Configuring Network-Based Discovery Rules

Network-based discovery rules allow you to discover computers based on a range of IP addresses you specify. This method is recommended for small environments.

Prerequisites

Before you configure a network-based discovery rule:

• Deploy a master agent on a machine in the company infrastructure.

For details, see Deploying Management Agents Manually.

• Make sure you have the root account or any user account with super user privileges on all computers that you want to discover.

• Make sure that SSH port is opened on all computers that you want to discover.

• If you plan to assign a backup policy as part of the discovery procedure, create a new backup policy or check and if necessary customize one of the predefined policies.

For details, see Configuring Backup Policies.

Configuring Network-Based Discovery Rule

To configure a network-based discovery rule:

1. Log in to Veeam Service Provider Console.

For details, see Accessing Veeam Service Provider Console.

2. In the menu on the left, click Rules.
3. On the Rules tab, click New and select Linux.

Veeam Service Provider Console will launch the New Linux Discovery Rule wizard.

4. At the Rule Name step of the wizard, specify a discovery rule name.

5. At the Locations step of the wizard, click a link in the Master Agent column, and select a management agent that will be used as the master agent for discovery in each company location.

By default, discovery is performed in all company locations where you deployed a master agent. If you choose to perform discovery in multiple locations, after you complete the wizard steps, Veeam Service Provider Console will create a separate discovery rule for each location. If you do not want to perform discovery in some company locations, clear check boxes next to these locations.

For details on working with company locations, see Managing Locations.

6. At the Discovery Method step of the wizard, select Network-based discovery.

7. At the Network Discovery step of the wizard, specify one or more networks and IP ranges that must be scanned to discover computers:

1. Click Add.

Veeam Service Provider Console will open the Network IP Range window.

2. In Network field, type an arbitrary name of the network that must be scanned.
3. In the IP range fields, type a range of IP addresses that must be scanned in the specified network.
4. In the Machine trust options section, specify which computers must be discovered:

• Select the Trust all computers from the IP range option, to discover all computers in the specified IP range.

• Select the Trust computers from the known hosts list only option, to discover only computers added to the trusted hosts list.

Click Browse and specify a path to a file that contains a list of IP addresses or DNS names of computers that must be scanned.

5. Click OK.
6. Repeat steps a-e for each new IP range you want to include in the rule.
7. In the Exclusion mask field, specify a mask for names of computers that must be excluded from discovery.

The mask can contain the asterisk (*) that stands for zero or more characters. You can specify multiple masks separated with commas.

8. At the Credentials step of the wizard, specify credentials of an account that the master agent will use to connect to computers within the discovery scope.

Click New and select the type of credentials:

• Linux Credentials. Select this option to connect to Linux machines with a user name and password.

1. In the Username field, enter a user name for the account that you plan to add.
2. In the Password field, enter a password for the account that you want to add. To view the entered password, click and hold the eye icon on the right of the field.
3. In the SSH port field, specify the SSH port over which you want to connect to a Linux machine. By default, port 22 is used.
4. In the Description field, enter a description for the created credentials record. As there can be a number of similar account names, for example, Administrator, it is recommended that you provide a meaningful unique description for the credentials record so that you can distinguish it in the list.
5. If you specify data for a non-root account that does not have root permissions on a Linux machine, you can use the Non-root account section to grant sudo rights to this account.

To provide a non-root user with root account privileges, select the Elevate account privileges automatically check box.

To add the user account to sudoers file, select the Add account to the sudoers file automatically check box. In the Root password field, enter the password for the root account.

If you do not enable this option, you will have to manually add the user account to the sudoers file.

When registering a Linux machine, you have an option to failover to using the su command for distros where the sudo command is not available.

To enable the failover, select the Use "su" if "sudo" fails check box and in the Root password field, enter the password for the root account.

• Private Key. Select this option to connect to Linux machines using the Identity/Pubkey authentication method.

1. In the Username field, specify a user name for the created credentials record.
2. In the Password field, specify the password for the user account. The password is required in all cases except when you use root or a user with enabled NOPASSWD:ALL setting in /etc/sudoers.
3. In the Private key field, enter a path to the private key or click Browse to select a private key.
4. In the Passphrase field, specify a passphrase for the private key on the backup server. To view the entered passphrase, click and hold the eye icon on the right of the field.
5. In the SSH port field, specify a number of the SSH port that you plan to use to connect to a Linux machine. By default, port 22 is used.
6. In the Description field, enter a description for the created credentials record. As there can be a number of similar account names, for example, Administrator, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list.
7. If you specify data for a non-root account that does not have root permissions on a Linux machine, you can use the Non-root account section to grant sudo rights to this account.

To provide a non-root user with root account privileges, select the Elevate specified account to root check box.

To add the user account to sudoers file, select the Add account to the sudoers file automatically check box. In the Root password field, enter the password for the root account.

If you do not enable this option, you will have to manually add the user account to the sudoers file.

When registering a Linux machine, you have an option to failover to using the su command for distros where the sudo command is not available.

To enable the failover, select the Use "su" if "sudo" fails check box and in the Root password field, enter the password for the root account.

To define which credential records must be used first during discovery, use the Up and Down buttons at the top of the credentials list.

9. At the Discovery Filters step of the wizard, choose what filters you want to enable for discovery.

• To filter computers by OS type, select By OS type in the list and click Edit. In the Operating System window, select the type of OS that must run on discovered computers (CentOS, Debian, Oracle Linux, Fedora, Ubuntu, OpenSUSE, SUSE Linux Enterprise Server, Red Hat Enterprise Linux). Click OK.
• To filter computers by application, select By application in the list and click Edit. In the Application window, select applications that must run on discovered computers (Apache HTTP server, Oracle database, MySQL database, PostgreSQL, MongoDB, Other Applications). Click OK.
• To filter computers by platform, select By platform in the list and click Edit. In the Platform window, select platforms on which discovered computers must run (Virtual infrastructure, Physical computers, Microsoft Azure, Amazon Web Services, Google Cloud, Other). Click OK.
• If you want to perform discovery among accessible computers only, select the Do not show inaccessible computers check box.

10. At the Email Notification step of the wizard, you can enable notifications about discovery results by email.

1. Select the Send notifications check box and specify a schedule according to which email notifications must be sent.
2. In the To field, specify an email address at which the email notification must be sent.
3. In the Subject field, specify the subject of the notification.
4. Select the Send notification email after the first run check box if a notification about discovery results must be sent after the first run of the discovery rule, regardless of the specified schedule.

11. At the Backup Agent Deployment step of the wizard, specify whether you want to install Veeam backup agents on discovered computers:

1. If you do not want to install Veeam backup agents as part of the discovery process, leave the Discover remote computer without installing backup agent option selected.
2. If after discovery Veeam backup agents must be installed automatically, select the Discover remote computer, install backup agent and assign the selected backup policy option.

From the Backup policy to apply list, choose a backup policy that must be assigned immediately after installation. To view the selected policy details, click the Show link. If you do not want to assign any backup policy after installation, choose No policy from the list.

If you do not have the necessary backup policy configured yet, you can click the Create New link to create a new policy, without exiting the New Rule wizard. For details on backup policies, see Configuring Backup Policies.

3. By default, the read-only access mode is enabled for all Veeam backup agents installed as part of discovery. To disable the read-only access mode for Veeam backup agents on discovered computers, set the Read-only UI access for the backup agent toggle to Off.

For details on the read-only access mode for Veeam backup agents, see Enabling Read-Only Access Mode.

12. At the Schedule step of the wizard, specify schedule according to which discovery must be performed:

1. Select the Run this rule automatically check box, if you want to enable scheduling for the discovery rule.
2. Define scheduling settings:

• To run discovery at specific time daily, on defined week days or with specific periodicity, select the Daily at option. Use the fields on the right to configure the necessary schedule.
• To run discovery once a month on specific days, select the Monthly at option. Use the fields on the right to configure the necessary schedule.
• To run discovery repeatedly throughout a day with a specific time interval, select the Periodically every option. In the field on the right, select the necessary time unit: Days, Hours or Minutes.

• To run discovery continuously, select the Periodically every option and choose Continuously from the list on the right. A new discovery session will start as soon as the previous discovery session finishes.

3. From the Time zone drop-down list, select the time zone in which daily and monthly schedule must be run.

13. At the Summary step of the wizard, review discovery rule settings.

1. To start discovery after you save the rule, select the Launch the discovery rule when I click Finish check box.

If you do not select this check box, you will need to launch discovery later. For details, see Running Discovery.

2. Click Finish.