Netbackup and firewall and SSH support ?

[jvang]

Does Veritas Netbackup support the following;

1) Backup remote hosts with tape drive through firewall ?

2) Backup remote hosts without tape drive through firewall ?
(i.e. pull data back through the firewall)

3) Backup remote hosts with tape drive over SSH ?

4) Backup remote hosts without tape drive over SSH ?
(ie. pull data back through SSH)

Cheers, Jack...

 

[msleeper]

I can tell you what we do for Question #2:
I don't know what OS you're using but we use vnetd on the server and define a set of ports for it to use. The client only has to open two ports (tcp inbound) 13782 & 13783 (assuming you're running a firewall on your client, if not you don't need to open any ports).
For example, on our master server we open the following ports defined under Host Properties > Master Server > Port Ranges:
Client Reserved Port Window: 512 - 1023
Server Port Window: 10000 - 12000
Server Reserved Port Window: 900 - 950

When you add a new client to a policy you also have to enter it in Host Properties > Client Attributes. After you enter a new client into this list you have to check the 'Vnetd port' box under BPCD Connect-back.

It took me quite a while to get all of this down but Veritas does have a few white papers on it. I could probably find the info again if you're having problems.

I've never heard of any way of backing a client up over ssh. That'd be cool, but the encryption would slow things down a lot.

Carpe Queso (Seize the Cheese),
Mark Sleeper

 

[lenski]

One of the things you should think about is that your network might be able to manage the amount of data, but can your firewall? We don't backup through the firewall for that reason it would kill it dead.