Network and Security Manager (NSM) Release Notes DMI Schema

Transcription

1 Network and Security Manager (NSM) Release Notes DMI Schema Release version 223 ver 1.0, Juniper Networks, Inc North Mathilda Avenue Sunnyvale, CA USA

2 Version Summary Juniper Networks Network and Security Manager (NSM) is a software application that centralizes control and management of your Juniper Networks devices. With Network and Security Manager, Juniper Networks delivers integrated, policy-based security and network management for all security devices and other Juniper Networks devices in your networks. Network and Security Manager uses the technology developed for Juniper Networks ScreenOS enable and simplify management support for previous and current versions of ScreenOS and now for Junos Software. By integrating management of all Juniper Networks devices, Network and Security Manager enhances the overall security and manageability of the Internet gateway Addressed Issues: PR NSM tries delete all UTM related config for SRX Junos-11.4R1.6 PR NSM Unsets lldp interface settings after a SRX device imported with lldp configuration PR After addition of MX device NSM shows error message on the node host outbound traffic PR SRX - after changing chap or pap passwords using NSM, NSM continually wants push the changed password PR Unable enable aumatic import of config files for SRX PR SNMPv3 configuration settings via Template always shows up in delta config Known Issues: PR EX devices loaded with 11.2 are unable configure server-reject-vlan option under Dot1x properly. PR Serial Number is not displayed for SRX110 device under Hardware invenry Chassis information. PR Uid node is missing in Configuration of System login for Srx110h device for 11.2 releases. Added Support: 10.4R9.2, 11.2R4.3, 11.2R5.4 for junos(m/mx), junos-es(j/srx) and junos-ex(ex) 11.3R3.2, 11.3R4.2 for junos-ex (ex) 11.4R1.14 for junos (m/mx) Removed Support: 9.4, 9.5 and 9.6 for junos(m/mx), junos-es(j/srx) and junos-ex(ex) DMI Schema Release 2

3 Supported releases This DMI schema update supports the following device code releases: Note: Junos 10.4R2 will not be supported. Junos 11.2R2 will not be supported. Junos Service Releases have limited support in NSM. Junos Service Release device CLI changes will not be supported in NSM. SA 7.0r7 and 7.1r3 do not have published schema and will not be supported from NSM. Please refer the SA release notes for more details. Device Family J/SRX family M/MX JunOS version Release R1.6 Release R1.10, 11.2R3.3 Release R1.14, 11.1R2.3, 11.1R3.5, 11.1R4.4, 11.R6.4 Release R1.9, 10.4R3.4, 10.4R4.5, 10.4R5.5, 10.4R R7.5, 10.4R8.5 Release R1.9, 10.3R2.11, 10.3R3.7, 10.3R4.4 Release R2.11, 10.2R4.8 Release R1.8, 10.1R2.8, 10.1R3, 10.1R4.4 Release R1, 10.0R2, 10.0R3, 10.0R4 Release R1, 9.3R2, 9.3R3, 9.3R4 Release R1.14 Release R1.10, 11.2R3.3 Release R1.14, 11.1R2.3, 11.1R3.5, 11.1R4.4, 11.R6.4 Release R1.9, 10.4R3.4, 10.4R4.5, 10.4R5.5, 10.4R R7.5, 10.4R8.5 Release R1.9, 10.3R2.11, 10.3R3.7, 10.3R4.4 Release R2.11, 10.2R4.8 Release R1.11, 10.1R1.8, 10.1R2.8, 10.1R3, Release R4.4 Release R1, 10.0R2, 10.0R3, 10.0R4 Release R1, 9.3R2, 9.3R3, 9.3R4 DMI Schema Release 3

4 Device Family EX Junos-qfx JunOS version Release R1.6 Release R2.4, 11.3R3.2, 11.3R4.2 Release R1.2, 11.2R3.3 Release R1.14, 11.1R2.3, 11.1R3.5, 11.1R4.4, 11.R6.4 Release R1.9, 10.4R3.4, 10.4R4.5, 10.4R5.5, 10.4R R7.5, 10.4R8.5 Release R1.9, 10.3R2.11, 10.3R3.7, 10.3R4.4 Release R2.11, 10.2R4.8 Release R1.8, 10.1R2.8, 10.1R3, 10.1R4.4 Release R1, 10.0R2, 10.0R3, 10.0R4 Release R1, 9.3R2, 9.3R3, 9.3R4 Release R1.7 Device Family Secure Access Infranet Controller Junos - MAG JunOS version Release R1, 7.1R2, 7.1R4 Release R1, 7.0R3, 7.0R6 Release R1, 6.5R2, 6.5R3, 6.5R4, 6.5R5, Release R7, 6.5R9, 6.5R10, 6.5R11 Release R4, 6.4R5 Release R2, 6.3R3, 6.3R5, 6.3R6, 6.3R7 Release R1, 4.0R3 Release R2, 3.1R1, 3.1R2, 3.1R4, 3.1R5 Release R3 Release R2, 2.2R3 Release R1.2, 11.1R1.14 DMI Schema Release 4

5 NSM releases are bundled with specific versions of Schema. All listed versions of NSM can be upgraded the latest schema. NSM Release Bundled Schema version NSM Version 222 NSM Version 166 NSM Version 158 NSM Version 143 NSM Version 134 NSM Version 119 NSM r1 Version 87 NSM r2 Version 66 DMI Schema Release 5

6 Schema Update considerations Online Schema update KB12561 Offline Schema update KB12756 Before the Schema is applied on the NSM servers, the below changes may need be performed. These changes are required on and versions of NSM. These changes may also be required when upgrading a later NSM version. 1. Login the NSM GUI Server & edit the /usr/netscreen/guisvr/var/guisvr.cfg Modify the line that looks as below guisvrdirectivehandler.max.heap guisvrdirectivehandler.max.heap Login the NSM Device Server & edit the /usr/netscreen/devsvr/var/devsvr.cfg Modify the line that looks as below devsvrdirectivehandler.max.heap devsvrdirectivehandler.max.heap Login the NSM Dev Server & edit the file /usr/netscreen/devsvr/var/be/cfg/swrpcinfo.prop Modify the below parameters new values as shown below: get-re-info.response.retry=60 request-package-add.response.retry=10 request-reboot.response.retry=10 file-put.response.timeout=120 file-put.response.retry=10 (may be set as high as 40 if upgrade is timing out) These changes are required due the increased JUNOS image sizes. 4. Sp all the NSM processes Non-HA environment HA environment /etc/init.d/hasvr sp /etc/init.d/guisvr sp /etc/init.d/devsvr sp /etc/init.d/hasvr sp DMI Schema Release 6

7 5. Start all the processes Non-HA environment HA environment /etc/init.d/guisvr start /etc/init.d/devsvr start /etc/init.d/hasvr start /etc/init.d/hasvr start 6. On the client we need update the heap size Go C:\Program Files\Network and Security Manager/ Edit NSM.lax file & modify the heap size the below values lax.nl.java.option.java.heap.size.initial=48m lax.nl.java.option.java.heap.size.initial=64m lax.nl.java.option.java.heap.size.max=768m lax.nl.java.option.java.heap.size.max=1280m Getting Help For more assistance with Juniper Networks products, visit: Juniper Networks provides maintenance releases (updates and upgrades) for NSM software. To have access these releases, you must register your NetScreen devices and NSM application with Juniper Networks at the above web address. Copyright 2007 Juniper Networks, Inc. All rights reserved. Juniper Networks and the Juniper Networks logo are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks in this document are the property of Juniper Networks or their respective owners. All specifications are subject change without notice. Juniper Networks assumes no responsibility for any inaccuracies in this document or for any obligation update information in this document. Juniper Networks reserves the right change, modify, transfer, or otherwise revise this publication without notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without receiving written permission from: Juniper Networks, Inc. ATTN: General Counsel 1194 N. Mathilda Ave. Sunnyvale, CA U.S.A. DMI Schema Release 7