Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 248 / 1026

To edit the configuration of a Junos device, you can edit the device object configuration
itself, create and apply a template, or use configuration groups.
For more information about configuration groups, see “Using Configuration Groups” on
page 223.
To edit Junos device configuration data in NSM, double-click the device in the Device
Manager and select the
Configuration tab. The configuration tree appears in the main
display area with all parameters viewable or configurable from NSM.
Updating the Configuration on the Device
The primary difference between editing the configuration in NSM and editing the
configuration as described in the Secure Access, Infranet Controller, or Junos device
documentation is that edits described in those documents apply changes directly to the
device. Edits done in NSM apply to the device object in NSM, which is not pushed to the
device until you perform an Update Device directive.
To perform an update device operation, right-click the device in the Device Manager, and
then select
Update Device from the list.
Using Device Templates
Use templates to define a common device configuration and then reuse that configuration
information across multiple devices. In a template, you need define only those
configuration parameters that you want to set; you do not need to specify a complete
device configuration. Templates provide these benefits:
•
You can configure parameter values for a device by referring to one or more templates
when configuring the device.
• When you change a parameter value in a template and save the template, the value
also changes for all device configurations that refer to that template, unless specifically
overridden in the device object.
When you apply a template to a device, NSM applies the template settings to the device.
For example, you can create a template that specifies the IP address of the NTP server
to which all managed security devices synchronize their clocks. You can apply this
template to the configuration of each device in your subdomain (or all devices if defined
in the global domain) so that all devices use the same NTP server.
A template contains all possible fields for all possible devices within a device family.
NSM provides different templates for:
•
ScreenOS/IDP devices
•
Secure Access devices
• Infranet controller devices
• J Series devices (includes SRX Series devices)
•
M Series and MX Series devices
•
EX Series devices
Copyright © 2010, Juniper Networks, Inc. 198
Network and Security Manager Administration Guide