Troubleshoot Router Connectivity and Onboarding Failures
This topic provides guidance for troubleshooting device onboarding and connectivity failure issues.
Problem: Device Identity Conflict
Description
Configuration from an onboarded router is copied to another router, causing a device identity conflict.
Solution
Avoid copying the outbound SSH configuration from one router to another.
Generate the outbound SSH configuration for each router from Juniper Routing Assurance.
Compare the configured device identifiers of the routers from the output of the following CLI command:
show system services outbound-ssh clients jcoud-prod | display setIf the identifiers are duplicates, remove the duplicate configuration and apply the configuration generated for the router.
Problem: Router Authentication Failure
Description
Router authentication fails during onboarding.
Solution
Verify the outbound SSH configuration on the router using the following CLI command:
show system services outbound-ssh clients jcoud-prod | display setCompare the router configuration with the onboarding configuration displayed in Juniper Routing Assurance.
Correct any configuration differences.
Commit the changes and retry onboarding the router.
Problem: SSH Connectivity or Handshake Failure
Description
The router fails SSH connectivity or handshake validation during registration.
Solution
Verify that outbound access is enabled and correctly configured on the router.
Check firewall rules and security policies that might block SSH connection.
Retry onboarding the router after connectivity issues are resolved.
Problem: Router Already Associated with Another Organization
Description
A router that is already onboarded to one organization is onboarded to a different organization.
A router can be associated with only one organization at a time. Ensure the router is not onboarded to another organization or Juniper Support insights.
Solution
- Verify whether the router is currently registered to a different organization.
Release the router from the existing organization.
Ensure that the router is online and connected to Juniper Routing Assurance.
Retry onboarding the router to the new organization using the configuration generated from the target organization.
Problem: Unsupported Device or Other Onboarding Failures
Description
The device cannot be onboarded even though the configuration appears correct. This can occur when the device type or model is not supported by Juniper Routing Assurance. For example, Juniper Routing Assurance does not support onboarding switches and gateways.
Solution
Verify that the router model is supported by Juniper Routing Assurance.
Verify that the device is not a switch or a gateway.
Verify that the router is not already onboarded to another service.
Ensure stable network connectivity throughout the onboarding process.
Retry onboarding after correcting the identified issue.