Targeting the Juniper OS 9.x networking equipment system
For each Juniper OS 9.x networking equipment system, add a target system in Bravura Security Fabric (Manage the System > Resources > Target systems):
Type is Juniper OS 9.x networking equipment (SSH) .
Address uses options described in the table below.
The full list of target parameters is explained in Target System Options .
Option | Description |
---|---|
Options marked with a | |
Script file | Must be set to agtjunos9x.psl (key: script) |
Server | The IP address/domain name of the Juniper OS 9.x networking equipment. (key: server) |
Advanced | |
Port | TCP Port number. Default is 22. (key: port) |
Compression | Select to enable data compression for SSH connections. Default is false. (key: compression) |
Action for host keys | Select AllowAppend (default) or DenyUnmatch. For new targets, AllowAppend is recommended. AllowAppend connects to SSH hosts whose public host keys have been previously recorded and have not been changed, and to SSH hosts whose keys have not been previously recorded. It will reject SSH hosts whose keys were previously recorded but have changed. DenyUnmatch only connects to SSH hosts whose public host keys have been previously recorded and have not been changed. It will reject SSH hosts whose keys have not been previously recorded or were previously recorded but have changed. (key: hostkeys) |
Host keys file | Specify the name of the public host key file. It must be located in the \<instance>\script\ directory. The file consists of a KVGroup with an entry that contains the host information as the key and the hostkey as the value. This information can be extracted from the PuTTY registry entries (HKEY_CURRENT_USER \Software\SimonTatham\PuTTY\SshHostKeys) where "Name" corresponds to the key and "Data" corresponds to the value. (key: file) |
Authentication key file | This is a generic SSH target field that is ignored for Juniper OS 9.x target systems. Login must be done with username and password. |
Timeout for connection | Amount of time the connector will wait for a response. (key: timeout) |