Adding Members To The Cluster; Adding Screenos Or Idp Clusters; Adding Secure Access Or Infranet Controller Clusters - Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide

Adding Members to the Cluster

Adding ScreenOS or IDP Clusters

Adding Secure Access or Infranet Controller Clusters

152
(ScreenOS only) Transparent Mode—Enable transparent mode, if desired.
g.
(Some ScreenOS only) License Model—Specify baseline or advanced.
h.
Click OK to create the cluster object.
3.
The cluster device object appears in the device tree.
After creating the cluster object, add the members of the cluster. In Device Manager,
select Devices, right-click the Cluster device, and then select New > Cluster Member.
The Add Cluster Member wizard appears. Follow the instructions in the wizard to import
or add a new cluster member.
To add a ScreenOS or IDP cluster, first add the cluster object as described in "Adding
Clusters" on page 151. Next, add each cluster member either by importing or by modeling:
When importing cluster members, first ensure that their configurations are synchronized.
Next, right-click the cluster icon in the Device Manager and select New > Cluster
Member form the list and select the appropriate options to import the device
configurations from each physical cluster device member.
When modeling a cluster member, ensure that both cluster members have been added
to the cluster device object before configuring the cluster.
By default, the cluster propagates settings made in one device member to the other
device member. However, the following settings are not propagated and must be
configured on each device in the cluster: VSD group, VSD priority, authentication and
encryption passwords, managed IP addresses, and IP tracking settings. All other
commands are propagated among devices within the cluster.
For details on creating and configuring a ScreenOS cluster, see Network and Security
Manager Configuring ScreenOS and IDP Devices Guide.
To create a cluster that includes an existing device (with an existing configuration and
security policy) and a new device (with no configuration or security policy), you should:
Create the cluster.
1.
Add the existing device by importing. The Add Device Wizard automatically imports
2.
the device configuration.
Add the new device by modeling.
3.
When the device is ready, activate the device.
4.
To add a Secure Access or Infranet Controller cluster in NSM, you add the cluster and
then add each member. Adding a member is similar to adding a standalone device.
Copyright © 2010, Juniper Networks, Inc.