Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 148 / 1026

•
Adding Vsys Devices on page 147
• Adding an Extranet Device on page 151
• Adding Clusters on page 151
•
Adding Multiple Devices Using Automatic Discovery (Junos, SA, and IC Devices
) on page 168
• Adding Many Devices Using CSV Files on page 169
• Adding Device Groups on page 181
•
Setting Up NSM to Work With Infranet Controller and Infranet Enforcer on page 183
About Device Creation
Before NSM can manage devices, you must first add those devices to the management
system using the UI. To add a device, you create an object in the UI that represents the
physical device, and then create a connection between the UI object and the physical
device so that their information is linked. When you make a change to the UI device object,
you can push that information to the real device so the two remain synchronized. You
can add a single device at a time or add multiple devices all at once.
NOTE: The connection between a managed device and the NSM Device
Server must be at least 28.8 Kbps.
You can add the following types of devices:
• Physical devices— “Importing Devices” on page 112 and “Modeling Devices” on page 130
later in this chapter provide details on how to add an existing or new device into NSM.
These devices include:
•
ScreenOS/IDP Security devices—A security device or system (such as a
NetScreen-5GT device, an ISG device, or an IDP Sensor) manages firewall, VPN, or
IDP activities on your network.
Adding an IDP Sensor to NSM does not migrate existing settings. If you have existing
IDP Sensors that are managed by an IDP Management Server, you should migrate
those Sensors using the instructions in the
IDP-NetScreen Security Manager Migration
Guide .
•
Junos devices—routers, gateways, and switches that run Junos OS:
•
EX Series devices are Ethernet switches that can be added to your network and
managed through NSM.
• J Series devices—Highly secure routers that can be added to your network and
managed through NSM.
• SRX Series gateways—Firewall/VPN systems that have integrated service layer
technologies such as IDP, AV, or Web Filtering.
• M Series and MX Series routers—Carrier Ethernet routers and services routers.
Copyright © 2010, Juniper Networks, Inc. 98
Network and Security Manager Administration Guide