Simplifying Management
Using Device Groups
Using Device Templates
Copyright © 2010, Juniper Networks, Inc.
When you add devices to NSM, you are creating the network organization that you use
to manage your security system. Before you begin the device creation or device import
process however, first review your network topology and decide how you want it to appear
in NSM. This is particularly important when you are creating a new network, but is also
helpful when you are importing networks, because you might want to edit your network
design to take advantage of key NSM management features.
These features include:
Using Device Groups on page 55
Using Device Templates on page 55
Using Configuration Groups on page 56
Merging Policies on page 56
Using a Naming Convention on page 56
You can create groups of devices to manage multiple devices at one time. Group your
device by region, device type, or even OS version, and then use the groups to:
Deploy new or updated device configurations to the entire device group.
Deploy new or updated policies to the entire device group.
Create reports using the log information from the entire device group.
A template is a predefined device configuration that helps you reuse common information.
A domain can contain multiple templates, and you can use templates to quickly configure
and deploy multiple devices. A device template looks much like a device configuration—the
template page displays boxes for interfaces, zones, and virtual routers in which you can
enter values. When you add a new device that uses similar information as a previously
added device, you can use a device template to fill in specific configuration values so you
do not have to reenter information.
For example, you might create a generic NetScreen-5GT device template that you can
use each time you add a device of that type. Or you can apply multiple templates to the
same device. You can map a maximum of 63 templates to the same device; you set the
priority of the template to determine the order in which they applied.
For example, you might create the following templates:
DNS setting template
Default PKI Settings template
Authentication template
Chapter 2: Planning Your Virtual Network
55