Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 349 / 1026

1.
Log into the GUI server.
2.
Change to the utility directory by typing: cd /usr/netscreen/GuiSvr/utils.
3.
Create a shell script with the following elements:
•
Set the NSMUSER environment variable with an NSM domain/user pair. The
command for setting environment variables depends on your OS.
Example: export NSMUSER=domain/user
•
Set the NSMPASSWD environment variable with an NSM password. The command
for setting environment variables depends on your OS and shell.
Example: export NSMPASSWD=password
• Specify a
guiSvrCli
command string.
Example: /usr/netscreen/GuiSvr/utils/guiSvrCli.sh --update-attacks --post-action
post_action_options
4.
Make the script executable. Make sure the person who will create the cron job has
permission to run the script.
5.
Run the crontab editor.
crontab -e
6.
Add an entry for the shell script
<minutes after hour> <hour> * * * path/attack_update_shell_script
During the update, the
guiSvrCli
utility updates its the attack object database, then
performs the post actions. After updating and executing actions, the system generates
an exit status code of 0 (no errors) or 1 (errors).
Example: Using Crontab to Schedule Attack Updates
In this example, you use crontab to update attack objects for online managed security
devices every day at 5:00 am. This example assumes you are running Linux, that you
have a domain called
idp , and that there is an NSM user called idpadmin .
1.
Log into the GUI server.
2.
Change to the utility directory by typing: cd /usr/netscreen/GuiSvr/utils.
3.
Create a shell script called attackupdates.sh with the following contents.
export NSMUSER=idp/idpadminexport
NSMPASSWD= idpadminpassword /usr/netscreen/GuiSvr/utils/guiSvrCli.sh
--update-attacks --post-action --update-devices --skip
4.
Make the script executable.
chmod 700 attackupdates.sh
5.
Run the crontab editor.
crontab -e
6.
Add the script to the crontab.
0 5 * * * /usr/netscreen/GuiSvr/utils/attackupdates.sh
299 Copyright © 2010, Juniper Networks, Inc.
Chapter 7: Managing Devices