Description

This article outlines the process of utilizing the Mist Remote Shell to manage SSH connections and perform a factory reset on an EX switch without releasing it from the Mist UI.


When adopting the Switches using ZTP, the switches might not connect to the Mist cloud.


The solution is to do a zeroize to the Switch.


Refer: https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade/topics/topic-map/zero-touch-provision.html

Symptoms

Without physical console access, troubleshooting becomes severely limited, relying solely on alternative remote management methods, if available.


Phone home service will not be available to complete the ZTP.

Solution

Accessing Mist Remote Shell:

  • Initiate a remote shell session with the Mist platform to connect to the SRX device.

Disabling the Protect_re Filter:

  • On the SRX, disable the protect_re filter. (If protect RE is enabled)
  • Important: Modify the filter settings to allow SSH connections specifically for the Switch subnet 192.168.2.0/24. In case the Switch IP is 192.168.2.XX

Establishing SSH Connection:

  • From the SRX, SSH into the EX switch using the Root password provided in the Mist platform.

Zeroizing the Switch:

  • Execute the command:
request system zeroize
  • This command will perform a factory reset on the EX switch.

Automatic Re-ZTP:

  • After the zeroization process, the EX switch will automatically re-ZTP to the Mist platform and does not need to be released from Mist.

Note: From any upstream/downstream device you can SSH to the ZTP switch that you want to zeroize.


 

Modification History

2024-12-16 : Article Created