Table of ContentsLibraryView in Frames

NDMP

Network Data Management Protocol (NDMP) runs on TCP port 10000 and is used primarily for backup of network-attached storage (NAS) devices, such as your storage systems.

The protocol defines three authentication methods:

  • NONE--allows authentication without restriction
  • TEXT--sends a clear text password over the network, similar to Telnet or FTP
  • MD5--uses the MD5 message digest algorithm along with a challenge-response message exchange to implement a secure login mechanism

Your storage systems support both the TEXT and MD5 authentication methods. Most NDMP-enabled backup software uses MD5 by default.

To entirely disable the TEXT authentication method, set the ndmpd.authtype option to challenge.

To restrict NDMP commands to certain authorized backup hosts, use the ndmp.access option.

Regardless of the authentication method used, NDMP sends backup data in unencrypted format over the network, as does most other backup software. A separate network optimized for backup is a common means to increase performance while retaining data security.

To disable NDMP, set the ndmp.enable option to off.