Commvault restore-only agent installation procedures

On this page:


Linux installs

RHEL/Fedora

If you are installing the agent on a Linux VM running RHEL/Fedora, follow the steps below.

  1. Download the Commvault agent (.rpm) from IUware.
  2. Copy the cvagent*.rpm file to the host where you will be performing the install.
  3. Run the following command on the host: yum install ./cvagent*.
  4. Follow the steps outlined in the Linux firewall configuration section below to configure the firewall on your server.
  5. Log into the Commvault web console and ensure that you can successfully browse the client's directory structure; for instructions, see Using the restore-only agent, how do I restore files from the Commvault web console for a Linux or Windows VM?

Other distributions

If you are installing the agent on a Linux VM running a distribution other than RHEL/Fedora, use the steps below as a guide.

  1. Download the Commvault agent (.tar) from IUware.
  2. Copy the cvagent*.tar archive to the host where you will be performing the install.
  3. Run the following command to extract the archive: tar -xf cvagent-XX.X.X-BUILDXX.tar.
  4. Run the following command to perform the install: cvagent-install/silent_install -p default.xml.
  5. Follow the steps outlined in the Linux firewall configuration section below to configure the firewall on your server.
  6. Log into the Commvault web console and ensure that you can successfully browse the client's directory structure; for instructions, see Using the restore-only agent, how do I restore files from the Commvault web console for a Linux or Windows VM?

Linux firewall configuration

FIREWALLD

Run the following commands as root from the command line on your server:

  1. firewall-cmd --new-zone=commvault --permanent
  2. firewall-cmd --zone=commvault --permanent --add-source=10.234.32.64/26
  3. firewall-cmd --zone=commvault --permanent --add-source=10.79.183.192/26
  4. firewall-cmd --zone=commvault --permanent --add-source=129.79.183.197
  5. firewall-cmd --zone=commvault --permanent --add-source=134.68.32.70
  6. firewall-cmd --zone=commvault --permanent --add-source=10.15.0.140
  7. firewall-cmd --zone=commvault --permanent --add-source=10.16.2.142
  8. firewall-cmd --zone=commvault --permanent --add-port=8400/tcp
  9. firewall-cmd --reload

IPTABLES

  1. Run the following command: vi /etc/sysconfig/iptables.
  2. Add the following rules:
    1. -A RH-Firewall-1-INPUT -s 10.234.32.64/26 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
    2. -A RH-Firewall-1-INPUT -s 10.79.183.192/26 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
    3. -A RH-Firewall-1-INPUT -s 129.79.183.197 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
    4. -A RH-Firewall-1-INPUT -s 134.68.32.70 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
    5. -A RH-Firewall-1-INPUT -s 10.15.0.140 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
    6. -A RH-Firewall-1-INPUT -s 10.16.2.142 -p tcp -m state --state NEW -m tcp --dport 8400 -j ACCEPT
  3. Save the changes you made to iptables: [ESC] :wq!
  4. Run the following command on the host: service iptables reload

Other

  1. Configure the OS firewall to allow the following IPs to connect to port 8400 over tcp:
    1. 10.234.32.64/26
    2. 10.79.183.192/26
    3. 129.79.183.197
    4. 134.68.32.70
    5. 10.15.0.140
    6. 10.16.2.142
  2. Reload the firewall service on your server to accept the changes.

Windows installs

  1. Download the Commvault agent (.exe) from IUware.
  2. Copy the executable to the host where you will be performing the install, and double-click CVROA-WIN64.exe to run it.
  3. The self-extracting executable will create a Commvault folder in C:\Windows\Temp.
  4. Once the files have been extracted, the setup.exe executable will run automatically from the Commvault folder that was created in the previous step. Allow the program to make changes to your server to continue with the install.
  5. In the Commvault install window that opens, accept the license agreement by checking I Agree and clicking OK.
  6. Once the restore-only agent has been successfully installed, click OK to close the window.
  7. Navigate to the Control Panel, and then click Windows Firewall > Advanced Settings > Inbound Rules.
  8. You will notice that the agent install created several new firewall rules on your server. These rules are created in order to allow the Commserve to run specific processes during the course of the installation, and can be identified by the prefix "CommVault_Process". As these rules are no longer essential, select all the rules containing this prefix and disable them.
  9. Create a new inbound rule for the agent. To do so, on the right hand side of your "Windows Firewall with Advanced Security" window, under "Inbound Rules", click New Rule.... Use the following parameters for this rule:
    1. Set the type of new rule to Port.
    2. Leave TCP as the desired protocol.
    3. Next to "Specific local ports:", enter 8400.
    4. Leave the setting Allow the connection, and click Next.
    5. Leave all boxes checked, and click Next.
    6. Enter CommVault for the rule name, and click Finish.
    7. Right-click the newly created rule, and choose Properties.
    8. Under the Scope tab, add the following IP addresses to limit the servers that have access to port 8400 on the client:
      • 10.234.32.64/26
      • 10.79.183.192/26
      • 129.79.183.197
      • 134.68.32.70
  10. Log into the Commvault web console and ensure that you can successfully browse the client's directory structure; for instructions, see Using the restore-only agent, how do I restore files from the Commvault web console for a Linux or Windows VM?

This is document anmk in the Knowledge Base.
Last modified on 2017-05-08 10:33:51.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.