Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Troubleshoot Router Connectivity and Onboarding Failures

This topic provides guidance for troubleshooting device onboarding and connectivity failure issues.

Problem: Device Identity Conflict

Description

Configuration from an onboarded router is copied to another router, causing a device identity conflict.

Solution

  1. Avoid copying the outbound SSH configuration from one router to another.

  2. Generate the outbound SSH configuration for each router from Juniper Routing Assurance.

  3. Compare the configured device identifiers of the routers from the output of the following CLI command:

    show system services outbound-ssh clients jcoud-prod | display set

  4. If the identifiers are duplicates, remove the duplicate configuration and apply the configuration generated for the router.

Problem: Router Authentication Failure

Description

Router authentication fails during onboarding.

Solution

  1. Verify the outbound SSH configuration on the router using the following CLI command:

    show system services outbound-ssh clients jcoud-prod | display set

  2. Compare the router configuration with the onboarding configuration displayed in Juniper Routing Assurance.

  3. Correct any configuration differences.

  4. Commit the changes and retry onboarding the router.

Problem: SSH Connectivity or Handshake Failure

Description

The router fails SSH connectivity or handshake validation during registration.

Solution

  1. Verify that outbound access is enabled and correctly configured on the router.

  2. Check firewall rules and security policies that might block SSH connection.

  3. Retry onboarding the router after connectivity issues are resolved.

Problem: Router Already Associated with Another Organization

Description

A router that is already onboarded to one organization is onboarded to a different organization.

A router can be associated with only one organization at a time. Ensure the router is not onboarded to another organization or Juniper Support insights.

Solution

  1. Verify whether the router is currently registered to a different organization.
  2. Release the router from the existing organization.

  3. Ensure that the router is online and connected to Juniper Routing Assurance.

  4. Retry onboarding the router to the new organization using the configuration generated from the target organization.

Problem: Unsupported Device or Other Onboarding Failures

Description

The device cannot be onboarded even though the configuration appears correct. This can occur when the device type or model is not supported by Juniper Routing Assurance. For example, Juniper Routing Assurance does not support onboarding switches and gateways.

Solution

  1. Verify that the router model is supported by Juniper Routing Assurance.

  2. Verify that the device is not a switch or a gateway.

  3. Verify that the router is not already onboarded to another service.

  4. Ensure stable network connectivity throughout the onboarding process.

  5. Retry onboarding after correcting the identified issue.