Add Switches to an Existing SD-LAN Site

You can add one or more EX Series switches (physical EX Series switches or EX Series Virtual Chassis) to an existing SD-LAN site.

Procedure

To add a switch to an existing site with a single switch behind an Internet gateway:

Select Resources > Site Management.
The Sites page appears.
Do one of the following:
- Procedure
  1. Select the site to which you want to add the switch.
  2. Click Add > Add Switch.
    The Add Switch page appears.
- Procedure
  1. Click the Site-Name link of the site (to which you want to add the switch) in the Sites column.
    The Site-Name page appears.
  2. On the Devices tab, click Add Switch.
    The Add Switch page appears.

Procedure

Complete the configuration according to the guidelines provided in Table 71.
Note Fields marked with an asterisk (*) are mandatory.
Review the configuration from the Summary tab.
(Optional) Click the Edit links within the summary to go directly to a specific page of the wizard and modify the configured settings.
Click OK to add the switch to the site.
The site activation process is initiated and the Site Activation: Site-Name page appears displaying the progress of the steps executed for activating the switch. If you add one or more EX Series switches, the progress of the steps executed for activating each switch is displayed.
- If the Zero Touch Provisioning (ZTP) toggle button is enabled (default), CSO pushes the stage-1 and stage-2 configurations and provisions the switch.
  This process occurs immediately after the activation process, for which you entered the activation code or selected auto-activation.
  Note Stage-1 configuration is the initial configuration that allows basic connectivity to a device, which is pushed to the device.
  The configuration that is pushed to the device after it has connected to CSO is called stage-2 configuration.
- If you disabled the Zero Touch Provisioning (ZTP) toggle button, you must manually configure the stage-1 configuration (as provided by CSO) on the switch.
  Procedure
  To manually configure the stage-1 configuration:
  1. On the Site Activation: Site-Name page, the Click to copy stage-1 configuration link appears after the Prestage Device step completes successfully.
  2. Click the Click to copy stage-1 configuration link.
    The stage-1 configuration page appears displaying the stage-1 configuration to be copied to the EX Series device.
  3. Copy the stage-1 configuration and log in to the console of the EX Series switch.
  4. Enter the configuration mode, paste, and commit the configuration.
    After the stage-1 configuration is committed, the switch has the outbound SSH configuration to connect with CSO.
    CSO then provisions the switch.

Table 71 provides guidelines on using the fields on the Add Switch page.

Table 73: Fields on the Add Switch Page

Field	Description
Device Profile
Device Name	Enter a name for the switch. You can use alphanumeric characters and hyphen (-). The maximum length allowed is 15 characters.
Device Type	Select the type of switch—EX2300, EX3400, EX4300, EX4600, and EX4650.
Device Model	Select the model for the switch you specified in the Device Type field. The models vary in the number and type of ports the switch contains. For example, If you selected EX3400, select a model such as EX3400-24P, EX3400-48P, EX3400-24T among others.
Switch Details
Virtual Chassis	Click the toggle button to enable or disable (default) adding the switch as a Virtual Chassis. If you enable this toggle button, you must select the method of provisioning the Virtual Chassis. Note: Before you add a Virtual Chassis in CSO, ensure that the Virtual Chassis is setup. See Prepare a Virtual Chassis for Onboarding to CSO for information about setting up a Virtual Chassis. In Release 5.1.1, you cannot add a new member or change the roles assigned to the members after you onboard a Virtual Chassis. To change the roles, you must delete the Virtual Chassis, form a new Virtual Chassis, and then, onboard the new Virtual Chassis.
Serial Number	If you disabled the Virtual Chassis toggle button, specify the serial number of the physical switch. You can either view the serial number on the label that is present on the rear panel of the switch or log in to the CLI of the switch in operational mode and enter show chassis hardware. The serial number is a case-sensitive, alphanumeric string.
Method	Select the method of provisioning the Virtual Chassis: Auto Provisioning: The Virtual Chassis automatically determines the roles (primary, backup, and line card) of the member devices. If you select this option, you must enter only the serial number of the primary device in the Master Serial Number field that appears. Pre Provisioning: You can determine the roles (primary, backup, and line card) of the member devices in the Virtual Chassis. If you select this option, you must provide the serial number, device model, device type, and role of all the member devices of the Virtual Chassis in the fields that appear. Note: In the case of preprovisioning, the primary device must always be designated as Member 0. For both these methods, ensure that: The devices in the Virtual Chassis are fully installed and ready to be configured in the site. In addition, all member devices must be powered on. This means that the output of the show virtual-chassis status command must display all the member devices of the Virtual Chassis and the devices must be in Present (Prsnt) state. Note: If you do not have access to the serial console port for preprovisioning, only the primary device must be powered on first. The primary and backup member devices have internet access to the Juniper redirect server and CSO. All member devices in the Virtual Chassis are running the same firmware (either JUNOS 18.4R2.7 or 18.4R3.3). For EX3400, EX4300, EX4600, and EX4650 devices to act as a Virtual Chassis, all the corresponding member devices are interconnected through Virtual Chassis ports (VCPs). For EX2300 devices to act as a Virtual Chassis, the 10-Gbps Ethernet ports are configured as VCPs manually and the member devices are interconnected.
Master Serial Number	If you selected Auto Provisioning, enter the serial number of the primary device (from the fully-formed Virtual Chassis). To obtain the serial number, log in to the CLI of any device that is part of the fully-formed Virtual Chassis, in operational mode, and enter show virtual-chassis. The list of the member devices in the Virtual Chassis, along with the serial number and role appear. The primary device is indicated as Master under Role. Alternatively, you can view the serial number on the barcode sticker, which is on the rear-panel of the switch.
Member <member-number>	If you selected Pre Provisioning, enter the serial numbers of all the devices (from the fully-formed Virtual Chassis or based on what roles you decide to assign each Virtual Chassis member), and also select the device type and model from the list. Note: You must enter the serial number of the primary device only in the Member 0 field. If you do not have access to the serial console port of the virtual chassis, the first member device that is powered on is considered the primary. Enter the serial number of this device in the Member 0 field. Click the Add (+) icon to add a member device or the Remove (-) icon to remove a member device. For information on the number of member devices that can be added, see Supported Device Types, Modes, and Number of Members Allowed in a Virtual Chassis. Note: The Routing Engine check box corresponding to Member 0 is always selected, indicating that Member 0 always acts as the primary. To select a member device as backup, click the Routing Engine check box corresponding to that member device; the remaining member devices act as line cards.
Zero Touch Provisioning	Click to enable or disable ZTP on the switch. If you disable ZTP, you must manually copy and paste the Stage-1 configuration on the switch during site activation. See Step-by-Step Procedure for details Note: Only EX Series switches running 18.4R2.7 or 18.4R3.3 firmware support ZTP. EX4300-MP, EX4600, and EX4650 switches do not support Phone-Home client. You must disable ZTP and manually configure the stage-1 configuration on the switches.
Boot Image	Select the boot image from the list if you want to upgrade the image for the switch. The boot image is the latest device image that is uploaded to the image management system. The boot image is used to upgrade the device when the CSO starts the ZTP process. If the boot image is not provided, then the device skips the automatic upgrade procedure. The boot image is populated based on the device template that you have selected while creating a site. Note: This option is not available for a Virtual Chassis. To provision a Virtual Chassis in CSO, you must manually upgrade the image to either JUNOS 18.4R2.7 or 18.4R3.3.
Auto activate	Click the toggle button to enable or disable automatic activation of the switch. When you enable this field, zero-touch provisioning of the switch is automatically triggered when the device communicates with CSO. Note: You must physically connect the switch to the CPE and power it on for the switch to be automatically activated when you enable this option.
Activation code	When the Auto activate field is disabled, enter the activation code to be used for manually activating the switch. For information, see Manually Activating a Switch.
Port Profile You are directed to this page only if you have added a physical switch or a preprovisioned Virtual Chassis. If you have added an autoprovisioned Virtual Chassis; you are automatically directed to the Summary page. This is because, in the case of autoprovisioning, port profiles can be configured only after provisioning the Virtual Chassis.
Access Profiles List	Displays the access profile configured on the device from the Access Profiles page (Configuration > SD-LAN > Access Profiles). For details of the fields displayed on the Access Profiles List table, see About the Access Profiles Page.
Interface List	Displays the list of interfaces present on the device. You can assign a port profile and VLAN to the ports from here. For more information on the fields displayed in the Interface List table, see Table 62. Optional: To assign a port profile and VLAN to a port: Procedure Click Edit Configuration on the top-right corner of the Interface List table. The Configuration page appears. From the Port Profile list, select a port profile to be assigned to the port. Note: The port profile must already be created from the Port Profiles page (Configuration > SD-LAN > Port Profiles) for it to be listed here. In the VLAN field, if the port is configured as a trunk port in the port profile, assign multiple VLANs by selecting the VLANs in the Available column and clicking the right-arrow to move them to the Selected column. If the port is configured as an access port in the port profile, you can assign only one VLAN. From the Native VLAN list, select a VLAN that you want to configure as native. This option appears only if you select Trunk port profile from the Port Profile list. Optional: Click the Search icon to search for a specific port in the list.

Table 62 describes the fields on the Interface List table.

Table 74: Fields on the Interface List Table on the Port Profile Page

Field	Description
Port	Name of the port.
VLAN ID	ID of the VLAN configured on the port. If the port is a trunk port, all the VLAN IDs configured on the port are displayed.
Native VLAN	ID of the VLAN configured to accept untagged frames.
Port Profile	Port profile used for configuring the port. If the port is configured manually, the column displays Manually Configured.

WHAT'S NEXT

After you onboard the switch, configure the switch in your network; see the Configure an EX Series Switch chapter in this guide.

Help us to improve. Rate this article.

Feedback Received. Thank You!

Add a Switch to an Existing SD-WAN Site Or Next-Generation Firewall Site

Managing LAN Segments on a Tenant Site