Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
ContentIndex
  
[+] Expand All
[-] Collapse All

No index entries found.

Configure Approval Modes for Device Configurations

When you make configuration changes in Build mode, the changes are not deployed to devices automatically. You must manually deploy the changes to devices in Deploy mode. When you deploy configuration changes to a device, all pending configuration changes for that device are deployed. You can deploy the device configurations in the following two ways:

  • Auto Approval—In this mode, the device configuration changes are approved automatically by the system and do not require explicit (manual) approval by a configuration approver before they can be deployed. This is the default approval mode.
  • Manual Approval—In this mode, the device configuration changes must be explicitly approved by a configuration approver before the changes can be deployed to the device. An operator performs device configurations and creates a change request for that configuration and submits it for approval to one or more approvers. The approvers are notified by e-mail whenever a change request is created. If a configuration or a change to it is approved by an approver, then the operator is able to deploy it. If a configuration is rejected, the operator must make the necessary changes, resubmit the change request, and procure an approval before the configuration can be deployed. For manual approval, the Network Director - Configuration Approver role is available in Junos Space, which is specific to Network Director. A user with this role reviews device configurations and proposed changes to device configurations and can either approve or reject them.

Setting up the Approval Mode Type

Use the Config & Deploy tab of System Preferences to configure the approval mode:

  1. Select the Manual Approval mode if you want an approver to review and approve the changes before they are deployed. By default, the Auto Approval mode is selected. Use this mode if you want to deploy the configuration changes without a prior approval.
  2. If you select the Manual Approval mode, add the e-mail addresses of one or more approvers, who are notified every time a change request is submitted.
  3. Specify the rollback limit, which is the number of change requests that can be rolled back. The default value is 50. You can roll back a maximum of 1000 change requests.
  4. Specify the time after which a change request elapses after the time it was created.

    The minimum and maximum number of days that you can specify after which a change request elapses is 1 day and 365 days respectively.

  5. Click OK to save the changes.

Deploying Configuration Changes

Based on the approval mode, you can choose to deploy the device configuration changes in the following ways:

From the Devices with Pending Changes page, you can select Auto Approval mode or Manual Approval mode.

If you select the auto approval mode, you can deploy configuration changes for devices without an approval from the configuration approver. In the auto approval mode, you can do the following configuration deployment tasks on devices that have pending changes.

  1. Run configuration deployment jobs immediately or schedule them for future times by clicking the Deploy Now or the Schedule Deploy options respectively.
  2. Preview, validate, or discard the pending configuration changes.

If you select Manual Approval mode, the Devices with recent configuration changes and Change Requests pages open. You can do the following configuration deployment tasks on devices that have pending changes in manual approval mode:

  1. Create a device configuration change request approval and submit it for approval. Upon submission, all device changes made by an operator are validated and all the approvers are notified of the details of the proposed change request by e-mail.
  2. An approver either approves or rejects the change requests. See Approving Change Requests for more information.
  3. After the successful approval, you can deploy the device configurations immediately or schedule the deployment for a later period.
  4. Preview, validate, or discard the pending configuration changes.

Related Documentation

Modified: 2016-12-18