Description

This article will help you to understand why device onboarding is failing on paragon insight.

Symptoms

Netconf session from Paragon Insight is established to the device; however, outbound-ssh session is not established due to which device onboard is failing. 

"netstat -an" output from device cli
root@JtacTest-MX240:~ # netstat -an | grep "Paragon insight IP"
tcp4 0 0 10.x.x.x.49814 10.y.y.y.7804 SYN_SENT
tcp4 0 0 10.x.x.x.830 10.y.y.y.53663 ESTABLISHED
tcp4 0 0 10.x.x.x.830 10.y.y.y.40256 ESTABLISHED

Solution

The issue may occur if a firewall filter is blocking outbound SSH connections on the device. Correct the firewall filter configuration and then retry the device onboarding.

Modification History

2024-07-30 : Article Created