Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 231 / 1026

b. Update the device configuration by right-clicking the device and selecting Update
Device . The Job Information box displays the job type and status for the update;
when the job status displays successful completion, click Close .
After the update finishes, the device status displays as “Managed”, indicating that the
device has connected and the management system has successfully updated the
device configuration.
For more details on the Rapid Deployment, see “Using Rapid Deployment (ScreenOS
Only)” on page 139.
Activating Many Devices with Configlets
Before activating devices and creating a configlet, you must configure a modeled
configuration for the device in the NSM UI.
To create configlets and activate many devices:
1.
In Device Manager, select Devices .
2.
Click the Add icon and select Activate Many Devices . The Activate Device wizard
appears.
3.
Select the devices to activate.
4.
Specify the output directory for the
.cfg
file. For each modeled ScreenOS device
configuration, NSM creates a
.cfg
output file. By default, the
.cfg
file is saved to the
following GUI Server directory:
/usr/netscreen/GuiSvr/var/ManyDevicesOutput/<inputFile_YYYYMMDDHHMM>/
NOTE: For security, you cannot edit a configlet file directly. To make
changes to the information in any configlet file, run the Activate Many
Device wizard to regenerate the configlet.
5.
Send the
.cfg
file to the onsite administrator for the corresponding device. After the
onsite administrator installs the configlet on the physical security device, the device
automatically contacts the NSM Device Server, which establishes an always-on
management connection. For instructions for the onsite administrator, see “Installing
the Configlet” on page 143, or refer to the
Rapid Deployment Getting Started Guide .
6.
Click OK . A Job Manager window displays the progress of the activation. When finished,
click Close .
7.
Update the physical device with the modeled configuration.
Adding Device Groups
You can create groups of devices to manage multiple devices at one time. Use device
groups to organize your managed devices, making it easier for you to configure and
manage devices within a domain. You can group devices by type (such as all the
NetScreen-5GTs in a domain), by physical location (such as all the security devices in
181 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices