Software Installation and Upgrade
-
Switching between SZTP and ZTP on secure platforms (QFX5130-48C and QFX5130-48CM)— Use RFC-8572-based secure zero-touch provisioning (SZTP) to bootstrap your remotely located network devices that are in a factory-default state. SZTP enables mutual authentication between the bootstrap server and the network device before initiating ZTP.
To enable mutual authentication, the system generates a unique digital voucher based on the Digital Device ID or Cryptographic Digital Identity (DevID) of the network device. The DevID is embedded inside Trusted Platform Module (TPM) 2.0 chip on the network device. We issue a digital voucher to customers for each eligible network device.
You can switch between using SZTP and zero touch provisioning (ZTP) on secure platforms. The default behavior on this device is ZTP. To override the default behavior of your secure device, you can issue the
request system zeroize ztp-option secure-enable
command.[See Secure Zero Touch Provisioning, Generate Secure ZTP Vouchers, and Switching between Secure Zero Touch Provisioning and Zero Touch Provisioning.]
-
Overlay load balancing in an EVPN-VXLAN network (QFX5130-32CD and QFX5700)—You can provision QFX5130-32CD and QFX5700 switches to function as leaf or spine devices in an EVPN-VXLAN network to support load balancing among different virtual tunnel endpoints (VTEPs). Overlay load balancing is enabled by default. We support overlay load balancing:
- With centrally-routed bridging (CRB) overlays and edge-routed bridging (ERB) overlays
- When a leaf device is multihomed to multiple spine devices
- When a host is multihomed to multiple leaf devices
You configure each multihomed aggregated Ethernet interface, logical interface, or physical interface with an Ethernet segment identifier (ESI). You can use a maximum of 256 ESIs with overlay load balancing.
[See show ethernet-switching vxlan-tunnel-end-point svlbnh.]
-
ZTP with DHCPv4/DHCPv6 support (QFX5240-64OD and QFX5240-64QD) — Use a DHCPv4 or DHCPv6 client and zero-touch provisioning (ZTP) to set up a device. During the bootstrap process, the device requests image and configuration file information from the DHCP server using the DHCPv4/DHCPv6 client. The device is provisioned with ZTP using either DHCPv4 or DHCPv6 based on the response received from the DHCP client.
[See Zero Touch Provisioning.]