close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Fast Track: Initial Installation
- Fast Track to Rack Installation and Power
- Claim, Onboard, and Configure EX4000
play_arrow System Overview and Specifications
play_arrow Site Planning and Preparation
play_arrow Installation and Configuration
play_arrow Maintain Components
- Maintain Fiber-Optic Cables
- Maintain Transceivers
play_arrow Troubleshoot Hardware
- Troubleshoot Alarm Conditions of EX4000
play_arrow Contact Customer Support and Return the Chassis or Components
- Contacting Customer Support
- Return an EX4000 Chassis or Component
play_arrow Safety and Compliance Information

list Table of Contents

English

Configure Junos OS on an EX4000 Switch

date_range 19-Feb-25

arrow_backward

arrow_forward

EX4000 Default Configuration

Each EX Series switch is programmed with a factory default configuration that contains the values set for each configuration parameter when the switch is shipped. The default configuration file sets values for system parameters such as syslog and commit, configures Ethernet switching on all interfaces, enables IGMP snooping, and enables the LLDP and RSTP protocols.

Note:

The factory default configuration file has more interfaces for models that have more ports.
The poe statement does not appear for models without PoE+ ports.
You can use to ignore management link alarm as part of factory default configuration.
set chassis alarm management-ethernet link-down ignore stanza is present by default under factory default configuration to ignore management link alarm. If required, you can delete this configuration to be notified for management link alarm.

When you commit changes to the configuration, a new configuration file is created. This file becomes the active configuration. You can always revert to the factory-default configuration. See Revert to the Default Factory Configuration on an EX Series Switch.

The following is the factory-default configuration file for an EX4000-48MP switch:

content_copy zoom_out_map
system {
    commit {
        factory-settings {
            reset-chassis-lcd-menu;
        }
    }
    services {
        netconf {
            ssh;
            rfc-compliant;
            yang-compliant;
        }
        ssh;
    }
    auto-snapshot;
    phone-home {
        server https://redirect.juniper.net;
        rfc-compliant;
    }
}
chassis {
    redundancy {
        graceful-switchover;
    }
}
alarm {
    management-ethernet {
        link-down ignore;
    }
}
interfaces {
    mge-0/0/0 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/1 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/2 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/3 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/4 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/5 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/6 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    mge-0/0/7 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/8 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/9 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/10 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/11 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/12 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/13 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/14 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/15 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/16 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/17 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/18 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/19 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/20 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/21 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/22 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/23 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/24 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/25 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/26 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/27 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/28 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/29 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/30 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/31 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/32 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/33 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/34 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/35 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/36 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/37 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/38 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/39 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/40 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/41 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/42 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/43 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/44 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/45 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/46 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/0/47 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    xe-0/1/2 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/1/2 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    xe-0/1/3 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    ge-0/1/3 {
        unit 0 {
            family ethernet-switching {
                storm-control default;
            }
        }
    }
    irb {
        unit 0 {
            family inet {
                dhcp;
            }
        }
    }
    vme {
        unit 0 {
            family inet {
                dhcp;
            }
        }
    }
}
forwarding-options {
    storm-control-profiles default {
        all;
    }
}
protocols {
    lldp {
        interface all;
    }
    lldp-med {
        interface all;
    }
    igmp-snooping {
        vlan default;
    }
    rstp {
        interface all;
    }
}
poe {
    interface all;
}
vlans {
    default {
        vlan-id 1;
        l3-interface irb.0;
    }
}

Connect and Configure an EX4000 Switch

Before you connect and configure an EX4000 switch, set the following parameter values on the console server or PC:

Baud Rate—9600
Data—8
Flow Control—None
Parity—None
Stop Bits—1
DCD State—Disregard

Ensure that you have the following parts and tools available:

An Ethernet cable with an RJ-45 connector attached (not provided)
An RJ-45 to DB-9 serial port adapter (not provided)
A laptop or PC, with a serial port (not provided)

Note:

We no longer include the RJ-45 console cable with the DB-9 adapter as part of the device package. If the console cable and adapter are not included in your device package, or if you need a different type of adapter, you can order the following separately:

RJ-45 to DB-9 adapter (JNP-CBL-RJ45-DB9)
RJ-45 to USB-A adapter (JNP-CBL-RJ45-USBA)

If you want to use RJ-45 to USB-A you must have X64 (64-Bit) Virtual COM port (VCP) driver installed on your PC. See, https://ftdichip.com/drivers/vcp-drivers/ to download the driver.

Have the following information available before you configure custom settings for the switch:

Root password
IP address of the default gateway
IP address of the management port
IP address of a DNS server
(Optional) Hostname
(Optional) IP address of a backup router
(Optional) SNMP read community, location, and contact to configure SNMP parameters
(Optional) Static routes to remote subnets with access to the management port
(Optional) Static routes to remote prefixes with access to the management port

An EX4000 switch is shipped with Junos OS preinstalled and ready to be configured when the switch is powered on. You must perform the initial configuration of the switch through the console port (labeled CON) on the rear panel of the switch by using the CLI.

This procedure describes how to perform the initial configuration on the switch and connect it to the network. For complete information about enabling the switch to forward traffic, including examples, see the Junos OS configuration guides.

To perform the initial configuration on the switch and connect it to the network:

Power the switch on.
Connect the console port (labeled CON) on the rear panel of the switch to a management host such as a laptop or PC by using an RJ-45-to-DB-9 serial port adapter.
At the Junos OS login prompt, type root to log in. You don't need to enter a password. If the software booted before you connected the console port, you might need to press the Enter key for the prompt to appear.
```
login: root
```
Start the CLI.
```
root@:RE:0% cli
root>
```
Enter configuration mode.
```
root> configure
[edit]
root#
```

Add a password to the root administration user account. Enter a clear-text password, an encrypted password, or an SSH public key string.

content_copy zoom_out_map
[edit]
root# set system root-authentication plain-text-password
New password: password
Retype new password: password

content_copy zoom_out_map
[edit]
root# set system root-authentication encrypted-password encrypted-password

content_copy zoom_out_map
[edit]
root# set system root-authentication ssh-ecdsa public-key

content_copy zoom_out_map
[edit]
root# set system root-authentication ssh-ed25519 public-key

content_copy zoom_out_map
[edit]
root# set system root-authentication ssh-rsa public-key

(Optional) Configure the hostname of the switch. If the name includes spaces, enclose the name in double quotation marks (“ ”).
```
[edit]
root# set system host-name host-name
```

(Optional) Create a user account.

content_copy zoom_out_map
[edit]
root# set system login user user-name authentication plain-text-password
New password: password
Retype new password: password

(Optional) Set the user account class to super-user.
```
[edit]
root# set system login user user-name class super-user
```
(Optional) Configure the domain name of the switch.
```
[edit]
root# set system domain-name domain-name
```

Configure the default gateway.

content_copy zoom_out_map
[edit]
root# set routing-options static route 0/0 next-hop address

Configure the IP address and prefix length for the management interface on the switch.
```
[edit]
root# set interfaces vme unit 0 family inet address  address/prefix-length
```
Note:
The management port vme (labeled MGMT) is located on the rear panel of the switch.
(Optional) Configure the IP address of a backup router, which is used only while the routing protocol is not running.
```
[edit]
root# set system backup-router address
```
Configure the IP address of a DNS server.
```
[edit]
root# set system name-server address
```
(Optional) Configure the static routes to remote subnets with access to the management port. Access to the management port is limited to the local subnet.
```
[edit]
root# set routing-options static route remote-subnet next-hop destination-IP retain no-readvertise
```
(Optional) Configure the static routes to remote prefixes with access to the management port.
```
[edit]
root# set routing-options static route remote-prefix next-hop destination-IP retain no-readvertise
```

Configure the SSH service.

content_copy zoom_out_map
[edit]
root# set system services ssh root-login allow

Configure in-band management or out-of-band management:
- With in-band management, you can configure a network port interface as the management interface and connect it to the management device. In this scenario, you can do either of the following:
  - Use the automatically created VLAN named default for management of all data interfaces as members of the default VLAN. Specify the management IP address and the default gateway.
  - Create a new management VLAN. Specify the VLAN name, VLAN ID, management IP address, and default gateway. Select the ports that must be part of this VLAN.
- With out-of-band management, you use a dedicated management channel (MGMT, C0, or C1 port) to connect to the management device. Specify the IP address and gateway of the management interface. Use this IP address to connect to the switch.
(Optional) Specify the SNMP read community, location, and contact to configure SNMP parameters.
(Optional) Specify the system date and time. Select the time zone from the list. The configured parameters are displayed.
Enter yes to commit the configuration. The configuration is committed as the active configuration for the switch.
(Optional) Configure additional properties by adding the necessary configuration statements.
Commit the configuration to activate it on the switch.
```
[edit]
root# commit
```
When you have finished configuring the switch, exit configuration mode.
```
[edit]
root@switch# exit
root@switch>
```

You can now log in by using the CLI and continue configuring the switch.

Revert to the Default Factory Configuration on an EX Series Switch

With EX Series switches, if for any reason the current active configuration fails, you can revert to the factory-default configuration.

You can also roll back to a previous configuration, as described in Rolling Back Junos OS Configuration Changes, or revert to the rescue configuration, as described in Reverting to the Rescue Configuration for the EX Series Switch.

Note:

Rescue configuration not saved alarm will not be reported on EX4000 switches.

Tip:

If you have lost the root password, it is not necessary to revert to the factory-default configuration to reset it. See Recovering the Root Password on Switches.

The factory-default configuration contains the basic configuration settings for the switch. This is the first configuration of the switch and is loaded when the switch is first powered on. For the factory-default configuration file for your switch, see the hardware documentation for your switch.

You can revert to the factory-default configuration by using the request system zeroize operational command or the load factory-default configuration command to revert to the factory-default configuration file that contains all default settings.

These procedures are described in the following sections:

Revert to the EX Series Switch Factory-Default Configuration Using the request system zeroize Command
Revert to the EX Series Switch Factory-Default Configuration Using the load factory-default Command
Revert to the EX Series Switch Factory-Default Configuration or Zeroize the Switch Using Pin Hole Reset Button

Revert to the EX Series Switch Factory-Default Configuration Using the `request system zeroize` Command

The request system zeroize command is a standard Junos OS operational mode command that removes all configuration information and resets all key values. The operation unlinks all user-created data files, including customized configuration and log files, from their directories. The switch then reboots and reverts to the factory-default configuration.

To completely erase user-created data so that it is unrecoverable, use the request system zeroize media command.

CAUTION:

Before issuing request system zeroize, use the request system snapshot command to back up the files currently used to run the switch to a secondary device. Using the zeroize command will destroy Junos and OAM partitions, and the switch may not boot. To recover from a failed software installation, see Recovering from a Failed Software Installation.

To revert to the factory-default configuration by using the request system zeroize command:

content_copy zoom_out_map
user@switch>request system zeroize warning: System will be rebooted and may not boot without configuration
Erase all data, including configuration and log files?. In case of Dual RE system, both Routing Engines will be zeroized [yes,no] (no)

Type yes to remove configuration and log files and revert to the factory-default configuration.

Note:
The auto-image-upgrade statement is added under the [edit chassis] hierarchy level when you use this procedure. The automatic image upgrade feature is then available on the switch.

Revert to the EX Series Switch Factory-Default Configuration Using the `load factory-default` Command

The load factory-default command is a standard Junos OS configuration command that replaces the current active configuration with the factory-default configuration except the root password setting. By default, the root password is not set; you must set it to commit the new configuration in this procedure.

To revert to the factory-default configuration by using the load factory-default command:

Note:

If you use this procedure, you must delete the system commit factory settings, set the root password, and commit the configuration. These steps are not required when you revert to the factory-default configuration by using request system zeroize. Also, the auto-image-upgrade statement is not added to the configuration when you use this procedure; it is added to the configuration when you use request system zeroize.

[edit] user@switch# load factory-default
[edit] user@switch# delete system commit factory-settings
[edit] user@switch# set system root-authentication plain-text-password
[edit] user@switch# commit

Revert to the EX Series Switch Factory-Default Configuration or Zeroize the Switch Using Pin Hole Reset Button

You can use the Pin Hole Reset button on the front panel of EX4000 switches to revert the switch to factory default configuration or zeroize the switch.

To revert the switch to factory default configuration or zeroize the switch:

To revert the switch to factory default configuration - press the Pin Hole Reset button for more than 5 seconds and less than 10 seconds and release it to trigger the factory reset.
On the console screen, factory reset messages is displayed. Additional indication is provided by the SYS LED which turn blue color for few seconds and then color is restored depending on the status of switch.
To zeroize the switch - press the Pin Hole Reset button for more than 10 seconds and release it to trigger zeroize.
To indicate users of zeroize operation, SYS Led will turn purple to indicate zeroize is triggered and once switch reboots as part of zeroize process, SYS Led will start blinking to indicate the same. After the operation, color of SYS LED is restored depending on the status of the switch.

arrow_backward PREVIOUS Connect the EX4000 Switch to the Network

NEXT arrow_forward Maintain Fiber-Optic Cables

EX4000 Switch Hardware Guide

ON THIS PAGE

Configure Junos OS on an EX4000 Switch

EX4000 Default Configuration

Connect and Configure an EX4000 Switch

Revert to the Default Factory Configuration on an EX Series Switch

Revert to the EX Series Switch Factory-Default Configuration Using the `request system zeroize` Command

Revert to the EX Series Switch Factory-Default Configuration Using the `load factory-default` Command

Revert to the EX Series Switch Factory-Default Configuration or Zeroize the Switch Using Pin Hole Reset Button

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

EX4000 Switch Hardware Guide

ON THIS PAGE

Configure Junos OS on an EX4000 Switch

EX4000 Default Configuration

Connect and Configure an EX4000 Switch

Revert to the Default Factory Configuration on an EX Series Switch

Revert to the EX Series Switch Factory-Default Configuration Using the request system zeroize Command

Revert to the EX Series Switch Factory-Default Configuration Using the load factory-default Command

Revert to the EX Series Switch Factory-Default Configuration or Zeroize the Switch Using Pin Hole Reset Button

See Also

Stay in touch

Revert to the EX Series Switch Factory-Default Configuration Using the `request system zeroize` Command

Revert to the EX Series Switch Factory-Default Configuration Using the `load factory-default` Command