Description

Tried to perform first outbound-ssh connection to Sky Enterprise, but continually fails.

Symptoms

  • Connection to Sky Enterprise or ZTP is done via front panel port on NFX device

  • DHCP address obtained from upstream device (router performing NAT) is on 192.168.1.0/24 subnet, which then NAT's out to the ISP's network

Solution

The 192.168.1.0/24 subnet is reserved for use on the virbr0 bridge, and it is used for liveliness between internal management addresses for JDM, vJUNOS0, and VNF's.  This subnet will not route beyond the virbr0 bridge, and therefore will not route out to either the Juniper Redirect Server (used for Phone Home, or ZTP) or Sky Enterprise.

In order to connect to Sky Enterprise, make sure the DHCP address you are obtaining IP address from the upstream router which is not in the range of virbr0 IP address scheme.

For JUNOS version 15.1X53-D40 through 15.1X53-D47, the virbr0 IP address scheme is 192.168.1.0/24.

For JUNOS versions 15.1X53-D470 and above, the virbr0 IP address scheme is 192.0.2.0/24.

When connecting to the Internet, make sure the address assigned is outside of any of the above ranges.  After changing the internal address of your NAT device, you will be able to connect to either Sky Enterprise or for ZTP.