Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 635 / 1026

You cannot edit the device tunnels from this view; to make overrides to the VPN tunnels,
edit the interface configuration for each device.
Adding the VPN Link
After you have reviewed the autogenerated information and made any desired overrides
to the VPN, you must update your managed devices to activate the VPN. By default, the
VPN you created in VPN manager is installed as the first rule in the security policy for
each managed device. However, the security policy does not display the VPN.
You can manually add a VPN link to your security policy; a VPN link creates a link between
the security policy and VPN (the link points to the VPN rules that exist in the VPN in VPN
Manager). You might want to add a VPN link so you can reposition it elsewhere in the
policy, or to make the VPN viewable in your policy.
To create a VPN link, in security policies, select an existing security policy (or create a
new security policy), then right-click and select
Add VPN link. Select the VPN name and
click OK to add the link to the policy. By default, the link appears at the top of the policy,
but you can move the VPN link anywhere in the policy, just as you would a firewall rule.
If you make changes to the VPN or create overrides, the VPN link automatically updates
to reflect those edits.
Editing VPNs
To edit a VPN created with VPN Manager:
1.
In the navigation tree, select VPNs. A table listing all configured VPNs appears in the
main display area.
2.
Right-click the VPN you want to edit and select Edit . The expanded VPN view dialog
box appears.
3.
Make the necessary changes, then click OK to apply your changes.
To revert any changes you have made to the VPN, right-click the VPN name in the
navigation tree and select
Revert Changes .
Editing VPN Protected Resources
To edit a protected resource in the VPN, right-click the protected resource and select
Edit Protected Resource . Make your changes, then click OK to save your changes.
If you make changes to a protected resource object that is used in a VPN, NSM
automatically generates new configuration and propagates your changes to all affected
security devices. If you change the security device that protects a resource, NSM removes
the previous security device from all affected VPNs and adds the new security device.
However, NSM does not configure the VPN topology for the new security device—you
must reconfigure the topology to include the new device manually.
Editing Users
To edit a user object in the VPN, right-click the user and select Edit Remote User . Make
your changes, then click OK to save your changes.
585 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring VPNs