Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 276 / 1026

NOTE: After saving a configuration group, you cannot change its name.
Editing a Configuration Group
You can edit configuration groups before or after applying them. If you edit the group
after applying it, then the new edits take effect immediately in the device object.
When you create or edit a configuration group, values specified for the configuration
group are marked with icons and tooltips similar to those used to highlight template
values. Move your mouse cursor over a tooltip icon to gather information about the entity
it describes. Right-click the item and select
Revert to template/default value to undo
the effect of setting the value in the configuration group.
You cannot create groups that start with “junos.”
Validating a Configuration Group
Validation within the configuration group does not apply required field constraints (similar
to when editing a template), but the operating system version and platform are available,
so more validation is done for configuration groups in devices than for templates.
Ordered Lists and Wildcard Matching
In configuration groups, the order of list entries is significant. All lists in configuration
groups are displayed in the order in which they are defined. To change the order of the
list, you must do so explicitly by using the up and down arrows at the top of the main
display area.
The order of lists is significant because configuration group wildcard matching is done
starting from the first configuration group entry and stopping after the first match. Consider
a configuration group containing the following list of interface definitions, specified in
the order shown. For each list item, the first entry is the interface name, and the second
an assigned value for MTU:
<ge-0/0/0> mtu 4kge-*> mtu 5k
<*> mtu 8k
When you apply this configuration group to a device object that already has
ge-0/0/0
and
ge-0/0/1
interfaces configured in it, but with no defined value for MTU, then the first
match for
ge-0/0/0
is the
ge-0/0/0
entry in the configuration group, so the effective
MTU is 4k. The first match for the
ge-0/0/1
entry is the
<ge-*>
entry in the configuration
group, so the effective MTU is 5k.
Applying a Configuration Group
You can apply a configuration group at any level in the configuration tree. A triangle next
to a branch represents a point at which a configuration group can be applied. By selecting
that branch and applying a configuration group to it, all parameters set under that branch
in the configuration group are applied to the device object configuration,
The following example applies the configuration group defined in “Creating a Configuration
Group” on page 224 to the device object configuration.
Copyright © 2010, Juniper Networks, Inc. 226
Network and Security Manager Administration Guide