Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 215 / 1026

% commit
The device software initiates the TCP connection to NSM and identifies itself using
the specified device ID and HMAC. The two sides then engage in SSH transport
layer interactions to set up an encrypted tunnel, and NSM authenticates itself to
the device based on user name and password.
d.
In the Device List, verify the connection status of the cluster member. The status
changes from “Never connected” to “Up.”
•
If the configuration status is “platform mismatch,” you selected the wrong device
platform when adding the device into NSM. Delete the device from NSM and
add it again using the correct device platform.
•
If the configuration status shows “device firmware mismatch,” you selected the
wrong managed OS version when adding the device into NSM. Delete the device
from NSM and add it again using the correct managed OS version.
e.
Check the device configuration status by holding your mouse cursor over the device
in Device Manager, or by checking the configuration status in Device Monitor. When
the device connects, the status displays “Update Needed”, indicating that the
device has connected but the management system has not yet pushed the device
configuration.
5.
Repeat Step 4 for the second cluster member J-2.
Updating the Cluster
After you have modeled the cluster configuration, you can push the new configuration
to the physical cluster using the Update Device directive.
1.
In the NSM navigation tree, select Device Manager > Devices.
2.
Right-click J-Cluster (the cluster icon) and select Update Device from the list.
NSM starts a job that pushes the modeled configuration to the device. A job window
reports the progress. On completion, the configuration status changes from “Update
Needed” to “Managed”.
Adding a Vsys Cluster and Vsys Cluster Members
A vsys cluster is a vsys device that has a cluster as its root device. Adding a vsys cluster
is a three-stage process:
1.
Add a vsys device that uses the cluster device as root. For details on adding a vsys
device, see “Adding Vsys Devices” on page 147.
2.
Add cluster members to the cluster device, using the instructions in the wizard to
import or add a new cluster member. A vsys cluster can have only two members.
3.
Add a cluster device object. For details on adding a cluster, see “Adding Clusters” on
page 151. (You add members later.)
The UI also creates a vsys cluster member for each vsys device that uses the cluster
as its root device. The vsys cluster member contains local information; the cluster
165 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices