Prerequisites for Deploying the Service Automation Solution

Junos Space Platform Requirements

The requirements from Junos Space Platform are:

• A compatible version of the Junos Space Platform installed and fully configured.

  Note: From Junos Space Release 14.1R1, Service Now and Service Insight are available as hot-pluggable applications enabling the installation of Service Now and Service Insight independent of the Junos Space Platform. For information about Junos Space Platform releases compatible with a Service Now and Service Insight release, see Junos Space Application Compatibility. For information about installing and configuring the Junos Space Platform, see the Juniper Networks JA2500 Junos Space Appliance or the Junos Space Virtual Appliance guides at Junos Space Network Management Platform Documentation Index.

  • The following must be configured on a Junos Space Platform to implement the Service Automation solution:
    • IP addresses for eth0 and eth0:0 ports
    • (Optional) IP address for the eth3 port
    • (Optional) Network Address Translation (NAT) between the Junos Space appliance and JSS

      If Junos Space-initiated connection is used, NAT can be implemented between the Junos Space Platform and device network.

    • A default gateway reachable by the Junos Space Platform
    • The firewall on Junos Space Platform is configured to connect with JSS (services.juniper.net) or Service Now partner to submit incidents. For information about ports used to connect to JSS or Service Now partner, see the Firewall section of the Junos Space Network Management Platform Hardening topic.

Device Requirements

The requirements from managed devices are:

• Devices should be running Junos OS release 10.0 or later.
• Devices must be installed with domestic Junos OS and configured for SSH and NETCONF.

  system {
      services {
          netconf {
              ssh;
          }
      }
  }
  

  If devices are running worldwide (ww) Junos OS, the ww adapter must be installed on Junos Space.

• A user must be configured on the device with super user class for copying JMB files from /var to /var/tmp.

  system {
      login {
          user lab {
              uid 2000;
              class super-user;
              authentication {
              }
          }
      }
  }
  

• The following permissions must be set on the device for Junos Space Service Now to install AI-Scripts and collect JMBs:
  set system login class servicenow permissions configure set system login class servicenow permissions fieldset system login class servicenow permissions maintenance set system login class servicenow permissions networkset system login class servicenow permissions shell set system login class servicenow permissions systemset system login class servicenow permissions viewset system login class servicenow allow-commands "((apply-groups juniper-ais))| ((request system software))| ((request system script))| ((stream))| ((text-pattern))| ((file copy))| ((ping)) | ((ftp))|((file))"set system login class servicenow allow-configuration "(system services)|(system syslog)|(system scripts)|(groups juniper-ais)|(event-options)| (system commit synchronize)|(ftp)|(snmp)"set system login class servicenow deny-configuration "((protocols)|(routing-instances)|(policy-options)|(services))" set system login user test class servicenow