Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 703 / 1026

NOTE: If you delete an IC or EP device, all related IC-EP associations are
removed from the UAC Manager, and the configuration in the device is not
modified. Therefore, first remove IC-EP and 802.1X port associations from
the UAC Manager before you delete an IC or EP. This ensures that
configuration changes take effect in the device.
Disassociating Enforcement Points from an Infranet Controller in the UAC Manager
To disassociate Enforcement Points (EP) from a selected Infranet Controller (IC):
1.
Select from the EP table the EPs to disassociate from the IC.
2.
Select the Delete button (-) above the Enforcement Points table.
3.
Select the check box to run an Update Device task, which pushes configuration changes
on both the IC and EPs. The configuration status of the EPs changes to Managed,
InSync.
4.
Select the check box to run a Summarize Delta Config task that ensures the association
between the IC and EP in the application database. The configuration status of these
devices becomes Managed, NSM Changed.
5.
Select OK. The selected EPs are removed from the IC.
Resolving Configuration Conflicts with the Infranet Controller in the UAC Manager
Before you resolve configuration conflicts, perform an "Import Device" to identify the
actual conflicts in the configuration. To ensure that configurations made in the Infranet
Controller (IC) device are reflected in the UAC Manager:
1.
Select an IC and right-click on it
2.
Select
Resolve Config Mismatch
from the dropdown menu. The Resolve Config
Mismatch window opens displaying differences between the RADIUS client
configuration in the IC and the administered data in the UAC Manager.
3.
Verify whether data currently administered in NSM by the UAC Manager is consistent
with data in the RADIUS client device configuration.
4.
Provide shared secret and IC port details. You cannot update information without this
information.
5.
Select the action to be performed:
• Select Update UAC Manager to update the UAC Manager data with the data from
the IC.
•
Select
Update the Enforcement Point Association in the Infranet Controller
to update
the data in the IC with data from the UAC Manager.
6.
Select the check box to overwrite the shared secret in the device.
653 Copyright © 2010, Juniper Networks, Inc.
Chapter 16: Unified Access Control Manager