Configuring the Backup Policy

Prerequisites

• You have logged in to the ManageOne OM plane.
  URL: https://Floating IP address of the ManageOne OM plane:31943, for example, https://192.168.0.5:31943

  In the DR scenario, the backup policy needs to be configured for both the production center and DR center.

  • Floating IP address for logging in to the ManageOne OM plane in the production center in the CSDR scenario: uses the value of ManageOne-OM-Float-IP on the FCD Generated Parameters sheet of the xxx_export_all_EN.xlsm file exported during ManageOne installation in the production center.
  • Floating IP address for logging in to the ManageOne OM plane in the DR center in the CSDR scenario: uses the value of ManageOne-OM-Float-IP on the FCD Generated Parameters sheet of the xxx_export_all_EN.xlsm file exported during ManageOne installation in the DR center.
• Ensure that the IP address of the backup server pings the IP address of the database node.
• When the backup server uses the SFTP transmission mode:
  • You have obtained the IP address and port number of the backup server, the username and password of the SFTP protocol, and the storage path for the backup files.
  • You have obtained the permission to access the SFTP shared directory.
• When the backup server uses the UDS transmission mode:
  • You have obtained the IP address and port number of the backup server, the access key (AK) ID, secret access key (SK), and bucket name of the UDS transmission mode.
  • You have obtained the permission to access the UDS shared directory.

Procedure

Preparing the SFTP server

1. Use PuTTY to log in to the SFTP server as the root user in SSH mode.
2. Create a user group and add users to it. Set passwords for the users.
   1. Run the groupadd sftp command to create a user group.

      If "group 'sftpuser' already exists" is displayed, the sftp user group has been created. Go to 2.b.

   2. Run the useradd -g sftp mosftpuser command to add users.
   3. Run the passwd mosftpuser command to set the password. If the following information is displayed, enter the same password twice:

      Changing password for user mosftpuser.
      New password:
      Retype new password:

3. Create a directory for the user group and set permissions.
   1. Run the mkdir -p /modatas/backup command to create a directory.
   2. Run the usermod -d /modatas/backup mosftpuser command to change the directory of the mosftpuser user.

4. Set permission for the directory.
   1. Run the chown -R mosftpuser:sftp /modatas/ command to assign the mosftpuser owner group permission to the /modatas/ directory and its subdirectories.
   2. Run the chmod 755 /modatas/backup command to assign permissions to the /modatas/backup directory.

5. Create a directory that can be written by the SFTP user after login.
   1. Run the mkdir / modatas/backup/sftpuser command to create a directory.
   2. Run the chown -R mosftpuser:sftp /modatas/backup/sftpuser/ command to assign the mosftpuser owner group permission to the /modatas/backup/sftpuser/ directory and its subdirectories.
   3. Run the chmod 755 /modatas/backup/sftpuser/ command to assign permissions to the /modatas/backup/sftpuser/ directory.

6. Use WinSCP to log in to the SFTP server as the mosftpuser user and check whether the login is successful and whether the /modatas/backup/sftpuser/ directory can be successfully switched.
   • If the login is successful and the /modatas/backup/sftpuser/ directory can be successfully switched, go to Step 7.
   • If the login fails or the /modatas/backup/sftpuser/ directory cannot be switched, repeat Step 1 through Step 5. If the login still fails, contact Huawei technical support.

7. Use PuTTY to log in to the SFTP server as the mosftpuser user in SSH mode.
8. Run the following command to check whether the /modatas/backup/sftpuser/ directory can be successfully switched:

   cd /modatas/backup/sftpuser/

   • If yes, the preparation is successful.
   • If no, contact technical support.

Setting backup server parameters

9. Choose System > Backup and Restoration from the main menu.
10. In the navigation pane, choose Backup Policy.
11. Click in the Backup Server Parameters area to go the Set Backup Server Parameters dialog box.

    Table A-2 describes parameters to be configured.

    Table A-2 Parameter description

    Remote Backup Protocol	Backup Server	Parameter	Description	Remarks
    SFTP	SFTP server	Server IP Address	Indicates the IP address of the SFTP server.	ManageOne provides only basic SFTP upload and download capabilities. The SFTP configurations and server establishment are ensured by users. If you use a remote server, ensure that the SFTP server is available and that the remote backup directory exists and is readable and writable to SFTP users. After the parameters are set, click Test to verify the settings. ManageOne supports only the SFTP server running Linux.
    		Port Number	Indicates the port of the SFTP server.
    		Username	Indicates the username for logging in to the SFTP server.
    		Password	Indicates the password for logging in to the SFTP server.
    		Backup Path	Indicates the directory for storing backup files.
    UDS	UDS server	Server IP Address	Indicates the IP address of the UDS server.	Prepare a UDS server, create a bucket name, and apply for an AK and an SK. Ensure that the time zone and the time on the UDS server are correct. Otherwise, AK/SK-based authentication will fail. After the parameters are set, click Test to verify the settings.
    		Port Number	Indicates the port number of the UDS server.
    		Access Key ID	AK and SK are key pairs.
    		Secret Access Key
    		Bucket Name	Indicates the bucket name of the UDS server.

    To ensure the normal running of the CSDR DR feature, you need to prepare an SFTP or UDS server for backing up ManageOne data. The backup server must be deployed in a region other than the running data center, and the data backup directories of the production center and DR center must be the same. Example:

    • It is recommended that data be backed up in the DR center when the production center is running and be backed up in the production center when the DR center is running.
    • Data can also be backed up in regions other than the production center and DR center.

12. After the parameters are set, click OK.

    The backup policy is automatically enabled.

Changing the backup time and the retention days of backup files

13. Click in the upper right corner of the backup policy list, change Backup Time and Backup File Storage Period (days), and click to save the modification.
    • The scheduled backup task is delivered every 10 minutes, on the hour. For example, if Backup Time is set to 8:03, the backup file is backed up at 8:10, which is the same as the backup task delivery time.
    • Backup files within the retention days must contain data that can be restored. Otherwise, the system does not automatically clear the data generated before the retention days.

Modifying a backup policy

14. To modify a backup policy, click on the right of the backup policy. On the displayed page, modify the backup policy.
    If the backup type of a backup policy is changed to incremental backup, the system performs full backup in the following scenarios:

    • If the last incremental backup task fails, the next backup task is automatically changed to a full backup task.
    • If a recovery task has been executed for two adjacent incremental backup tasks, the second incremental backup task is automatically changed to a full backup task.
    • After the system is installed for the first time, the IP address of the backup server or the backup path is changed. If the backup task is an incremental backup task, the system automatically changes the backup task to a full backup task.
    • When selecting the transmission protocol for the SFTP operation CDR service and Elasticsearch Service, you can select only SFTP.
    • In the CSDR DR scenario, change the backup period of the O&M Management, Operation Management, IAM, Unified Log Center, SFTP Operation SDR, and ES backup policies to 1 hour.