Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual page 169

Copyright © 2010, Juniper Networks, Inc.
From the OS Name list, select ScreenOS/IDP. Select the device platform type and
6.
the ScreenOS version running on the device from the other pull-down menus. If desired,
enable Transparent Mode.
Select the license key model for the device. Available selections depend on the type
7.
of security device and can include: baseline, advanced, extended, plus, 10-user.
Select the Device Server Connection Parameters: Use the default settings to configure
8.
the device to connect to the NSM Device Server IP address and port. Use a MIP to
configure the device to connect to the NSM Device Server through a mapped IP address
and port.
Click Next, and then perform the following tasks on the Specify One-Time Password
9.
screen:
a. Make a note of the unique external ID for the device. The device administrator will
need it to connect the device to NSM. This ID number represents the device within
the management system. The wizard automatically provides this value.
b. Specify the First Connection One Time Password (OTP) that authenticates the
device.
NOTE: All passwords handled by NSM are case-sensitive.
c. Click Show Device Commands to display the list of CLI commands that must be
executed on the device to connect to NSM. The commands enable management
and set the management IP address to the Device Server IP address, enable the
Management Agent, set the Unique External ID, and set the device OTP.
d. Copy and paste these commands into a text file,
e. Click Finish to complete the Add Device wizard and include the new device in the
Device Manager list.
Add the commands to the console of the device. Send the commands to the device
10.
administrator. The device administrator must make a Telnet connection to the physical
device, paste the commands, and execute them to enable NSM management of the
device.
To check the device configuration status, mouse over the device in Device Manager
11.
or check in Device Monitor.
The status message "Waiting for 1st connect" might appear briefly.
After the device connects, the status displays "Import Needed", indicating that the
device has connected but the management system has not imported the device
configuration yet.
Import the device configuration by right-clicking the device and selecting Import
12.
Device. The Job Information box displays the job type and status for the import; when
the job status displays successful completion, click Close.
After the import finishes, double-click the device to view the imported configuration.
Chapter 4: Adding Devices
119