Configuring An Infranet Controller To Connect To A Screenos Enforcer - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Related
Documentation
Configuring an Infranet Controller to Connect to a ScreenOS Enforcer (NSM Procedure)
Copyright © 2010, Juniper Networks, Inc.
Table 31: Source Interface Policy Configuration Details (continued)
Option
Applies to roles
Configuring Infranet Controller Source IP Access Restrictions (NSM Procedure) on
page 61
Configuring Infranet Controller Host Enforcer Policies (NSM Procedure) on page 105
The ScreenOS Enforcer connects to the Infranet Controller over an SSH connection that
uses the NetScreen Address Change Notification (NACN) protocol.
The Infranet Controller uses the NACN password and serial number for a connection
from the ScreenOS Enforcer. When the ScreenOS Enforcer first turns on, it sends an
NACN message containing the NACN password and serial number to the Infranet
Controller. The Infranet Controller uses the serial number to determine which ScreenOS
Enforcer is attempting to connect, and then the Infranet Controller uses the NACN
password to authenticate the ScreenOS Enforcer. The Infranet Controller then begins
communicating with the ScreenOS Enforcer using SSH.
To configure the Infranet Controller to accept a connection from the ScreenOS Enforcer:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller that you want
2.
to configure.
Click the Configuration tab. In the configuration tree, select UAC > Infranet Enforcer
3.
> Connection.
Click New (+). The New Infranet Enforcer dialog box appears.
4.
Select the ScreenOS option button from the Platform area. The ScreenOS Enforcer
5.
page appears.
Enter a name for the ScreenOS Enforcer.
6.
Chapter 10: Configuring Infranet Enforcer Policies
Function
Specifies the policies that
apply to the roles.
Your Action
Select Policy applies to ALL roles
to apply this Source Interface policy
to all users.
Select Policy applies to SELECTED
roles to apply this Source Interface
policy only to users who are mapped
to roles in the Members list.
Select Policy applies to roles
OTHER THAN those selected to
apply this Source Interface policy to
all users except those who map to
the roles in the Members list.
NOTE: Select the policies from the
Non-members list and click Add to
move it to the Members list before
applying the policies to the roles.
101