Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 163 / 1026

NOTE: IDP rulebases cannot be imported.
In some cases, you may need to configure NACN or other features on the physical device
to enable the device to connect to NSM.
For details about adding multiple devices at one time, see “Adding Many Devices Using
CSV Files” on page 169.
Requirements
To import a single device:
• The physical device must have Telnet or SSH enabled.
• You must have the device connection information (IP address, connection method)
and device administrator name and password available. For standalone IDP Sensors,
you must also have the root password.
NOTE: All passwords handled by NSM are case-sensitive.
•
The device must be staged ; that is, it must be physically connected to your network
with access to network resources.
• The device must have at least one interface that has an IP address. Devices that use
a dynamically assigned IP address must also support NACN.
•
The device must be operating in the desired port mode. You cannot change the
operational mode after importing the device into NSM. Port modes apply only to some
ScreenOS devices.
Adding and Importing Devices with Static IP Addresses
A static IP address is an IP address that does not change. Not all device families support
static IP addresses. The following device families do:
• ScreenOS Devices on page 113
•
IDP Sensors on page 115
•
Junos Devices on page 116
• SA and IC Devices on page 117
ScreenOS Devices
ScreenOS devices must be running ScreenOS 5.0 or later release to be imported into
NSM 2008.1 or later release.
To import a ScreenOS 5.0 or later device with a known IP address:
1.
From the domain menu, select the domain in which to import the device.
2.
In Device Manager, select Devices .
113 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices