Zero Touch Provisioning Overview
Zero Touch Provisioning (ZTP) enables you to configure and provision devices automatically, and thus reduces the manual intervention required for adding devices to a network.
In Contrail Service Orchestration (CSO), the ZTP of a device involves the following high-level steps:
Activate the device that is associated with the site.
The device contacts CSO through the Redirect Server or Phone Home Client (PHC) and the stage-1 (initial) configuration is automatically applied to the device, allowing CSO to establish a secure management connection with the device. The process of applying the stage-1 configuration to the device is called as bootstrapping.
CSO automatically applies the provisioning configuration on the device after the completion of the bootstrapping process.
The provisioning configuration is generated by CSO and is applied on a device to make it functional and ready for the intended functionality. For example, provisioning configuration can include IPSec or GRE tunnel configurations, virtual route reflector (vRR) configuration, routing configuration, and so on.
For additional functionality, you can create the stage-2 configuration and apply the configuration to the device by using the CSO GUI. For example, the stage-2 configuration can include LAN configuration, firewall policies, and so on.
After the ZTP process is complete, the device is provisioned.
In CSO, you can provision the following devices (including dual CPE devices, if applicable), by using ZTP:
NFX150 and NFX250 Series
SRX300, SRX320, SRX340, SRX345, SRX550 High Memory (SRX550M), and SRX1500
vSRX on an x86 server
EX2300, EX3400, and EX4300 Series switches
Using ZTP offers the following benefits:
Simplified, faster, and automated deployment of configurations.
Auto-generated configurations that are more accurate.
Faster scaling of the network because you need not manually apply configuration on each device in the network.