Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 174 / 1026

Configure and Activate the NSM Agent on the Secure Access or Infranet Controller Device
Configure and activate the NSM agent on the Secure Access or Infranet Controller device
to establish SSH communications with NSM. On successful execution of these steps,
you can control the device from NSM,
1.
Open the System > Configuration > NSM Agent screen to add the NSM management
application.
2.
In the Primary Server field, enter the IP address of the Device Server.
3.
In the Primary Port field, enter 7804 .
4.
Fill out the Backup Server and Backup Port fields if a high availability Device Server is
configured.
5.
In the Device ID field, enter the unique external ID provided by the NSM administrator.
6.
In the HMAC field, enter the one-time password, also provided by the NSM
administrator.
7.
Click the Enable button to enable the NSM agent.
8.
Click Save Changes , and the device attempts to establish a session with NSM.
The device software initiates the TCP connection to NSM and identifies itself using
the specified device ID and HMAC. The two sides then engage in SSH transport layer
interactions to set up an encrypted tunnel. NSM authenticates itself to the device
based on user name and password.
Confirm Connectivity and Import the Device Configuration into NSM
In NSM, validate connectivity with the device, and then import the device configuration:
1.
In the Device List, check the connection status of the newly added device. The status
changes from “Never connected” to “Up.”
•
If the configuration status is “platform mismatch,” you selected the wrong device
platform when adding the device into NSM. Delete the device from NSM and add
it again using the correct device platform.
• If the configuration status shows “device firmware mismatch,” you selected the
wrong managed OS version when adding the device into NSM. Delete the device
from NSM and add it again using the correct managed OS version.
2.
Import the device configuration:
a.
Right-click the device in the Device Manager and select Import Device from the
list.
b.
In the Device Import Options dialog, check Summarize Delta Config if desired.
Click OK , and then click Yes .
The Job Information window shows progress. You can also monitor progress in Job
Manager.
Copyright © 2010, Juniper Networks, Inc. 124
Network and Security Manager Administration Guide