Nasuni Management Console Guide

(1)

Nasuni Management Console

Guide

Version 5.5

April 2014

©

(2)

Document Information

Nasuni Management Console Guide Version 5.5

April 2014

Copyright

Information in this document is subject to change without notice and does not represent a commitment on the part of Nasuni. The software described in this document is furnished under a license agreement. The software may be used only in accordance with the terms of the license agreement. It is against the law to copy the software on any medium. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of Nasuni Corporation.

Notice

Although Nasuni Corporation has attempted to ensure the accuracy of the content of this manual, it is possible that this document may contain technical inaccuracies, and typographical or other errors. Nasuni assumes no liability for any error in this publication, and for damages, whether direct, indirect, incidental, consequential or otherwise, that may result from such error, including, but not limited to loss of data or profits.

Nasuni provides this publication “as is” without warranty of any kind, either express or implied, including, but not limited to implied warranties of merchantability or fitness for a particular purpose.

Trademarks

NASUNI, UNIFS, and the intersecting ovals logo are Nasuni trademarks and service marks. All other names, brands and products herein are the designations of their respective owners.

Contacting Nasuni Corporation

Nasuni Corporation 313 Speen Street Natick, MA 01760

Telephone: 1-508-433-6200 Sales: 1-800-208-3418 Fax: 1-508-651-0603 http://www.nasuni.com Email: [email protected]

Technical Support

Telephone: 1-888-6NASUNI (888-662-7864) Email: [email protected]

Technical Support is available 24/7/365 for full production customers.

(3)

Preface

Audience

This Guide is intended for the IT administrator or person responsible for managing Nasuni Filers using the Nasuni Management Console user interface.

What’s in this Book

This guide contains the following chapters:

• Chapter 1, “The Nasuni Management Console,” on page 1 describes the major features and concepts of the Nasuni Management Console and the Nasuni Filer.

• Chapter 2, “Task Overview,” on page 4 gives overviews of common tasks that users can perform with the Nasuni Management Console.

• Chapter 3, “Installing the Nasuni Management Console,” on page 13 describes how to install the Nasuni Management Console.

• Chapter 4, “Login Page,” on page 27 explains how to log in to the Nasuni Management Console, reset the account, and access online help.

• Chapter 5, “Common Screen Elements,” on page 31 explains the user interface elements that are common to all the pages, including status messages, online help, and the procedure for powering down the Nasuni Management Console.

• Chapter 6, “Home Page,” on page 36 explains the features of the Home page, including viewing many details of system status.

• Chapter 7, “Volumes Page,” on page 43 explains how to view the status of volumes and modify settings of volumes.

• Chapter 8, “Filers Page,” on page 127 explains how to view the status of Nasuni Filers and modify settings of Nasuni Filers.

• Chapter 9, “Account Status Page,” on page 207 explains how to view details of the account.

• Chapter 10, “Console Settings Page,” on page 210 explains how to configure the Nasuni Management Console.

• Chapter 11, “Notifications Page,” on page 245 explains how to view and acknowledge Nasuni Management Console messages.

(13)

Preface What’s in this Book

• Chapter 12, “Disaster Recovery,” on page 249 explains how to recover the Nasuni Management Console in the event of a disaster.

• Appendix C, “Glossary,” on page 271 provides definitions of terms related to the Nasuni Management Console.

• Appendix A, “Console Commands,” on page 259 describes console commands for configuring network settings.

• Appendix B, “Nasuni Terms of Service and License Agreement,” on page 270 is the link to the Nasuni Terms of Service and License Agreement.

Text Conventions

The following text conventions are used in this document:

Convention Description

1. Number Used to indicate a step in a task.

• Bullet Used for items in a list without any particular order.

Bold Used to give emphasis to a word. Also used for named graphical elements.

Italics Used to represent options or parameters.

Underline Used for hyperlinks, such as links to Web sites.

Monospace Used to indicate pathnames, filenames, folder names, typed information, and code.

(14)

Product Documentation

Electronic Publications

Extensive documentation is available for all aspects of installing, configuring, and operating the Nasuni Filer. The latest version of each of the following documents is available in PDF format at http://

www.nasuni.com/support/documentation.

• Hardware Getting Started Guide: For setting up the Nasuni Filer on the Nasuni Filer hardware appliance. To download this guide for the NF-200, visit:

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/Nasuni_Filer_HW_GS_Guide_NF- 200.pdf

To download this guide for the NF-400, visit:

To download this guide for the NF-440, visit:

To download this guide for the NF-400H, visit:

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/Nasuni_Filer_HW_GS_Guide_NF- 400H.pdf

• Virtualization Getting Started Guide: For installing the Nasuni Filer on a virtual machine within a corporate network. To download this guide, visit:

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/

Nasuni_Filer_Virtualization_GS_Guide.pdf

• Virtualization Getting Started Guide for Azure: For installing the Nasuni Filer on the Microsoft Azure cloud virtual machine. To download this guide, visit:

Nasuni_Filer_Virtualization_Azure_GS_Guide.pdf

• Virtualization Getting Started Guide for EC2: For installing the Nasuni Filer on the Amazon EC2 cloud virtual machine. To download this guide, visit:

Nasuni_Filer_Virtualization_EC2_GS_Guide.pdf

(15)

Product Documentation Electronic Publications

• Initial Configuration Guide: For configuring and deploying the Nasuni Filer after the initial installation on the hardware appliance or virtual machine. To download this guide, visit:

Nasuni_Filer_Initial_Configuration_Guide.pdf

• Users Guide: For managing unified storage using the Nasuni Filer.

To download this guide, visit:

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/Nasuni_Filer_Users_Guide.pdf

• Nasuni Management Console Guide: For managing multiple Nasuni Filers.

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/NMCGuide.pdf

• Nasuni Management Console Quick Start Guide: To quickly get started using the Nasuni Management Console to manage multiple Nasuni Filers. To download this guide, visit:

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/NMCQuickStartGuide.pdf

• Third-Party Licensing Guide: Listing of third-party software used in the Nasuni Filer.

http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/Nasuni_Filer_Third- Party_Licenses_Guide.pdf

(16)

Chapter 1: The Nasuni Management Console

Nasuni Services

Nasuni’s Enterprise Storage Services deliver an advanced storage solution using a cloud infrastructure.

The core technology is a next-generation storage controller – the Nasuni Filer – that offers the security and performance of traditional storage, while adding unlimited scalability, automatic offsite protection, and global multi-site access to files.

Multi-site access enables organizations with several locations to work on a single set of shared data.

Nasuni’s architecture allows multiple storage controllers to have live access to the same volume of data. Organizations benefit by having a simple, safe, and secure way to share data across any number of sites. Nasuni’s multi-site access enables capabilities that include:

• Secure data distribution to remote office/branch office (ROBO).

• Remote offices forwarding data to a central point.

• Two-way synchronized read-write.

Nasuni Filer

Nasuni’s Enterprise Storage Services are delivered through the Nasuni Filer, a storage controller that runs in your data center and provides primary storage with built-in backup, offsite protection, and multi- site access. With your Nasuni Filer, you manage your volumes and performance using the Web-based Nasuni Filer user interface.

The Nasuni Filer is an on-premises storage device supporting NFS, CIFS, and iSCSI protocols. The Nasuni Filer is fully integrated with Active Directory, Distributed File System (DFS), and Windows Previous Versions. The Nasuni Filer is available as a virtual appliance, as a hardware appliance, and as a Microsoft Azure and Amazon EC2 virtual appliance. Its reach and capacity far exceed those of a traditional controller, however, because it does not rely only on memory and local disk to manage its data: it has the entire capacity of the cloud at its disposal.

Nasuni Management Console

The Nasuni Management Console enables you to monitor and manage many Nasuni Filers from one central application. Using the Nasuni Management Console, you can view the status of all of your managed Nasuni Filers, as well as configure their settings. The Nasuni Management Console is available as a virtual appliance, and as a Microsoft Azure and Amazon EC2 virtual appliance.

(17)

The Nasuni Management Console Nasuni Management Console

With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers.

Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected.

Note: Notifications and changes on Nasuni Filers can take up to 10 minutes to appear in the Nasuni Management Console.

Certain actions remain unique to each Nasuni Filer and are not available for control using the Nasuni Management Console, including:

• Restoring files and folders.

• Network-specific configuration.

• Active Directory configuration.

• Data migrations.

• Setting quotas and quota rules (but not quota reporting).

Placing a Nasuni Filer under the control of the Nasuni Management Console

Caution: When a Nasuni Filer goes under Nasuni Management Console control, any existing users and groups on the Nasuni Filer are replaced.

To enable management by the Nasuni Management Console, follow these steps:

1. Click Services, then select Nasuni Management Console from the list. The Nasuni Management Console page appears.

Figure 1-1: Nasuni Management Console page.

2. From the NMC Management is drop-down list, select either enabled or disabled.

3. Click Save. A confirmation message appears. A message also appears at the top of the screen.

Note: It can take up to ten minutes for the Nasuni Filer to appear on the Nasuni Management Console user interface.

(18)

The Nasuni Management Console Key Terms

Key Terms

The following terms are helpful in understanding the Nasuni Management Console:

• Nasuni Filer: The storage controller in your data center that integrates with your infrastructure via CIFS, NFS, or iSCSI protocols. The Nasuni Filer can be mapped as a network drive.

• Nasuni Filer user interface: The Web-based graphical user interface with which you configure and manage the Nasuni Filer. The Nasuni Filer user interface is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome.

• Nasuni Management Console (NMC): The Web-accessible appliance with which you can configure and manage multiple Nasuni Filers. The Nasuni Management Console is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome.

• Cloud storage: Cloud-based, highly protected, unlimited storage.

• Volume: A set of files and directories (CIFS and NFS) or blocks of data (iSCSI).

• Share/export: An access point to a folder on a volume that can be shared or exported on your network. Access to a CIFS share can be customized on a user-level or group-level basis. You can create many shares or exports on a volume, for different purposes or audiences.

• Cache: The local storage of the Nasuni Filer. All data and metadata that is accessed regularly is kept locally in the cache. If requested data is not locally resident, it is staged into the cache and provided for the request.

• Snapshot: A snapshot is a complete picture of your volume at a specific point in time.

Snapshots offer data protection by enabling you to recover data deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not

possible to modify that snapshot.

Also, see “Glossary” on page 271.

Terminology

The following terminology is useful in understanding Nasuni technology:

Alerts and messages: See “Notifications”, including “Notifications Page” on page 245.

Backup: See “Snapshots”, including “Snapshot schedule” on page 108 and “Snapshot retention” on page 106.

Bandwidth: See “Quality of Service (QoS)”, including “Quality of Service (Bandwidth) Settings” on page 155.

Local data: See “Cache”, including “Cache Settings” on page 141.

Maximum capacity: See “Quota”, including “Quota” on page 99.

Moving data to your Nasuni Filer: See “Data Migration”, including “Migrations” on page 174.

Other Nasuni Filers: See “Remote Access”, including “Remote Access” on page 101.

Sets of data: See “Volumes”, including “Volumes page” on page 44.

Also, see “Glossary” on page 271.

(19)

Chapter 2: Task Overview

The Nasuni Management Console provides extensive information that enables you to monitor the status of your data from a single application. In addition, you can use the Nasuni Management Console to configure volumes, CIFS shares, and NFS exports from a single application, regardless of which Nasuni Filer they reside on. This makes it simpler and faster for you to perform multiple, near- simultaneous configurations, while maintaining consistent settings. There can be only one Nasuni Management Console for your account.

Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected.

Note: Notifications and changes on Nasuni Filers can take up to 10 minutes to appear in the Nasuni Management Console.

Without the Nasuni Management Console, data management tasks require configuring volumes, CIFS shares, and NFS exports separately on each Nasuni Filer, which is time-consuming and can lead to inconsistent settings.

This chapter presents an overview of some of the tasks that you can perform with the Nasuni Management Console, along with links to further information.

Starting with the Nasuni Management Console

Installing the Nasuni Management Console

Installing and configuring the Nasuni Management Console on your virtual platform is a simple and straightforward process.

• The Nasuni Management Console runs on your virtual platform. First, download and install the software on your virtual platform. See “Downloading the Nasuni Management Console

Software” on page 14.

• Run the Install Wizard, including entering serial number and authorization code, found under the Account section of www.nasuni.com. See “Installing the Nasuni Management Console” on page 21.

• After you install and configure the Nasuni Management Console, you can place Nasuni Filers under the control of the Nasuni Management Console. See “Placing a Nasuni Filer under the control of the Nasuni Management Console” on page 2.

(20)

Task Overview Starting with the Nasuni Management Console

Creating new volumes

You use volumes to manage data. If you do not already have a volume set up, you can create a new volume.

• Before creating a new volume, ensure that you have the encryption keys you would like to use.

Nasuni recommends creating and uploading your own encryption keys (“Adding (importing or uploading) encryption keys to Nasuni Filers” on page 151).

Otherwise, you can specify generating a new encryption key when you create the new volume.

Nasuni also recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). Alternatively, you can escrow encryption keys with Nasuni (“Escrowing Encryption Keys with Nasuni” on page 153).

Note: If you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface.

• To create a new volume on a Nasuni Filer, see “Create Volume” on page 54.

• You can create CIFS shares (“Creating shares” on page 79) or NFS exports (“Creating exports”

on page 73) for users to access. If you created a share or export automatically when you created a new volume, you can check and edit the settings for CIFS shares (“Editing shares” on page 85) or NFS exports (“Editing exports” on page 75).

Managing the Nasuni Management Console

You have many options for configuring the Nasuni Management Console.

• You can configure the Nasuni Management Console to automatically download and install software updates. prevent automatic software updates from occurring at inconvenient times, you can specify the days and times for automatic software updates to occur, or prevent automatic software updates entirely. See “Automatic Software Updates” on page 213.

Alternatively, you can manually update the Nasuni Management Console software. See

“Software Update” on page 241.

• You can view the status and expiration date of your subscription. See “Viewing account status”

on page 207. You can also refresh your subscription license. See “Refreshing license” on page 208.

• The Notifications page lets you view and acknowledge Nasuni Management Console messages.

See “Notifications Page” on page 245.

• You can configure email alerts, which are sent to your email account from the Nasuni

Management Console. You can select various types of alerts to receive. See “Email Settings” on page 216.

• You can perform the disaster recovery procedure for a genuine emergency, or when moving the Nasuni Management Console to another location. See “Disaster Recovery” on page 249.

(21)

Task Overview Managing data

Managing data

Providing data access to users

You can define which users can access which data.

• You can define a CIFS share or an NFS export for each directory tree (the directory itself and any files and directories it contains) in a volume. You can create many shares or exports on a volume. See “Creating shares” on page 79 and “Creating exports” on page 73. If you created a share or export automatically when you created a new volume, you can check and edit the settings for CIFS shares “Editing shares” on page 85) or NFS exports (“Editing exports” on page 75).

For each share or export, you can define which volume and which directory tree within the volume to share or export. You can specify Read-Only access. You can limit which hosts can access the share or export.

For CIFS shares, you can use Windows Explorer to define user and group access to folders.

You can map network drives to CIFS shares in Windows, access iSCSI volumes in Windows, and mount CIFS shares or NFS exports in Linux or UNIX.

• You can establish Browser-based Access to CIFS shares. This enables users to access data using any supported Web browser. See “Editing shares” on page 85.

• You can establish Mobile Access to CIFS shares. This enables users to access data using mobile devices, including iOS-based devices (such as iPhone and iPad) and Android phones.

See “Editing shares” on page 85.

You can specify details of the Mobile Service, such as adding another port for Mobile Access, limiting how long users remain authenticated on mobile devices, limiting users to only one mobile device, and limiting the types of mobile devices that can use Mobile Access. See

“Mobile Settings” on page 177.

You can enable, disable, and delete licenses for the Mobile Access service. See “Mobile Licenses” on page 180.

Downloading, restoring, and bringing data into cache

You can select specific volumes, folders, and files. You can then download, restore, or bring the selected data into the local cache of the Nasuni Filer.

• You can browse to volumes, folders, and files (“Browsing a Volume” on page 61).

• You can also search for data by folder or file name and date (“Searching for a Folder or File by Name and Date” on page 65).

• You can bring folders and files into the local cache of a Nasuni Filer (“Bringing Data into Cache of the Nasuni Filer” on page 68).

• You can download selected files (“Downloading Files” on page 70).

• You can restore folders and files (“Restoring Files or a Folder from a Snapshot” on page 70).

(22)

Setting quotas on folders and volumes

You can set quotas on the size of folders and volumes (“Setting Quota or Rule” on page 69).

Sharing data between Nasuni Filers

You share data between Nasuni Filers by using volumes. If you do not already have a volume set up on the Nasuni Filer that is sharing data, you can create a new volume. Only CIFS and NFS volumes can be shared.

• Before creating a new volume, ensure that you have the encryption keys you would like to use.

Nasuni recommends creating and uploading your own encryption keys (“Adding (importing or uploading) encryption keys to Nasuni Filers” on page 151). Otherwise, you can specify

generating a new encryption key when you create the new volume. Nasuni also recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). Alternatively, you can escrow encryption keys with Nasuni (“Escrowing Encryption Keys with Nasuni” on page 153).

Note: If you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface.

• To create a new volume on the Nasuni Filer, see “Create Volume” on page 54.

• Volumes are not shared by default. First, you need to enable Remote Access for the volume that is sharing data. You can specify Read/Write or Read-Only access for the Nasuni Filers that are receiving data. See “Editing remote access settings” on page 102.

• After the volume that is sharing data has Remote Access enabled, you connect the Nasuni Filers that are receiving data to the volume that is sharing data. See “Connect (and Disconnect) Volume” on page 58.

• End users do not access the volume that is receiving data directly, but through CIFS shares or NFS exports. You can use the shares or exports of the volume that is sharing data, or define CIFS shares (“Creating shares” on page 79) or NFS exports (“Creating exports” on page 73) for users to access on the volume that is receiving data. If you created a share or export

automatically when you created a new volume, you can check and edit the settings for CIFS shares (“Editing shares” on page 85) or NFS exports (“Editing exports” on page 75).

Adding data to volumes

There are several ways to add data to volumes.

• The best way to initially load your data into a volume is by using the Data Migration Service. This feature supports multiple sources and targets for migrations using CIFS or NFS protocols. You can monitor data migrations from the Nasuni Management Console, but you must use the Nasuni Filer user interface to configure data migrations. See “Viewing migrations” on page 174,

“Viewing migration sources” on page 175, and “Viewing migration schedules” on page 176.

(23)

• You can access iSCSI volumes in Windows, OSX, and Linux. You can access CIFS shares from Windows, OSX, and Linux. You can mount NFS exports in Linux or OSX. This enables users to add data to volumes using the file management capabilities of Windows, Linux, and OSX operating systems.

• You can share data from other Nasuni Filers as described in “Sharing data between Nasuni Filers” on page 7.

• You can define Browser-based Access to CIFS shares. This enables users to add data to volumes using any supported Web browser. See “Editing shares” on page 85.

• You can define Mobile Access to CIFS shares. This enables users to add data to volumes using mobile devices, including iOS-based devices (such as iPhone and iPad) and Android phones.

See “Editing shares” on page 85.

You can specify details of the Mobile Service, such as adding another port for Mobile Access, limiting how long users remain authenticated on mobile devices, limiting users to only one mobile device, and limiting the types of mobile devices that can use Mobile Access. See

“Mobile Settings” on page 177.

You can enable, disable, and delete licenses for the Mobile Access service. See “Mobile Licenses” on page 180.

Protecting data

A snapshot is a complete picture of your volume at a specific point in time. Snapshots offer data protection by enabling you to recover past versions of a file or to restore an entire file system. You can select when and how frequently to perform snapshots. For example, you can configure snapshots to occur only at night when network usage is low.

• You can schedule snapshots for whenever suits your system best. See “Editing snapshot schedules” on page 110.

• You can also take snapshots manually at any time. See “Take Snapshot” on page 53.

• For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage, based on a configured snapshot retention policy for a specific volume. See

“Editing snapshot retention settings” on page 107.

Managing volumes

The Nasuni Management Console offers many options for managing volumes. See “Volumes Page” on page 43.

• Volumes should have names that describe what data they contain and that users will recognize.

You can change the name of a volume. See “Changing volume name” on page 96.

• You can change the name of an iSCSI target. See “Editing iSCSI volumes” on page 88.

• You can monitor file statistics. See “File Sizes in Snapshots” on page 41, “File Sizes in Snapshots” on page 41, and “Data Growth chart” on page 39.

(24)

Task Overview Security

• For CIFS and NFS volumes, the volume quota (maximum capacity) enables you to limit the amount of storage space for a volume, including snapshots, which helps you to control your storage costs. You can change the volume quota. See “Quota” on page 99.

• You can delete volumes that are no longer needed. See “Deleting a local volume” on page 52.

Security

Handling encryption keys

Encryption keys are used to encrypt your data in cloud storage. You can use the Nasuni Management Console to manage encryption keys in several ways.

• You can view encryption keys and their settings by volume (“Viewing encryption keys” on page 91), by Nasuni Filer (“Viewing encryption keys on Nasuni Filers” on page 150), and on the Nasuni Management Console (“Viewing encryption keys on the Nasuni Management Console”

on page 222).

• Nasuni recommends creating and uploading your own encryption keys. You can upload encryption keys to the Nasuni Management Console. See “Uploading (importing or adding) encryption keys to the NMC” on page 223.

You can also upload encryption keys to specific Nasuni Filers. See “Adding (importing or uploading) encryption keys to Nasuni Filers” on page 151.

Alternatively, you can specify generating a new encryption key when you create a new volume.

• You can use specific uploaded encryption keys with specific volumes. As a first step, you can send encryption keys that you uploaded on the NMC to the Nasuni Filers where those volumes reside. See “Sending encryption keys to Nasuni Filers” on page 152.

The next step is to add specific encryption keys to specific volumes. See “Adding encryption keys to a volume” on page 92.

The next step is to enable (or disable) specific encryption keys for specific volumes. See

“Enabling encryption keys for a volume” on page 93 or “Disabling encryption keys for a volume”

on page 94.

• Nasuni recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). See “Downloading the NMC’s generated encryption key” on page 224.

Note: You cannot download any Nasuni Filer encryption key from a Nasuni Management Console, because the Nasuni Filer never transmits any encryption keys to a Nasuni Management Console. The Nasuni Management Console is never in possession of any encryption key generated by a Nasuni Filer. In particular, if you use the Nasuni

Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface.

(25)

Task Overview Security

Alternatively, you can escrow uploaded encryption keys with Nasuni. See “Escrowing encryption keys with Nasuni” on page 225.

Note: All automatically-generated encryption keys are automatically escrowed with Nasuni.

• You can delete encryption keys that are not necessary for disaster recovery purposes. See

“Deleting Encryption Keys” on page 226.

Role-based access control

Rather than managing the permissions for performing tasks individually for each person, it is simpler to create groups that have specific combinations of permissions, then assign users to the appropriate groups. You can define users and groups of users, then assign specific permissions to each group. You can define up to 150 users and 150 groups.

• To control who can manage the Nasuni Management Console, you can assign users to either the NMC Administrators group or to a new group that you create with the “Manage all aspects of NMC (super user)” permission. See “Console Users and Groups” on page 231.

• To control who can perform actions on the Nasuni Management Console, you can define users and groups of users, then assign specific permissions. See “Console Users and Groups” on page 231.

• To control who can access specific Nasuni Filers, you can assign users to a new group that you create for those Nasuni Filers. See “Console Users and Groups” on page 231.

• To control who can access CIFS shares that have Active Directory security, you can define users and groups of users, then assign specific permissions. See “Editing shares” on page 85.

SSL certificates

The user interface of the Nasuni Management Console and the user interface of Nasuni Filers are Web- based. In order to secure these Web sites, SSL certificates or self-signed certificates are used.

• You can view or add SSL certificates or a self-signed certificate that you can use when

accessing the Nasuni Management Console user interface. See “SSL Certificates” on page 227.

• You can view the SSL certificates or self-signed certificate that you use when accessing Nasuni Filers. See “SSL Certificates” on page 195.

Antivirus protection

Nasuni offers the option of protecting data with antivirus scanning, and review of files flagged for violations.

• You can enable or disable the Antivirus Service. See “Editing Antivirus Service settings” on page 115.

• You can review antivirus violations. See “Reviewing antivirus violations” on page 118.

(26)

Task Overview Changing performance

Firewall protection

You can limit which network hosts connect to the Nasuni Management Console user interface and the Nasuni Support SSH port, which provides firewall protection. See “Firewall” on page 237.

Changing performance

There are a number of settings that can affect the performance of the system.

• Quality of Service (QoS) settings specify the outbound bandwidth for moving snapshots from the Nasuni Filer to cloud storage. Snapshots are slower during periods of lower bandwidth.

Local user read/write operations are not affected. Limiting the bandwidth of outbound data between specific hours can help decrease network congestion. See “Quality of Service (Bandwidth) Settings” on page 155.

• On virtual platforms, you can change resources such as the number of cores applied to the virtual machine as well as the contention for resources. See the Nasuni Filer Virtualization Getting Started Guide.

• The cache is the local storage of the Nasuni Filer. All data and metadata that are accessed regularly are kept locally in the cache. By default, the amount of local cache space reserved for new writes is managed automatically, using an advanced algorithm to optimize cache usage.

However, you can override the amount of local cache space reserved for new writes in order to suit your company’s workload. Reserving a large portion of the cache for new writes allows snapshots to complete more rapidly, but reduces the amount of data that is kept locally.

Reserving a small portion of the cache for new writes allows keeping more data locally, but increases the time for completing snapshots. See “Cache Settings” on page 141.

On virtual platforms, you can also increase the size of the cache. See the Nasuni Filer Virtualization Getting Started Guide.

• Frequent snapshots increase the system load significantly. You can change when and how frequently snapshots occur. See “Editing snapshot schedules” on page 110.

• Pinning a volume allows retaining a volume in the local cache at all times. This can improve performance and reduce the time necessary to return accessed data to clients. See “Pinning volumes” on page 97.

(27)

Task Overview Actions only available on the Nasuni Filer

Actions only available on the Nasuni Filer

There are certain actions that cannot be performed from within the Nasuni Management Console. You must perform these actions using the specific Nasuni Filer’s user interface.

Affected item On Nasuni Filer

Action: Menu

Place Filer in NMC control Enable: Services → Nasuni Management Console Data Migrations Create, Delete: Services → View Migrations Data Migration sources Create, Delete: Services → Migration Sources Data Migration schedules Schedule: Services → Migration Schedules

Active Directory domain Join, Leave, Edit, View: Configuration → Domain Settings Network Edit: Configuration → Network Configuration

Charts, Status: Status → Network Status Firewall Edit: Configuration → Firewall

SSL certificates Add, Delete, Set: Configuration → SSL Certificates HTTPS proxy Edit: Configuration → HTTPS Proxy

Email Edit: Configuration → Email Settings

(28)

Chapter 3: Installing the Nasuni Management

Console

Overview

This chapter explains how to install the Nasuni Management Console on your network.

Note: There can be at most one Nasuni Management Console per account.

Requirements for the Nasuni Management Console

The minimum recommended virtual machine resources for running the Nasuni Management Console are as follows:

Description Value

Supported virtualization platforms. VMware ESXi 5.0, 5.1, and 5.5 Windows Server 2008 R2 SP1 Hyper-V

Microsoft Azure Amazon EC2

Minimum disk space. 8 GB

Minimum number of CPU cores. 1

Minimum required memory. 2 GiB

Minimum recommended memory. 4 GiB

(29)

Installing the Nasuni Management Console Downloading the Nasuni Management Console Software

Downloading the Nasuni Management Console Software

The Nasuni Management Console runs as a virtual appliance on your network and is distributed as a downloadable image. You need to register on the Nasuni Web site for a user account and password to access the download page.

To download the Nasuni Management Console software from the Nasuni Web site, follow these steps:

1. Using your Web browser, log in to your Nasuni account at https://account.nasuni.com/account/

Click Downloads. The Downloads page appears.

Figure 3-1: Download page.

2. Select the appropriate format for your virtual environment from these choices:

• OVF FORMAT: OVF format is appropriate for VMware ESXi environments. The Nasuni Management Console runs as a virtual machine on the VMware ESXi 5.0, 5.1, and 5.5 virtualization server platforms.

• HYPER-V FORMAT: Hyper-V format is appropriate for Microsoft Hyper-V environments.

The Nasuni Management Console runs as a virtual machine on the Windows Server 2008 R2 SP1 and Windows Server 2012 Hyper-V virtualization server platforms.

3. Download the Nasuni Management Console software .zip file to a location on your local drive.

The amount of time to download the Nasuni Management Console software file depends on your Internet connection. The file is approximately 300 MB in size.

4. Unzip the Nasuni Management Console software .zip file.

(30)

5. To Install the Nasuni Management Console into VMware ESXi, use the vSphere Client to deploy the OVF template. Power on the new Nasuni Management Console virtual machine. Click the Console tab.

Alternatively, to install the Nasuni Management Console into Microsoft Hyper-V, use the Hyper- V Manager to import the virtual machine. Start the new Nasuni Management Console virtual machine. Right-click the Nasuni Management Console virtual machine, and select Connect from the drop-down menu.

6. The Nasuni Management Console screen appears with a plain white bar on the bottom that indicates the progress of the installation.

Figure 3-2: Nasuni Management Console installation progress screen.

7. After a few moments, the Nasuni Management Console console screen appears.

Figure 3-3: Nasuni Management Console console screen.

(31)

8. If DHCP is available on the network, make note of the IP address that appears on the console screen.

If DHCP is not available, log into the console service screen by pressing Enter and signing in.

The default login username is service, and the default password is service. Enter editnetwork. Enter the command: setall static. Enter a new IP address. Note the IP address.

Note: For security, use the changepassword command to change the password for the service console.

Note: For more information on console commands, see the Nasuni Filer Initial Configuration Guide.

9. Make note of the initial IP address of your Nasuni Management Console.

(32)

Installing the Nasuni Management Console Connecting with the Nasuni Management Console

Connecting with the Nasuni Management Console

You should have an initial IP address from the installation of your Nasuni Management Console

software on a virtual machine. This IP address might be provided by the IT specialist who initially set up the Nasuni Management Console software.

Open a Web browser and enter the IP address using this command:

https://<IP address>

where <IP address> is the IP address.

When you attempt to access the Nasuni Management Console Home page for the first time, a message might appear indicating that the security certificate is not trusted. You can still access the Install Wizard to proceed with the initial configuration procedure.

Continue with the next section, “SSL Security Certificate” on page 18.

(33)

Installing the Nasuni Management Console SSL Security Certificate

SSL Security Certificate

By default, the Nasuni Management Console is preloaded with a self-signed SSL certificate that is unique to the Nasuni Management Console. For this reason, when you attempt to access the Nasuni Management Console Home page for the first time, a message might appear indicating that the security certificate is not trusted. You can still access the Install Wizard to proceed with the initial configuration procedure.

Note: To add a new SSL certificate, see “SSL Certificates” on page 227.

Example using Mozilla Firefox

This is an example of what you might see using the Mozilla Firefox Web browser:

1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The “This Connection is Untrusted” page appears.

Figure 3-4: “This Connection is Untrusted” page.

2. Click “I Understand the Risks”. An expanded version of the “This Connection is Untrusted”

page appears.

Figure 3-5: “This Connection is Untrusted” page.

(34)

3. Click Add Exception. The Add Security Exception dialog box appears.

Figure 3-6: Add Security Exception dialog box.

4. Click Get Certificate.

5. Click Confirm Security Exception.

6. Open a Web browser and enter the IP address again.

7. Continue with “Installing the Nasuni Management Console” on page 21.

(35)

Example using Google Chrome

This is an example of what you might see using the Google Chrome Web browser:

1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The page “The site's security certificate is not trusted!”

appears.

Figure 3-7: “The site's security certificate is not trusted!” page.

2. Click Proceed anyway.

Example using Microsoft Internet Explorer

This is an example of what you might see using the Internet Explorer Web browser:

1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The “There is a problem with this website's security certificate.” page appears.

Figure 3-8: “There is a problem with this website's security certificate.” page.

2. Click Continue to this website.

(36)

Installing the Nasuni Management Console Installing the Nasuni Management Console

Installing the Nasuni Management Console

To install the Nasuni Management Console, follow these steps:

1. After you add a security certificate or proceed without adding a security certificate, the Install Wizard — Network Configuration page appears.

Figure 3-9: Install Wizard — Network Configuration page.

a. In the Host Name box, a default hostname for the Nasuni Management Console appears.

You can accept the default hostname or change it to a customized hostname. The name that you enter is the name you provide to users so they can access the Nasuni Management Console. You can use ASCII letters a through z, digits 0 through 9, and hyphens.

Note: The Nasuni Management Console attempts to register the hostname in the DNS server, so that users can access this host by name.

To change this name later, see “Networking” on page 238.

(37)

b. From the Network Type drop-down list, select either Static or DHCP.

If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, Default Gateway, and MTU Value fields become unavailable.

If you select Static, you must provide Network Device Settings and System Settings. See your IT administrator for assistance.

If you select Static as a source, enter the following information:

• Enter the static IP address in the IP Address text box.

• Enter a netmask address in the Netmask text box.

• Enter a default gateway address in the Default Gateway text box.

The gateway address must match a subnet of a defined static network.

• Enter the MTU value in the MTU Value text box. MTU settings above 1500 are supported.

The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency.

c. In the System Settings area:

If you selected DHCP (Dynamic Host Configuration Protocol), the Search Domain, Primary DNS Server, and Secondary DNS Server fields become unavailable.

If you select Static as a source, enter the following information:

• Enter one or more local search domains in the Search Domain text box. If you enter multiple search domains, make sure you include a space between each entry. You must enter valid host names.

You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain

“mycompany.com”, then typing “server1” for one of these purposes would connect to

“server1.mycompany.com”.

• Enter the IP address for your primary DNS server in the Primary DNS server text box.

You must enter a valid host name or IP address.

• Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid host name or IP address.

d. Click Continue to proceed.

(38)

2. The Install Wizard — Proxy Network Configuration page appears.

Figure 3-10: Install Wizard — Proxy Network Configuration page.

a. To enable proxy support, click Proxy Support: On (enabled) or Off (disabled).

b. In the Proxy Server text box, enter the hostname or IP address of a host running an HTTPS proxy.

c. In the Port text box, enter the port number used by the HTTPS proxy server.

d. Optionally, enter a valid username (case-sensitive) for the proxy server in the User Name text box and the password (case-sensitive) in the Password text box.

e. Optionally, in the Do Not Proxy text box, enter a list of hostnames or IP addresses not to proxy (one per line).

f. Click Continue. To return to the previous page to change parameters, click Back.

3. The Install Wizard — Review Network Settings page appears.

Figure 3-11: Install Wizard — Review Network Settings page.

To accept the network settings, click Continue. return to the previous page to change parameters, click Back.

(39)

4. The Reconfiguring Network Settings page appears.

Figure 3-12: Configuring Network Settings page.

5. If a more recent version of the NMC software is available, a page appears to notify you. Click Continue. A second page appears to notify you of the progress of the software update.

6. The Install Wizard — Terms of Service and License Agreement page appears.

Figure 3-13: Install Wizard — Terms of Service and License Agreement page.

You can print or download a copy of the Terms of Service and License Agreement by clicking the appropriate icon.

Select “I accept the Terms of Service”, then click Continue.

(40)

7. The Install Wizard — Authorization page appears.

Figure 3-14: Install Wizard — Authorization page.

Enter the NMC Serial Number and Authorization code, found under the Account section of www.nasuni.com. Click Continue to proceed.

Note: If you reuse an NMC Serial Number for a previously existing Nasuni Management Console, you are asked if you want to perform a disaster recovery procedure on that Nasuni Management Console. For details, see “Disaster Recovery” on page 249.

8. The Install Wizard — Confirm New NMC Install page appears.

Figure 3-15: Install Wizard — Confirm New NMC Install page.

To add the new Nasuni Management Console, type the word “confirm” (without the quotation marks) in the Confirmation text box, then click Continue.

(41)

9. The Install Wizard — Create Admin User page appears.

Figure 3-16: Install Wizard — Create Admin User page.

Create a Username (case-sensitive) and a Password (case-sensitive) for the administrative user of this Nasuni Management Console. This user automatically becomes a member of the NMC Administrators group (see “Console Users and Groups” on page 231). Click Continue.

10. This completes the Install Wizard. The Setup Almost Complete page appears.

Figure 3-17: Setup Almost Complete page.

Follow instructions on this page for placing Nasuni Filers under the control of the Nasuni Management Console. Click Check for Managed Filers.

Continue with “Logging in to the Nasuni Management Console” on page 27.

(42)

Chapter 4: Login Page

The Nasuni Management Console user interface presents you with a Login page, where you log in using your username and password.

You can log in and access the Nasuni Management Console user interface from any computer running a supported Web browser, including Mozilla Firefox, Microsoft Internet Explorer, Apple Safari, and Google Chrome.

At the top of the Login page, you can access online help (see “Viewing the Nasuni Management Console Help” on page 31). You can also power down the system, if necessary (see “Powering Down and Rebooting the Nasuni Management Console” on page 33).

Logging in to the Nasuni Management Console

After the Nasuni Management Console has been installed and registered on your network, you can log in to the Web-based Nasuni Management Console user interface from any computer running a

supported Web browser, and perform management functions on Nasuni Filers.

See “Installing the Nasuni Management Console” for details about installing the product.

To log in to the Nasuni Management Console, follow these steps:

1. Using your Web browser, open the specified IP address for the Nasuni Management Console Home page. The IP address is provided during installation (see “Connecting with the Nasuni Management Console” on page 17). The Nasuni Management Console Login page appears.

Figure 4-1: Nasuni Management Console Login page.

(43)

Login Page Logging in to the Nasuni Management Console

2. Type your username (case-sensitive) in the Username text box. The administrative user account was set up in step 9 of “Installing the Nasuni Management Console” on page 21.

3. Type your password (case-sensitive) in the Password text box.

Warning: Too many unsuccessful login attempts disable the login for 5 minutes. If this happens, wait 5 minutes, then log in with a correct username and password.

Tip: If you forget the password for the administrative user, see “Resetting Administrative Account (Forgot password?)” on page 29.

4. Click Login.

• After you log in, the Nasuni Management Console Home page appears. See “Home Page”

on page 36 for details on the features of this page.

• After you log in, you can change the password, as detailed in “Changing Password” on page 34.

(44)

Login Page Resetting Administrative Account (Forgot password?)

Resetting Administrative Account (Forgot password?)

If you have lost the password for the administrative account, this feature resets the administrative account information for the Nasuni Management Console. No data is deleted and no configurations are changed.

Note: This procedure does not deauthorize the Nasuni.com account, just the Nasuni Management Console administrative account, which is independent of the Nasuni.com account and specific to the Nasuni Management Console.

Important: For this procedure, you need the NMC Serial Number and Authorization code for this Nasuni Management Console, found at https://account.nasuni.com/account/

serial_numbers/.

To reset the administrative account, follow these steps:

1. Click Forgot password? at the bottom of the Login page. The Reset Account page appears.

Figure 4-2: Reset Account page.

2. In the Nasuni Service Authorization area, enter the NMC Serial Number and Authorization code for this Nasuni Management Console, found at https://account.nasuni.com/

account/serial_numbers/.

Note: If you do not have the credentials for www.nasuni.com, you can perform a password reset or contact Nasuni Technical Support.

3. In the New Administrative Account area, create a Username (case-sensitive) and a Password (case-sensitive).

4. Click Continue. The Nasuni Management Console user interface appears.

Nasuni Management Console Guide

Nasuni Management Console

Guide

Version 5.5

©

Document Information

Contacting Nasuni Corporation

Contents

Preface

Audience

What’s in this Book

Text Conventions

Product Documentation

Electronic Publications

Chapter 1: The Nasuni Management Console

Nasuni Services

Nasuni Filer

Nasuni Management Console

Placing a Nasuni Filer under the control of the Nasuni Management Console

Key Terms

Terminology

Chapter 2: Task Overview

Starting with the Nasuni Management Console

Installing the Nasuni Management Console

Creating new volumes

Managing the Nasuni Management Console

Managing data

Providing data access to users

Downloading, restoring, and bringing data into cache

Setting quotas on folders and volumes

Sharing data between Nasuni Filers

Adding data to volumes

Protecting data

Managing volumes

Security

Handling encryption keys

Role-based access control

SSL certificates

Antivirus protection

Firewall protection

Changing performance

Actions only available on the Nasuni Filer

Chapter 3: Installing the Nasuni Management

Console

Overview

Requirements for the Nasuni Management Console

Downloading the Nasuni Management Console Software

Connecting with the Nasuni Management Console

SSL Security Certificate

Example using Mozilla Firefox

Example using Google Chrome

Example using Microsoft Internet Explorer

Installing the Nasuni Management Console

Chapter 4: Login Page

Logging in to the Nasuni Management Console

Resetting Administrative Account (Forgot password?)