JUNIPER NETWORKS Onboard Cloud-Ready Devices User Guide

: June 12, 2024
: JUNIPER NETWORKS

Table of Contents

Begin
Up and Running
Keep Going
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

JUNIPER NETWORKS Onboard Cloud-Ready Devices User Guide

JUNIPER NETWORKS Onboard Cloud-Ready Devices User
Guide

Begin

SUMMARY

This guide walks you through the simple steps to onboard a cloud-ready device using Paragon Automation. Use this guide if you are a user with the Installer role in Paragon Automation.

Meet Juniper Networks Cloud-Ready Devices

You can install and onboard Juniper Networks® Cloud-Ready devices using Paragon Automation. Paragon Automation supports devices from the ACX7000 line of routers, which are powered by the Junos OS Evolved cloud-optimized operating system. For more information about the devices that Paragon Automation supports, see Paragon Automation Supported Hardware.

Install the Device

Follow the instructions in the hardware documentation to unbox the device, mount it on a rack, and power on the device. For details about installing a device, see the device’s Hardware Guide (on the Routing > View More section of the TechLibrary) or the Quick Start Guide

Prerequisites

You must have the Installer role to use the field technician UI in Paragon Automation. Before you can onboard a device using the field technician UI in Paragon Automation, you’ll need to ensure the following:

A Super User must:
a. Create an account in Juniper Cloud and log in to Paragon Automation.
b. Create an organization and a site to which the device needs to be onboarded.
c. Add one or more users with the Network Admin role.
d. Add users, who will onboard devices, with the Installer role.
A Super User or a Network Admin must:
a. Create network resource pools, device and interface profiles, and a network implementation plan.
b. Check if a firewall exists between Paragon Automation and the device. Configure the firewall to allow outbound
access on TCP ports 443, 2200, 6800, and 32,767.
c. Configure static routes on the device to reach the Internet:
Run user@device#set routing-options static route 0.0.0.0/0 next-hop Gateway- IP-address
d. Configure a DNS server on the device to resolve domain names or allow the device to access an external DNS
server (for example, 8.8.8.8).
e. Configure NTP server on the device
As a user with the Installer role, you’ll need:
a. A handheld device (for example, a smartphone) or a laptop with Internet connectivity, which you can use to
access the field technician UI in Paragon Automation
b. The link to access the field technician UI
c. The credentials to log in to Juniper Cloud
d. Name of the organization and the site where the device needs to be onboarded

Up and Running

Onboard a Device

Paragon Automation provides a field technician UI to view the list of devices and onboard them. You must be a user with the Installer role to onboard devices in Paragon Automation.

To onboard a device to your organization using Paragon Automation:

Power on the device.
Log in to Paragon Automation (https://manage.cloud.juniper.net) using your credentials from a handheld device or a laptop and access your organization.
The Onboard a Device page appears.

NOTE : You can also onboard devices from the Device List page, which contains details of devices that are available for onboarding. To onboard a device from Device List page, click the device that you want to onboard and proceed to step 5.

Enter the serial number of the device and click Next.
If the serial number is associated with the device in the network implementation plan, the page displays the device name, model, serial number, and the site where the device is to be installed.
However, if the serial number of the device is not associated with the device in the network implementation plan, you can associate the serial number with the device and onboard it.
(Optional) Follow these steps if the serial number is not associated with the device that you want to onboard.
a. Click Select to select the device that you want to associate with the serial number.
The Device List page appears.
b. From the Onboard section in Device List page, select the device that you want to associate with the serial number.
c. (Optional) On the Device List page, verify that the serial number is displayed for the device you selected.
Click Yes to proceed with the onboarding.
If a network implementation plan exists, the Add a Device page appears. The page provides information about the management interface of the device and any instructions (for example, displayed as re0:mgmt-0.0: Insert QSFP28) for inserting plugg ables and connecting cables to the management interface. If a network implementation plan
does not exist for the device, you are prompted to adopt the device. See “Adopt a Device” on page 6.
Insert a pluggable and connect the cable to the management interface as instructed.
Click Adopt device manually to view and copy the outbound SSH configuration.
From the pop-up that appears, click Copy.
The outbound SSH configuration is copied to your clipboard.
a. Log in to the device using SSH and enter configuration mode.
b. Paste the contents of the clipboard and commit the configuration.
The device is now connected with Paragon Automation. Paragon Automation starts pushing the device configuration and performing tests configured in the network implementation plan. The Management Connectivity field on the UI turns green when Paragon Automation starts the tasks specified in the network implementation plan.
Paragon Automation authenticates the device and verifies the validity of the software installed and displays the results.
Click Next to view the Install Ports page.
On the Install Ports page, you can view the list of ports and the type of pluggables to be inserted in the ports. You can click the expand icon as shown in Figure 1 on page 4 to view more information about the onboarding tests.

Figure 1: Install Ports
Insert pluggables as indicated and click Next.
On the Install Cables page, connect the cables as indicated.
After you connect the cables, Paragon Automation initiates ping tests to the destinations defined in the network implementation plan.

Figure 2: Install Cables

Click Next to view the Testing page.
The Testing page shows the progress of all the tests being executed and their results.
Besides testing the interface health, Paragon Automation also checks the health of chassis components (fans, power supply modules (PSM), and line cards), and runs compliance scans to determine the authenticity, vulnerabilities, and trustworthiness of the device. At the end of the onboarding process, the GUI displays the results of all the tests and flags any issues that Paragon Automation has detected.

Figure 3: Testing Page

Resolve any issues by using the failure reason provided or contact the network operations center (NOC) engineer, if needed.
(Optional) Click Resume Onboarding to resume testing from where the onboarding process paused.
NOTE : You use the resume onboarding option only if the onboarding process stops halfway due to errors.
After you resolve the issues, click Done. Paragon Automation resumes the onboarding tests until the issue is resolved and the device is onboarded successfully. You can view progress of the tests and the results by clicking the device from Completed section on the Device List page.
(Optional) Repeat steps 1 through 15 to onboard more devices.
See Install and Onboard the Device (Day 0 Activities).

Adopt a Device

We recommend that you define and use a network implementation plan to onboard a device. However, if a network implementation plan is not available for a device, you can onboard the device by adopting it. To onboard devices that are not associated with a network implementation plan, Paragon Automation provides the outbound SSH configuration. You must commit the configuration on the device to enable it to connect with Juniper Cloud.

To adopt a device:

Log in to Juniper Cloud from a hand held device or a laptop and access the organization with which the device is to be associated.
On the Onboard a device page, enter the serial number of the device you want to onboard and click Next.
You are prompted to adopt the device if Paragon Automation cannot find a network implementation plan for the device.
Alternatively, you can click the Device List menu to view the list of devices available for onboarding and select the device that you want to onboard.
Click Adopt.
When prompted, select the site to which the device is to be associated and click Adopt.
Paragon Automation displays the outbound SSH configuration that you must commit on the device to enable it to connect to Juniper Cloud.
Click Copy to copy the outbound SSH configuration.
Log in to the device using SSH and enter configuration mode.
Paste the contents of the clipboard and commit the configuration.
Optional) Click the Device List menu to verify that the onboarded device is listed in the Completed section.

Keep Going

What’s Next

Now that you’ve onboarded the device, here are some things you might want to do next.

JUNIPER NETWORKS Onboard Cloud-Ready Devices - Now that you've onboarded the
device, here are some things you might want to do next.

https://www.juniper.net/documentation/us/en/software/paragon-automation- as-a-service/user-guide/topics/topic-map/user-account-information.html

General Information

JUNIPER NETWORKS Onboard Cloud-Ready Devices - General
information

https://www.juniper.net/documentation/us/en/software/paragon-automation- as-a-service/user-guide/topics/concept/device-lifecycle-managment.html
https://www.juniper.net/documentation/us/en/software/paragon-automation- as-a-service/user-guide/topics/concept/observability-overview.html
https://www.juniper.net/documentation/us/en/software/paragon-automation- as-a-service/user-guide/topics/concept/trust-and-compliance-overview.html
https://www.juniper.net/documentation/us/en/software/paragon-automation- as-a-service/user-guide/topics/concept/user-roles.html

Learn With Videos

Our video library continues to grow! Here are some great video and training resources that will help you expand your knowledge of Juniper Network Products.

JUNIPER NETWORKS Onboard Cloud-Ready Devices - Learn With
Videos

https://www.youtube.com/user/JuniperNetworks/playlists
https://learningportal.juniper.net/juniper/user_activity_info.aspx?id=11478

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
Copyright © 2023 Juniper Networks, Inc. All rights reserved.