Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 234 / 1026

c.
Import the CA certificate into the Infranet Enforcer.
For details about setting up the certificates, see the Unified Access Control
Administration Guide .
3.
On each Infranet Enforcer, create the Infranet Controller instance:
a.
On the Infranet Enforcer, select Configuration > Infranet Auth > Controllers .
b.
Click New .
c.
Enter the parameters as prompted.
The password in the second section must be the NACN password you entered in
step 1.
d.
Click OK .
e.
Repeat steps a through d for all of the infranet enforcers.
f.
On the Infranet Controller, select UAC -> Infranet Enforcer -> Connection and
check that all the Infranet Enforcers have been added.
4.
On NSM, delete the Infranet Enforcer firewalls from the global domain:
a.
In the global domain, select Device Manager > Devices to list all the devices.
b.
Right-click each Infranet Enforcer firewall device in turn and select Delete from
the list.
5.
On NSM, delete the $infranet instances from the Object Manager:
a.
Select Object Manager > Authentication Servers .
b.
Right-click each $infranet_n object and select Delete from the list.
c.
Select VPN Manager > VPNs , and check that you do not have any $infra under
VPN Manager. These objects are usually deleted automatically when you remove
the firewall.
6.
Create a new subdomain for the Infranet Enforcers:
a.
Select Tools > Manage Administrators and Domains .
b.
Select the Subdomains tab.
c.
Click the Add icon.
d.
In the New Subdomain dialog box, enter an appropriate name for the subdomain
so you know what it will be used for, and then click
OK .
e.
From the drop-down list on the top left side, select your new domain.
The new domain is empty.
Copyright © 2010, Juniper Networks, Inc. 184
Network and Security Manager Administration Guide