# 配置备份服务器 将一台安装了eBackup备份软件的服务器初始化为备份服务器，并配置相关参数。 #### 前提条件 - 安装前准备请提前规划备份服务器的相关网络平面参数。 - 已准备跨平台远程访问工具如"PuTTY"。 - 已获取eBackup服务器"root"账号的登录密码。 #### 配置eBackup备份服务器 1. 以"root"账号登录待配置的eBackup服务器。 "root"账号初始密码为"Cloud12#$"。 使用跨平台访问工具登录，或在VMware vSphere Client工具中的控制台登录。 2. 执行**cd *备份软件安装包所在目录*** 命令进入初始配置脚本目录。 备份软件安装包所在目录为/opt/eBackup_8.0.0-LHC01/action。 3. 执行**sh ebackup_utilities.sh config** 命令，开始进行初始化配置。 回显如下信息。 ``` Please select network type for this machine: 1.ipv4 2.ipv6 ``` 4. 输入"1"，按"Enter"。 ``` 1 Please select a role for this machine: 1.Backup Server 2.Backup Proxy 3.Backup Manager 4.Backup Workflow Server ``` 5. 输入"1"，按"Enter"。 ``` 1 =================================================================================================== Note: In the following steps you will be required to configure four network planes for eBackup. The definition of each network plane is as follows: Backup management plane: the communication plane for eBackup to provide external services. Internal communication plane: the communication plane between backup server and backup proxy. Production management plane: the communication plane between eBackup and the management plane of the production end. Storage plane: the communication plane between eBackup and the storage plane of the production end and communication plane between eBackup and backup storage. ==================================================================================================== Set network adapter for 'Backup management' network plane: [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 Which network adapter from the above list would you like to bind to the 'Backup management' network plane? ``` 6. 配置备份服务器网络平面。 ![](https://support.huaweicloud.com/hcbkp-fg-cbr/public_sys-resources/notice_3.0-zh-cn.png) 此处需要为备份服务器的五个网络平面绑定相应的网卡，具体绑定哪张网卡请根据[规划网络](https://support.huaweicloud.com/hcbkp-fg-cbr/cbr_03_0105.html#cbr_03_0105)中的网络规划进行选择。 本节以备份服务器配置两张网卡，备份管理平面、生产管理平面、内部通信平面、生产存储平面绑定在同一张网卡，备份存储平面绑定在一张网卡为例说明。 1. 选择备份管理平面需要绑定的网卡，按"Enter"。 ![](https://support.huaweicloud.com/hcbkp-fg-cbr/public_sys-resources/note_3.0-zh-cn.png) 如果选择bond1作为备份管理平面需要绑定的网卡，请输入"1"。 ``` 1 Set network adapter for 'Internal communication' network plane: [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 Which network adapter from the above list would you like to bind to the 'Internal communication' network plane? ``` 2. 选择内部通信平面需要绑定的网卡，按"Enter"。 ``` 1 Set network adapter for 'Production management' network plane: [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 Which network adapter from the above list would you like to bind to the 'Production management' network plane? ``` 3. 选择生产管理平面需要绑定的网卡，按"Enter"。 ``` 1 Set network adapter for 'Production Storage' network plane: [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 Which network adapter from the above list would you like to bind to the 'Production Storage' network plane? ``` 4. 选择生产存储平面需要绑定的网卡，按"Enter"。 ``` 1 Set network adapter for 'Backup Storage' network plane: [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 Which network adapter from the above list would you like to bind to the 'Backup Storage' network plane? ``` 5. 选择备份存储平面需要绑定的网卡，按"Enter"。 ``` 2 Enter a floating IP address that is in the same network segment as the internal communication plane. ``` 6. 设置浮动IP地址。 浮动IP地址为内部通信平面浮动IP地址。请确保浮动IP地址跟内部通信平面IP地址在同一网段中，且未被使用。 回显如下信息，表示配置成功。 ``` 192.168.1.12 Configuration succeeded. grep: this version of PCRE is compiled without UTF support The ebk_accelerator agent of OceanStor BCManager eBackup was started successfully. Start:ebk_accelerator service succeeded. start reload gaussdb grep: this version of PCRE is compiled without UTF support The ebk_backup agent of OceanStor BCManager eBackup was started successfully. Start:ebk_backup service succeeded. grep: this version of PCRE is compiled without UTF support The ebk_copy agent of OceanStor BCManager eBackup was started successfully. Start:ebk_copy service succeeded. grep: this version of PCRE is compiled without UTF support The ebk_delete agent of OceanStor BCManager eBackup was started successfully. Start:ebk_delete service succeeded. grep: this version of PCRE is compiled without UTF support The ebk_mgr agent of OceanStor BCManager eBackup was started successfully. Start:ebk_mgr service succeeded. grep: this version of PCRE is compiled without UTF support The ebk_restore agent of OceanStor BCManager eBackup was started successfully. Start:ebk_restore service succeeded. grep: this version of PCRE is compiled without UTF support The ebk_vmware agent of OceanStor BCManager eBackup was started successfully. Start:ebk_vmware service succeeded. service hcp start:completed You can access the eBackup UI using the following link. https://192.168.1.10:8088 or 192.168.1.10 Alternatively, you can access the eBackup CLI through SSH session. ``` 7. 依次执行以下命令进行安全加固。 加固后禁止使用"root"账号直接登录，请使用"hcp"账号登录，"hcp"账号的初始密码为"PXU9@ctuNov17!"。 **cd /opt/huawei-data-protection/ebackup/bin/StandardHardening** **echo -e "yes\\nyes\\n"\|./StandardSuseHardening.sh** ![](https://support.huaweicloud.com/hcbkp-fg-cbr/public_sys-resources/note_3.0-zh-cn.png) - 执行该命令会重启eBackup服务器，如需登录eBackup服务器请您稍后重试。 - 执行安全加固后，执行date命令查看当前时间，需要确保当前时间与选择目标上云region的时间保持一致，如果偏差 10min以上可能会导致备份失败。 8. （可选）如果备份上云的带宽小于100Mbits，可能会因网络质量导致备份失败，为了降低失败概率，可以执行如下命令，优化部分参数： **vim /opt/huawei-data-protection/ebackup/microservice/ebk_vmware/conf/hcpconf.ini** 查找并修改如下三个参数 ProductStorageMemoryPoolBlockNum 从64修改为8 BackupStorageMemoryPoolBlockNum 从64修改为8 CommonTaskUsingMaxThread4Backup 从8修改为2 执行上述参数修改后，执行如下命令重启进程生效： **cd /opt/huawei-data-protection/ebackup/microservice/ebk_vmware/script** **sh ebackup_stop.sh** **sh ebackup_start.sh** ![](https://support.huaweicloud.com/hcbkp-fg-cbr/public_sys-resources/note_3.0-zh-cn.png) 备份带宽的规划应该与备份数据量正相关，如果备份数据量较大而带宽较小，可能会出现备份时间过长的情况。