.

NOTE: The NAS target device is not optimized for general purpose file storage. The HPStoreOnce Backup system is a NAS deduplicating appliance that is optimized for backup.

Creating an NFS share and setting permissions

NOTE: Each share has a Permissions tab. The options available on this tab depend upon thehosts added to the Hosts list during configuration of the NFS Server. On the Permissions tab, setthe access permissions for that share for each host in the list. Available options are: Read/WriteAccess, Read-Only Access, or No Access.

1. Log on to the StoreOnce GUI.2. Select NAS and display the Share tab. This tab is used to manage all shares for both CIFS

and NFS servers.

3. Click Create.4. Provide the following information and click Create.

• Name: the name that will be used to identify the share in Windows.

• Description: a text description of the share (optional).

• Access Protocol: select NFS.

• Share Version: leave as version 2, or change to version 1 if replicating to or from anexisting version 1 share.

• Write Protection: Only used to prevent further backup to the share. If enabled, any backupjobs currently using that share will fail.

Shares (NAS) 47

• Deduplication Enabled: Enables deduplication if the check box is selected (default); unselectto create a non-deduplication share. Deduplication cannot be enabled or disabled oncethe share is created.

• Encryption Enabled: to enable Data at Rest Encryption for the new share, check this box.This feature requires a special license. If the license is not installed, an information messageis displayed next to the check boxstating Not Licensed. See “Security Features” (page 12)and “Licensing” (page 12) for more information.

The Network Path is <IP address>:/nas/<sharename>.

The option to enable Write Protection should only be used to prevent further backup to theshare. If enabled, any backup jobs currently using that share will fail.

5. Set permissions. Select the share and display the Permissions tab. You may set the accesspermissions for that share for each host in the list. Check the appropriate box: Read/WriteAccess, Read-Only Access, or No Access. At this time, you also have the option to disabletwo additional items:• Root Squash: By default, root_squash is enabled when NAS NFS stores are created. This

squashes the root permissions for the client so that it is not possible to access or createfiles on the NFS server as root; the client always has non-root user permission. StoreOnce3.9.0 introduced an option to allow users to disable NFS root_squash after a NFS storehas been created and gives a client permission to access or create files on the NFS shareas root user.

IMPORTANT: Unless “root” permission is required, do not disable root_squash (byunticking the checkbox), as it can make the system insecure.

• Secure Ports: By default, secure ports are enabled when NAS NFS shares are created.By default you can connect on the port below 1024 for NFS (Privileged ports). DisablingSecure Ports allows connection to the ports higher than 1024 for NFS.

IMPORTANT: Unless required to connect to ports higher than 1024, do not disableSecure Ports.

48 NAS functions

6. Click Create.A warning is displayed that any backup jobs in progress will fail. Click Yes to continue.

7. The share is now available as a network drive to be mounted from a UNIX or Linux server sothat it may be a target for the backup application. See the HP StoreOnce Linux/UnixConfiguration Guide for more information on mounting shares.

NOTE: The share is not optimized for general purpose file storage. The HP StoreOnce Backupsystem is an NAS deduplicating appliance that is optimized for backup.

Once you have created the share, if the correct license has been applied, the Secure EraseMode drop down box appears. Enable Secure Erase by selecting a number of OverwritePasses. See “Editing share details” (page 44).

Best practices for mounting an NFS shareUse the —o forcedirectio or the —o sync option when configuring an NFS share to preventissues with “out of order delivery”. See the HP StoreOnce Linux/Unix Configuration Guide.

NOTE: The sync patches require an rpm update of the operating system before the —o sync or-o forcedirectio mount options can be specified.

Table 9 NFS share mount options

OptionVersionOperating system

“sync” patch and —o sync mount option10SLES

-o sync mount option11

“sync” patch and —o sync mount option5RHEL

-o sync mount option6

—o forcedirectio option11iv2HP-UX

—o forcedirectio option11iv3

—o forcedirectio option9Solaris

—o forcedirectio option10

—o forcedirectio option5.3AIX

—o forcedirectio option6.1

—o forcedirectio option7.1

Shares (NAS) 49

5 Replication functionsSelect Replication from the StoreOnce menu item to display all aspects and tasks associated withreplication.There are four tabs on the main Replication page and two further Navigator options for configuringVT mappings and NAS mappings. The Status tab is the default.Users with an Admin login can create mappings and configure replication. Operators can use thispage to view replication settings.Replication settings

• Status tab (page 52)

• Partner Appliances tab (page 52)

• Local Settings tab (page 57)

• Event History tab (page 60)Replication mappings

• VT Mappings (Replication) (page 61)

• Recovering a source appliance, VTL devices (page 67)

• NAS Mappings (Replication) (page 70)

• Recovering a source appliance (NAS shares) (page 76)Replications actions are applied and monitored at appliance level. For a definition of an appliance,see What is an appliance (page 50).

NOTE: With the current version of the software there are no equivalent CLI commands availablefor the tasks described in this section.

HP strongly recommends reading the HP StoreOnce Concepts and Configuration Guidelines, whichis available from the HP web site. These guidelines provide a detailed discussion about replicationdeployment strategies, terminology, and include examples using the Replication and Recoverywizards.

NOTE: A license is required for replication on the target appliance.

What is an appliance?Replication can take place between different models of StoreOnce Backup systems. The GUI refersto both Replication Targets and Sources as appliances, so it is important to understand the differentmeanings of “appliance” across the product models.

• In a StoreOnce 2700, 4500, 4700, and 4900, the appliance is the physical device or serverthat contains the data to be replicated. All mapping is done using the physical IP addressesof the target and source StoreOnce Backup systems.

• In a StoreOnce VSA, the appliance is the virtual device or server that contains the data to bereplicated. All mapping is done using the IP addresses of the target and source StoreOnceBackup systems.

• In a StoreOnce 6500 and B6200, the appliance is the Service Set that contains the data tobe replicated. This means that each StoreOnce 6500 or B6200 Backup system has at leasttwo Service Sets that can be selected as appliances. (A fully expanded HP StoreOnce 6500or B6200 Backup system would have eight Service Sets.) All mapping is done using the virtualIP addresses of the target and source Service Sets.

Within this section of the GUI, the terms appliance and Service Set are synonymous.

50 Replication functions

How do I identify the IP address of a Service Set?When configuring replication between different models of StoreOnce Backup systems, be awarethat:• Replication targets on a StoreOnce 26xx, 2700, 42xx, 44xx, 4500, 4700, and 4900 Backup

system require the IP address of the appliance.• Replication targets on an StoreOnce VSA Backup system have two virtual NICs supported,

meaning you can have a maximum of two IP addresses for the VSA.• Replication targets on a StoreOnce 6500 or B6200 Backup system require identification of

the Data VIF IP address of the appropriate Service Sets (also referred to as a node). Each HP6500 and B6200 Backup system may have up to eight Service Sets (the minimum is twoService Sets).

NOTE: Service Set Data VIF IP addresses are used for data traffic and are not the same asthe Cluster Management IP address used to log onto the HP StoreOnce Management Console.You cannot configure the replication targets using the IP address used to log on to the HPStoreOnce Management Console.

To identify the Data VIF IP from the HP StoreOnce GUI1. Select the Service Set in the list on the HP StoreOnce page.2. Locate its Data VIF IP at the bottom of the System Information.

To identify the Data VIF IP from the StoreOnce CLIUse the net show config command and locate the Node Specific Parameters.Identify the Network Virtual Data IP entries under each node. The following example is anextract from the output of the net show config command:

# net show config

----------------------Network Name: currentNetwork Description: Management on (2) 1Gb ports (bonded), Data/Replication on (2) 10Gb ports (bonded)Write Protected: noDNS Servers: 172.160.10.1Port Sets: portSet1 portSet2Management VIF: 172.160.20.1----------------------Number of Networks: 2Number of VLANs configured: 0 out of possible 128----------------------Network: subnet1----------------------IP Addresses: 192.168.20.60,192.168.20.61,192.168.20.62,192.168.20.63Net Mask: 255.255.0.0Domain Name: Gateway:Default Network: noNet Usage: data

What is an appliance? 51

VLAN tag:Port Set: portSet1 with these interfaces: eth5 eth7Encryption Links:Bonding Mode: 1 (Active Passive Bonding)----------------------Network: subnet2----------------------IP Addresses: 172.160.20.2,172.160.20.3Net Mask: 255.255.224.0Domain Name: mydomain.comGateway: 172.160.10.2Default Network: yesNet Usage: mgmtVLAN tag:Port Set: portSet2 with these interfaces: eth0 eth2Encryption Links:Bonding Mode: 1 (Active Passive Bonding)

Status tab

The top half of the Status tab contains information about replication throughput and active sessions.• Replication Throughput Totals: These tables show an average throughput over a period time,

so they will not produce accurate data right away.• Active Sessions: This identifies the number of source and target jobs that are running, and the

number of source appliances that are connected. This information is useful when monitoringperformance.

The bottom half of the Status tab contains a list of Active Jobs. Click and highlight any of the statusdetails to display more information about the job.

Partner Appliances (Replication)The Partner Appliances tab displays the replication status of all Target and Source HP StoreOnceBackup systems configured for use with this HP StoreOnce Backup system.


There are three tabs:

• Target Appliances tab (page 53)

• Source Appliances tab (page 55)

• Source Appliance permissions (page 56)The bottom half of the page displays information about any blackout windows that apply to theselected appliance.

Target Appliances tabThis tab allows you to view the details of all target appliances. Users with an Admin login can usethe tab to:

• To add a target appliance (administrators only) (page 54)

• To edit or remove a Target Appliance (administrators only) (page 55)

• Run Traceroute (page 55)

NOTE: Although administrators can add Target Appliances on this page, it is not necessary todo so before mapping configurations because this option is also available when running theReplication wizard.

Summary appliance details and target appliance parametersThe following status details are shown for both Target and Source appliances.

Table 10 Summary Appliance details

The name of the appliance.Appliance Name

The health of the appliance; this shows you whether the appliance is running or not.Appliance Status

The IP address of the appliance.Appliance Address

The serial number of the appliance.Serial Number

The amount of free space on the appliance.Free Space

Whether the appliance is online or not.Online

The protocol of the appliance software.Protocol Version

Partner Appliances (Replication) 53

Click on an appliance to view more detailed status information in the bottom half of the screen,as described in the following table.

Table 11 Target appliance parameters

Target Appliance tab (some fields are editable).

The name that is used to identify the Target Appliance. You specify it on the Local Appliancetab of the partner appliance.

Appliance Name

The product class of the appliance, such as HP 6500 or HP 4700.Product Class

The IP address of the Target Appliance. You specify it when you add the Target Applianceand can edit it later.

Appliance Address

The serial number of the Target Appliance; it cannot be edited.Serial Number

The port number that will be used for command protocol.Command Protocol PortNumber

The port number that will be used for data protocol.Data Protocol PortNumber

Indicates whether the Target Appliance is available or not.Available

Identifies the replication protocol in use.Replication Protocol

The amount of user data stored on the Target Appliance.User Data Stored

Shows the capacity of the Target Appliance.Capacity

Shows the amount of free space on the Target Appliance.Free Space

Shows the software version of the Target Appliance.Software Version

Shows the current system time.System Time

Shows whether a blackout window is currently active or not. This means that no replicationwill occur.

Blackout Window Active

Any blackout windows that have been specified will be reflected in this weekly calendar.During these times, the selected Target Appliance is not available for replication.

Blackout Windows

Administrators may edit and delete blackout windows from here or from the Local Settingstab.

To add a target appliance (administrators only)1. Click Add Target Appliance.

Figure 1 Create new target appliance

2. Enter the Target Appliance Address.


NOTE: If the Target Appliance is on an HP 6500 or B6200 Backup system, enter the DataVIF IP address of the required Service Set. See How do I identify the IP address of a serviceset? (page 51).

3. The default values for the Command and Data Protocol Port Numbers cannot be changed. Ifreplication needs to take place through a firewall, the network administrator must open (TCP)ports 9387 (Command Protocol) and 9388 (Data Protocol).

4. Click Add Target Appliance.

To edit or remove a Target Appliance (administrators only)

• Select the appliance and click Edit to edit the Appliance Name, IP address, and protocol portdetails of the target appliance.

• Select the appliance and click Delete to remove an appliance from the list of Target Appliancesavailable to that source.

Run TracerouteClick Run Traceroute to verify the local appliance can communicate with the target appliance andidentify the number of hops and latency in the routing.

Source Appliances tabThis tab displays the details of all source appliances.If the HP StoreOnce Backup system also has Replication Target libraries, there may be multipleSource Appliances.

NOTE: Source Appliances are appliances that have added the local appliance or Service Setas a Target Appliance. Only Source Appliances currently connected to the Target Appliance arelisted.

The Source Appliances tab is not editable.

Table 12 Source appliance parameters

Source Appliance tab (no fields are editable).

The name of the Source Appliance.Appliance Name

The product class of the appliance, such as HP B6200 or HP 4430.Product Class

The IP address of the Source Appliance.Appliance Address

The serial number of the Source Appliance.Serial Number

Indicates whether the Source Appliance is available or not.Available

The amount of data stored on the Source Appliance.User Data Stored

Shows the capacity of the Source Appliance.Capacity

Shows the amount of free space on the Source Appliance.Free Space

Shows the software version of the Source Appliance.Software Version

The day of the week and local time (in 24 hour time) of the system. The system time is setusing the CLI time commands; see the HP StoreOnce Backup System CLI Reference Guidefor details.

System Time

Any blackout windows that have been specified will be reflected in this weekly calendar.During these times, the selected Source Appliance is not available for replication.

Blackout Windows

The throttling (bandwidth limiting) setting. See “Bandwidth Limiting tab” (page 59) for details.Throttling (Kbps)

Partner Appliances (Replication) 55

Source Appliance Permissions tabSource Appliance Permissions are disabled by default. In this state, there is no control over mappingbetween share and library devices on the Target and the Source Appliances.This tab contains an Enabled check box that, when selected, allows administrators to lock the abilityto create share and library mappings. When the Replication wizard is run and mappings areconfigured, the Target will only have access to a list of sources that are allowed to replicate to it.The tab also incorporates a wizard that becomes active when an administrator adds a new sourceappliance to list, as described in the procedure below.

To configure access permissions to source appliances (administrators only)1. Click Edit and check the Enabled box.2. Click Update.

A wildcard entry in the Source Appliances list allows configuration of permissions across allsource appliances. However, this does not set permissions for individual appliances.


Table 13 Source Appliances parameters

The serial number for the required Service Set. This information can be found on thetop-level HP StoreOnce page.

Serial Number

The name of the appliance for which you have specified the serial number and cannotbe altered.

Appliance Name

The status of the appliance for which you have specified the serial number and cannotbe altered.

Appliance Status

The address of the appliance for which you have specified the serial number andcannot be altered.

Appliance Address

Indicates whether any mappings have been configured on the source appliance. Thisis important because any mappings that already exist will be retained regardless of

Configured Mappings

any access permissions you subsequently set up for libraries and shares on thatappliance.

3. Click Add. A wizard prompts the necessary steps to add a new source appliance to the list.Provide the serial number of the appliance and specify initial access permissions for all librariesand all shares on that appliance.

4. Once the appliance is added to the list of Source Appliances, permissions can be configuredfor it.

To configure permissions (administrators only)1. Select the source appliance in the list. There are two tabs; one for Libraries, and one for

Shares.2. Click Edit. Check the Access box for those shares and libraries to which access should be

granted. These are the shares and libraries that will be displayed when the mappingconfiguration step is run in the Replication wizard. It will not be possible to create a new shareor library from the wizard.

3. Click Update to apply the permissions.

Local Settings (Replication) tabThis tab contains three additional tabs that show the settings for the local HP StoreOnce Backupsystem:

• General Settings tab (page 58)

• Bandwidth Limiting tab (page 59)

• Blackout Windows tab (page 60)

Local Settings (Replication) tab 57

General settings tabUsers with an Admin login may edit and maintain these settings. Other users may only view them.1. Select the General Settings tab.

2. Click Edit to make the fields editable. See Table 14.3. Click Apply to apply the settings.

Table 14 General Settings (Replication)

The name of the appliance, its current status, and the product class. You can only edit theappliance name. The default name is the network host name of the appliance (as configured

Appliance

at installation). You can change this to something more user friendly and easier to identifythe appliance on the Management Console of the local and partner appliances. The namecan be anything meaningful to the user, such as the geographical location of the appliance.The Appliance Supported Protocol Version shows which versions of replication protocol aresupported, so in the unlikely event of incompatible versions it will be visible to the user.Replication auto negotiates to the lowest supported protocol on either end.

The maximum number of source and target jobs that can run concurrently. If running backupsat the same time as replication, the default value of target jobs can be reduced to avoid

Maximum Jobs

using too much WAN bandwidth and overloading the target appliance and reserve applianceperformance.

An event is generated each time a mapping goes out of sync and goes back into sync. Thisfield applies to periodic sync progress updates while the mapping remains out of sync

Synchronization ProgressLogging

resulting in emails (if emails are configured) but not SNMP traps. Use these fields to enableprogress logging for Library and Share synchronization and to specify the logging interval.While the library or share is out of sync, emails are sent periodically indicating how manyslots or entries are still out of sync. This information is also logged to the user Event Log. Oneemail is sent for each log entry made for each library or share that is out of sync.

Use these fields to specify the amount of time a mapping needs to be out of sync before async issue is shown in the Issue tab. When an event is generated it results in an entry in the

Out of Sync NotificationSettings

user Event Log and an email and/or an SNMP trap if the appliance is configured to sendthese. These notifications are in addition to a standard notification email sent whenever amapping first becomes unsynchronized and another when synchronization is achieved.

Replication ports should only be changed if replication is blocked by a router on the WAN.The ports must be the same on both source and target appliances. If in doubt, do NOTchange the port configuration.

Configure ReplicationPorts


IMPORTANT: If replication takes place through a firewall, the network administrator must open(TCP) ports 9387 (Command protocol) and 9388 (Data protocol) to allow the replication trafficto pass to and from the HP StoreOnce Backup systems.

Bandwidth Limiting tabThis tab allows users with an Admin login to apply a general bandwidth setting and configurebandwidth limiting windows.Bandwidth limiting can be used to avoid saturating the WAN with low bandwidth replication tofree up bandwidth for other processes and applications. A minimum of 2Mb/s per concurrent jobis recommended. At least 512Kbps per concurrent job is required for reliable operation. Theselimits apply to all outbound replication jobs from this local appliance.1. Display the Bandwidth Limiting tab.

2. Check the General Limit Enabled box. Determine the recommended general bandwidth limit,which is a simple calculation of:(Max WAN Speed) x (Max Desired WAN Usage%).A Bandwidth Limit Calculator is provided on this tab to work out limit values.

3. Click Edit to edit the Bandwidth Limiting Windows.Configure up to two windows for each day. Use the spinners to select the Start Of Restrictionand End Of Restriction times. Enter the appropriate Bandwidth Limit in each required window.(If you use the Bandwidth Limit Calculator, enter the value from the Recommended Limit field.)Check the appropriate Apply First/Second Restriction check boxes. This ensures the specifiedtimes are enabled. If it is not checked, the times are ignored.

NOTE: All settings are applied to the HP StoreOnce Backup system, not for individual jobs.The Bandwidth Limit windows override the General Limit when the time specified for thewindow is active. Outside of Bandwidth Limit windows the General Limit applies.

Local Settings (Replication) tab 59

4. Click Apply.

Blackout Windows tabThis option allows users with an Admin login to specify times when replication should not occur,for example during planned maintenance or heavy network traffic. You can configure multipleblackout windows.

NOTE: This setting relates to the local appliance in its role as a source or target device. Noreplication jobs will start if the Source or Target Appliance for a mapping is in blackout, and anyrunning jobs for the mapping will be paused.

1. Select the Blackout Windows tab.

2. Click Edit.3. Check the box next to the required day of the week.4. The time boxes become editable. Use the spinner menus to select the appropriate hours.5. Set up as many blackout windows as required.6. Verify the Apply First Time Restriction box is checked. This ensures the specified times are

enabled. If not checked, the times are ignored.7. To enable a second blackout window, ensure the Apply Second Time Restriction box is checked.

The second blackout window for each day must occur after the first blackout window for thatday.

8. Click Apply. On the Appliance tab, the calendar for the Source and Target Appliances reflectsthe changes.

Pause replication jobsThe Pause Replication Jobs button on the Blackout Windows tab places all replication jobs on holdimmediately. Click a second time to resume replication jobs.

Event History (Replication) tabThis page shows the log of all completed replication events on the appliance.


This page presents a time and date stamped list of significant replication events with severity statusand associated messages. It also displays source and target details for the replication event. Themost recent information is at the top of the list.• Select an event in the list to view its details below.

• The Clear Event History button may be used to clear the list.

• The History will be maintained if the HP StoreOnce Backup system is power cycled.

Searching the event historyClick + Show Search Box to display a Filter field and two drop-down menus. Use the right-handdrop-down menu to filter for Severity, for example, to display all Error messages. Use the middledrop-down menu to select a column (or All) and then type a search string into the Filter box.

VT Mappings (Replication)This page displays details of all replication mappings between source and target libraries. Adminusers may use the two wizards on this page to configure replication mappings and recover mappingsafter a disaster. (NAS share mappings are managed on a separate page.)

VT Mappings (Replication) 61

Use this page to:• View source and target library mappings (all users), see Source and target library

mappings (page 62).Admin users may also remove slot mappings and edit slot mappings.

• Run the Replication Wizard to create new mappings (Admin users only), see Running thereplication wizard (virtual tape devices) (page 64).

• Run the Recovery Wizard to restore mappings (Admin users only), see Recovering a sourceappliance, VTL devices (page 67).

NOTE: Only administrators can manage mappings. You can only map and replicate librariesof the same version.

Source and target library mappingsThe top part of the VT Mappings page contains a list of all available local libraries. Local librariesare the libraries configured on this HP StoreOnce Backup system.

• Non-replicating: a library on this HP StoreOnce Backup system with slots not yet mapped forreplication. Replication and Recovery Wizards are available only with non-replicating libraries.

• Replication Source: a library on this HP StoreOnce Backup system with cartridges mapped forreplication. You do not have to map all cartridges in a Replication-Source Library, and theReplication-Target Library need not contain the same number of cartridges as theReplication-Source Library.

• Replication Target: a library on this HP StoreOnce Backup system with slots that hold cartridgesreplicated from a Replication-Source library. The option is available to recover individualcartridges from Replication-Target libraries.


NOTE: When selecting a non-replicating library, you can run the Replication or Recoveringwizard.• Use the Replication wizard to create slot mappings for the non-replicating library to make the

library a Source library. See Running the replication wizard (virtual tape devices) for moreinformation.

• Use the Recovery wizard to recover cartridges from a Target Library. See Recovering a sourceappliance, VTL devices for more information.

Table 15 Replication library parameters

The name of the library, defined when the library device was created.Name

The role, which may be Non-replicating, Replication-Source, orReplication-Target. All library devices are initially Non-replicating until slotshave been configured using this page.

Replication Role

The status of the local library (such as online).Status

The amount of user data stored.User Data Stored

The amount of space used on the disk.Size On Disk

The number of slots that have been mapped out of the total number of slotsconfigured on the library device.

Mapped/Total Slots

The emulation type configured for that library.Device Type

The longest time out of sync.Longest Time Out Of Sync

The version number of the library.Library Version

Replication status, which may be Synchronised, Synchronising, or PendingSynchronisation.

Replication status

Slot mappingsSelect a local library to display slot mappings for that library.Users with an Admin login may also remove a slot mapping by clicking the Remove button.

Table 16 Slot mapping parameters

Replication-Source or Replication-Target library selected

The slot mapping name. It is created when you run the wizard to define thegrouping of slots that you select.

Slot Mapping Name

The name of the Target Appliance to which cartridges will be replicated.Source/Target Appliance Name

The IP address of the Target Appliance to which cartridges will be replicated.Source/Target Appliance Address

Indicates whether a replication link is established with the partner appliance.Source/Target Appliance Online

The serial number of the Target Appliance to which cartridges will bereplicated.

Source/Target Appliance SerialNumber

The name of the library to which cartridges will be replicated on the TargetAppliance.

Source/Target Library Name

The status of the partner library (such as online).Source/Target Library Status

Time in hours that replication has been out of sync.Time Out Of Sync

Relates to the local appliance in its role as a source or target appliance. Noreplication jobs will be started if the source or target appliance for a mappingare in blackout, and any running jobs for the mapping will be paused.


Shows whether the mapping is synchronized or not.Replication Status


Slot mapping detailsThe tabs at the bottom of this page show more detailed mapping information for the selected libraryand slot mapping.

Mapping details tabThis tab details mapping details between source and target libraries. If a source library is selected,it will indicate if Recovery is in process. If a target library is selected, it will indicate if the targetlibrary is visible to the host. All other information is identical for both source and target libraries.For example, use this tab to determine:• The number of mapped slots and replication status.

• The average throughput of data.

NOTE: Multiple VTL Library sources can replicate into a single VTL Library target offeringconsolidation benefits. This process is known as Fan-in.

Users with an Admin login may edit the Mapping Name on this tab.

Slot detailsThis tab displays details for each mapped slot in the selected slot mapping. It includes averagethroughput data for each slot. When selecting a source library, users with an Admin login can:• Edit the Target Slot to which a Source Slot is mapped.

• Enable the Recover First checkbox, which enables a user to request that a mapped slot berecovered from Target to Source, if required (this is sometimes known as reverse replication).

Running the replication wizard (virtual tape devices)When selecting a non-replicating library, you can run the Replication or Recovery Wizard.The Replication Wizard is used to create new mappings between non-replicating libraries (whichbecome Replication Source Libraries) and either existing or new Target Libraries.

IMPORTANT: The Replication Wizard does not allow creation of an encrypted target library. Toreplicate from an encrypted Source library, first create the Target library and enable encryptionso the Target library is also encrypted.

1. Create a non-replicating library on the Source Appliance.2. Create a backup rotation scheme and allow the first full backup to run.3. Decide how to seed the first full backup on the Target Appliance. Are you seeding across the

WAN or can you colocate the Target Appliance on the same LAN as the Source Appliance?See the HP StoreOnce Backup system Concepts and Configuration Guide for a more detaileddiscussion about seeding.

4. Go to the Replication—VT Mappings page and select a non-replicating library to be convertedto a Replication Source Library.

5. Click Start Replication Wizard. At the Welcome screen, click Next.


TIP: Click show/hide details box to check how many target appliances are permitted andthe number of target appliances currently configured.

6. Select a Target Appliance from the list and click Next.

NOTE: To select an appliance not yet on the list, click Add Target Appliance. Enter the TargetAppliance IP Address or fully qualified domain name. The default values for the Commandand Data Protocol Port Numbers cannot be edited. (If replication takes place through a firewall,the network administrator must open (TCP) ports 9387 (Command protocol) and 9388 (Dataprotocol) to allow the replication traffic to pass to and from the HP StoreOnce Backup systems.)Click Add Target Appliance.

See How do I identify the IP address of a service set? (page 51).7. The wizard then moves to the Select Target Library step. Select a library on the target appliance

and click Next.


NOTE: To create a new library on the target appliance, click Create New Target Library.Configure details as done with creating a new library device.When creating libraries on a target device it is possible to create libraries with 0 (zero) drives.Attempting to create a library with more drives than those available on the target will fail witha suggestion that there may be too many drives already in use on the target.You cannot create a new target library if Source Appliance Permissions is enabled on theselected target appliance. Instead, the library must first be created on the target before mappingfrom the source.The Replication Wizard does not allow creation of an encrypted target library. To replicatefrom an encrypted Source library, first create the Target library and enable encryption so thatthe Target library is also encrypted.

8. At the Edit Slot Mapping step, enter a Slot Mapping Name. The slot number and barcodes ofall source cartridges are displayed. A new barcode is generated on the target library (thesebarcodes will be overwritten with those of the source when replication starts). By default, allslots on the Source are selected for mapping and mapped to available slots on the Targetlibrary. To deselect cartridges from this slot mapping configuration, select Unmapped fromthe Target Slot Name drop-down menu.


9. Click Next to display a summary of the replication configuration that you have created.

10. Click Apply to create the slot mapping configuration. Click OK at the Wizard Completeprompt.Replication of cartridges will start as soon as the libraries have been synchronised. Look atthe Replication Status field on the Library Details section of the VT Mappings page. It changesfrom “Pending Synchronisation” to “Synchronising” to “Synchronized”.

NOTE: If unable to colocate the Target Appliance on the same LAN as the Source Applianceto improve replication performance, relocate the Target Appliance to the target site as soonas the cartridges are synchronized.

NOTE: VTLs configured as non-deduplicating can replicate to both deduplicating andnon-deduplicating target libraries. For example, this can be useful to:• Replicate data that does not deduplicate, such as compressed files.

• Replicate a copy of critical data needed for instant recovery.

Recovering a Source Appliance (Virtual Tape devices)The Replication Recovery wizard allows Admin users to recover mapping configurations after adisaster.


For example: the remote site has lost both the host servers and the StoreOnce system. New hardwarewas purchased and installed, and the administrator now wants to recover data to the StoreOnceBackup system and then restore to the host server. Before the failure, a mapping existed betweena Source Library on the remote site StoreOnce Backup system and a Target Library on the DataCenter StoreOnce Backup system. After the failure, the Source Library is missing but the mappingmay or may not still exist.

CAUTION: If you replace the disks in the source StoreOnce Backup system and keep the originalappliance, the source to target mapping will still exist on the repaired StoreOnce Backup system.You MUST BREAK this mapping BEFORE carrying out recovery. If the mapping is left unbroken,the now-blank Source Library (on the replacement disks) will overwrite the data on the TargetLibrary, effectively losing backup data on both Source and Target Libraries.

1. Create a new non-replicating library on the Source Appliance (either by running the Installationwizard or by using the Devices page).

2. Go to the Replication–VT Mappings page and select the new non-replicating library.

3. Click Start Recovery Wizard. At the Welcome screen, click Next.4. At the Select Target Appliance Step, select Add the Target Appliance and provide the IP

address of the previous replication target device.

5. Select the existing Target Library, or the non-replicating library that was the Target Librarybefore mapping was broken, from which slots should be recovered.

TIP: Use the Click to show/hide details box to view further information about configuredand maximum shares, libraries, and mappings.


6. If the library is an existing Target Library, select the Slot Mapping that was configured andclick Next. If the mapping was broken and the source library reverted to non-replicating, youcan add a new slot mapping.

If the Target Library supports multiple library Fan In, the library may still be a ReplicationTarget if other mappings exist. Recover by adding the mapping back to map the unmappedslots to the new Source Library.

7. All slots in the Target Library are selected by default, but you can deselect any cartridges thatshould not be recovered to the Source Library by checking the Pending One off Recovery box.

8. Click Next to display the Summary page.


9. Click Apply to run reverse replication.10. As soon as reverse replication completes for each slot, the data may be recovered to the host

using the original backup application. This can take time because ALL the data must reversereplicate over the WAN link.

11. New backups can now run to the Source Appliance and replication will run normally withoutfurther configuration.

NAS Mappings (Replication)This page displays details of all replication mappings between source and target shares. Adminusers may use the two wizards on this page to configure replication mappings and recover mappingsafter a disaster. (VT library mappings are managed on a separate page.)Use this page to:• View source and target share mappings (all users). See Source and target share

details (page 71).Admin users may also remove share mappings and edit share mappings.

• Run the Replication Wizard to create new share mappings (Admin users only). See Runningthe replication wizard (NAS) (page 72).

• Run the Replication Recovery Wizard to recover share mappings. See Recovering a sourceappliance (NAS shares) (page 76).

NOTE: Only administrators can manage mappings. You can only map and replicate deduplicatingshares and map shares of the same version.


NOTE: The above example shows the page layout when mappings were created and a ReplicationSource or a Replication Target share is selected. If a non-replicating share is selected, no mappingsare configured and the screen displays the Replication and Recovery Wizards.

Source and target share detailsThe top half of the NAS Mappings page contains a list of all available NAS shares that wereconfigured on this HP StoreOnce Backup system.

• Non-replicating: a share on this HP StoreOnce Backup system that has not yet been mappedfor replication. Replication and Recovering Wizards are available only with non-replicatingshares.

• Replication Source: a share on this HP StoreOnce Backup system that has been mapped forreplication.

• Replication Target: a share on this HP StoreOnce Backup system that has been replicated froma Replication-Source share.

NOTE: When selecting a non-replicating share, you can run the Replication or Recovery Wizard.• Use the Replication Wizard to create slot mappings for the non-replicating share; it becomes

a Source share. See Running the replication wizard (NAS) (page 72) for more information.• Use the Recovery Wizard to recover files from a Target share. See Recovering a source

appliance (NAS shares) (page 76) for more information.

Table 17 Local share parameters

DescriptionField

The name of the share, defined when the share was created.Name

The role, which may be Non-replicating, Replication Source, or ReplicationTarget. All shares are initially non-replicating until mappings have beenconfigured using this page.

Replication Role

The status of the local share, such as Online.Status

The amount of user data stored.User Data Stored

The amount of space used on the disk.Size On Disk

The access protocol that was configured when the NAS share was created:CIFS or NFS.

Access Protocol

The longest time out of sync.Longest Time Out Of Sync

The share version number.Share Version

Replication status, which may be Synchronised, Synchronising, or PendingSynchronisation.

Replication Status

Share mappingsSelect a local share to display its mapping.Users with an Admin login may also remove a share mapping by clicking on the Remove button.

CAUTION: Do not delete a replication mapping while a backup or restore operation is in progress,because the source device is temporarily taken offline and any backup or restore jobs will fail.

NAS Mappings (Replication) 71

Table 18 Share mapping parameters

Replication-Source or Replication-Target share selected

The share mapping name. It is created when you run the wizard to create theshare mapping.

Mapping Name

The name of the Target Appliance to which entries will be replicated.Source/Target Appliance Name

The IP address of the Target Appliance to which entries will be replicated.Source/Target Appliance Address

Indicates whether a replication link is established with the partner applianceor not.

Source/Target Appliance Online

The serial number of the Target Appliance to which entries will be replicated.Source/Target Appliance SerialNumber

The name of the share to which entries will be replicated on the TargetAppliance.

Source/Target Share Name

The status of the partner share, such as Online.Source/Target Share Status

Relates to the local appliance in its role as a source or target appliance. Noreplication jobs will be started if the source or target appliance for a mappingare in blackout, and any running jobs for the mapping will be paused.


Shows the amount of time in hours that replication has been out of sync.Time Out Of Sync

Shows whether the mapping is synchronized.Replication Status

Share mapping detailsThe two tabs at the bottom of this page show more detailed mapping information for the selectedshare and share mapping.

Mapping Details tabThis tab details mapping details between source and target shares. If a source share is selected,it will tell you whether Recovery is in process. All other information is identical for both source andtarget shares. For example, use this tab to find out:• The status of mappings.

• The average throughput of data.Administrators may edit the Mapping Name on this tab.

File Details tabThis tab displays mapping details for each directory and files within it including average throughputdata for each file. You cannot edit any details on this tab, but you can click on any column headingto sort by that column.

Running the replication wizard (NAS)The Replication Wizard creates new mappings between non-replicating NAS shares (which becomeReplication Source shares) and existing or new Target shares. (See Recovering a source appliance(NAS shares) (page 76) for information about the Recovery wizard.)

NOTE: NAS replication is a 1:1 relationship from the source to the target. Fan-in, replicatingfrom multiple sources to a single target (available for VTL and Catalyst replication), is not availablewith NAS replication.

1. Create a non-replicating share on the Source Appliance.2. Allow the first full backup to run.


3. Decide how to seed the first full backup on the Target Appliance. (See the HP StoreOnceBackup system Concept Guide.)• If seeding across the WAN or can colocate the Target Appliance on the same LAN as

the Source Appliance, go to step 4.• If seeding using physical media:

1. Create the share on the Remote Site share.2. Map to the NAS share on the Source Appliance and copy the files from the NAS

share to a USB disk.3. Transport the USB disk to the replication target site.4. Insert the USB disk into a host server on the same sub-net as the Target Appliance.

Map to the NAS Share on the Target Appliance and copy the files across from theUSB disk at the source site.

4. Go to the NAS Mappings page.5. Select a non-replicating share to be converted to a Replication Source Share and click Start

Replication Wizard.

6. Proceed to the Select Target Appliance step.

TIP: Click show/hide details box to check how many target appliances are permitted andthe number of target appliances that are currently configured.

7. Select a Target Appliance from the list and click Next.


NOTE: To select an appliance not yet on the list, click Add Target Appliance. Enter the TargetAppliance IP Address or fully qualified domain name. The default values for the Commandand Data Protocol Port Numbers may not be edited. (If replication needs to take place througha firewall, the network administrator will need to open (TCP) ports 9387 (Command protocol)and 9388 (Data protocol) to allow the replication traffic to pass to and from the HP StoreOnceBackup systems.) Click Add Target Appliance.See also How do I identify the IP address of a service set? (page 51).

8. The wizard then moves to the Select Target Share step. Select a share on the target applianceand click Next.


NOTE: To create a new share on the target appliance, click Create New Target Share. Setup the details as you would normally do when creating a new share. You cannot create anew target share if the appliance to be used as the target has Replication Source Permissionsenabled.

When creating a new share, a warning indicates that it will take a few seconds for the newshare to come online. Click OK.

NOTE: The share version of the source and target NAS shares must be the same. You canchange a share from version 1 to version 2, but you cannot change from version 2 to version1. In addition, you cannot change from version 1 to version 2 if replication mapping is inplace; you must first remove the replication mapping, ensure both the source and target devicesare on StoreOnce software version 3.11.00 or higher (upgrade if necessary), change thesource and target shares to version 2, and then reapply the replication mapping.

9. Give the Share Mapping a name and click Next.


10. The Summary screen is displayed. Click Apply to create the share mapping configuration.Replication of files will start immediately.

NOTE: If you can colocate the Target Appliance on the same LAN as the Source Applianceto improve replication performance, relocate the Target Appliance to the target site as soonas the files are synchronized.

Recovering a Source Appliance (NAS shares)There are two ways of recovering NAS shares mappings after a disaster.

• Reverse replication using the wizard (page 76)

• Promotion of Target share over the WAN (page 79)

IMPORTANT: If you replace the disks in the source StoreOnce Backup system and keep theoriginal appliance, the source to target mapping will still exist on the repaired StoreOnce Backupsystem. You MUST BREAK this mapping BEFORE carrying out recovery. If the mapping is leftunbroken, the now blank Source Share (on the replacement disks) will overwrite the data on theTarget Share, effectively losing backup data on both Source and Target Shares.

Reverse replication using the wizard

IMPORTANT: If you replace the disks in the source StoreOnce Backup system and keep theoriginal appliance, the source to target mapping will still exist on the repaired StoreOnce Backupsystem. You MUST BREAK this mapping BEFORE carrying out recovery. If the mapping is leftunbroken, the now blank Source Share (on the replacement disks) will overwrite the data on theTarget Share, effectively lose backup data on both Source and Target Shares.

In this example, the remote site lost both the host servers and the StoreOnce Backup system. Newhardware was purchased and installed, and the administrator must recover data to the StoreOnceBackup system and restore to the host server. Before the failure, a mapping existed between aSource Share on the remote site StoreOnce Backup system and a Target Share on the Data CenterStoreOnce Backup system. After the failure, the Source Share is missing; the mapping may or maynot still exist.1. Create a new non-replicating share on the Source Appliance (using the Create button on the

NAS Shares page).


2. Reverse seed the first full restore. The simplest way to do this is to use a USB disk, as describedbelow. It is also possible to recover across the WAN, but this may place an unacceptableload on bandwidth or time availability.It is possible to reverse seed the first full restore using a USB disk, as follows:

• Map from the host at the target site to the NAS share on the HP StoreOnce Backup systemand copy the share to a USB disk attached to the host.

• Transport the media to the Replication Source site and attach it to a host.

• Map from a host at the source site to the new share on the Replication Source and copyacross the data from the USB disk before running the Recovery Wizard.

3. Go to the Replication—NAS Mappings page and select the new non-replicating share.4. Click Start Recovery Wizard.

5. At the Select Target Appliance step, select Add Target Appliance and provide the IP addressof the previous replication target device.

6. Select the existing Target. This is the Target NAS share from which files should be recovered.Click Next.


NOTE: If the mapping has been broken, an entry will indicate non-replicating share (insteadof Replication Target).

7. At the Edit Share Mapping step, either adopt the mapping that had been configured or createa new mapping and click Next.

8. The Summary screen is displayed. Click Adopt to run reverse replication.


9. As soon as reverse replication completes, the data may be recovered to the host using theoriginal backup application.

10. New backups can now run to the Source Appliance and replication will run normally withoutfurther configuration.

Promoting a Target Share over the WAN using NASIn this example, the remote source site lost both the host servers and the StoreOnce system. Newserver hardware was purchased and installed, and the administrator must recover data to theserver. The administrator has not installed a new StoreOnce Backup system and is going to recoverdata directly to the server from the Data Center StoreOnce appliance over the WAN (which willtake a long time).

NOTE: The procedure described below retains the ability to back up to the Target Share. If thisis not required, an easier solution may be to recover data from the Target Share, which is read-only.

NOTE: Keep in mind that recovering high volumes of data by this method (over the WAN) willtake a considerable amount of time. Recovering data at the data centre is much faster and oncerecovered it can be transported to the remote site.

Before the failure, a mapping existed between a Source Share on the remote site StoreOnce Backupsystem and a Target Share on the Data Center StoreOnce Backup system. After the failure, themapping still exists but the Source Share is missing. The Target Share on the Data Center StoreOnceBackup system is still in Target Share mode, it has not had its mappings removed.1. On the Target Appliance in the Data Center, go to the Replication—NAS Mappings page,

select the Target Share, and remove the mapping between it and the lost Source Share.2. The Target Share becomes a non-replicating share.3. Make sure the backup application is targeting the newly non-replicating share at the data

centre and recover the data using the backup application at the data center.4. At this point there is no HP StoreOnce Source Appliance at the remote site. If one is installed

at a later date, reverse recover the data and configure replication as described in Reversereplication using the wizard (page 76).


6 HP StoreOnce Catalyst functionsThe following StoreOnce Catalyst functions are available:

• Viewing and managing StoreOnce Catalyst settings, StoreOnce Catalyst (page 81)

• Viewing and managing Catalyst stores, Catalyst Stores (page 87)For general information about StoreOnce Catalyst, see What is HP StoreOnce Catalyst (page 80).

NOTE: With the current version of the software there are no equivalent CLI commands availablefor the tasks described in this section.

IMPORTANT: If Catalyst operations pass through a firewall, the network administrator must open(TCP) ports 9387 (Command protocol) and 9388 (Data protocol) to allow the Catalyst traffic topass to and from the HP StoreOnce Backup systems.

Licensing requirementsOST/Catalyst devices require a license to be used at both source and target but do NOT requirean additional replication license. To use the security features Data at Rest Encryption or SecureErase, you must apply a Security license.

OST plug-inFor supported Symantec Netbackup and Backup Exec backup products, a free plug-in applicationis required on each backup application media server that will use the Catalyst functionality. Thiscan be downloaded from https://www.software.hp.com/kiosk. The plug-in required is differentfor Netbackup and Backup Exec.Login credentials are:User Name: STOREONCE_KIOSKPassword: STOREONCEAPPS

What is HP StoreOnce Catalyst?HP StoreOnce Catalyst is a StoreOnce function that allows:

• Backup applications to back up data to a target store on the HP StoreOnce Backup system.Deduplication may occur on the media server or on the HP StoreOnce Backup system.

• Backup applications to copy jobs between HP StoreOnce Backup systems. All configurationis carried out from the backup application, which makes this an attractive alternative to usingthe replication function on the HP StoreOnce Backup system.

This function requires a backup application that supports HP StoreOnce Catalyst. The HP OSTplugins should also be installed on any Media Servers that will be transferring data to the StoreOnceBackup system. Refer to http://www.hp.com/go/ebs for up-to-date details on supportedapplications.

IMPORTANT: Much of the information displayed on the HP StoreOnce Catalyst pages is takendirectly from the backup application. It is strongly recommended to give jobs and media servergroupings names on the backup application that will be meaningful when displayed on theStoreOnce Catalyst pages.

80 HP StoreOnce Catalyst functions

https://www.software.hp.com/kiosk

http://www.hp.com/go/ebs

Benefits of HP StoreOnce Catalyst• The backup application is in full control of data for the full lifecycle of the backup data.

• The backup application has full visibility of all items and jobs on the HP StoreOnce Backupsystem.

• Deduplication can occur on either the media server or HP StoreOnce Backup system, whichensures efficient use of the available bandwidth.

• There is no limiting geometry, such as cartridges for VTL libraries.

• There is no enforced limit on the number of items within a store.

• Copy jobs are instigated from the application and have none of the complexities of replicationmapping.

• Space reclamation is much more automated and easier to implement if catalyst devices typesare used.

StoreOnce Catalyst terminology• StoreOnce Catalyst: the name of the StoreOnce function.

• StoreOnce Catalyst stores: the targets/device types in which backups are stored on the HPStoreOnce Backup system.

• StoreOnce Catalyst items: the items stored in the StoreOnce Catalyst stores on the HP StoreOnceBackup system.

• StoreOnce Catalyst clients: the generic term for applications that connect using the StoreOnceCatalyst interface.

• Data jobs: any backup or restore job.

• StoreOnce Catalyst Optimized Backups: one of the main advantages of HP StoreOnce Catalystis that deduplication may occur on either the media server or the HP StoreOnce Backup system.If deduplication occurs on the media server, only unique data is sent to the HP StoreOnceBackup system and a low bandwidth network link is adequate. If the media server sends allthe data and deduplication is carried out on the HP StoreOnce Backup system, a highbandwidth network link is required. It is often faster to deduplicate on the media server dueto the combined CPU power of multiple media servers and reduced network traffic. However,actual performance varies depending upon the data and disk I/O speeds.

• Copy jobs: allow backup applications to create true copies of the data and not mirror images.The backup application specifies the store on the source StoreOnce Backup system for theoutbound copy job and a target store on the destination StoreOnce Backup system for theinbound copy job. Once copied, the two versions are independent of each other; on eitherthe source or destination StoreOnce Backup system data may subsequently be deleted, moved,or added to, as required, from the backup application.

• StoreOnce Catalyst Optimized Copy: all copy jobs are optimized. This means that the copyjob is completed in a bandwidth-efficient manner. The two stores negotiate so that only uniquedata is transferred.

StoreOnce Catalyst pageThis page has a number of tabs that provide access to the following StoreOnce Catalyst functions:

• StoreOnce Catalyst status tab (page 82)

• StoreOnce Catalyst settings tab (page 83)

• StoreOnce Catalyst clients tab (page 84)

StoreOnce Catalyst terminology 81

• StoreOnce Catalyst blackout windows tab (page 85)

• StoreOnce Catalyst bandwidth limiting windows tab (page 86)Select StoreOnce Catalyst from the Navigator to display the StoreOnce Catalyst page and associatedtabs.

NOTE: Click + to expand the StoreOnce Catalyst topic in the Navigator and access the CatalystStores topic.

StoreOnce Catalyst Status tabThe Status tab displays details about:

• StoreOnce Catalyst Status and Protocol Versions

• StoreOnce Catalyst Copy and Data Job Throughput Totals

• Active SessionsDetails refresh every 10 seconds, so this information provides a useful overview of Catalyst activityon the StoreOnce Backup system. The data displayed on this status page is generally for informationpurposes only; do not make inferences based on the values shown.

Table 19 Throughput totals and active sessions

DescriptionField

The left-hand column shows throughput averages for Catalyst Copy and Data Jobs.StoreOnce CatalystCopy and Data Job Bandwidth indicates the actual physical network bandwidth being used. Throughput indicates

the perceived or logical network bandwidth used (it includes the efficiency achieved throughThroughput Totals(recent averages) deduplication). These are aggregate numbers (). The throughput numbers should correlate with

those shown on the graphs on the Activity page.

The right-hand column shows the number of jobs of each type that are running. See StoreOncekey parameters (page 137) for more information about the maximum number of different jobtypes.

Active Sessions

Data Jobs Running shows the number of backup and restore jobs that are running on theappliance.Outbound Copy Jobs Running shows the number of copy jobs running to another appliance.Inbound Copy Jobs Running shows the number of copy jobs coming in from another appliance.

More about Job typesDifferent backup applications can use different terminology for data transfers. From a Catalystperspective, if data is being moved between the HP StoreOnce Backup system and a media orapplication server, this is a data job. If the transfer is between two HP StoreOnce Backup systems,this is a Catalyst Copy job. For Copy jobs, the HP StoreOnce Backup system is responsible for alldata movement (although the process is initiated by the backup application software). For datajobs the backup application is responsible for the data movement.


If the copy job numbers are high (close to the maximum), no user action is required. Copy activitieshappen under the control of the StoreOnce Backup system and it will optimize the queuing andrunning of jobs based on the resources available. If the Data job count starts getting high, the HPStoreOnce Backup system is being loaded quite heavily. You may see jobs failing to start or runningslowly (although the aggregate performance across the many jobs should still be high) due toinsufficient resources being available.

NOTE: The maximum data jobs value is not guaranteed in all cases. In some situations, such aswhen heavily loaded, the actual maximum may be less (based on resources available to the boxat that time).

StoreOnce Catalyst Settings tabThe StoreOnce Catalyst Settings tab is used to view the settings that apply to Catalyst functionsand jobs for all nodes on the HP StoreOnce Backup system. Users with an Admin login may alsoedit these settings.

IMPORTANT: First enable Client Access Permission Checking on this page to assign permissionswhen subsequently configuring clients and stores. (If you do not set permissions, all clients canaccess all stores.) Client access is also enabled in the ISV backup software.

To edit settings (administrators only)1. Click Edit.2. Amend fields as required and click Update.

Table 20 StoreOnce Catalyst Settings fields

DescriptionField

When enabled, the Clients tab is active and the Permissions tab on the Storespage is active. These tabs enable control over which clients (backup

Client Access Permission Checking

applications) can access which stores on the StoreOnce Backup system. If youdo not set permissions, all clients will be able to access all stores.

The maximum number of outbound copy jobs that can be processedconcurrently. Copy jobs are placed in a queue and processed as soon as

Maximum Concurrent Outbound CopyJobs

volume of jobs and any configured blackout windows or bandwidth limitingallow. The backup application polls the HP StoreOnce Backup system to identifywhen copy jobs are complete. It is recommended to limit the maximum numberof concurrent outbound copy jobs to 1 per 512 kbps of available bandwidth.

The maximum number of data and inbound copy jobs that can be processedconcurrently. Blackout windows and bandwidth limiting do not apply to thesejobs.

Maximum Concurrent Data andInbound Copy Jobs

This defaults to 9387 and cannot be edited.Command Protocol Port Number

This defaults to 9388 and cannot be edited.Data Protocol Port Number

StoreOnce Catalyst page 83

IMPORTANT: If Catalyst operations pass through a firewall, the network administrator must open(TCP) ports 9387 (Command protocol) and 9388 (Data protocol) to allow the Catalyst traffic topass to and from the HP StoreOnce Backup systems.

StoreOnce Catalyst Clients tabThis tab is only active if the Client Access Permission Checking box on the Settings tab is enabled.It allows setting up a list of clients (backup applications) that will be displayed on the Permissionstab to restrict client access to a store.

NOTE: The client backup application must first be configured with a client identifier before youcan add details to this tab. See the client backup application documentation for more informationabout configuring identifiers.

To add a client (administrators only)1. Click Add.2. Enter the name of the client and a description.

NOTE: The client application must be configured with a client identifier, such asMediaServer1. This identifier is entered in the Client field. Note that no spaces are allowedin the Client field.

3. Check the features that you desire (if they are supported by the client application):• Enter a password and confirm the password.

• Check Allow Store Creation.

• Check Manage Server Properties.

• Check Manage Client Permissions.

NOTE: Only enable features on the Clients tab that are supported by your client application.

4. Click Update.

Table 21 StoreOnce Catalyst Clients fields

DescriptionField

The client identifier is a user-defined string set through the backup applicationsoftware which can be used on the HP StoreOnce Backup system to identify a

Client

client. For example, there may be multiple media servers sharing the same ID;


Table 21 StoreOnce Catalyst Clients fields (continued)

DescriptionField

so, the identifier is not a client machine name or a name generated by thesoftware. Best practice is to ensure that the name created on the backupapplication is meaningful for use in searches on the StoreOnce Backup system.

This is a description that can be included on the StoreOnce Backup systemwhen the administrator adds a client.

Description

If the client backup application supports this, you can provide a client password(client passwords are optional and can also be left blank). Once set, any client

Password

that connects will need to supply the password along with their client id. Referto your client application's documentation for further details.

If the client application supports it, you may also enable clients to create storesremotely from this tab. Refer to your client application's documentation forfurther details.

Allow Store Creation

If the client backup application supports this, you can manage the server fromthe client backup application rather than the HP StoreOnce Backup system.

Manage Server Properties

When enabled, four settings can be managed through the backup application:Blackout Windows, Throttling Windows, Max number of Data jobs, and Maxnumber of Copy Jobs. Refer to your client application's documentation forfurther details.

If the backup application supports this, you can remotely manage which ClientIDs exist in the system and which Client IDs are able to access which stores.

Manage Client Permissions

Only enable this if the backup software supports this feature. Refer to your clientapplication's documentation for further details.

WARNING! When enabled, this feature allows anyone with access to thebackup application the ability to change the Client ID settings, thereby givingusers on one system control over and full access to all backup targets.

NOTE: A Client ID must be defined from the GUI and then enabled for thisfeature before a backup application using that Client ID can connect to theStoreOnce appliance and further manipulate data for other Client IDs.

StoreOnce Catalyst Blackout Windows tabThe fields at the top of this tab show the System Time and whether a Blackout Window is currentlyactive or not. The information below displays the start and stop times of any blackout windowsthat have been configured for outbound copy jobs.Users with an Admin login may specify times when outbound copy jobs should not occur, forexample during planned maintenance or heavy network traffic. Multiple blackout windows maybe configured.Blackout windows override any attempts by ISV software to perform Catalyst Copies. ISV softwarewill retry continually until a blackout window is finished.

NOTE: Blackout windows are available on most StoreOnce functions to ensure all StoreOnceservices run efficiently and do not compete for resources. For example, if running backup, restore,replication, and Catalyst Store operations with no break (24 hours a day), housekeeping cannotcomplete and performance will suffer. This is a complex subject; see also HP StoreOnce Backupsystem Concepts and Configuration Guidelines.

StoreOnce Catalyst page 85

To edit StoreOnce Catalyst blackout windows (administrators only)1. Select the Blackout Windows tab.

2. Click Edit.3. Check the box next to the required day of the week.4. The time boxes become editable. Use the spinner menus to select the appropriate hours.5. Set up as many blackout windows, as required.6. Make sure the Apply First Time Restriction box is checked. This ensures the times that have

been specified are enabled. If it is not checked, the times are ignored.7. To enable a second blackout window, make sure the Apply Second Time Restriction box is

checked. The second blackout window for each day must occur after the first blackout windowfor that day.

8. Click Apply.

To pause copy jobs (administrators only)The Pause Copy Jobs button on the Blackout Windows tab places all outbound copy jobs on holdimmediately. Click Pause Copy Jobs a second time to resume outbound copy jobs.

StoreOnce Catalyst Bandwidth Limiting Windows tabThere are four sections to this tab, all of which relate to bandwidth limiting on outbound copy jobs.

• Status: details the current bandwidth limit, if any.

• General bandwidth limit: administrator users may enable and apply a general bandwidthlimit. This is a simple calculation of:(Max WAN Speed) x (Max Desired WAN Usage%).

• Bandwidth limit calculator: provided to help work out limit values for the general bandwidthlimit and the bandwidth limiting windows.

• Bandwidth limiting windows: administrator users may specify certain times when differentbandwidth limits may apply. Any bandwidth limit entered will overwrite the general bandwidthlimit.

Bandwidth limiting can be used to avoid saturating the WAN to free up bandwidth for otherprocesses and applications. A minimum of 2Mbps per concurrent job is recommended. At least512Kbps per concurrent job is required for reliable operation. These limits apply to all outboundcopy jobs from this .


To edit bandwidth limiting (administrators only)1. Display the Bandwidth Limiting Windows tab.

2. Check the General Limiting Enabled box and determine the recommended general bandwidthlimit, which is a simple calculation of:(Max WAN Speed) x (Max Desired WAN Usage%).Use the bandwidth limit calculator provided on this page to work out limit values, if required.

3. Click Edit to edit the Bandwidth Limiting Windows.Configure up to two windows for each day.Verify the appropriate Apply First/Second Restriction check boxes are checked. This ensuresthe specified times are enabled. If not checked, the times are ignored. Then manually enterthe required Bandwidth Limit in each required window.Use the bandwidth limit calculator provided on this page to work out limit values, if required.

NOTE: All settings are applied to the HP StoreOnce Backup system and not for individualjobs. The Bandwidth Limit windows override the General Limit when the time specified for thewindow is active. The General Limit applies outside of Bandwidth Limit windows.

4. Click Apply.

Catalyst Stores pageSelect StoreOnce Catalyst—Stores from the Navigator to display the Stores page and tabs.The top half of the Stores page shows all stores configured for the appliance. Click on a store todisplay its details in the lower half of the page. Users with an Admin login may edit these settingsor delete stores, and may also create new stores.The lower half of the page has the following tabs:

• Store Details tab (page 88), includes functions for creating and managing stores

• Permissions tab (page 90)

Catalyst Stores page 87

• Item Summary tab (page 90)

• Data jobs tab (page 92)

• Outbound copy jobs tab (page 95)

• Inbound copy jobs tab (page 99)

Table 22 Store fields

DescriptionField

The name of the store. This may be created manually through the HP StoreOnce Backup systemor generated by the backup application.

Name

The version of the store.Version

The status of the store. When you create a store you will see the status change until it becomesOnline.

Status

The date and time that the store was created.Created

The number of Catalyst items contained within the store.Number of CatalystItems

The amount of data stored. This is the amount of data that the user has backed up and reconcileswith the logical data recorded on the backup application.

User Data Stored

The size of the store on the disk. This is the physical disk space consumed; the actual size afterdeduplication.

Size On Disk

The dedupe ratio which is the ratio of duplicate data against new data identified in the datajob.

Dedupe Ratio

Store details tabThe Store Details tab displays the details that were specified when the store was created. Userswith an Admin logon may create and edit store details and delete stores.


Table 23 Store details

DescriptionField

The name of the store. This may be created manually through the HP StoreOnce Backup systemor generated by the backup application.

Name

A description for the store.Description

The retention period for information about data jobs. This information is displayed on the DataJobs tab, which provides a log of all data job activity. The default is 90 days.

Data Job RetentionPeriod (Days)

The retention period for information about inbound copy jobs. This information is displayedon the Inbound Copy Jobs tab, which provides a log of all data job activity. The default is 90days.

Inbound Copy Job LogRetention Period(Days)

The retention period for information about outbound copy jobs. This information is displayedon the Outbound Copy Jobs tab, which provides a log of all data job activity. The default is90 days.

Outbound Copy JobLog Retention Period(Days)

This may be High or Low.Primary (Default)Transfer Policy • High means all data is sent from the media server and deduplicated on the HP StoreOnce

Backup system. This can also be described as target-side deduplication.• Low means that the media server deduplicates the data and sends only unique data. This

can also be described as source-side deduplication.The primary transfer policy is the default transfer policy for the server. Each media server maybe configured individually to use the most efficient transfer policy. As long as the two transferpolicies have different values, the media server will determine which is the most bandwidthefficient transfer policy to use.

This may be High or Low (see definitions in row above) and is normally the opposite to thePrimary transfer policy so that the media server can choose to use which is most appropriate.

Secondary TransferPolicy

However, if you wish to enforce the transfer policy that the media server uses, set both Primaryand Secondary transfer policies to the same value.

Once the library is created and the correct license is applied, the Secure Erase Mode boxappears on the Store Details tab. The selection box defaults to None, meaning Secure Erase

Secure Erase Mode

is disabled. To enable Secure Erase, select the preferred number of Overwrite Passes (1, 3,5, or 7). If enabled, this feature allows you to securely erase confidential data that may haveunintentionally been backed up as part of a regular backup job. See “SecurityFeatures” (page 12) and “Licensing” (page 12) for more information.

To create a new store (administrators only)1. Click Create at the top right of the StoreOnce Catalyst Stores page.2. Provide the store details as described in Table 23 (page 89).

NOTE: If the proper license was applied, an Encryption Enabled check boxis displayed. Toenable encryption for the new store, you must do it at this time by checking the EncryptionEnabled box. See “Security Features” (page 12) and “Licensing” (page 12) for moreinformation.

When you have completed the store details, click Create.


3. The store is created and displayed in the Stores list where its status changes from Creating toOnline. To enable the Secure Erase feature (if you have a license), see “To edit store details(administrators only)” (page 90).

To edit store details (administrators only)1. Select the store in the list to display its details and then click Edit.2. Amend details as appropriate and click Update to apply them.

NOTE: Once the store is created and if the proper license is applied, a Secure Erase Modebox is displayed. If enabled, this feature allows you to securely erase confidential data thatmay have unintentionally been backed up as part of a regular backup job. See “SecurityFeatures” (page 12) and “Licensing” (page 12) for more information.

To delete a store (administrators only)Select the required store and then click on Delete in the Store Details tab to delete it. You will beprompted to confirm that this is what you wish to do; click Delete to delete the store, or click Cancelto cancel the command.

Permissions tab (administrators only)This tab is only active if the Client Access Permission Checking box has been enabled on the Settingstab. The Client list is only populated with individual clients or client groupings if you configuredclients on the Clients tab.You can set the Physical Data Size Quota and Logical Data Size Quota (on the Store Details tab)to use in conjunction with Client-Permissions. This allows you to effectively define how much spacea particular user is allowed to use on the HP StoreOnce Backup system. This may be useful withmany users using the same system and you wish to control how much disk space is available toindividual users.1. Click Edit to change the permissions.

2. The default setting is No Access, which means that the client cannot access the store for dataor copy jobs. Click the appropriate Access button for the client(s) who should have access,then click Update.

Item summary tabThis tab provides summary details of each item in the store.

• Use the filter options to locate the required item(s).

• By default, 50 items are displayed per page. This can be changed from the Items Per Pagedrop-down. Use the scroll bar to scroll through all items on the page or use the Prev or Nextbuttons to display more pages.

• Once items are displayed, Admin users may use the Delete button to delete a selected item.

NOTE: This is not recommended. It is better to let the backup application remove items toensure integrity within backup catalog. Only use Delete as a last resort.

• All users may use the buttons under the item details to show Related Data Jobs, OutboundCopy Jobs, or Inbound Copy Jobs for the selected item.


NOTE: This tab provides a report; it is not automatically refreshed.

1. If necessary, click + to display the filter options.

Check the boxes against the options that you wish to use. Specify as many options as possibleto narrow the search results. Wild cards or boolean logic (AND/OR filters) are not supported.

• The item name is a unique identifier that is always defined on the backup application.

• Sub-string matches are supported, so the filter will return any item that contains thecharacter string that has been entered. With Item Name you can also specify that it shouldbe an Exact Match.

• With the Created and Last Modified fields, enter a range of dates.

• The Tag Lists allow you to filter any tags that the client may have added to the data. Youmay enter as many tags as required; they should be space separated, with no commas.If you leave All Match unchecked, the filter will retrieve all items that have any of the tagsspecified. If you check All Match, it will retrieve only those items that have all the tagsspecified.

2. Click Show Items.3. A report listing items is displayed.

Table 24 Item summary fields

DescriptionField

The name of the item. This is the name that is generated by the backup application.Item Name

The date that the item was created.Created

The date that the item was last modified.Last Modified


Table 24 Item summary fields (continued)

DescriptionField

A list of any tags to include or exclude when searching for the item.Tag List

The size of the data within the item.Data Size

4. Click on an item within a list to display further details about it in the lower part of the page.

Table 25 Item summary details

DescriptionField

The name of the item. This is the name that is generated by the backup application.Item Name

The date that the item was created.Created

A list of any tags that are attached to this item.Tag List

The date that the item was last modified.Last Modified

The size of the data within the item.Data Size

The version of the item. Currently, this is always 1.Version

The size of the meta data associated with the item. Meta data is created by the backupapplication.

Meta Data Size

The dedupe block size. Currently, the block value is always Variable.Dedupe Block Size

Data jobs tabThis tab provides a log with details about data jobs for the selected store.

• Use the filter options to locate the required job(s).

• By default, 50 items are displayed per page. This may be changed from the Items Per Pagedrop-down. Either use the scroll bar to scroll through all items on the page or use the Prev orNext buttons to display more pages.

• Values that you set in Settings control how long data jobs are retained for (default is 90 days).



1. If necessary, click + to display the filter options.Check the boxes against the options that you wish to use. Specify as many options as possibleto narrow the search. Wild cards and boolean logic (AND/OR filters) are not supported.

• The name of the item is a unique identifier that is always defined on the backupapplication. Similarly, the client name is defined on the backup application. Best practiceis to ensure that client names are also meaningful for use in searches on the StoreOnceBackup system.

• Sub-string matches are supported, so the filter will return any item that contains thecharacter string that has been entered. With Item Name and Client you can also specifythat it should be an Exact Match.

• With the Start Time and End Time fields, enter a range of dates and times.

• Select a Status which may be Running, Completed or Cancelled.

2. Click Show Jobs.3. A report listing data jobs is displayed. Use the Sort Results option to sort the results

alphabetically.


Table 26 Data job fields

DescriptionField

The name of the item within data job. This name is created by the backup application.Each data job may have multiple items.

Item Name

The status of the data job item, which may be:Status• Running: in progress

• Completed: the item has completed successfully, this does not mean the data job hascompleted, only the item, and does not reconcile with the backup application jobcompletion status

• Cancelled: the Status Information provides more details, for example, the dataconnection has been lost between the HP StoreOnce Backup system and the mediaserver (this is unlikely to occur)

• Unexpected error: the StoreOnce Backup system has experienced a problem wholeprocessing the item

• Insufficient disk space: it will be necessary to clear some disk space or add more storage

• Link failure: IP connectivity has been lost and the backup application must retry the job

• System shutdown: System has been shut down

NOTE: The backup application must be configured to tidy up any incomplete or orphaneditems before retrying the job.

The amount of user data that was written. This reconciles with the information in the backupapplication's log, but note that a backup job may span multiple items.

Data Written

The write throughput speed. The first figure, expressed in MB/s, is the logical bandwidth;the second figure, expressed in Mb/s is the physical bandwidth consumed. The %

Write Throughput

bandwidth saving depends upon whether the store has been configured for source-sidededuplication with a low-bandwidth transfer policy, or target-side deduplication with ahigh-bandwidth transfer policy. See Store Details tab (page 88).

The amount of user data that was read.Data Read

The read throughput speed. This only has one value because read throughput is alwayshigh throughput without any % saving.

Read Throughput

The client that initiated the data job, as defined on the backup application. The IP addressin the brackets is for information and not part of the client name. It is best practice to

Client Identifier

ensure that a meaningful name is given to the client within the backup application. If noclient was defined on the backup application, only the IP address is shown.

The time the job started.Start Time

The time the job ended.End Time



Table 27 Data job details

DescriptionField

The name of the item within data job. This name is created by the backup application.Each data job may have multiple items.

Item Name

The status of the data job item, as described in the previous table.


Status

Status information, as appropriate to the Status reported.Status Information

The time the job started.Start Time

The time the job ended.End Time

A name that identifies the client user who created the item.Client Identifier

Displays the IP address of the server that created the item.Client Address

The name of the application that created the item.Application Identifier

The deduplication ratio.Deduplication Ratio

The amount of user data that was written. This reconciles with the information in the backupapplication's log, but note that a backup job may span multiple items.

Data Written

The length of time that data was written in MB/s.Write Duration

The write throughput speed, expressed in MB/s, is the logical bandwidth.Write Throughput

The amount of data transferred.Data Transferred

The bandwidth utilisation in Mb/s. This is the physical bandwidth consumed.Bandwidth Utilisation

The amount of bandwidth saved. The % bandwidth saving depends upon whether thestore has been configured for source-side deduplication with a low-bandwidth transferpolicy, or target-side deduplication with a high-bandwidth transfer policy. See Store Detailstab (page 88).

Bandwidth Saving

The amount of data read.Data Read

The length of time that data was read in MB/s.Read Duration

The read throughput speed. Read throughput is always high throughput without any %saving.

Read Throughput

Outbound copy jobs tabThis tab provides a log with details of all outbound copy jobs for the selected store.


• By default, 50 items are displayed per page. This may be changed from the Items per Pagedrop-down. Either use the scroll bar to scroll through all items on the page; or use the Prev orNext buttons to display more pages.

• Values that you set in Settings control how long outbound copy jobs are retained for (defaultis 90 days).



1. If necessary, click + to display the filter options.Check the boxes against the options that you wish to use. Specify as many options as possibleto narrow the search. Wild cards and boolean logic (AND/OR filters) are not supported.

• The name of the item is a unique identifier that is always defined on the backupapplication. Similarly, the client name is defined on the backup application. Best practiceis to ensure that client names are also meaningful for use in searches on the StoreOnceBackup system.



• Select a Status which may be Pending, Running, Paused, Completed, or Cancelled.

2. Click Show Jobs.3. A report listing outbound copy jobs is displayed. Use the Sort Results option to sort the results

alphabetically.

Table 28 Outbound copy job fields

DescriptionField

The name of the item being copied from the outbound copy job. This name is created bythe backup application.

Item Name

The status of the outbound copy job, which may be Queued, Paused, Running, Cancelled,or Completed. If the status information displays —, no further information is available.


Status

The amount of data to be copied in the copy job.Data Size

The copy speed.Copy Throughput


Table 28 Outbound copy job fields (continued)

DescriptionField

The address of the target server. The target is the other StoreOnce Backup system to whichthe job is being copied from the this HP StoreOnce Backup system. All target details arespecified by the backup application when the outbound copy job is created.

Target Appliance

The name of the target store on the StoreOnce Backup system to which the job is beingcopied.

Target Store

The name of the target item on the StoreOnce Backup system to which the job is beingcopied. All item names are defined by the backup application.

Target Item Name

The client that initiated the outbound copy job. The client name is defined in the backupapplication.

Client Identifier

The time the job was queued.Queued Time

The time the job started.Started Time

The time the job ended.Stopped Time



Table 29 Outbound copy job fields

DescriptionField

The name of the item being copied from the outbound copy job. This name is created bythe backup application.

Item Name

The status of the outbound copy job, which may be Queued, Paused, Running, Cancelled,or Completed. If the status information displays —, no further information is available.


Status

Status information. This will be a — unless the job has been cancelled or paused. SeeSystem Information messages (page 103) for more information about events that may causea job to be cancelled or paused.

Status Information

The percentage of the copy job that has been completed.Percent Complete

The client that initiated the outbound copy job. The client name is defined in the backupapplication.

Client Identifier



The time the copy job was queued.Queued Time

The time the copy job was started.Started Time


The estimated completion time, if the copy job is still running.Estimated CompletionTime

The address of the target server. The target is the other StoreOnce Backup system to whichthe job is being copied from the this HP StoreOnce Backup system. All target details arespecified by the backup application when the outbound copy job is created.

Target Appliance

The name of the target store on the StoreOnce Backup system to which the job is beingcopied.

Target Store

The name of the target item on the StoreOnce Backup system to which the job is beingcopied. All item names are defined by the backup application.

Target Item Name


The size of the source item to be copied; this may be larger than the data size value (butno smaller).

Source Item Size

The date that the source item was last modified. This is useful if you need to check whetherthe source item might have been modified during the copy attempt. An error message isalso generated if the source item is modified whilst copying.

Source Item LastModified

This identifies where the data to be copied occurs within the source item.Source Item CopyOffset

This identifies the size of the data to be copied within the source item.Source Item CopySize

This identifies where the data to be copied should be placed within the destination item.Destination ItemCopy Offset

The amount of time taken to copy the data.Copy Duration

The amount of data copied, which should match the data size.Data Copied


The amount of bandwidth saved. The % bandwidth saving depends upon whether thestore has been configured for source-side deduplication with a low-bandwidth transfer

Bandwidth Saving


Table 29 Outbound copy job fields (continued)

DescriptionField

policy, or target-side deduplication with a high-bandwidth transfer policy. See Store Detailstab (page 88).

If there are multiple unsuccessful attempts, a network link may be down or a blackoutwindow may be scheduled.

Unsuccessful RetryAttempts

This is the time that the next copy will be attempted, if the previous one was unsuccessful.Next Copy AttemptTime

This indicates whether the user has cancelled the copy job or not.Copy OperationCancelled

To cancel a copy jobHP recommends canceling copy jobs via the backup application and only using the GUI as a lastresort. This ensures that the backup application catalog stays in sync with the backup images.1. Select the job to be cancelled in the outbound copy job list.2. Click Cancel Job.3. At the confirmation prompt, click OK.

Inbound copy jobs tabThis tab provides a log with details about inbound copy jobs for the selected store.


• By default, 50 items are displayed per page. This may be changed from the Items per Pagedrop-down. Either use the scroll bar to scroll through all items on the page; or use the Prev orNext buttons to display more pages.

• Values that you set in Settings control how long inbound copy jobs are retained for (defaultis 90 days).



1. If necessary click + to display the filter options.Check the boxes against the options that you wish to use. Specify as many options as possibleto narrow the search. Wild cards and boolean logic (AND/OR filters) are not supported.

• The name of the item is a unique identifier that is always defined on the backupapplication. Similarly, the client name is defined on the backup application. Best practiceis to ensure that names are also meaningful for use in searches on the StoreOnce Backupsystem.



• Select a Status which may be Pending, Running, Paused, Completed, or Cancelled.

2. Click Show Jobs.3. A report listing inbound copy jobs is displayed. Use the Sort Results option to sort the results

alphabetically.


Table 30 Inbound copy job fields

DescriptionField

The name of the item being copied to the inbound copy job. This name is created by thebackup application.

Item Name

The status of the inbound copy job, which may be Queued, Paused, Running, Cancelled,or Completed.

Status

The amount of data in the copy job.Data Size


The address of the source appliance. The source is this HP Backup system. All sourcedetails are specified by the backup application when the inbound copy job is created.

Source Appliance

The name of the source store for the inbound copy job.Source Store

The name of the source item. All item names are defined by the backup application.Source Item Name

The client that initiated the inbound copy job. The client name is defined in the backupapplication.

Client Identifier

The time the job was queued.Queued Time

The time the job started.Started Time




Table 31 Inbound copy job fields

DescriptionField

The name of the item being copied to the inbound copy job. This name is created by thebackup application.

Item Name

The status of the inbound copy job, which may be Queued, Paused, Running, Cancelled,or Completed. If the status information displays —, no further information is available.


Status

This will be a — unless the job has been cancelled or paused.Status Information

The percentage of the copy job that has been completed.Percent Complete

The client that initiated the inbound copy job. The client name is defined in the backupapplication.

Client Identifier



The time the copy job was queued.Queued Time

The time the copy job was started.Started Time


The estimated completion time, if the copy job is still running.Estimated CompletionTime

The address of the source server. The source is the StoreOnce Backup system from whichthe job is being copied to this HP StoreOnce Backup system.

Source Appliance

The name of the source store on the StoreOnce Backup system from which the job is beingcopied.

Source Store

The name of the source item on the StoreOnce Backup system from which the job is beingcopied. All item names are defined by the backup application.

Source Item Name


The size of the source item to be copied; this may be larger than the data size value (butno smaller).

Source Item Size

The date that the source item was last modified. This is useful if you need to check whetherthe source item might have been modified during the copy attempt. An error message isalso generated if the source item is modified whilst copying.

Source Item LastModified

This identifies where the data to be copied occurs within the source item.Source Item CopyOffset

This identifies the size of the data to be copied within the source item.Source Item CopySize

This identifies where the data to be copied should be placed within the destination item.Destination ItemCopy Offset

The amount of time taken to copy the data.Copy Duration

The amount of data copied, which should match the data size.Data Copied


The amount of bandwidth saved. The % bandwidth saving depends upon whether thestore has been configured for source-side deduplication with a low-bandwidth transfer

Bandwidth Saving

policy, or target-side deduplication with a high-bandwidth transfer policy. See Store Detailstab (page 88).


Table 31 Inbound copy job fields (continued)

DescriptionField

This indicates whether the user has cancelled the copy job or not.Copy OperationCancelled

To cancel a copy jobHP recommends to cancel copy jobs via the backup application and only use the GUI as a lastresort. This ensures that the backup application catalog stays in sync with the backup images.

NOTE: If you use the GUI to cancel an inbound copy job, it is recommended to cancel the jobin the source outbound copy jobs list first.

1. Select the job to be cancelled in the inbound copy job list.2. Click Cancel Job.3. At the confirmation prompt click OK.

System information messagesA job may have been cancelled for the following reasons that will be shown in the Status Informationfield:

• Cancelled By User: the copy job was cancelled either through the backup application or viathe StoreOnce GUI.

• Unexpected Error: Contact HP Support.

• Lock Release Request: the destination Catalyst item was opened by another process. Mostbackup applications should prevent this from occurring.

• Out of Space: there is insufficient disk space. Take one of the following actions:Expire backups that are no longer required and wait for housekeeping to free up space.1.

2. Purchase additional storage.3. Perform the copy to a different store that has available free capacity.

• Not Licensed: the destination store does not have a license in place to accept copies for thisbackup application. Check the installed licenses and resubmit the copy job once the licenseis applied.

• Permission Denied: the client requesting the copy no longer has permission to access thedestination store. Check access permissions on the destination appliance then resubmit thecopy job.

• ObjectStore Not Present: the destination store is no longer available. Check the destinationappliance and ensure the store exists. This error may occur if a store is deleted whilst copiesare still queued.

• ObjectStore Origin Same As Destination: backups are being copied within a store. Mostbackup applications should prevent this from occurring.

• Object Not Present: backups are being copied within a store. Most backup applications shouldprevent this from occurring.

• Server Incorrect Address Or Protocol: the backup application should validate input. If thismessage occurs, check the backup application configuration.

• Object Extent or Offset Invalid: the backup application tried to copy a backup incorrectly.Check the backup application setup.

• Object Changed Whilst Queued or Paused: check the backup policy; their backup applicationis making changes to Catalyst items when it should not. Try the copy again within the backupapplication.


• Object Not Ready: contact HP Support.

• Job State Inconsistency Found: contact HP Support.A job may have been paused for the following reasons:

• Link failure: the network between the appliances is down.Check the network connectivity.Once the connection is re-established, the copy should automatically continue.

• Shutdown: the source or destination appliance was shutdown. Once the appliance is backonline, the copy should automatically continue.

• Blackout window: a blackout window is in effect on the source appliance. Once the blackoutwindow expires, the copy should automatically continue.

• Server Too Busy: the source or destination appliance is too busy to run the copy job. Whenresources are available, the copy job will be automatically restarted.

• System shutdown: the system has been shut down.


7 Housekeeping function

IMPORTANT: Housekeeping is an important process to maximize the deduplication efficiency ofthe appliance. You must ensure that the housekeeping process has enough time to complete.Running backup, restore, replication, and Catalyst Store operations with no break (i.e., 24 hoursa day) can result in housekeeping never completing. HP strongly recommends that you read HPStoreOnce Concepts and Configuration Guidelines available at www.hp.com/go/storage/docsfor more detailed guidance.

The Housekeeping page:

• Contains tabs that display housekeeping statistics and graphs, see The Housekeepingpage (page 105)

• Allows administrators to configure housekeeping blackout windows, see Configuring blackoutwindows (page 108)

• Allows administrators to pause housekeeping, see Pausing housekeeping (page 108)

NOTE: With the current version of the software there are no equivalent StoreOnce CLI commandsavailable for the tasks described in this section.

The Housekeeping pageSelect Housekeeping from the HP StoreOnce menu to display current and housekeeping activity.There are four tabs that display housekeeping statistics and graphs: Overall (default), Libraries,Shares, and StoreOnce Catalyst. Users with an Admin login can also configure blackout windowsfor housekeeping on the Blackout Windows tab.

Housekeeping statisticsUse the housekeeping statistics to monitor the current housekeeping activity.

The Housekeeping page 105


Table 32 Overall tab housekeeping statistics

DescriptionField

Status is one of the following:• Running – The housekeeping process is active. During

startup or shutdown this status may also show Startingor Stopping.

The status will include one of the following:

Status

• Green check – there are no warnings

• Amber warning – the housekeeping queue has not beenempty within the last 24 hours but has been emptywithin the last seven days

• Red alert – the housekeeping queue has not been emptywithin the last seven days

Warnings and alerts require further investigation becausebackup and replication performance is affected.

The date and time that housekeeping last completelyemptied the housekeeping queue.

Last Complete

Data that has been deleted/overwritten but not yet clearedby housekeeping.

User data pending housekeeping

The amount of disk space estimated to be reclaimed basedon the amount of data to be deleted. This can change as

Estimated disk space to reclaim

jobs are processed. This field will display “—” if there isnot enough history available to make an estimate or if thereis no housekeeping to do.1

The estimated time the queue will be empty based on theamount of data to be cleared by housekeeping. This field

Estimated time to completion

will display “—” if there is not enough history available tomake an estimate or if there is no housekeeping to do.1

Indicates whether there is any outstanding Secure Erasedata (yes/no). See “Secure Erase” (page 13) for moreinformation.

Secure Erase data pending reclaim

1 The Estimated disk space to reclaim and the Estimated time to completion are based on historical trends. In he earlystages of a retention lifecycle where data overwrite has only recently started to occur, or where a large amount of datais suddenly deleted, these estimates will be unrealistic until enough data is processed to improve the accuracy of theestimate.

Similar statistics are shown on the individual tabs for the different types of target devices. All tablesare updated every five minutes.


Table 33 Libraries, Shares, and StoreOnce Catalyst tabs housekeeping statistics

DescriptionColumn

Identifies the device nameLibraries/Shares/Catalyst Stores

See Table 32 (page 106)Status

Indicates if the share is enabled for the Secure Erasefeature. “None” means Secure Erase is not enabled. “[x]

Secure Erase Mode

Overwrite Passes” means Secure Erase is enabled andindicates the number of times the data will be overwritten(1, 3, 5, or 7) when deleted.Even if a store is currently not in Secure Erase mode, it maybe processing Secure Erase jobs that were present beforethe mode was changed.

See Secure Erase data pending reclaim in Table 32Outstanding Secure Erase

See User data pending housekeeping in Table 32Pending Delete

See Estimated disk space to reclaim in Table 32Estimated Reclaim

See Estimated time to completion in Table 32Time to Complete

See Table 32Last Complete

Housekeeping graphsUse the housekeeping graphs to view historical housekeeping activity. Both graphs are updatedevery hour. On all tabs, the graphics can be filtered by:

• Time period

Day, with hourly resolution for the last 24 hours◦◦ Week, with a daily resolution for the last 7 days

◦ Month, with a daily resolution for the last 31 days

• Housekeeping mode

All (default)◦◦ Secure Erase Data Only

◦ Non-Secure Erase Data Only

The top graph, Deleted User Data Pending Housekeeping, displays information about the data. Itrepresents a snapshot of the size of the housekeeping queue (the amount of data deleted oroverwritten but not yet processed) on the hour for the previous hour when viewing the "Day" timeperiod, or at 12:00 midday for the last day when viewing the "Week" or "Month" time period.This graph may not show any data if all housekeeping is processed promptly and does not spanover the end of the hour. However, if the amount of data shown is increasing and housekeepingnever completes, consider removing or reducing blackout periods or scheduling backups moreappropriately to allow housekeeping to complete.The bottom graph, Housekeeping Data Processed, displays information for:

• User Data Processed – how much deleted data was processed as housekeeping since the lastsample point

• Disk Space Reclaimed – how much space recovery (secure and insecure) was realized by theprocessed data since the last sample point

The Housekeeping page 107

NOTE: After a power cycle, the start of housekeeping is delayed for 15 minutes. The graphs willnot recalculate during that time. As housekeeping resumes, the housekeeping queue is recalculated.The queue will show the number of jobs increasing even if new jobs are not being created. Ifhousekeeping is paused (or in blackout), the queue will not display existing jobs until housekeepingis re-enabled. However, new housekeeping jobs will be reported.

Configuring blackout windowsScheduling housekeeping blackout windows to cover the period during which backups are occurringcan improve backup performance. Housekeeping windows apply across the whole appliance.

On the Blackout Windows tab, click Edit and enter the appropriate Start of Restriction and End ofRestriction times for each window. Verify the Apply First Time Restriction box is checked. Thisensures the times that are specified are enabled. If it is not checked, the times will be ignored.Configure up to two windows for each day. Settings apply to all devices on the .

TIP: Ideally, housekeeping blackout windows should be set for those times when the HP StoreOnceBackup system is running backup or replication or Catalyst copy. See the HP StoreOnce Conceptsand Configuration Guidelines for recommendations.

Pausing housekeepingOn the Blackout Windows tab, click Pause Housekeeping to pause the housekeeping process. Thissetting applies to all devices, libraries, and shares on the HP StoreOnce Backup system. The pauseis not retained if the power fails or the HP StoreOnce Backup system is powered down.


Housekeeping should not be left in the paused state for significant amounts of time; pause only asa maintenance tool.

Pausing housekeeping 109

8 StoreOnce reportingThe following reporting options are specific to HP StoreOnce functions:

• Activity report (page 110)

• Reporting page (page 111)

IMPORTANT: HP StoreOnce Enterprise Manager is a standalone software application thatprovides basic management capabilities in a replication environment and provides an easy wayfor customers to manage multiple devices being replicated across multiple sites. Enterprise Manageralso provides comprehensive reporting of StoreOnce performance and disk usage and is stronglyrecommended. The software, including documentation, can be downloaded free of charge from:http://www.software.hp.com/kiosk.

Activity reportSelect HP StoreOnce→Activity from the navigation tree. This page displays two graphs that illustratesystem activity. These graphs show Virtual Tape, NAS, and StoreOnce Catalyst throughput, whichillustrates current backup activity and current replication and StoreOnce Catalyst copy jobthroughput.These graphs are updated every 5 seconds and provide useful feedback about the activity on theHP StoreOnce Backup system.See the HP StoreOnce Concepts and Configuration Guidelines for more information about usingthese graphs in conjunction with other information to decide whether it may be necessary to takeaction to improve performance and what action may be appropriate.

Current NAS write backup activity graph

110 StoreOnce reporting

http://www.software.hp.com/kiosk

Current replication and StoreOnce Catalyst copy job throughput graph

Reporting pageSelect HP StoreOnce→Reporting from the navigation tree to display reports.This page has four storage reporting tabs: Overall, Libraries, Shares, and StoreOnce Catalyst.On each tab, you have the option to export a CSV (comma separated value) file by clicking ExportDisk Storage to CSV. The Overall tab CSV file provides information such as appliance serialnumbers, type of device, name of device, time stamp, size on disk, and user data stored. Onsubsequent tabs you can generate a CSV file per store, share, or library. For example, chooseany library and get its storage utilization over a specific period of time (week or month).Each tab allows selection of Data and/or the Period from drop-down boxes to specify the axes forthe graph. Summary statistics are displayed at the foot of the page.The Data types are:• Disk Storage

• Dedupe Ratio

• Disk Storage Daily Change

• Disk Storage Weekly ChangeThe Period may be changed to Week or Month.See the HP StoreOnce Concepts and Configuration Guidelines for more information about usingthese graphs in conjunction with other information to decide whether it may be necessary to takeaction to improve performance—and what action may be appropriate.In the following example, Disk Storage has been selected as the Data type.

Reporting page 111

112 StoreOnce reporting

9 Storage ReportingThe Storage Report is available from the Navigator and provides valuable information about thedisk storage.

Storage ReportThis page provides details about the storage space usage. It shows free space and used space,which added together make up the total storage space. It also shows user data written and thededuplication ratio.

Table 34 Storage report parameters

DescriptionField

The total capacity of available and used space.Total Capacity

The amount of free space available.Free Space

The amount of space that has been used.Used Space

The amount of user data that has been written.User Data Written

The deduplication ratio.Deduplication Ratio

Storage Report 113

10 Access and Device ConfigurationThis page provides System Information and access to the device configuration functions:

• Device Configuration page (page 114)

• User Management (page 114)

• Email (page 118)

• Support Ticket (page 120)

Device Configuration pageSystem Information shows summary details for the HP StoreOnce Backup system that were set upat installation and cannot be modified from the GUI.

Table 35 System information

DescriptionField

This is the serial number of the appliance. This is thenumber that is required when licensing replication, Catalyst,

System ID

or additional storage. It is referred to as the Cluster ID inthe StoreOnce CLI.

This text is used to label and identify the StoreOnce Backupsystem. It is set by the user with the StoreOnce CLI systemset description command.

Description

User ManagementTwo user accounts, Admin and Operator, and passwords are created at installation and are alwaysincluded on this page. Users may use this page to modify the passwords. They may also create,edit, and delete additional users. (See also User types and user roles (page 7).)

User accounts and AD

IMPORTANT: Before granting access to external users or groups using the User Managementtool, you must first:1. Set the Authentication mode to AD on the NAS CIFS server tab. See “Configuring the CIFS

server” (page 30).2. Add the StoreOnce device to an AD domain. See “Adding the StoreOnce device to an AD

Domain” (page 35).3. Add any required users or groups to your active directory to grant access to the AD domain.

See “Adding users and groups to an AD domain” (page 36).4. Grant your external users or groups access permissions to the HP StoreOnce backup system

using the User Management tool. See “To add a user” (page 115) and “To add agroup” (page 116).

NOTE: User accounts may also be managed using StoreOnce CLI commands. See the HPStoreOnce Backup system CLI Reference Guide.

114 Access and Device Configuration

An operator screen will only show a Modify button, while an Admin user management summaryscreen will show additional buttons: Add Group, Add User, and Delete.

To add a user (Admin only)There are two types of users:• Local Users: A user created solely on the HP StoreOnce backup system.

• External Users: A user who belongs to a domain to which the HP StoreOnce Backup systemhas been joined. When you add an external user who is already a member of an existinggroup, you have the ability to assign this user to a different role than the group role. Nopassword is required for the external user because that is controlled via the Domain server.

To add a local user1. Click Add User.

2. Select a User Type of Local.3. Enter the User Name, and select a User Role of user or admin.4. Enter a password for the new user and confirm the password.5. Click OK.

To add an external user1. Click Add User.2. Select a User Type of External.

User Management 115

3. Enter User Name and User Role of user or admin.

NOTE: The user name must be in this format and the user must be part of an existing domain:• <DOMAIN_NAME>\<USERNAME>, for example: AdminSys\ghearty

4. Click OK. If the user name is not in the correct format, an error message will appear, and theexternal user will not be created.

To add a group (Admin only)This option allows you to add a group that has already been set up on the AD domain to whichthe StoreOnce Backup system has been joined. When adding a group, you must choose a rolefor the group. All members of this group will have the same role.

NOTE: If, after creating the group, you configure a member of that group as an individual user(external user) with an admin role, that user will then be an admin even if the group role is set touser. (Role permissions set through Add User take precedence over role permissions in Add Group.)

1. Click Add Group.2. Enter Group Name.

NOTE: This group must already exist in your domain. For example:yourdomain.com\StoreonceAdmins


3. Select a permissions role of user or admin, then click OK.If the group does not exist, exists already, or if there is missing information, an error messageis displayed.

To modify a userThe Admin user and users created with a user role of admin can modify any local user passwordor the role of an external user or external group. The Operator user and users created with a userrole of user may only modify their own password and cannot change the role of a group or anyuser.

To modify a local user1. Select the user to change a password for and click Modify. For a local user, you can modify

the user role or the user password, or both.2. Change the role of the user, if required. Enter and confirm the new password.

3. Click OK. At the confirmation of success page, click OK.

User Management 117

To modify an external user or external group1. To modify an external user or group, select the external user or group to modify and click

Modify. You will have the option to change the permissions role. Only users with Adminpermissions can modify roles of users or groups.

2. Change the permissions role.3. Click OK. At the confirmation for the role change, click OK.

To delete a user or group (Admin only)

IMPORTANT: Do not delete the two default user accounts: Administrator and Operator.

1. Select the user or group and click Delete.2. Click OK to confirm deletion of the selected user or group.

3. In the success confirmation box, click OK.

EmailSelect Email from the Device Configuration menu item to display the current email setup.


The Email Setup page displays the current configuration for sending out event notifications viaemail. This includes information needed to route the email (SMTP server), as well as the associationof events with destination email addresses. A single event can generate a notification to multipleemail addresses. Also, different sets of events can generate notifications to different email addresses.

To configure email settingsClick Configure and enter the required details.

Table 36 Email setup parameters

DescriptionName

Whether email notification is currently enabled or disabled. When email notification isdisabled, the association between events and destination addresses remains valid, butthe events do not produce email.

Email Notification

The mail server used to send out the email.SMTP Server

The address from which the notification email originates.Mail From

An optional address if you want the recipient to reply to an email address different fromthe address where the email originated.

Reply To

Test email1. Click Test to open the Test Email dialog.2. Enter the destination email address and (optionally) a subject, then click OK.

An email message is sent only if email notification is enabled on the Email Setup page.

Events (Email)Select Events from the Navigator.

The Events topic page lists the event types that may be notified by email and the addresses towhich the email notifications are sent. There are three types of events that generate emailnotifications, listed under the Severity column once they have been setup in Manage Email

Email 119

Notifications. If the same event generates email notifications to multiple addresses, a separate rowis used to represent each event/email-address pairing. The fields are:

Table 37 Events notified by email parameters

DescriptionName

Severity of the event (INFO/WARN/ALERT).Severity

The email destination address.Email Destination

To manage email notifications1. Click Manage Email Notifications to update the event/email-address association list.

2. On the Manage Email Notifications dialog, do one of the following:• Choose an existing email address from the drop-down menu and click Select to display

it in the Update events for addresses field• Enter a new address directly into the Update events for addresses field

3. Select the event group(s) to be associated with the addresses (Alert, Warn, and/or Info), andclick OK to update the list. The updated list is displayed almost immediately in the EventsNotified by Email topic page.

Support TicketThe Support Ticket page provides information about the Support Ticket configuration. HP Supportwill ask customers to upload support tickets to an ftp site to aid diagnosis of issues a customer maybe experiencing. Information about support tickets that have been generated is found under theData Collection topic. See Data collection (page 121).

To modify the Support Ticket configurationClick Modify, make the required changes, and click OK.


Table 38 Support ticket parameters

DescriptionName

Shows whether data collection for a system crash is enabled or not.Automatic data collectionenabled

The retention policy. The number denotes the number of previously collected tar files tobe retained in each node.

Number of data sets to beretained

After each data collection, a zip file containing specified StoreOnce and system commandoutputs representing the system configuration may be sent. This can be enabled ordisabled.

Send system configurationby email enabled

SMTP server to send the configuration information.SMTP server

Email ID from which the configuration email will be sent.From

Email ID to which configuration will be sent.To

Data collectionThis page provides a log of generated data collections. Collect a log, download it, and delete itfrom this page. Note that support tickets can be quite large in size.

NOTE: The Collect, Download, Delete, and Delete All buttons are only available in the GUI toAdministrators. However, Operators can still Collect and Delete support tickets using the CLI.

Support Ticket 121

Table 39 Data collection parameters

DescriptionName

The name assigned to the data collection.Name

Description of the data collection.Description

The state of the data collection. A collection process can be in one of the following states:COLLECTING, COLLECTED, PARTIALLY_COLLECTED, PACKAGING, DELETING,DOWNLOADED, or FAILED.

State

Timestamp of when the data was collected.Date

The initiator of the data collection. A collection can be invoked manually or automaticallyduring a system crash.

Initiator

The size of the data collection.Size

Collect DataUse this dialog to invoke a new log collection. This operation collects data such as log files andsystem command output. The data is collected in a tar file that is assigned a name. Once collected,use the Download button to get the collected data.

NOTE: This operation may take some time.

The equivalent StoreOnce CLI command is support create ticket and is accessible to bothAdministrators and Operators.

The dialog contains one field: filename.

Download data collectionUse the Download button to download the selected data collection.HP recommends downloading that support ticket as soon as possible before doing anything elseto the system such as rebooting or changing a node to maintenance. If the active managementservice moves to another node before the ticket downloads, the ticket cannot be retrieved from theStoreOnce GUI.


Delete data collectionUse the Delete button to delete the selected data collection, or Delete All to remove all datacollections. This operation removes the tar files on each node from the system.

NOTE: This operation may take some time.

The equivalent CLI command is support del ticket and is accessible to both Administratorsand Operators.

Support Ticket 123

11 EventsSelect Events from the Navigator to display each Alert, Warning, and Information messagegenerated by the Management Server.Three levels of events are represented:

• Alerts: Disruptive events that can result in loss of access to data.

• Warnings: Potentially disruptive conditions in which access is not lost, but if the situation isnot addressed, it can escalate to an Alert condition; for example, reaching a very high serverCPU utilization or approaching a quota limit.

• Information: Events occurring under normal or non-threatening conditions that change thesystem.

To define how long events are kept before being deleted from the log, see To delete events fromthe log (page 124).

Click anywhere in the column title bar to display a menu. If the column is sortable, sort options areenabled. You can also hide and show columns from this menu.

Table 40 Events log columns

DescriptionName

The icon in the Level column displays the severity of the event. This column is sortable byseverity type.

Level

The time that the event originated on the Management Server. Click on the column headingto sort in ascending or descending order.

Time

The text of the event, including details and suggested actions. This column is not sortable.Event

Use the log navigation buttons at the bottom of the log to move through the pages, move to aspecific page, or filter the type of event message that is displayed.

To delete events from the logNOTE: It is sometimes necessary to reduce the size of the Event log before carrying out a softwareupdate. Always refer to the update release notes to check the current recommendation.

1. Click Delete at the top of the Events log.2. Enter the number of days. All events older than this will be deleted.

124 Events

3. Click OK.

To delete events from the log 125

12 Basic troubleshooting• Accessing the CLI (page 126)

• Pulling a Support Ticket (page 126)

• Multiple users (page 127)

• Connecting to the StoreOnce Backup System from the backup application (page 127)

• Backup or replication fails (page 128)

• Catalyst troubleshooting (page 129)

• Performance (page 129)

• StoreOnce Backup System configuration problems (page 129)

• Upgrade licenses (page 129)

Accessing the CLIMany of the topics in this section require access to the StoreOnce Command Line Interface (CLI).They cannot be executed from the GUI. There is a separate StoreOnce CLI Reference Guide, whichyou should use for more detailed information. However, a brief summary of how to access theStoreOnce CLI is also included in this guide.The user access is the same as the GUI, with the same roles. The Admin user has access to allavailable CLI commands. The Operator user can view status and configurations but is not able tomake configuration changes.

To access the CLIThe StoreOnce CLI can be accessed:

• Remotely: using a ssh session to the Management Console (ssh client applications, such asPuTTY, are freely available from the internet). This is the normal access type.

Password problemsAdmin users may reset passwords for operator users.If the Admin credentials are accidentally lost, it is possible to reset the Admin password using theaccount “hpresetpassword”. This account is also password protected, it can only used from theconsole and the end-user is recommended to change this password after installation and store itin an offline Password Security tool. See the HP StoreOnce Backup CLI Reference guide for moredetails.

Pulling a Support TicketA support ticket is a snapshot in time of the StoreOnce product, showing the configuration, statusand health of the product, as well as historical events for use with troubleshooting the product. Itis also called “a collect”.It also contains lower level tracelogs for the use of HP engineers.It can be manually collected by the customer in two ways from the Management Console:

• From the GUI (Admin and Operator user). See Support Ticket (page 120).

• From the StoreOnce CLI (Admin user only). See the HP StoreOnce CLI Reference Guide.

NOTE: If a kernel crash occurs, an automatic ticket will be generated. A ticket will be producedwith the filename: tkt_<datestamp>_<crashed nodename>.zip

126 Basic troubleshooting

Licensing problemsThe Instant-on demo license enables all the features for a period of 60 days. After the licenseexpires, all backup targets become read-only but the backed up data remains intact. You mustpurchase the full license to make the backup targets read-write again.Use StoreOnce CLI commands to show the current license status and apply the demo and individuallicenses. See the HP StoreOnce Backup system CLI Reference Guide and “Licensing” (page 12)for more information.

Multiple usersThe HP StoreOnce Management Console supports multiple GUI and CLI sessions. However, werecommend:

• No more than 8 active Operator sessions for the GUI

• No more than 16 active Operator sessions for the CLI

• No more than 1 active Admin session to ensure there is no confusion when configurationchanges are made

Currently, you cannot see which users are logged in. The accounts show command will list allthe user accounts defined for the HP StoreOnce Backup system. For each account the authoritylevel is provided.

Connecting to the StoreOnce Backup system from the backup applicationMake sure you have the latest version or software patches for the backup application. Please seehttp://www.hp.com/go/ebs for supported applications.Stop and restart the backup application services after the backup device has been discovered. Ifyou still cannot access the device, check Device Manager to make sure it is accessible from thehost.

• For iSCSI devices: Make sure that the iSCSI initiator is connected to the devices and log onto them, if they are not, configure them on the Targets tab of the iSCSI Initiator.

NOTE: There are practical limitations on the number of devices that each host or HBA can access.It is possible to configure more drive and library devices than a host can access. The limit forWindows or Linux hosts using the iSCSI interface is 64.

Timeout problems with NAS CIFS sharesBy default, Windows CIFS timeout is set low for NAS backup implementations. This can lead tovarious error message related to lost connection to the share, unrecoverable write errors or timeoutproblems resulting backup job failures. It is recommended to add or to increase the “SessTimeout”value from the default of 45 (seconds) to 300 (five minutes).By increasing the timeout, it ensures that the Windows CIFS timeout does not cause your backupapplication to prematurely timeout the running job.

NOTE: This can resolve issues resulting from timeouts, but is not exclusively the only reason forsuch failures. A large number of ‘out of sequence’ writes causing slow response times within theproduct often can be the root cause. Further analysis may be required should increasing the timeoutnot be successful.

In order to increase the timeout:1. From the Start menu, click Run....2. Type regedit in the Open: field and click OK.

Licensing problems 127


3. Expand and locate the registry subtree as follows:HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \LanmanWorkstation \Parameters

4. Add a new REG_DWORD key with the name of SessTimeout.5. Set the timeout value. It is recommended to initially set the timeout value at 600 and then

change the value according to the situation of your machine.6. Reboot the client.

NFS State handle errorNOTE: NetBIOS name resolution is not supported on CIFS shares.

The following sequence will cause problems when connecting to a NAS share.1. Create an NFS share and mount it on a Linux box.2. Delete the share on the StoreOnce Backup system without unmounting it from the Linux box.3. Recreate the share again with the same name.In this scenario, the Linux client will assign a new set of inodes to the new share, but when tryingto access the old mount point it will use the previous set of inodes and will therefore not manageto connect.Reboot the host Linux system and the connection will work again.

If backup or replication fails

Backup failsCheck the system Events (at the bottom of the navigation tree). One reason for a backup failure isthat the system has reached 90% of storage capacity used. An alert is generated at 90% and ateach increase of 1%. When capacity reaches 99% full, the system becomes read-only.HP also strongly recommends checking backup application error logs. There are a couple of thingsthat may result in errors:• Exceeding the maximum concurrent jobs

• Exceeding the maximum number of concurrent open files for NAS

• Exceeding the total number of files in a NAS share

• Reconfiguring devices whilst backups are in progress

• Deleting replication mappingsRefer to the HP StoreOnce Concepts and Configuration Guidelines for recommended and maximumvalues.

Replication failsIf replication needs to take place through a firewall, the network administrator will need to open(TCP) ports 9387 (Command protocol) and 9388 (Data protocol) to allow the replication trafficto pass to and from the HP StoreOnce Backup systems.If the replication Source Appliance fails and goes offline whilst it was performing a NAS replicationjob, the replication target share appliance may be left in an inconsistent state. This state may resultin failure to recover from some files in the share or perform a list of files in the share becauserelationships between files and folders have been lost. This will automatically be repaired by thetarget appliance as soon as it detects the loss of the source appliance, however it may take up to10 minutes to complete this repair during which time the share will not be available for access.If some files are failing to replicate and remain out of sync for long periods of time, check that thebackup application is not holding open those files. This can be done by checking that there are


no queued or paused jobs in the backup application, or restarting backup application services. Ifneither action resolves the problem, reboot the backup application server.

Catalyst troubleshootingSince StoreOnce Catalyst is designed to allow maximum control to the client application, anyproblems should be remedied by checking job configuration on the client. In the unlikely event thatthe StoreOnce Catalyst Status display as Fault, contact HP support services for further advice.

IMPORTANT: If Catalyst operations need to take place through a firewall, the network administratorwill need to open (TCP) ports 9387 (Command protocol) and 9388 (Data protocol) to allow theCatalyst traffic to pass to and from the HP StoreOnce Backup system.

PerformanceYour HP StoreOnce Backup system is designed for high performance backup and restore operationsaccording to the specification documented. However, it requires careful configuration. Please referto the HP StoreOnce Concepts and Configuration Guidelines document for detailed guidance.There are many reasons why you may not see the performance you expected from your HPStoreOnce Backup system.

• Your own network speed or disk access is not fast enough to allow streaming of data.

• Your backup application is not optimized. For example, there are not enough backup streamsconfigured to achieve optimum performance.

• Your HP StoreOnce Backup system is not optimized for your network and application.

NetworkThe HP StoreOnce Backup system is designed to be run on a 1Gb or 10Gb network. Performancewill be reduced if a 10/100BaseT network is used. The LEDs on the front panel (1–Gb ports only)and on the network ports and also warnings on the Management Console will indicate the networkspeeds at which the device is operating.

StoreOnce Backup system configuration problems

I cannot see a newly created VTL deviceWhen you create a new device on the HP StoreOnce Backup system, the host will not be able tosee the device until you connect manually to it using the iSCSI Initiator or . If you cannot see thedevice, check Device Manager to make sure it is visible from the host.

I cannot see additional slots from the backup applicationWhen you create additional slots for an autoloader/library on the HP StoreOnce Backup system,you may need to restart services on the backup application so that it can see the new slots.

I cannot recover the configuration fileYou can only recover a configuration file to an HP StoreOnce Backup system if no devices (NASshares or Virtual Tape Libraries) have been created on that appliance. This option should only beused in emergencies, when the HP StoreOnce Backup system has lost both disks and all diskconfiguration.

Upgrade licensesIf you have installed the Instant-On demo license, you should purchase and install the appropriatefull licenses before the Instant-On license expires. See Licensing (page 12).

Catalyst troubleshooting 129

Can I transfer the License To Use to a different HP StoreOnce Backup system?Yes. This process is called re-hosting of licenses. The LTU is tied uniquely to the serial number ofyour HP StoreOnce VSA. If you need to rehost the license on another VSA, you need to make arequest to the HP Licensing support team. You would need to provide the serial number of the newVSA. Rehosting is an honestly-based movement of license. Rehosting of a given license can bedone up to three times.


13 Advanced troubleshootingMore detailed troubleshooting information can be found at http://www.hp.com/support. Thissection covers the following topics:

• Software update process (page 131)

• If the Backup System runs out of space (page 131)

Software update processSoftware updates can only be performed through the StoreOnce CLI using the Admin user account.Software updates are delivered to customers in the form of a single rpm package, which maycontain multiple rpms.A software update is NOT an online process. Services will shutdown to perform the updates, sothe whole appliance will be offline for a period of time (approximately 30 minutes).Please refer to the Maintenance and Service Guide for your product and to the detailed releasenotes provided with each software release for specific instructions on downloading and performinga software update.

If the HP StoreOnce Backup system runs out of disk spaceA warning message is generated when the HP StoreOnce Backup system reaches 90% capacity.You can expand storage/fs for the virtual machine up to 10 TB capacity (in multiples of 1 TB vdisks)if you have not done so already. See the HP StoreOnce VSA Deployment and Configuration guidefor more information. If you are not able to increase actual capacity, you may still be able to createadditional space.Options for creating space include:• Review your backup jobs to see if you can reduce the size of backup or retention time.

• Use the backup application job settings to overwrite or erase data.

• Ensure Housekeeping is running and is keeping up with demand.

Reduced performance using Data in Flight EncryptionIf Data in Flight Encryption is configured on the subnet, the system may experience decreasedperformance. This is the expected behavior when using the IPsec protocol. View the networkconfiguration using the CLI net show config command to determine if Data in Flight isconfigured; see the HP StoreOnce Backup system CLI Reference Guide.

Software update process 131

http://www.hp.com/support

14 SNMPThe HP StoreOnce Backup System has the ability to act as a Network Element in an SNMP networkso that it can communicate effectively with Network Management Stations using SNMP (SimpleNetwork Management Protocol). The StoreOnce implementation of SNMP is compatible with HPSystem Insight Manager (HP-SIM) and supports SNMP 1, 2 and 3.

SNMP (Configuration)SNMP is enabled and configured using StoreOnce Management CLI commands. Please refer tothe HP StoreOnce Backup system CLI reference guide for syntax and examples.When the SNMP feature is enabled, it reports the overall system status, via SNMP traps, as reflectedon the StoreOnce Management interface, as follows:• OK – System status is good.

• Warning – Something on the system needs attention, but is not critical.

• Critical – Something on the system needs immediate attention.It also reports any software status messages or hardware status messages, as reported in the eventlog and email alerts or the StoreOnce Management Console.

HP Systems Insight ManagerThe MIBs, Management Information Bases, used to represent the information handled by the HPStoreOnce Backup system are called SEMI-MIB.mib and TRAP-DESTINATIONS-MIB.mib and areincluded on the CD supplied with your product (they can also be downloaded from http://www.hp.com/support). These databases must be compiled and registered with HP Systems InsightManager, so that information from the StoreOnce Backup system can be transmitted to andinterpreted by the management host.There are three stages to setting up HP Systems Insight Manager for use with the HP StoreOnceBackup system:1. Register SEMI-MIB.mib and TRAP-DESTINATION-MIB within the base of MIBs supported by

HP Systems Insight Manager.2. Update the existing system type database with the new system type for the HP StoreOnce

Backup system, based on the unique system object identifier.3. Discover the HP StoreOnce Backup system under HP Systems Insight Manager

NOTE: For detailed instructions on working with HP-SIM, refer to the “HP Systems Insight ManagerTechnical Reference Guide”.

Register the MIB for the HP StoreOnce Backup System1. Log on to the HP Systems Insight Manager.2. Compile SEMI-MIB.

Open a Command window and go to Program Files\HP\Systems Insight Manager\mibs. Enter the command mcompile SEMI-MIB.mib.

3. Register SEMI-MIB.Still in the Command window, enter the command mxmib —a SEMI-MIB.cfg.

4. Compile TRAP-DESTINATIONS-MIB.Open a Command window and go to Program Files\HP\Systems Insight Manager\mibs. Enter the command mcompile TRAP-DESTINATIONS-MIB.mib.

132 SNMP



5. Register TRAP-DESTINATIONS-MIB.Still in the Command window, enter the command mxmib —aTRAP-DESTINATIONS-MIB.cfg.

6. Log out from the HP System Insight Manager and then log back in again.7. Check that SEMI-MIB and TRAP-DESTINATIONS-MIB have been registered with HP System

Insight Manager by selecting Options — Events — SNMP Trap Settings… on the HP-SIM Homepage.Scroll down the list of available MIBs to locate SEMI-MIB and TRAP-DESTINATIONS-MIB.

Update the system type database1. Log on to HP System Insight Manager, if not already logged on.2. Select Options — Manage System Types… on the Home page to display a list of all managed

system types.3. Click on New... to add a new system type.4. Define a new rule filling only required fields. as follows:

• System object identifier: 1.3.6.1.4.1.11.10.3.1.3.27

• Compare rule: match

• Priority: 1 (highest)

• System type: Storage Device

• Product Model: HP StorageWorks D2D

SNMP (Configuration) 133

5. Click OK. The HP StoreOnce Backup System will now be included as a product within thepool of managed system types. (Select Storage Device from the System Type drop-down menuto check this.)

Discover the HP StoreOnce Backup System

NOTE: Always set up the SNMP parameters on the StoreOnce Management Console beforediscovering the HP StoreOnce Backup system on HP-SIM. See the HP StoreOnce CLI ReferenceGuide for the complete range of SNMP commands.

1. Log on to HP System Insight Manager, if not already logged on.2. Select Options — Discovery… on the Home page to display a list of systems that have already

been discovered.3. Click Edit… to configure the discovery rule for the HP StoreOnce Backup system4. Place a single IP or a range of IP addresses to discover the new machine(s) in Ping inclusion

ranges… .

134 SNMP

5. Click Credentials…, select the SNMP tab and type in the Read community string. This shouldbe the same as the Read Community string that you configured on the StoreOnce ManagementConsole. If you are using the default setting that allows everyone on the network to read thereported alerts, enter “public”. Click OK to confirm.

6. Click Save to save the discovery rule.7. To start the discovery process click Run Now.

SNMP (Configuration) 135

NOTE: If a firewall is in operation on the machine running HP Systems Insight Manager,make sure the HP StoreOnce Backup system(s) are within the firewall.

8. The discovery process adds new machine(s) to the collection of managed systems. To locatethe HP StoreOnce Backup system, enter its IP address in the Search box in the left-hand paneand click Search.

NOTE: If the discovery process fails, check that the network is working correctly and thatthe HP StoreOnce Backup system is online.

136 SNMP

15 Key ParametersThe following table provides important specifications about the StoreOnce Backup system.

NOTE: All table values assume that the StoreOnce Backup system is running the latest StoreOncesoftware.

StoreOnce VSA BackupTable 41 Key parameters for HP StoreOnce VSA Backup

VSA 1 TB FreeVSA 4 TBVSA 10 TB

Capacity

111Minimum usable (after RAID) capacity (TB)

1410Maximum usable (after RAID) capacity (TB)

System Limits

444Maximum number of libraries, shares and Catalyst Stores combined

161616Maximum concurrent inbound data streams1

444Maximum concurrent outbound copy jobs

VTL

161616Maximum drives per library/node (D2DBS and ESL Emulation)

969696Maximum cartridges per library

320032003200Maximum cartridge size (GB)

NAS

1 million1 million1 millionMaximum files per NAS Share

505050Maximum number of hosts on the NFS server

Replication

111Maximum replication appliances fan-in

222Maximum replication appliances fan-out

111Maximum replication fan-in per library

111Maximum replication fan-out per ibrary

244Maximum concurrent replication jobs as source

244Maximum concurrent replication jobs as target1 This limit is not rigidly enforced, it is dependant on memory availability.

StoreOnce VSA Backup 137

16 Support and other resourcesContacting HP

For worldwide technical support information, see the HP Support Center:http://www.hp.com/go/hpscBefore contacting HP, collect the following information:

• Product model names and numbers

• Technical support registration number (if applicable)

• Product serial numbers

• Error messages

• Operating system type and revision level

• Detailed questions

Subscription serviceHP strongly recommends that customers register online using the Subscriber's choice web site:http://www.hp.com/go/e-updates.Subscribing to this service provides you with e-mail updates on the latest product enhancements,newest driver versions, and firmware documentation updates as well as instant access to numerousother product resources.After subscribing, locate your products by selecting Business support and then Storage underProduct Category.

Related informationThe following documents provide related information:

• HP StoreOnce VSA Deployment and Configuration guide: This guide is invaluable to gettingyour system set up and started as it describes how to deploy your HP StoreOnce VSA.

• HP StoreOnce Backup system CLI Reference Guide: This is the complete reference guide forthe CLI command set. Some tasks can only be carried out from the CLI.

• HP StoreOnce Backup system Concepts and Configuration Guidelines: This guide explainsthe workload placed on the HP StoreOnce Backup system. This guide is used to optimizeperformance and minimize the impact of deduplication, replication, and housekeepingoperations competing for resources. The guide is regularly updated.

• HP StoreOnce Backup system Linux and UNIX Configuration Guide: This is the configurationguide for Linux and UNIX.

You can find these documents on the HP Enterprise Information Library page of the HP website:www.hp.com/go/storage/docs

Select HP StoreOnce Backup and then select your product.

Websites• HP Website: http://www.hp.com

• HP Storage Products: http://www.hp.com/go/storage

• HP Enterprise Backup Solutions Overview: http://www.hp.com/go/ebs

• HP Technical Support website: http://www.hp.com/support

138 Support and other resources

http://www.hp.com/go/hpsc

http://www.hp.com/go/e-updates


http://www.hp.com

http://www.hp.com/go/storage



• HP Technical Support Downloads website: http://www.hp.com/support/downloads

• HP Single Point of Connectivity Knowledge (SPOCK) website: http://www.hp.com/storage/spock

• HP partner and store locator: http://www.hp.com/service_locator

• White papers and Analyst reports: http://www.hp.com/storage/whitepapers

Typographic conventionsTable 42 Document conventions

ElementConvention

Blue text: Table 42 (page 139) • Cross-reference links and e-mail addresses

• A cross reference to the glossary definition of the termin blue text

email addressesBlue, bold, underlined text

Website addressesBlue, underlined text: http://www.hp.com

Bold text • Keys that are pressed

• Text typed into a GUI element, such as a box

• GUI elements that are clicked or selected, such as menuand list items, buttons, tabs, and check boxes

Text emphasisItalic text

Monospace text • File and directory names

• System output

• Code

• Commands, their arguments, and argument values

Monospace, italic text • Code variables

• Command variables

Emphasized monospace textMonospace, bold text

WARNING! Indicates that failure to follow directions could result in bodily harm or death.

CAUTION: Indicates that failure to follow directions could result in damage to equipment or data.

IMPORTANT: Provides clarifying information or specific instructions.

NOTE: Provides additional information.

TIP: Provides helpful hints and shortcuts.

Customer self repairHP customer self repair (CSR) programs allow you to repair your HP product. If a CSR part needsreplacing, HP ships the part directly to you so that you can install it at your convenience. Someparts do not qualify for CSR. Your HP-authorized service provider will determine whether a repaircan be accomplished by CSR.For more information about CSR, contact your local service provider, or see the CSR website:

Typographic conventions 139

http://www.hp.com/support/downloads

http://www.hp.com/storage/spock

http://www.hp.com/storage/spock

http://www.hp.com/service_locator

http://www.hp.com/storage/whitepapers

http://www.hp.com

http://www.hp.com/go/selfrepair

140 Support and other resources

http://www.hp.com/go/selfrepair

A Upgrading to StoreOnce software, version 3.11.xStoreOnce software version 3.11.0 introduces a major change to the way the network is configured.Version 3.11.0 software supports a more flexible network environment than earlier softwareversions, allowing connection to up to three subnets without VLAN tagging. If VLAN tagging isenabled, up to 128 VLAN subnets may be configured. StoreOnce software version 3.11.0 alsoprovides support for Data In Flight Encryption using the IPsec protocol. Upgrading to StoreOncesoftware version 3.11.0 will automatically convert the old network model (that used templates) tothe new model (that uses a network configuration file) as part of the upgrade process

NOTE: VLAN tagging is not enabled by default on upgrade. On a new installation it can beenabled when running the StoreOnce CLI command, net set wizard, to configure the network.On existing installations it can be enabled by using StoreOnce CLI commands to create or modifyportsets and subnets in the configuration, as described in this chapter.

DHCP and IPv6 are not supported with StoreOnce software version 3.11.0.Network configuration applies to ALL nodes in the cluster. It is not possible to configure differentsubnets on individual nodes.There is ONE default gateway which can be on the management or data subnet and is definedwhen a subnet is set as the default subnet. The management virtual IP address should be on thesame subnet as the management physical ports but there is no longer a requirement for contiguousIP addresses.

IMPORTANT: When configuring the StoreOnce Backup system for the first time, HP stronglyrecommends the use of the StoreOnce CLI command, net set wizard. However, do not usethis wizard to reconfigure the network because it will overwrite the current configuration. Bestpractise is to create a copy of the current configuration and modify that before making the changesactive.

Previous networking modelsSoftware prior to 3.11.0 provided five network templates; the StoreOnce Backup system wasconfigured with the one that was most suited to the environment and the template could not bemodified. These templates for network configuration supported connection to a maximum of twosubnets and VLAN tagging was not supported.

IMPORTANT: The template networking model is only applicable to StoreOnce B6200 and 6500Backup systems running StoreOnce software prior to 3.11.0. It is completely redundant for allsystems running software post 3.11.0.

Table 43 Template network options prior to StoreOnce 3.11.0

Recommended usePort speed/usage per nodeNumber ofsubnets

Templatenumber

When user requires 10GbE for data and 1GbEfor management on separate subnets

2 x 1GbE management/2 x10GbE data

21

When only 1GbE infrastructure available for dataand management

4 x 1GbE management anddata

12

When only 10GbE infrastructure required for dataand management on one subnet


13

When only 1 GbE infrastructure available butseparate data and management networks required

2 x 1GbE management/2 x1GbE data

24

Primarily for Fibre Channel users who requireminimal 1GbE network connection


15

Previous networking models 141

Network model with StoreOnce software version 3.11.0 and laterThe network is defined in a single network configuration that is created using StoreOnce CLIcommands. The key concepts to understand when creating or modifying the configuration are:• Up to three DNS servers may be configured for the StoreOnce Backup system• One Management VIF address must be configured for StoreOnce 6500 and B6200 Backup

systems; this is the VIF address that will be used to access the StoreOnce Backup system GUIand CLI.

• At least one portset must be configured. A portset defines the physical ports that will beconnected to the network switch, their bonding mode, the type of data that they will carry,and whether they are VLAN enabled. Further portsets may be defined, depending upon thenumber of physical ports still available and how they are bonded. The portset applies to allnodes in the cluster and ports must always be bonded on StoreOnce 6500 and B6200 Backupsystems.

• Each portset will have at least one subnet. If the portset is VLAN enabled it may be configuredwith multiple VLAN subnets. See VLAN subnets with StoreOnce Backup (page 143) for moreinformation about guidelines when creating VLAN subnets.

The following diagram provides a simple overview of the hierarchy within a network configuration.

Figure 2 Network configuration hierarchy

Bonding modesMode 1 (Active-backup)One port of the pair is active, the other port is in a backup state. If the active port or connectionis lost, the backup port will become the new active port. This mode provides fault tolerance.Mode 4 (LACP)

142 Upgrading to StoreOnce software, version 3.11.x

This is Dynamic Link Aggregation mode, using the LACP protocol. It creates aggregation groupsthat share the same speed and duplex settings.Mode 6 (Balance-alb)This is adaptive load balancing. This includes balance-tlb and receives load balancing (rlb) forIPv4 traffic.There are some restrictions to these bonding modes:• Bonded ports must operate at the same speed: 1GbE ports cannot be bonded with 10GbE

ports.• Each port can be part of only one subnet (unless VLAN Tagging is enabled on that port).• A subnet’s IP address range may not overlap with any other subnet

VLAN subnets with HP StoreOnce BackupThere is a fixed number of available physical NIC ports on the HP StoreOnce Backup system,defined by the number of 1GbE ports plus 10GbE ports, therefore there is a limit on the numberof physical subnets to which the HP StoreOnce Backup system can be directly connected. If yournetwork requires more subnets than this—for example, twenty—the network administrator candefine 20 VLAN subnets, each with its own unique VLAN Tag ID and, typically, use the 10GbEbonded link to the HP StoreOnce Backup system as a trunk.To do this, the network administrator sets up the switches with the necessary VLAN subnets andconfigures a unique VLAN tag index for each subnet. (The tag values can be any integer betweenrange 2-4094.) The ports on the network switch to which the StoreOnce Backup system connectsmust be trunked and tagged.Using the StoreOnce CLI, the HP StoreOnce administrator modifies the network configuration byfirst defining the portset for the physical 10GbE link and making it VLAN enabled, and thenconfiguring twenty VLAN subnets to use that portset.

VLAN guidelines

IMPORTANT: VLAN subnets are only used for data. It is not permitted to configure VLAN subnetson a portset that is used for Management.

The following guidelines apply:• The user can configure up to a total of 128 different VLAN subnets on each StoreOnce Backup

system; the VLAN subnets may be consecutive or non-consecutive.• The user can configure up to 128 different VLAN subnets on one portset or divide the 128

different VLAN subnets over multiple portsets.• Each VLAN tag interface is configured using the VLAN ID index, which is the same as the

switch VLAN ID number and must be an integer from 2 to 4094.• Each VLAN tag interface can be part of one network subnet only and cannot be used more

than once.For example, if a VLAN tag ID was configured for use with port eth 0 and eth1, it cannot alsobe configured for use with any other portset.

• The user can add/delete/modify the VLAN network configuration without interruptingnon-affected network configuration on the appliance.

• VLAN tagging does not increase bandwidth because the bandwidth is bound by the physicalspeed of the portset. The number of open streams is bound by the specification for theStoreOnce appliance.

• StoreOnce monitoring is on the physical portset, not on each VLAN subnet.• VLAN tagging is not a multi-tenancy solution. Once configured, all StoreOnce services can

bind / listen to all VLAN subnets. For example the NAS shares are available on all configuredsubnets, and permissions are required to regulate access to shares.

VLAN subnets with HP StoreOnce Backup 143

Example network environmentThe following figure illustrates a possible configuration to make use of both the extra portset/subnetavailability and support for VLANs in StoreOnce software version 3.11.0. We shall use this asthe basis for our examples later in this appendix.

Figure 3 Network configuration, making use of all ports and providing support for VLAN subnets

NOTE: For a worked example on configuring this network see Worked example (page 144).

Updating to StoreOnce 3.11.0 softwareThe template that is currently in use will be automatically converted to be the current networkconfiguration as part of the rpm update process. Follow the instructions in the release notes, asnormal. There is no specific user intervention required; the new configuration will exactly matchthe old template and be active immediately.After conversion, the user can modify the configuration to make use of the enhanced networkingfeatures. See next section for examples.

Worked exampleIn the following example a StoreOnce Backup system that has been configured initially to useTemplate 2 (2 x 1GbE management/2 x 10GbE data) has been updated to StoreOnce softwareversion 3.11.0.


After successful update, the configurations can be viewed using the StoreOnce CLI command, netshow config list. You will notice that there are a number of entries.

• There are two fixed configurationnames reserved for the system whose names cannot be usedfor any other configurations: Factory_Default_Configuration and current.

• There are five dummy configurations that map to the old template models. Only one of thesewill contain data. In our example it will be the one that relates to Template 2 because thesoftware update process first copies the network configuration to this file before activating itas the current configuration. These files provide an audit trail only and are of no further useafter successful upgrade.

• There may be up to 16 configurations on any StoreOnce Backup system, but only one canbe active.

• Filenames are alpha numeric.• There are four stages to modifying the new network configuration to make use of the new

networking features in StoreOnce 3.11.0: create a copy of the current configuration, makethe required modifications, validate the file and activate the file. All are carried using StoreOnceCLI commands, as shown in the worked examples below.

• Once you have finished creating a configuration and whenever you modify a configuration,be sure to use the StoreOnce CLI to create a configuration save and restore file.

• Refer to the HP StoreOnce CLI Reference Guide for the full range of network and save andrestore commands.

View current configurationIn the following example, the network was configured on a two-couplet StoreOnce Backup systemto use two 1GbE ports on each node for the Management subnet and two 10GbE ports on eachnode for the Data and Replication subnet. This was the maximum number of subnets supported onStoreOnce software prior to version 3.11.0. The Management VIF is on 192.168.6.20; subnet1is the Data subnet on the two 10GbE ports and uses Bonding Mode 1; subnet 2 is the Managementsubnet on the two 1GbE ports and uses Bonding Mode 1. There are fields for VLANs and EncryptionLinks, but these are empty.

NOTE: VLAN enabling and Data In Flight Encryption can only be configured on Data subnets.You will not be allowed to modify a Management subnet for these features.# net show config current----------------------Network Name: currentNetwork Description: Management on (2) 1Gb ports (bonded), Data/Replication on (2) 10Gb ports (bonded)Write Protected: noDNS Servers: 172.168.0.2 172.168.0.3Port Sets: portSet1 portSet2Management VIF: 172.168.6.20----------------------Number of Networks: 2Number of VLANs configured: 0 out of possible 128----------------------Network: subnet1----------------------IP Addresses: 172.168.7.21,172.168.7.22,172.168.7.23,172.168.7.24,172.168.7.25,172.168.7.26,172.168.7.27,172.168.7.28Net Mask: 255.255.255.0Domain Name: nearline.localGateway: 192.168.7.1Default Network: noNet Usage: dataVLAN tag:Port Set: portSet1 with these interfaces: eth5 eth7Encryption Links:Bonding Mode: 1(Active Passive Bonding)----------------------Network: subnet2----------------------IP Addresses: 172.168.6.11,172.168.6.12,172.168.6.13,172.168.6.14Net Mask: 255.255.255.0Domain Name: nearline.localGateway: 172.168.6.1Default Network: yesNet Usage: mgmtVLAN tag:Port Set: portSet2 with these interfaces: eth0 eth2

Worked example 145

Encryption Links:Bonding Mode: 1 (Active Passive Bonding)

Command Successful

Modifying the current configurationAfter upgrade, you may wish to:• Add a further portset to support an additional Data subnet. If the portset is VLAN enabled, it

will be possible to configure multiple VLAN subnets. If it is not enabled, you may only addone Data subnet to the portset. Either option would enable you to have separate networks forBackup data, typically on a pair of 10GbE bonded ports, and StoreOnce Catalyst Copy andReplication data, typically on a pair of 1GbE bonded ports, on the StoreOnce Backup system.

• Modify an existing Data portset to be VLAN enabled. This would enable you to support anenvironment where the customer’s network switch is configured to separate backup data trafficaccording to different departments or regions.

• Add encryption to a subnet.• Add further IP addresses to a subnet configuration, for example if adding a couplet, or

upgrading from a single-rack to a two-rack installation, when the initial configuration was notcreated for all possible nodes (8) in an expanded cluster.

Best practiseThe recommended best practise is:1. Create a backup copy of the StoreOnce configuration using the StoreOnce CLI command

(config save devices. If you have the Security license installed, also create a keystorebackup using the StoreOnce CLI command (config save keystore.

2. You are not allowed to modify the current configuration directly. Create a copy of the currentconfiguration using the following StoreOnce CLI command (<newconfig> is the nameassigned to the copied file and can be any name you choose):net copy config from current to <newconfig>

TIP: Use the StoreOnce CLI command, net show config list, to check that the copyhas been created successfully.

3. Make the required modification, using the relevant parameters as described in the separatesections below. The StoreOnce CLI commands that you use will depend upon the type ofmodification that you are making, whether you are adding to or modifying a configuration.For more information about individual commands see the HP StoreOnce Backup system CLIReference Guide.

4. Validate the modified configuration using the StoreOnce CLI command:net validate config <newconfig>

NOTE: If there are any errors at this stage we have made a mistake in the configurationand we must correct it. If no errors are reported, we can proceed with the activation step

5. Activate the modified configuration using the StoreOnce CLI command:net activate config <newconfig>

6. Once successfully validated and activated, the modified configuration becomes the currentconfiguration and overwrites the contents of the current configuration.

TIP: If the network configuration is complex, it may take a little time for the settings to becomeactive. After changing network configuration use the following StoreOnce CLI command tocheck progress:net activate status


To add a third subnetIf you have not configured all ports on the StoreOnce Backup system, you may add a portset tothe configuration and then add a subnet to that portset. If the portset is not VLAN enabled, youmay add only one subnet to the portset.In our example, eth2 and eth3 are still available and we shall create a new portset for a StoreOnceCatalyst Copy and Replication subnet. We shall use Bonding Mode 6, we shall simply call thenew portset, portSet3 and the new subnet, subnet3. This subnet will be the default gatewaybecause it needs access to other StoreOnce Backup systems across the WAN.

NOTE: Because we are using Bonding Mode 6 this portset cannot be VLAN enabled.

1. Create a copy of the current configuration, we shall call it ExtraSubnetconfig.net copy config from current to ExtraSubnetconfig

2. Create a new portset for the copied configuration. The StoreOnce CLI command is in theformat:net create portset ExtraSubnetconfig portset3 ports eth2,eth3bondmode 6 vlansupport no

3. Add a subnet to the portset. The StoreOnce CLI command is in the format:# net add subnet ExtraSubnetconfig subnet Subnet3 portset portset3 gateway 172.2.1.1 netmask 255.255.0.0 domain uk.mycompany.net default yes

Command Successful

4. Add the IP addresses to the subnet# net add ipaddr ExtraSubnetconfig Subnet3172.2.1.55,172.2.1.56,172.2.1.57,172.2.1.58

5. Validate the modified configuration using the StoreOnce CLI command:net validate config ExtraSubnetconfig

6. Activate the modified configuration using the StoreOnce CLI command:net activate config ExtraSubnetconfig


To add VLAN subnetsVLAN subnets may only be added to portsets that are VLAN enabled and have a netusage ofData. It is not permitted to configure VLAN subnets on a portset that has been configured forManagement, or Management with Data. You can modify an existing Data portset to be VLANenabled or, if ports are still available, you can create a new portset. Since the most likely scenarioto make use of VLAN subnets uses the 10GbE portset, we shall show how to modify the networkfile configuration after upgrade to support addition of VLAN subnets on this portset.

To modify the existing 10GbE portset and add a VLAN subnetIn our example, portSet1 uses the eth5 and eth7 ports and is used only for Data. We shallmodify this portset to be VLAN enabled. We can then add VLAN subnets and configure their VLANtag ID and IP addresses (users will need to re-configure backup jobs that were using the old Datasubnet to target the new IP addresses). Fewer IP addresses are required for VLAN subnets. Theoriginal configuration was for a two-couplet cluster. Follow earlier guidelines to create a copy ofthe current configuration.1. Use the following StoreOnce CLI command sequence to make the portset VLAN enabled.

net modify config ModifyDataConfig portSet1 ports eth5,eth7 bondmode1 vlansupport yes

2. Modify the existing subnet to give it a VLAN tag ID of 22.# net add subnet ModifyDataConfig subnet subnet1 portset portSet1 gateway 10.168.7.1 netmask 255.255.255.0 domain nearline.local default no vlantag 22

Worked example 147

3. Add four IP addresses to the subnet# net add ipaddr ModifyDataConfig subnet110.168.7.21,10.168.7.22,10.168.7.23,10.168.7.24

4. Add a second VLAN subnet to the portset. The StoreOnce CLI command is in the format:# net add subnet <newconfig> subnet subnet_vlan1 portset portSet1 gateway 10.168.6.1 netmask 255.255.0.0 domain nearline.local default no vlantag 23

5. Add the IP addresses to the subnet# net add ipaddr <newconfig> subnet_vlan110.168.6.25,10.168.6.26,10.168.6.27,10.168.6.28

6. Validate the modified configuration using the StoreOnce CLI command:net validate config <newconfig>

7. Activate the modified configuration using the StoreOnce CLI command:net activate config <newconfig>


To create a new portset that is VLAN enabled and add a VLAN subnetIf eth2 and eth3 are still available for a new portset, we can create a new portset, portSet3,and add a new subnet, subnet_vlan1 with a VLAN tag ID of 26. This will not be the defaultgateway. Mode 6 bonding is not supported on VLAN-enabled portsets. Our initial configurationsupports a two–couplet cluster, therefore we must provide sufficient IP addresses to support twocouplets.1. Create a new portset for the copied configuration. The StoreOnce CLI command is in the

format:net create portset AddVLANconfig portSet3 ports eth2,eth3 bondmode4 vlansupport yes

2. Add a VLAN subnet to the portset. The StoreOnce CLI command is in the format:# net add subnet AddVLANconfig subnet subnet_vlan1 portset portSet3 gateway 10.2.1.1 netmask 255.255.255.0 domain nearline.local default no vlantag 26

Command Successful

3. Add four IP addresses to the subnet, one for each node.# net add ipaddr AddVLANconfig subnet_vlan110.2.1.55,10.2.1.56,10.2.1.57,10.2.1.58

4. Validate the modified configuration using the StoreOnce CLI command:net validate config AddVLANconfig

5. Activate the modified configuration using the StoreOnce CLI command:net activate config AddVLANconfig


To add IP addresses to a subnetA third couplet has been added to the cluster. Because we only configured initially for two couplets,we need to add IP addresses to all subnets to cater for the additional nodes. This is why HP stronglyrecommends that initial configuration caters for a fully expanded cluster.The StoreOnce CLI command is in the format:# net add ipaddr <newconfig> <subnet_name> <IPlist>

For the purposes of this example, we shall assume that the configuration now contains amanagement subnet, subnet2, a Data subnet, subnet1, on a portset that is not VLAN enabled,and a Data subnet, subnet_vlan1, on a portset that is VLAN enabled and show the commands


to expand the three subnets for the additional couplet. Remember that VLANs require one IP addressper node and physical data LANs require two IP addresses per node.# net add ipaddr <newconfig> subnet1 172.168.7.29,172.168.7.30,172.168.7.31,172.168.7.32

# net add ipaddr <newconfig> subnet_vlan1 10.168.8.29,10.168.8.30

# net add ipaddr <newconfig> subnet2 192.168.6.15,192.168.6.16

To add Data in Flight EncryptionIP packets have no in-built security measures, which means that access to the network enablespacket content to be viewed and, because there is no verification, there is no indication whethera packet has been viewed or the content modified. IPsec is an OSI layer 3 protocol that providesencryption and mutual verification at the IP address level. The IPsec protocol is supported for datasubnet encryption on all StoreOnce models running StoreOnce software version 3.11.0 or later.Data in Flight Encryption uses the IPsec protocol to support data encryption at subnet level. Itrequires you to pair the IP addresses of the media server and the subnet that you have configuredon the StoreOnce Backup system and to create a rule that ensures the pair communicate uniquelywith each other based on a password that you configure within the rule. Configuration on theStoreOnce Backup system is via a single StoreOnce CLI command, net add encryption. Itcannot be configured as part of the wizard. But this is only one half of the configuration. You mustalso configure IPsec on the media server that forms the other part of the pair.

License requirementsIf you wish to use the IPsec feature, you must first install the Security Pack license .

Configuring the clientThe IPsec pair and rule must be configured on both the client media server and the StoreOnceBackup appliance. See the HP StoreOnce Backup system Linux and UNIX Configuration guide forinformation about configuring Linux media servers. Configuration of Windows media servers isvia Windows local security policy. (This will be described in more detail in the next edition of thisguide.) For full details of which operating systems are supported go to http://www.hp.com/ebs.

Configuring the StoreOnce Backup system

IMPORTANT: If you subsequently change network configuration. you must re-apply the IPsecencryption.

The syntax for the StoreOnce CLI command is:net add encryption myconfig mysubnet ipAddr clientip passPhrase mypassword

In the following example, we have created a copy of the configuration called config_with_ipsecthat adds encryption to subnet_2. The IP address is the client’s IP address and the passphrasemust match the passphrase that has been configured on the client.# net add encryption config_with_ipsec subnet_2 ipaddr 172.18.198.101 passphrase katedave

Command Successful

NOTE: You still need to validate and activate the configuration to make encryption active on thesubnet.

The subnet configuration now shows the client IP address in the Encryption Links field.----------------------Network: subnet2----------------------IP Addresses: 172.168.6.11,172.168.6.12,172.168.6.13,172.168.6.14Net Mask: 255.255.255.0Domain Name: nearline.localGateway: 172.168.6.1Default Network: yesNet Usage: mgmt

Worked example 149

http://www.hp.com/ebs

VLAN tag:Port Set: portSet2 with these interfaces: eth0 eth2Encryption Links: 172.18.198.101Bonding Mode: 1 (Active Passive Bonding)

Configuring IPsec on the media serverRefer to the HP StoreOnce Backup Linux and UNIX Configuration guide. Instructions for configuringIPsec on Windows media servers will be provided in the next version of this guide.

Encryption with replicationStoreOnce Backup systems are treated exactly like clients by IPsec. To set up an encrypted linkbetween two StoreOnce Backup systems, use the StoreOnce CLI command, net add encryption,on each StoreOnce Backup system, providing the other system‘s IP address but using the samepassphrase.


B Regulatory informationFor important safety, environmental, and regulatory information, see Safety and ComplianceInformation for Server, Storage, Power, Networking, and Rack Products, available at http://www.hp.com/support/Safety-Compliance-EnterpriseProducts.

Belarus Kazakhstan Russia marking

Manufacturer and Local Representative InformationManufacturer’s information:• Hewlett-Packard Company, 3000 Hanover Street, Palo Alto, California 94304, U.S.Local Representative information Russian:• HP Russia: ЗАО “Хьюлетт-Паккард А.О.”, 125171, Россия, г. Москва, Ленинградское

шоссе, 16А, стр.3, тел/факс: +7 (495) 797 35 00, +7 (495) 287 89 05• HP Belarus: ИООО «Хьюлетт-Паккард Бел», 220030, Беларусь, г. Минск, ул.

Интернациональная, 36-1, офис 722-723, тел.: +375 (17) 392 28 18, факс: +375 (17)392 28 21

• HP Kazakhstan: ТОО «Хьюлетт-Паккард (К), 050040, Казахстан, г. Алматы, Бостандыкскийрайон, ул. Тимирязева, 28В, 1 этаж, тел./факс: +7 (727) 355 35 50, +7 (727) 355 3551

Local Representative information Kazakh:• HP Kazakhstan: ЖШС «Хьюлетт-Паккард (К)», Қазақстан, Алматы қ., Бостандық ауданы,

Тимирязев к-сі, 28В, тел./факс: +7 (727) 355 35 50, +7 (727) 355 35 51Manufacturing date:The manufacturing date is defined by the serial number.CCSYWWZZZZ (HP serial number format for this product)Valid date formats include:• YWW, where Y indicates the year counting from within each new decade, with 2000 as the

starting point; for example, 238: 2 for 2002 and 38 for the week of September 9. In addition,2010 is indicated by 0, 2011 by 1, 2012 by 2, 2013 by 3, and so forth.

• YYWW, where YY indicates the year, using a base year of 2000; for example, 0238: 02for 2002 and 38 for the week of September 9.

Turkey RoHS material content declarationTürkiye Cumhuriyeti: EEE Yönetmeliğine Uygundur

Ukraine RoHS material content declarationОбладнання відповідає вимогам Технічного регламенту щодо обмеження використання деякихнебезпечних речовин в електричному та електронному обладнанні, затвердженого постановоюКабінету Міністрів України від 3 грудня 2008 № 1057

Warranty information

HP ProLiant and X86 Servers and Optionshttp://www.hp.com/support/ProLiantServers-Warranties

Belarus Kazakhstan Russia marking 151

http://www.hp.com/support/Safety-Compliance-EnterpriseProducts

http://www.hp.com/support/Safety-Compliance-EnterpriseProducts

http://www.hp.com/support/ProLiantServers-Warranties

HP Enterprise Servershttp://www.hp.com/support/EnterpriseServers-Warranties

HP Storage Productshttp://www.hp.com/support/Storage-Warranties

HP Networking Productshttp://www.hp.com/support/Networking-Warranties

152 Regulatory information

http://www.hp.com/support/EnterpriseServers-Warranties

http://www.hp.com/support/Storage-Warranties

http://www.hp.com/support/Networking-Warranties

Index

AAD authentication, 34AD domain

adding the StoreOnce device, 35adding users and groups, 36configuring CIFS server, 34managing shares, 39

AD domain, leaving, 42administration

housekeeping page, 105appliance page

replication, 52authentication

CIFS server, 31

Bbackup fails, 128

mapping deleted, 71bandwidth limiting, 59, 86bandwitdh limiting windows

catalyst, 86barcode, 24barcode characters, 19Belarus Kazakhstan Russia EAC marking, 151blackout windows, 60, 85

catalyst, 85housekeeping, 108

browser buttons not displayed, 9

Ccartridges

creating, 25editing max size, 27moving/unloading, 27removing, 25removing all, 26write protecting, 26

Catalyst, 80benefits, 81features, 80terminology, 81

Catalyst Bandwidth Limiting Windows tab, 86Catalyst Blackout Windows tab, 85Catalyst Clients tab, 84Catalyst Settings tab, 83Catalyst status tab, 82Catalyst Store Details tab, 88Catalyst stores, 87Catalyst Stores Data Jobs tab, 92Catalyst Stores Inbound Copy Jobs tab, 99Catalyst Stores Item Summary tab, 90Catalyst Stores Outbound Copy Jobs tab, 95Catalyst Stores Permissions tab, 90CIFS server

authentication, 30

configuring, 30CIFS server page, 30CIFS share

connecting to, 31creating, 45

CIFS sharestimeout problems, 127

CLIrunning commands, 12

cli see web management interfaceCLI login, 126collect data, 121collects logs, 122command line interface, 12configuration

SNMP, 132troubleshoot, 129

configureemail, 118

configuringsupport ticket, 120

connect toCIFS share, 31, 43

connecting from backup systemtroubleshoot, 127

contacting HP, 138conventions

document, 139text symbols, 139

createcartridge, 25CIFS share, 45device, 19NFS share, 47store, 89

creation time, 18customer self repair, 139

DD2DBS Generic Library, 21deduplication, 18delete

cartridge, 25device, 21store, 90

delete allcartridge, 26

delete support ticket, 123device configuration, 114devices

create new, 19delete, 21edit details, 20

devices page, 16, 30Devices tab

deleting cartridges on, 26

153

documentconventions, 139related information, 138

documentationHP website, 138

download support ticket, 122drive emulation , 18drives

defining number of, 18

EEAC marking

Belarus Kazakhstan Russia, 151edit

device details, 20slot mappings name, 64store details, 90

edit NAS share, 44email

configuration, 118email events, 119

configuration, 120test, 119

email settings, 118EML-E series Library, 21emulation type, 18emulations see library emulation typesencryption

Data at Rest, 12Data in Flight, 12

ESL-E series Library, 21EuroAsian Economic Commission (EAC), 151event history

replication, 60events

email notification, 119, 120events log, 124

Ffirewalls

with replication, 58flexible emulation, 22

Ggeneral settings

replication, 58GUI see web management interface

Hhelp

obtaining, 138housekeeping

blackout windows, 108housekeeping graph, 107housekeeping page, 105HP

Subscriber's choice web site, 138technical support, 138

IIBM-TS3500, 21Interface Information tab, 22iSCSI

initiator name, 19

Llast written, cartridges, 24leave AD domain, 42library emulation types

D2DBS Generic, 21EML E Series, 21ESL E Series, 21IBM-TS3500, 21MSL G3 Series (2x24), 21MSL G3 Series (4x48), 22MSL G3 Series (8x96), 22

licensing, 12demo, 127

local settingsreplication, 57

location, cartridges, 24login, 9

Mmapping deleted

backup fails, 71max size, cartridges, 24maximum jobs

replication, setting, 58media changer port

defining number of, 18MIBs, 132modify support ticket, 120move cartridge, 27MSL G3 series (2x24) Library, 21MSL G3 series (4x48) Library, 22MSL G3 series (8x96) Library, 22multiple users, 127

NNAS

CIFS server page, 30NFS server page, 42shares page, 43

NAS shareediting, 44

NAS share mappingsreplication, 70

networktroubleshooting, 129

Network Path, 31, 44, 46, 48NFS server

specifying NFS hosts, 42NFS server page, 42NFS share

connecting to, 43creating, 47

nfs share

154 Index

state handle error, 128

Oonline help

navigating, 10out of sync settings, 58

Ppassword

default, 9passwords, 114pause catalyst jobs, 86pause housekeeping, 108pause replication jobs, 60performance

troubleshoot, 129permissions

source appliance, 56

Rrecovery

replication, 67, 76recovery wizard

reverse replication, 68, 76regulatory information, 151

Turkey RoHS material content declaration, 151Ukraine RoHS material content declaration, 151

related documentation, 138replication

and firewalls, 58appliance page, 52blackout windows, 60event history, 60general settings, 58local appliance, 57NAS mappings page, 70pause jobs, 60recovering source, 67, 76status page, 52virtual tape mappings page, 61

replication fails, 128replication ports, 58replication recovery

over WAN, 79using wizard, 68, 76

replication wizard, 64reporting

storage space usage, 113reporting page, 111restore

replication, 67, 76

Ssearching

replication event history, 61Secure Erase, 12security features, 12share mapping

remove, 71

share synchronizationlogging progress, 58

shares page, 43slot mappings

edit name, 64slots

defining number of, 18SNMP

configuration, 132MIBs, 132

software update, 131source appliance permissions, 56status

reporting page, 111system activity, 110

status pagereplication, 52

storage space usage report, 113StoreOnce Backup system

logging on to CLI, 12logging on to GUI, 9

StoreOnce Catalyst see CatalystStoreOnce catalyst

pause jobs, 86Storeonce catalyst

blackout windows, 85stores

create new, 89delete, 90edit details, 90

Subscriber's choice, HP, 138support ticket, 120, 126

collects logs, 122data collection, 121delete, 123download, 122modify, 120

symbols in text, 139system activity page, 110

Ttarget libraries

making visible, 28technical support, 138

HP, 138test

email notification, 119text symbols, 139troubleshoot

backup or replication, 128browser buttons missing, 9configuration, 129connecting from backup system, 127network, 129perfromance, 129

Turkey RoHS material content declaration, 151typographic conventions, 139

155

UUkraine RoHS material content declaration, 151Ultrium VT, 21unload cartridge, 27upgrade licenses, 129used size, cartridges, 24user management, 114

Vvirtual tape devices

devices page, 16, 30virtual tape mappings

replication, 61visible target libraries, 28VLAN, 44

Wwarranty information

HP Enterprise servers, 151HP Networking products, 151HP ProLiant and X86 Servers and Options, 151HP Storage products, 151

web management interface, 9web sites

HP Subscriber's choice, 138websites, 138

customer self repair, 139product manuals, 138

write protect, cartridges, 24

156 Index

tc458-96025 storeonce vsa user guide

Documents

hp products

hp shallnot

hp storeonce vsa backup

thehp storeonce backup

storeonce cli

commercialcomputer software

confidential computer

user guide