Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents

Onboard Switches to Mist Cloud

date_range 20-Mar-25
Note:

Ignore the steps in this topic if your switches are already onboarded to the Mist cloud.

To configure and manage a switch through Juniper Mist cloud, you must ensure that the switch is added to the Mist cloud. To see the switch models supported by Mist, visit Juniper Mist Supported Hardware.

You can add greenfield or brownfield switches to the Mist cloud.

In this context, greenfield switches are new cloud-ready switches, while brownfield switches are the switches that are being brought into the Juniper Mist cloud architecture from a previous deployment.

Switch Onboarding Prerequisites

Before you onboard a switch:

  • Ensure that you have a Juniper Mist Wired Assurance Subscription, and login credentials for the Juniper Mist portal. To get started with Mist, follow the instructions in Quick Start: Mist.

  • Ensure that the switch is connected to a DNS server (an NTP server is also recommended), and is able to connect to the Juniper Mist cloud architecture over the Internet.

  • If there is a firewall between the cloud and the switch, allow outbound access on TCP port 2200 to the management port of the switch.

Onboard a Greenfield Switch

You can onboard a single greenfield, cloud-ready switch to the Mist cloud via the Mist AI Mobile App. However, if you want to onboard multiple cloud-ready switches together, you can do that via the Juniper Mist portal, by using the activation code associated with the purchase order.

To onboard a greenfield switch, follow the instructions in Quick Start: Cloud-Ready EX and QFX Switches with Mist.

For a quick demo, watch the following video:

Video 1: Onboard One or More Switches Using a Web Browser
Show Transcript

Onboard a Brownfield Switch

Use the Adopt Switch option to onboard a brownfield switch.

Note: You need to use the Adopt Switch option to onboard a switch which is not cloud-ready and does not have a QR code on it.

It is important to back up your existing Junos OS configuration on the switch before activating a brownfield switch because when the switch is adopted to the Juniper Mist cloud, the old configuration is replaced. To back up your existing Junos OS configuration, run the request system configuration rescue save command, which saves the currently active configuration and any installation-specific parameters.

In this procedure, you will make a few configuration changes to the Juniper Mist portal, and some to the switch using the Junos OS CLI. Be sure you can log in to both systems.

To onboard a brownfield switch to the Mist cloud:

  1. Log in to your organization on the Juniper Mist cloud and then click Organization > Inventory in the menu.
  2. Select Switches at the top of the page that appears, and then click the Adopt Switch button in the upper-right corner to generate the Junos OS CLI commands needed for the interoperability. The commands create a Juniper Mist user account, and an SSH connection to the Juniper Mist cloud over TCP port 2200 (the switch connection is initiated from a management interface and is used for setting up configuration and sending telemetry data).
    Figure 1: The Switch Adoption Page The Switch Adoption Page
  3. In the page that appears, click Copy to Clipboard to get the commands from the Juniper Mist cloud.
  4. Log in to the switch via Junos OS CLI.
  5. In the CLI, type edit to start configuration mode, and then paste the commands you just copied (type top if you are not already at the base level of the hierarchy).
  6. If you want to add a system message, use the following command:
    content_copy zoom_out_map
    user@host# set system login message message text here
  7. You can confirm your updates on the switch by running show commands at the [system services] level of the hierarchy, and again at the [system login user juniper-mist] level of the hierarchy.
    content_copy zoom_out_map
    show system services
    content_copy zoom_out_map
    ssh {
        protocol-version v2;
    }
    netconf {
        ssh;
    }
    outbound-ssh {
        client juniper-mist {
            device-id 550604ec-12df-446c-b9b0-eada61808414;
            secret "trimmed"; ## SECRET-DATA
            keep-alive {
                retry 3;
                timeout 5;
            }
            services netconf;
            oc-term.mistsys.net {
                port 2200;
                retry 1000;
                timeout 60;
            }
        }
    }
    dhcp-local-server {
        group guest {
            interface irb.188;
        }
        group employee {
            interface irb.189;
        }
        group management {
            interface irb.180;
        }
    }
    
    content_copy zoom_out_map
    show system login user juniper-mist
    content_copy zoom_out_map
    user@Switch-1#  show system login user juniper-mist
    class super-user;
    authentication {
        encrypted-password "$trimmed ## SECRET-DATA
    }
    
  8. Run the commit command to save the configuration.
  9. On the Juniper Mist portal, click Organization > Inventory > Switches and select the switch you just added.
  10. Click the More drop-down list at the top of the page, and then click the Assign to Site button.
  11. In the page that appears, choose which site you want to assign the switch to, and then select Manage configuration with Mist.

For a quick demo, watch the following video:

Video 2: Onboard a Brownfield Switch
Show Transcript
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right
footer-navigation
keyboard_arrow_down
file_download
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
language