Data Online Migration:Prepare for data migration

Usage notes

• If the source and destination NAS file systems belong to different Alibaba Cloud accounts, we recommend that you log on to the Data Transport console by using the account that owns the source NAS file system.

• If the source or destination NAS file system is an Apsara File Storage NAS file system, a permission group named VPC default permission group (all allowed) must be attached to the mount target of the NAS file system. Otherwise, data migration fails.

Preparations for NAS file systems that do not reside in VPCs

If the source and destination NAS file systems do not reside in Alibaba Cloud VPCs, mount the two file systems to a VPC. This way, the two file systems can be accessed from the same VPC.

• Apsara File Storage NAS

  • Mount the source and destination NAS file systems to a VPC. For more information, see Usage notes.

  • If you have configured permission groups for the source and destination NAS file systems, you must configure the NAS file systems to allow access from all IP addresses in the VPC. For more information, see Manage a permission group.

• Third-party NAS file systems

  Note

  A third-party NAS file system can be used only as a source NAS file system. It cannot be used as a destination NAS file system.

  • You can use one of the following methods to mount the source and destination NAS file systems to a VPC:

    • Mount the NAS file systems to the VPC by using Express Connect circuits. For more information, contact Alibaba Cloud technical support.

    • Mount the NAS file systems to the VPC over VPN networks.

  • If you have configured permission groups for the source and destination NAS file systems, you must configure the NAS file systems to allow access from all IP addresses in the VPC.

Preparations for NAS file systems that reside in the same VPC

If the source and destination NAS file systems already reside in the same VPC, the source NAS file system is connected to the destination NAS file system. If you have configured permission groups for the source and destination NAS file systems, you must configure the NAS file systems to allow access from all IP addresses in the VPC.

Preparations for NAS file systems that reside in different VPCs

• If two NAS file systems reside in different VPCs, you must connect these VPCs by using Cloud Enterprise Network (CEN).

  • If the source and destination NAS file systems reside in different VPCs that belong to the same account and region, you can use CEN to connect these VPCs. For more information, see Use Basic Edition transit routers to connect VPCs in the same region.

  • If the source and destination NAS file systems reside in different VPCs that belong to the same account but different regions, you can use CEN to connect these VPCs. For more information, see Use Basic Edition transit routers to connect VPCs across regions.

  • If the source and destination NAS file systems reside in different VPCs that belong to the same region but different accounts, you can use CEN to connect these VPCs. For more information, see Use Basic Edition transit routers to connect VPCs across regions.

  • If the source and destination NAS file systems reside in different VPCs that belong to different accounts and regions, you can use CEN to connect these VPCs. For more information, see Use Basic Edition transit routers to connect VPCs across regions.

  Note

  The CEN bandwidth may affect your data migration efficiency. We recommend that you determine the required bandwidth based on the actual amount of data that you want to migrate and the expected migration duration. The CEN bandwidth must be at least 10 Mbit/s.

• If you have configured permission groups for the source and destination NAS file systems, you must configure the NAS file systems to allow access from all IP addresses in the VPCs.

Create a RAM user and grant required permissions to the RAM user

1. Log on to the Resource Access Management (RAM) console.

2. In the left-side navigation pane, choose Identities > Users.

3. On the Users page, click Create User.

4. In the User Account Information section of the Create User page, configure the Logon Name and Display Name parameters.

5. In the Access Mode section, select Console Access and OpenAPI Access. Then, save the generated logon name, password, AccessKey ID, and AccessKey secret.

   • Console Access: If you select this option, you must configure the console password, password reset settings, and multi-factor authentication (MFA) settings.

   • OpenAPI Access: If you select this option, an AccessKey pair is automatically created for the RAM user. The RAM user can call API operations or use other development tools to access Alibaba Cloud resources.

6. After the RAM user is created, return to the Users page. Find the RAM user and click Add Permissions in the Actions column. In the panel that appears, select the AliyunNASFullAccess and AliyunMGWFullAccess policies and click OK. This way, the RAM user is granted the permissions to read and write files from Apsara File Storage NAS and migrate data online.

7. In the left-side navigation pane, click Overview.

8. On the page that appears, navigate to the Account Info section and click the link next to Login URL. On the page that appears, enter the logon name and password of the RAM user to log on to the Alibaba Cloud Management Console.