2- Onboarding SRX3xx on Could CSO

Onboard SRX:

1- Check the minimum release requirement: https://www.juniper.net/documentation/en_US/cso5.0/information-products/topic-collections/release-notes/5.0.0/jd0e64.html#jd0e247

2- Upgrade/downgrade the SRX ( if needed)

3- zeroize the configuration: request

4- create an site on the Cloud CSO( using the Wizards )

https://junipernetworks.sharepoint.com/sites/CSOBYODHowto/SitePages/How-to-onboard-SRX300.aspx


	Model Site Expand source Job logs: Oct 10, 2019, 11:37:44 AMTSSM create_sites started Oct 10, 2019, 11:37:44 AMInitiate TSSM create_sites SUCCESS Oct 10, 2019, 11:37:46 AMadding device roles [u'cpe'] Oct 10, 2019, 11:37:47 AMAdded edge in topology for Site LW-RX1500 Device LW-RX1500. Oct 10, 2019, 11:37:48 AMOnboard tenant task created Oct 10, 2019, 11:37:52 AMDevice found in topology LW-RX1500 Oct 10, 2019, 11:37:52 AMadding device roles [u'cpe'] Oct 10, 2019, 11:37:52 AMAdded edge in topology for Site LW-RX1500 Device LW-RX1500. Oct 10, 2019, 11:38:09 AMcreating fullmesh underlay links ... Oct 10, 2019, 11:38:09 AMcreating fullmesh overlay links ... Oct 10, 2019, 11:38:14 AMcreating fullmesh underlay links ... Oct 10, 2019, 11:38:14 AMcreating fullmesh overlay links ... Oct 10, 2019, 11:38:16 AMTSSM Ship device started Oct 10, 2019, 11:38:16 AMInitiate Tssm ship-device SUCCESS Oct 10, 2019, 11:38:16 AMShip device LW-RX1500 Oct 10, 2019, 11:38:17 AMDevice found in topology LW-RX1500 Oct 10, 2019, 11:38:19 AMDevice found in topology LW-RX1500 Oct 10, 2019, 11:38:19 AMUpdated Device in topology LW-RX1500. Oct 10, 2019, 11:38:20 AMAdded edge in topology for Site LW-RX1500 Device LW-RX1500. Oct 10, 2019, 11:38:20 AMSearching pop for site LW-RX1500 Oct 10, 2019, 11:38:20 AMAdding device LW-RX1500 to vim regional Oct 10, 2019, 11:38:40 AMSuccess in executing VPN Manager workflow Oct 10, 2019, 11:38:50 AMSuccess in executing VPN Manager workflow Oct 10, 2019, 11:40:59 AMDevice found in topology LW-RX1500 Oct 10, 2019, 11:41:00 AMUpdated Device in topology LW-RX1500. Task: 1.create_site.LW-RX1500 Oct 10, 2019, 11:37:48 AMTask complete Task: customer.JEAN_LUC_KRIKER Oct 10, 2019, 11:37:49 AMCustomer default-domain:JEAN_LUC_KRIKER:JEAN_LUC_KRIKER already exists Oct 10, 2019, 11:37:49 AMCheck for customer object existence default-domain:JEAN_LUC_KRIKER:JEAN_LUC_KRIKER Oct 10, 2019, 11:37:50 AMskip vrr-tenant-config push. Oct 10, 2019, 11:37:50 AMOnboard customer completed : JEAN_LUC_KRIKER Oct 10, 2019, 11:37:50 AMTask Success Oct 10, 2019, 11:37:50 AMOnboard customer JEAN_LUC_KRIKER task completed with success. Task: 2.customer.JEAN_LUC_KRIKER Oct 10, 2019, 11:37:50 AMTask complete Task: site.LW-RX1500 Oct 10, 2019, 11:37:50 AMCheck Tssm site type Oct 10, 2019, 11:37:50 AMTSSM site ['default-domain', 'JEAN_LUC_KRIKER', 'JEAN_LUC_KRIKER', u'LW-RX1500'] already exists... Oct 10, 2019, 11:37:50 AMOnboarding site LW-RX1500 in topology service for tenant JEAN_LUC_KRIKER Oct 10, 2019, 11:37:50 AMReading topology site: LW-RX1500 Oct 10, 2019, 11:37:50 AMTopology site: LW-RX1500 already exists Oct 10, 2019, 11:37:51 AMCheck for customer site existence: LW-RX1500 Oct 10, 2019, 11:37:51 AMReading device template : CSOaaS_BYOD/BYOD_SRX3xx_CPE Oct 10, 2019, 11:37:59 AMadding device None to site [u'default-domain', u'JEAN_LUC_KRIKER', u'LW-RX1500'] Oct 10, 2019, 11:37:59 AMSearching pop for site LW-RX1500 Oct 10, 2019, 11:37:59 AMAdded Site LW-RX1500 to Pop [u'default-domain', u'regional'] in topology Oct 10, 2019, 11:38:16 AMOnboard site completed : LW-RX1500 Oct 10, 2019, 11:38:16 AMTask Success for site LW-RX1500 Oct 10, 2019, 11:38:16 AMJob Success Task: 3.onboard_site.LW-RX1500 Oct 10, 2019, 11:38:16 AMTask complete Task: LW-RX1500 Oct 10, 2019, 11:38:17 AMreading tssm site LW-RX1500 Oct 10, 2019, 11:38:17 AMRead Site object in tssm : LW-RX1500 Oct 10, 2019, 11:38:17 AMRead Site object in topology : LW-RX1500 Oct 10, 2019, 11:38:17 AMresolving dev info ... Oct 10, 2019, 11:38:17 AMResolving device template for ship-device LW-RX1500 Oct 10, 2019, 11:38:18 AMResolved config for ship-device LW-RX1500 Oct 10, 2019, 11:38:18 AMCan not find existing Ems Device ['default-domain', u'JEAN_LUC_KRIKER', u'LW-RX1500'] . Creating ... Oct 10, 2019, 11:38:19 AMAdd Modeled Device in dms LW-RX1500. Oct 10, 2019, 11:38:19 AMSuccessful updated ems device 1f905051-0edb-423f-800d-aaf93b13c7fe in EMS Oct 10, 2019, 11:38:20 AMAdded Dev to VIM LW-RX1500 Oct 10, 2019, 11:40:53 AMDevice c8c7749d-4b7f-4701-86c4-1e210c8871d0: Config-Deploy SUCCESS Device 8a51e651-12e3-4832-8600-78454e0aa8d9: Config-Deploy SUCCESS Device - config deployment details Device: c8c7749d-4b7f-4701-86c4-1e210c8871d0 Abstract-configs: [u'd6252bfa-a874-40c1-8c51-2748e12af051'] Deploy-config Status: [{'rpc_status': 'SUCCESS', 'api_status': 'SUCCESS', 'request_id': u'7d7aade4-69f0-4f92-b1a0-207b3b4c9e93'}] Device: 8a51e651-12e3-4832-8600-78454e0aa8d9 Abstract-configs: [u'2e4be100-2b3c-4171-8f67-1852ba6594de'] Deploy-config Status: [{'rpc_status': 'SUCCESS', 'api_status': 'SUCCESS', 'request_id': u'afcf27f1-3c02-41a3-a3f5-ee2d81855dd3'}] Oct 10, 2019, 11:40:54 AMResolving device template for ship-device LW-RX1500 Oct 10, 2019, 11:40:54 AMResolved config for ship-device LW-RX1500 Oct 10, 2019, 11:40:54 AMFound Ems Device ['default-domain', u'JEAN_LUC_KRIKER', u'LW-RX1500'] Oct 10, 2019, 11:40:59 AMUpdate abstract config and Unpublish config for device ['default-domain', u'JEAN_LUC_KRIKER', u'LW-RX1500'] Oct 10, 2019, 11:41:00 AMSuccessful updated ems device 1f905051-0edb-423f-800d-aaf93b13c7fe in EMS Oct 10, 2019, 11:41:00 AMStart Registering Serial Number(s) DB0916AK0927 Oct 10, 2019, 11:41:05 AMSuccessfully Registered Serial Number(s) DB0916AK0927 on Redirect Server Oct 10, 2019, 11:41:06 AMTask Success Oct 10, 2019, 11:41:06 AMJob Success Task: 4.ship_device Oct 10, 2019, 11:41:06 AMTask complete
	Bootstrap Device Expand source On the SRX300: --------------- Task: bootstrap Oct 10, 2019, 11:46:44 AMStart bootstrap for device [u'default-domain', u'JEAN_LUC_KRIKER', u'LW-RX1500'] Oct 10, 2019, 11:46:44 AMBootstrap Task Start, task_id = bootstrap ... Oct 10, 2019, 11:46:45 AMauthenticate device in region: regional Oct 10, 2019, 11:46:45 AMauthenticate device in region: regional Oct 10, 2019, 11:47:30 AMSBootstrap: received notification {"hapi_remote_host": "csp.csp-dms-cms-inv-central-core-8445c778f7-dcthf", "hapi_user_client_ip": "172.31.20.100", "device_state": "DEVICE_CONNECTED", "device_previous_state": "DEVICE_DETECTED", "hapi_request_id": "2c506501cf3320deddf2f5ede43e540a,mZuu,7HOx,P96A,ivpS,384U", "device_id": "1f905051-0edb-423f-800d-aaf93b13c7fe"} Oct 10, 2019, 11:47:30 AMBootstrap: skip message for curr_state DEVICE_CONNECTED Oct 10, 2019, 11:48:39 AMSBootstrap: received notification {"hapi_remote_host": "csp.csp-dms-cms-inv-central-core-8445c778f7-jl7j2", "hapi_user_client_ip": "172.31.20.100", "device_state": "ACTIVE", "device_previous_state": "DEVICE_CONNECTED", "hapi_request_id": "0ebd6bca32a894a22b0d329fca1c91e7,y9eY,FVax,2Ofd,lMFS,6nBK", "device_id": "1f905051-0edb-423f-800d-aaf93b13c7fe"} Oct 10, 2019, 11:48:39 AMDevice 1f905051-0edb-423f-800d-aaf93b13c7fe changed from state DEVICE_CONNECTED to state ACTIVE Oct 10, 2019, 11:48:39 AMBootstrap: SUCCESS {u'hapi_remote_host': u'csp.csp-dms-cms-inv-central-core-8445c778f7-jl7j2', u'hapi_user_client_ip': u'172.31.20.100', u'device_state': u'ACTIVE', u'device_previous_state': u'DEVICE_CONNECTED', u'hapi_request_id': u'0ebd6bca32a894a22b0d329fca1c91e7,y9eY,FVax,2Ofd,lMFS,6nBK', u'device_id': u'1f905051-0edb-423f-800d-aaf93b13c7fe'} Oct 10, 2019, 11:48:39 AMBootstrap: SUCCESS Oct 10, 2019, 11:48:39 AMcomplete Oct 10, 2019, 11:48:39 AMTask complete Oct 10, 2019, 11:48:39 AMJob success Task: regional/bootstrapView Regional Log Oct 10, 2019, 11:48:39 AMcomplete Oct 10, 2019, 11:48:39 AMTask complete
	Provision Device Expand source Job logs: Oct 10, 2019, 1:18:36 PMcsp.tssm_ztp.9610e655-6b35-4ac2-aede-6c5b5875d5e8 Oct 10, 2019, 1:18:44 PMUpdated token to customer project scope SUCCESS Oct 10, 2019, 1:21:43 PMSuccess in executing Routing Manager workflow Oct 10, 2019, 1:22:41 PMSuccess in executing Routing Manager workflow Oct 10, 2019, 1:22:47 PMSuccess in executing Routing Manager workflow Task: ztp-init Oct 10, 2019, 1:18:36 PMztp-init completed successfully. Oct 10, 2019, 1:18:36 PMTask complete Task: gateway-bring-up Oct 10, 2019, 1:18:36 PMCreate VM Task Start, task_id = gateway-bring-up ... Oct 10, 2019, 1:18:36 PMSRX device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 maps to topo device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 Oct 10, 2019, 1:18:37 PMUpdated token to customer project scope SUCCESS Oct 10, 2019, 1:18:37 PMInitiate all service libs SUCCESS Oct 10, 2019, 1:18:37 PMUpdate topo device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 management state to managed SUCCESS Oct 10, 2019, 1:18:37 PMTopo device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 map to nso vim-instance 7d56ece6-0030-4a9f-bce6-2cd2a4b21646 Oct 10, 2019, 1:18:37 PMTopo device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 map to topology vim 4e9a01a2-1856-4417-a7d8-9d6443c2aa01 Oct 10, 2019, 1:18:37 PMTopo device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 maps to topo site 34d1a252-5faf-4590-aa4b-9d9832976ce7 Oct 10, 2019, 1:18:37 PMTopology site 34d1a252-5faf-4590-aa4b-9d9832976ce7 map to topology pop dd443524-e299-41ec-9e9d-f21cc6f49cb5 Oct 10, 2019, 1:18:37 PMTopology pop dd443524-e299-41ec-9e9d-f21cc6f49cb5 map to topology region 8caa5912-54a3-4374-bc7c-5709c820c3d8 Oct 10, 2019, 1:18:37 PMTopo region name is regional Oct 10, 2019, 1:18:37 PMTopo site 34d1a252-5faf-4590-aa4b-9d9832976ce7 maps to tssm site ede151ce-f004-43bc-8993-79a9b5e850aa Oct 10, 2019, 1:18:37 PMDevice template id 8a830d30-e6f9-4cdf-8ce1-fc4e609a9833 Oct 10, 2019, 1:18:38 PMWorkflow not found in given device profile Workflow gateway-bring-up not found in the given device profile or its super profiles. Oct 10, 2019, 1:18:38 PMGateway vSRX creation not required Oct 10, 2019, 1:18:38 PMTask complete Task: switch-wan-ip-to-gwr Oct 10, 2019, 1:18:38 PMSwitching WAN IP to GWR not required Oct 10, 2019, 1:18:38 PMTask complete Task: spawn-cluster-gwr Oct 10, 2019, 1:18:38 PMCluster GWR not required Oct 10, 2019, 1:18:38 PMTask complete Task: deploy-jcp-config Oct 10, 2019, 1:18:38 PMDeploying config not required Oct 10, 2019, 1:18:38 PMTask complete Task: deploy-jdm-config Oct 10, 2019, 1:18:38 PMDeploying config not required Oct 10, 2019, 1:18:38 PMTask complete Task: deploy-gwr-config Oct 10, 2019, 1:18:38 PMDeploying config not required Oct 10, 2019, 1:18:38 PMTask complete Task: activate-jcp Oct 10, 2019, 1:18:38 PMActivating component JCP not required Oct 10, 2019, 1:18:38 PMTask complete Task: activate-gwr Oct 10, 2019, 1:18:38 PMActivating component GWR not required Oct 10, 2019, 1:18:38 PMTask complete Task: install-monitoring-agent Oct 10, 2019, 1:18:39 PMIssue all service libs SUCCESS Oct 10, 2019, 1:18:39 PMWorkflow not found in given device profile Workflow install-monitoring-agent has been excluded from the given device profile. Oct 10, 2019, 1:18:39 PMMonitoring agent installation not required Oct 10, 2019, 1:18:39 PMTask complete Task: create-monitored-object Oct 10, 2019, 1:18:39 PMIssue all service libs SUCCESS Oct 10, 2019, 1:18:40 PMCreate monitoring obj stage 1: resolve profile create-monitoring-object SUCCESS Oct 10, 2019, 1:18:40 PMcreate monitored object for device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 is {'pop_uuid': u'dd443524-e299-41ec-9e9d-f21cc6f49cb5', 'site_name': u'LW-SRX300', 'site_uuid': u'ede151ce-f004-43bc-8993-79a9b5e850aa', 'components': [u'GWR', u'FW', u'NAT', u'DPI'], 'region_uuid': u'8caa5912-54a3-4374-bc7c-5709c820c3d8', 'image_type': u'SRX/srx300', 'tenant_id': '252f6dab-a6fb-4cff-8c31-dd89b015f686', 'role': None, 'object_type': u'CPE_DEVICE', 'tenant_name': u'JEAN_LUC_KRIKER'} Oct 10, 2019, 1:18:40 PMUpdated token to customer project scope SUCCESS Oct 10, 2019, 1:18:41 PMnotification handler info: {"notification_info": {"queue": "tssm.fmpm_api_que-9610e655-6b35-4ac2-aede-6c5b5875d5e8", "exchange": "fmpm_api_status", "routing_key": "#.9610e655-6b35-4ac2-aede-6c5b5875d5e8", "opts": {"connection_opts": {"heartbeat": 300}, "unbind_queue_on_exit": false, "delete_queue_on_exit": true, "queue_opts": {"x-expires": 900000, "x-ha-policy": "all"}, "exchange_opts": {}, "connection_acquire_timeout": 1800}, "amqp_urls": "XXXXXXXX"}} Oct 10, 2019, 1:18:42 PMReceived notification of monitor RPC: Oct 10, 2019, 1:18:42 PMStart Service Monitoring SUCCESS Oct 10, 2019, 1:18:42 PMcreate monitored object for device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 SUCCESS Oct 10, 2019, 1:18:42 PMTask complete Task: install-site-pki-cert Oct 10, 2019, 1:18:43 PMStart install site pki certificates for device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 SUCCESS Oct 10, 2019, 1:18:43 PMTask complete Task: site-activation Oct 10, 2019, 1:19:25 PMSite activation rpc called for device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 Oct 10, 2019, 1:21:43 PMSite activation rpc completed successfully in RM Oct 10, 2019, 1:23:35 PMDevice 9610e655-6b35-4ac2-aede-6c5b5875d5e8: Config-Deploy SUCCESS Oct 10, 2019, 1:24:00 PMTask complete Task: add-department Oct 10, 2019, 1:21:44 PMStage 2 config start, task_id = add-department ... Oct 10, 2019, 1:21:44 PMStart stage-2-config stage 1: resolve profile add-department success Oct 10, 2019, 1:21:45 PMStart stage-2-config stage 2: create abstract configs success: {'JDM': [], 'JUNOS': [[u'default-domain', u'JEAN_LUC_KRIKER', u'LW-SRX300', u'JUNOS/srx-add-department-config']], 'JCP': [], 'GWR': []} Oct 10, 2019, 1:21:45 PMAbout to publish and deploy JUNOS configs [[u'default-domain', u'JEAN_LUC_KRIKER', u'LW-SRX300', u'JUNOS/srx-add-department-config']] Oct 10, 2019, 1:21:45 PMConfigs to be deployed include {'JUNOS': [[u'default-domain', u'JEAN_LUC_KRIKER', u'LW-SRX300', u'JUNOS/srx-add-department-config']]} Oct 10, 2019, 1:22:34 PMStage 2 config for JUNOS: [[u'default-domain', u'JEAN_LUC_KRIKER', u'LW-SRX300', u'JUNOS/srx-add-department-config']] deployed success Oct 10, 2019, 1:22:34 PMStart stage-2-config stage 3: publish and deploy all config success Oct 10, 2019, 1:22:36 PMActivating the overlay links ... Oct 10, 2019, 1:22:38 PMActivating VPN routing .. Task: deploy-stage2-configs Oct 10, 2019, 1:24:01 PMStage 2 config start, task_id = deploy-stage2-configs ... Oct 10, 2019, 1:24:01 PMStart stage-2-config stage 1: resolve profile stage-2-config success Oct 10, 2019, 1:24:01 PMStart stage-2-config stage 2: create abstract configs success: {'JDM': [], 'JUNOS': [], 'JCP': [], 'GWR': []} Oct 10, 2019, 1:24:01 PMNo config to be published and deployed at this time Oct 10, 2019, 1:24:01 PMStart stage-2-config task SUCCESS Oct 10, 2019, 1:24:01 PMTask complete Task: install-license-to-device Oct 10, 2019, 1:24:02 PMInstall license to device start, task_id = install-license-to-device ... Oct 10, 2019, 1:24:02 PMinstall license to device is not required Oct 10, 2019, 1:24:02 PMTask complete Task: start-stage2-config-for-ex Oct 10, 2019, 1:24:02 PMStart stage2 config for ex Oct 10, 2019, 1:24:03 PMNot a Ex behind CPE scenario, Skip Oct 10, 2019, 1:24:03 PMTask complete Task: install-default-trustedCAs Oct 10, 2019, 1:24:03 PMInstall default trusted certificates to device is not enabled. Skipping Oct 10, 2019, 1:24:03 PMTask complete Task: start-service-monitoring Oct 10, 2019, 1:24:04 PMStart service monitoring issue all service libs SUCCESS Oct 10, 2019, 1:24:05 PMRegister link monitoring : resolve profile start-fmpm-service-monitoring SUCCESS Oct 10, 2019, 1:24:05 PMUpdated token to customer project scope SUCCESS Oct 10, 2019, 1:24:05 PMIssue all service libs SUCCESS Oct 10, 2019, 1:24:09 PMCalling monitor_service_batch_execute RPC SUCCESS , object_id: 9610e655-6b35-4ac2-aede-6c5b5875d5e8 Oct 10, 2019, 1:24:09 PMnotification handler info: {"notification_info": {"queue": "tssm.fmpm_api_que-9610e655-6b35-4ac2-aede-6c5b5875d5e8", "exchange": "fmpm_api_status", "routing_key": "#.9610e655-6b35-4ac2-aede-6c5b5875d5e8", "opts": {"connection_opts": {"heartbeat": 300}, "unbind_queue_on_exit": false, "delete_queue_on_exit": true, "queue_opts": {"x-expires": 900000, "x-ha-policy": "all"}, "exchange_opts": {}, "connection_acquire_timeout": 1800}, "amqp_urls": "XXXXXXXX"}} Oct 10, 2019, 1:24:09 PMReceived notification of monitor RPC: Oct 10, 2019, 1:24:09 PMStart Service Monitoring SUCCESS Oct 10, 2019, 1:24:10 PMReceived notification of monitor RPC: Oct 10, 2019, 1:24:10 PMStart Service Monitoring SUCCESS Oct 10, 2019, 1:24:10 PMReceived notification of monitor RPC: Oct 10, 2019, 1:24:10 PMStart Service Monitoring SUCCESS Oct 10, 2019, 1:24:11 PMReceived notification of monitor RPC: Oct 10, 2019, 1:24:11 PMStart Service Monitoring SUCCESS Oct 10, 2019, 1:24:11 PMStart service monitoring for device 9610e655-6b35-4ac2-aede-6c5b5875d5e8 SUCCESS Oct 10, 2019, 1:24:11 PMTask complete Task: ztp-summary Oct 10, 2019, 1:24:11 PMStart ZTP Summary start, task_id = ztp-summary ... Oct 10, 2019, 1:24:12 PMZTP Summary input_data {u'cluster_device_uuid': u'9610e655-6b35-4ac2-aede-6c5b5875d5e8', u'site_name': u'LW-SRX300', u'new_state': u'ACTIVE', u'device_uuid': u'9610e655-6b35-4ac2-aede-6c5b5875d5e8', u'deplynt_scenario': u'managed_wan_v2', u'device_redundancy': False, u'topo_site_uuid': u'34d1a252-5faf-4590-aa4b-9d9832976ce7', u'prev_job_id': None, u'device_name': u'LW-SRX300', u'is_member_rma': False, u'cluster_type': None, u'device_redundancy_role': None, u'topo_device_uuid': u'9610e655-6b35-4ac2-aede-6c5b5875d5e8', u'old_state': u'EXPECTED', u'topo_cluster_device_uuid': u'9610e655-6b35-4ac2-aede-6c5b5875d5e8', u'topo_site_role': u'spoke', u'status_message': u'', u'job_id': u'94f318ae-2995-4259-a030-0729f85856c0'}... Oct 10, 2019, 1:24:12 PMZTP Summary kwargs {'topo_dev_state': u'PROVISIONED', 'result': True}...