vRanger 7.8 - Integration Guide for EMC Data Domain Boost (DD Boost)

Data Domain system administration

Administering Data Domain and DD Boost

This topic discusses the following subtopics:

•	Restricting export permissions to DD Boost

•	Modifying an interface group

•	Removing advanced load balancing and link failover configuration

•	Setting network timeouts

Restricting export permissions to DD Boost

Restricting export permissions to DD Boost

By default, the DD Boost service is accessible to all backup server clients. By default, an asterisk (*) wildcard is used. To restrict access to a certain set of backup servers, remove the wildcard from the list and add individual clients to specify only those backup servers.

The list of backup-server clients can contain both FQDNs or short names. The FQDN of the backup host must be correctly configured for reverse lookup in DNS.

To delete all clients from the DD Boost clients list, enter:

# ddboost clients delete client-list

Optionally, to delete all clients previously added and reset the DD Boost clients list, enter:

# ddboost client reset

Clients can be added as both FQDNs and short names. To add clients to the DD Boost clients list, enter:

# ddboost clients add client-list [encryption-strength {medium | high} authentication-mode {one-way | two-way | anonymous}]

Example:

# ddboost clients add ddboost-dl.emc.com ddboost-dlddboost-dl.emc.com : Addedddboost-dl : Added

To view the DD Boost clients list, enter:

# ddboost clients show config

Client Encryption Strength Authentication Mode

----------------------- ------------------- -------------------

* none none

*.corp.emc.com medium anonymous

rtp-ost-ms02.domain high anonymous

rtp-ost-ms02.domain.com high anonymous

Notes:

•	Disabling DD Boost disables data access to all backup servers.

•	Administrators need to ensure that no backup jobs are running to the Data Domain system during these operations.

•	An FQDN, an IP address, or a DNS resolvable name of the client must be specified during the modification of the client access list.

Modifying an interface group

After the interface group is set up, you can add or delete interfaces from the group. The following example shows how to remove an interface from the configured interface group on the EMC® Data Domain® system.

Make sure that no jobs are active from vRanger to the Data Domain system on the interface that you want to remove from the group. You can complete this step from the Data Domain system by checking the status of existing connections in the interface group by entering the following command:

# ddboost show connections

Sample Output:

Client Connections:

Max Client Connections: 149

ifgroup status: Enabled

Interface ifgroup ------------- Connections ------------

member Backup Restore Control * Total

---------------- ------ ------ ------- ------- ------

192.168.54.138 yes 15 0 2 17

192.168.52.192 yes 15 0 3 18

192.168.55.206 yes 16 0 3 19

---------------- ------ ------ ------- ------- ------

Total Connections 46 0 8 54

* Control connections for file-replication, file operations

Remove the interface from the group on Data Domain system:

# ddboost ifgroup del default interface 192.168.1.3

After this step, the interface 192.168.1.3 is released from the group and is no longer used by the DD Boost Storage Server for any jobs from the backup servers.

 

NOTE: Removing the interface registered with vRanger makes the Data Domain system inaccessible to the backup servers. The configuration of the ifgroup on the Data Domain system is not deleted.

To change the interface that is added to the interface group on the Data Domain system at the network layer, remove the interface from the group and add it back.

If you use the net command to change the interface, such as enabling an interface that is configured for ifgroup, run the ddboost show connections command to update the load balancing view. This updating allows the ifgroup to use the interface. For more information about the ddboost show connections command, see Show connections.

Removing advanced load balancing and link failover configuration

The following example illustrates removing a configured interface group on the EMC® Data Domain® system.

1	Make sure that no jobs are active from vRanger to the Data Domain system.

You can complete this step from the Data Domain system by checking the status of existing connections in the interface group with the following command:

# ddboost ifgroup show connections

2	Ensure that there are no pending jobs from any of the connected backup servers to this system.

3	Disable the feature on the Data Domain system:

# ddboost ifgroup disable

4	Reset the interface group:

# ddboost ifgroup reset

All the interfaces are released from the group. However, backup servers can still access the DD Boost storage server on the Data Domain system on the interface registered with vRanger. In the preceding example, the Data Domain system is still registered with vRanger using 192.168.1.1.