Description

This article describes how to return the configuration on an SRX device to the factory default version (configuration file that is shipped with the device).

For other topics about SRX, go to the SRX Getting Started main page.

Symptoms

  • How to reset the configuration to the factory default
  • How to perform a factory reset on SRX devices

Solution

There are three ways to perform a factory reset on an SRX device in order to revert it to its factory default configuration.

Using the Reset Config Button

Note: The Reset Config button is available only on the SRX Branch devices.

You can use the Reset Config button on the front panel of the SRX device to reset the device to its factory default configuration. The Reset Config  button is recessed to prevent it from being pressed accidentally; so you need to insert a small probe (for example, a straightened paper clip) to press the button.

Caution : If you use the Reset Config button to reset the device to its factory default configuration, all the configuration files, including the rescue configuration and backup configurations, will be deleted.

Note:  Using the Reset Config button will not trigger a reboot automatically. For SRX3xx platforms, Ethernet switching default configurations, which need a reboot will not take effect. To make the whole configuration take effect, after the status LED goes back to solid green, you will need to power off and power on the device to reboot it.

For instructions, refer to the following links:

SRX100

SRX110

SRX210

SRX220

SRX240

SRX300

SRX320

SRX340

SRX345

SRX550

SRX650

SRX1500

SRX4100

SRX4200

Using the load factory-default Command

If you are still able to log on to the device via the CLI, you can use the  load factory-default  command to reset the device to its factory default configuration. This command loads and commits the factory configuration, but it does not delete other configuration files on the device.

For more information about this command, refer to the documentation on Changing from Router Context to Secure Context​.

  1. Type the load factory-default command:
root@host# load factory-default
  1. Use the set system root-authentication plain-text-password command to set a new root password for the device:
root@host# set system root-authentication plain-text-password
  1. Type the root password and retype it to confirm it:
New password:
Retype new password:

Caution: Prior to committing the changes, if an IP address is not assigned for the "ge-0/0/0" interface, create a local user account and type the routing information, either via the CLI configuration or DHCP. The SRX device will no longer be remotely accessible.

To manage the SRX device, you must connect a PC or laptop to the physical console or attach the PC or laptop to a subnet that is directly connected to the ge-0/0/0 interface, which is assigned an IP address of "192.168.2.1."

  1. Use the commit and-quit command to commit the configuration and exit configuration mode, if the configuration contains no errors and the commit is successful:

root@host# commit and-quit

After the commit, the factory default configuration will be the running configuration.

Using the Root Password Recovery Process

If you are unable to log on to the device, use the root password recovery process to reset the device to its factory default configuration. You must have console access to use the password recovery process to perform the factory reset.

 

Modification History

2025-12-16: Minor, non-technical changes made to optimize content for search

2023-08-29: Added Training link for "Introduction to Junos Operating System"

2020-12-31: Added note on rebooting with power off/power on

2020-01-07: Removed references to EOS hardware

2019-06-18: Checked content for accuracy, updated links.

2017-11-06: Update documentation link and add links for new HW platforms.

Related Information

Training Courses: