Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Symantec Netbackup appliance

Created: 23 Apr 2013 • Updated: 28 Apr 2013 | 63 comments
thamerthamer's picture
This issue has been solved. See solution.

Hi experts,

i have new Symantec appliance 5220, i power on the box and i started following the documentation getting started for the appliance,

initially i login using the user interface in web browser with IP http://192.168.1.1 from my laptop i was doing the public network interface,

which did not completed coz we don't have a DNS server which is must seems to complete the configuration,

but suddenly i was not able to re-login again with same user/password with bellow error msg:

"Login failed. Please contact your System Administrator."

 kindlly find the attached also,

any suggestions?

BR,

Thamer Salah

Operating Systems:

Comments 63 CommentsJump to latest comment

Andrew Madsen's picture

User name and password

admin

P@ssw0rd

The above comments are not to be construed as an official stance of the company I work for; hell half the time they are not even an official stance for me.

thamerthamer's picture

Andrew,

thanks for replying, 

yes that's exactly login details that i used initially, but for some rezone i am not able to login any more with it,

one thing more the same user name and password working with ssh command line,

any suggestions?

Rami Nasser's picture

As understoode you that you didnt configure the appliance yet.So you can connect keybord and monitor directly to appliance and login iinto the appliance using the userame :admin and password P@ssw0rd then go and reset the appliance to the factory setting it will not take time ,then start the installation process fro scratch.

Regards,

Umair Hussain's picture

are you trying to login on IPMI or regular GUI interface through web browser ?

thamerthamer's picture

Appreciated Rami,

this is what i am planning to do tomorrow, i will reset it to the factory using command line,

but i don't know what really is not allowing me to login,

will update you tomorrow,

BR

StefanosM's picture

If you pass the change password page, you may had change the password.

Try to remeber what you have type.

To use ssh run the command "ssh admin@192.168.1.1"

If you can not login to appliance and you do not have any backups on it, your only way is to reimage it using the USB stick.

If you have backups on it, call support. They may help you.

Rami Nasser's picture

This is the admin account you will be able to login using admin username and P@ssw0rd(kindly find attached screen snapshot.

if this admin account is deleted or you could not use it so you need to reimage the appliance

Regards,

reset the appliance.png
thamerthamer's picture

Stefanos Monovasios,

this is what really confusing me, i did not pass or saw any step mentioning to change the password, plus when i ssh to 192.168.1.1 and login using admin P@ssw0rd it works !!!!

but using UI not login at all ,

check the attached plz

thamerthamer's picture

Rami, 

i am able to login using ssh !!!1

Rami Nasser's picture

from your screen i see that you are using user name :test  why and when you create ths account??

thamerthamer's picture

you are correct!!

after i faced this issue i have log in using ssh with admin userneame and create test user as a testing,

i was thinking there is something wrong with this user from GUI!!!

Rami Nasser's picture

good ,continue and the work will finished successfully

P@ssw0rd is sensetive  (Capital p and 0 -zero)

thamerthamer's picture

ok, so tomorrow i will reset the appliance to the factory,

i will use the command line, i found the step in the command line Ref as well,

thanks Rami,

Rami Nasser's picture

If you will need any further support please letme know

Regards,

thamerthamer's picture

Rami today was the first day i am touching the appliance,

jus if you don't mind what is next should be done after finalize the network configurations?

beside the version upgrade, as the current version is old which is 2.0.1,

also one thing more i was facing while configuring the network, before i face this issue,

it was not allowing me to proceed without configuring the DNS !! although i was reading the doc it was saying that i can configure the fully qualified name or DNS so i chees the qualified name but still it was not allowing me to proceed 

StefanosM's picture

It is very strange.

It may be a good idea to let support have a look on this problem, now that the appliance has no data.
You may found a bug and it is good for all of us to resolve it.

EDIT: 2.0.1 is old. Upgrade to 2.5 or 2.5.2.
 

Rami Nasser's picture

Do you have the usb with 2.5 version? if yes so i suggest to reimage the appliance before configuartion,if not so you can configure the appliance with your current version then download the upgrade from the Symantec portal and do your upgrade.

I will provide you with the snapshot on how to configure the appliance

Rami Nasser's picture

Kindly find the steps

Regards,

AttachmentSize
Install and Configure Netbackup 5220 Appliance.docx 693.6 KB
SOLUTION
Rami Nasser's picture

EDIT: 2.0.1 is old. Upgrade to 2.5 or 2.5.2.

you could not upgrade directly from version 2.0 to 2.5.2 directly ,you will need to upgrade from 2.5 then to 2.5.2

Regards,

StefanosM's picture

If you select to reimage your appliance, read carefuly the admin guide.

You have to export and save the IPsec credentials before the reimage.

thamerthamer's picture

really many thanks Rami and Stefanos,

, i don't have the image yet, hopefully i will solve the login and network issue tomorrow, then i will consult both of you for the upgrade before i go ahead ,

thanks again

Mark_Solutions's picture

Hi

After a failed configuration attempt the appliances web interface re-sets meaning that you cannot log in for quite a while to try again!

Best to give it a while, flush you browser cache and then re-try the login.

It is for this reason that i no longer tend to use the web uinterface to configure the appliance!

If you havent re-set it yet then I would advise configuring it via the CLISH - and use a keyboard and mouse directly connected to it - bear in mind when you do this you get a US keyboard so P@ssw0rd may need to be entered as P"ssw0rd (shit 2 for the @)

It has a few steps but is fairly easy - here is an example - substiture your own names etc:

Fist go to the O/S (Support - Maintenance - P@ssw0rd - elevate)

vi your /etc/hosts file to include your master servers name and ip address and the planned name of the appliance and its IP address (all short and FQDN) - this get round the DNS issues you may have had!

Network - Configure 10.10.10.11 255.255.255.0 eth1 (eth 1 has to be configured - you cannot choose eth0 to have you "real" IP address yet!)

DNS Add NameServer 10.10.10.10

DNS Add SearchDomain company.com

DNS Domain compnay.com

Hostname Set myappliance.compnay.com

Next, if it is to be a Master go to the Manage  - Appliance menu and type Master

If it is to be a Media go to the Appliance menu and type:

Media mymaster.company.com

If it is to be a media for an existing appliance master then go to the Master appliance clish appliance menu and choose Add

Then just follow the prompts through and answer the questions about advanced disk, de-dupe etc.

If you have a storage shelf you can add that after - Manage Storage List - get the shelf name and then so Storage Add unit_1 (or what ever it is called)

You can then expand the de-dupe onto it using ReSize DeDuplication 40 TB

according to the size you want.

If you decide to bong the network and want to use eth0 as well then go to the network section and use:

Unconfigure eth0

Linkaggregation enable eth0,eth1,eth2,eth3,eth4,eth5 802.3ad

or what ever type of bonding you need

You should now have a working appliance ready to be patched - but always patch via the directly connected keyboard / monitor ir the IPMI connection

Hope this helps - anything else you need to know get back to me

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

hello all,

restFactory did not work also,

still i am not able to login with browser,

SSH working fine,

i am trying now as Mark recommend to do somthing from command line,

thanks Mark!!

StefanosM's picture

I advice you not to continue and re-image the system.

You do not know what is the problem and you may face it in the future, with backups on the system.

Ask support to download the 2.5 image. You can re-image it with an external USB DVD

Mark_Solutions's picture

I have also had issues with re-imaging using the 2.5 USB - my last install required 4 5220's to be re-imaged and none worked!

I ended up re-imaging to 2.03 (which went fine) and then upgraded to 2.5

If the web interface is not working it could just be an issue with the Operation Manager web services - try to do it the way i said and see how it goes - if no good you can always re-image later - but do export the IP Sec first otherwise you may have to wait a few days for support to re-generate them for you

Keep us updated - should only take 30 minutes to an hour to configure one from the CLISH

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

thanks guys ,

i found one thing, actually i mentioned that the image version is 2.0 from the label that i have seen on the box, but it seems its old label , as now when i got to the prompt using screen and key board its showing 

" Welcome To Netbackup Appliance 2.5"

so i think this is the latest,

## Mark what do you mean by CLISH , is it me to login using ssh ?? command line which i am already doing at the moment ?

StefanosM's picture

I had seen it before with a POC appliance. when you finish the installation, all will go back to normal.

thamerthamer's picture

actually this is POC :), so i will re-image it? with the same version?

thamerthamer's picture

in which Doc i can find the installation procedure?

StefanosM's picture

admin guide.  search for the word reimage.

use the 2.5 or ask to download 2.5.2

Mark_Solutions's picture

The CLISH is the command menu system of the appliance

If its name is nb-appliance then it has already been re-imaged / factory re-set so you should be OK to go ahead with the configuration.

If not then before you do anything go to the command menu and give it an IP addres so that you can access it over the network, then do as follows:

Network - Security

Export no /usr/openv/netbackup/logs

Return

Support

Logs

Share Open

Return

Maintenance

P@ssw0rd

elevate

cd /usr/openv/netbackup/logs/

chmod 777 .SYM*.pfx

chmod 777 SYM*.pfx

Then map a drive to to \\appliance\logs\ using appliance\admin and P@ssw0rd as the login and copy those two .pfx file off and keep them safe

Your choice but i would try it as it is first

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

Hi Mark,

many thanks, have a look, i have an error:

nb-appliance.Network> Security
Entering appliance IPsec management...
 
Configure    Configure IPsec between any two hosts.
Delete       Unprovision IPsec policies for a list of remote hosts on local box.
Exit         Logout and exit from the current shell.
Export       Export the IPsec credentials.
Import       Import the IPsec credentials.
Provision    Provision IPsec policies for a list of remote hosts on local box.
Refresh      Reload the IPsec configuration. With auto-refresh, refresh configuration on all referenced hosts.
Return       Return to the previous menu.
Shell        Shell operations.
Show         Display IPsec policies for local host or provided host.
Unconfigure  Unconfigure IPsec between any two hosts.
 
nb-appliance.IPsec> Export
yes no
nb-appliance.IPsec> Export no /usr/openv/netbackup/logs
- [Error] Export credentials command failed
- [Error] Unable to export credentials
 
Mark_Solutions's picture

It is also worth checking the license key if this is a POC unit - it may have run out and so nothing will work!!

Manage

License

List

If it has run out and you already have a NetBackup license then add it using the Add command

If this is to be a media server then add it as an additional server and a media server on your master servers host properties and also add the de-dupe license key to the master - then re-start NetBackup on it before you go any further!

This makes sure it adds in correctly

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

StefanosM's picture

I'm ruining a POC with two appliances now. I reimage both to 2.5.2 and I have to say that no IPsec certificates ware found on both systems.

Someone else before me was not fol ow the procedure. Probably this is true for you also.

Mark_Solutions's picture

That is quite possible - I guess it doesn't matter for a POC unit - but if you do ever need one replacing then just log a case with support and give them the serial number and / or a DataCollect and they will send you a fresh set of IPSec credentials for that appliance

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

many thanks for both of you,

by tomorrow i will re-image this appliance which make me crazy and will let you know ,

Thanks

Mark_Solutions's picture

OK - did you try it via the command menu to see if it worked? Only takes 30 minutes or so?

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

i tried what exactly Mark?

 do you mean your recommendation related to "Network - Security"??

Mark_Solutions's picture

As the IPSec doesn't exist due to it being previosuly re-imaged you cannot do that part

But you can do everything else that i listed to get it configured as a Master or Media Server - you will never get the IPSec back now, even after a re-image so dont worry about that part of the proceedure

You can get one of these as a Master or Media in 30 minutes if you follow my instructions earlier

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

Mark, do you mean i will not be able to reimage my appliance without the IPSec?

correct me if I am wrong!!

i was reading the bellow :

"the IPsec credentials are removed during the

process reimage. The credentials are unique for each appliance and are included as part

Troubleshooting procedures

Troubleshooting NetBackup Appliance problems

26

of the original factory image. The IPsec credentials are not included on the USB

drive that is used to reimage the appliance.""

do i really need the functionality of IPSec?? and for what?

as what i understood from the previous steps you provide me that i will start configuring the appliance to be as a master!!! so what about the current issue that i have? Which i am not able to login using the browser!!

Thanks

StefanosM's picture

this is the patch to go from 2.5 to 2.5.2. You can not use it to reimage the appliance.

If you do not have the 2.5.2 image, use the existing USB to reimage it to 2.5 and then patch it to 2.5.2.

OR ask support to give you the 2.5.2 iso image. If they can not give it to you, I get mine from a symantec presales. Ask your symantec presales to give it, he knows where to find it.

And do not bother with IPsec, ignore it

thamerthamer's picture

thanks Stefanos,

this what i have at the moment 2.5,

thats why i am using this patches, why it will not work?

thamerthamer's picture

you mean patchin 2.5 to 2.5.2 will not be a reimage??

it will not install new image?

StefanosM's picture

the link you provide is a patch and not an image.

use the USB to reimage to 2.5 and then patch it to 2.5.2

thamerthamer's picture

as i dont have the USB, its POC appliance

StefanosM's picture

ask your symantec presales to help you.
I do not think that appliance images are available for download.

thamerthamer's picture

the presales never seen the Appliance :),

i will check myself with Symantec,

Appriciated,

StefanosM's picture

if I remember well the name of the site is symapp. Just tell to your symantec presales to check this ftp site for the appliance images.

There is no answer like "the presales never seen the Appliance". If he does no't know, he knows someone who knows.

Mark_Solutions's picture

What you can also do from the command section is under Support - FactoryReset

Doesn't re-image but does re-built its current configuration back to default.

To be honest I would just try it as it is - what have you got to loose?

As i said, it only takes 30 minutes or so to configure it - you would have know by now if it was OK

The Web GUI issue you have it caused by what they call the AdminConsole service not running after a failed configuration attempt - this will not be the case when doing it from the command line.

I have never had one that was unusable yet - from what you have said so far i cannot see that it has any serious issues

Please just try the config i listed, after that you can patch it to 2.5.2

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

Mark, i am doing your configuration recomendations,

will update you

Thanks

Mark_Solutions's picture

Great - fingers crossed - sure it will be fine!

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

Hi all,

befor i start reconfigure the appliance network ports using command line , i was trying to reset it to Factory have a look it seems having issue :

nb-appliance.Support> FactoryReset NoPrompt
 
 
 
 
 
WARNING: Unable to determine current role of the appliance.
Removing existing NetBackup configuration
- [Info] Stopping NetBackup processes
- [Info] Removing current NetBackup configuration
- [Info] Performing Deduplication Engine cleanup
- [Info] Removing all storage partitions, and expansion units' storage if any on 'nb-appliance'...
- [Info] Stopping NetBackup processes... (2 mins approx)
- [Info] Checking whether the 'Deduplication' partition is present...
- [Info] The 'Deduplication' partition does not exist.
- [Info] Checking whether the 'AdvancedDisk' partition is present...
- [Info] The 'AdvancedDisk' partition does not exist.
Adding factory default NetBackup configuration
- [Info] Creating basic NetBackup configuration on appliance 'nb-appliance'
- [Info] Reconfiguring NetBackup databases
- [Info] Creating a blank NetBackup database
  -> Starting NetBackup exchange service ...                          done
  -> Stopping NetBackup services ...                                  done
  -> Disabling NetBackup database ...                                 done

  -> Creating a new NetBackup database ...                            failed

  -> Starting NetBackup database server ...                           done
  -> Updating NetBackup database server name ...                      done
  -> Stopping NetBackup services ...                                  done
 
thamerthamer's picture

one thing more , before i reset to factory i configured eth1 with IP and netmask,

which reset to factory supposed to unplumb the interface and configure the ip,

but now when i ping this IP on eth1 sill pinging !!!!!

so reset factory seems did not take effects

?

StefanosM's picture

My first installation was interrupted by my mistake. After that point I had the same problem with you.

I tried to troubleshoot it by logging  on to CLI and follow the manual procedure to create an empty EMM database and I found that the appliance could not create the AT database.

I come over it only after reimage the system

Mark_Solutions's picture

I wouldn't worry about the database - it gets populated and re-built when you  do the config - and is only needed if it is to be a Master Server

Will it be a Master or just a media server?

During the factory re-set is should have prompted you about resetting the network, if you just hit return it will have kept the config you had originally

It is seem stuck trying to start the services after the re-set just re-set the power (IPMI is useful here) and once it comes back up start the config - it effectively does all the re-set again during a config anyway

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

Mark_Solutions's picture

Ok - thats fine - it will create the data base when you run through the configuration, as soon as you tyoe the word Master it wil start the process

Have you had chance to do it yet?

Authorised Symantec Consultant

Don't forget to "Mark as Solution" if someones advice has solved your issue - and please bring back the Thumbs Up!!.

thamerthamer's picture

Thanks Mark,

On Sunday will start , will keep you posted ,

thanks

thamerthamer's picture

Dear All,

i would like to thanks all of you for your support,

issue was solved,

Mark# ur steps work perfectly but still i was facing some issues,

i manage to get the memory stick from Symantec to reimage the appliance which solve all the issues and the EMM, hosts file GUI ...etc,

for sure i will need you support those days to finalize the configurations ,

thanks again for all of you,