Configure and Register Isilon NAS

Check your Isilon requirements and minimum permissions, then register your Isilon NAS sources with Cohesity DataProtect as a Service.

For information on the supported cloud regions where you can back up this source, see Supported Workloads and Cloud Regions.

To add an Isilon cluster as a Cohesity DataProtect as a Service source:

  1. Confirm that you have met the Isilon requirements.

  2. Check the minimum Isilon user permissions.

  3. Register your Isilon NAS source.

To register other NAS types, see Register Generic NAS Sources or Configure and Register NetApp ONTAP.

Isilon Requirements

  • Ensure that the TCP/UDP ports 445, 8080, 111, and 2049 are open in the firewall between your SaaS Connector and data source.

  • Isilon OneFS version 8.0.x, 8.1, or 8.2.x.

  • NFS v3 for NFS export backups.

    Cohesity DataProtect as a Service uses NFS v3 and SMB v2 or v3 for data protection; SMB v1 is not supported in Cohesity DataProtect as a Service.

  • On Isilon NFS shares, enable the "Mount access to subdirectories" flag. Cohesity DataProtect as a Service requires this setting to mount the .snapshot directory of the shared path.

  • SnapshotIQ license enabled on Isilon, with these settings:

Minimum Isilon User Permissions

Cohesity DataProtect as a Service accesses your Isilon cluster using an Isilon user account. The user account must have the following permissions to back up and restore your Isilon data via SMB or NFS.

Access-level Command Description
ReadOnly Platform API For access to Isilon’s APIs.
Auth To verify users and passwords.
Cluster To obtain cluster identity and settings.
Network To obtain the network interfaces.
SMB To read the settings in the SMB server.
  Read/Write Job Engine To read and write Changelist jobs.
Snapshot To fetch, create, and delete snapshots for shares and exports.
NFS

To read and write settings to and from the NFS server.

This setting modifies the NFS export used to mount, such as /ifs.

Register Isilon Cluster

To register your Isilon cluster:

  1. In DataProtect as a Service, navigate to the Sources page and click + Register Source in the upper-right corner of the page.

  2. In the Select Source dialog box, select NAS.

  3. In the Type: drop-down, select Isilon and click Start Registration.

  4. In the Register Isilon dialog box, select an existing SaaS connection marked Unused or click Create SaaS Connection and follow the instructions in Deploy SaaS Connector, and then click Continue.

  5. Enter the Username and Password that you configured earlier, under Minimum Isilon User Permissions above.

  6. Enter the Isilon cluster's Hostname or IP Address and then click Continue.

  7. If you are backing up SMB volumes or mixed-mode volumes, enable SMB Volumes Access and enter the local or Active Directory (AD) Username and Password required for at least read access to the Isilon SMB share.

    • You can assign the local or AD user to the built-in "BackupAdmin" role to permit that user to read the SMB data for backup without modifying the access control lists (ACLs).

    • To provide access at the share level, grant the "Run as root" and "Full Control" permissions at the share level.

    • The user must have full control on the restore target during recovery.

  8. To exclude IP addresses or subnets from the communications between Cohesity DataProtect as a Service and the Isilon cluster, enable Exclude IPs and enter those IPs.

  9. Click Complete.

Your Isilon cluster is now a registered source in your Cohesity DataProtect as a Service and ready to be protected.

If you plan to stop protecting a NAS source, you can remove it from your Cohesity DataProtect as a Service. Navigate to Sources, click the Actions menu () next to the NAS source and select Unregister. In the Unregister Source dialog, click Unregister.

Next > You're ready to protect your Isilon NAS sources.