Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Zero Touch Provisioning Overview


Zero Touch Provisioning (ZTP) enables you to configure and provision devices automatically, and thus reduces the manual intervention required for adding devices to a network.

In Contrail Service Orchestration (CSO), the ZTP of a device involves the following high-level steps:

  1. Activate the device that is associated with the site.

  2. The device contacts CSO through the Redirect Server or Phone Home Client (PHC) and the stage-1 (initial) configuration is automatically applied to the device, allowing CSO to establish a secure management connection with the device. The process of applying the stage-1 configuration to the device is called as bootstrapping.

  3. CSO automatically applies the provisioning configuration on the device after the completion of the bootstrapping process.

    The provisioning configuration is generated by CSO and is applied on a device to make it functional and ready for the intended functionality. For example, provisioning configuration can include IPSec or GRE tunnel configurations, virtual route reflector (vRR) configuration, routing configuration, and so on.

    For additional functionality, you can create the stage-2 configuration and apply the configuration to the device by using the CSO GUI. For example, the stage-2 configuration can include LAN configuration, firewall policies, and so on.

After the ZTP process is complete, the device is provisioned.

Figure 1: Overview of Zero Touch Provisioning in CSO
Overview of
Zero Touch Provisioning in CSO

Devices Supported

In CSO, you can add the following devices (including dual CPE devices, if applicable), by using ZTP:

  • NFX150 and NFX250 Series

  • SRX300, SRX320, SRX340, SRX345, SRX550 High Memory(SRX550M), and SRX1500,

  • vSRX on an x86 server


Using ZTP offers the following benefits:

  • Simplified, faster, and automated deployment of configurations.

  • Auto-generated configurations that are more accurate.

  • Faster scaling of the network because you need not manually apply configuration on each device in the network.