Network and Security Manager 2010.4 Release Notes
Important SSL VPN and Infranet Controller Instructions
NSM Server
4
This section contains setup instructions and template usage guidelines for SSL VPN SA
(SA) and Infranet Controller (IC) devices.
There is no limit to the number of devices that can be simultaneously updated in NSM,
provided the configuration size on each device being updated is less than 5 MB. NSM
can execute updates in parallel across a maximum of eight devices while the remaining
update jobs are queued up.
If the software version of SA/IC configurations exceeds 5 MB, we recommend a
maximum of four devices per job for an appropriately sized Linux or Solaris server
running NSM.
Due to hardware limitations on NSMXpress, the recommended limit is two devices per
job for SA/ICs running configurations more than 5 MB.
The following files on the NSM software server must be edited as described below (no
changes are needed for NSMXpress):
In
/usr/netscreen/GuiSvr/bin/.guiSvrDirectiveHandler
to Xmx2048000000:
$LIB_DIR/jre/bin/java -DNSROOT=$NSROOT
-DgproGDM=$DEST_DIR -DNSDIR=$DEST_DIR/var/be
-DSTART_PATH=$DEST_DIR -DBE_CFG=${CFG_FILE}
-DLOG4J_CFG=${LOG4J_CFG_FILE} -XX:PermSize=64M
-XX:MaxPermSize=64M -Xms128000000 - Xmx2048000000
com.netscreen.devicecomm.GUIDirectiveManager -version -repo ${REPO_DEST_DIR}
-conf ${SVC_CFG_FILE}
In
/usr/netscreen/GuiSvr/var/xdb/data/DB_CONFIG
parameter from
0 256000000 1
Set the shared memory to a minimum of 1 GB (kernel.shmmax = 1073741824):
In
/etc/sysctl.conf,
for Linux systems
In
for Solarix systems
/etc/system,
In
/usr/netscreen/GuiSvr/var/xdb/specs/jax.spec
:jvm-options (
: ("-DEMBEDDED_JVM=true")
: ("-Xms128m")
: ("-Xmx1024m")
In
/usr/netscreen/DevSvr/bin/.devSvrDirectiveHandler
to Xmx2048000000:
$LIB_DIR/jre/bin/java -DNSROOT=$NSROOT -DgproDDM=$DEST_DIR
-DNSDIR=$DEST_DIR/var/be -DSTART_PATH=$DEST_DIR
, change Xmx10248000000
, change the set_cachesize
to 0 1024000000 4.
, change Xmx512 to Xmx1024m:
, change Xmx1024000000
Copyright © 2010, Juniper Networks, Inc.
Need help?
Do you have a question about the NETWORK AND SECURITY MANAGER - RELEASE NOTES REV 1 and is the answer not in the manual?
Questions and answers