Automatically Assign Device Profiles to Access Points

Speed up onboarding and configuration by using auto-provisioning to dynamically assign device profiles based on the device attributes.

You can set up auto-provisioning to automatically assign device profiles to access points (APs) that are claimed for your organization and have been assigned to a site.

For example, a retail chain has different AP models that need different device settings. They set up auto-provisioning to assign Profile A to AP12 access points and Profile B to AP45 access points.

Note:

This feature applies only to APs, not other types of devices.
This process will not assign a device profile if an AP already has one.

Juniper Mist can automatically assign a device profile based on:

The Link Layer Discovery Protocol (LLDP) system name of the switch that the AP is connected to. To use this option, preconfigure the LLDP system name to include the device profile name.
The subnet within which the IP address of the AP falls. You can view the IP address of the AP under the Status section on the AP Details page. To use this option, create a list of subnets and their corresponding device profiles when you configure the auto-provisioning rule.
To assign all APs to a single profile, add a rule for the 0.0.0.0/0 subnet.
The AP model. To use this option, create a list of AP models and their corresponding device profiles when you configure the auto-provisioning rule.
The AP's device name. To use this option, configure each device name to include the device profile name.
After an administrator creates an auto-provisioning rule, an installer must configure the device name using the following PUT operation:

PUT: /installer/orgs/:org_id/devices/:device_mac

See https://www.juniper.net/documentation/us/en/software/mist/api/http/api/installer/overview.

If you have already provided a name for your AP through the Juniper Mist portal, you’ll need to rename the AP using the API for the auto-provisioning to work.
The AP's Domain Name System (DNS) suffix. To use this option, you need to preconfigure the DNS suffix on the WAN Edge or router to include the device profile name.

To configure auto-provisioning for device profile:

From the left menu, select Organization > Admin > Settings.
In the Auto-Provisioning section, click Configure Auto-Provisioning.
Click Profile Assignment.
Click Enabled.
Click Add Rule.
Under Deriving Profile name based on, select the device attribute that you want to use to identify the profile. For auto-provisioning to work, the extracted information must exactly match the device profile name configured in the Juniper Mist portal.

For example, select AP Name if you've included the profile name in the AP device name. Or select AP Model if you want to set up a correspondence between models and sites (you'll be able to do this in Auto-Provisioning window).
Based on the selected source, set the remaining options:
- AP Name, LLDP System Name, or DNS Suffix—Use the various options to transform the attribute into a valid profile name, and then test your rule by using the Preview box. For information and examples, see Manipulate Source Strings for Auto-Provisioning.
  
  Note:
  If you want to use the AP Name attribute, you must use the installer API to preconfigure the AP name to include site identification information. See https://www.juniper.net/documentation/us/en/software/mist/api/http/api/installer/overview.
  
  If you have already provided a name for your AP through the Juniper Mist portal, you’ll need to rename the AP using the API for the auto-provisioning to work
  
  In addition, you can also select the Apply to Model check box if you want to assign the profile to only specific AP models.
- Subnet—Complete the subnet/profile table at the bottom of the Auto-Provisioning window. On the left, enter the first subnet, using the format x.x.x.x/x. On the right, select the site that you want to assign that subnet to. For each additional subnet, select Add Row, and then enter the subnet and the profile.
- AP Model—Complete the model/profile table at the bottom of the Auto-Provisioning window. On the left, select the model. On the right, select the site that you want to assign that model to. For each additional model, select Add Row, and then select the model and the profile.
Click the check mark at the top of the Add Rule area.
Add more rules if needed.

If you add multiple rules, they're evaluated in a top-down manner. When Juniper Mist encounters a rule that identifies a device profile, it assigns the profile and ignores any remaining rules. If it can't identify a device profile, you'll have to assign one manually.

For example, let's say the top rule on the AP tab is for AP Name and the next rule is for LLDP System Name. If Juniper Mist finds a matching device profile based on the AP name, it ignores the remaining rules.
Click OK to save your settings.