Description

The following KB is for an issue in which the Juniper Networks EX/QFX Series Switches is unable to connect to the Juniper Networks Mist Cloud through an SD-WAN appliance. 

Symptoms

DNS and ping are working.

You can telnet to oc-term.mistsys.net over port 2200 or the appropriate one for your region.
You can telnet to ztp.mistsys.net over port 443 or the appropriate one for your region..
'user@switch> show system connections | match 2200' gets stuck in TIME_WAIT and then restarts. 

There are security policies that allows this traffic but traffic is still not passing. You might also see SSH connection reset by peer. 

Solution

Make sure that the SSH version string is within the configured maximum in the SD-WAN appliance. Once the SSH version string maximum parameter is properly configured in the SD-WAN device, the switch should join the Mist cloud. 

Modification History

2023-09-15: KB created.