Add a Server from another Domain and IP Range

syst_tech's picture

Hy together

Cann i Add a Server to a existed Backup Job. The Server is in another Domain than the Backupserver, and in another IP Range (DMZ)?

Thank you for Infos.

Kind Regards Michael

CraigV's picture

Hi Michael, What you'd do is

Hi Michael,

What you'd do is the following:

1. On the other domain, create a service account with the required permissions.
2. Add this as a Local Admin on that particular server in question.
3. In Backup Exec on your media server, open up the Network drop down menu, and go into Logon Accounts.
4. Add in a new user with the DOMAIN\service_account you created in 1. It won't be your default account, and it's type will be common.
5. Create your job and use those credentials to access the server.

Post the results here.

Laters!

If you find this is a solution, please mark it as such.

syst_tech's picture

Thank you very much 1. The

Thank you very much

1. The other Server is an DomainController (DMZ). I created the user "backup" with a password.
2. The user is member of "Administrator" and "Domain Administrator"
4. I ve created the Account "Domain\backup, with the set password on the Backupserver (IP 192.168.130.12)
5. If i wanted to create a backupjob, its called; wrong username or password, but im sure, that i ve selected the rigt password and username

Thank you for informations.

CraigV's picture

Mmm...domain controller makes

Mmm...domain controller makes it a little bit more difficult with no local admins group.
Just give it another bash and see if it comes through.

If you find this is a solution, please mark it as such.

syst_tech's picture

I found the mistake

I found the mistake. The firewall deny contat from de DMZ to the LAN, who stand the Backupserver.

Do you now wich Ports or Services must be open, that Symantec can contact the BackupServer?

I dont want open all datatraffice.

Thanks and greets

CraigV's picture

Hi Michael, Check this

Hi Michael,

Check this out...explains it all nicely:

http://seer.entsupport.symantec.com/docs/278944.htm

Laters!

If you find this is a solution, please mark it as such.

syst_tech's picture

Ok

Now, ive take another Network Card in the Backupserver, ind create a direct Link from the Backupserver to the DMZ and oso in the other direction.
I can make a Ping and oso a RDP Connection from the DMZ to the LAN.

The Problem is now again, that i cant add the remote server in the Backup Exec Software on the Backupserver:

Job-Setup - Source - Selection -

An ther i havent a posibilliti to add the server in the DMZ.

The trick with add a Conto isnt working again; same mistake; wrong Username or password. But im shure its the rigtht.

Ind i have installed the Remote Backup Agent on the Server in the DMZ and the Service is already running.

Where can I select the Server or what shoud i do again bevore?

Thanks and Greets

Michael

CraigV's picture

Is the server in the DMZ in a

Is the server in the DMZ in a separate domain, or a workgroup?
You need to create a user account on your media server for that specific server, or alternatively a local user with admin rights on that DMZ server. Once done, add in the user account on your media server. You can use this to log on and backup that server.

If you find this is a solution, please mark it as such.

syst_tech's picture

Yes. The server in the DMZ is

Yes. The server in the DMZ is in another Domain than the Backupserver.

FIRST STEP

Ive created on the DMZ Server an Account (Active Directory Account, i cant add a local Account if the Server is an DC)

Username backup
Password tes123

In the Adminstrator group!

Then on the Backupserver: Network - Accounts -

iv created a new account:

Username: DomainnameDMZServer\backup
Password: tes123

Then ive selected this as standard an tried to add the DMZ Server:

But the message, that iv selected a wrong username or password came, ind i cant add the DMZ Server.

SECOND STEP

Then ive created an local User on the backupserver:

Username DomainnameDMZServer\backup2
Password tes123

In the Adminstrator group!

Then on the Backupserver: Network - Accounts -

iv created a new account:

Username: backup
Password: tes123

Then ive selected this as standard an tried to add the DMZ Server:

But the message, that iv selected a wrong username or password came, ind i cant add the DMZ Server.

Did I misunderstood sth.?

CraigV's picture

Mmm...will look into this!

Mmm...will look into this!

If you find this is a solution, please mark it as such.

syst_tech's picture

Sorry

What do you mean exactly? I dint understand your answer.

CraigV's picture

I'll see if I can test it on

I'll see if I can test it on my side...

Can you at least add that server in before it bombs out?

If you find this is a solution, please mark it as such.

syst_tech's picture

Oh thank you so mutch...im

Oh thank you so mutch...im very scared becaus the datas arent safe.....

- I can pin fom the DMZ to the Backupserver (and oso in the other direction)
- I can map the shares from the DMZ Server on the Backupserver (Under start - execute and then the IP adress, not in the Backup Exec programm)
- But I cant add the Server to an exist Backup Job

CraigV's picture

Another way around

Another way around this...

1. On the DMZ server, create a local account and give it Admin rights.
2. On your Backup Exec server, add that user account in Backup Exec as: DMZServerName\UserAccount and put in the password.
3. Remove the DMZ server's domain account from your Backup Exec server and try to run the backup again.

Laters!

If you find this is a solution, please mark it as such.

syst_tech's picture

The Problem is: - THe DMZ

The Problem is:

- THe DMZ Server is a Domain Controlle (Active Directory) i can not add an local account!

Thanks a lot and cheers

CraigV's picture

best thing would then be to

best thing would then be to log a call with Symantec...their support is generally very good.
Sorry I couldn't be of any help.

PS: Forgot the DC part of things...would have helped to remember that as you posted it before =)

If you find this is a solution, please mark it as such.

syst_tech's picture

Ok. Ive sent an request to

Ok. Ive sent an request to the symantec enterprise Support (Email). I wll post those answer.

syst_tech's picture

Ok, the technical Support

My Question at the support:

The Backupserver have two networ interfaces :
1 In LAN (192.168er Range) 1 in the DMZ (195.er IP Range).
I have a Windows DC in the DMZ and want now this server add to the backupserver, who stand in the LAN
The servers have contact in bouth directions (ping)
Unfortunataly ive tested it; created a new Account (DomainDNZServer\DMZ Server) in the Backup Exec Software. Without succes.

 

Ok, the technical Support cant help me because i havnt a support contract....
They told me to post the question in the Symantec support forum....

I think it woud be not so complicated ;-)

CraigV's picture

Mmm...hate that when it

Mmm...hate that when it happens.

The account that you're using in your DMZ...that's what you're referring to when you say DomainDMZServer\DMZ Server right?

If you have a trust, have you put that DMZ account into the local admin's group on your backup server?

If you find this is a solution, please mark it as such.

syst_tech's picture

Yes. On the DMZ Server i

Yes. On the DMZ Server i havnt a local Account. But i can take the Administrator:

DomainDMZServer\administrator

Yes ive Create in the Backup Exec Tool, under Network - Accounts a new Account: DomainDMZServer\administrator

CraigV's picture

OK...antivirus/anti-spam/fire

OK...antivirus/anti-spam/firewall on those servers blocking specific traffic?
Hardware firewall blocking the ports needed to communicate between BEWS and the agent on the DMZ server?
I know that with McAfee it tends to block some of the traffic in our data centre when it decides too!

If you find this is a solution, please mark it as such.

syst_tech's picture

I dint so...we use

I dint so...we use Symantec....on the DMZ Server

And the Backup Server dindt have a AntiVir.

Ive seen, that the Service (Backup Agent) is running. Thats oso not the problem.

Ive tried again:

- On the Backupserver in the BAckup Exec Programm ive add a new Sign-In Account
- Ive gave the same Domain, Username  and the Password  like the Administrator User on the DMZ Server.
- Again the mistake;wrong PWD or Username

Is maybe an restart of the DMZ Server a theme?

CraigV's picture

Try it and see...you never

Try it and see...you never know.

If you find this is a solution, please mark it as such.