Security

I follwed this KB article:

 

http://kb.juniper.net/index?page=content&id=KB10796&actp=search&searchid=1273671731538

 

And was able to get an SSH trust relationship set up between NSMXpress and an Unbuntu server.  However, I have been unable to compelte the configuration.  When going through the "NSM_Setup", NSM forces you to change the passwords and add the license in again.  I went ahead and did this but the setup failed with the following:

 

########## PERFORMING PRE-INSTALLATION TASKS ##########
==> Setting Staging Directory to /var/tmp
Creating staging directory...ok
Running preinstallcheck...
Checking if platform is valid...............................ok
Checking for correct intended platform......................ok
Checking for CPU architecture...............................ok
Checking if all needed binaries are present.................ok
Checking for platform-specific binaries.....................ok
Checking for platform-specific packages.....................ok
skipped
Checking in System File for PostgreSQL and XDB parameters...ok
Checking for PostgreSQL.....................................ok
Checking if user is root....................................ok
Checking if user nsm exists.................................ok
Checking if iptables is running.............................ok
Checking if installed Device Server is newer................FAILED
ERROR: Cannot downgrade Device Server
Checking if installed GUI Server is newer...................FAILED
ERROR: Cannot downgrade GUI Server
Checking if installed HA Server is newer....................FAILED
ERROR: Cannot downgrade HA Server
Checking if system meets RAM requirement....................ok
Checking for sufficient disk space..........................ok

Please correct the error(s) above and run again
Removing staging directory..................................ok
[root@NSMXpress tmp]#

 

I'm wondering if there is a better way to add the remote backup server parameters in without having to use the setup tool?  Running 2010.1 with the most recent patch (a20).

 

I do have case #2010-0513-0481 opened with JTAC, just hoping someone on the forums has experience with this and can point me in the right direction.

The JTAC case has an update that everyting is resolved..

 

Are you still having this issue ?

 

Thanks,
Chandra

Yes it has been resolved - it was a version mismatch, didn't have NSM-RS pointed to the version of code that we are currently running: From /var/intsall: NSM-RS -> LGB12z2a20_netmgt_1.12.2_linux_x86_rpm_bin_opt.sh it was pointing to a 2008 release of NSM, hasn't been updated in awhile. Nice to have the remote backups in place now 🙂

can anyone tell me what exactly you have done in this file.. i am also facing the same issue

 

Regrds

Dil

Instead of using the setup tool, you could alway edit /usr/netscreen/HaSvr/var/haSvr.cfg directly. It contains the remote backup parameters.