- play_arrow Overview
- play_arrow Components
- play_arrow Software Architecture Overview
- play_arrow Apstra Server Overview
- play_arrow Recommended Apstra Server VM Resources
- play_arrow Containers
- play_arrow Scaling
- play_arrow Device Agents
- play_arrow Agent Network Security
- play_arrow Server Hardening
ON THIS PAGE
Apstra Server Administration
There are three methods to administer the Apstra Server:
Web UI
SSH
REST API
Apstra has an advanced RBAC system to define fine grained control of administrative duties. Information on the authentication and RBAC options is beyond the scope of this document and can be found in the Apstra standard documentation: https://www.juniper.net/documentation/product/us/en/apstra/.
Javascript Web UI and REST API
SSL is implemented using, but not limited to, AES 128/192/256 (CBC or GCM), RC4. For SSL key exchange, Apstra uses RSA with a key modulus up to and including 2048-bits and Diffie-Hellman with a key modulus of up to and including 2048-bits for key exchange.SSH
SSH is implemented using 3DES, Blowfish, Twofish, CAST-128, IDEA, and ARCFOUR. For SSH key exchange, Apstra uses RSA with a key modulus up to and including 2048-bits and Diffie-Hellman with a key modulus of up to and including 2048-bits for key exchange.APIs
Apstra abstracts individual networking hardware and software and presents users with easy-to-parse industry standard REST APIs which model the entire system state and support the JSON data format which has a number of ways of keeping specification or configuration in text files:
name: “Create Virtual Network”
Apstra_blueprint_virtnet:
session: “{{ Apstra_session }}”
blueprint: “my-blueprint-l2”
content: “{{ lookup(‘file’,
‘resources/virtual-network-05.json’) }}”
state: present In summary, Juniper Apstra is a powerful tool for traditional networking engineers looking to improve their automation and programming skills. Instead of focusing on low-level network device actions, you can quickly interact programmatically with Apstra using declarative API as easy as you would any cloud-based solution with tools like Ansible, Postman, or automation tool of choice.
