Juniper Junos Space Network Management Platform User guide

  • Hello! I've read the Junos Space Network Management Platform User Guide, and I'm ready to help you understand its features and how to use them. This guide covers a range of topics, from device management and configuration to network monitoring. I can provide information on device templates, CLI configlets, configuration files and many other features described in the document. Please feel free to ask me any questions!
  • What is the purpose of the Junos Space Platform?
    What are workspaces in Junos Space Network Management Platform?
    Does Junos Space Network Management Platform provide device monitoring capabilities?
Junos Space Network Management Plaorm
Workspaces User Guide
Published
2023-06-21
RELEASE
23.1
Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
Junos Space Network Management Plaorm Workspaces User Guide
23.1
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii
Table of Contents
About This Guide | xxxiii
1
Overview
Introducon | 2
Junos Space Plaorm Workspaces Overview | 2
Viewing the Junos Space Plaorm Dashboard | 4
2
Devices
Device Management | 9
Device Management Overview | 9
Conrmed-commit from Junos Space Network Management Plaorm | 11
Viewing Managed Devices | 14
Juniper Networks Devices Supported by Junos Space Network Management Plaorm | 20
Uploading Device Tags by Using a CSV File | 38
Filtering Devices by CSV | 39
Systems of Record | 41
Systems of Record in Junos Space Overview | 41
Understanding How Junos Space Automacally Resynchronizes Managed Devices | 43
Device Discovery Proles | 47
Device Discovery Proles Overview | 47
Creang a Device Discovery Prole | 53
Specifying Device Targets | 53
Specifying Probes | 56
Selecng the Authencaon Method and Specifying Credenals | 57
(Oponal) Specifying SSH Fingerprints | 59
Scheduling Device Discovery | 59
Running Device Discovery Proles | 61
iii
Modifying a Device Discovery Prole | 63
Cloning a Device Discovery Prole | 64
Viewing a Device Discovery Prole | 65
Deleng Device Discovery Proles | 67
Exporng the Device Discovery Details As a CSV File | 68
Modeling Devices | 69
Rapid Deployment Overview | 69
Zero Touch Deployment Using Autoinstallaon and Junos Space Network Management Plaorm on
ACX Series and SRX Series Devices | 71
Model Devices Overview | 74
Creang a Connecon Prole | 75
Creang a Modeled Instance | 79
Acvang a Modeled or Cloned Device in Junos Space Network Management Plaorm | 84
Downloading a Conglet | 89
Viewing and Copying Conglet Data | 90
Acvang Devices by Using Conglets | 92
Acvang a Device by Using a Plain-text Single Conglet | 93
Acvang a Device by Using an AES-encrypted Single Conglet | 93
Acvang a Device by Using a Plain-text Bulk Conglet | 93
Acvang a Device by Using an AES-encrypted Bulk Conglet | 94
Viewing a Modeled Instance | 94
Adding More Devices to an Exisng Modeled Instance | 96
Viewing the Status of Modeled Devices | 97
Deleng Modeled Instances | 98
Viewing a Connecon Prole | 99
Cloning a Connecon Prole | 100
Modifying a Connecon Prole | 101
iv
Deleng Connecon Proles | 101
Device Authencaon in Junos Space | 103
Device Authencaon in Junos Space Overview | 103
Generang and Uploading Authencaon Keys to Devices | 108
Generang Authencaon Keys | 108
Uploading Authencaon Keys to Mulple Managed Devices for the First Time | 109
Uploading Authencaon Keys to Managed Devices With a Key Conict | 111
Resolving Key Conicts | 112
Modifying the Authencaon Mode on the Devices | 114
Acknowledging SSH Fingerprints from Devices | 115
Viewing Device Inventory | 119
Device Inventory Overview | 119
Viewing the Physical Inventory | 121
Displaying Service Contract and EOL Data in the Physical Inventory Table | 125
Viewing Physical Interfaces of Devices | 126
Viewing Logical Interfaces | 129
Viewing and Acknowledging Inventory Changes on Devices | 130
Exporng Device Inventory | 132
Exporng the License Inventory | 132
Viewing and Exporng the Soware Inventory of Managed Devices | 135
Exporng the Physical Inventory of Devices | 138
Conguring Juniper Networks Devices | 140
Modifying the Conguraon on the Device | 140
Reviewing and Deploying the Device Conguraon | 145
Viewing the Conguraon Changes on the Device | 146
Validang the Delta Conguraon on the Device | 148
Viewing the Device-Conguraon Validaon Report | 148
Excluding or Including a Group of Conguraon Changes | 149
v
Deleng a Group of Conguraon Changes | 149
Approving the Conguraon Changes | 150
Rejecng the Conguraon Changes | 150
Deploying the Conguraon Changes to a Device | 151
Junos OS Releases Supported in Junos Space Network Management Plaorm | 152
Conguraon Guides Overview | 153
Saving the Conguraon Created using the Conguraon Guides | 154
Previewing the Conguraon Created using the Conguraon Guides | 154
Deploying the Conguraon Created using the Conguraon Guides | 155
Viewing and Assigning Shared Objects | 156
Applying a CLI Conglet to Devices | 158
Applying a CLI Conglet to a Physical Inventory Element | 161
Applying a CLI Conglet to a Physical Interface | 165
Applying a CLI Conglet to a Logical Interface | 168
Execung a Script on the Devices | 171
Execung a Script on a Physical Inventory Component | 175
Execung a Script on a Logical Interface | 177
Execung a Script on the Physical Interfaces | 178
Device Adapter | 182
Worldwide Junos OS Adapter Overview | 182
Installing the Worldwide Junos OS Adapter | 183
Connecng to ww Junos OS Devices | 185
Device Conguraon Management | 187
Viewing the Acve Conguraon | 187
Viewing the Conguraon Change Log | 192
Resolving Out of band Changes | 193
Creang a Quick Template from the Device Conguraon | 195
vi
Adding and Managing Non Juniper Networks Devices | 196
Adding Unmanaged Devices | 196
Modifying Unmanaged Device Conguraon | 200
Accessing Devices | 201
Launching a Device’s Web User Interface | 201
Looking Glass Overview | 202
Execung Commands by Using Looking Glass | 203
Exporng Looking Glass Results in Junos Space Network Management Plaorm | 205
Secure Console Overview | 206
Connecng to a Device by Using Secure Console | 207
Connecng to a Managed Device from the Device Management Page | 208
Connecng to an Unmanaged Device from the Device Management Page | 210
Connecng to a Managed or Unmanaged Device from the Secure Console Page | 212
Conguring SRX Series Firewall Clusters in Junos Space using Secure Console | 214
Conguring a Standalone Device from a Single-node Cluster | 215
Conguring a Standalone Device from a Two-Node Cluster | 217
Conguring a Primary Peer in a Cluster from a Standalone Device | 220
Conguring a Secondary Peer in a Cluster from a Standalone Device | 223
Conguring a Cluster with Loopback Interface | 226
Logical Systems (LSYS) | 227
Understanding Logical Systems for SRX Series Firewalls | 227
Creang a Logical System (LSYS) | 228
Deleng Logical Systems | 229
Viewing Logical Systems for a Physical Device | 229
Viewing the Physical Device for a Logical System | 230
Tenant System (TSYS) | 232
Understanding Tenant Systems for SRX Series Firewalls | 232
Creang a Tenant System (TSYS) | 233
vii
Deleng Tenant Systems | 234
Viewing Tenant Systems for a Physical Device | 234
Viewing the Physical Device for a Tenant System | 235
Device Parons | 237
Creang Device Parons | 237
Modifying Device Parons | 238
Deleng Device Parons | 239
Custom Labels | 241
Adding Custom Labels | 241
Adding Custom Labels for a Device | 242
Adding Custom Labels for Physical Inventory | 242
Adding Custom Labels for a Physical Interface | 243
Adding Custom Labels for a Logical Interface | 244
Imporng Custom Labels | 244
Modifying Custom Labels | 246
Deleng Custom Labels | 246
Verifying Template, Image Deployment, Script Execuon, and Staged Images on
Devices | 248
Viewing the Device-Template Associaon (Devices) | 248
Viewing Associated Scripts | 251
Viewing Script Execuon | 251
Viewing Staged Images on a Device | 252
Device Monitoring | 255
Viewing Alarms from a Managed Device | 255
Viewing the Performance Graphs of a Managed Device | 257
Device Maintenance | 260
Viewing Device Stascs | 260
Viewing Devices and Logical Systems with QuickView | 261
viii
Resynchronizing Managed Devices with the Network | 262
Pung a Device in RMA State and Reacvang Its Replacement | 263
Pung a Device in RMA State | 264
Reacvang a Replacement Device | 264
Modifying the Target IP Address of a Device | 267
Modifying the Serial Number of a Device | 268
Reboong Devices | 269
Deleng Staged Images on a Device | 270
Cloning a Device in Junos Space Network Management Plaorm | 271
Deleng Devices | 272
3
Device Templates
Overview | 274
Device Templates Overview | 274
Template Denions | 283
Creang a Template Denion | 283
Finding Conguraon Opons in a Template Denion | 289
Working with Rules in a Template Denion | 291
Specifying Device-Specic Values in Template Denions | 293
Creang a CSV le with device-specic values | 293
Using a CSV le to set device-specic values | 294
Managing CSV Files for a Template Denion | 295
Publishing a Template Denion | 296
Viewing a Template Denion | 296
Modifying a Template Denion | 298
Cloning a Template Denion | 298
Imporng a Template Denion | 299
Exporng a Template Denion | 300
ix
Unpublishing a Template Denion | 301
Deleng a Template Denion | 302
Conguring Devices using Device Templates | 303
Creang a Device Template | 303
Assigning a Device Template to Devices | 305
Deploying a Template to the Devices | 306
Modifying a Device Template | 310
Undeploying a Device Template from the Devices | 311
Unassigning a Device Template from the Devices | 312
Auding a Device Template Conguraon | 313
Conguring Devices using Quick Templates | 316
Quick Templates Overview | 316
Creang a Quick Template | 317
Deploying a Quick Template | 322
Device Template Administraon | 326
Viewing Template Details | 326
Viewing the Device-Template Associaon (Device Templates) | 327
Viewing Template Denion Stascs | 330
Viewing Device Template Stascs | 330
Comparing Templates or Template Versions | 331
Comparing a Device Template Conguraon with a Device Conguraon | 332
Cloning a Template in Junos Space Network Management Plaorm | 334
Exporng and Imporng a Quick Template in Junos Space Network Management Plaorm | 335
Exporng a Quick Template | 335
Imporng a Quick Template | 336
Deleng Device Templates from Junos Space Network Management Plaorm | 337
x
4
CLI Conglets
Overview | 339
CLI Conglets Overview | 339
CLI Conglets Workow | 342
Conglet Context | 347
Nesng Parameters | 353
CLI Conglets | 355
Creang a CLI Conglet | 355
Modifying a CLI Conglet | 359
Viewing CLI Conglet Stascs | 359
Viewing a CLI Conglet | 360
Exporng CLI Conglets | 363
CLI Conglet Examples | 364
Deleng CLI conglets | 374
Cloning a CLI Conglet | 374
Imporng CLI Conglets | 375
Applying a CLI Conglet to Devices | 380
Comparing CLI Conget Versions | 384
Marking and Unmarking CLI Conglets as Favorite | 385
Marking CLI Conglets as Favorite | 385
Unmarking CLI Conglets Marked as Favorite | 386
Conguraon Views | 387
Conguraon Views Overview | 387
Conguraon View Variables | 388
Conguraon View Workow | 389
XML Extensions | 391
Creang a Conguraon View | 392
xi
Viewing a Conguraon View | 394
Modifying a Conguraon View | 396
Deleng Conguraon Views | 396
Exporng and Imporng Conguraon Views | 397
Exporng Conguraon Views | 398
Imporng Conguraon Views | 399
Viewing Conguraon Views Stascs | 400
Default Conguraon Views Examples | 401
XPath and Regular Expressions | 407
XPath and Regex Overview | 407
Creang Xpath or Regex | 407
Modifying Xpath and Regex | 408
Deleng Xpath and Regex | 409
XPath and Regular Expression Examples | 409
Conguraon Filters | 412
Creang a Conguraon Filter | 412
Modifying a Conguraon Filter | 413
Deleng Conguraon Filters | 413
5
Images and Scripts
Overview | 416
Device Images and Scripts Overview | 416
Viewing Stascs for Device Images and Scripts | 417
Managing Device Images | 420
Device Images Overview | 420
Imporng Device Images to Junos Space | 422
Viewing Device Images | 423
Modifying Device Image Details | 425
xii
Staging Device Images | 427
Staging Satellite Soware Packages on Aggregaon Devices | 431
Verifying the Checksum | 436
Viewing and Deleng MD5 Validaon Results | 440
Viewing the MD5 Validaon Results | 441
Deleng the MD5 Validaon Results | 442
Deploying Device Images | 443
Deploying Satellite Soware Packages on Aggregaon and Satellite Devices | 458
Viewing Device Image Deployment Results | 464
Viewing Device Associaon of Images | 465
Undeploying JAM Packages from Devices | 467
Removing Device Images from Devices | 473
Deleng Device Images | 477
Managing Scripts | 479
Scripts Overview | 480
Promong Scripts Overview | 482
Imporng Scripts to Junos Space | 483
Imporng Scripts from Files | 484
Imporng Scripts from a Git Repository | 485
Viewing Script Details | 488
Modifying Scripts | 492
Modifying Script Types | 495
Comparing Script Versions | 495
Staging Scripts on Devices | 496
Verifying the Checksum of Scripts on Devices | 500
Viewing Vericaon Results | 503
Enabling Scripts on Devices | 504
xiii
Execung Scripts on Devices | 508
Execung Scripts on Devices Locally with JUISE | 512
Viewing Execuon Results | 516
Exporng Scripts in .tar Format | 517
Viewing Device Associaon of Scripts | 518
Marking and Unmarking Scripts as Favorite | 519
Marking Scripts as Favorite | 519
Unmarking Scripts Marked as Favorite | 520
Disabling Scripts on Devices | 521
Removing Scripts from Devices | 523
Deleng Scripts | 527
Script Annotaons | 528
Script Example | 537
Managing Operaons | 540
Operaons Overview | 540
Creang an Operaon | 541
Imporng an Operaon | 546
Viewing an Operaon | 548
Modifying an Operaon | 550
Running an Operaon | 550
Viewing Operaon Results | 554
Copying an Operaon | 555
Exporng an Operaon in .tar Format | 556
Deleng an Operaon | 557
Managing Script Bundles | 559
Script Bundles Overview | 559
Creang a Script Bundle | 560
xiv
Viewing Script Bundles | 563
Modifying a Script Bundle | 565
Staging Script Bundles on Devices | 565
Enabling Scripts in Script Bundles on Devices | 568
Execung Script Bundles on Devices | 570
Disabling Scripts in Script Bundles on Devices | 573
Viewing Device Associaons of Scripts in Script Bundles | 574
Deleng Script Bundles | 575
6
Reports
Reports Overview | 578
Reports Overview | 578
Report Denions | 592
Creang Report Denions | 592
Viewing Report Denions | 594
Modifying Report Denions | 595
Cloning Report Denions | 596
Deleng Report Denions | 597
Viewing Report Denion Stascs | 598
Reports | 599
Generang Reports | 599
Viewing a Report | 602
Viewing and Downloading Generated Reports | 604
Deleng Generated Reports | 604
Viewing Report Stascs | 605
7
Network Monitoring
Overview | 608
Network Monitoring Workspace Overview | 608
xv
Working with the Network Monitoring Home Page | 611
Viewing Nodes with Pending Problems | 612
Viewing Nodes with Outages | 613
Availability Over the Past 24 Hours | 613
Viewing Outstanding Nocaons | 614
Viewing Resource Graphs | 614
Viewing KSC Reports | 615
Searching for Nodes by Using Quick Search | 615
Managing Nodes | 618
Viewing the Node List | 618
Managing Surveillance Categories | 620
Modifying Surveillance Categories | 620
Deleng Surveillance Categories | 620
Adding Surveillance Categories | 620
Resynchronizing Nodes in Network Monitoring | 621
Turning SNMP Data Collecon O and On | 622
Searching for Nodes and Assets | 624
Searching for Nodes or Nodes with Asset Informaon | 624
Searching for Nodes | 625
Searching for Nodes with Asset Informaon | 627
Working with Node Assets | 628
Searching for and Viewing Nodes with Asset Informaon | 629
Viewing and Modifying Node Asset Informaon | 629
Managing Outages | 631
Viewing and Tracking Outages | 631
Viewing Details about an Outage | 632
Viewing the List of Outages | 633
Conguring Scheduled Outages | 635
Using the Network Monitoring Dashboard | 636
Viewing the Network Monitoring Dashboard | 636
Using the Dashboard Surveillance View | 637
xvi
Managing and Conguring Events | 641
Viewing and Managing Events | 641
Viewing the Details of an Event | 642
Searching for Events (Advanced Event Search) | 644
Viewing, Searching for, Sorng, and Filtering Events | 645
Selecng and Sending an Event to the Network Management System | 648
Managing Events Conguraon Files | 649
Adding New Events Conguraon Files | 649
Deleng Events Conguraon Files | 649
Modifying Events Conguraon Files | 650
Managing and Conguring Alarms | 652
Viewing and Managing Alarms | 652
Viewing Details of an Alarm and Acng on an Alarm | 654
Viewing Alarms in Summary and Detailed Views | 658
Viewing NCS Alarms | 664
Searching for Alarms (Advanced Alarms Search) | 665
Alarm Nocaon Conguraon Overview | 666
Conguring Alarm Nocaon | 670
Conguring a Basic Filter for Alarm Nocaon | 671
Acvang Alarm Nocaon Conguraon Files for Basic Filtering | 672
Reloading a Filter Conguraon to Apply Filter Conguraon Changes | 673
Managing and Conguring Nocaons | 674
Viewing, Conguring, and Searching for Nocaons | 674
Nocaon Escalaon | 675
Conguring Event Nocaons, Path Outages, and Desnaon Paths | 675
Conguring Event Nocaons | 676
Congure Desnaon Paths | 678
Congure Path Outages | 679
Managing Reports and Charts | 681
Network Monitoring Reports Overview | 681
Creang Reports | 683
xvii
Creang Key SNMP Customized Performance Reports, Node Reports, and Domain Reports | 683
Creang a New KSC Report from an Exisng Report | 683
Viewing Reports | 684
Viewing Resource Graphs | 685
Viewing Key SNMP Customized (KSC) Performance Reports, Node Reports, and Domain
Reports | 685
Viewing Database Reports | 686
Sending Database Reports | 686
Viewing Pre-run Database Reports | 687
Viewing Stascs Reports | 688
Generang a Stascs Report for Export | 688
Deleng Reports | 689
Deleng Key SNMP Customized Reports | 689
Deleng Pre-Run Database Reports | 689
Viewing Charts | 690
Network Monitoring Topology | 691
Network Monitoring Topology Overview | 691
Working with Topology | 693
Using the Search Opon to View Nodes | 694
Working with Topology Views | 695
Viewing the Events and Alarms Associated with a Node | 697
Viewing Alarms and Node Details | 697
Viewing Nodes with Acve Alarms | 699
Managing Alarms Associated with Nodes | 699
Viewing the Topology with Dierent Layouts | 700
Automac Refresh of the Topology | 700
Viewing the Status of Node Links | 700
Viewing the Alarm State of Services Links | 701
Pinging a Node | 701
Viewing the Resource Graphs Associated with the Node | 702
Connecng to a Device by Using SSH | 702
Network Monitoring Topology Discovery Methods Supported by Junos Space Network
Management Plaorm | 704
xviii
Network Monitoring Administraon | 706
Conguring Network Monitoring System Sengs | 706
Network Monitoring System Informaon | 707
Generang a Log File for Troubleshoong | 707
Changing the Nocaon Status | 708
Updang Network Monitoring Aer Upgrading the Junos Space Network Management Plaorm | 709
Overview | 709
Step 1: Monitoring the Soware Install Status Window for File Conicts | 709
Step 2: Idenfying Files with Conicts | 710
Step 3: Merging Files with Conicts | 712
Step 4: Verifying the Manual Merge Status of Conguraon Files | 713
Step 5: Final Steps Aer Upgrading Network Monitoring | 713
Conguring SNMP Community Names by IP | 715
Conguring SNMP Data Collecon per Interface | 716
Managing Thresholds | 716
Creang Thresholds | 717
Modifying Thresholds | 719
Deleng Thresholds | 720
Compiling SNMP MIBs | 720
Uploading MIBs | 721
Compiling MIBs | 721
Viewing MIBs | 722
Deleng MIBs | 722
Clearing MIB Console Logs | 722
Generang Event Conguraon | 722
Generang a Data Collecon Conguraon | 724
Managing SNMP Collecons | 726
Adding a New SNMP Collecon | 726
Modifying an SNMP Collecon | 727
Managing SNMPv3 Trap Conguraon | 727
Managing Data Collecon Groups | 731
xix
Adding New Data Collecon Files | 731
Deleng Data Collecon Files | 731
Modifying Data Collecon Files | 732
Managing and Unmanaging Interfaces and Services | 734
Starng, Stopping, and Restarng Services | 734
8
Conguraon Files
Overview | 739
Managing Conguraon Files Overview | 739
Viewing Conguraon File Stascs | 741
Managing Conguraon Files | 743
Backing Up Conguraon Files | 743
Viewing Conguraon Files | 750
Comparing Conguraon Files | 754
Modifying Conguraon Files | 756
Restoring Conguraon Files | 758
Exporng Conguraon Files | 760
Deleng Conguraon Files | 762
9
Jobs
Overview | 765
Jobs Overview | 765
Managing Jobs | 769
Viewing Stascs for Jobs | 769
Viewing the Types of Jobs That Are Run | 770
Viewing the State of Jobs That Have Run | 770
Viewing Average Execuon Times for Jobs | 770
Viewing Your Jobs | 771
Viewing Jobs | 772
Viewing Objects on Which a Job is Executed | 776
xx
/