Table of Contents
Advertisement
Network and Security Manager Administration Guide
Selecting the Domain
102
NOTE: You cannot activate modeled Secure Access or Infranet Controller devices.
These devices must be imported into NSM.
To quickly configure multiple ScreenOS devices, use templates (reusable, custom device
settings such as DNS settings, PKI settings, and so on) and objects (reusable, custom
objects such as NAT objects, CA certificates, and Address objects). For large deployments
that involve multiple devices in nontechnical environments, use Rapid Deployment (RD)
to bring new ScreenOS devices under NSM management for initial configuration.
Device Add Process
Although the Add Device wizard and Activate Device wizard automatically handle many
of the tasks involved in adding a device to the management system, you might need to
perform some steps manually after using a wizard to complete the device add process.
The amount of manual involvement when adding a device to NSM depends on several
factors, such as whether you are importing a deployed device or activating a modeled
device, the software version the device is running, and the type of IP address (static or
dynamic) the device uses to connect to the management system. The following
procedures guide you through the process.
Determine the domain in which you want to place the device. A domain is a logical
grouping of devices, device security policies, and device access privileges. NSM includes
a global domain by default. You can also create additional domains, called subdomains,
that exist within the global domain. Before you add the device, you must select the domain
that contains the device; after the device is created, it appears only in that domain and
must be managed from that domain.
When you log in to the UI for the first time after installing the management system, NSM
loads the global domain by default, and the Device Manager contains no devices. To
begin adding devices, ensure that you are in the domain you want to add the device to:
Add device to the global domain—Ensure that you are in the global domain and begin
the device creation process.
Add device to an existing subdomain—From the domain menu at the top of the
navigation tree, select the subdomain you want to add the device to, and then begin
the device creation process. The domain menu displays only the domains you have
access to.
Add device to a new subdomain—You must first create the new subdomain in NSM
before adding devices to that subdomain. For details on creating new subdomains,
see "Configuring Role-Based Administration" on page 61. After you have created the
subdomain, select it from the domain menu and begin the device creation process.
After you have created subdomains, you can load a specific subdomain automatically
when you log in to the UI. You must have access to that subdomain, and permissions
to create, edit, and view devices in that subdomain.
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
