Managed Appliance Installation Guide

Managed Appliance Installation Guide

Introduction

The CrashPlan PROe managed appliance is a fully managed system that requires minimal user maintenance. This guide is intended to assist you in installing, configuring and maintaining your CrashPlan PROe managed appliance.

This document applies to managed appliance build versions 3.2.1+

Prerequisites

● Dual 110-240V power sources (standard power cables are included) ○ Power requirements vary from 230W to 460W depending on model ● 2-4 U rack space per managed appliance

● 2 ethernet connections

● Monitor and keyboard for initial setup

Setting Up Your Managed Appliance

Racking And Powering On Your Managed Appliance

● Unbox and inspect the managed appliance, drives and other hardware for any physical damage that may have occurred during shipping

● Rack the chassis using the included quick-lock rails ● Install hard drives in the managed appliance.

Drives can be installed in any order within a managed appliance. However, if you are installing both a storage server and a JBOD, or multiple storage servers, it is critical that you install each drive in the managed appliance for which it was intended. Each drive is marked with the serial number of the correct appliance.

● Plug in power and network connections

○ Two 110-220V auto-sensing power supplies ○ The two RJ45 ports labeled ‘eth0’ and ‘MGT’ ● Connect keyboard (USB) and monitor (VGA) for initial setup ● Power on the managed appliance

● Verify power supply status using power supply indicator lights

● Verify drive lights are all blue for non-JBOD managed appliance, JBOD managed appliances have one hot spare drive that will blink red (see below and reference section for guide to lights)

○ Blue = solid - online, blinking - activity

Network Configuration

Gather the following network configuration information before you begin installation: ● Hostname (e.g. myhost.example.com)

● Host (e.g. myhost)

● IP Address for ETH0 (e.g. 192.0.2.10) ● Netmask for ETH0 (e.g. 255.255.255.0) ● Gateway Address (e.g. 192.0.2.1) ● IPMI IP Address (e.g. 192.0.2.11) ● IPMI Subnet Mask (e.g. 255.255.255.0) ● IPMI Gateway (e.g. 192.0.2.1)

● DNS Server(s) (e.g. 192.0.2.100)

● DNS Search domain(s) (e.g. example.com)

● NTP Network Time Server (e.g. time.example.com) ● Email Server (e.g. mail.example.com)

● Region/Timezone (e.g. “America/Chicago” or “Asia/Singapore”)

Firewall Configuration

Prepare the following firewall rules on your network before the managed appliance installation. We have divided these firewall rules between your Managed Appliance, Monitoring, and Cloud Storage rules.

Managed Appliance

Interface Protocol Source Destination Port(s) Description eth0 TCP LAN networks Appliance(s) 443, 4282 Backup traffic from

internal endpoints to appliance eth0 TCP LAN networks Appliance(s) 4280 (http),

4285 (https) console access Administration and web restore eth0 TCP Internet Appliance(s) 443, 4282,

4280, 4285 endpoints: backup If external traffic and web

restore eth0 TCP Master Server

Appliance LDAP/AD Server(s) 636 (LDAPS) 389 (LDAP), LDAP/AD services Integration with eth0 UDP Appliance(s) DNS Server(s) 53 DNS services eth0 UDP Appliance(s) NTP Server(s) 123 NTP services eth0 TCP Appliance(s) Mail Server(s) 25 SMTP services

eth0 TCP Appliance(s) Appliance(s) 4283 Data balancing. Only for

multi-server deployments eth0 TCP Appliance(s) Appliance(s) 4286 Statistics. Only for

multi-server deployments

Monitoring

Interface Protocol Source Destination Port(s) Description eth0 TCP Appliance(s) 50.83.246.0/2350.93.255

.0/24 10051

Remote Monitoring

(Zabbix) eth0 TCP 173.225.132.0/24

173.160.123.80/28 Appliance(s) 22

Remote SSH Access from Code42 office eth0 TCP 173.225.132.0/24

173.160.123.80/28 Appliance(s)

4280, 4284, 4285 Remote Console Access from Code42 office IPMI TCP 173.225.132.0/24,

173.160.123.80/28 Appliance(s) 443, 623, ₅₉₀₀ Remote IPMI _{Access from} Code42 office

Cloud Storage

If you have Cloud Storage, you need some of the following firewall rules. Only implement rules for the geography you have subscribed to (e.g. United States, Singapore, Sydney, etc).

PROe Cloud Storage - United States

Interface Protocol Source Destination Port(s) Description eth0 TCP Master Server Appliance 50.93.246.0/2

3 50.93.255.0/2 4 443, 4282, 4285 Cloud provider, Web Restores

eth0 TCP 50.93.246.0/23

50.93.255.0/24 Master Server Appliance 4282 443 Statistics

PROe Cloud Storage - Dublin Ireland

eth0 TCP Master Server Appliance 149.5.44.0/24 443, 4282,

4285

Cloud provider,

Web Restores

eth0 TCP 149.5.44.0/24 Master

Server Appliance

443

4282 Statistics

PROe Cloud Storage – Singapore

Interface Protocol Source Destination Port(s) Description eth0 TCP Master Server Appliance 180.92.186.80/

28

443, 4282,

4285

Cloud provider,

Web Restores eth0 TCP 180.92.186.80/28 Master Server

Appliance 4282 443 Statistics

PROe Cloud Storage – Sydney Australia

Interface Protocol Source Destination Port(s) Description eth0 TCP Master Server Appliance 103.8.239.0/24 443,

4282, 4285

Cloud provider,

Web Restores eth0 TCP 103.8.239.0/24 Master Server

Configuring Your Managed Appliance

Getting Started

When you power on the managed appliance and the operating system loads, the CrashPlan PROe splash screen displays.

After the system loads, the main CLI console opens.

Configuring The Timezone, IPMI, And Primary Network Interface: Set-all

Use the set-all command for initial system setup. This command allows you to configure the time zone, IPMI and Primary Network Interface. The following sections will walk you through the prompts displayed by running the set-all command:

At this prompt: Example entry

Timezone America/Chicago (press enter for more options) Use UTC (y/n) If you select no, select your continent, country, and time zone.

Do you wish to continue with these settings (y/n)

y

Note

:

Setting IPMI (Management) Configuration

The IPMI Remote Management console enables remote web administration of the managed appliance. IPMI uses a dedicated network device and has its own network configuration.

At this prompt Enter / example IPMI Password <password> IPMI IP Address e.g. 192.0.2.11 IPMI Subnet Mask e.g. 255.255.255.0 IPMI Gateway e.g. 192.0.2.1 Do you wish to

continue with these settings (y/n)

y

Note

:

Setting Primary Network Interface Configuration

The primary network interface contains the hostname, IP address and other network settings that the PROe managed appliance will use to communicate across your network.

At this prompt Enter / example Enter hostname e.g.

server1.example.com

Domain e.g. example.com

Do you wish to use DHCP (y/n)?

If y, then sets the eth0 settings based on the DHCP server. If n, sends you to the next prompts

eth0 IP e.g. 192.0.2.10

eth0 netmask e.g. 255.255.255.0 Gateway Address e.g. 192.0.2.1 DNS server(s)

(separated with spaces)

e.g. 192.0.2.200 192.0.2.201 Network Time Server e.g.

ntp.crashplanpro.com Do you wish to

continue with these settings (y/n)

y

Note

:

command

Testing IPMI Settings

Run show-all to view all current network settings (you can also run show-ipmi to only view IPMI settings).

Open a browser and navigate to the IPMI IP address. You should see the following screen:

Have your Code42 software engineer test IPMI access along with any other external access methods that you have chosen to make available (e.g. ssh, admin console, etc.).

Maintaining Your Managed Appliance

Monitoring

We highly recommend that you enable Code42 to monitor your managed appliance. We can then quickly assist you in resolving any issues or problems. We are also able to proactively prevent issues from

occurring, and we are able to configure your managed appliance for maximum performance and reliability. Here is a partial list of items that we monitor:

● CrashPlan PROe service status ● Out of memory alerts

● Low disk space alerts ● Out of disk space alerts ● RAID array health

● Web Admin Console responsiveness ● CrashPlan PROe version

● Database health

PROe Server Logs

You can view the PROe Server logs through the Admin Console here:

You can now view the PROe Server logs. A drop-down menu lets you choose the log file you wish to view.

com.backup42.app.log.X (0 is the newest log) Primary repository of events, errors, and data. Check this log first for any exceptions.

request-[date].log Lists all of the web requests made to the internal web server.

history.log.X (0 is the newest log) Lists system alerts and general events that have occurred on the server.

Operating System Logs

The operating system is a customized version of the Gentoo Linux operating system.

Press Command to switch between virtual consoles. One of the consoles shows the latest entries in the current main log file (com.backup42.log.0) to assist in debugging any operating system issues.

Setting Your IP Or IPMI Addresses

Throughout the life of your PROe managed appliance you may need to change the network configuration of the primary network interface or the IPMI. This can be accomplished by running the set-net command to change the IP address of the primary network interface, or the set-ipmi command to change the IP address of the IPMI. See the sections on Setting IPMI (Management) Configuration and Setting Primary Network Interface Configuration for additional details.

How To Contact Support At Code42

You can reach our Customer Champion staff by telephone, email, or via the web. Web Support

One of the most efficient ways to submit your support requests and check or follow up on incidents is through our Customer Champion web site, https://helpdesk.crashplan.com. This service is available 24 hours a day. You can submit a ticket or check the status of an existing ticket via this service. You can also access CrashPlan’s User Discussion Forums at https://helpdesk.crashplan.com/forums, which contains many technical solutions and recommendations, as well as ways to connect with fellow CrashPlan customers.

The CrashPlan Support site is a secure site, and provides a direct link into our ticket tracking system. Ticket numbers are assigned automatically to newly submitted requests. Requests submitted via the web are reviewed continuously during normal business hours (Monday through Friday, 7:00 a.m. to 7:00 p.m. central time, and Saturday and Sunday, 9:00 a.m. to 5:00 p.m. central time). If you have a Severity 1 issue (unable to backup or restore), please contact us via the telephone. We assist with Severity 1 issues 24 hours a day, 7 days a week for all customers with an active maintenance contract.

Email Support

For technical assistance via email, please submit your request to [email protected]. You will receive a return email acknowledging receipt of your request and an associated ticket number. Please refer to this ticket number in any subsequent communications with our staff. Requests via email are reviewed continuously during normal business hours (Monday through Friday, 7:00 a.m. to 7:00 p.m. central time, and Saturday and Sunday, 9:00 a.m. to 5:00 p.m. central time).

Telephone Support

Live agents are available 24 hours a day, 7 days a week for Severity 1 issues (unable to backup or restore). To contact us by telephone for all other issues, please contact us during the times listed below for your region:

Availability Contact Contact

Mon - Fri: 7 a.m. - 7 p.m.

Sat - Sun: 9 a.m. - 5 p.m.

US Central Time

United States:

1-877-680-7526

International:

+1 612-333-4242 option 2

(available 24/7 for Severity 1 issues)

Mon - Fri: 0800 - 1800

Australian Eastern Time

Australia:

1800 042 042

New Zealand: +64 9 887 3317

Note

:

Reference

Standard Command Descriptions

Note

:

Command Description

clear Clears the command screen

date Displays the current date/time

hostname Displays the systems hostname

poweroff Shuts down the appliance

reboot Reboots the system

restart-proserver Stops/restarts the CrashPlan PROe software service set-all Sets all system settings (see above for details)

set-ipmi Configures the IPMI network settings

set-net Sets the network settings (similar to set-all)

set-timezone Specifies time zone

show-all Displays all system network settings (similar to show-net) show-ipmi Displays current IPMI network settings

show-net Displays system network settings (similar to show-all) silencealarm Silences any audible alarms (failed drive, etc)

firewall-off Disables firewall rules set within /etc/iptables.sh firewall-on Enables firewall rules set within /etc/iptables.sh

history Displays the recent commands executed

hostname Show or set the system’s host name

htop An interactive process viewer

iftop Shows a table with current bandwidth usages by host, with the hosts responsible for the most traffic at the top of the list iostat Displays the current CPU load average and disk I/O utilization,

providing a great way to monitor your disk I/O usage

login Logs in to the appliance

lsicmd Displays RAID information

netstat Prints information about the Linux networking subsystem ntpdate Sets the local date and time by polling the Network Time

Protocol (NTP) given as the server arguments to determine the correct time

ntptrace Use to troubleshoot performance issues with the ntp server ping Use to check that there is a network communication to another

computer

ps Gives a snapshot of the current processes

restart-monitoring Restarts the Zabbix Monitoring agent that Code42 Software uses to monitor your managed appliance’s health

reset Resets the screen buffer

set-keyboard-type Loads the keyboard translation tables

show-raid Displays virtual drive info

show-version Displays version info about your PROe managed appliance sync Writes everything that is in memory back to the disc

telnet Communicates to the host using the telnet protocol (typically used to determine if a port is open on a host)

top Displays the top CPU processes

traceroute Prints the route packets take to the network host

uptime Tells how long the system has been running

PROe Managed Appliance Lights Guide

The LED lights on the PROe Managed Appliance serve as status indicators. This guide acts as a key to those status indicators.

Hard Drive LEDs

LED Color LED Display Description

Blue Random blink Normal activity

Red Off Normal Operation

Red Slow-blink: 1Hz on / 1Hz off RAID is rebuilding

Red Solid on Failed drive or foreign config

Red Double-blink: 4Hz on / 4Hz - on /

2Hz off

JBODS only: drive assigned as a hot spare

Red Fast-blink: 4Hz on / 4Hz off Slot Identify command has been issued from the command line

Power Supply LEDs

LED Color Description

Amber / orange Power supply is good; managed appliance is powered off