Hi All,

It’s the newbie who is in need of help once again.  We are running one host with VMware vSphere 5
Essentials with 5 hyper-V’s.  The Hyper-v’s
are all windows 2008 servers. 

We were running the free VMWare ESXi version but upgrade to essentials
because I was told this would unlock the api’s to allow for backup of the
hyper-v’s also would be entitled to support.
Since Essentials does not come with support I’ve been searching the web
to find something within our budget (we have no budget) to backup/restore the
hyper-v’s.  I’ve looked into Carbonite…carbonite
cannot be install on ESXi this will not work; also looked at thinwave backup
click but does not accept my password and have read about vdp but it’s over
1k.  I thought I would ask the
communities for help on find a reasonable product. 

Ok community what do you recommend. 

The newbie

hi guys

I have this VDP that backups only 8 VMs, and I've been having a problem with one of them - always the same VM (vmware tools up to date, OS W2008 R2)

I get this error message like every  3 days, yeah the issue is fixed as soon as I consolidate the VM - from VM menu - .

this is what is happening I see that one VM is failing so in the Events I see this (vCenter)

XXXcom.vmware.vdp2.server.error.10056.formatonvmfoundXXX

so I found that VDP creates a snapshot not visible from snapshot manager and that creates this problem, so when I found this I have to manually run a Consolidation on this VM

I found this VM always having this hidden snapshot   VM_name_00001.vmdk

anyone knows how to fix this forever, I cannot be consolidating this VM every 3 days...

I have like 8 VDP instances installed and believe me managing this products is very tired, I don't know any other product like Veeam so I ave no way to compared

thanks a lot

Hi,

I am running two node cluster of esxi.Running around 10 vm in total with capacity ranging from 300GB to 750 GB.

Got a NAS box and thinking of attaching the backing up the vm on this storage.Can provision it as NFS or CIFS only.

Few questions;

1.Would like know does mean by the limit of .5TB,1TB or 2TB in VDP appliances?

2.Does .5TB is limit for CIFS,1TB for NFS and 2TB on VMFS store?Does this means destination store where I going to keep backup of VM?

3.As size of total VM/s in my case is around 3TB to 4TB does that mean I can't backup all my vm with one appliance or matter of fact with  2 appliance?

4. FAQ says one appliance per ESXI that means I have limit of 2 appliances in 2 host cluster?

Breg,

Sushil

Hi,

We are running two host on Esxi on 5.5 on HP DL380G8 Servers.

Planning to have backup of critical files,DB offsite as well.May be whole VM we can backup or specific files or DB we may backup on HP Autoloader 1/8 6250 SAS based and rotate the tapes weekly monthly etc.

Evaluating the option of Veeam B&R and Symantec Backup Exec.

What we planning to have a one of the existing VM inside the Esxi 5.5 to see the Tape-Autoloader.

But realized that  Vmware doesn't support Tape drives directly connected over 5.x onwards. Does.Does anyone know the reason for this while it was fine with prior version of Vmware.

In that case only left with the option of attaching adding another physical server and adding the SAS HBA and Tape autoloader to this server.

This looks to me additional cost of adding the server with OS.

Is there any other way round,I can backup important data offsite of our office premises.

Regards,

Sushil

Hello, i wold like to change the VDP IPTABLES defualt rules.

I Need to close all Incoming traffic except for my network xxx.xxx.xxx.xxx

Someone can show me the best way to do this hardening ?

I have find This:

less /etc/firewall.default

#!/bin/sh

# This is to be installed/run on each of the Avamar nodes on

# the customer network.

# In the case that something goes terribly wrong invoke the command:

# "service avfirewall stop" for SLES or "iptables stop" for RHEL.

# To see if the parameters are loaded run "service avfirewall status"

# on SLES or "iptables -L" on RHEL.

#-- OP_MODE should be set in the /etc/firewall.conf file

if [ -z "$OP_MODE" ]; then

  #-- OP_MODE wasn't set ... just default to FULL

  OP_MODE="FULL"

fi

# 1. Path to the iptables command

IPT=`which iptables`

#sleep 10

MYIP=`hostname -i`

# 2. Flush old rules, old custom tables

$IPT --flush

$IPT --delete-chain

# 3. Set default policies for all three default chains, drop all incoming and

# forwarded packets, allow outgoing packets

# NOTE: Since the "default" policy of the outbound connections is "ACCEPT",

# we do not need any further "OUTPUT" rules (except for the loopback interface)

$IPT -P INPUT DROP

$IPT -P FORWARD DROP

$IPT -P OUTPUT ACCEPT

# 4. Enable free use of loopback interfaces

$IPT -A INPUT -s 127.0.0.1 -j ACCEPT

$IPT -A OUTPUT -s 127.0.0.1 -j ACCEPT

# 5. Allow returning packets

$IPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# 6. Allow ICMP traffic - for network debugging

$IPT -A INPUT -p icmp -j ACCEPT

# 7. Allow DNS and NTP access from any servers

# NOTE: add a "-s <ip address>" before the "-j" to specify which

# DNS and NTP servers may be allowed

#$IPT -A INPUT -p udp --dport 53 -j ACCEPT

#$IPT -A INPUT -p tcp --dport 53 -j ACCEPT

#$IPT -A INPUT -p udp --dport 123 -j ACCEPT

#$IPT -A INPUT -p tcp --dport 123 -j ACCEPT

# 8. Allow everyone to communicate on required ports

#$IPT -A INPUT -p tcp -m multiport --dport 22,80,443,7778,7779,7780,7781,8443,28001 -j ACCEPT

# allow port for MC Web services

#$IPT -A INPUT -p tcp --dport 9443 -j ACCEPT

# allow LDAP and LoginManager connections

#$IPT -A INPUT -p udp -m multiport --dport 389,700 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 389,700 -j ACCEPT

#$IPT -A OUTPUT -p tcp -m multiport --sport 389,700 -j ACCEPT

#$IPT -A OUTPUT -p udp -m multiport --sport 389,700 -j ACCEPT

#

# appliance can talk to itself

#

$IPT -A INPUT -p tcp -s $MYIP -d $MYIP -j ACCEPT

#

# Necessary for VDP to operate

$IPT -A OUTPUT -p tcp -m multiport --sport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A OUTPUT -p udp -m multiport --sport 53,137,138 -j ACCEPT

#

$IPT -A INPUT -p tcp -m multiport --dport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A INPUT -p udp -m multiport --dport 53,137,138 -j ACCEPT

#

$IPT -A INPUT -p tcp -m multiport --sport 7444 -j ACCEPT

#

# open communication on these encrypted ports

#

$IPT -A INPUT -p tcp --sport 443 -j ACCEPT

$IPT -A INPUT -p tcp --sport 9443 -j ACCEPT

#

# gsan ports

#

$IPT -A INPUT -p tcp -s $MYIP -d $MYIP --sport 27000 -j ACCEPT

$IPT -A INPUT -p tcp -s $MYIP -d $MYIP --sport 29000 -j ACCEPT

$IPT -A INPUT -p tcp -s $MYIP -d $MYIP --dport 27000 -j ACCEPT

$IPT -A INPUT -p tcp -s $MYIP -d $MYIP --dport 29000 -j ACCEPT

$IPT -A OUTPUT -p tcp -s $MYIP -d $MYIP --sport 27000 -j ACCEPT

$IPT -A OUTPUT -p tcp -s $MYIP -d $MYIP --sport 29000 -j ACCEPT

$IPT -A OUTPUT -p tcp -s $MYIP -d $MYIP --dport 27000 -j ACCEPT

$IPT -A OUTPUT -p tcp -s $MYIP -d $MYIP --dport 29000 -j ACCEPT

# New filter to stop UDP flooding

#$IPT -I INPUT -p tcp --dport 26000 -m state --state NEW -m recent --set

#$IPT -I INPUT -p tcp --dport 26000 -m state --state NEW -m recent --update --seconds 60 --hitcount 20 -j DROP

# 9. Allow everyone to communicate on GSAN required port ranges

#$IPT -A INPUT -p tcp -m multiport --dport 19000:19500 -j ACCEPT

#$IPT -A INPUT -p udp -m multiport --dport 19000:19500 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 20000:20500 -j ACCEPT

#$IPT -A INPUT -p udp -m multiport --dport 20000:20500 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 25000:25500 -j ACCEPT

#$IPT -A INPUT -p udp -m multiport --dport 25000:25500 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 26000:26500 -j ACCEPT

#$IPT -A INPUT -p udp -m multiport --dport 26000:26500 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 27000:27500 -j ACCEPT

#$IPT -A INPUT -p tcp -m multiport --dport 40000:45000 -j ACCEPT

# possible ports for apache tomcat mod_jk proxy tool

#$IPT -A INPUT -p tcp -m multiport --dport 8543,8580 -j ACCEPT

# 10. Allow SNMP traffic

# management console traffic

#$IPT -A INPUT -p udp --dport 161 -j ACCEPT

# data domain traps traffic

#$IPT -A INPUT -p udp --dport 162 -j ACCEPT

#

# Allow everyone communication on ports 27000/27001/27002

# NOTE: should this ONLY be for localhost and would be covered by rule 4

#$IPT -A INPUT -p tcp -m multiport --destination-port 27000,27001,27002 -j ACCEPT

# 11. Allow everyone to communicate in on ports 29000/29100 for stunnel

#$IPT -A INPUT -p tcp -m multiport --destination-port 29000,29100 -j ACCEPT

# 12. Allow everyone to communicate on ports range from 8778 to 8781

#$IPT -A INPUT -p tcp -m multiport --dport 8778:8781 -j ACCEPT

# 13. Allow DTLT default ports to be open

#$IPT -A INPUT -p tcp -m multiport --destination-port 8080,8181,8444 -j ACCEPT

#  DROP all other traffic and log it

# 14. Create a LOGDROP chain to log and drop packets

LOGLIMIT="2/s"

LOGLIMITBURST="10"

$IPT -N LOGDROP

$IPT -A LOGDROP -p tcp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "TCP LOGDROP: "

$IPT -A LOGDROP -p udp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "UDP LOGDROP: "

$IPT -A LOGDROP -p icmp -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "ICMP LOGDROP: "

$IPT -A LOGDROP -f -m limit --limit $LOGLIMIT --limit-burst $LOGLIMITBURST -j LOG --log-level 7 --log-prefix "FRAGMENT LOGDROP: "

$IPT -A LOGDROP -j DROP

$IPT -A INPUT -p icmp -j LOGDROP -m pkttype ! --pkt-type broadcast

$IPT -A INPUT -p tcp -j LOGDROP -m pkttype ! --pkt-type broadcast

$IPT -A INPUT -p udp -j LOGDROP -m pkttype ! --pkt-type broadcast

$IPT -A INPUT -p tcp -j REJECT --reject-with tcp-reset

root@nastoosquare:/etc/init.d/rc3.d/#: service avfirewall status

Chain INPUT (policy DROP)

target     prot opt source               destination        

ACCEPT     all  --  localhost.localdomain  anywhere           

ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED

ACCEPT     icmp --  anywhere             anywhere           

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net

ACCEPT     tcp  --  anywhere             anywhere            multiport dports ssh,http,ideafarm-door,7444,interwise,8543,8580,tungsten-https

ACCEPT     udp  --  anywhere             anywhere            multiport dports domain,netbios-ns,netbios-dgm

ACCEPT     tcp  --  anywhere             anywhere            multiport sports 7444

ACCEPT     tcp  --  anywhere             anywhere            tcp spt:https

ACCEPT     tcp  --  anywhere             anywhere            tcp spt:tungsten-https

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp spt:27000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp spt:29000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp dpt:27000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp dpt:29000

LOGDROP    icmp --  anywhere             anywhere            PKTTYPE != broadcast

LOGDROP    tcp  --  anywhere             anywhere            PKTTYPE != broadcast

LOGDROP    udp  --  anywhere             anywhere            PKTTYPE != broadcast

REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset

Chain FORWARD (policy DROP)

target     prot opt source               destination        

Chain OUTPUT (policy ACCEPT)

target     prot opt source               destination        

ACCEPT     all  --  localhost.localdomain  anywhere           

ACCEPT     tcp  --  anywhere             anywhere            multiport sports ssh,http,ideafarm-door,7444,interwise,8543,8580,tungsten-https

ACCEPT     udp  --  anywhere             anywhere            multiport sports domain,netbios-ns,netbios-dgm

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp spt:27000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp spt:29000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp dpt:27000

ACCEPT     tcp  --  nastoosquare.virtualsolution.net  nastoosquare.virtualsolution.net tcp dpt:29000

Chain LOGDROP (3 references)

target     prot opt source               destination        

LOG        tcp  --  anywhere             anywhere            limit: avg 2/sec burst 10 LOG level debug prefix `TCP LOGDROP: '

LOG        udp  --  anywhere             anywhere            limit: avg 2/sec burst 10 LOG level debug prefix `UDP LOGDROP: '

LOG        icmp --  anywhere             anywhere            limit: avg 2/sec burst 10 LOG level debug prefix `ICMP LOGDROP: '

LOG        all  -f  anywhere             anywhere            limit: avg 2/sec burst 10 LOG level debug prefix `FRAGMENT LOGDROP: '

DROP       all  --  anywhere             anywhere           

-------------------------------------------------------------------------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------------------------------------------------------------------------

What do you think about this changes:

Original

$IPT -A OUTPUT -p tcp -m multiport --sport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A OUTPUT -p udp -m multiport --sport 53,137,138 -j ACCEPT

Modified

$IPT -A OUTPUT -p tcp -m multiport -s xx.57.10.0/24  -d xx.57.10.0/24 --sport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A OUTPUT -p udp -m multiport -s xx.57.10.0/24  -d xx.57.10.0/24 --sport 53,137,138 -j ACCEPT

--------------------------------------------------------------------------------------------------

Original

$IPT -A INPUT -p tcp -m multiport --dport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A INPUT -p udp -m multiport --dport 53,137,138 -j ACCEPT

Modified

$IPT -A INPUT -p tcp -m multiport -s xx.57.10.0/24  -d xx.57.10.0/24 --dport 22,80,902,7444,7778,8543,8580,9443 -j ACCEPT

$IPT -A INPUT -p udp -m multiport -s xx.57.10.0/24  -d xx.57.10.0/24 --dport 53,137,138 -j ACCEPT

--------------------------------------------------------------------------------------------------

$IPT -A INPUT -p tcp -m multiport -s xx.57.10.0/24  -d xx.57.10.0/24 --sport 7444 -j ACCEPT

$IPT -A INPUT -p tcp --s xx.57.10.0/24  -d xx.57.10.0/24 --sport 443 -j ACCEPT

$IPT -A INPUT -p tcp -s xx.57.10.0/24  -d xx.57.10.0/24 --sport 9443 -j ACCEPT

Thanks

ps

default rules are this:

Chain INPUT (policy DROP 3367 packets, 263K bytes)

pkts bytes target     prot opt in     out     source               destination       

156K   25M ACCEPT     all  --  *      *       127.0.0.1            0.0.0.0/0         

757K  370M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED

   34  2806 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0         

5115  306K ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221      

  193 10484 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 22,80,902,7444,7778,8543,8580,9443

  896 92128 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 53,137,138

    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport sports 7444

    2    88 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:443

    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:9443

    0     0 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp spt:27000

    0     0 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp spt:29000

    0     0 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp dpt:27000

    0     0 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp dpt:29000

    0     0 LOGDROP    icmp --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE != broadcast

  125  6805 LOGDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE != broadcast

   54  3862 LOGDROP    udp  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE != broadcast

    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset

Chain FORWARD (policy DROP 0 packets, 0 bytes)

pkts bytes target     prot opt in     out     source               destination       

Chain OUTPUT (policy ACCEPT 470K packets, 159M bytes)

pkts bytes target     prot opt in     out     source               destination       

156K   25M ACCEPT     all  --  *      *       127.0.0.1            0.0.0.0/0         

207K  120M ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport sports 22,80,902,7444,7778,8543,8580,9443

    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport sports 53,137,138

36416   14M ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp spt:27000

   33 10198 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp spt:29000

42448 7299K ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp dpt:27000

   43  7048 ACCEPT     tcp  --  *      *       xx.57.10.221         xx.57.10.221        tcp dpt:29000

Chain LOGDROP (3 references)

pkts bytes target     prot opt in     out     source               destination       

  125  6805 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 7 prefix `TCP LOGDROP: '

   54  3862 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 7 prefix `UDP LOGDROP: '

    0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 7 prefix `ICMP LOGDROP: '

    0     0 LOG        all  -f  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 2/sec burst 10 LOG flags 0 level 7 prefix `FRAGMENT LOGDROP: '

  179 10667 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0 

I am looking for some clarification on the VDP backup capabilities for physical servers.

VMWare documentation states application aware agents support physical servers to backup SQL, Exchange, and Sharepoint.  I am trying to find out if VDP can also get a file system backup for file servers and other applications that aren't SQL, Exchange or Sharepoint.

Can VDP backup the file system of a physical server?

Hello all,

  While trying to restore a mailbox on a Exchange 2013 SP1 , we get the below error . We already have a case opened to VMware, but wanted to see if someone else encountered it.

2015-01-13 19:27:44 avexchglr Info <5008>: Logging to C:\Program Files\avp\var\MOD-1421170063901-3027-Exchange_GLR.log

2015-01-13 19:27:44 avexchglr Info <7075>: argc = 9

2015-01-13 19:27:44 avexchglr Info <7076>: argv[0]=avexchglr

2015-01-13 19:27:44 avexchglr Info <7076>: argv[1]=--sysdir=C:\Program Files\avp\etc

2015-01-13 19:27:44 avexchglr Info <7076>: argv[2]=--bindir=C:\Program Files\avp\bin

2015-01-13 19:27:44 avexchglr Info <7076>: argv[3]=--vardir=C:\Program Files\avp\var

2015-01-13 19:27:44 avexchglr Info <7076>: argv[4]=--ctlcallport=12814

2015-01-13 19:27:44 avexchglr Info <7076>: argv[5]=--ctlinterface=3027-MOD-1421170063901

2015-01-13 19:27:44 avexchglr Info <7076>: argv[6]=--logtimeformat=default

2015-01-13 19:27:44 avexchglr Info <7076>: argv[7]=--logtimezone=default

2015-01-13 19:27:44 avexchglr Info <7076>: argv[8]=--logfile=C:\Program Files\avp\var\MOD-1421170063901-3027-Exchange_GLR.log

2015-01-13 19:27:44 avexchglr Info <6673>: CTL listening on port 13159

2015-01-13 19:27:44 avexchglr Info <10684>: Setting ctl message version to 3 (from 1)

2015-01-13 19:27:44 avexchglr Info <16136>: Setting ctl max message size to 268435456

2015-01-13 19:28:02 avexchglr Info <0000>: Mounting the Avamar Virtual Disk Drive ...

2015-01-13 19:28:20 avexchglr Info <7726>: LISTENING ON PORT 13159

2015-01-13 19:28:20 avexchglr Info <7744>: bindir: [C:\Program Files\avp\bin]

2015-01-13 19:28:20 avexchglr Info <13044>: ctl_spawn successful

2015-01-13 19:28:20 avexchglr Info <7729>: original key [3027-MOD-1421170063901], clone [3027-MOD-1421170063901#1]

2015-01-13 19:28:20 avexchglr Info <6686>: Process 18276 (C:\Program Files\avp\bin\avtar) for workorder MOD-1421170063901#1 started

2015-01-13 19:28:20 avexchglr Info <7732>: Waiting for avtar to finish

2015-01-13 19:28:21 avexchglr Info <10684>: Setting ctl message version to 3 (from 1)

2015-01-13 19:28:21 avexchglr Info <16136>: Setting ctl max message size to 268435456

2015-01-13 19:28:25 avexchglr Info <6688>: Process 18276 (C:\Program Files\avp\bin\avtar) finished (code 0: success)

2015-01-13 19:28:25 avexchglr Info <13046>: Manager finished

2015-01-13 19:28:25 avexchglr Info <19008>: Obtaining available VSS providers

2015-01-13 19:28:25 avexchglr Info <8871>: Gathering writer metadata...

2015-01-13 19:28:26 avexchglr Info <19007>: Adding writer Microsoft Exchange Writer  GUID: {76fe1ac4-15f7-4bcd-987e-8e1acb462fb7}  Instance: {661c4eb3-000a-484a-9418-681d6f968cc7}

2015-01-13 19:28:26 avexchglr Info <18208>: Initializing GLR PowerShell interface

2015-01-13 19:28:26 avexchglr Info <13313>: Server name = ExchangeServer

2015-01-13 19:28:30 avexchglr Info <18202>: The Powershell interface already has required permissions.  Will not impersonate with provided credentials.

2015-01-13 19:28:39 avexchglr Info <13296>: Creating database [ExchangeDB1_rdb] on server [ExchangeServer]...

2015-01-13 19:29:21 avexchglr Info <13297>: Creating database [ExchangeDB1_rdb]  successfully[ExchangeServer].

2015-01-13 19:29:22 avexchglr Info <13272>: Get mailbox database for [ExchangeDB1_rdb]...

2015-01-13 19:31:01 avexchglr Info <13298>: Mounting database [ExchangeDB1_rdb]...

2015-01-13 19:31:20 avexchglr Info <13300>: Database [ExchangeDB1_rdb] Mounted successfully.

2015-01-13 19:31:20 avexchglr Info <18208>: Initializing GLR PowerShell interface

2015-01-13 19:31:20 avexchglr Info <5527>: - cid:0

2015-01-13 19:31:20 avexchglr Info <7083>: - cid=ac55f77de640a98d6bf42f2f2e895d30a634fa0f

2015-01-13 19:31:20 avexchglr Info <7787>: - targets=ExchangeDB1/test user (test.user@test.com)

2015-01-13 19:31:20 avexchglr Info <7084>: target[0]=ExchangeDB1/test user (test.user@test.com)

2015-01-13 19:31:20 avexchglr Info <13266>: The currently mounted RDB is [ExchangeDB1_rdb]

2015-01-13 19:31:20 avexchglr Info <13272>: Get mailbox database for [ExchangeDB1_rdb]...

2015-01-13 19:31:21 avexchglr Info <13328>: Setting AVFS timeout = 0

2015-01-13 19:31:41 avexchglr Error <13337>: Failed to restore item 'ExchangeDB1/test user (test.user@test.com)'. Details: code 0x80004005: Unspecified error

2015-01-13 19:31:46 avexchglr Warning <18811>: Terminating avmapi process

2015-01-13 19:31:47 avexchglr Info <8103>: Final summary generated subwork 0, cancelled/aborted 0, exitcode 0

We don't have an exchange cluster , and is VDP version: 5.8.0.467.

Thank you in advance.

Hi

I setup my veeam infrastructure with a Veeam Backup manager (virtual) and Veeam Proxy (Physical).  The VM backup manager is on the network segment than vcenter. But the proxy and the repository Is on another segment so I want segmented the backup traffic.

At now, I can backup on Veeam repository on 172.17.x.x (backup network) but I don’t able to set the source for use the 172.17 network. It’s use the 128.2.x.x network (network production) and slow my production environment.

Maybe someone can give me a tips for do this ?

Veeam 8

Vcenter 5.5

Nas Qnap for storage (repository and datastore)

Thanks you in advance for your help and excuse my English

Anyone have a suggestion for free backup software for esxi free version that has a WEB interface and will automatically backup VMs on a schedule? Thanks

Hi

We have two VSphere 5.5 / Vcentre Instances in different parts of the country with no network connectivity

We want to create VMs and Environments in ONE instance and then move them to the other instance

I suspect we need to use some kind of backup and recovery tool for this?

Are there any internal functionlaity we can leverage to do this within VMware? We have Enterprise Plus licence on both instances

What would be the easiest way to make a copy of them and then import them in to the other instance?

Any help appreciated

Jay

Hi Guys,

To all the AD Admins out there, does Veeam deal with this issue well when using Application aware backup and restore?

I have been reading up on it, as I like to be aware of the possible issues when restoring a DC. I am having trouble getting my head round how USN rollback works exactly.

I have tested it out in a test environment, by backing up DC2 using application aware backup , binning the actual VM and then restoring it using the backup.

What is the maximum age of the backup that you should use when recovering a domain controller?

I let it restore and set it to auto boot, when I came back to it, it was at the login screen and it was in Safe Mode (as expected) I had an issue where the 100mb system partition wasn't mounted, I mounted that and ran the commands as per the KB article http://www.veeam.com/kb1277

Replication seems to be working fine, across my Domain controllers DC,DC1,DC2 (recovered). DC is the original main controller.

I have run the repadmin /showutdvec command on DC2 (the recovered Domain Controller)

DC2 @USN 345605 @ Time 2015-02-24 21:37

DC1 @USN 334552 @ Time 2015-02-24- 21:30

DC2 (retired) @USN 341361 @ Time 2015-02-24 15:59

DC @USN 300711 @ Time 2015-02-24 21:37

I have run repadmin /showutdvec on DC1

DC2 @USN 345280 @Time 2015-02-24 20:59:30

DC1 @USN 334621 @Time 215-02-24 21:38:41

DC2 (retired) @USN 341361 @Time 2015-02-24 15:59:31

DC @USN 300716 @Time 2015-02-24 21:38:24

on DC2 the USN is higher then the value held by DC1, does this mean I have a rollback issue?

Cheers,

Bilal

I am running a VDP Integrity Check on our VDP 5.5 instance. The system has been stuck on 99% for over 24hrs. I am not seeing an Memory issues as per some documentations I have seen. I have rebooted the system and tried doing it again but it still stays at 99%. Please let me know what I can do to troubleshoot this and what information will help you. Thanks for any help

Hi All,

I have two VDP 6 instances. One week ago a saw that CPU usage on one of them  is almost always 100%. The backup works, Second instance have about 20% CPU utilization.

The diffrence I find: (second instance does not have this kind of errors)

root@clvdp01:/space/avamar/var/mc/server_log/#: tail -f axis2.log

2015-05-18 10:04:04,273 [218184632@qtp-1305303392-4784] ERROR org.apache.axis2.transport.http.AxisServlet  - Java heap space

java.lang.OutOfMemoryError: Java heap space

2015-05-18 10:04:37,105 [1384024202@qtp-1305303392-4789] ERROR org.apache.axis2.transport.http.AxisServlet  - Java heap space

java.lang.OutOfMemoryError: Java heap space

2015-05-18 10:05:13,130 [1795787615@qtp-1305303392-4779] ERROR org.apache.axis2.transport.http.AxisServlet  - Java heap space

java.lang.OutOfMemoryError: Java heap space

2015-05-18 10:05:49,640 [1593678748@qtp-1305303392-4821] ERROR org.apache.axis2.transport.http.AxisServlet  - Java heap space

java.lang.OutOfMemoryError: Java heap space

2015-05-18 10:09:11,437 [1107337480@qtp-1305303392-4777] ERROR org.apache.axis2.transport.http.AxisServlet  - Java heap space

java.lang.OutOfMemoryError: Java heap space

Below more information:

status.dpn

Mon May 18 10:05:20 CEST 2015  [clvdp01] Mon May 18 08:05:20 2015 UTC (Initialized Thu Oct  2 10:31:18 2014 UTC)

Node   IP Address     Version   State   Runlevel  Srvr+Root+User Dis Suspend Load UsedMB Errlen  %Full   Percent Full and Stripe Status by Disk

0.0     10.190.4.61 7.1.81-107  ONLINE fullaccess mhpu+0hpu+0hpu   1 false   6.05 7460  6866739  43.0%  43%(onl:1792) 43%(onl:1795) 43%(onl:1792)

Srvr+Root+User Modes = migrate + hfswriteable + persistwriteable + useraccntwriteable

System ID: 1412245878@00:50:56:A2:0D:56

All reported states=(ONLINE), runlevels=(fullaccess), modes=(mhpu+0hpu+0hpu)

System-Status: ok

Access-Status: full

Last checkpoint: cp.20150517093236 finished Sun May 17 11:33:38 2015 after 01m 01s (OK)

Last GC: finished Mon May 18 09:34:53 2015 after 01h 27m >> recovered 11.24 GB (OK)

Last hfscheck: finished Sun May 17 11:30:06 2015 after 01h 18m >> checked 2832 of 2832 stripes (OK)

Maintenance windows scheduler capacity profile is active.

  The maintenance window is currently running.

  Currently running task(s): crunchwait

  Next backup window start time: Tue May 19 00:00:00 2015 CEST

  Next maintenance window start time: Tue May 19 08:00:00 2015 CEST

dpnctl status

Identity added: /home/dpn/.ssh/dpnid (/home/dpn/.ssh/dpnid)

dpnctl: INFO: gsan status: up

dpnctl: INFO: MCS status: up.

dpnctl: INFO: Backup scheduler status: up.

dpnctl: INFO: axionfs status: down.

dpnctl: INFO: Maintenance windows scheduler status: enabled.

dpnctl: INFO: Unattended startup status: enabled.

dpnctl: INFO: [see log file "/usr/local/avamar/var/log/dpnctl.log"]

top

top - 10:11:05 up 3 days, 11:21,  1 user,  load average: 6.19, 5.49, 5.22

Tasks: 232 total,   1 running, 230 sleeping,   0 stopped,   1 zombie

Cpu(s): 52.5%us,  0.7%sy,  0.9%ni, 42.4%id,  3.6%wa,  0.0%hi,  0.1%si,  0.0%st

Mem:   7926796k total,  7515232k used,   411564k free,     9240k buffers

Swap:  4200988k total,        0k used,  4200988k free,  2833152k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND

8547 admin     20   0 2030m 1.3g 5580 S  596 16.9  19371:50 java

root@clvdp01:/space/avamar/var/mc/server_log/#: ps aux | grep 8547

admin     8547  387 16.8 2077128 1335904 ?     Sl   May14 19374:25 /usr/java/latest/bin/java -Xmx1G -XX:MaxPermSize=256m -XX:+HeapDumpOnOutOfMemoryError -server -ea -cp /usr/local/avamar/lib/avamar-mcsecurity.jar:/usr/local/avamar/lib/commons-cli-1.2.jar:/usr/local/avamar/lib/commons-lang-2.6.jar:/usr/local/avamar/lib/commons-logging-adapters-1.1.jar:/usr/local/avamar/lib/rsa-jsafe-cryptojFIPS-5.0.jar:/usr/local/avamar/lib/rsa-jsafe-util-5.0.jar:/usr/local/avamar/lib/spring-jdbc-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-tx-3.1.1.RELEASE.jar:/usr/local/avamar/lib/mcserver.jar:/usr/local/avamar/var/mc/server_data/prefs:lib:/usr/local/avamar/lib/asn_server.jar:/usr/local/avamar/lib/mail.jar:/usr/local/avamar/lib/activation.jar:/usr/local/avamar/lib/xercesImpl.jar:/usr/local/avamar/lib/xmlsec.jar:/usr/local/avamar/lib/xmldsig.jar:lib/postgresql-8.4-702.jdbc4.jar:/usr/local/avamar/lib/jaxrpc.jar:/usr/local/avamar/lib/commons-logging-1.0.4.jar:/usr/local/avamar/lib/commons-validator.jar:/usr/local/avamar/lib/commons-discovery-0.2.jar:/usr/local/avamar/lib/commons-collections-3.2.1.jar:/usr/local/avamar/lib/saaj.jar:/usr/local/avamar/lib/wbem.jar:/usr/local/avamar/lib/wsdl4j-1.5.1.jar:/usr/local/avamar/lib/log4j-1.2.14.jar:/usr/local/avamar/lib/axis.jar:/usr/local/avamar/lib/vim25.jar:/usr/local/avamar/lib/commons-codec-1.3.jar:/usr/local/avamar/lib/jema_api.jar:/usr/local/avamar/lib/jetty-6.1.23.jar:/usr/local/avamar/lib/jetty-util-6.1.23.jar:/usr/local/avamar/lib/servlet-api-3.0.jar:/usr/local/avamar/lib/jsp-api-2.1.jar:/usr/local/avamar/lib/jsp-2.1.jar:/usr/local/avamar/lib/core-3.1.1.jar:/usr/local/avamar/lib/ant-1.6.5.jar:/usr/local/avamar/lib/apputils25.jar:/usr/local/avamar/lib/j2ssh-core-0.2.9.jar:/usr/local/avamar/lib/snmp4j-1.11.jar:/usr/local/avamar/lib/mccommons.jar:/usr/local/avamar/lib/user-authentication.jar:/usr/local/avamar/lib/nis-1.2.1.jar:/usr/local/avamar/lib/providerutil-1.2.1.jar:/usr/local/avamar/lib/commons-lang-2.6.jar:/usr/local/avamar/lib/commons-io-1.4.jar:/usr/local/avamar/lib/jutf7-1.0.0.jar:/usr/local/avamar/lib/i18n:/usr/local/avamar/lib/certj.jar:/usr/local/avamar/lib/cryptojFIPS.jar:/usr/local/avamar/lib/sslj.jar:/usr/local/avamar/lib/amqp-client-3.1.3.jar:/usr/local/avamar/lib/events-dispatcher-api-1.0.0.jar:/usr/local/avamar/lib/events-dispatcher-amqp-1.0.0.jar:/usr/local/avamar/lib/jackson-core-asl-1.8.3.jar:/usr/local/avamar/lib/jackson-mapper-asl-1.8.3.jar:/usr/local/avamar/lib/aopalliance-1.0.jar:/usr/local/avamar/lib/aspectjweaver-1.6.12.jar:/usr/local/avamar/lib/spring-aop-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-asm-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-beans-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-context-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-core-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-expression-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-amqp-1.2.0.RELEASE.jar:/usr/local/avamar/lib/spring-rabbit-1.2.0.RELEASE.jar:/usr/local/avamar/lib/spring-web-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-jdbc-3.1.1.RELEASE.jar:/usr/local/avamar/lib/spring-tx-3.1.1.RELEASE.jar::/usr/local/avamar/lib/spring-security-config-3.1.0.RELEASE.jar:/usr/local/avamar/lib/spring-security-core-3.1.0.RELEASE.jar:/usr/local/avamar/lib/spring-security-crypto-3.1.0.RELEASE.jar:/usr/local/avamar/lib/spring-security-web-3.1.0.RELEASE.jar -Djava.rmi.server.hostname=clvdp01 -Djava.util.logging.config.file=/usr/local/avamar/lib/mcserver_logging.properties -Djava.security.egd=file:/dev/./urandom -Djava.io.tmpdir=/usr/local/avamar/var/mc/server_tmp -Djava.util.prefs.PreferencesFactory=com.avamar.mc.util.MCServerPreferencesFactory -Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl -Djavax.net.ssl.keyStore=lib/rmi_ssl_keystore -Djavax.net.ssl.trustStore=lib/rmi_ssl_keystore -Dfile.encoding=UTF-8 -Dlog4j.configuration=file:///usr/local/avamar/lib/log4j.properties com.avamar.mc.CLI --start

Is Anyone is able to help?

Best Regards,

Jacek

Hi there,

I consider not renewing my Veeam B&R license this time because I want to try if the latest version of DP gives me what I need.

I need to replicate all VMs on two hosts on site A via a fibre link to a third host at a second location (site B) . The Veeam B&R software managed that excellently.  One replication each night that left complete ready-to-run VM replicas at the remote site.  No backup history, just one fresh copy of each VM each night.  No Exchange, SQL Server nor SharePoint.

I have only one VCenter server with one DP 6.1.1 appliance connected.  Can I use this setup to replicate VMs to site B in the same manner?  Do I need a DP proxy at site B?

Do I still have to restore the replicated VMs using DP in order to start / use them?  Why is it so difficult for VMWare to just snapshot and replicate the VM files in folders as Veeam does?  I'd like a replication solution that creates ready-to-run VMs at the remote site.  Do I need Veeam to achieve that..?

Comments are welcome :-)

greetings

btor

Hi All having an issue with trying to get the VDP backing up my SQL Databases

I installed the plugin on my SQL Server we are running Microsoft SQL 2012 Server on a Windows Server 2012

when i try and create a New Backup job on Applications and select Microsoft SQL Server it gives me an Error message

"There are no registered Microsoft SQL Server available. The group has been removed."

Im using Veeam 8.0 to backup one of my File server VMs    windows server 2008r2   Its about a 2 TB VM and it takes about 9 hours just for an incremental that is only processing about 13 gb of data.    At the end of the backup,  Vsphere tells me its removing snapshot.   it gets to about 99% and then the VM disconnects from the system and it takes about 20 minutes for it to come back online.   I have talked to Veeam and they say its normal for it to do what its doing but not at this length of time and theytold me to go to VMware.    VMware tells me to try the boards for help.

anyone have any Idea why its taking this long and disconnecting.

thanks

Dave

I have been getting this error on several VMs but have not been able to figure out why.  I found the following in the log file.  Can someone tell me why VDP cannot create the directories?  How can I fix?

2016-02-09T22:39:45.917+06:00 avvcbimage Info <11986>: Changed block tracking is engaged for this VM

2016-02-09T22:39:45.917+06:00 avvcbimage Info <11988>: A reference to a valid prior backup is not available so this will be a full level zero backup.

2016-02-09T22:39:45.959+06:00 avvcbimage Info <19549>: metadata tmp dir: /usr/local/avamarclient/var/vmware/2/temp

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr, failed (-1)

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local, failed (-1)

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local/avamarclient, failed (-1)

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local/avamarclient/var, failed (-1)

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local/avamarclient/var/vmware, failed (-1)

2016-02-09T22:39:45.959+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local/avamarclient/var/vmware/2, failed (-1)

2016-02-09T22:39:45.960+06:00 avvcbimage Info <40640>: create tmpDir: /usr/local/avamarclient/var/vmware/2/temp, failed (-1)

2016-02-09T22:39:45.980+06:00 avvcbimage Info <40654>: isExitOK()=0

I'm using VDP 6.1.1

Hi All,

I have a small test environment that I will like to backup some virtual machines on and was considering using the vSphere Data Protection appliance or the Veeam backup free edition.

Can anyone advise as to which one is the better of the two options.

Thanks

Hi,

I looking for backup solution can restore Virtual Machine or data inside it (MySQL database, files, etc...). I found Veeam but i don't know how to restore data inside the VM. It's can't backup and restore for database services, and i think they don't have this functions.

Please, anyone can suggest me a good brand name of solution?

Thank in advance!

Hello.

In many our environments we use for now:

VDP 6.1

If is possible to generate somehow some report if VM from last week or month successful completed backups ?

Is only possible to configure in "Configuration" tab "Emain configuration" and select some options to send some report after job complete but this is report from one day.

In Reports we see options "Task failures" but task failures would be helpfull but showing information from 72 hours only.

If it possibility to see more failed jobs ? I would like to check this every 2 or 3 weeks for example for reporting purpose.

Maybe can i check this by some SSH command ?