Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Configure Apstra Server

Configuration requirements are different depending on the Apstra version you're using. Follow the steps for your Apstra version.

Configure Apstra 4.2.0 or 4.1.2

  1. Log in to the Apstra server with the default credentials (user: admin, password: admin) either from the web console or via SSH (ssh admin@<apstra-server-ip> where <apstra-server-ip> is the IP address of the Apstra server.) You must change the default password before you can proceed.
  2. Enter a password that meets the following complexity requirements, then enter it again:

    • Must contain at least 14 characters

    • Must contain an uppercase letter

    • Must contain a lowercase letter

    • Must contain a digit

    • Must contain a special character

    • Must NOT be the same as the username

    • Must NOT contain a repeat of the same character

    • Must NOT contain consecutive sequential characters

    • Must NOT use adjacent keys on the keyboard

  3. When you've successfully changed the Apstra server password a dialog opens prompting you to set the Apstra GUI password.

    You won't be able to access the Apstra GUI until you set this password. Select Yes and enter a password that meets the following complexity requirements, then enter it again:

    • Must contain at least 9 characters

    • Must contain an uppercase letter

    • Must contain a lowercase letter

    • Must contain a digit

    • Must contain a special character

    • Must NOT be the same as the username

    • Must NOT contain a repeat of the same character

    • Must NOT contain consecutive sequential characters

    • Must NOT use adjacent keys on the keyboard

  4. A dialog appears stating "Success! Apstra UI password is changed." Select OK.
  5. The configuration tool menu appears.

    You've just changed the local credentials and the Apstra GUI credentials, so you don't need to manage them again now.

    The network is configured to use DHCP by default. To assign static IP addresses instead, select Network, change it to Manual, and provide the following:

    • (Static Management) IP address in CIDR format with netmask (for example, 192.168.0.10/24)

    • Gateway IP address

    • Primary DNS

    • Secondary DNS (optional)

    • Domain

  6. Apstra service is stopped by default. To start and stop Apstra service, select AOS service and select Start or Stop, as appropriate. Starting service from this configuration tool invokes /etc/init.d/aos, which is the equivalent of running the command service aos start.
  7. To exit the configuration tool and return to the CLI, select Cancel from the main menu. (To open this tool again in the future, run the command aos_config.)

You're ready to Replace the default SSL certificate with a signed one.

CAUTION:

We recommend that you back up the Apstra server on a regular basis (since HA is not available). For backup details, see the Apstra Server Management section of the Juniper Apstra User Guide. For information about setting up automated backup collection see the Juniper Support Knowledge Base article KB37808.

Configure 4.1.1 or 4.1.0

  1. Log in to the Apstra server with the default credentials (user: admin, password: admin) either from the web console or via SSH (ssh admin@<apstra-server-ip> where <apstra-server-ip> is the IP address of the Apstra server.
  2. A dialog opens prompting you to change the default server password.

    Select Yes and follow the prompts to enter a strong password that doesn't contain the current username in any form and that has a minimum of fourteen characters, one uppercase character, and one digit.

    CAUTION:

    We highly recommend that you change default passwords. User admin has full root access. Juniper is not responsible for security-related incidents because of not changing default passwords.
  3. After you've changed the password, you're prompted to start Apstra service. Select Yes.
  4. When service is up and running click OK. The configuration tool menu opens to assist you. (To open this tool at any time, run the command aos_config.)
  5. You updated default local credentials in the previous steps. To change the password again at any time, select Local credentials in the configuration tool and follow the prompts.
  6. Select WebUI credentials and change the default password for the Apstra GUI user admin. (Service must be up and running to change the Apstra GUI password. If service is stopped, proceed to step 8 and start service.)
  7. The network is configured to use DHCP by default. To assign static IP addresses instead, select Network, change it to Manual, and provide the following:

    • (Static Management) IP address in CIDR format (for example, 192.168.0.10/24)

    • Gateway IP address

    • Primary DNS

    • Secondary DNS (optional)

    • Domain

  8. Apstra service is stopped by default. To start and stop Apstra service, select AOS service and select Start or Stop, as appropriate. Starting service from this configuration tool invokes /etc/init.d/aos, which is the equivalent of running the command service aos start.
  9. To exit the configuration tool and return to the CLI, select Cancel from the main menu.

You're ready to Replace the default SSL certificate with a signed one.

CAUTION:

We recommend that you back up the Apstra server on a regular basis (since HA is not available). For backup details, see the Apstra Server Management section of the Juniper Apstra User Guide. For information about setting up automated backup collection see the Juniper Support Knowledge Base article KB37808.