Creating Device Discovery Profiles in Security Director
Use this page to configure a device discovery profile that you can use to discover devices.
Device discovery is the process of finding a device and then synchronizing the device inventory and configuration with the Junos Space database. To use device discovery, Junos Space must be able to connect to the device.
Before You Begin
Read the Overview of Device Discovery in Security Director topic.
Review the Discovery Profiles main page to view the existing discovery profiles. See Device Discovery Main Page Fields for field descriptions.
To configure a device discovery profile:
- Select Devices > Device Discovery.
The Device Discovery page appears.
- Click the + icon.
The Create Discovery Profile page appears.
- Complete the configuration according to the guidelines
provided in Table 1.
Note Fields marked with * are mandatory
- Click OK.
A new device discovery profile is created and you are returned to the Device Discovery page. A Job Details page pops up after a few seconds and displays the details of the job scheduled.
- Click OK to close the Job Details page.
Table 1: Discovery Profile Settings
Setting | Description |
|---|---|
Add Device Discovery Target | |
Discovery Profile Name | Enter a unique string containing only alphanumeric characters, spaces, and some special characters (- _ .). The name cannot start with a space and the maximum length is 32 characters. |
Discovery Parameters | Specify whether the discovery parameters are entered manually or by using a comma-separated values (CSV) file. |
Target Type | Select one of the options to specify the device targets, based on whether you want to discover a single device or multiple devices. |
Target Details | Select either IP address or hostname for the target type. If the target type is IP address, then enter the IPv4 or IPv6 address of the device that you want to discover based on the IP mode enabled in Junos Space Network Management Platform. If the target type is hostname, then enter the hostname of the device that you want to discover. Click Next to continue. |
Start IP Address | Enter the starting IPv4 or IPv6 address of the range of IP addresses for the devices that you want to discover. |
End IP Address | Enter the ending IPv4 or IPv6 address of the range of IP addresses for the devices that you want to discover. Note: The maximum number of IP addresses for any target type is 1024. Click Next to continue. |
IP Subnet | Enter the IPv4 or IPv6 address or the IP address and prefix of the subnet to which the devices that you want to discover belong. |
Subnet | Enter the subnet mask of the subnet to which the devices that you want to discover belong. If you enter a prefix in the preceding field, this field displays the subnet mask calculated based on the prefix. Click Next to continue. |
Specify Probes | |
Use Ping | Select this check box to use ping during the device discovery process. If you select this check box, you must configure devices to respond to ping requests. |
Use SNMP | Select this check box to use SNMP during the device discovery process. If you select this check box, you must configure SNMP on the devices being discovered. Click Back to return to the previous section or Next to continue. |
SNMP Version | Select the SNMP version (V1/V2C, or V3). |
Community | For SNMP V1 or V2C, specify the SNMP community string. Click Back to return to the previous section or Next to continue. |
Username | For SNMP V3, specify the username used for authentication. |
Authentication Type | For SNMP V3, specify the type of authentication used (MD5, SHA1, or None). |
Authenticated Password | For MD5 or SHA1 as the authentication type, specify the authentication password to be used. |
Privacy Type | For SNMP V3, specify the type of privacy to be used (AES128, DES, or None). |
Privacy Password | For AES128 or DES as the privacy type, specify the privacy password to be used. Click Back to return to the previous section or Next to continue. |
Specify Credentials | |
Authentication Type | Specify whether you want to use credential-based or key-based authentication. |
Username | Specify the username for credential-based or key-based authentication. Click Back to return to the previous section or Next to continue. |
Password | For credential-based authentication, specify the password for logging in to the device. |
Confirm Password | For credential-based authentication, reenter the password for confirmation. Click Back to return to the previous section or Next to continue. |
Specify Device Fingerprint | |
Specify Device Fingerprint | Specify the device fingerprint for each device target. The fingerprint must be a string of 16 octets in hexadecimal format with numbers and lowercase letters separated by colons. This is an optional step. Click Back to return to the previous section or Next to continue. |
Schedule Discovery Job | |
Type | Specify whether you want to run the device discovery job immediately or schedule it for a later date and time. |
Recurrence | Select this check box if you want the device discovery job to recur and specify the details of the recurrence. |
Import policies automatically after device(s) being discovered successfully | Select this check box if you want to import and publish policies into the Junos Space database after the devices are discovered and managed by Junos Space. Click Back to return to the previous section or Finish to go to a summary page. |