Using Configuration Summaries - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Table of Contents

Advertisement

Chapter 4: Adding Devices

Using Configuration Summaries

NSM provides three configuration summaries to help you manage device configurations
and prevent accidental misconfiguration. Use configuration summaries after you import
a device to ensure that the management system imported the physical device
configuration as you expected.
Configuration summaries help with ongoing device maintenance, particularly for devices
on which a local device administrator has been troubleshooting using CLI commands or
the Web UI. Because the device object configuration in the NSM UI can overwrite the
physical device configuration, you should always confirm the commands that are sent
to the device.
Configuration Summary
A configuration summary shows you the exact CLI commands that will be sent to the
managed device during the next device update. To get a Configuration Summary, from
the Device Manager launchpad, click Device Config Options > Summarize Config. You
see a list of security devices to which you have access. Select the device you just imported
and click OK. NSM analyzes the UI device object configuration and generates a summary
report that lists the CLI commands or XML messages to send to the physical device during
the next device update.
For a just-imported device, the configuration summary report displays the device
configuration that matches the configuration currently running on the physical device.
Delta Configuration Summary (All Devices Except IDP)
A delta configuration summary shows you the differences between the configuration
you see in the NSM UI and the configuration on the physical device. To get a delta
configuration summary, from the Device Manager launchpad, click Summarize Delta
Config. You see a list of devices to which you have access. Select the device you just
imported and click Apply Changes. NSM queries the physical device to obtain a list of
all CLI commands or XML messages used in the device configuration, compares that list
with the UI device configuration, and generates a summary report of all differences, or
deltas, discovered.
For a just-imported device, the delta config summary displays minimal deltas, meaning
that very few differences exist between the configuration on the physical device and the
configuration in the UI. NSM automatically imports your VPNs and displays the VPN
policies; however, NSM does not create VPN abstractions for your VPN policies.
Get Running Configuration
A running configuration summary shows you the exact CLI commands or XML messages
that were used to create the current device configuration on the physical device. To get
the Running Config summary, from the Device Manager launchpad, click Device Config
Options > Get Running Config. You see a list of devices to which you have access. Select
the device you just imported and click OK. NSM queries the physical device to obtain a
list of all CLI commands used in the device configuration and generates a summary report
that lists those commands.
For a just-imported device, the get running config summary report displays the device
configuration currently running on the physical device.
Copyright © 2010, Juniper Networks, Inc.
129

Advertisement

Table of Contents
loading

This manual is also suitable for:

Network and security manager 2010.3

Table of Contents