Downloading Schemas - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Table of Contents

Advertisement

Downloading Schemas

Copyright © 2010, Juniper Networks, Inc.
Download the schema into the staging repository.
1.
Apply the schema.
2.
The most recently downloaded schema is known as the staged schema. The most
recently applied schema is known as the current running schema.
The schemas placed on the Juniper Update Server consist of XML statements that define
the latest device configuration structure. Overlay schemas are also merged with basic
schemas to provide customization of the schemas for specific devices in terms of the
configuration branches presented and the manner in which the configuration is presented.
If your version of NSM is not the most current, it might not be compatible with a new
schema placed on the Juniper Update server for every device family. In such an instance,
the device family is said to be disabled for the schema in your version of NSM. For disabled
device families, you receive information messages before you download or apply the
schema so you can decide whether it is appropriate for you to proceed.
Schema upgrade is split unto two stages to allow you to schedule the time at which an
upgrade is applied. Applying an upgrade involves restarting the GUI Server and the Device
Server, so it is important that this activity is appropriately scheduled. Download can
happen at any time.
The system administrator role has all the permissions necessary to manage schemas.
Alternatively, you can define a custom role for schema management. Three activities are
relevant to defining such a role: View Schema Details, Download Schema, Apply Schema.
See "Configuring Role-Based Administration" on page 61 for details on configuring such
a role.
You can download the latest schema either through the NSM UI or from the GUI Server
CLI. You download the schema directly to the NSM schema staging repository or to an
intermediary file. The intermediary file approach is provided for users who do not have
Internet access from the GUI Server. Using the CLI, you can set up a cron job to check
periodically for new schemas and perform the download. The NSM administrator receives
e-mail notification when a new schema has been downloaded.
NOTE: Intermediary files must have 'nsm' user permissions set on them to be
downloaded to be retrieved by NSM. To set these permissions, in the NSM server CLI,
enter the following command:
% chmod 777 filename
Access to the Juniper Update server uses your Juniper Networks Download Center
credentials—the credentials you use to download software from the
Web site. Use Tools > Preferences > Juniper Update Settings to provide these credentials.
If your credentials are not present or incorrect, you will not be able to download schemas
from the Juniper Update server.
Chapter 7: Managing Devices
www.juniper.net
311

Advertisement

Table of Contents
loading

This manual is also suitable for:

Network and security manager 2010.3

Table of Contents