[j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Phil Mayers
All, We have a (quite busy) netscreen 5400, which we occasionally need to make big policy updates to. It goes very slow if we paste in changes via the CLI, and we're not inclined to buy Netscreen Security Manager (or whatever it's called these days) because our reseller stiffed us on a

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Tim Eberhard
I would not suggest playing with that fire... My personal suggestion to make bulk updates or update many configuration items at once would be to create the list of changes to a file and then tftp merge it into the configuration. It will go very fast and you can tell if anything errored out

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Phil Mayers
Tim Eberhard wrote: I would not suggest playing with that fire... My personal suggestion to make bulk updates or update many configuration items at once would be to create the list of changes to a file and then tftp merge it into the configuration. It will go very fast and you can tell if

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Phil Mayers
Phil Mayers wrote: Tim Eberhard wrote: I would not suggest playing with that fire... My personal suggestion to make bulk updates or update many configuration items at once would be to create the list of changes to a file and then tftp merge it into the configuration. It will go very fast

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Ross Vandegrift
On Fri, Jun 26, 2009 at 12:52:49PM +0100, Phil Mayers wrote: However - I have it on good authority that NSM merely uses a hidden CLI command to start commit bulk updates all at once, a bit like SQL e.g. set mode bulk set address Trust ... ...100 more lines set mode bulk-commit ...or

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Phil Mayers
Ross Vandegrift wrote: On Fri, Jun 26, 2009 at 12:52:49PM +0100, Phil Mayers wrote: However - I have it on good authority that NSM merely uses a hidden CLI command to start commit bulk updates all at once, a bit like SQL e.g. set mode bulk set address Trust ... ...100 more lines set mode

Re: [j-nsp] Bulk updates to Netscreen 5400

2009-06-26 Thread Sidney Boumendil
On Fri, Jun 26, 2009 at 5:02 PM, Ross Vandegrift r...@kallisti.us wrote: On Fri, Jun 26, 2009 at 12:52:49PM +0100, Phil Mayers wrote: However - I have it on good authority that NSM merely uses a hidden CLI command to start commit bulk updates all at once, a bit like SQL You can view the