Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 296 / 1026

system; the contents of this message, which include any CLI errors in the failed
configuration, appear in the Job Manager status window for this upgrade.
•
If the device connection to the management system is down after all commands
have been executed, the update timer expires and the device automatically resets.
The device unlocks the active configuration and restores the saved active
configuration (the device reboots). The connection might be down due to a
command in the modeled configuration that causes the device to lose connection
with the NSM Device Server.
NOTE: When updating vsys devices, atomic configuration occurs only for
the root vsys.
About Atomic Updating—ScreenOS Devices
In addition to atomic configuration, devices running ScreenOS 5.1 and later also support
atomic updating , which enables the device to receive the entire modeled configuration
(all commands) before executing those commands (instead of executing commands
as they are received from the management system). Because NSM sends all commands
at one time, the performance of the management connection is enhanced.
Atomic updating also enables the device to temporarily lose connection to NSM during
the update process. If the management connection is down when the device has finished
executing the commands in the modeled configuration, the device reestablishes the
connection. Because the device no longer needs to maintain a constant connection to
the management system during updating, you can configure changes to the management
connection from the NSM UI.
During an atomic update:
1.
NSM saves and locks the active configuration on the device, and then starts a timer
for the update process. The timer expires after 40 minutes. While the active
configuration is locked, it cannot be changed.
2.
NSM sends the modeled configuration to the device.
3.
The device receives all commands before executing the commands on the active
configuration. During the update, the device sends progress messages to the
management system every 15 seconds; these messages appear in the Job Manager
status window for the update.
During the update, the Job Manager status window displays other messages, depending
on the success of the update:
Copyright © 2010, Juniper Networks, Inc. 246
Network and Security Manager Administration Guide