Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 11

Part 4
Chapter 16
Chapter 17
Chapter 18
Chapter 19
Part 5
Chapter 20
Chapter 21
Part 6
Copyright © 2010, Juniper Networks, Inc.
Managing an Infranet Controller
Unified Access Control Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
UAC Manager in NSM Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Associating Enforcement Points with an Infranet Controller Using the UAC
Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Disassociating the Configuration Between an Enforcement Point and an Infranet
Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Enabling Dot1x Ports on the Enforcement Points Using the UAC Manager . . . . . 184
Disabling the Dot1x Ports on an Enforcement Point Using the UAC Manager . . . 185
Using System Management Features in an Infranet Controller . . . . . . . . . 187
Managing Large Binary Data Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
Configuring Infranet Controller System Options (NSM Procedure) . . . . . . . . . . . 188
Removing an Infranet Controller from NSM Management (NSM Procedure) . . . 190
Deactivating a DMI Agent in an Infranet Controller (NSM Procedure) . . . . . . . . . 190
Configuring the Infranet Controller to Interoperate with IDP . . . . . . . . . . . 193
Configuring ISG-IDP as a Sensor on the Infranet Controller (NSM Procedure) . . 193
Configuring Infranet Controller Sensor Settings for Connecting to a Standalone
IDP Device (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Creating an IDP Device Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Enabling or Disabling the Connection to an Existing IDP Device . . . . . . . . . . 195
Configuring Sensor Event Policies (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . 196
Creating a Custom Expression for Sensor Settings (NSM Procedure) . . . . . . . . . 198
Troubleshooting an Infranet Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Troubleshooting the IF-MAP Federation Network (NSM Procedure) . . . . . . . . . . 201
Monitoring and Configuring Logs in an Infranet Controller
Monitoring an Infranet Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Realtime Monitor Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Viewing Device Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Viewing Device Monitor Alarm Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
Configuring Logs in an Infranet Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211
Configuring RADIUS Attribute Logs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . 211
Configuring Event Logs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212
Configuring User Access Logs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . 213
Configuring Administrator Access Logs (NSM Procedure) . . . . . . . . . . . . . . . . . . 214
Configuring Client-Side Logs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . 216
Configuring the Infranet Controller as an SNMP Agent (NSM Procedure) . . . . . . 216
Configuring Custom Log Filters (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . 218
Index
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223
Table of Contents
xi