Configuring If-Map Client Settings On The Infranet Controller; Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

NSM Infranet Controller Configuration Guide
Related
Documentation
Configuring IF-MAP Client Settings on the Infranet Controller (NSM Procedure)
108
Enter a name and an optional description for this client.
7.
From the Type list, select Client.
8.
Type one or more IP addresses of the client. If the client is multihomed, for best results
9.
list all of its physical network interfaces. If the client is an Infranet Controller or Secure
Access cluster, list the internal and external network interfaces of all nodes. It is
necessary to enter all of the IP addresses for all of the interfaces because equipment
failures may cause traffic between the IF-MAP client and the IF-MAP server to be
rerouted through a different network interface. Listing all of the IP addresses maximizes
the probability that IF-MAP Federation still works in the event of a failure.
Under Authentication Type, select the Client Authentication Method: Basic or
10.
Certificate.
If you select Basic, enter a username and password. The same information should
be added to the IF-MAP server.
If you select Certificate, choose which CA to use to verify the certificate for this
client. Optionally, specify certificate attributes or restrictions to require values for
certain client certificate attributes.
Click OK to save the IF-MAP client instance on the IF-MAP server.
11.
Configuring IF-MAP Client Settings on the Infranet Controller (NSM Procedure) on
page 108
Configuring IF-MAP Session Export Policy on the Infranet Controller (NSM Procedure)
on page 109
Configuring IF-MAP Session Import Policy on the Infranet Controller (NSM Procedure)
on page 112
Configuring IF-MAP Server Replicas (NSM Procedure) on page 114
You must identify the IF-MAP server to each Infranet Controller and SA appliance IF-MAP
client. To add the server, you specify the IF-MAP URL of the server and how to authenticate
to the server. Match the URL and security settings to equal those on the IF-MAP server(s)
to which the IF-MAP client will connect.
To configure IF-MAP client settings on the Infranet Controllers or SA appliances that will
be IF-MAP clients:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure IF-MAP client settings.
Click the Configuration tab. In the configuration tree, select System > IF–MAP
3.
Federation > Overview.
From the IF-MAP Configuration list, select IF-MAP Client.
4.
Copyright © 2010, Juniper Networks, Inc.