Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 309 / 340

Table 86: Replica IF–MAP Server Configuration Details (continued)
Your Action Function Option
Enter a brief description for the replica or replica
network. Describes the replica or
replica network. Description
From the Type list, select Replica . Specifies whether the
configuration is for an
IF-MAP client or for a replica
IF-MAP server. Type
Enter the hostname of the replica’s device
certificate. The hostname is used when this
IF-MAP server initiates a connection to the
replica. The fully qualified domain name (FQDN)
of the replica's internal or external interface
should be used; for a cluster, the FQDN of the
internal or external VIP should be used. Specifies the hostname that
exactly matches the
replica’s device certificate. Hostname
Enter one or more IP addresses from which the
replica may initiate connections to this server. If
the replica is standalone, for survivability list both
the internal and external network interfaces. If
the replica is a cluster, for survivability list the
internal and external network interfaces of both
cluster nodes. Specifies the IP addresses
from which the replica may
initiate connections to this
server. IP Address(es)
Select the authentication method:
•
Basic —If you select Basic , enter a username
and password.
• Certificate —If you select Certificate , select
the certificate authority that issued the IF-MAP
replica’s certificate. Enter any restrictions, one
per line. If any restrictions match, for example
CN=ic.example.com, the certificate is
accepted.
Specifies the authentication
type. Authentication
Type
Related
Documentation
•
Configuring IF-MAP Session Import Policy on the Secure Access Device (NSM
Procedure) on page 288
•
Configuring IF-MAP Servers (NSM Procedure) on page 283
291 Copyright © 2010, Juniper Networks, Inc.
Chapter 20: Configuring IF-MAP Federation Settings