Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 230 / 1026

Using Rapid Deployment
You can model devices, generate configlets, and activate many ScreenOS devices at
one time. Alternatively, you can model multiple devices initially, and then generate
configlets and activate them later. The devices must be running ScreenOS 5.x or later
and support configlets; NetScreen systems (NetScreen-500, 5000 line, ISG1000, and
ISG2000) do not support configlets.
Modeling and Activating Many Devices with Configlets
To model, create configlets, and activate at the same time:
1.
From the domain menu, select the domain in which to import the device.
2.
In Device Manager, select Devices .
3.
Click the Add icon and select Many Devices . The Add Device wizard appears.
• Select Model Device .
• Specify the location of the CSV file.
• Select Activate and Create Configlet now (ns208 and below).
•
Specify the output directory for the
.cfg
file. For each modeled ScreenOS device
configuration, NSM creates a
.cfg
output file. By default, the
.cfg
file is saved to the
following GUI Server directory:
/usr/netscreen/GuiSvr/var/ManyDevicesOutput/<inputFile_YYYYMMDDHHMM>/
4.
Click Next . The Add Device wizard validates the CSV file and provides a Validation
Report:
• Select Cancel to quit the Add Many Devices process.
• Select Add Valid Devices to begin adding the devices for which you have provided
valid device configurations.
The Add Device wizard adds the valid devices to the NSM UI.
5.
Send the
.cfg
file to the onsite administrator for the corresponding device. After the
onsite administrator installs the configlet on the physical security device, the device
automatically contacts the NSM Device Server, which establishes an always-on
management connection. For instructions for the onsite administrator, see “Installing
the Configlet” on page 143, or refer to the
Rapid Deployment Getting Started Guide .
6.
Model the device configurations as desired.
7.
Install the modeled configuration. After the onsite administrator has installed the
configlets and the devices have successfully connected to NSM, you can install the
modeled device configurations on the physical devices:
a. Ensure that the device is connected by viewing the device status. Hold your mouse
cursor over the device in Device Manager, or check the configuration status in Device
Monitor. Ensure that the configuration status for the device displays “Update
Needed”, which indicates that the device has connected but the management
system has not yet updated the device configuration.
Copyright © 2010, Juniper Networks, Inc. 180
Network and Security Manager Administration Guide