Forum Discussion

Itegral's avatar
Itegral
Level 6
12 years ago

Netbackup requirements - cross forest backup

Could you please share requirements for NetBackup/Backup Exec cross forest set up i.e. dual way trust relationship, DNS settings, exchange & SQL backup etc.

we have two forest, A and B

Forest A has Exchange/SQL and NBU Media server

Forest B has NBU Master server and Media server

So, will the authentication to access Exchange/SQL in the forest A be configured via a service account on the forest A NBU media server and doesn't need to be configured on the forest B master server?

 

 

  • whats the benefit of a media server per forest/domain?
    No multiple network hops for data transfer.
    Fewer firewall ports to be opened.

    What impact would it have on bi-directional trust?
    No idea... Domain trust is not a NBU requirement. Just forward and reverse name lookup as well as port connectivity.

    What options do I have for NBU to work without issues while maintaining the security?
    Port connectivity is needed for successful comms. No way without it unless you put a separate master/media server in each domain/forest.
    NBU has come a long way to reduce number of ports - from 100's of ports needed in version 3.x to one port  (1556) since 7.0.1. (A couple more if dedupe is used.)

    If only filesystem backups are done for clients, no comms are needed between master and client. Here backup selection is sent to media server and comms is limited to media server <-> client.
    If you backup ALL_LOCAL_DRIVES and/or databases, bi-directional connectivity is needed between master and client for initial job setup before data transfer is passed to media server and client.

     

    Hope this helps.........

12 Replies

Replies have been turned off for this discussion
  • whats the benefit of a media server per forest/domain?
    No multiple network hops for data transfer.
    Fewer firewall ports to be opened.

    What impact would it have on bi-directional trust?
    No idea... Domain trust is not a NBU requirement. Just forward and reverse name lookup as well as port connectivity.

    What options do I have for NBU to work without issues while maintaining the security?
    Port connectivity is needed for successful comms. No way without it unless you put a separate master/media server in each domain/forest.
    NBU has come a long way to reduce number of ports - from 100's of ports needed in version 3.x to one port  (1556) since 7.0.1. (A couple more if dedupe is used.)

    If only filesystem backups are done for clients, no comms are needed between master and client. Here backup selection is sent to media server and comms is limited to media server <-> client.
    If you backup ALL_LOCAL_DRIVES and/or databases, bi-directional connectivity is needed between master and client for initial job setup before data transfer is passed to media server and client.

     

    Hope this helps.........