Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 372 / 1026

•
Configuring Group Expressions on page 410
• Configuring Remote Settings on page 413
• Configuring Routing Instance Objects on page 413
•
Configuring NAT Objects on page 414
•
Configuring Certificate Authorities on page 422
• Configuring CRL Objects on page 424
• Configuring Extranet Policies on page 425
•
Configuring Binary Data Objects on page 426
•
Configuring Protected Resources on page 427
• Configuring IKE Proposals on page 428
• Configuring Dial-in Objects on page 431
•
Configuring Border Signaling Gateway Objects on page 432
About Objects
In the NSM UI, most objects appear in the Object Manager; VPN-related objects appear
in the VPN Manager. For some object types, such as service objects, attack objects, and
IKE proposal objects, predefined objects exist. For most object types, however, you must
configure an object before you can use it in your device configuration or security policies.
NOTE: If you import an existing device configuration, NSM automatically
imports all objects defined in that configuration.
The Object Manager displays objects created in the current domain only. When you work
in the global domain, all custom objects are viewable. When you work in a subdomain,
only custom objects created in the subdomains are viewable. However, when creating
an object group, you can select objects from both the current subdomain and global
domain. Any global object that is part of a subdomain object group appears within the
subdomain object list.
Use the Object Manager to view and configure the following objects:
•
Host and network addresses:
•
Address objects represent individual hosts or subnetworks in your network.
• NAT objects (DIP, MIP, VIP) represent references to device-specific NAT
configurations (dynamic IPs, mapped IPs, and virtual IPs), enabling multiple devices
to share a single object.
• IP Pools define ranges of IP addresses used to assign an IP address to a RAS user.
• Remote Settings represent DNS and WINS servers.
•
Services and schedules:
Copyright © 2010, Juniper Networks, Inc. 322
Network and Security Manager Administration Guide