Page 1 SnapServer Overland ® Storage Administrator’s Guide For Appliances Running GuardianOS ® Version 7.6 August 2014 10400589-001...
Page 2 Overland Storage. Overland Storage provides this manual as is, without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Overland Storage may make improvements or changes in the product(s) or programs described in this manual at any time.
Page 3 • The GuardianOS 7.6 Web Management Interface • SnapServer Manager (SSM) • CA Antivirus software GuardianOS version 7.6 comes preinstalled on all new SnapServer appliances. It can also be upgraded from a previously installed version of GuardianOS version 7.5 or later. Product Documentation & Software Updates SnapServer product documentation and additional literature are available online, along with the latest release of the GuardianOS version 7.6.
Page 4 SnapServer/GuardianOS 7.6 Administrator’s Guide Preface Japanese Voluntary Control Council for Interference (VCCI) Conventions This document exercises several alerts and typographical conventions. Convention Description & Usage WARNING A Warning contains information concerning personal safety. Failure to follow directions in the Warning could result in bodily harm or death.
Page 5: Table Of Contents
Connecting for the First Time .............................16 Connect Using the Server Name ........................16 Connect Using SSM ...............................17 Setup a New SnapServer (via Wizard) ........................18 Step 1 – Enter General Configuration Settings ....................19 Step 2 – TCP/IP Configuration ..........................20 Step 3 – RAID Type Selection (DynamicRAID/Traditional RAID) ..............20 Step 4 –...
Page 6 Supported Network Manager Applications and MIBs ..................77 Configure SNMP ..............................77 Web Access .................................78 Configuring HTTP/HTTPS ............................79 Using Web Root to Configure the SnapServer as a Simple Web Server ............79 iSNS Configuration ..............................82 Chapter 5: DynamicRAID Storage Storage Pools ................................84 Storage Pool Creation ............................85 Storage Pool Properties ............................90...
Page 7 Schedule Snapshots ............................139 Snapshot Space ..............................140 Snapshot Properties ............................142 iSCSI Disks ...................................145 Configuring iSCSI Initiators ..........................146 iSCSI Configuration on the SnapServer ......................146 Create iSCSI Disks ..............................149 Edit an iSCSI Disk ..............................152 Delete an iSCSI Disk ............................153 Configuring VSS/VDS for iSCSI Disks ........................153 Disks ....................................156...
Page 8 Event Log ...................................219 Filter the Log ................................220 Tape ...................................220 Chapter 10: Maintenance Shutdown and Restart ..............................223 Manually Powering SnapServer On and Off ....................223 Factory Defaults ................................224 Disaster Recovery ..............................225 Backing Up Server and Volume Settings ......................226 SnapDRImage File and Volume-Specific Files ....................226 System Settings Recovery ..........................227...
Page 9 Scheduling a Scan Job ............................264 Signature Updates ..............................265 Updating SnapServers with Internet Access ....................265 Updating a SnapServer without Internet Access ....................266 Distributing Updates from One SnapServer to Another ..................266 Verifying Download Events ..........................267 Alert Options ................................268 Move Directory .................................268 Log View ..................................269 10400589-001 ...
Page 10 Scheduling Jobs in Snap EDR ..........................272 Backup via SMB, AFP, or NFS ...........................272 Off-the-Shelf Backup Solutions ..........................272 iSCSI Disk Backups ..............................272 Using Backup Exec for VSS-based Snapshots of SnapServer iSCSI Disks ............272 Appendix B: Security and Access Security Model Rules ..............................274 Security Model Directories ............................275 Security Model Management ..........................276...
Page 11 SnapServer/GuardianOS 7.6 Administrator’s Guide Contents Miscellaneous Issues ..............................293 Phone Home Support ...............................294 Appendix E: GuardianOS Ports Appendix F: Command Line Interface SnapCLI Syntax ................................299 SnapCLI Procedures ............................301 SnapCLI Commands ..............................301 Scripts in SnapCLI ..............................307 Running a SnapCLI Script ...........................307 Sample Script ...............................308 Master Glossary &...
Page 12: Chapter 1: Overview
Overview Chapter 1 SnapServer appliances are designed as flexible, low-maintenance network-attached storage (NAS) file servers optimized for performance and efficiency. They run GuardianOS (GOS), an operating system built to maximize file I/O throughput across multi-network protocols. To this end, all unnecessary system control and processing functions that are associated with a general-purpose server have been removed.
Page 13 SnapServer / GuardianOS 7.6 Administrator’s Guide 1 - Overview Feature Specification Network File Protocols • Microsoft Networking (CIFS/SMB1/SMB2) • Unix Network Filesystem (NFS) 2.0/3.0/4.0 • Apple Filing Protocol (AFP) v2.0/v3.1/3.2* • Hypertext Transfer Protocol (HTTP/HTTPS) • File Transport Protocol (FTP/explicit FTPS such as FTPES or Auth TLS) * AFP v 3.2 ACLs and extended attributes not supported.
Page 14: What's New In Guardianos 7.6
SnapServer (XSD 40). Using SnapServer Manager with SnapServer SnapServer Manager (SSM) is a Java-based application that runs on all major client systems. SSM provides a single screen from which administrators can discover all SnapServer servers, REO appliances, SnapSAN arrays, SnapScale clusters, and SnapScale Uninitialized nodes (that is, nodes that are not part of a SnapScale cluster) on their network.
Page 15: Snapserver Manager Installation
Group Server List Status Bar SnapServer Manager Installation You can download and install SSM by navigating to the Overland Storage NAS website and downloading the SnapServer Manager executable file. SSM can be installed to several client platforms, including Windows, Mac OS X, and Linux.
Page 16: Chapter 2: Initial Setup And Configuration
This section covers the initial setup and configuration of a SnapServer appliance running GuardianOS 7.6. NOTE: For information concerning the installation and wiring of your SnapServer hardware, refer to the appropriate Quick Start Guide for your product. Topics in Setup and Configuration: •...
Page 17: Connect Using Ssm
SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 4. In the login dialog box, enter as the user name and as the password (the admin admin system defaults), then click Login. 5. Complete the Initial Setup Wizard to setup your server.
Page 18: Setup A New Snapserver (Via Wizard)
2 - Initial Setup and Configuration Setup a New SnapServer (via Wizard) On a new SnapServer, once you log in to the Web Management Interface, the Initial Setup Wizard runs displaying the Welcome page: The Initial Setup Wizard consists of several steps: Step 1 –...
Page 19: Step 1 - Enter General Configuration Settings
Clicking Next on the Welcome page displays the General Information page of the wizard. This page allows you to change the basic information for the SnapServer. It is highly recommended for security that you set your Administrator password to something other than the default setting.
Page 20: Step 2 - Tcp/Ip Configuration
2 - Initial Setup and Configuration Step 2 – TCP/IP Configuration The next wizard page shows the current TCP/IP information for this SnapServer. All SnapServers come preset to acquire an IP address from a DHCP server. 1. If you wish to assign a static IP instead of using DHCP, select the radio button for a static IP address and enter the IP address and subnet mask.
Page 21 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 1. Choose either DynamicRAID or Traditional RAID. 2. After you have made your selection, click Next. You will be prompted to confirm your selection of either DynamicRAID or Traditional RAID: 3.
Page 22 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 4. Available disks are detected and shown on the Configure Storage - Detected Disks page. If SnapExpansion units are attached, their available disks are also detected and displayed: 10400589-001 ...
Page 23 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration NOTE: If you are using expansion units and DynamicRAID, the SnapServer first configures the head unit, then expansion units. For Traditional RAID, the expansion units must be configured separately via Storage >...
Page 24 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 2. Use the drop-down list to choose the size of the snapshot pool. 3. After you have made your selections, click Next. 4. At the confirmation page, click Create Storage Pool.
Page 25 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 5. When the storage pool has been successfully created on the head unit, a summary page is shown. Once the Successfully created status is shown, click Next to continue.
Page 26 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration The next head unit configuration page lets you manually configure your head unit storage by selecting the RAID type based on the installed disk drives. 1. Choose one of the following: •...
Page 27: Step 4 - Configure Expansion Units
20% of the volume's size. Step 4 – Configure Expansion Units If you are using expansion units with DynamicRAID, the SnapServer will recognize them during the setup process and you can configure storage pools on them. After the setup is complete, expansion units can be managed via Storage >...
Page 28 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 1. During the setup of a DynamicRAID system, after the head unit is configured, you are prompted to create the storage pools on the expansion units. Select the parity mode and snapshot pool size for each expansion unit.
Page 29 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration 3. Review your storage pool configuration. When you are done, click Create Storage Pools to create the storage pools on the expansion units (or Back to make changes).
Page 30: Step 5 - Setup Completion
SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration Step 5 – Setup Completion Once the head unit and all the DynamicRAID expansion units are configured, the Complete page is shown: 1. Click OK to finish the setup process.
Page 31: Step 6 - Registration Page
NOTE: Because technical and warranty service are not available until your appliance is registered, it is recommended that you do so at this time. Registration is quick and easy. Click the Click Here link to launch the Overland Storage Support website and register online. 1. At the Site Login, enter your e-mail address and password, and click GO.
Page 32: Step 7 - Scheduling Data Protection Tasks
SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration Once registration is complete, click Close on the Registration page to finish your setup. A reminder to configure your Email Notification page is displayed: Click the link to go to Maintenance > Tools > Email Notification and complete the settings.
Page 33: Web Management Interface
Solutions. Web Management Interface SnapServer appliances use a web-based graphical user interface (GUI), called the Web Management Interface, to administer and monitor the server. It supports most common web browsers. JavaScript must be enabled in the browser for it to work.
Page 34 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration When connecting to the server with a web browser, the Home page of the Web Management Interface is displayed. This page shows any shares at the top, three options below the shares list, and has special navigation buttons displayed on the right side of the title bar (see the next table).
Page 35 SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration Icons & Options Description Snap Finder – Click this icon to view a list of all SnapServers, SnapScale clusters, and Uninitialized nodes on your network, and to specify a list of remote servers that can access these servers, clusters, and nodes on other subnets.
Page 36: Alert Messages
SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration Alert Messages Alert messages are displayed on Administrator-level Web Management Interface pages that display a menu. Some alerts have clickable options: • [Later] - Hides the alert for 24 hours or until after feature is run, whichever is first.
Page 37: Contact, Hardware & Software Information
SnapServer / GuardianOS 7.6 Administrator’s Guide 2 - Initial Setup and Configuration Contact, Hardware & Software Information From the Web Management Interface, click the SnapServer logo in the upper left corner of the Web Management Interface to display the pertinent hardware, software, and contact information: Scroll down to view additional contact information.
Page 38: Chapter 3: Snapserver Settings
SnapServer Settings Chapter 3 This section covers the configuration options for a SnapServer appliance. The five options for server settings are found under the Server tab. They can also be accessed using the site map icon ( Topics in Server Settings: •...
Page 39: Server Name
(–) between characters, but spaces are not allowed. NOTE: The server number can be found on the Monitor > System Status page or by clicking the SnapServer logo at the upper left of the Web Management Interface. Server Comment Optionally, add a comment specific to the server (for example, the server location).
Page 40: Date/Time
SnapServer / GuardianOS 7.6 Administrator’s Guide 3 - SnapServer Settings Date/Time Use this page to configure date and time settings in ISO 8601 formatting. You can set the server date and time manually, or have it set automatically via NTP or Windows Active Directory domain membership.
Page 41: Secure Shell
In some cases, this change may require you to log back in to the Web Management Interface when done. 2. To use this SnapServer as an NTP server, check the enable box. 3. From the drop-down list, select the time zone.
Page 42: Disable Ssh
SnapServer / GuardianOS 7.6 Administrator’s Guide 3 - SnapServer Settings Disable SSH SSH is enabled by default. To disable SSH, at the SSH page, uncheck the Enable SSH box and click OK. Connect to the CLI using SSH 1. Verify that your remote machine has an SSH client application installed.
Page 43: Ups Protection
UPS devices. NOTE: Select a UPS capable of providing power to a SnapServer for at least ten minutes. In addition, in order to allow the server sufficient time to shut down cleanly, the UPS must be configured to provide power for at least five minutes after entering a low battery condition.
Page 44 SnapServer / GuardianOS 7.6 Administrator’s Guide 3 - SnapServer Settings 5. Enter the UPS Device data in the appropriate fields: Option Description Enable UPS Support Check the Enable UPS Support box to enable; leave the box blank to disable UPS support.
Page 45 SnapServer / GuardianOS 7.6 Administrator’s Guide 3 - SnapServer Settings 6. Click OK. The system activates the UPS connection. Allow a few minutes for the system to update and show the Online status. 10400589-001  ©2008-14 Overland Storage, Inc.
Page 46: Printing
A list of currently defined USB printers is displayed. 5. To add the new printer, click Add Local Printer. 6. The SnapServer will detect the new printer and show it as an option in the Local Printer Device drop-down list. Select that printer.
Page 47: Procedure To Configure The Client
Add a printer using your usual method. If you are using SMB, you will need to know the SnapServer name. If you are using IPP, you will need to enter the IP address in the Type field and the printer and sharename in the Queue field.
Page 48: To Delete A Printer
When you remove a printer, remember to remove its information from both the Web Management Interface and the client machines. 1. Disconnect the printer cable from the SnapServer. 2. In the Web Management Interface, navigate to Server > Printing. In the list of printers, the status of the printer you just removed appears as Offline.
Page 49: Chapter 4: Network Settings
SnapServers are preconfigured to use DHCP to autonegotiate network settings and to allow access to the server for Windows (CIFS/SMB1/SMB2), Unix (NFS), Mac (AFP), FTP/FTPS, and HTTP/HTTPS clients. Network bonding options allow you to configure the SnapServer for load balancing and failover. Network protocols control which network clients can access the server.
Page 50: Network Information
IMPORTANT: The default settings enable access to the SnapServer via all protocols supported by the SnapServer. As a security measure, disable any protocols not in use. For example, if no Mac or FTP clients need access to the SnapServer, disable these protocols in the Web Management Interface.
Page 51 SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings Ethernet Interface Information Primary WINS Server The Windows Internet Naming Service server which locates network resources in a TCP/IP-based Windows network by automatically configuring and maintaining the name and IP address mapping tables.
Page 52: Tcp/Ip Networking
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings TCP/IP Networking SnapServers ship with one or more Gigabit Ethernet (GbE) ports. The information about those ports is displayed on the primary TCP/IP Networking page: The following table for the TCP/IP Networking page describes the port information:...
Page 53 SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings Column Description Bond Type NOTE: If you have more than two ports, you can have a mixture of standalone and bonded ports. For example, on a 4-port system, one port can be a standalone and the other three ports can be bonded into a load balanced configuration.
Page 54: Configuring Port Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings Configuring Port Properties To configure the TCP/IP properties of a specific port or bond, click the name in the table on the TCP/IP Networking page. A TCP/IP Port Properties page displays the configuration options for the Ethernet port selected.
Page 55: Tcp/Ip Configuration Considerations
NOTE: Auto is the only allowable setting for a Gigabit port. Fixed Speed Using the drop-down list, the SnapServer may also be set to & Duplex one of five fixed speed (Mbps)/duplex settings: • 10 Half Duplex • 10 Full Duplex •...
Page 56 IMPORTANT: If you change the switch setting before you change the setting in the Web Management Interface, the SnapServer may not connect to the network. The Link LED on the SnapServer front panel will be off or amber if the server is not connected to the network. 10400589-001 ...
Page 57: Creating A Bond
4 - Network Settings Creating a Bond On a SnapServer with two or more Ethernet ports, a network bond can be created: 1. At the TCP/IP Networking page, click Create Bond. 2. Using the Bond Type drop-down list, select a bonding type: •...
Page 58 SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings The TCP/IP Networking page is displayed showing the bond details: 5. Click OK to save the changes. The changes made require restarting the server's network. Restarting the CAUTION: server's network will disconnect all connected clients.
Page 59: Deleting A Bond
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings Deleting a Bond On a SnapServer with an existing bond, the bond can be deleted as follows: 1. At the TCP/IP Networking page, click the bond name in the table to view the properties page.
Page 60: Windows/Smb Networking
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings 4. At the confirmation page, click Save Changes. IMPORTANT: You must reconfigure the network switch accordingly if removing Switch Trunking or Link Aggregation (802.3ad). Windows/SMB Networking Windows SMB and security settings are configured on the Network > Windows/SMB page of the Web Management Interface.
Page 61: Support For Windows/Smb Networking
NTP server. NTP is not supported in Active Directory. Support for Windows/SMB Networking The default settings make the SnapServer available to SMB clients in the workgroup named Workgroup. Opportunistic locking is enabled, as is participation in master browser elections. Consider the following when configuring access for your Windows networking clients.
Page 62: Support For Windows Network Authentication
(2) NTP cannot be enabled when joined to an ADS domain. Interoperability with Active Directory Authentication The SnapServer supports the Microsoft Windows family of servers that run in ADS mode. Any SnapServer can join Active Directory domains as a member server. References to the SnapServer shares can be added to organizational units (OU) as shared folder objects.
Page 63: Configure Windows/Smb Networking
Guest Account Access to the SnapServer The Network > Windows/SMB page in the Web Management Interface contains an option that allows unknown users to access the SnapServer using the guest account. Configure Windows/SMB Networking Windows SMB and security settings are configured from this page. The server can be configured as part of a Workgroup or an Active Directory Domain.
Page 64 Clear the box to disable this feature. Enable this Server as Enabled by default. The SnapServer can maintain the master list the Master Browser of all computers belonging to a specific workgroup. (At least one Master Browser must be active per workgroup.) Check the box if...
Page 65 Clear the box to disable this feature. Enable this Server as Enabled by default. The SnapServer can maintain the master list the Master Browser of all computers belonging to a specific workgroup. (At least one Master Browser must be active per workgroup.) Check the box if...
Page 66: Apple Networking (Afp)
The default settings provide access to AFP clients over a TCP/IP network. Mac clients connecting over AFP can log in to the server either as local users on the SnapServer or as Active Directory domain users (if the server belongs to a domain). For more granular control over client access for Mac users who do not belong to a recognized Windows domain, create local user accounts.
Page 67: Afp Configuration Considerations
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings NOTE: Mac OS X users can also connect to the SnapServer using Windows networking (SMB). AFP Configuration Considerations Consider the following when configuring access for your AFP clients. Some SnapServer terms may cause confusion for those familiar with Apple terminology:...
Page 68: Nfs Access
By default, users are authenticated against the domain first, then against the local database, so if the same user name exists on both the domain and the SnapServer, the domain user will take precedence. To force an AFP client to log in as either user, prefix the user name with either the Windows domain name or the SnapServer servername.
Page 69: Assigning Share Access To Nfs Users
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings NFS client access to shares can be specified by navigating to the Security > Shares page and clicking the NFS Access link next to the share. To ensure proper Unicode representation on...
Page 70 • You must create the NFS and host service entries in the keytab with the fully qualified domain name of the SnapServer. • The SnapServer assumes the domain name from the primary Ethernet interface. For more information, see TCP/IP Networking...
Page 71: Ldap/Nis
This file can have any name the administrator wishes to give it. If you do not have a keytab file for the SnapServer: • Create a host and NFS principle for the SnapServer on the KDC. • Generate a keytab file.
Page 72: Ldap Vs. Nis Overview
The SnapServer can join an NIS domain and function as an NIS client. It can then read the users and groups maintained by the NIS domain to translate user/group names to UIDs/GIDs for configuration of quotas, ID mapping, and home directories.
Page 73: Configuring Nis
Assignments Chapter NIS uniquely identifies users by UID, not user name, and although it is possible to have duplicate user names, Overland Storage does not support that configuration. To configure NIS on your SnapServer: 1. Go to Network > LDAP/NIS.
Page 74: Ftp/Ftps Access
SnapServer guest user account and AllUsers group account. You can set share access and file access for anonymous FTP users by modifying permissions for these accounts. For more granular control over FTP access, you must create local user accounts for FTP users.
Page 75: To Connect Via Ftp/Ftps
When you allow anonymous login, FTP/FTPS users employ an email Access address as the password. When you disallow anonymous login, only FTP/FTPS users who are configured as local SnapServer users can access the server. • Check the box to allow users to connect to the server using the anonymous user account.
Page 76: Snmp Configuration
Default Traps A trap is a signal from the SnapServer informing an SNMP manager program that an event has occurred. SnapServer supports the default traps shown in this table: Trap Initiating Action the server boots.
Page 77: Supported Network Manager Applications And Mibs
Resources MIB (RFC 2790 or 1514). You can use any network manager application that adheres to the SNMP V2 protocol with the SnapServer. The following products have been successfully tested with SnapServers: CA Unicenter TNg, HP Open View, and Tivoli NetView.
Page 78: Web Access
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings Option Description Location Optionally enter information that helps a user identify the physical location of the server. For example, you might include a street address for a small business, a room location such as Floor 37, Room 308, or a position in a rack, such as rack slot 12.
Page 79: Configuring Http/Https
Using Web Root to Configure the SnapServer as a Simple Web Server When you enable the Web Root feature from the Web page, you can configure your SnapServer to open automatically to an HTML page of your choice when a user enters the following in the...
Page 80 SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings NOTE: SnapServer supports direct read-only web access to files. It is not intended for use as an all-purpose Web Server, as it does not support PERL or Java scripting, animations, streaming video, or anything that would require a special application or service running on the SnapServer.
Page 81 Accessing the Web Management Interface when Web Root is Enabled By default, when you connect to a SnapServer with Web Root enabled, the browser loads the user-defined HTML page or present a directory listing of the Web Root. To access the Web...
Page 82: Isns Configuration
SnapServer / GuardianOS 7.6 Administrator’s Guide 4 - Network Settings iSNS Configuration Microsoft iSNS Server can be used for the discovery of SnapServer iSCSI targets on an iSCSI network. To configure the iSNS settings: 1. If not already installed, install the iSNS service on a Windows server.
Page 83: Chapter 5: Dynamicraid Storage
DynamicRAID Storage Chapter 5 This chapter covers the key options of a DynamicRAID configuration used to manage your SnapServer storage pools and volumes with maximum flexibility. To determine which RAID configuration is appropriate for your needs, see the Should I use...
Page 84: Storage Pools
5 - DynamicRAID Storage Storage Pools If you selected the DynamicRAID option during the initial setup of your SnapServer, the wizard created a separate storage pool on the head unit and on each attached expansion unit. When you navigate to Storage > Storage Pools, an overview of all configured storage pools is shown.
Page 85: Storage Pool Creation
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage The example below demonstrates the notification of both a disk that has previously been used in a different system and an incompatible drive. Storage Pool Creation Storage pools can be created on head and expansion units that do not yet have pools, one pool per unit, with each pool completely contained within the unit.
Page 86 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage Option Description Parity Mode Based on the total number of disks that are available for a storage pool, you can set the parity mode of the storage pool: • 1 disk drive – No parity available.
Page 87 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage 1. At the Storage Pools page (Storage > Storage Pools), click No Storage Pool in the Status column to access the Create Storage Pool page. 2. At the Create Storage Pool page: •...
Page 88 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage 4. At the confirmation page, verify your selections and, if everything is correct, click Create Storage Pool again. NOTE: If any disk in a storage pool has previously been used in a different system, a warning appears that it will be reformatted and all data on the disk will be deleted.
Page 89 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage 5. When a storage pool has been successfully created, click OK to continue. 6. You are returned to the Storage Pools page where the Status shows a resync underway. Click Refresh now and then to see the current Status and to determine when the resync is complete.
Page 90: Storage Pool Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage IMPORTANT: The new storage pool is currently being synchronized in the background. Do not apply a heavy load to this storage pool until the synchronization operation is complete. Also, unless you are performing necessary tasks using the Web Management Interface, it is recommended to log out of the interface during synchronization to give the synchronization operation the full system resources necessary to complete as quickly as possible.
Page 91 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage When you click an expansion unit storage pool name in the Storage Pool list, the properties page for that specific expansion unit is shown: At the Storage Pool Properties page, you can edit these options:...
Page 92: View Disks From Storage Pool Properties Page
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage View Disks from Storage Pool Properties Page To view all of the disks in a storage pool, from the Storage > Storage Pools page, select a storage pool (to open the properties page).
Page 93: Storage Pool Deletion
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage Storage Pool Deletion Deleting a storage pool deletes all volumes and their data on the storage pool. The CAUTION: data cannot be recovered. Delete a Storage Pool 1. Go to the Storage > Storage Pools page.
Page 94: Parity Management
Pool page 94 Parity Management Parity is used to achieve redundancy in the SnapServer. If a drive in the array fails, remaining data on the other drives can be combined with the parity data to reconstruct the missing data. • Single Parity – Protects your data in the event of a single disk failure.
Page 95 Adding Drives. Adding new disks to a storage pool sometimes requires the SnapServer to perform multiple queued operations. During this multi-step resynchronization process, the estimated data pool size is displayed and may be different than the size currently displayed in the Data Pool Usage column.
Page 96: Volumes
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage Volumes GuardianOS supports multiple volumes in a storage pool. During the initial creation of your DynamicRAID storage pool, an initial volume was also created. To view that volume (and create other volumes if needed), navigate to Storage > Volumes. To access the Properties page for a volume, click the volume name.
Page 97 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage 2. Click Create Volume. 3. Choose the options for the new volume: • Select a storage pool name from the drop-down list. • Enter a unique volume name of 32 alphanumeric characters and spaces.
Page 98: Volume Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage Volume Properties Click the volume name to show the Volume Properties page where the volume settings are edited. Edit Volume Properties 1. Navigate to Storage > Volumes. 2. Click the volume name in the table.
Page 99: Volume Deletion
SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage You can click Create Share to go to the Create Share page under Security and start the creation process directly. Volume Deletion To delete a volume, go to the Storage > Volumes > Volume Properties page.
Page 100 SnapServer / GuardianOS 7.6 Administrator’s Guide 5 - DynamicRAID Storage Delete a Volume 1. Navigate to Storage > Volumes. 2. Click the volume name in the table to go to Volume Properties. 3. Click Delete Volume. Deleting a volume deletes all data on the volume.
Page 101: Chapter 6: Traditional Raid Storage
This chapter covers the key options of a Traditional RAID configuration. It explains how best to use the Storage Guides and manage your RAID sets, volumes, and quotas. IMPORTANT: To simplify the management of your SnapServer RAID sets, it is recommended that you use the DynamicRAID option on your server and expansion units.
Page 102: Storage Guides
• Drive utilization • The number of available drives For example, in configuring the disk drives of a four-drive SnapServer, the decision whether to include a spare in the RAID depends on the value you place on capacity vs. high availability.
Page 103: Local And Global Spares
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Features RAID 0 RAID 1 RAID 5 RAID 6 RAID 10 Data Loss Risk Highest Lowest Lower Very Low Write Access Speeds Fastest Fast Medium Slower Faster Usable Capacity...
Page 104: Raid Sets
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage RAID Sets Use the Storage > RAID Sets page to manage RAID sets and their options. From the RAID Sets main page, you can do the following: • Create RAID Sets –...
Page 105 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 2. Click the desired RAID type name or icon. The following table summarizes the advantages and disadvantages of each type of RAID: Features RAID 0 RAID 1 RAID 5...
Page 106 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 3. Place a check mark next to the disks you want to include in the RAID set. NOTE: Disks can be from the head unit or any attached expansion unit. However, creating a RAID with disks from different units increases the chance of a multiple-disk RAID failure due to communication issues that may arise between units.
Page 107 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 5. Click Next. 6. Verify your configuration, then click Next to create the RAID. A message appears confirming the successful creation of the RAID set. It details how much storage space is available. The RAID will be syncing in the background.
Page 108: Group Raid Sets
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 7. Before you can place any data on this RAID set, you must create a volume. You use the buttons on this page to choose whether you want to create the volume now or later: •...
Page 109 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 1. Select (check) the RAID sets you want to include in the group and click Next. 2. At the confirmation page, click Create RAID Group to complete the process.
Page 110 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 3. At the primary RAID Sets page, click the group name to see the details of the group. From this page you can view the status, add another RAID set of the same type to the group, or delete the entire group.
Page 111 RAID set will also become inaccessible. Depending on the cause, the RAID group may or may not be recoverable. For example, if a RAID group spans a SnapServer and an expansion unit and one of the RAIDs goes down because of a disconnected cable, the RAID group is fully recoverable by reconnecting the cable and rebooting the system.
Page 112: Change Raid Settings
To enable automatic incorporation of unassigned drives, go to the Storage > RAID Sets page and click RAID Settings. NOTE: Drives that have previously been configured for use in a different RAID set on any SnapServer are not automatically incorporated, regardless of whether automatic incorporation of unassigned drives is turned on.
Page 113: Manage Global Spares
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage • If the background disk scan is disabled, the SnapServer will still initiate a scan on a RAID if problems are detected on one of the RAID drives. • The background scan will not run on RAIDs that are degraded, syncing, or rebuilding.
Page 114: Edit Raid Set Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Edit RAID Set Properties By clicking a RAID set name on the RAID Sets main page, details of that particular RAID set are shown on a RAID Set Properties page.
Page 115 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Label Description Size The total capacity of the RAID. Unallocated The total storage space not allocated to a volume. Actions on this page can result in a loss of data. Be sure you have backed up your CAUTION: data before making changes to RAID sets.
Page 116 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Adding disks is limited based on the type of RAID it is being made a member of: • Disks cannot be added to a RAID 0. • Disks can only be added to a RAID 1 as full members.
Page 117: Volumes
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Volumes Use the Storage > Volumes page to manage the volumes that have been created on the RAID set. From this page, you can: • Create a new volume.
Page 118: Volume Creation
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Volume Creation To create a volume on a RAID set, click Create Volume on the main Volumes page. When manually creating a RAID set, at the end you can click Create Volume Now to launch the same Create Volume page.
Page 119 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 4. At the confirmation page, review the settings and click Create Volume again to start the configuration. To prevent data loss, you are cautioned if the write caching option was enabled without the required UPS online.
Page 120 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 5. At the successful volume creation page, click Create Share to provide access to this new volume. This opens the Security > Shares option page so you can create a share pointing to this new volume.
Page 121 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 6. Enter the appropriate data, select the necessary options, and then click Create Share. Click the Advanced Share Properties link to display additional options. See Shares Chapter 8 for complete details.
Page 122: Volume Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage The share is automatically created and shown in the share table. Volume Properties By clicking a volume’s name on the main Volumes page, details of that particular volume are shown on a Volume Properties page.
Page 123 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Rename a Volume On the Volume Properties page, enter the new name starting with an alphanumeric character and using up to 20 alphanumeric characters or hyphens (but not spaces). Then click OK.
Page 124 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Expand Volume Capacity A volume’s capacity can be expanded by navigating to the Storage > Volumes page and clicking the name of a volume. There are two ways to expand the size of a volume: •...
Page 125 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage By default, write caching is enabled on all volumes. For systems that do not use a UPS device to help protect data during a power outage, or for applications that require synchronous writes to disk, write cache can be disabled on a volume-by-volume basis.
Page 126: Quotas
For users and groups, there are no preassigned default quotas on the SnapServer. When quotas are enabled on the SnapServer, you can assign a default quota for all users, or allow all users to have unlimited space on the volume. Unless you assign individual user or group quotas, all users and groups will receive the default quota when it is enabled.
Page 127: Quotas Page
6 - Traditional RAID Storage In calculating usage, the SnapServer looks at all the files on the server that are owned by a particular user and adds up the file sizes. Every file is owned by the user who created the file and by the primary group to which the user belongs.
Page 128: Enable/Disable Quotas
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Enable/Disable Quotas From the Quotas default page, you can enable/disable quotas on the volume by clicking the Yes/No link in the Enabled column on the far left. When you click the link (left-most column in the Quota table), a secondary page is shown for managing the quota properties.
Page 129: Add Quotas Wizard
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage Add Quotas Wizard 1. Click the volume name link on the Quotas default page to open the quota search and configuration page for that specific volume. 2. Click Add Quota to launch the search wizard.
Page 130 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage b. Enter the search string (or select Find All). c. Click Search at the lower right. NOTE: For domains that require authentication (showing an (A) after the name), after you select the domain name, enter the User Name and Password for that domain.
Page 131: Displaying/Changing Quotas
SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 5. At the user quota properties page, select or enter the quota desired and click OK. NOTE: LDAP and NIS groups do not display the third option for a default user quota.
Page 132 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage • From the View drop-down list, choose Only assigned quotas, Only with space used, Assigned or space used, or > 95% used. 3. Enter the search string (or select Find All).
Page 133 SnapServer / GuardianOS 7.6 Administrator’s Guide 6 - Traditional RAID Storage 5. From the search results, select the name of the appropriate user, LDAP group, or NIS group from the left column to open the quotas properties page. 6. Select or enter the quota desired and click OK.
Page 134: Chapter 7: Other Storage Options
Other Storage Options Chapter 7 Once the RAID sets (either DynamicRAID or Traditional RAID) have been configured, you can configure the remaining four storage options for your SnapServer. DynamicRAID Configuration Traditional RAID Configuration For information on the DynamicRAID configuration options, see...
Page 135: Snapshots
Windows servers can create native snapshots of iSCSI disks using VSS. For more information, Configuring VSS/VDS for iSCSI Disks page 153. To manage the snapshot options using the SnapServer Web Management Interface, go to Storage > Snapshots. DynamicRAID Configuration Traditional RAID Configuration 10400589-001 ...
Page 136: Creating Snapshots
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options These options are available in the Snapshots section of the Web Management Interface: Action Procedure Create a New Snapshot Click Create Snapshot. The process involves first defining snapshot parameters and then scheduling when and how often to run the snapshot.
Page 137 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Scheduling Snapshots Snapshots should ideally be taken when your system is idle. It is recommended that snapshots be taken before a backup is performed. For example, if your backup is scheduled at 4 a.m., schedule the snapshot to be taken at 2 a.m., thereby avoiding system activity and ensuring the...
Page 138 In the Duration field, specify how long the snapshot is to be active in hours, days, weeks, or months. The SnapServer automatically deletes the snapshot after this period expires, as long as no older unexpired snapshots exist that depend on it. If any such snapshot exists, its termination date is displayed at the bottom of the page.
Page 139: Schedule Snapshots
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options If you scheduled the snapshot to run at a later time, it appears in the scheduled snapshots table under Snapshot Schedules. Accessing Snapshots After snapshots are created, they can be accessed via a snapshot share. Just as a share provides access to a portion of a live volume (or filesystem), a snapshot share provides access to the same portion of the filesystem on all current snapshots of the volume.
Page 140: Snapshot Space
Step 3: Set the backup software to archive the latest version of the snapshot. The SnapServer makes it easy to configure your backup software to automatically archive the most recent snapshot. Simply configure your backup software to copy the contents of the directory within the snapshot share you created.
Page 141 Snapshot data grows dynamically for as long as a snapshot is active and as long as there is enough space available in the snapshot space to store them. When the snapshot space approaches its capacity (at about 95 percent), the SnapServer deletes the oldest snapshot’s data to create space for more recent snapshot data.
Page 142: Snapshot Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options The following table describes minimum and maximum allocation cases. Allocate about 10% of RAID set if Allocate about 25% of RAID set if • Activity is write-light. • Activity is write-heavy.
Page 143 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Edit a Snapshot You can edit the name and duration by changing the data in the detail fields and clicking OK. Delete a Snapshot Click Delete Snapshot and then click Delete Snapshot again on the confirmation page. The snapshot is deleted and all its associated data.
Page 144 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options 3. At the displayed Snapshot Properties page, click Rollback. NOTE: If BitTorrent Sync is enabled, it will be disabled and reset to default settings. 4. At the confirmation page, click Rollback again.
Page 145: Iscsi Disks
Connectivity to the iSCSI disk is established using a software package or PCI card, known as an initiator, that must be installed on a client machine. The initiator sees the SnapServer as a “target portal” and an iSCSI disk as a “target.”...
Page 146: Configuring Iscsi Initiators
The second column in the table shows the Storage Pools for DynamicRAID systems and the Volumes for Traditional RAID systems. Before setting up iSCSI disks on your SnapServer, carefully review the information in the sections below. Basic Components of an iSCSI Network iSCSI is used to facilitate data transfers over intranets and to manage storage over long distances.
Page 147 For ease of management and particularly for data integrity and backup purposes, either dedicate the entire SnapServer to iSCSI disks, or if the server is to be used with other shared resources, place the iSCSI disk and the other shared resources on separate volumes.
Page 148 Disk Naming Conventions iSCSI disks are assigned formal IQN names. These appear as the iSCSI device names that the user chooses (or types) when connecting from a client initiator to the SnapServer target and also on the iSCSI disk details page.
Page 149: Create Iscsi Disks
7 - Other Storage Options NOTE: Users with iSCSI disks created in earlier GuardianOS versions will see a shortened IQN name in the following format: iqn.[servername].[iscsidiskname] The format of IQN names for VSS-based iSCSI disks on the SnapServer is: SnapServer iqn.1997-10.com. :[servername]:[diskname].[nnn]...
Page 150 Disabling a write cache for an iSCSI disk does not disable the write cache for any other iSCSI disk or any other resources on the SnapServer. No active sessions can be connected to the iSCSI disk when enabling or disabling the write cache.
Page 151 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Step 3: Confirm your settings. Click Create iSCSI Disk. At the confirmation page, verify the settings and click Create iSCSI Disk again. You are returned to the primary iSCSI page and the new iSCSI disk is displayed in the table...
Page 152: Edit An Iscsi Disk
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options The ISCSI information is shown in a table with these columns: Label Description iSCSI Disk The name of the iSCSI disk. Storage Pool/Volume The pool or volume on which the iSCSI disk was created.
Page 153: Delete An Iscsi Disk
Windows Server 2008 R2 Backing up an iSCSI Disk using VSS Snapshots. Windows VSS-compatible backup applications can create snapshots of SnapServer iSCSI disks to perform consistent backups of application data without stopping the application, using the snapshot instead of the live volume as the backup source.
Page 154 The required space is 10% of the size of the iSCSI disk per snapshot. If this amount of free space is not available on the pool or volume, the VSS snapshot will not be created and an error will be reported by the SnapServer VSS hardware provider to the Windows event log.
Page 155 Windows volumes. Creating and Managing iSCSI LUNs Using VDS 1. Create the volume and RAID set for the iSCSI disk on the SnapServer using the Web Management Interface (Storage > Volumes). The volume and RAID set must be created on the SnapServer before the iSCSI disk can be created using a VDS application such as Microsoft’s Storage Manager for SANs.
Page 156: Disks
RAID set types listed in Storage Manager for SANs when creating an iSCSI disk reflect the types of RAID sets already configured on the SnapServer. Once a RAID set type is selected, the SnapServer automatically chooses a SnapServer RAID set of the selected type and volume to create the iSCSI disk on.
Page 157 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Traditional RAID Configuration • Click a disk icon (such as ) to view disk details. • Click a unit’s LED icon ( ) to flash the unit’s status and drive status LEDs for identification.
Page 158: Replacing Disk Drives
A failed disk drive can be removed and replaced anytime if two or more disks are installed in the SnapServer; however, only one disk at a time can be replaced. While dual parity allows two disks to be swapped out simultaneously, they will only be incorporated one at a time.
Page 159 Disks page. This section describes how to remove and replace drives in a RAID set of a SnapServer configured in Traditional RAID mode. When removing a working disk drive, note the following: •...
Page 160: Adding Disk Drives
Adding Disk Drives If empty slots are available, you can add an Overland-approved disk drive to expand the storage pool/volume on your SnapServer or SnapExpansion unit. Drives of different rotational speed (for example, SAS and SATA drives) can be combined in the same server;...
Page 161 To add a new disk drive to a DynamicRAID: 1. Insert the drive into an empty SnapServer slot. It appears in the Storage > Disks map as “Disk Unused” (for a new disk) or “Disk is Foreign”...
Page 162 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options 4. At the lower portion of the properties page, verify or change the Parity Mode and Snapshot Pool settings. 5. Click OK to continue. 6. At the confirmation page, click Save Changes.
Page 163 To add a new disk drive as a Local Spare for a Traditional RAID set: 1. Insert the drive into an empty SnapServer slot. It appears in the Storage > Disks map as “Disk Unused” (for a new disk) or “Disk is Foreign”...
Page 164 To add a new disk drive as a Global Spare for a Traditional RAID set: 1. Insert the drive into an empty SnapServer slot. It appears in the Storage > Disks map as “Disk Unused” (for a new disk) or “Disk is Foreign”...
Page 165: Managing Expansion Unit Storage
RAID system being used. DynamicRAID Each unit in the SnapServer system has its own storage pool which DynamicRAID manages. Traditional RAID The head unit and expansion disk drives can be combined as necessary. For example, to create one large RAID set, you could delete the existing RAID sets on both the head unit and the expansion unit, then combine all drives into one high-capacity storage system.
Page 166: Integrating Orphaned Expansion Units
The serial number of the server with which the expansion unit was last incorporated If you want to use the expansion unit with the SnapServer, check the box next to the orphaned expansion unit you want to integrate and click OK.
Page 167 SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options If the RDX media is locked (read-only), a lock icon appears next to it and the format and rename options are not available. For example, if you click an RDX media name, you would...
Page 168: Rdx Media Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options RDX Media Properties To display the RDX Media Properties page and access the RDX QuikStor options, click the RDX media name in the second column. NOTE: If the RDX media is configured with multiple partitions by some other computer, GOS only sees one partition.
Page 169: Copy Data To/From Rdx Media
2. Click Copy Data. 3. At the Copy RDX Media Data page: a. From the left drop-down Volume list, choose the volume on the SnapServer that will be used. b. Select the file or folder involved from the volume file/folder list.
Page 170: Format Rdx Media
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options NOTE: If the copy operation successfully completes in only a few seconds, then the target file/folder list is refreshed and you are able to immediately either perform another copy operation or click Close to return to the RDX Media Properties page. However, if...
Page 171: Eject Rdx Media
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Eject RDX Media To eject the RDX media, go to Storage > RDX QuikStor > RDX Media Properties and click Eject. At the confirmation page, click Eject again. 10400589-001 ...
Page 172: Rename Rdx Media Volume
SnapServer / GuardianOS 7.6 Administrator’s Guide 7 - Other Storage Options Rename RDX Media Volume To rename the RDX media volume, go to Storage > RDX QuikStor > RDX Media Properties and click Rename Volume. At the Rename RDX Media Volume page, enter the new name and click Rename Volume.
Page 173: Chapter 8: Security Options
Overview The Security options control the access to the SnapServer and its data. SnapServer authentication validates a user’s identity by requiring the user to provide a registered login name (User ID) and corresponding password. The server ships with predefined local users and groups that allow administrative (admin) and guest user access to the server via all protocols.
Page 174: Guidelines For Local Authentication
Web Management Interface, SSM, or the CLI through SSH. A local user or group is one that is defined locally on a SnapServer using the Web Management Interface. The default users and groups listed below cannot be modified or deleted.
Page 175: User And Group Id Assignments
User and Group ID Assignments SnapServer uses the POSIX standard to assign UIDs or GIDs, in which each user and group must have a unique ID. This requirement applies to all users and groups on the server, including Windows Active Directory, LDAP, NIS, and local users.
Page 176: Security Guide For Windows Active Directory
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Security Guide for Windows Active Directory The Windows Active Directory Security Guide wizard guides you through the setup of Windows Active Directory on your server. NOTE: You cannot join an Active Directory domain if NTP is enabled. If you see such a message, click the NTP link to change your settings.
Page 177: Security Guide For Entire Volume Access
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Security Guide for Entire Volume Access This Share Level Access Security Guide wizard guides you through the four steps it takes to give share-level access to an entire volume. Security Guide for Folder Access on Volume This Share Level Access Security Guide wizard guides you through the five steps it takes to give share-level access to a folder on a volume.
Page 178: Shares
NFS client machines. Share Security Overview SnapServer supports file access in Windows, Apple, and Unix networks, as well as access via HTTP and FTP. New shares are created by default with full read-write access to all users, subject to the filesystem permissions on the share target directory.
Page 179: Create Shares
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Create Shares To create a new share, at a minimum you need to specify the share name, volume, and folder path. Click Create Share on the default Shares page to start the process.
Page 180 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 3. Select from the following path options: • To create a share to the entire volume – The current Path field defaults to the root path of the volume. Simply leave it blank if this is the desired configuration.
Page 181: Edit Share Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Edit Share Properties NOTE: You cannot change the volume (or path) of a share once it is created. If you need to change the volume, you must delete the share and create a new one on the other volume.
Page 182: Delete Shares
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Option Description Hide this share Select this option if you want the share to be hidden from network browsing using SMB, HTTP/HTTPS, AFP, and FTP/FTPS (but not NFS) protocols. Protocols Select the access protocols for the share: Windows (SMB), Linux/Unix (NFS), Apple (AFP), Web (HTTP/HTTPS), and FTP/FTPS.
Page 183 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Share Access Behaviors Administrators tasked with devising security policies for SnapServer will find the following share access behaviors informative: • Share access defaults to full control – The default permission granted to users and groups when they are granted access to the share is full control.
Page 184 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Share Level File Level Result Full control Read-only to File A Full control over all directories and files in SHARE1 except where a more restrictive file-level permission applies. The user has read-only access to File A.
Page 185 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options The default permission granted to users and groups when they are granted access to the share is Full Access. You may restrict selected users and groups to Read-only Access. Share-Level Access Permissions...
Page 186 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 3. To remove share access permissions for a user or group: a. Select one or more users or groups in the left box. b. Click Remove. 4. To change access permissions for a user or group, select one or more users or groups in the left box, then select either Full Access or Read Only from the drop-down list, and finally click Change Access.
Page 187 NOTE: The syntax used in this file is equivalent to standard Linux exports file syntax. If the server detects any errors in syntax, a warning message appears. You can choose to correct or ignore the error warning. The Exports File Default Options. The SnapServer default setting provides read-write access to all NFS clients. *(rw,insecure,async,root_squash,no_all_squash)
Page 188 If Kerberos is enabled, access is applied uniformly to all Kerberos-authenticated NFSv4 clients connected using the matching Kerberos option. Host-based access as described in The SnapServer Exports File Default Options still applies to NFSv2 and v3 clients when Kerberos is enabled, but it does not apply to NFSv4 clients.
Page 189: Local Users
The Local Users page provides all the options to manage local users. Local users are users that are known only to the server being accessed. Each SnapServer comes with two predefined users: admin and guest. The admin user has full Administrator rights. Go to Security > Local Users to view settings or make changes.
Page 190: Create A User
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Create a User Click Create to create a new user on this server. Enter the user data, select any special options, and click Create User again. To Create a Local User 1.
Page 191: Edit User Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 3. Click Create User again to create the user account. Edit User Properties Highlight a user and click Properties to open the Local User Properties page to make changes to the user’s full name, password, or user ID (UID). Note that the UID cannot be changed for the built-in admin user.
Page 192: Local User Password Policies
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Option Description Disable User Login Check this box to disable the user login. The user’s information will remain in the system, but login rights are denied. The user login can be re-enabled by clearing the box.
Page 193: Assign User To Group
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options To Set Password Policy for Local Users 1. On the Local Users page, click Password Policy. 2. On the Local Users Password Policy page, check the Enable Password Policy box.
Page 194: Delete Local User
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Add or Remove Users from Groups 1. On the Local User page, select a user. 2. Click Groups. The group settings for the selected user are shown. 3. To make a change: •...
Page 195: Local Groups
The Local Groups page (Security > Local Groups) provides all the options to manage local groups. Local groups are groups of local users that are known only to the server being accessed. Each SnapServer comes with one predefined group ( admingrp Create New Group Use Create to create a new group on this server.
Page 196: Edit Group Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 2. Enter the following information: Option Description Group Name Use up to 31 alphanumeric characters and the underscore. Group ID (GID) Displays the user identification number assigned to this user.
Page 197: Specify Users In Group
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options NOTE: Changing a group’s GID may alter filesystem access permissions that apply to that GID. In addition, any existing permissions for a GID previously assigned to a group that are changed to a different GID may become active if another group is created with the same GID.
Page 198: Delete Group
The delete confirmation page is displayed. 2. Click Delete Group to delete the selected group (or Cancel to cancel the deletion). Security Models There are three file-level security models that can be used by a SnapServer: • Windows/Unix • Windows •...
Page 199: Managing Volume Security Models
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options For Traditional RAID, the security model can be configured on volumes and the folders created in the root of the volumes. For DynamicRAID, the security model can only be configured on the volumes.
Page 200: Managing Folder Security Models In Traditional Raid
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 4. At the confirmation message, click Apply Security Model. If there are files and directories under the volume, you are prompted whether you want to recursively apply the change. This resets permissions on all files and directories to...
Page 201: Id Mapping
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options • Change the security model of a folder: Click the security model icon ( W/U , W , or U ) of the folder, select the security model type from the drop-down list, and click OK. At the confirmation message, click Apply...
Page 202: Add Mapping
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Example: John Smith is a local user on a SnapServer, as well as having a user ID on a Windows domain. John’s quota for the SnapServer has been set to 200 MB. The administrator of the SnapServer maps the Windows domain user’s UID for John Smith to the local UID for...
Page 203 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options a. At the bottom of the list, using the Search drop-down list, select the local, LDAP, or NIS user or group list to be searched. b. Select Find and enter the search string (or select Find All).
Page 204 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 4. From the search results, select the Windows domain user/group to which you want to map the local, LDAP, or NIS user, and click Add Mapping. The mapping result is shown on the default page with the users/groups that were mapped in purple with a plus (+) in front of their name.
Page 205: Change Mapping
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options NOTE: To display only changes that have not yet been applied, check the View only unsaved changes box. To display only local or NIS users/groups that have been mapped to a Windows domain user or group, check View only mapped users and groups box.
Page 206 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 2. Select a mapped user/group to be changed and click Change Mapping. 3. At the Change Mapping page, to find the user/group you want to map to, select the Windows domain user or group list, the scope of the search, enter a search string if needed, and click Search.
Page 207: Auto Mapping
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 4. From the search results, select the Windows domain user/group you want to re-map the local, LDAP, or NIS user to and click Change Mapping. 5. Repeat Steps 1–4 until all changes are made.
Page 208 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 2. At the Auto Mapping confirmation page, click View Auto Mappings to display a page summarizing your changes. 3. At the summary page, verify the mappings and remove (Remove Auto Mapping) any users or groups you do not want to map.
Page 209: Remove Mappings
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options IMPORTANT: Updating may take some time, depending upon how many files and folders are on your system. If you elect not to do this operation, any files and folders owned by (or having permissions by) any of the Windows users and groups you have just updated will remain unchanged and cannot be updated at a later time.
Page 210 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 3. At the confirmation page, verify the users/groups listed and click Remove Mappings. The selected mappings are removed and the default page is displayed with the users/groups that were unmapped in purple with a plus (+) in front of their name.
Page 211 SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options 2. At the confirmation page, click Remove Mappings. All the mappings are removed and the default page is displayed with the users/groups that were unmapped in purple with a plus (+) in front of the names.
Page 212: Remove Missing Id Mappings
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Remove Missing ID Mappings If the server has mappings for users or groups that no longer exist, the following warning message may be displayed at the top of the main ID Mappings page: 1.
Page 213: Filesystem Updates
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Filesystem Updates After making any changes to ID mappings, you are presented with a filesystem update option page, where you can choose either Update Filesystem or Do Not Update Filesystem options.
Page 214 Configure the client to mount the home directory root for all users, and then configure each user account on the client to use the user-specific directory on the SnapServer as the user’s home directory. • For FTP/FTPS, local users will automatically be placed in their private home directory when they log in.
Page 215: Configure Home Directories
SnapServer / GuardianOS 7.6 Administrator’s Guide 8 - Security Options Configure Home Directories Check or complete the following fields and click OK. Field Description Enable Home Check to enable Home Directories for local users and activate the Directories options. Remove the check to disable.
Page 216: Chapter 9: System Monitoring
System Monitoring Chapter 9 This chapter addresses the options for monitoring the SnapServer. Topics in System Monitoring: • System Status • Active Users • Open Files • Event Log • Tape 10400589-001  ©2008-14 Overland Storage, Inc.
Page 217: System Status
Snap1123578). Server Model Server model name/number. OS Version The version of GuardianOS currently loaded on the SnapServer. Server Number Number derived from the MAC address of the Ethernet 1 port, used as part of the default server name. Serial Number Unique number assigned to the SnapServer.
Page 218: Expansion Unit Status
SnapServer / GuardianOS 7.6 Administrator’s Guide 9 - System Monitoring Field Description Ethernet n If an optional Ethernet card is installed, details on the server’s other Ethernet connections are shown. Ambient Temp. The temperature of the space inside the chassis.
Page 219: Open Files
SnapServer / GuardianOS 7.6 Administrator’s Guide 9 - System Monitoring Open Files Use this page to view read-only details on the open files in use on this server. Event Log Use the Event Log page to view a log of operations performed on the server.
Page 220: Filter The Log
SnapServer / GuardianOS 7.6 Administrator’s Guide 9 - System Monitoring Filter the Log Edit the following fields as appropriate, then click Refresh. Option Description Severity Select the type of alerts and information you want to view. Display Last n Days Enter the number of days’...
Page 221 SnapServer / GuardianOS 7.6 Administrator’s Guide 9 - System Monitoring Field Description LUN identifier (SCSI only) 10400589-001  ©2008-14 Overland Storage, Inc.
Page 222: Chapter 10: Maintenance
Maintenance Chapter 10 Clicking the Maintenance tab on the Web Management Interface displays options used to maintain this SnapServer. There is also a Tools submenu of special, related options. Topics in Maintenance • Shutdown and Restart • Factory Defaults •...
Page 223: Shutdown And Restart
To prevent possible data corruption or loss, make sure all users are disconnected CAUTION: from the SnapServer before powering down the server. The Power button on the front of the server can be used to power on or power off (in an emergency) a server: •...
Page 224: Factory Defaults
Each reset option requires a restart of the server. To prevent possible data corruption or loss, make sure all users are disconnected from the SnapServer before proceeding. Navigate to the Maintenance > Factory Defaults page in the Web Management Interface, select one of the following options and then click OK: •...
Page 225: Disaster Recovery
Backup Solutions (Appendix B) for information on backup options. Disaster recovery also encompasses what to do if all access to the data on a SnapServer is cut off due to a hardware or software failure. Focus is placed on these procedures: •...
Page 226: Backing Up Server And Volume Settings
Replacing or Cloning a Server Backing Up Server and Volume Settings In addition to backing up the data stored on the SnapServer, you may also back up the server’s system and volume settings. The Disaster Recovery page allows you to create the files you need to restore these settings: •...
Page 227: System Settings Recovery
226 for file names and paths.) This strategy ensures that if the filesystem on the SnapServer is corrupted, the image file will be available to restore server settings. The DRImage is also automatically placed in the root of the first user volume. These files will be copied to tape as part of your regular backup procedures.
Page 228 SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Recovering System Settings 1. Click the link on the Initial Setup Welcome page: This link launches the Disaster Recovery page. 2. At the Disaster Recovery page, select the Recover System Settings option and click Recover to open the Server Recovery page.
Page 229: Volume And Storage Pool Security Settings Recovery
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance 3. At the Server Recovery page, use Browse to navigate to the SnapDRImage file. 4. Click Recover to start the operation. 5. If the recovery file contains Snap EDR application settings, you are asked if you want to include those settings.
Page 230: Replacing Or Cloning A Server
• Reschedule your snapshot times. Data Import Use the Data Import page (Maintenance > Data Import) to import (migrate) data from another SnapScale cluster, SnapServer, or other computer that supports CIFS or NFS (v2, v3, or v4) to this server. 10400589-001 ...
Page 231 SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Windows/SMB Page: NFS Page: 10400589-001  ©2008-14 Overland Storage, Inc.
Page 232: Setting Up A Data Import Job
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance If an error is encountered during the import (for example, a file or folder is locked and cannot be imported), the utility records the error in a log, and continues the operation. When the import is completed, the administrator can view the log of import errors.
Page 233 SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Option Description Auth. Name & • For the Windows (SMB) network protocol, enter both the Auth. Name Auth. Password / and Auth. Password (Windows user name and password to log in to User Name the source server over SMB).
Page 234: Stopping An Import Job
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Option Description Verify Imported Selecting this option causes all source data to be read twice, once to Data write to the target and once to perform a binary comparison with the data written (default is unchecked).
Page 235: Preserving Permissions
If you are importing from a Unix server to a Unix personality directory, Unix permissions for UIDs/GIDs are copied exactly from source to target; thus, identities of the users and groups are best retained if the SnapServer belongs to the same NIS domain as the Unix server. Importing Between Conflicting Security Models When importing from a Unix source to a Windows security model target, Unix permissions are retained and the security personality on the resulting files and directories will be Unix.
Page 236: Os Update
Only click the button once. Some browsers show the percent of the upload progress in their bottom status bar. The SnapServer uploads the software package and then prompts you to reboot the server to perform the update. Click Restart for Update (or click Cancel to abort the update).
Page 237: Update Notification
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Update Notification You can configure GuardianOS to display an alert when updates are available for the server. When enabled, Update Notification checks weekly for updates that are applicable to the server. If updates are available, a banner alert is displayed just below the menu bar on all Web Management Interface pages.
Page 238 SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Configuring Update Notification 1. Click Update Notification: 2. Check the Enable Automatic Update Notification box. 3. If your environment requires using a proxy server for external web-based communication: a. Check the Use a proxy server for HTTP communication box.
Page 239: Last Os Update
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Last OS Update At the bottom of the OS Update page is a Last OS Update link and information. Click this link to view a detailed status of the last update applied to the server.
Page 240: Registering Your Server
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Once email is configured, the Support page is available with your contact information entered: Registering Your Server The very first time you start your server, a Registration Reminder page appears. Registering your server activates your warranty and allows you to create and track service requests.
Page 241 To register your server to activate its warranty support, you can either: • Click the link on the initial Registration Reminder page. • Go to Maintenance > Support and click Registration. Click the Click Here link to launch the Overland Storage Support website and register online. 1. At the Site Login, enter your e-mail address and password, and click GO.
Page 242: Maintenance Tools
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Maintenance Tools The Tools option provides a submenu of general-purpose maintenance options and features. Email Notification To configure the server to send email alerts in response to system events or activate Overland support, navigate to Maintenance >...
Page 243 • License event – One of the trial licenses included on the SnapServer is about to expire. A notification email will be sent 14 days before the license expires. One day before the license expires another email will be sent. It is recommended that, if you are not acquiring a license key for the SnapExtension that is expiring, you disable the SnapExtension.
Page 244: Host File Editor
10 - Maintenance Host File Editor Use this page to identify external hosts in the hosts file for the SnapServer. This page allows you to supply a hostname-to-IP address mapping that persists across system reboots. Click Add Host File Entry, complete the fields as described on the table below, and then click Add Host File Entry again.
Page 245: Checking Filesystems
SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance Option Description Alias Enter an optional abbreviated address for the external host, using the (optional) format: myserver. NOTE: Some applications may require that you enter either one or both of these fields. See the OEM documentation to determine requirements.
Page 246 It is only recommended that you run this level if you have been advised to do so CAUTION: by SnapServer Technical Support, or if Repair errors has failed to solve the problem and you are willing to risk loss of data.
Page 247 SnapServer / GuardianOS 7.6 Administrator’s Guide 10 - Maintenance 2. On the page that opens, click Check Root Filesystem. 3. Click Check Root Filesystem again on the confirmation screen. A reboot is required and takes place automatically. 4. After the server reboots, to view a log of the results, click View Log.
Page 248: Chapter 11: Misc. Options
Home Pages • Home Page • Administration Page • SnapExtensions • BitTorrent Sync • CA Antivirus • Snap EDR • Snap Finder • Edit Snap Finder Properties • Change Password • Management Interface Settings 10400589-001  ©2008-14 Overland Storage, Inc.
Page 249: Home Pages
SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options Home Pages When you first launch the Web Management Interface, the Home page is displayed showing any existing shares and three options. Once logged in using the Administration link, you can...
Page 250 11 - Misc. Options • Switch User (Logout) ( ) – Automatically logs out the current user and displays the Login page for the new user to gain access to the SnapServer. • Administration ( ) – Displays the Administration page (see...
Page 251: Administration Page
<server_name> is the unique server name in the format Snapnnnnnnnn. It provides a high-level view of the SnapServer status, the amount of total storage being used, and a link to find out what’s new in GuardianOS by accessing online help.
Page 252: Snapextensions
NOTE: Cookies must be enabled on your browser for BitTorrent Sync to work. BitTorrent Sync (BTSync) is a SnapExtension that is preloaded on SnapServer. It lets you share and sync an unlimited number of files and folders of any size across multiple platforms.
Page 253 SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options 3. At the following page, to accept the BitTorrent Terms of Use and Privacy Policy so you can run BitTorrent Sync, click I Accept. 4. When returned to the BitTorrent Sync page, use the Configure BitTorrent Sync link to configure it for your use.
Page 254 (DynamicRAID). If the volume or storage pool is deleted or rolled back from a snapshot, the SnapServer attempts to automatically relocate the BitTorrent Sync hidden directory to another volume or storage pool. If there are no more volumes or storage pools, or if none can be found that are large enough, BitTorrent Sync is disabled and cannot be re-enabled until a suitable volume or storage pool becomes available.
Page 255: Ca Antivirus
SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options CA Antivirus For CA Antivirus, click the box to enable it. For more information, see Chapter 11 - CA Antivirus Software. Snap EDR For SnapEDR, at the Configuration page, select either to configure it as the Management Console or as an agent of another Management Console.
Page 256: Snap Finder
Snap Finder Snap Finder ( ) is a powerful tool that lists all the SnapServer appliances, SnapScale clusters, and Uninitialized nodes on your network (and on a remote network segment if so configured), and shows the current status of each. Click the unit name (if you have name resolution) or IP address of a cluster, node, or server to access it through the Web Management Interface.
Page 257 Uninitialized node. For example, “Snap23022161.” Status • The status of the SnapServer or Uninitialized node (for example, OK or Fan Failure). • The status of a SnapScale cluster is always Online. IP Address The IP address of the SnapServer, Uninitialized node, or the Management IP address of the SnapScale cluster.
Page 258: Edit Snap Finder Properties
SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options To enable remote discovery of clusters, nodes, or servers on a different subnet or to display a warning icon for SnapServers or Uninitialized nodes with an enabled Ethernet port that has no link, click Properties to open the Snap Finder Properties page.
Page 259: Change Password
SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options Change Password To enhance the security of your SnapServer, it is recommended that users change their passwords regularly. This is done using the Change Password page. Changing Your Password 1. On the Home page, click the Change Password link ( 2.
Page 260: Management Interface Settings
SnapServer / GuardianOS 7.6 Administrator’s Guide 11 - Misc. Options Management Interface Settings The Web Management Interface default background is light blue with the stylized “O” symbols on a textured blue background: This can be changed to a solid blue background on the Web Management Interface Settings page by clicking the Site Map icon ( ) to access Management Interface Settings.
Page 261: Chapter 12: Ca Antivirus Software
• Move Directory • Log View NOTE: Antivirus functions or options not relevant to the SnapServer have been disabled in the CA Antivirus configuration GUI. Antivirus Dependencies The SnapServer implementation of CA Antivirus software includes the following features: HTTP Access and Antivirus Configuration – To access the CA Antivirus configuration interface, HTTP must be enabled on the Network >...
Page 262: Launching The Ca Antivirus Gui
GuardianOS Web Management Interface, and then click Login. The antivirus GUI box opens. The Local Scanner View Use the Local Scanner view to scan a SnapServer for infected drives, folders, files, or disks on demand. 10400589-001 ...
Page 263: Virus Scan Jobs
12 - CA Antivirus Software Component Description Root Directory Displays the directory structure of the SnapServer. As in Windows Explorer, click folder icons to navigate the structure and display subfolders and files in the right-hand pane. Move Folder May contain infected files. The administrator can instruct the software to automatically move infected files to this directory.
Page 264: Running A Manual Scan Job
Step 1: In Local Scanner View, select the folders you want to scan. The left-hand pane displays the directory structure of the SnapServer. A red check mark on a folder or file indicates that it is selected for scanning. (By default, all directories and files are selected for scanning.) Click folders or files to toggle file/folder selection on or off.
Page 265: Signature Updates
Method Description Use FTP to download the update files from the Computer Associates FTP site. You can also use FTP to distribute signature updates from one SnapServer (or any FTP server) to another. NOTE: When using FTP, the user name and password are passed as clear text.
Page 266: Updating A Snapserver Without Internet Access
FTP option from the list on SnapServers without Internet access. If you have more than one SnapServer with no Internet access, you can perform the previous procedure on just one of them (or any Windows/SMB server), and then configure your other SnapServers to get the update from that server automatically via SMB by specifying the UNC of the server containing the signature files.
Page 267: Verifying Download Events
\\server_name\share_name where server_name is the name of the server and share_name is the name of the share providing access to the files. (On a SnapServer, the update files must reside on the root of the share.) 4. Click OK. The path you entered appears in the Download Sources list box.
Page 268: Alert Options
SnapServer / GuardianOS 7.6 Administrator’s Guide 12 - CA Antivirus Software Alert Options Alert options allow you to tailor the notification information that is provided to the Alert Manager, cut down on message traffic, and minimize the dissemination of notifications that are not critical.
Page 269: Log View
SnapServer / GuardianOS 7.6 Administrator’s Guide 12 - CA Antivirus Software Log View The Log View provides easy access to detailed information on scan, distribution, and other events. To access this view select Log View from the View menu. Option...
Page 270: Appendix A: Backup Solutions
• Transfers files from one source host to one or more target hosts • Transfers files from multiple hosts to a single target host, and stores the files on a local disk or locally attached storage device. 10400589-001  ©2008-14 Overland Storage, Inc.
Page 271: Snap Edr Usage
Console running on the server, or other Agents replicating to/from the server) need to be able to resolve the SnapServer server name to its IP address in order to interoperate properly with the server. This can be accomplished via a DNS host record, local hosts file entries, or other name resolution services in the environment.
Page 272: Scheduling Jobs In Snap Edr
Using Backup Exec for VSS-based Snapshots of SnapServer iSCSI Disks To configure Backup Exec to take native VSS snapshots of SnapServer iSCSI disks using Backup Exec’s Advanced Open File or Advanced Disk-Based Backup feature, you must first add a Windows registry entry to the systems running the Backup Exec Server and all of the Backup Exec agents backing up iSCSI disks.
Page 273 VALUE DATA {759c7754-6994-46c9-9cf9-c34ac63a0689} Name SnapServer VSS Hardware Provider Version 5. Close regedit The SnapServer VSS Provider should now be available to Backup Exec to use for VSS-based backups. Return to iSCSI Disk Backups main page. 10400589-001  ©2008-14 Overland Storage, Inc.
Page 274: Appendix B: Security And Access
Appendix B This appendix provides additional information and configuration options about securing and accessing shares and files on the SnapServer. The GuardianOS supports share-, file-, and directory-level permissions for all local and Windows domain users and groups. File and directory security can be configured using either Windows NTFS-style security or classic Unix-style security.
Page 275: Security Model Directories
SnapServer / GuardianOS 7.6 Administrator’s Guide B - Security and Access • The security personality of a file or directory can be changed by any user with sufficient rights to change permissions or ownership. If a client of one security personality changes...
Page 276: Security Model Management
Special Share Options The basic setup and configuration of shares on a SnapServer is handled on the Security > Shares page. This section covers more details about the special options and features of share security in these subsections: •...
Page 277: Share Level Permissions
SnapServer / GuardianOS 7.6 Administrator’s Guide B - Security and Access • Edit a share by selecting a share, clicking to expand Advanced Share Properties, and enabling or disabling specific protocols. Share Level Permissions Share-level permissions on GuardianOS are applied cumulatively. For example, if the user jdoe has Read-Only share access and belongs to the group sales, which has Read/Write share access, the result is that the user jdoe will have Read/Write share access.
Page 278: Snapshot Shares And On Demand File Recovery
NOTE: The same share folders appear on the Home page when you connect to the SnapServer using a Web browser. However, the snapshot share folder does not provide access to the snapshot;...
Page 279: File-Level Security
ACL. In addition, members of the SnapServer local admin group, as well as members of Domain Admins (if the server is configured to belong to a domain) always implicitly have take ownership and change ownership permissions.
Page 280 Users, Authenticated Users, and Administrators built-in users and groups. Procedure to set file and directory access permissions and inheritance in Windows: 1. Using a Windows client, map a drive to the SnapServer, logging in as a user with change permissions for the target file or directory.
Page 281: Appendix C: Dynamicraid Overview
Additional Information on DynamicRAID Sizing About DynamicRAID • To increase the capacity of the storage pool when the SnapServer is fully populated, you can replace drives, one at a time, with larger-capacity drives. Replacing drives can only be done when the DynamicRAID is healthy.
Page 282: Should I Use Dynamicraid Or Traditional Raid
All of its features apply equally to both file sharing and iSCSI volumes created on the SnapServer NAS system. DynamicRAID uses clear visible indicators on the drive bays to illustrate what can or cannot be done to that bay, thus reducing user error and negating the need for any required skill set or training for operation.
Page 283 Be able to adjust volume size as needed. Be able to optimize parity based on the number of drives inserted into the system. The SnapServer needs to able configure and manage the RAID array size and parity. I need to manually configure the RAID array.
Page 284: Setting Up Dynamicraid
During the setup process, storage pools are created on the head unit and each expansion unit using all disk drives available in that unit. More capacity can be added to a SnapServer over time by inserting or replacing drives, then adjusting Storage Pool properties. Volumes can be added and removed at will and all volumes share the same underlying pool of storage.
Page 285: Snapshots
Indicators Drives can be inserted into the SnapServer NAS system at any time unless the user is specifically instructed not to do so. Each drive bay has an associated indicator which can be either red, amber, or green.
Page 286 SnapServer / GuardianOS 7.6 Administrator’s Guide C - DynamicRAID Overview Drives of different overall capacity may be added to the same storage pool as long as they have the same partition sizing (such as, 300 GB). However, the extra space on larger drives will only be available to the storage pool if there are enough larger drives to satisfy the storage pool's parity setting using the extra space.
Page 287: Appendix D: Troubleshooting
SnapServer XSD 40 LEDs The SnapServer XSD 40 desktop server has two LEDs on the drive carriers that are accessed by opening the door and one on the front below the Power switch. System Status...
Page 288: Snapserver Dx1 Leds
Status Ethernet The Power button is an override option only as the SnapServer head unit manages the power to all attached expansion units. To use the Power button to shut down the expansion unit, press and hold it for four seconds.
Page 289: Led States
SnapServer / GuardianOS 7.6 Administrator’s Guide D - Troubleshooting LED States The following LED behavior can be observed when the SnapServer is ON. Drive Status LED States Device State LED State No Disk Drive in Bay green Normal Operation Solid...
Page 290: System Reset Options
• On the SnapServer XSD 40, the hole is located just below the Power button on the top-right front of the server. • On the SnapServer DX1, it is accessed via a small hole next to the Power button on the front of the server at the top.
Page 291: Maintenance Mode
GuardianOS 7.5 or 7.6 should not be performed on a SnapServer running an older version of GuardianOS. Failure to follow this guideline can result in total failure of the SnapServer to start, even into Maintenance Mode. The Fresh install option should only be performed with the same version of GuardianOS currently installed on the SnapServer and only under the direction of Overland Technical Support.
Page 292 Ensure that the Ethernet cable is connected securely to both the network port and the primary Ethernet port. Also, check to see that the Link light on the front of the SnapServer is lit (solid green). If the Link light is off, this is normally caused by a mismatch between the switch/hub and the Ethernet port on the SnapServer.
Page 293: Miscellaneous Issues
SnapServer from a Linux Workstation If you are logged in as root on your workstation and NFS is enabled on your SnapServer, this message can be misleading, causing you to look for security issues, when in fact it could be a command syntax issue.
Page 294: Phone Home Support
Power to the SnapServer Is Unexpectedly Cut Off Due to a Power Outage Overland Storage recommends that you use an uninterruptible power supply (UPS) with the SnapServer. If you did not have a UPS attached to the server at the time of the power outage, do the following: 1.
Page 295 SnapServer / GuardianOS 7.6 Administrator’s Guide D - Troubleshooting NOTE: Phone Home Support interacts with two fields on the Maintenance > Tools > Email Notification page. To use Phone Home Support, you must first enter a valid SMTP server IP address on the Email Notification page.
Page 296: Appendix E: Guardianos Ports
TCP & UDP • Networking > NFS sunrpc Remote Procedure Call (RPC) Protocol for remote command execution, used by • Assist Network Filesystem (NFS) and SnapServer • SnapServer Manager Manager TCP & UDP Server > Date/Time > Network Time Protocol (NTP) Advanced TCP &...
Page 297 SnapServer / GuardianOS 7.6 Administrator’s Guide E - GuardianOS Ports Port # Layer GOS Feature Name Comment TCP & UDP Network > Windows/SMB snmptrap Traps for SNMP TCP & UDP Network > Windows/SMB ldap Lightweight Directory Access Protocol (LDAP) TCP & UDP •...
Page 298 SnapServer / GuardianOS 7.6 Administrator’s Guide E - GuardianOS Ports Port # Layer GOS Feature Name Comment 10001 Snap Extension Snap Extension Shutdown Port 12000 TCP & UDP Network > Apple/AFP afp2overtcp Second NIC 12168 CA Antivirus inoweb Admin Interface...
Page 299: Appendix F: Command Line Interface
Appendix F GuardianOS includes a command line interface (SnapCLI) that is accessible through SSH. Using the CLI, users can access information about most of the SnapServer configuration parameters and perform configuration and maintenance functions without using the GuardianOS Web Management Interface or SSM.
Page 300 SnapServer / GuardianOS 7.6 Administrator’s Guide F - Command Line Interface where is the name of one of the SnapCLI commands, is an action available COMMAND ARGUMENT for that command, and are additional parameters for the command. OPTIONS Once logged into the CLI, there are several ways of displaying information about available parameters.
Page 301: Snapcli Procedures
- non-secure-http=(yes|no) Thus, the following command string: web set require-webview-auth=yes non-secure-http=no sets HTTP/HTTPS properties on the SnapServer to require clients to authenticate in order to access the server and to disable non-secure HTTP access. SnapCLI Procedures Use these procedures to access and exit SnapCLI.
Page 302 List the available timezones (used in conjunction with the date set command) diskunits Get status information of all the disk units on the server domain get Get the domains known to the SnapServer and their properties domain list List the domains known to the SnapServer dri create...
Page 303 SnapServer / GuardianOS 7.6 Administrator’s Guide F - Command Line Interface Command Description hostfile add Add a host file entry hostfile delete Delete a host file entry hostfile get Get information for a specific host file entry hostfile list List all host file entries...
Page 304 Set volume quota limit & usage for a specific user reboot Reboot the SnapServer securitymodel get Get the security model on a SnapServer Volume securitymodel set Set the security model on a SnapServer Volume share access delete Delete access permission of the specified user/group for the...
Page 305 Turning off SSH while running the command line will immediately log the user off the system and they won't be able to log back into the command line until SSH is re-enabled via the SnapServer Web Management Interface. syslog all...
Page 306 Edit an existing logical volume volume get Get a specific volume’s properties volume list List of the volumes defined on the SnapServer volume write-cache Enable or disable write cache on a volume. vxxaccess add Add hostname of VSS/VDS client requiring access to this...
Page 307: Scripts In Snapcli
SnapServer / GuardianOS 7.6 Administrator’s Guide F - Command Line Interface The following commands are available only in Traditional RAID: Command Description raid list List available raids raid create Create a raid set raid delete Delete a raid set raid get...
Page 308: Sample Script
Following is an example script that can be used to create and remove users, groups, and shares: #!/bin/sh ########################################################## # Copyright 2003-2007 Overland Storage, Inc. All rights reserved. # # Permission is granted to use this code provided that it # # retains the above copyright notice. ##########################################################...
Page 309 SnapServer / GuardianOS 7.6 Administrator’s Guide F - Command Line Interface Create a Group # if the group does not exist then create it if ! $CLI group get group-name="$1" > /dev/null 2>&1; then echo "Creating group '$1' ..." $CLI group create group-name="$1" > /dev/null 2>&1 if [ $? -ne 0 ];...
Page 310 SnapServer / GuardianOS 7.6 Administrator’s Guide F - Command Line Interface if [ $? -ne 0 ]; then echo "Deletion of user '$1' failed." return 1 else echo "User '$1' does not exist." return 0 # usage: 'rmgroup <group_name>' rmgroup()
Page 311: Master Glossary & Acronym List
Master Glossary & Acronym List NOTE: This is a general Overland Storage glossary and acronym list. Not all items may be found in this document or be used by this product. 1000BASE-T 1000BASE-T (also known as IEEE 802.3ab) is a standard for gigabit Ethernet over copper wiring.
Page 312 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Bus or Channel A common physical path composed of wires or other media, across which signals are sent from one part of a computer to another. A channel is a means of transferring data between modules and adapters, or between an adapter and SCSI devices.
Page 313 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List DHCP Short for Dynamic Host Configuration Protocol. A communications protocol that lets network administrators centrally manage and automate the assignment of IP addresses on a computer network. Each system that connects to the Internet/intranet needs a unique IP address.
Page 314 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Failover/Failback A combination of Failover and Failback. When a preferred path becomes unavailable, another path is used to route I/O until the preferred path is restored. In this case I/O will “fail back” to the preferred path once it is available again.
Page 315 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Hot Swapping The ability to remove and add disk drives to a system without the need to power down or interrupt client access to filesystems. Not all components are hot-swappable. Please read installation and maintenance instructions carefully.
Page 316 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Since these IQNs are rather unwieldy, initiators and targets also use short, user friendly names (sometimes called alias names or just aliases). iSCSI Short for Internet SCSI. iSCSI is an IP-based storage networking standard for linking data storage facilities.
Page 317 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List MD5 Algorithm MD5 is a way to verify data integrity, and is much more reliable than checksum and many other commonly used methods. Short for Management Information Base. A formal description of a set of network objects that can be managed using the Simple Network Management Protocol (SNMP).
Page 318 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Short for Proof of Purchase. The number used to obtain a license key for an upgrade to third- party applications. Portal A target’s IP address together with its TCP port number used in iSCSI systems.
Page 319 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List Short for Server Message Block. A protocol for Windows clients. SMB uses the TCP/IP protocol. It is viewed as a complement to the existing Internet application protocols such as FTP and HTTP.
Page 320 SnapServer / GuardianOS 7.6 Administrator’s Guide GL - Master Glossary & Acronym List TCP/IP Short for Transmission Control Protocol/Internet Protocol. The basic protocol used for data transmission over the Internet. Trap A signal from a device informing an SNMP management program that an event has occurred.
Page 321: Index
Active Directory backup and name resolution servers coordinating with snapshots joining AD domain inability to back up iSCSI disks SnapServer interoperability with iSCSI disks Active Users page of server and volume settings admin password off-the-shelf solutions changing backup.acl...
Page 322 SnapServer / GuardianOS 7.6 Administrator’s Guide Index syntax drive indicators contact information pop-up how it works conventions, typographical implementation copying RDX media storage pools create new share volumes create new volume CUPS server customer support eject RDX media Email Notification...
Page 323 SnapServer / GuardianOS 7.6 Administrator’s Guide Index Home page network home pages power/unit status hot spares system/status hot swap understanding automatic incorporation of disks Link Aggregation (802.3ad) disk drive load balancing, configuring server for HP Open View local groups HTTPS/HTTP, configuring...
Page 324 SnapServer / GuardianOS 7.6 Administrator’s Guide Index reset to factory defaults Phone home support power/status LED access previously configured drives configuring Print Server exports file adding a printer read-only share access canceling print jobs share-level permissions configure the printer NFS backup...
Page 325 SnapServer / GuardianOS 7.6 Administrator’s Guide Index SnapCLI format media running scripts RDX Media Properties page syntax reboot, setting up alert for SnapDRImage reduced parity with Traditional RAID SnapExtensions refresh RDX properties page BitTorrent Registration page CA Antivirus remote SnapServer discovery...
Page 326 SnapServer / GuardianOS 7.6 Administrator’s Guide Index expanding capacity of Properties screen Tape page quotas TCP/IP screen configuring size limits initial configuration options technical support terminology for AFP warranty activation Tivoli NetView Web Management Interface tools alert messages Traditional RAID...

Overland Storage SnapServer Administrator's Manual

Chapter 1: Overview

Chapter 2: Initial Setup and Configuration

Chapter 3: Snapserver Settings

Chapter 4: Network Settings

Chapter 5: Dynamicraid Storage

Chapter 6: Traditional RAID Storage

Chapter 7: Other Storage Options

Chapter 8: Security Options

Chapter 9: System Monitoring

Chapter 10: Maintenance

Chapter 11: Misc. Options

Chapter 12: CA Antivirus Software

Appendix A: Backup Solutions

Appendix B: Security and Access

Appendix C: Dynamicraid Overview

Appendix D: Troubleshooting

Appendix E: Guardianos Ports

Appendix F: Command Line Interface

Master Glossary & Acronym List

Index

Quick Links

Need help?

Questions and answers

Related Manuals for Overland Storage SnapServer

Summary of Contents for Overland Storage SnapServer