Veritas-bu

[Veritas-bu] How to troubleshoot a Firewall Client Backup with Clustered Netbackup Server

2005-11-07 17:06:28
Subject: [Veritas-bu] How to troubleshoot a Firewall Client Backup with Clustered Netbackup Server
From: marshall.a.skare AT accenture DOT com (marshall.a.skare AT accenture DOT com)
Date: Mon, 7 Nov 2005 16:06:28 -0600
This is a multi-part message in MIME format.

------_=_NextPart_001_01C5E3E7.2B914C80
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Two rather basic things to check, but they're worth looking into:

=20

-          Do you have access to firewall logs to verify that you're
seeing the traffic reach the firewall and make it through?

-          Are either the NBU servers and/or clients sitting behind a
NAT for some reason?

=20

Marshall Skare

ATIS - Unix Engineering

(612) 277-4434

________________________________

From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of
Kilpatrick, Mark
Sent: Monday, November 07, 2005 11:11 AM
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] How to troubleshoot a Firewall Client Backup with
Clustered Netbackup Server

=20

Hi, I am attempting to backup two Solaris NBU5.1 clients through a
firewall and they are unsuccessful. I would like some pointers on
troubleshooting this procedure.

=20

The firewall rules have been set up for bpcd (13782) going out to the
client from the master server and media servers.

The firewall rules have been set up for vnetd (13724) going into the
server.

The client attribute of vnetd port has been selected from the master
server properties for each of the clients.

When selecting the client properties from the NBU admin interface the
error of cannot connect on socket (status 25) returns immediately

When running a test backup the error of (58) can't connect to client
returns almost immediately.

=20

I have run the bpclient -client -nameofclient -L command on each of the
firewalled clients and the No call back connections is set to yes. But
the IP address returned is 0.0.0.0=20

I have checked the /etc/services and /etc/inetd.conf on each client

I have checked the bp.conf on each client and server and media server
names are present

I have checked /etc/hosts on server and client

I have enabled logging of bpcd and vnetd on the clients but there are no
log files created - indicating no communication with the clients from
the master

I have enabled logging of bpcd on the master

=20

How can I determine if the problem lies with the firewall rules created
by the firewall admin team or with netbackup (version 5.1 HP-UX running
on a VCS cluster). Could the issue be related to the fact that I have a
netbackup clustered server. The firewall rules only specify the virtual
server hostname. Addition of physical name and IP to firewall rules is
not possible.

=20

=20

Regards, Mark K=20

=20

=20

=20

Due to continued expansion Sabeo Technologies have moved office - to The
Courtyard, Carmanhall Road, Sandyford, Dublin 18. Our telephone and fax
numbers remain unchanged. A location map is available on our website
www.sabeo.com.

=20

=20

=20

**********************************************************************

This email and any files transmitted with it are confidential and

intended solely for the use of the individual or entity to whom they

are addressed. If you have received this email in error please notify

Sabeo Technologies.

=20

This footnote also confirms that this email message has been swept for
the presence of computer viruses.

**********************************************************************

=20



This message is for the designated recipient only and may contain =
privileged, proprietary, or otherwise private information.  If you have =
received it in error, please notify the sender immediately and delete =
the original.  Any other use of the email by you is prohibited.

------_=_NextPart_001_01C5E3E7.2B914C80
Content-Type: text/html;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered)">

<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Book Antiqua";
        panose-1:2 4 6 2 5 3 5 3 3 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
h1
        {margin-top:12.0pt;
        margin-right:0in;
        margin-bottom:3.0pt;
        margin-left:0in;
        page-break-after:avoid;
        font-size:14.0pt;
        font-family:"Book Antiqua";
        font-weight:bold;}
h2
        {margin-top:12.0pt;
        margin-right:0in;
        margin-bottom:3.0pt;
        margin-left:0in;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Book Antiqua";
        font-weight:bold;
        font-style:italic;}
h3
        {margin-top:12.0pt;
        margin-right:0in;
        margin-bottom:3.0pt;
        margin-left:0in;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Book Antiqua";
        font-weight:normal;}
p.MsoHeader, li.MsoHeader, div.MsoHeader
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
p.MsoFooter, li.MsoFooter, div.MsoFooter
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;}
p
        {margin-right:0in;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman";}
p.ABLOCKPARA, li.ABLOCKPARA, div.ABLOCKPARA
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Book Antiqua";}
p.ABULLET, li.ABULLET, div.ABULLET
        {margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:16.55pt;
        margin-bottom:.0001pt;
        text-indent:-16.55pt;
        font-size:11.0pt;
        font-family:"Book Antiqua";}
p.AINDENTEDBULLET, li.AINDENTEDBULLET, div.AINDENTEDBULLET
        {margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:33.1pt;
        margin-bottom:.0001pt;
        text-indent:-16.55pt;
        font-size:11.0pt;
        font-family:"Book Antiqua";}
p.AINDENTEDPARA, li.AINDENTEDPARA, div.AINDENTEDPARA
        {margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:16.55pt;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Book Antiqua";}
span.emailstyle17
        {font-family:Arial;
        color:windowtext;}
span.EmailStyle25
        {font-family:Arial;
        color:navy;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
        {page:Section1;}
 /* List Definitions */
 ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Two rather basic things to check, =
but they&#8217;re
worth looking into:</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in;text-indent:-.25in'><font =
size=3D2
color=3Dnavy face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial;
color:navy'>-<font size=3D1 face=3D"Times New Roman"><span =
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></font><font size=3D2 color=3Dnavy =
face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy'>Do you have =
access to
firewall logs to verify that you&#8217;re seeing the traffic reach the =
firewall and
make it through?</span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in;text-indent:-.25in'><font =
size=3D2
color=3Dnavy face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial;
color:navy'>-<font size=3D1 face=3D"Times New Roman"><span =
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></font><font size=3D2 color=3Dnavy =
face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy'>Are either the =
NBU
servers and/or clients sitting behind a NAT for some =
reason?</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font></p>

<div>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Marshall Skare</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>ATIS - Unix =
Engineering</span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>(612) 277-4434</span></font></p>

</div>

<div>

<div class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><font =
size=3D3
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'>

<hr size=3D2 width=3D"100%" align=3Dcenter tabindex=3D-1>

</span></font></div>

<p class=3DMsoNormal><b><font size=3D2 face=3DTahoma><span =
style=3D'font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font =
size=3D2
face=3DTahoma><span style=3D'font-size:10.0pt;font-family:Tahoma'> =
veritas-bu-admin AT mailman.eng.auburn DOT edu =
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] <b><span
style=3D'font-weight:bold'>On Behalf Of </span></b>Kilpatrick, Mark<br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Monday, November =
07, 2005
11:11 AM<br>
<b><span style=3D'font-weight:bold'>To:</span></b>
veritas-bu AT mailman.eng.auburn DOT edu<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> [Veritas-bu] How =
to
troubleshoot a Firewall Client Backup with Clustered Netbackup =
Server</span></font></p>

</div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Hi, I am attempting to backup two Solaris NBU5.1 =
clients
through a firewall and they are unsuccessful. I would like some pointers =
on
troubleshooting this procedure.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>The firewall rules have been set up for bpcd (13782) =
going out
to the client from the master server and media =
servers.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>The firewall rules have been set up for vnetd (13724) =
going
into the server.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>The client attribute of vnetd port has been selected =
from
the master server properties for each of the clients.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>When selecting the client properties from the NBU =
admin
interface the error of cannot connect on socket (status 25) returns =
immediately</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>When running a test backup the error of (58) =
can&#8217;t connect
to client returns almost immediately.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have run the bpclient &#8211;client =
&#8211;nameofclient &#8211;L command on
each of the firewalled clients and the No call back connections is set =
to yes.
But the IP address returned is 0.0.0.0 </span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have checked the /etc/services and /etc/inetd.conf =
on each
client</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have checked the bp.conf on each client and server =
and
media server names are present</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have checked /etc/hosts on server and =
client</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have enabled logging of bpcd and vnetd on the =
clients but
there are no log files created &#8211; indicating no communication with =
the clients
from the master</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have enabled logging of bpcd on the =
master</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>How can I determine if the problem lies with the =
firewall
rules created by the firewall admin team or with netbackup (version 5.1 =
HP-UX
running on a VCS cluster). Could the issue be related to the fact that I =
have a
netbackup clustered server. The firewall rules only specify the virtual =
server
hostname. Addition of physical name and IP to firewall rules is not =
possible.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>Regards, Mark K </span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>Due
to continued expansion Sabeo Technologies have moved office &#8211; to =
The Courtyard,
  Carmanhall Road, Sandyford, Dublin 18. Our telephone and fax numbers =
remain
unchanged. A location map is available on our website =
www.sabeo.com.</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>*****************************=
*****************************************</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>This
email and any files transmitted with it are confidential =
and</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>intended
solely for the use of the individual or entity to whom =
they</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>are
addressed. If you have received this email in error please =
notify</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>Sabeo
Technologies.</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>This
footnote also confirms that this email message has been swept for the =
presence
of computer viruses.</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>*****************************=
*****************************************</span></font></p>

<p><font size=3D1 face=3DArial><span =
style=3D'font-size:8.0pt;font-family:Arial'>&nbsp;</span></font></p>

</div>

<div id=3D"##disclaimer##"><p></p><p style=3D"FONT-SIZE: x-small; =
FONT-FAMILY: Arial, Sans-Serif">This message is for the designated =
recipient only and may contain privileged, proprietary, or otherwise =
private information. If you have received it in error, please notify the =
sender immediately and delete the original. Any other use of the email =
by you is prohibited.</p></div></body>

</html>

------_=_NextPart_001_01C5E3E7.2B914C80--

<Prev in Thread] Current Thread [Next in Thread>