Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Juniper Device Agent

This document describes how to manually install Juniper device agents.

Juniper ZTP

For an option that's simpler and easier to support at scale, see Apstra ZTP, which shows you how to automatically boot and install Apstra device agents and prerequisite switch configuration.

Disable ZTP

If you want to install agents manually because a previous attempt to install them with Apstra ZTP failed, you must first delete the ZTP mode (since it remains active) with the command delete chassis auto-image-upgrade.

If you're going to provision the Juniper switch without ZTP (ZTP Disabled), make sure that the ZTP process is disabled before proceeding. After logging into the switch for the first time and setting system root-authentication, configure delete chassis auto-image-upgrade.

Appy Initial Juniper Junos Configuration

Before installing Apstra device system agents on Juniper Junos devices, apply the minimum configuration below to the devices.

Configure super-user User

For the device system agent to connect to the Juniper Junos device, you must configure a local device user with class super-user.


If you intend to use a different authentication method for device access (such as RADIUS), you must use local password authentication first.

Configure IP address and Management VRF

Device system agents use the Junos mgmt_junos management-instance VRF and the management interface (such as em0).

If the Juniper device uses a different management interface (such as vme.0), configure the management IP address on it instead.

Configure SSH and NETCONF

Device system agents require Junos SSH and NETCONF access to be configured under system services.

Add Junos License Configuration

You can add license configuration before installing the system agent (to make it part of the pristine configuration), but the preferred method is to add license configuration with configlets.