Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 218 / 1026

In the security device tree, the Paris Cluster (and cluster members) and Paris vsys cluster
(and cluster member) appear as shown in Figure 39 on page 168.
Figure 39: Paris Cluster Members and Paris Vsys Cluster Members
Adding Multiple Devices Using Automatic Discovery (Junos, SA, and IC Devices )
You can use automatic discovery to add and import multiple Junos, SA, and IC devices
into NSM. You do so by configuring and running discovery rules. For a Junos, SA, or IC
device to be discovered by this mechanism, it must be configured with a static IP address.
By configuring and running a discovery rule, you can search a network to discover devices
in a specified subnet or within a range of IP addresses. Authentication of the devices is
through administrator login SSH v2 credentials and SNMP community settings, which
you also configure as part of the rule. Devices that match the rules for discovery also
present an SSH key for your verification before the device is added to NSM.
Adding a Device Discovery Rule
To add a device discovery rule:
1.
In the Configure pane of the NSM navigation tree, click Device Discovery Rules .
Any existing discovery rules appear in the main display area.
2.
Click the Add icon to display the New Device Discovery Rule dialog box.
3.
Give the rule a name and provide the following search criteria for the devices:
•
A prefix for device names—for example, “USA”. The prefix is used to assign names
to the devices when they are added into NSM. For example, when a device at IP
address
10.204.32.155 is added to NSM, its name will be USA_10.204.32.155 .
Check the Use Host Name if Available checkbox, if you want the device hostname
to be used as the prefix.
•
An IP subnet or range of IP addresses.
Copyright © 2010, Juniper Networks, Inc. 168
Network and Security Manager Administration Guide