TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Importing Multiple Secure Access Devices

If your network includes a large number of devices, you can save time by adding multiple devices in a single workflow. You can add up to 4000 devices at a time to a single domain (but you cannot add multiple devices to different domains at one time).

Add multiple Secure Access devices by following these procedures:

Creating the CSV File

The CSV file defines all the required and optional values for each Secure Access device. Within a .csv file, you define the Secure Access device configuration values that you want to add. The required and optional values depend not only on how the Secure Access devices are deployed on your network but also on the device family.

Juniper Networks provides CSV templates in Microsoft Excel format for each type of CSV file. These templates are located in the utils subdirectory where you have stored the program files for the UI client. For example:

C:\Program Files\Network and Security Manager\utils

For each CSV file, each row defines a single Secure Access device’s values for each parameter. For text files, columns are separated by commas.

Creating Secure Access Device Parameters in CSV File

For a Secure Access device, Table 1 lists the parameters to be set in the CSV file:

Table 1: CSV File Information for Secure Access Devices

Field	Type	Required	Acceptable Values
Name	String	yes	sa-6500(FIPS), sa-6500, sa-6000(FIPS), sa-6000, sa-4500(FIPS), sa-4500, sa-4000(FIPS), sa-4000, sa-2500, sa-2000
Color	String	yes	blue, red, green, yellow, cyan, magenta, orange, pink
OS Name	String	yes	SA
Platform	String	yes	SA-2000, SA-2500, SA-4000, SA-4000(FIPS), SA-4500, SA-4500(FIPS), SA-6000, SA-6000(FIPS), SA-6500, SA-6500(FIPS)
Device Subtype	String	yes	Set to “none”
Managed OS Version	String	yes	6.3
Device Admin Name	String	yes
Device Admin Password	String	yes	Must be a minimum of nine characters

Using an Excel File to Add Multiple Secure Access Devices

To edit the Excel file to add multiple Secure Access devices:

Copy and open either the bulkadd_nonreachable-sample.csv file or the bulkadd_nonreachable-DMI-sample.csv file located in C:/Program Files/Network and Security Manager/utils.
Using one row for each Secure Access device you want to add, enter the required values for each parameter that you wish to set for them. You can also provide optional values, if desired.
Save the file to a location on your local drive.

Using a Text File to Add Multiple Secure Access Devices

To add multiple Secure Access devices, create a text file with the following text:

Open a Text file and add the Secure Access devices and its parameters as follows.
SA-4000, blue, SA, SA-4000, none, root, 6.3, netscreen
SA-4500, pink, SA, SA-4500, none, root, 6.3, netscreen
SA-6000, cyan, SA, SA-6000, none, root, 6.3, netscreen
SA-6500, pink, SA, SA-6500, none, root, 6.3, netscreen
Save the file as a .csv file.

Validating the CSV File

When you add the Secure Access devices, NSM validates the configuration information in the .csv file and creates a validation report. The report lists any incorrect or duplicate configurations, and indicates the exact line that contains invalid data.

Note: The validation report displays only the first error in the line. If the line contains additional errors, those errors do not appear in the validation report.

Select Cancel to quit adding multiple Secure Access devices, or select Add Valid Devices to begin adding the Secure Access devices for which you have provided valid device configurations.

If the validation report listed incorrect configurations, you can still select Add Valid Devices; however, only the devices with correct configurations are added. If the .csv file contains duplicate configurations, NSM ignores the duplicates.

After you have added multiple Secure Access devices, you cannot roll back or undo your changes. To edit or delete Secure Access devices, select the Secure Access device in the UI and make the necessary changes.

Adding and Importing Multiple Secure Access Devices

To add and import multiple Secure Access devices in the NSM UI:

From the left pane of the NSM UI, click Configure.
Expand Device Manager and select Devices. The Devices workspace appears on the right side of the screen.
Click the Device Tree tab, click the New button, and select Many Devices. The New - Device dialog box appears
In the New-Device dialog box:
- Select Device is Not Reachable.
- Specify the location of the CSV file.
- Specify the output directory for the .cli file. For each valid device configuration that uses a dynamic IP address, NSM creates a .cli output file. By default, the .cli file is saved to the following GUI server directory:
  /usr/netscreen/GuiSvr/var/ManyDevicesOutput/<inputFile_YYYYMMDDHHMM>/
  Before the Secure Access devices can be managed by NSM, you must enter the CLI commands in the .cli file on the physical security device.
Click Next. The Add Device wizard validates the CSV file and provides a validation report.
- Select Cancel to quit the Add Many Devices process.
- Select Add Valid Devices to begin adding the devices for which you have provided valid device configurations.
From the Choose Device Server Connections Parameter area, enter information as required. Use the default settings to configure the device to connect to the NSM device server IP address and port. Use an MIP to configure the device to connect to the NSM device server through a mapped IP address and port.
Click Finish to add the Secure Access devices.

The time it takes for NSM to activate and import the Secure Access devices depends on the number of Secure Access devices and the management system configuration.