Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Zero-Touch Provisioning Overview

Zero-Touch Provisioning (ZTP) enables you to configure and manage devices automatically, reducing the manual intervention required for adding devices to a network. The ZTP solution uses DHCP protocol to provision devices that are on the same subnet as Paragon Automation and also on a different subnet.

  • In Paragon Automation Release 21.1, you can only add the MX Series and QFX Series devices by using ZTP.

  • For ZTP, the image loaded on the device should be Junos OS Release 21.1 or later. The Image should be added through the image upgrade workflow; see Deploy an Image.

ZTP for onboarding a device involves the following steps:

  1. To onboard devices, provide inputs such as available IP addresses (range) to be leased, corresponding gateway information and device details like root password, serial number.

  2. A job is created and the job lists the progress of ZTP.

  3. A DHCP server, configured in Paragon Automation, leases an available IP address to the device requesting for an IP address.

  4. The device uses the IP address received from the DHCP server to connect with Paragon Automation.

  5. The bootstrapping configuration and software images, required for ZTP, served through the internal HTTP server of Paragon Automation, are installed on the device.

    Once the bootstrap configuration is installed on the device, the device establishes a NetConf session with Paragon Automaton for syncing of inventory, configurations, configuration template, and configuration version.

  6. The ZTP progress is updated in the database.

To perform ZTP on devices that are present on a subnet that is different from the subnet in which Paragon Automation is installed, you must configure a relay. as shown in Figure 1.

Figure 1: Layer 3 Topology for ZTP Layer 3 Topology for ZTP

The relay can be an MX Series device or a Linux-based or CentOS-based Virtual Machine (VM). For information about using an MX Series device as a DHCP relay, see DHCP Relay Agent.

To configure DHCP relay in a Linux-based or CentOS-based VM.

  1. Log in to the VM.

  2. Check if the DHCP relay is already installed or not by executing the yum list installed | grep dhcp command.

    If DHCP relay is already installed, the output of the command should list the DHCP image version installed on the VM. For example:

  3. Install the DHCP relay package on the VM, if not already installed.


    The DHCP relay package is usually available by default with an Ubuntu or CentOS-based VM. If the package is not available, the install command fetches the package and installs it.

  4. Execute the following command to run the DHCP relay service.


    interface-name is the interface on the VM that is facing the device to be added to Paragon Automation.

    dhcp-service-external-ip is provided during the deployment of Paragon Automation. You can also fetch it from the Paragon Automation installation by running the following command on the Paragon Automation master node:

    The external IP address is the dhcp-service-external-ip address.

You can now use the VM as a DHCP relay to connect Paragon Automation and the devices to be onboarded to Paragon Automation.


ZTP in Paragon Automation offers the following benefits:

  • Simplified, faster, and automated deployment of configurations.

  • Auto-generated configurations that are more accurate.

  • Faster scaling of the network because you need not manually apply configuration on each device in the network.