This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Juniper SA / MAG SSL VPN config backup - is there a way with NCM

jspanitz over 12 years ago

Does anyone know of a way to grab the configs from a Juniper SA or MAG series SSL VPN? There seem to be ways to do it but I don't think NCM supports them. Does anyone have it working and if not please add this a a feature request! Thanks!

John

Top Replies

0 cvachovecj over 11 years ago

John,
Have you succeeded here with NCM? From your other conversation wit SolarWinds it seems that these devices should be able to dump the config to a file and trasfer it via SCP. If that's the case then NCM should be able to handle it.
Regards,
Jiri
Cancel
Vote Up 0 Vote Down

Cancel
0 jspanitz over 11 years ago in reply to cvachovecj

I really never had the time to explore this. Perhaps in the next few months. The longer I wait the more I hope the next release of NCM will solve the problem for us.
Cancel
Vote Up 0 Vote Down

Cancel
0 cvachovecj over 11 years ago in reply to jspanitz

You know NCM 7.1 is in RC phase now, i.e. GA in a few week's time. Improved Juniper device support is planned for longer future...
Jiri
Cancel
Vote Up +1 Vote Down

Cancel
0 ds2acrvet over 10 years ago

Well - we are at 7.2 and this still does not work!! Any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 chillipepper over 9 years ago in reply to ds2acrvet

We are running 7.3 and it still does not work.
Cancel
Vote Up +2 Vote Down

Cancel
0 rharland2012 over 9 years ago in reply to cvachovecj

Is increased support for these boxes still in the plan?
Cancel
Vote Up 0 Vote Down

Cancel
0 cvachovecj over 9 years ago in reply to rharland2012

Hi rharland2012,
Could you please clarify what level of support you would like to see?
E.g. being able to download/upload configs out of the box; inventory reports -- which ones (ideally which MIB/OIDs)?
Thanks,
Jiri
Cancel
Vote Up 0 Vote Down

Cancel
0 rharland2012 over 9 years ago in reply to cvachovecj

My goal would be to have the ability to download/backup/upload configurations...not as concerned with reporting as these boxes don't change much for us. Others may be able to speak to reporting or other needs better than I.
Thanks!
Cancel
Vote Up +1 Vote Down

Cancel
0 jspanitz over 9 years ago in reply to cvachovecj

So I've had many a conversation with Solarwinds about this since my original post here. Juniper supports NetConf, which is an industry sanctioned way of doing things but surprise, one of this bigger guys has been slow to get on board. Anyhow it can all be done via the CLI via the Netconf standard.
NETCONF - Wikipedia, the free encyclopedia
Packetpushers article on using it http://packetpushers.net/using-netconf-yang-to-configure-network-devices-and-why-it-does-not-replace-snmp/
And even Cisco finally getting into the action - This documentation has been moved - Network Configuration Protocol [Support] - Cisco
Juniper Support - NETCONF XML Management Protocol Developer Guide - Technical Documentation - Support - Juniper Networks
Specifically on the MAG / SSL VPN the settings are here:
Cancel
Vote Up 0 Vote Down

Cancel
0 chillipepper over 9 years ago in reply to jspanitz

I don't think enabling the DMI agent at this point ( especially when bash exploit exists) is a good idea even though it works
Cancel
Vote Up 0 Vote Down

Cancel