====== Configure NDMP backup for Netapp/Ontap ======

===== Ontapp =====

==== Node registration in IBM Spectrum Protect ====

=== Scope backup using nodes ===

Create a user ndmpbkp on Ontapp with backup rights:
<cli prompt='>'>
ONTAP01::> security login create -user ndmpbkp -application ssh -authmethod password -role backup

ONTAP01::> vserver service ndmp generate-password -vserver ONTAP01 -user ndmpbkp 

ONTAP01::> vserver services ndmp show
VServer       Enabled   Authentication type
------------- --------- -------------------
ONTAP01       true      challenge
svm01         false     challenge
svm02         false     challenge
svm03         false     challenge
4 entries were displayed.

ONTAP01::> vserver services ndmp show -vserver svm01

                             Vserver: svm01
                        NDMP Version: 4
                        Ignore Ctime: false
                   Enable Offset Map: true
                  Enable TCP Nodelay: false
                     TCP Window Size: 32768
                     Data Port Range: all
                   Enable Backup Log: true
          Enable per Qtree Exclusion: false
                 Authentication Type: challenge
              Enable NDMP on Vserver: false
            Preferred Interface Role: intercluster, data
Is Secure Control Connection Enabled: false
</cli>

<cli prompt='>'>
ONTAP01::> system services ndmp node-scope-mode on
NDMP node-scope-mode is enabled.
ONTAP01::> system services ndmp modify -node * 
</cli>

=== Scope backup using vserver ===

<cli prompt='>'>
cluster1::> system services ndmp node-scope-mode off
NDMP node-scope-mode is disabled.
cluster1::> vserver services ndmp on -vserver cluster1
cluster1::> vserver services ndmp show

Vserver       Enabled   Authentication type
------------- --------- -------------------
cluster1      true      challenge
vs1           false     challenge
</cli>





===== Netapp =====

==== Node registration in IBM Spectrum Protect ====

Create a user on Netapp with backup rights:
<cli prompt='>'>
netapp01> useradmin group list
...
Name: Backup Operators
Info: Members can bypass file security to backup files
Rid: 555
Roles: backup
netapp01> useradmin user add ndmpusr -c "Backup_NDMP" -g "Backup Operators"
New password:
Retype new password:
Warning: Password longer than 14 characters. User inaccessible from Windows
User <ndmpusr> added.
Wed Nov 18 10:44:48 CET [netapp01:useradmin.added.deleted:info]: The user 'ndmpusr' has been added.
netapp01> useradmin user list -x
..
Name: ndmpusr
Info: Backup_NDMP
Rid: 123186
Groups: Backup Operators
Full Name:
Allowed Capabilities: login-ndmp
Password min/max age in days: 0/4294967295
Status: enabled

netapp01> ndmpd password ndmpusr
password yyyyyyyyyyyyyyy
</cli>

ATTENTION, on Netapp 7-mode it's not easy to change a user, except when you are connected with it..

Node registration into SP with the previous password (which is to the password register when create Netapp user)
<cli prompt='>'>
Protect: ISP1>reg node NETAPP01 yyyyyyyyyyyyyyy  dom=nas type=nas passe=0 MAXNUMMP=10
ANR2060I Node NETAPP01 registered in policy domain NAS.

Protect: ISP1>def datamover NETAPP01 Type=nas HLAddress=10.10.10.21 LLAddress=10000 USERid=ndmpusr PASsword=xxxxx  ONLine=yes DATAFormat=NETAPPDump
ANR1730I Data mover NETAPP01 has been defined.
</cli>


===== Server OPTIONS =====

<cli prompt='>'>
Protect: ISP1>SETOPT  NDMPPREFDATAINTERFACE 10.10.10.56
Do you wish to proceed? (Yes (Y)/No (N)) y
ANR2119I The NDMPPREFDATAINTERFACE option has been changed in the options file.

Protect: ISP1>SETOPT NDMPPortRange 1200,1299
Do you wish to proceed? (Yes (Y)/No (N)) y
ANR2119I The NDMPPORTRANGE option has been changed in the options file.

Protect: ISP1>SETOPT NDMPControlPort 10000
ANR2305I The change to option NDMPCONTROLPORT will not take effect until the server is restarted.
Do you wish to proceed? (Yes (Y)/No (N)) y
ANR2305I The change to option NDMPCONTROLPORT will not take effect until the server is restarted.
ANR2119I The NDMPCONTROLPORT option has been changed in the options file.

Protect: ISP1>q opt

       Server Option           Option Setting           Server Option           Option Setting
---------------------          ---------------          ---------------------   --------------------
       NDMPControlPort         10,000                   NDMPKeepIdleMinutes     120
       NDMPPortRange           1200,1299                NDMPPrefDataInterface   10.10.10.56
</cli>

===== Activate NDMP on Netapp =====

  * NDMPD command options
<cli prompt='>'>
netapp01> ndmpd ?
usage:  ndmpd [on|off|status|probe [<session #>]|kill <session #>|killall|
        password [<username>]|version [?|<max_version>]]
        where <max_version> is the highest ndmp version (in the range of 3 to 4) allowed by the filer.
netapp01>
</cli>

  * Check the status on NDMP sessions 
<cli prompt='>'>
netapp01> ndmpd status
ndmpd ON.
No ndmpd sessions active.
</cli> 
  * Visualiser les sessions NDMP
<cli prompt='>'>
netapp01> ndmpd probe
ndmpd ON.
No ndmpd sessions active.
</cli> 
  * NDMP version in use
<cli prompt='>'>
netapp01> ndmpd version
ndmpd highest version set to: 4
</cli>