Configuring If-Map Federation Settings; Configuring If-Map Server Settings On The Infranet Controller; Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

CHAPTER 12

Configuring IF-MAP Federation Settings

Configuring IF-MAP Server Settings on the Infranet Controller (NSM Procedure)
Copyright © 2010, Juniper Networks, Inc.
Configuring IF-MAP Server Settings on the Infranet Controller (NSM
Procedure) on page 107
Configuring IF-MAP Client Settings on the Infranet Controller (NSM
Procedure) on page 108
Configuring IF-MAP Session Export Policy on the Infranet Controller (NSM
Procedure) on page 109
Configuring IF-MAP Session Import Policy on the Infranet Controller (NSM
Procedure) on page 112
Configuring IF-MAP Server Replicas (NSM Procedure) on page 114
You must add all IF-MAP clients to the Infranet Controller IF-MAP server to permit the
server to communicate with its clients. To add clients, you must specify the IP address
and the security mechanism and credentials for each client.
An IF-MAP server certificate must also be installed on the IF-MAP server. The client
verifies the server certificate when it connects to the server. The server certificate must
be signed by a certificate authority (CA), the client must be configured to trust certificates
signed by that CA, and the hostname in the server certificate must match the hostname
in the IF-MAP URL on the client.
To configure IF-MAP server settings on the Infranet Controller that will be the IF-MAP
server:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure IF-MAP server settings.
Click the Configuration tab. In the configuration tree, select System > IF–MAP
3.
Federation > Overview.
From the IF-MAP Configuration list, select IF-MAP Server.
4.
Click the OK button to save the changes.
5.
From the This Server tab, select Clients and Replicas and click the New button.
6.
107