Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual page 294

Network and Security Manager Administration Guide
About Atomic Updating—ScreenOS Devices
244
in the failed configuration, appear in the Job Manager status window for this
upgrade.
If the device connection to the management system is down after all commands
have been executed, the update timer expires and the device automatically resets.
The device unlocks the active configuration and restores the saved active
configuration (the device reboots). The connection might be down due to a
command in the modeled configuration that causes the device to lose connection
with the NSM Device Server.
NOTE: When updating vsys devices, atomic configuration occurs only for the root vsys.
In addition to atomic configuration, devices running ScreenOS 5.1 and later also support
atomic updating, which enables the device to receive the entire modeled configuration
(all commands) before executing those commands (instead of executing commands
as they are received from the management system). Because NSM sends all commands
at one time, the performance of the management connection is enhanced.
Atomic updating also enables the device to temporarily lose connection to NSM during
the update process. If the management connection is down when the device has finished
executing the commands in the modeled configuration, the device reestablishes the
connection. Because the device no longer needs to maintain a constant connection to
the management system during updating, you can configure changes to the management
connection from the NSM UI.
During an atomic update:
NSM saves and locks the active configuration on the device, and then starts a timer
1.
for the update process. The timer expires after 40 minutes. While the active
configuration is locked, it cannot be changed.
NSM sends the modeled configuration to the device.
2.
The device receives all commands before executing the commands on the active
3.
configuration. During the update, the device sends progress messages to the
management system every 15 seconds; these messages appear in the Job Manager
status window for the update.
During the update, the Job Manager status window displays other messages,
depending on the success of the update:
Copyright © 2010, Juniper Networks, Inc.