Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 153 / 1016

Domain selection is critical when using VPNs. You can create VPNs only between devices
within the same domain. If you need to add a device to a VPN in a different domain, add
the device as an extranet device in the domain that contains the VPN, and then add the
extranet device to the VPN (as shown in Figure 24 on page 103).
Figure 24: Connecting Devices from Different Domains in VPNs
Adding Single or Multiple Devices
Determine whether you want to add devices to NSM individually or add many devices
all at one time. The adding process for a single device is different than the process for
adding multiple devices.
When adding a single security device, use the Add Device wizard to create the device
object in NSM. To activate a modeled device or create a configlet, use the Activate Device
wizard. You can import or model device configurations from a device running ScreenOS
5.0.x or later (except 6.0r1), IDP 4.0 or later, Junos 9.0 or later, SA 6.2 or later, or IC 2.2
or later.
When adding many devices, you first create a .csv file that defines all required and optional
parameters for each device, and then use the Add Many Devices wizard to create a device
object for each device in NSM. To activate modeled devices or create configlets for each
device, use the Activate Many Devices wizard.
You can use the Add Many Devices wizard for the following tasks:
• Import many ScreenOS, Junos, Secure Access, or Infranet Controller devices at one
time.
•
Model many ScreenOS devices at one time.
•
Model, create configlets for, and activate multiple ScreenOS devices at one time for
use with Rapid Deployment.
NOTE: You cannot use the Add Many Devices wizard to add multiple IDP devices.
103 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices