User manual JUNIPER NETWORKS NETWORK AND SECURITY MANAGER NSMXPRESS SERIES II QUICK START REV1

[. . . ] Network and Security Manager NSMXpress Series II Quick Start November 17, 2010 Revision 1 NSMXpress Series II is an appliance version of Network and Security Manager (NSM). NSMXpress Series II simplifies the complexity of network administration by providing a single, integrated management interface that controls device parameters. This robust hardware management system installs in minutes with full high availability (HA) support, making it easy to scale and deploy. Enterprise customers with limited resources can benefit significantly from NSMXpress Series II because it eliminates the need to have dedicated resources for maintaining a network and security management solution. [. . . ] You must provide access credentials for the SNMP server, a list of IP addresses from which logon requests will be accepted, and the trap conditions to be reported to the SNMP server. To configure SNMP monitoring of your NSMXpress Series II appliance, select System Administration > SNMP Monitoring. This window contains the tabs described in the following sections: · · · SNMP Configuration on page 29 SNMP System Information on page 30 SNMP Trap Configuration on page 31 SNMP Configuration To configure SNMP: 1. Select System Administration > SNMP Monitoring. 2. Select the SNMP Config tab, which is shown in Figure 33 on page 30. Copyright © 2010, Juniper Networks, Inc. 29 NSMXpress Quick Start Figure 33: Configuring SNMP 3. Select the version of SNMP to be used, either v2c or v3. Provide authentication information: · · If you selected SNMP v2c, enter a username. If you selected SNMP v3, enter a username and password. The password must be at least 8 characters long. NSMXpress Series II implements a single username and password, which is effective only for SNMP communication and is not related to any other username and password used on the NSMXpress Series II appliance. 5. To limit SNMP Get requests to specific servers, select Only, and then enter the IP addresses of the permitted servers. 6. Click Save. SNMP System Information To configure SNMP system information: 1. Select System Administration > SNMP Monitoring. 2. Select the System Info tab, which is shown in Figure 34 on page 30. Figure 34: Configuring SNMP System Information 3. Enter the following information, which is required for any SNMP-managed device: · · Contact--Contact information for the appliance. Location--Location of the appliance. 30 Copyright © 2010, Juniper Networks, Inc. Managing System Administration · Description--A brief description of the appliance. 4. Click Save. SNMP Trap Configuration To configure SNMP trap conditions: 1. Select System Administration > SNMP Monitoring. 2. Select the SNMP Traps tab, which is shown in Figure 35 on page 31. Figure 35: Configuring SNMP Traps 3. In the Manager IP field, enter the IP address of the SNMP management server. Select from the following trap conditions: · Disk space low Enter the percentage of free disk space below which SNMP issues a trap. · Memory low Enter the percentage of free memory below which SNMP issues a trap. · CPU high Enter the percentage of CPU use over which SNMP issues a trap. · · · NSM start/stop Admin Logon/Logoff External IP unreachable Enter the IP address of the required device. 5. Click Save. Copyright © 2010, Juniper Networks, Inc. 31 NSMXpress Quick Start Forwarding Syslog Messages NSMXpress Series II provides a simple mechanism for configuring syslog messaging between the NSMXpress Series II appliance and a syslog receiver running rsyslog, syslog-NG, or basic syslog. This mechanism simplifies choosing syslog receivers, data sources of the messages you want to log, and the message transport used. For the type of message transport, you can choose among TCP, SSL, and UDP. For rsyslog or syslog-NG implementations use TCP or SSL. [. . . ] It provides conceptual information, suggested workflows, and examples. This guide is best used in conjunction with the NSM Online Help, which provides step-by-step instructions for performing management tasks in the NSM user interface (UI). This guide is intended for application administrators or those individuals responsible for owning the server and security infrastructure and configuring the product for multiuser systems. It is also intended for device configuration administrators, firewall and VPN administrators, and network security operation center administrators. Network and Security Manager Administration Guide Network and Security Manager Configuring ScreenOS and IDP Devices Guide Describes NSM features related to device configuration and management. [. . . ]