Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 303 / 1026

Using preview tools, you can preview how the modeled configuration looks in CLI
command form or XML message form to predict the success of the update and anticipate
errors. NSM supports these types of preview tools:
• Configuration Summary—Displays the modeled configuration using ScreenOS CLI
commands, or XML for DMI-compatible devices.
•
Delta Configuration Summary—Displays the modeled configuration and running
configuration in CLI command form or XML script form, and lists the differences between
the two configurations.
• Running Configuration—Displays the configuration installed on the physical device.
The configuration and delta configuration summaries help you ensure that the modeled
configuration is correct before you update your managed devices, while the running
configuration helps you identify settings already on the managed device.
Running a Configuration Summary
When you update a managed device using NSM, the management system generates CLI
commands or XML script that map to the settings in the NSM UI. To verify that the
configuration you are installing on the device generates the correct commands, run a
configuration summary.
1.
From the launchpad, select Devices Config Options > Summarize Config . The
launchpad displays the Summarize Config dialog box.
2.
Select the devices or device groups for which you want to run a configuration summary
and click
OK . A Job Information window displays the progress of the summary.
3.
When the job completes, review the CLI commands or XML script in the Job Information
window. When you update the device, these are the commands that NSM uses to
overwrite the running configuration.
For some settings, the CLI commands for a UI settings do not map one-to-one. For
example, a single vsys configuration in the NSM UI generates multiple ScreenOS
commands.
Because the management system generates all information (UI settings, XML, and CLI
commands) for a configuration summary, you can run a configuration summary on a
modeled device, even if no corresponding physical device is connected.
Using a Delta Configuration Summary
A delta configuration summary compares the active configuration on the ScreenOS or
DMI-compatible device with the modeled configuration in NSM and displays the
differences between the two configurations. The delta configuration summary produces
four sets of data. See Table 28 on page 254.
253 Copyright © 2010, Juniper Networks, Inc.
Chapter 6: Updating Devices