Asset Recovery And Reset Hardware In Nsm Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Related
Documentation

Asset Recovery and Reset Hardware in NSM Overview

Table 32: Asset Recovery and Reset Hardware
Restore Access
Methods
Using Asset Recovery
Reset Hardware
Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
However, to set this restriction, the current root device administrator password must
meet the minimum length requirement you are attempting to set. If the current password
is too short, NSM displays an error message.
Asset Recovery and Reset Hardware in NSM Overview on page 157
Console-Only Connections in NSM Overview on page 158
Port Numbers for SSH and Telnet Connections in NSM Overview on page 156
If the root device administrator password is lost, the device administrator can restore
access in one of two ways as described in Table 32 on page 157.
Description
Using a console connection, the device administrator uses the unset all command to clear all
existing configuration settings and return the device to factory defaults (for details, see the
"Administration" volume in the Concepts & Examples ScreenOS Reference Guide). Device recovery
is enabled by default. To disable it, clear the Enable Asset Recovery check box in the CLI
Management configuration screen.
NOTE: A security device in FIPS mode automatically disables asset recovery.
The device administrator performs a manual operation on the physical device hardware to return
the device to factory defaults (for details, see the "Administration" volume in the Concepts &
Examples ScreenOS Reference Guide). Reset Hardware is enabled by default. To disable it, clear
the Enable Reset Hardware check box in the CLI Management configuration screen.
All configuration settings stored on the managed device are lost during an asset recovery
or hardware reset. After restoring access to the device, the device administrator should
perform the following tasks to enable the device to reconnect to NSM:
Configure the interface that connects to the management system.
1.
Send the new root device administrator username and password to the NSM
2.
administrator, who should update the existing root username and password for the
device in the modeled configuration.
NOTE: All passwords handled by NSM are case-sensitive.
Enable the NSM agent on the managed device.
3.
After the device has reconnected to the management system, you (the NSM
administrator) can update the device with the modeled configuration.
Console-Only Connections in NSM Overview on page 158
Secure Shell Server in NSM Overview on page 158
Chapter 5: Administration
157