Updating The Configuration On The Device; Using Device Templates - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide

Updating the Configuration on the Device

Using Device Templates

196
To edit the configuration of a Junos device, you can edit the device object configuration
itself, create and apply a template, or use configuration groups.
For more information about configuration groups, see "Using Configuration Groups" on
page 221.
To edit Junos device configuration data in NSM, double-click the device in the Device
Manager and select the Configuration tab. The configuration tree appears in the main
display area with all parameters viewable or configurable from NSM.
The primary difference between editing the configuration in NSM and editing the
configuration as described in the Secure Access, Infranet Controller, or Junos device
documentation is that edits described in those documents apply changes directly to the
device. Edits done in NSM apply to the device object in NSM, which is not pushed to the
device until you perform an Update Device directive.
To perform an update device operation, right-click the device in the Device Manager, and
then select Update Device from the list.
Use templates to define a common device configuration and then reuse that configuration
information across multiple devices. In a template, you need define only those
configuration parameters that you want to set; you do not need to specify a complete
device configuration. Templates provide these benefits:
You can configure parameter values for a device by referring to one or more templates
when configuring the device.
When you change a parameter value in a template and save the template, the value
also changes for all device configurations that refer to that template, unless specifically
overridden in the device object.
When you apply a template to a device, NSM applies the template settings to the device.
For example, you can create a template that specifies the IP address of the NTP server
to which all managed security devices synchronize their clocks. You can apply this
template to the configuration of each device in your subdomain (or all devices if defined
in the global domain) so that all devices use the same NTP server.
A template contains all possible fields for all possible devices within a device family.
NSM provides different templates for:
ScreenOS/IDP devices
Secure Access devices
Infranet controller devices
J Series devices (includes SRX Series devices)
M Series and MX Series devices
EX Series devices
Copyright © 2010, Juniper Networks, Inc.