Config on the SRX: firefly-perimeter , 12.1X47-D20.7
set system services netconf sshset security zones functional-zone management host-inbound-traffic system-services netconf
Netconf test:
jlk@ubuntu:/etc/ansible$ ssh ansible@vsrx1 -p 830 -s netconfPassword:<!-- No zombies were killed during the creation of this user interface --><!-- user ansible, class j-super-user --><hello> <capabilities> <capability>urn:ietf:params:xml:ns:netconf:base:1.0</capability> <capability>urn:ietf:params:xml:ns:netconf:capability:candidate:1.0</capability> <capability>urn:ietf:params:xml:ns:netconf:capability:confirmed-commit:1.0</capability> <capability>urn:ietf:params:xml:ns:netconf:capability:validate:1.0</capability> <capability>urn:ietf:params:xml:ns:netconf:capability:url:1.0?protocol=http,ftp,file</capability> <capability>http://xml.juniper.net/netconf/junos/1.0</capability> <capability>http://xml.juniper.net/dmi/system/1.0</capability> </capabilities> <session-id>2198</session-id></hello>]]>]]>