Description

AFT Pictor is disconnected from the Juniper router due to an authentication error from the device.

Solution

Objective:
To resolve the authentication issue and restore connectivity between the AFT Pictor device and the Juniper router.

 1. Verify Basic Connectivity
  • . Check Physical Connections:
   - Ensure that all cables are securely connected.
   - Inspect for any loose or damaged connections.
  • Verify Interfaces:
   - Confirm that the interfaces on both the Pictor device and the Juniper router are up and operational.

 2. Check Configuration Settings
  •  Pictor Device:
   - IP Address, Subnet Mask, and Gateway Settings:
     - Verify that these settings are correctly configured on the Pictor device.
   - Authentication Settings:
     - Check for any specific authentication settings or credentials configured on the Pictor device.
  • Juniper Router:
   - Configuration Review:
     - Review the configuration related to the Pictor device on the Juniper router.
     - Look for any authentication settings such as IPsec, SSH, or SNMP.
   - Authentication Method:
     - Ensure that the authentication method used by the Pictor device matches what is configured on the Juniper router.

3. Verify Authentication Details
  •  Credentials:
   - Confirm that the username and password (or other credentials) configured on the Pictor device match those expected by the Juniper router.
  • . Authentication Protocols:
   - Ensure that both devices are using compatible authentication protocols (e.g., TACACS+, RADIUS).
  • Certificates:
   - If certificate-based authentication is used, verify that the certificates on both devices are valid and properly installed.

 4. Review Logs
  • . Pictor Device Logs:
   - Check the system or error logs on the Pictor device for specific error messages related to authentication issues.
  • Juniper Router Logs:
   - Review the router’s logs using the following command:
     show log messages
     
   - Look for any relevant authentication error messages or connectivity issues.

 5. Perform Connectivity and Authentication Tests
  • Ping/Traceroute:
   - Perform a ping or traceroute between the Pictor device and the Juniper router to ensure there is basic network connectivity.
  •  Authentication Tests:
   - Use appropriate commands or tools to test authentication from the Pictor device to the Juniper router. For example, if using SSH, try connecting manually to verify authentication.

 6. Reconfigure or Reset
  • Reconfigure Authentication:
   - If there have been changes or updates, reconfigure the authentication settings on both devices.
  • Factory Reset (if necessary):
   - As a last resort, consider resetting the Pictor device to factory settings and reconfiguring it, ensuring correct settings from scratch.

 7. Collect Diagnostic Information

Collect the following information from the Juniper router:
>show system connections | grep 10162
>show network-agent statistics detail gnmi
>show system fib-streaming
>show system services | display set
>show fib-streaming state
>show fib-streaming route-tables summary
>show network-agent statistics subscription-paths /network-instances/network-instance/afts/ detail (each iteration for every 5 minutes for 3-5 times)

Collect the following from the Pictor device:
- gRPCD logs
- RAW data

 8. Further Actions

- If everything appears correct and the issue persists, check the Pictor side to determine if any changes need to be made or if further troubleshooting is required.
 

Modification History

2024-09-11 : Article Created