Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 309

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
Table 86: Replica IF–MAP Server Configuration Details (continued)
Option Function
Description Describes the replica or
replica network.
Type Specifies whether the
configuration is for an
IF-MAP client or for a replica
IF-MAP server.
Hostname Specifies the hostname that
exactly matches the
replica's device certificate.
IP Address(es) Specifies the IP addresses
from which the replica may
initiate connections to this
server.
Authentication Specifies the authentication
Type type.
Configuring IF-MAP Session Import Policy on the Secure Access Device (NSM
Procedure) on page 288
Configuring IF-MAP Servers (NSM Procedure) on page 283
Chapter 20: Configuring IF-MAP Federation Settings
Your Action
Enter a brief description for the replica or replica
network.
From the Type list, select Replica.
Enter the hostname of the replica's device
certificate. The hostname is used when this
IF-MAP server initiates a connection to the
replica. The fully qualified domain name (FQDN)
of the replica's internal or external interface
should be used; for a cluster, the FQDN of the
internal or external VIP should be used.
Enter one or more IP addresses from which the
replica may initiate connections to this server. If
the replica is standalone, for survivability list both
the internal and external network interfaces. If
the replica is a cluster, for survivability list the
internal and external network interfaces of both
cluster nodes.
Select the authentication method:
Basic—If you select Basic, enter a username
and password.
Certificate—If you select Certificate, select
the certificate authority that issued the IF-MAP
replica's certificate. Enter any restrictions, one
per line. If any restrictions match, for example
CN=ic.example.com, the certificate is
accepted.
291