User manual JUNIPER NETWORKS NSM3000 REV 1

[. . . ] Juniper Networks Network and Security Manager NSMXpress and NSM3000 User Guide Release 2010. 4 Published: 2010-11-17 Revision 1 Copyright © 2010, Juniper Networks, Inc. Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www. juniper. net This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. This program and its documentation were developed at private expense, and no part of them is in the public domain. This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto. [. . . ] The NSM appliance displays the Advanced Options menu: Menu: Advanced Options 1> https port for NBI service [8443] The port number to listen for NBI (Default is 8443) 2> Menu: Remote Replication of Database [Off] M> Main Menu R> Redraw menu Choice [1-2, M, R]: You have the following options: · https port for NBI service--Enter 1 to change the port number for listening for messages for the NSM API. In response to the prompt, enter a value in the range 1025 through 65535. Menu: Remote Replication of Database--Enter 2 to display a menu of options for configuring the time of day to take the backup, the location of the backup, and timeout value. See "Enabling and Configuring Remote Replication of the Database" on page 24. · Enabling and Configuring Remote Replication of the Database On the Advanced Options menu, enter 2 to open a menu that allows you to mirror the daily backup to an external server. After you turn it on, use the menu options to configure this option: 1> Remote Replication of Database [n] If 'y', local backups will be sent to a remote backup machine 2> Hour of day to Replicate Database [02] Hour to start backup 24 Copyright © 2010, Juniper Networks, Inc. Chapter 2: Installing and Configuring NSM from the CLI 3> Remote Backup IP [] IP address of a remote backup machine 4> Remote Replication Timeout (seconds) [1800] Rsync Command Backup Timeout (seconds) (Default is 1800 seconds) The screen always shows the current status of the remote backup database. If no status exists, the option has not yet been configured. · Remote Replication of Database--Enter 1 to turn remote replication on or off. Hour of day to Replicate Database--Enter 2, and then specify the hour to start the backup. Remote Backup IP--Enter 3 to specify the IP address of the remote backup server. Backup information is copied to the /var/netscreen/dbbackup directory on the remote server. The "nsm" user must exist on both servers and you must establish an SSH trust relationship. Remote Replication Timeout--Enter 4 to change the timeout period for the remote backup. The valid range is 1 through 65535 seconds. · · · Configuring Standard Configuration Options After the initial setup, continue configuring typical options, including the following tasks. Follow the setup prompts on the main menu to set or modify these options. Your configuration options (with the exception of any password changes) will not take effect until you apply the changes. Run nsm_setup to access these options on the NSM appliance Settings Menu: · · · · · · · · · Changing the Password on page 25 Setting Interface Options on page 26 Setting Routing Options on page 26 Changing the NSM Appliance Hostname on page 27 Adding DNS Servers on page 27 Setting the System Time on page 27 Forwarding Local Status E-mails on page 28 Updating System Security on page 28 Saving Setup Options on page 29 Changing the Password To change your password: 1. On the NSM appliance Settings Menu, enter 1 at the prompt. 2. Enter y when prompted to change the password for an "admin" user. Copyright © 2010, Juniper Networks, Inc. 25 NSMXpress and NSM3000 User Guide 3. Retype the new password and press Enter. Your password is changed and the setup program returns you to the NSM appliance Settings menu. Setting Interface Options The NSM appliance has two ports labeled ETH0 and ETH1. Use this menu to set interface options for eth1 or modify either interface. NOTE: If you are going to use a second link, you need to configure an IP address for eth1 before configuring this setting. To set or modify interface options: 1. On the NSM appliance Settings menu, enter 2 at the prompt. Set or modify options for one of the interfaces by selecting one of the following options: · · 1 to modify eth0. Make the following selection for interface options by selecting one of the following options: · · 1 to change the IP address and return to the NSM appliance Settings menu. Make the following selection for physical parameters (such as interface speed) by selecting one of the following options: · · 1 to set the autonegotiate option and return to the main menu. 2 to set the physical parameters manually and go to the next step. 5. [. . . ] Select the Between check box and enter the start date and end date in the drop-down list to view actions within the specified time period. 3. See Figure 44 on page 65. 64 Copyright © 2010, Juniper Networks, Inc. Chapter 3: Configuring NSM from the Web Interface Figure 44: Search Results Dialog Box Error Logs To review error logs, select Troubleshooting > Error Logs. Figure 45 on page 65 shows an example, Figure 45: Review Error Logs To view details of an individual error log, select the file you want to view and click View. Figure 46 on page 65 shows sample error log details. Figure 46: Error Log Detail Copyright © 2010, Juniper Networks, Inc. 65 NSMXpress and NSM3000 User Guide Network Utilities To access basic network utilities (ping, traceroute, and nslookup) for TCP/IP Networking, select Troubleshooting > Network Utilities. [. . . ]