Configuration Features
Copyright © 2010, Juniper Networks, Inc.
Clusters are made up of two or more devices from the same platform and managed
OS version. You configure these as a separate entity. Configuration applied to the
cluster also applies to each cluster member. See "Configuring Clusters" on page 234 for
details on configuring clusters.
VPNs provide a cost-effective and secure way for routing private data through the
internet. You can configure devices for inclusion in VPNs either centrally in the VPN
Manager, or in the device object itself. For details about configuring VPNs, see
"Configuring VPNs" on page 551.
Vsys devices are virtual devices that exist within a physical ScreenOS security device.
A vsys cluster device is a vsys device that has a cluster as its root device. See "Adding
Vsys Devices" on page 147.
Policies are sets of rules that provide a comprehensive plan that determines how the
device behaves on your network. For ScreenOS and IDP devices, you configure policies
within the NSM Policy Manager. For Secure Access, Infranet Controller, and EX Series
devices, you must configure policies in the device. For J Series routers or SRX Series
gateways, you can configure policies either in the NSM Policy Manager or in the device,
but not both. For details about configuring policies, see "Configuring Security Policies"
on page 435.
You can edit the device object configuration through the device editor, or you can use
templates or configuration files to simplify configuration:
NOTE: These features edit only the device object in NSM. The newly
configured values will not affect the device itself until you push the modeled
configuration to the device using the Update Device directive. See "Updating
Devices" on page 243 for details about updating devices.
About the Device Editor on page 189
About Device Templates on page 189
About Configuration Groups on page 190
About the Device Editor
To edit the device using the device editor, select Device Manager > Devices, select the
device you want to edit, and then click the Edit icon. NSM displays the imported or
modeled configuration parameters of the device, along with information specific to NSM,
like device startup information and the color of the device icon in NSM. The layout of the
screens and the information contained within them depends on the device family and
the specific device platform and operating system version.
See "Editing Devices Using the Device Editor" on page 190 for details.
About Device Templates
A template is a predefined set of configuration values that helps you reuse common
information. A device object can refer to multiple templates, and you can use templates
Chapter 5: Configuring Devices
189