Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Deploy the Docker Edge Container

Follow these steps to set up the container environment and install the Edge container using a local image. Note that the latest Apstra Edge version is 0.13.2. This Edge version supports the latest Apstra Cloud Services features, such as Service Awareness, Impact Analysis, VM Visibility, and Service Level Expectations.

If you are using Juniper Apstra 5.1.0 or later, you can launch the Edge from within the Apstra GUI. For more information, see Launch Juniper Apstra Cloud Services Edge Docker Containers in Apstra.

If you are using Juniper Apstra 5.0.0 and earlier, you must follow these steps to set up and launch the Edge.

Note:

This setup process uses Juniper Apstra Edge distribution version 0.0.78. The version that you download might be a more recent version. For information about ACS compatibility, see Juniper Apstra Cloud Services Compatibility.

  1. Untar the tar.gz file that you downloaded.
    Note:

    You can download and install the Edge file on the same VM as the Apstra Server, or a separate VM. For this example, the Edge file is installed on the same VM as the Apstra Server. The ACS Edge must have connectivity to both Juniper Apstra and ACS.
    This creates the following directory: apstra-edge-0.0.78.
  2. Modify the following lines in the docker-compose.yml file. Enter ep-term.ai.juniper.net for the CLOUD_TERM.
    This registration code is retrieved from Step 3 in the Adopt the Juniper Apstra Cloud Services Edge and Enable Juniper Apstra Flow section, after adopting the Edge. The registration code registers the Apstra Edge with Juniper Apstra Cloud Services.
    Note:

    The Juniper Apstra Edge uses the registration code to retrieve unique organization ID, secret, and device ID during Edge installation. These IDs must be stored securely as they cannot be retrieved after the initial setup is complete.

    The CLOUD_TERM is the service that runs in the cloud, which is the entry point for any connectivity for any Edge component to communicate with the cloud.

    For a list of internal configuration variables and their functions, see Internal Variables for Juniper Apstra Edge Cloud Services Configuration.

    Note:

    These variables are meant for internal use and are not required to set up the Edge component. We do not recommend overriding these variables in production.

  3. Create a directory for installing the Edge container. Copy the docker-compose-0.0.78.yml file from the tar.gz. and rename it to docker-compose.yml.
  4. Copy the container file into the apstra_edge directory.
  5. (Optional) Verify that no existing image is present.
  6. Load the Docker image.
  7. Verify that the apstra-edge image is loaded.
  8. We recommend that you replace the Juniper Apstra self-signed certificate with a publicly-signed certificate. To proceed with a publicly-signed certificate, follow the directions at, Replace the SSL Certificate of Juniper Apstra's Nginx Controller.

    The Juniper Apstra Edge connects to the Juniper Apstra controller using the management URL provided in the Juniper Apstra Cloud Services entitlement process. This management URL is configured with an IP address. The Apstra controller requires an SSL certificate with a Subject Alternative Name containing this IP.

  9. (Optional) To proceed with the self-signed certificate on the Apstra controller instead of a publicly-signed certificate, you must add the following line (- AOS_INSECURE_SKIP_VERIFY=true) to the docker-compose.yml file after the two environment variables that you previously entered (REGISTRATION_KEY=<registration-code>, CLOUD_TERM=ep-term.ai.juniper.net):
    Note:

    You must perform Steps 9 and 10 regardless of whether you use a self-signed certificate or a publicly-signed certificate for the Apstra controller.
  10. Copy the EP-Term SSL certificate to the correct directory, and add read/write permissions. This enables the Juniper Apstra Cloud Services Edge to validate SSL certs for server authentication.
  11. Update the certificates.
  12. Spin up the Docker Edge container from the apstra_edge directory.
    The docker compose up -d command initializes the services listed in docker-compose.yml file. Applying the .yml file also creates a volume named apstra_edge_apstra_edge_store/. This volume is mounted at /var/lib/docker/volumes/apstra_edge_apstra_edge_store/_data/.
    Note:

    The Juniper Apstra Cloud Services instance supports both docker compose and docker-compose commands.

    Note:

    You must run the docker compose up -d command from within the same directory where the docker-compose.yml is located. The file must also be named docker-compose.yml or the command will not work as intended.

    Note:

    Ensure that you back up /var/lib/docker/volumes/apstra_edge_apstra_edge_store/_data/. The Edge instance uses this mount to restart connectivity in the event of a system crash.

    Note:

    IMPORTANT: During the first boot of the Juniper Apstra Cloud Services Edge container, it will perform a one-time registration process using the provided registration code. This process generates a unique secret necessary for authentication between the Edge instance and the CLOUD_TERM service. After this initial registration process, the registration code is invalid. Subsequent starts or restarts of the Juniper Apstra Cloud Services Edge instance use the secret to connect to the CLOUD_TERM service.

  13. From the UI, verify the following statuses:
    Note:

    If any of these statuses show Disconnected, an error message appears when you hover over the status text.
    • Cloud Connectivity is Connected: The connection status between the Juniper Apstra Cloud Services Edge container and Juniper Apstra Cloud Services.
    • Apstra Connectivity is Connected: The connection status of the Juniper Apstra Cloud Services Edge container to the Juniper Apstra Edge instance.
  14. Verify that Juniper Apstra Cloud Services is querying the new Edge instance with Apstra Flow.
    In the ACS UI, a Service Aware and Impact Analysis tab should be visible. Note that these tabs might not appear immediately.


  15. (Optional) Verify that the Docker volume was successfully created.
  16. (Optional) View event logs.
  17. To stop the container, use the following command:
  18. To restart a stopped Edge container, run the following command:
    The Juniper Apstra Cloud Services Edge container is initialized, and the Edge instance is running. For additional information about the features and operation of the Apstra Edge Instance, see the Juniper Apstra Cloud Services User Guide.

    For post-setup verification, actions, and troubleshooting, see Juniper Apstra Cloud Services Edge Post-Setup: Config Changes and Troubleshooting.