Join Elevate

Data Center

 View Only

  • 1.  Apstra Onboaring EVE-NG

    Posted 08-10-2025 16:02

    Hello Team 

    Am trying to Onboard vJunos devices on EVENG but am not able to do it and getting this error . Juniper Apstra Verions 6.0.0-189 and vJunos devices Model: ex9214
    Junos: 23.4R2-S2.1. The  vJunos configuration template is as under mentioned. Thanks for your tips and tricks. 

    -------------------------------------------------------------------------------------

    show configuration
    ## Last commit: 2025-08-10 11:06:47 UTC by root
    version 23.4R2-S2.1;
    system {
        host-name DC1-Spine02-232;
        root-authentication {
            encrypted-password "$6$d7flTkCb$YjEjOEBh0rkM0.avmS4Oop7bkNf5IcvPa7U7qWQZIUhIk6sxSJBX7foeT5KXoMCtyfSjaEp7cMcYWpXAdKeIg."; ## SECRET-DATA
        }
        commit synchronize;
        login {
            user admin {
                uid 2000;
                class super-user;
                authentication {
                    encrypted-password "$6$NCNH.EHw$nAQlXJOJYbO4xTLuHkqhHULu6/8u91V7/oQWhaFbxXI06MMg10fxYAeIvCRwU8h8LDlMj/yNEeyClIg9aoajw0"; ## SECRET-DATA
                }
            }
        }
        services {
            netconf {
                ssh;
            }
            extension-service {
                request-response {
                    grpc {
                        ssl {
                            port 32767;
                            local-certificate aos_grpc;
                        }
                        routing-instance mgmt_junos;
                    }
                }
            }
        }
        arp {
            aging-timer 5;
        }
        management-instance;
        syslog {
            file interactive-commands {
                interactive-commands any;
            }
            file messages {
                any notice;
                authorization info;
            }
        }
        processes {
            dhcp-service {
                traceoptions {
                    file dhcp_logfile size 10m;
                    level all;
                    flag packet;
                }
            }
        }
    }
    security {
        certificates {
            local {
                aos_grpc {
                    "-----BEGIN PRIVATE KEY-----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\nh+0P4I4Rlj+PnGKcVm7XdXc=\n-----END PRIVATE KEY-----\n-----BEGIN CERTIFICATE-----\nMIIDUjCCAjqgAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UEBhMCVVMx\nCzAJBgNVBAgMAkNBMRMwEQYDVQQHDApNZW5sbyBQYXJrMRMwEQYDVQQKDApBcHN0\ncmEgSW5jMRAwDgYDVQQDDAdBT1NfVExTMB4XDTI1MDgwOTEzMjYyM1oXDTM1MDgw\nNzEzMjYyM1owVjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRMwEQYDVQQHDApN\nZW5sbyBQYXJrMRMwEQYDVQQKDApBcHN0cmEgSW5jMRAwDgYDVQQDDAdBT1NfVExT\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/byXMAg20Ae9PZS9VA9\nu2gWmre4ub+bwchxeMvpvJQ+ou5nOUql5NECxFbqcVhdnvroXiUED3Cx7DYyxAdT\nkx2AIaZ+L6o9x2Ht3mko++Xwwg3KBo0jWHQ6EltXvGbYBVdcDzgiPB5sgIc1aOYT\nk3j4DBOpydJQiOZ/i0pMDxVY/kUx25Fb7U7knrdhmDhCFSu2vuIAAxx5xcKc0bIo\nOrrDg8sEmPZJ/Yjn2IFYlMzT8+sNkeJLr5R2wWJbj2NONSgfB2fPmzvDewrE3rrV\nqoUcfmFTG/0YrKpFiH0g94I6zoiDXNLNaEACGh4ZvxyFU+reTFjcmsnGoqgtv82M\nuQIDAQABoyowKDAPBgNVHRMECDAGAQH/AgEAMBUGA1UdEQQOMAyCCmFwc3RyYS5j\nb20wDQYJKoZIhvcNAQELBQADggEBABNBeH6Kcbi3FJy8BNen7XMDGaQp3KomEC0c\ntfb9bQ9Li1AbkJyFeGTitHYxyYAqJ0qyxZ2T3/OoEo5c7bqcct6O3c54WYXoeMsT\ni+AZ6ehrBJd73OL/YSlx64/FKGvNd7sg4PjLtDmBYA3+CgvzJHl6L791V9keKEY0\no8M9JRDWSDM8UUHDfl7sRO+5PmK1as8u0mhzf9F+Wf++HIKplI5UWoImaHge4qdO\n9OFDQhWo6MJlrKoRmc8iCr/J+noSM7sqZWLTPBigqwPHqk4seqH7PQmyl58sdYa3\nZ98m9IRj+GMYO11Rg5sfzYmKy4+r9od2jMrxa7PtxaR2WVWDg/4=\n-----END CERTIFICATE-----\n"; ## SECRET-DATA
                }
            }
        }
    }
    interfaces {
        fxp0 {
            unit 0 {
                family inet {
                    address 192.168.0.232/24;
                }
                family inet6;
            }
        }
    }
    multi-chassis {
        mc-lag {
            consistency-check;
        }
    }
    routing-instances {
        mgmt_junos {
            routing-options {
                static {
                    route 192.168.0.0/24 next-hop 192.168.0.1;
                }
            }
            description mgmtjunos;
        }
    }
    protocols {
        router-advertisement {
            interface fxp0.0 {
                managed-configuration;
            }
        }
        lldp {
            interface all;
        }
        lldp-med {
            interface all;

    Device
    Agent
    1-5 of 5
    		192.168.0.235
    OFFBOX
    		 UNASSIGNED
    Full Control
    		 INSTALL FAILED
    		192.168.0.232
    OFFBOX
    		 UNASSIGNED
    Full Control
    		 INSTALL FAILED
    		192.168.0.233
    OFFBOX
    		 UNASSIGNED
    Full Control
    		 INSTALL FAILED
    		192.168.0.231
    OFFBOX
    		 UNASSIGNED
    Full Control
    		 INSTALL FAILED
    		192.168.0.234
    OFFBOX
    		 UNASSIGNED
    Full Control
    		 INSTALL FAILED
    Log Preview
    2025-08-10 19:20:56,712 INFO:192.168.0.235 install
2025-08-10 19:20:56,712 INFO:Ensure stable connection for 60s
2025-08-10 19:20:56,712 INFO:TASK: Check Connectivity
2025-08-10 19:20:57,880 INFO:Successful connection check..
2025-08-10 19:21:28,317 INFO:Successful connection check..
2025-08-10 19:21:57,824 INFO:Successful connection check..
2025-08-10 19:21:57,825 INFO:TASK: Get platform type
2025-08-10 19:22:41,595 INFO:192.168.0.235::junos
2025-08-10 19:22:41,596 INFO:System Agent id: 
2025-08-10 19:22:41,596 INFO:TASK: Get device facts
2025-08-10 19:22:41,597 INFO:Command (timeout-120): show chassis hardware | display json
2025-08-10 19:22:41,597 INFO:command (timeout-120): uptime
2025-08-10 19:22:46,563 INFO:Command (timeout-120): show system information | display xml | match Model
2025-08-10 19:22:48,991 INFO:Command (timeout-120): show interfaces fxp0 | display xml | match current-physical-address
2025-08-10 19:22:53,089 INFO:Command (timeout-120): show version | display json
2025-08-10 19:23:07,688 INFO:{'apstra_aos_agent_version': 'absent', 'apstra_aos_operation_mode': 'notInstalled', 'apstra_platform': 'junos', 'apstra_platform_version': {'re0': '23.4R2-S2.1'}, 'apstra_serial_number': '500000050000', 'apstra_nos_type': 'junos', 'apstra_nos_version': {'re0': '23.4R2-S2.1'}, 'apstra_model_name': 'EX9214', 'apstra_secure_sysdb': None, 'aos_agent_running': None, 'apstra_aos_fips_enabled': None}
2025-08-10 19:23:07,688 INFO:Intent version = 6.0.0-189
2025-08-10 19:23:07,688 INFO:enable_config: True, tls: False, device_encryption: False, enable fips: False
2025-08-10 19:23:07,688 INFO:TASK: Collect pristine
2025-08-10 19:23:12,159 INFO:TASK: Validate pristine config
2025-08-10 19:23:12,160 INFO:TASK: Validate existing grpc config
2025-08-10 19:23:12,161 INFO:Command (timeout-120): show configuration system services | display json
2025-08-10 19:23:18,375 INFO:TASK: Configure grpc
2025-08-10 19:23:18,376 INFO:TASK: Validate existing grpc config
2025-08-10 19:23:18,377 INFO:Command (timeout-120): show configuration system services | display json
2025-08-10 19:23:24,268 INFO:Is cert present: False, Is cert valid: False, Is grpc cert configured: True, Is grpc port configured: True, local certificates list: ['aos_grpc'], port configured: 32767, Is routing instance configured: True
2025-08-10 19:23:24,269 INFO:Removing local certificate from GRPC config.
2025-08-10 19:23:32,523 INFO:Command (timeout-120): ['delete system services extension-service request-response grpc ssl local-certificate aos_grpc']
2025-08-10 19:23:46,850 ERROR:FAILED CommitError(edit_path: [edit system services extension-service request-response grpc], bad_element: ssl, message: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements))
2025-08-10 19:23:46,851 ERROR:FAILED CommitError(edit_path: [edit system services extension-service request-response grpc], bad_element: ssl, message: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements))
2025-08-10 19:23:46,867 ERROR:CommitError(edit_path: [edit system services extension-service request-response grpc], bad_element: ssl, message: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements))
Traceback (most recent call last):
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/device.py", line 834, in execute
    rpc_rsp_e = self._rpc_reply(
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/decorators.py", line 145, in wrapper
    raise ex
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/decorators.py", line 117, in wrapper
    rsp = function(self, *args, **kwargs)
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/device.py", line 1470, in _rpc_reply
    return self._conn.rpc(rpc_cmd_e, filter_xml)._NCElement__doc
  File "/usr/local/lib/python3.10/dist-packages/ncclient/manager.py", line 246, in execute
    return cls(self._session,
  File "/usr/local/lib/python3.10/dist-packages/ncclient/operations/third_party/juniper/rpc.py", line 52, in request
    return self._request(rpc)
  File "/usr/local/lib/python3.10/dist-packages/ncclient/operations/rpc.py", line 373, in _request
    raise RPCError(to_ele(self._reply._raw), errs=errors)
ncclient.operations.rpc.RPCError: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/utils/config.py", line 149, in commit
    rsp = self.rpc.commit_configuration(*rpc_varg, **rpc_args)
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/rpcmeta.py", line 363, in _exec_rpc
    return self._junos.execute(rpc, **dec_args)
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/decorators.py", line 76, in wrapper
    return function(*args, **kwargs)
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/decorators.py", line 23, in wrapper
    result = function(*args, **kwargs)
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/device.py", line 854, in execute
    raise EzErrors.RpcError(cmd=rpc_cmd_e, rsp=rsp, errs=ex)
jnpr.junos.exception.RpcError: RpcError(severity: error, bad_element: ssl, message: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/aos/system_agent/runner/aos_device_installer/run.py", line 107, in <module>
    action.run_action()
  File "/aos/system_agent/runner/actions/base_action.py", line 326, in run_action
    self.run()
  File "/aos/system_agent/runner/actions/juniper.py", line 2354, in run
    self._install()
  File "/aos/system_agent/runner/actions/base_action.py", line 435, in _install
    self.collect_pristine()
  File "/aos/system_agent/runner/actions/utils/base_di.py", line 210, in wrapped
    return f(self, *args, **kwargs)
  File "/aos/system_agent/runner/actions/juniper.py", line 1157, in collect_pristine
    self.configure_grpc()
  File "/aos/system_agent/runner/actions/utils/base_di.py", line 210, in wrapped
    return f(self, *args, **kwargs)
  File "/aos/system_agent/runner/actions/juniper.py", line 1497, in configure_grpc
    driver.commit()
  File "/aos/system_agent/runner/actions/juniper.py", line 151, in commit
    raise ce
  File "/aos/system_agent/runner/actions/juniper.py", line 145, in commit
    commit_out = self.__config.commit(
  File "/usr/local/lib/python3.10/dist-packages/jnpr/junos/utils/config.py", line 157, in commit
    raise CommitError(cmd=err.cmd, rsp=err.rsp, errs=err.errs)
jnpr.junos.exception.CommitError: CommitError(edit_path: [edit system services extension-service request-response grpc], bad_element: ssl, message: error: Missing mandatory statement: 'local-certificate'
error: commit failed: (missing mandatory statements))


    ------------------------------
    [uni1389]
    ------------------------------


  • 2.  RE: Apstra Onboaring EVE-NG

    Posted 08-11-2025 05:15

    Hi,

    I would remove the current configuration on the devices and replace it with the minimum configuration specified in this document - https://www.juniper.net/documentation/us/en/software/apstra6.0/apstra-user-guide/topics/task/agent-offbox-create.html#device_agents_creating_off-box_agent__subsection_gkl_xzg_zcc

    From memory set system commit synchronize will also be needed on the vJunos image.

    Thanks 



    ------------------------------
    Adam Jarvis
    ------------------------------

    Original Message


  • 3.  RE: Apstra Onboaring EVE-NG

    Posted 08-12-2025 17:58

    Agreed with Adam. Would suggest to start with minimum config.  



    ------------------------------
    Bryan Chen
    ------------------------------

    Original Message


Global message icon