Juniper NETWORKS Onboarding Data Center Switches

Specifications
- Product Name: Apstra Data Centre Switch Automation Solution
- Compatibility: Juniper data centre switches
- Automation Type: Intent-based networking
- Key Feature: Distributed agent architecture
Product Usage Instructions
- System agents are essential components for managing devices with the Apstra automation solution.
- Ensure you have system agents installed on all devices before proceeding.
- Understand the various device configuration stages outlined in the user guide to effectively manage and operate your data centre fabric.
- Configure the management interface and IP address on the out-of-band management network.
- Click on “Create Onbox Agent(s)” or “Create Offbox Agent(s)” to initiate the installer.
- Enter the required information in the form and click “Create” to install the agent.
- Wait for the installation to complete. The device will appear in a quarantined state.
- Follow additional steps to move the device to the OOS-Ready state for blueprint assignment.
- Utilise Apstra ZTP for automatic discovery and onboarding of new switches or devices reset to factory settings.
- Check ZTP server status via the Apstra server GUI for visibility and management.
Begin
- This guide walks you through the steps required for getting your Juniper data centre switches ready to be deployed with the Apstra automation solution.
- The main tasks are to install device system agents on devices, then bring those devices under Apstra control, either manually or automatically with Apstra ZTP. We’ll cover both methods.
- Once you’ve onboarded your devices, they become Managed Devices, ready to be assigned in one of the Apstra server’s blueprints.
NOTE: Before you begin, you must install and configure the Apstra server. For more information, see the Juniper Apstra Quick Start
Apstra automates data centre networks of all sizes and complexities. Intent-based networking makes all aspects of operating data centre fabrics simpler, reliable, and efficient. A key to achieving such results is how the solution controls each individual device that comprises a managed fabric. The distributed agent architecture is an important component of what makes Apstra a unique and powerful automation solution. Let’s discuss the various elements that comprise the onboarding process.
System Agents
- Device system agents manage communication between devices and the Apstra server.
- They’re responsible for performing configuration on the devices.
- They also facilitate the transfer of device telemetry, a key component of intent-based analytics (IBA).
- For all these elements to operate smoothly, Juniper puts supported device models and NOS software through a rigorous system of testing.
- It’s imperative that you reference the Qualified Device and NOS versions tables when choosing hardware and software versions for your data centre fabric.
- You can install agents directly on a switch in the user space in the NOS (onbox), or you can install them in containers within the Apstra cluster (offbox) and communicate with the device that way.
- You’ll select one depending on your scenario.
- Some NOS types don’t support on-box agents. And some network operators don’t want to install agent software directly onto network devices.
- If you elect to use off-box agents, you must make considerations for cluster capacity to accommodate their location.
Device Configuration Stages
- For the Apstra server and managed devices to communicate, Apstra uses an out-of-band management network.
- For them to be able to communicate, the IP address, user credentials and basic configuration parameters must be in place.
- This minimal configuration state is called “pristine configuration.” Once it’s in place and the switch and server can communicate, you can install a device agent.
- Apstra then captures the existing device configuration and saves it as a baseline. See a pristine configuration example below.

- Pristine configuration is the first of several stages that a device can be in when it’s under Apstra management.
- Devices are placed into various configurations as they are moved in and out of operation.
- To appreciate how the solution operates, it’s essential to understand these stages.
- Take time to review the terminology and lifecycle details in the Device Configuration Cycle section of the Juniper Apstra User Guide.
Onboarding Manually
The minimum steps needed to manually establish connectivity between the switch and the server are as follows:
- Configure the management interface and IP address on the out-of-band management network. Include a default route for the management interface to reach the server.
- Set user credentials and password needed for the Apstra server to establish a connection with the switch.
- Enable the switch’s API that’s used by the server to configure the device throughout its lifecycle.
The exact commands to perform the above steps vary depending on the selected vendor NOS. Refer to the Juniper Apstra User Guide for details for supported vendors.
Once the switch can ping the Apstra server, you can use the Device Installer to install the agent. Do this from the Managed Devices view.

- To initiate the installer, click either Create Onbox Agent(s) or Create Offbox Agent(s) in the upper right.

Enter the required information into the Create Agent(s) form that opens, then click the Create button. A bit of time is required for the server to perform the installation. When it’s done the device appears in the table view in the quarantined state. There are additional steps that move devices in this state to the OOS-Ready state, where they are available to be assigned to a blueprint.
NOTE: Use of the Device Installer to bring switches into the Apstra automation platform is shown in detail in the Managed Devices section of the Juniper Apstra User Guide.
Onboarding with Apstra ZTP
- Apstra ZTP resides on its own VM, separate from the Apstra server.
- It automatically discovers new switches and those that have been reset to factory settings (zeroised)
- Use the Apstra server GUI to check the state of the ZTP server and the management of devices.
- This provides visibility into all aspects of the process, making it easy to onboard any number of devices quickly and with the desired settings and NOS versions, place.

The ZTP service provides DHCP for automatic IP addressing, installation of pristine configurations and installation of the system agents. Apstra ZTP performs these steps:
- DHCP (optional)
- The device requests an IP address via DHCP.
- The device receives the assigned IP address and a pointer to the specified OS image.
- Device Initialisation
- The device downloads the customizable ZTP script via TFTP.
- The device executes the script, preparing it for management. The OS image is checked and is upgraded, if necessary.
- The device admin/root password is set.
- System Agent ID is initialised.
- Agent Initialisation
- The ZTP script leverages APIs to initiate the agent installation. It recognises automatically whether an on-box or off-box is needed.

The Apstra ZTP service is a comprehensive set of tools that you can customise in various ways to adapt to your specific requirements. Once you have downloaded the server image and performed any customisations, it’s ready to simplify bringing switches into the Apstra automation platform.
NOTE: The Apstra ZTP service requires installation and configuration to adapt to your specific environment. You can find step-by-step instructions for installing and onboarding devices see the Apstra ZTP chapter in the Juniper Apstra User Guide.
Now we’ve seen how devices are initialised. Let’s now look at how we move them into an operating network.
Up and Running
Managed Devices
- You’ve followed the manual steps or you’ve used ZTP to get your devices installed with their management IP addresses and device agents. Plus, your switches are registered with the Apstra server. But they’re not quite ready for deployment.
- Just after being added, devices are placed into the Out-of-Service Quarantine state. To place them under full control of the system, they need to be acknowledged.

- Once you’ve acknowledged your devices, you can drill into numerous aspects of the device’s status.
- There are additional tools to show the agent state, allow us to work with the Pristine Config and to view device telemetry.

NOTE: Use of the tools in the Managed Devices view is covered in the Managed Devices section of the Juniper Apstra User Guide.
- ZTP can initiate NOS upgrades if needed. But what do you do if you need to upgrade the software after the devices are under the control of the system? The good news is that the Managed Devices page hosts a tool that can keep your NOS versions fresh and secure.
- This is critical for the network to operate properly.
- It’s also a convenient manner to deal with any issues that may be encountered that require you to perform an update.
- The NOS management tool offers flexibility for image storage location and visibility into installation progress.

NOTE: Upgrading the NOS of a device from the Managed Devices view is described in detail in the Upgrade Device NOS section of the Juniper Apstra User Guide.
Keep Going
- Now that you have your devices connected and in tip-top condition, you can keep going onto the next stages of automating your data centre deployment.
- Use these links to continue your journey with Apstra data centre automation.
What’s Next?
| If you want to | Then |
| Replace the SSL certificate with a secure one | See the Apstra Installation / Configure Apstra Server / Replace SSL Certificate section in the Juniper Apstra Installation and Upgrade Guide |
| Configure user access with user profiles and roles | See the Platform / User/Role Management section in the Juniper Apstra User Guide |
| Build your virtual environment with virtual networks and routing zones | See the Staged / Virtual section in the Juniper Apstra Usr Guide |
| Learn about Apstra telemetry services and how you can extend them | See the Devices / Telemetry section in the Juniper Apstra User Guide |
| Learn how to leverage intent-based analytics (IBA) with Apstra | See Intent-Based Analytics with apstra-cli Utility in the Juniper Apstra User Guide |
Learn with Videos
- Our video library continues to grow! We’ve created many videos that demonstrate how to do everything from installing your hardware to configuring advanced Junos OS network features.
- Here are some great videos and training resources that will help you expand your knowledge of Junos OS.
| If you want to | Then |
| Watch short demos to learn how to use Juniper Apstra to automate and validate the design, deployment, and operation of data centre networks, from Day 0 through Day 2+ | See the Juniper Apstra Demos and Juniper Apstra Data Center videos on the Juniper Networks Product Innovation YouTube page. |
| Get short and concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies | See Learning with Juniper on Juniper Networks’ main YouTube page. |
| View a list of the many free technical trainings we offer at Juniper | See the Getting Started page on the Juniper Learning Portal. |
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
Copyright © 2025 Juniper Networks, Inc. All rights reserved.
FAQ
Q: What is Apstra's key feature for managing data center networks?
A: Apstra utilizes intent-based networking to simplify, improve reliability, and enhance efficiency in operating data center fabrics.
Q: Can I onboard devices manually with Apstra?
A: Yes, you can manually establish connectivity between switches and the server by configuring the management interface and using the Create Agent s feature.
Q: Where can I find detailed information on managing devices with Apstra?
A: Refer to the Managed Devices section of the Juniper Apstra User Guide for detailed instructions on bringing switches into the Apstra automation platform.
Documents / Resources
![]() |
Juniper NETWORKS Onboarding Data Center Switches [pdf] User Guide Onboarding Data Center Switches, Data Center Switches, Center Switches, Switches |

