Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Configure Junos OS Evolved on the QFX5250 Switch

This topic guides you through the initial configuration of your QFX5250 by using Juniper Apstra, and the CLI.

We ship the QFX5250 switch with preinstalled Junos OS Evolved, which is ready to be configured when you power on the device.

You must perform the initial configuration of the QFX5250 switch through the console port using the CLI or through zero-touch provisioning (ZTP). ZTP is supported on the following ports:

  • Management Port

  • Two SFP28 Ports (et-0/0/64 and et-0/0/65)

  • Four WAN Ports (et-0/0/0, et-0/0/1, et-0/0/62, et-0/0/63)

In order to use ZTP to provision the device, you must have access to the following:

  • Dynamic Host Control Protocol (DHCP) server—Provides the location of the software image and configuration files on the network.

  • File Transfer Protocol (anonymous FTP), Hypertext Transfer Protocol (HTTP), Hypertext Transfer Protocol Secure (HTTPS), or Trivial File Transfer Protocol (TFTP) server—Stores the software image and configuration files.

For more information about using ZTP for provisioning the device, see Understanding Zero Touch Provisioning in the Installation and Upgrade Guide.

Connect the console port to a laptop or PC using an RJ-45 cable and an RJ-45-to-DB-9 adapter. The console (CON) port is located on the right side of the port panel.

Access the CLI on the QFX5250 Switch

To access the CLI on your device:
  1. Verify that the device is powered on.
  2. Connect the management device to the serial console port as described in Connect the QFX5250 Switch to External Devices.
  3. Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal) and select the appropriate COM port to use (for example, COM1).
  4. Configure the serial port settings with the following values:

    • Baud rate—9600

    • Parity—N

    • Data bits—8

    • Stop bits—1

    • Flow control—none

  5. Power on the device. You can start performing initial software configuration on the device after the device is up.
    Note:

    After you complete the initial configuration, you can connect your device to a network for out-of-band management as described in Connect the QFX5250 Switch to External Devices.

Configure Root Authentication and Management Interface from the CLI

You must perform the initial configuration of the device through the console port.

Gather the following information before configuring the device:

  • Root authentication

  • IP address of the management interface

  • IP address of the default gateway

  • IP address of a DNS server

To configure root authentication and the management interface:

  1. Connect the console port to a laptop or PC using an RJ-45 cable and an RJ-45-to-DB-9 adapter. The console (CON) port is located on the right side of the port panel, below the MGMT port.
    Note:

    We no longer include the RJ-45 console cable with the DB-9 adapter as part of the device package. Check if any of the console cables and adapters are included in your device package. If you need a console cable or a different type of adapter, you can order the following separately:

    • RJ-45 to DB-9 adapter (JNP-CBL-RJ45-DB9)
    • RJ-45 to USB-A adapter (JNP-CBL-RJ45-USBA)
    • RJ-45 to USB-C adapter (JNP-CBL-RJ45-USBC)

    If you want to use RJ-45 to USB-A or RJ-45 to USB-C adapter, you must have X64 (64-Bit) Virtual COM port (VCP) driver installed on your PC. See, https://ftdichip.com/drivers/vcp-drivers/ to download the driver.
  2. Log in as root. You don't need to enter a password. If the software booted before you connected to the console port, you might need to press the Enter key for the prompt to appear.
  3. Start the CLI and enter configuration mode.
  4. Set the root authentication password. You can enter a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
  5. (Optional) Configure the host name of the device.
  6. Configure the IP address and prefix length for the switch management interface.
    CAUTION:

    Use this CLI command to configure the single management Ethernet interface available in QFX5250switch.
    Note:

    On the QFX5250 switch, the management port re0:mgmt-0 is the RJ-45 port on the top right of the port panel and is labeled MGMT.
  7. Create the mgmt_junos routing instance, and configure the static routes to remote prefixes with access to the management port.
  8. Enable the management instance.
  9. Enable the Telnet service.
    Note:

    When you enable Telnet, you cannot log in to QFX5250 switch through Telnet using root credentials. Root login is allowed only for SSH access.
  10. Enable SSH service for root login.
  11. Commit the configuration to activate it on the switch.