Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Initial Configuration

The first time you boot the Apstra server VM, a configuration tool opens to assist you. (You can open this tool at any time by running the command aos_config.)

  1. The default credentials for the Apstra console are user=admin and password=admin. SSH into the Apstra server (ssh admin@<apstra-server-ip> where <apstra-server-ip> is the IP address of the Apstra server.) If you haven't changed the default password for user admin you are prompted to change it.

    We highly recommend that you change default passwords. User admin has full root access. Juniper is not responsible for security-related incidents due to failing to change default passwords.

  2. Select Yes, and follow the prompts to enter a strong password that doesn't contain the current username in any form and that has a minimum of fourteen characters, one uppercase character, and one digit.
  3. After you've changed the password you are prompted to start Apstra service. Select Yes. When service is up and running click OK. The main menu appears.
  4. You updated the default local credentials in the previous step. To change the password again at any time, select Local credentials and follow the prompts.
  5. Select WebUI credentials and change the default password for the GUI user admin. (Service must be up and running to change the GUI password. If service is stopped, proceed to step 7 and start service.)
  6. The network is configured to use DHCP by default. To assign static IP addresses instead, select Network, change it to Manual, and provide the following:
    • (Static Management) IP address in CIDR format (for example,
    • Gateway IP address
    • Primary DNS
    • Secondary DNS (optional)
    • Domain
  7. Apstra service is stopped by default. To start and stop Apstra service, select AOS service and select Start or Stop, as appropriate. Starting service from this configuration tool invokes /etc/init.d/aos, which is the equivalent of running the command service aos start.
  8. To exit the configuration tool and return to the CLI, select Cancel from the main menu.

Access the Apstra server GUI and replace the default SSL certificate with a signed one.


We recommend that you back up the Apstra server on a regular basis (since HA is not available). For information about setting up automated backup collection see the Juniper Support Knowledge Base article KB37808.