Open the required ports between all components, including the NAS. The
PowerProtect Data Manager Security Configuration Guide provides more information and instructions.
For example, Windows file servers require an outbound rule to allow traffic on ports 139 and 445. Modify the firewall to open these ports.
NAS protection engines require time synchronization with
PowerProtect Data Manager for deployment and operation. Configure an NTP server. In the time configuration options for each ESXi server, enable the NTP client and ensure that the NTP service is running.
The following prerequisites apply for Isilon/PowerScale appliances:
The
Isilon OneFS Web Administration Guide and
Isilon OneFS CLI Administration Guide provide more information and instructions, where not otherwise indicated here.
Create a NAS protection user in the System access zone with both of the following roles:
BackupAdmin and
SystemAdmin.
The NAS protection user needs read/write Windows ACL NTFS and share permissions.
Supply the NAS protection user credentials as the management credentials when you add the NAS appliance, when you add CIFS shares to a protection policy, and when you set asset level credentials.
Some required paths are not shared by default. Add the
NAS protection engine and
PowerProtect Data Manager by hostname, FQDN, or IP address as clients, root clients, and read/write clients to the NFS export.
For NFS shares, add clients to the exports for other shares, as required.
Files with restricted permissions provides more information.
For NFS shares, change the global settings to enable NFS export services. Enable NFSv3 or NFSv4, as required.
For SMB shares, configure the following settings in the PowerScale UI SMB server settings area:
A trial license is provided with the
PowerProtect Data Manager software. Contact
Customer Support for assistance with a permanent
PowerProtect Data Manager license.
When signing occurs during certificate exchange between
PowerProtect Data Manager and NAS asset sources, if you have specified a hostname or fully qualified domain name (FQDN) with an underscore (_), then communication happens by IP address, as provided during registration.
Before you add a 9.3 or earlier versions of Isilon/PowerScale appliance, enable basic authentication through the appliance console. To enable run the following command in the Isilon/PowerScale console.
isi_gconfig -t web-config auth_basic=true
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\