Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 189 / 1016

RD typically involves two people: The NSM administrator, who creates the necessary
device configuration for the new firewall devices in the NSM UI, and the onsite
administrator, who enables the firewall device to contact NSM for configuration.
The NSM administrator performs the following tasks in the NSM UI:
1.
Adds a device to the UI.
2.
Creates a device configuration with specific or template-driven values.
3.
Enters the basic information that defines how a security device can contact your
NSM Device Server.
4.
Generates a small, static command file called a configlet .
5.
Saves the configlet in a user-defined directory, using email, CD, or another
out-of-band method.
6.
Sends the configlet file to the onsite administrator, who installs the configlet on the
security device at its physical location.
7.
After the onsite administrator installs the configlet and the device has successfully
connected to the management system, the NSM administrator installs the modeled
device configuration on the physical device.
The onsite administrator works locally, at the physical device and performs the following
tasks:
1.
Installs the configlet on a locally connected device.
2.
Runs the Rapid Deployment Wizard.
The RD wizard uses the information in the configlet to establish and authenticate a
secure connection to the NSM Device Server, enabling NSM to begin managing the
device.
NOTE: You cannot activate devices in transparent mode using a configlet.
After the security device has connected to NSM, the NSM administrator can manage the
device exactly like any other security device in NSM.
NOTE: If you delete the security device from the NSM system and then add the device
again, you must also re-create the configlet and install it on the physical device.
To use rapid deployment:
• The device must be running ScreenOS 5.x or later release.
• The device must use default factory settings.
139 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices