software-guide-junos-space-platform.pdf

Junos Space Network Management
Platform
Complete Software Guide
Release
17.2
Modified: 2017-12-20
Copyright © 2017, Juniper Networks, Inc.

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. and/or its affiliates in
the United States and other countries. All other trademarks may be property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
Junos Space Network Management Platform Complete Software Guide

17.2
Copyright © 2017 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
http://www.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that
EULA.
ii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix
Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix
Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix
Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix
Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . li
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lii
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . lii
Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lii
Guide 1 Getting Started Guide

Chapter 1 Junos Space Fabric Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Junos Space Fabric Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Junos Space Fabric Deployment Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Deploying a Junos Space Hardware Appliance . . . . . . . . . . . . . . . . . . . . . . . . 58
Deploying a Junos Space Virtual Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Basic Requirements for a Fabric Deployment . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring Network Connectivity for a Junos Space Fabric . . . . . . . . . . . . . 60
Adding Nodes to a Junos Space Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Chapter 2 Junos Space System Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Installing and Upgrading Junos Space Software Overview . . . . . . . . . . . . . . . . . . 63
Installing Junos Space Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Upgrading Junos Space Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Upgrading Junos Space Network Management Platform . . . . . . . . . . . . . . . . 64
Uninstalling Junos Space Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Junos Space Applications Supported on the Junos Space Platform . . . . . . . . . . . 67
Junos Space License Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
DMI Schema Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Backing Up the Junos Space Platform Database . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Configuring User Access Controls Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Authentication and Authorization Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Certificate–Based and Certificate Parameter–based Authentication . . . . . . 74
User Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Remote Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Copyright © 2017, Juniper Networks, Inc. iii

Chapter 3 Junos Space Network Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Device Management in Junos Space Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Discovering Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Authenticating Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Viewing the Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Upgrading Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Device Configuration Management in Junos Space Platform . . . . . . . . . . . . . . . . 83
Modifying the Device Configuration by Using the Schema-Based
Configuration Editor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Modifying the Device Configuration by Using Device Templates . . . . . . . . . . 84
Viewing Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Backing Up and Restoring Device Configuration Files . . . . . . . . . . . . . . . . . . . 85
Guide 2 User Interface Guide

Chapter 4 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Junos Space User Interface Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Junos Space Banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Task Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Main Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Junos Space Home Page Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Chapter 5 Working in the Junos Space User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Logging In to Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Setting and Accessing the Junos Space Home Page . . . . . . . . . . . . . . . . . . . . . . . 101
Setting the Junos Space Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Accessing the Junos Space Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Using the Getting Started Assistants on Junos Space . . . . . . . . . . . . . . . . . . . . . 103
Accessing Help on Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Understanding GUI Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Check Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Selecting All Objects on a Single Page . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Selecting All Objects Across Multiple Pages . . . . . . . . . . . . . . . . . . . . . . 106
Date Picker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Drop-down List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Option Button . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Search Field . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Spin Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Slider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Text Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Identifying the Range of Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Tree View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Scrolling Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Sizing Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Understanding Tooltips and Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Confirmation Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Information Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Standard Icons in Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
iv Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Understanding Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Progress Bars . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Status Indicator Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Viewing the Junos Space Platform Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Workspace Statistics Page Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Workspace Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Inventory Landing Page Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Organizing Your View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Paging Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Sorted-by Indicator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Show or Hide Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Filter Submenus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Working with Objects on an Inventory Page . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Toolbar Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
Actions Menu and Shortcut Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
Exporting Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Filter Management in Junos Space Platform User Interface . . . . . . . . . . . . . . . . . 132
Understanding Filtering Options in Junos Space Platform User Interface . . . 132
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Pages and Columns that Support Filtering . . . . . . . . . . . . . . . . . . . . . . . 133
Managing Filtering Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Creating Filters by Manually Entering the Filter Criteria . . . . . . . . . . . . . 144
Creating Filters by Using the Filter Submenu Options . . . . . . . . . . . . . . 146
Saving a Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Modifying a Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Creating a Public Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Applying a Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Clearing a Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Deleting a Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Error Conditions and Error Messages for Filters . . . . . . . . . . . . . . . . . . . . . . . . 151
Global Search Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Using Global Search . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
Viewing Your Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Changing Your Password on Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Logging Out of Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Guide 3 Workspaces Feature Guide

Part 1 Overview
Chapter 6 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Junos Space Platform Workspaces Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Viewing the Junos Space Platform Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Copyright © 2017, Juniper Networks, Inc. v

Part 2 Devices
Chapter 7 Device Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Device Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Managed and Unmanaged Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
IPv4 and IPv6 Address Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
Confirmed-commit from Junos Space Network Management Platform . . . . . . . 181
Viewing Managed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Juniper Networks Devices Supported by Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
Uploading Device Tags by Using a CSV File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192
Filtering Devices by CSV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Chapter 8 Systems of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Systems of Record in Junos Space Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Systems of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Implications on device management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
Understanding How Junos Space Automatically Resynchronizes Managed
Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Network as System of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Junos Space as System of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Chapter 9 Device Discovery Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Device Discovery Profiles Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Connections Initiated by Junos Space or the Device . . . . . . . . . . . . . . . . . . . 202
Device Information Fetched During Device Discovery . . . . . . . . . . . . . . . . . . 203
Creating a Device Discovery Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204
Specifying Device Targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Specifying Probes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
Selecting the Authentication Method and Specifying Credentials . . . . . . . . . 211
(Optional) Specifying SSH Fingerprints . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212
Scheduling Device Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213
Running Device Discovery Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215
Modifying a Device Discovery Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216
Cloning a Device Discovery Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Viewing a Device Discovery Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
Deleting Device Discovery Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
Exporting the Device Discovery Details As a CSV File . . . . . . . . . . . . . . . . . . . . . . 220
Chapter 10 Modeling Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223
Rapid Deployment Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224
Zero Touch Deployment Using Autoinstallation and Junos Space Network
Management Platform on ACX Series and SRX Series Devices . . . . . . . . . . 225
Zero-Touch Deployment Using the Autoinstallation and Model and Activate
Devices Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Zero-Touch Deployment Using the Autoinstallation Feature and the
Configuration Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Model Devices Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
Creating a Connection Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
Creating a Modeled Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
vi Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Activating a Modeled or Cloned Device in Junos Space Network Management

Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
Downloading a Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242
Viewing and Copying Configlet Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244
Activating Devices by Using Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Activating a Device by Using a Plain-text Single Configlet . . . . . . . . . . . . . . 246
Activating a Device by Using an AES-encrypted Single Configlet . . . . . . . . 246
Activating a Device by Using a Plain-text Bulk Configlet . . . . . . . . . . . . . . . . 247
Activating a Device by Using an AES-encrypted Bulk Configlet . . . . . . . . . . 247
Viewing a Modeled Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248
Adding More Devices to an Existing Modeled Instance . . . . . . . . . . . . . . . . . . . . 249
Viewing the Status of Modeled Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
Deleting Modeled Instances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
Viewing a Connection Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
Cloning a Connection Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Modifying a Connection Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Deleting Connection Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254
Chapter 11 Device Authentication in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Device Authentication in Junos Space Overview . . . . . . . . . . . . . . . . . . . . . . . . . 255
Credentials-Based Device Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Key-Based Device Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
SSH Fingerprint-Based Device Authentication . . . . . . . . . . . . . . . . . . . . . . . 257
Supported Algorithms for Junos Space SSH . . . . . . . . . . . . . . . . . . . . . . . . . 258
Generating and Uploading Authentication Keys to Devices . . . . . . . . . . . . . . . . . 259
Generating Authentication Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
Uploading Authentication Keys to Multiple Managed Devices for the First
Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
Uploading Authentication Keys to Managed Devices With a Key Conflict . . 263
Resolving Key Conflicts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264
Modifying the Authentication Mode on the Devices . . . . . . . . . . . . . . . . . . . . . . . 266
Acknowledging SSH Fingerprints from Devices . . . . . . . . . . . . . . . . . . . . . . . . . . 268
Chapter 12 Viewing Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Device Inventory Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Inventory for Aggregation and Satellite Devices . . . . . . . . . . . . . . . . . . . . . . 274
Viewing the Physical Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Displaying Service Contract and EOL Data in the Physical Inventory Table . . . . . 279
Viewing Physical Interfaces of Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280
Viewing Logical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Viewing and Acknowledging Inventory Changes on Devices . . . . . . . . . . . . . . . . 283
Chapter 13 Exporting Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Exporting the License Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Viewing and Exporting the Software Inventory of Managed Devices . . . . . . . . . 289
Exporting the Physical Inventory of Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
Copyright © 2017, Juniper Networks, Inc. vii

Chapter 14 Configuring Juniper Networks Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

Modifying the Configuration on the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
Reviewing and Deploying the Device Configuration . . . . . . . . . . . . . . . . . . . . . . . 300
Viewing the Configuration Changes on the Device . . . . . . . . . . . . . . . . . . . . 301
Validating the Delta Configuration on the Device . . . . . . . . . . . . . . . . . . . . . 303
Viewing the Device-Configuration Validation Report . . . . . . . . . . . . . . . . . . 303
Excluding or Including a Group of Configuration Changes . . . . . . . . . . . . . . 304
Deleting a Group of Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . 304
Approving the Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
Rejecting the Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305
Deploying the Configuration Changes to a Device . . . . . . . . . . . . . . . . . . . . 306
Junos OS Releases Supported in Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307
Configuration Guides Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308
Saving the Configuration Created using the Configuration Guides . . . . . . . . . . . 309
Previewing the Configuration Created using the Configuration Guides . . . . . . . . 309
Deploying the Configuration Created using the Configuration Guides . . . . . . . . . 310
Viewing and Assigning Shared Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
Applying a CLI Configlet to Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313
Applying a CLI Configlet to a Physical Inventory Element . . . . . . . . . . . . . . . . . . . 316
Applying a CLI Configlet to a Physical Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 320
Applying a CLI Configlet to a Logical Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . 323
Executing a Script on the Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327
Executing a Script on a Physical Inventory Component . . . . . . . . . . . . . . . . . . . . 331
Executing a Script on a Logical Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333
Executing a Script on the Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335
Chapter 15 Device Adapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
Worldwide Junos OS Adapter Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
Installing the Worldwide Junos OS Adapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 340
Connecting to ww Junos OS Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
Chapter 16 Device Configuration Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343
Viewing the Active Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343
Viewing the Configuration Change Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
Resolving Out of band Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349
Creating a Quick Template from the Device Configuration . . . . . . . . . . . . . . . . . . 351
Chapter 17 Adding and Managing Non Juniper Networks Devices . . . . . . . . . . . . . . . . . 353
Adding Unmanaged Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
Modifying Unmanaged Device Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 356
viii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Chapter 18 Accessing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357

Launching a Device’s Web User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357
Looking Glass Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358
Executing Commands by Using Looking Glass . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
Exporting Looking Glass Results in Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361
Secure Console Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
Connecting to a Device by Using Secure Console . . . . . . . . . . . . . . . . . . . . . . . . . 363
Connecting to a Managed Device from the Device Management Page . . . . 364
Connecting to an Unmanaged Device from the Device Management
Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
Connecting to a Managed or Unmanaged Device from the Secure Console
Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
Configuring SRX Device Clusters in Junos Space using Secure Console . . . . . . . 370
Configuring a Standalone Device from a Single-node Cluster . . . . . . . . . . . 370
Configuring a Standalone Device from a Two-Node Cluster . . . . . . . . . . . . . 372
Configuring a Primary Peer in a Cluster from a Standalone Device . . . . . . . 375
Configuring a Secondary Peer in a Cluster from a Standalone Device . . . . . 377
Chapter 19 Logical Systems (LSYS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Understanding Logical Systems for SRX Series Services Gateways . . . . . . . . . . 381
Creating a Logical System (LSYS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Deleting Logical Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382
Viewing Logical Systems for a Physical Device . . . . . . . . . . . . . . . . . . . . . . . . . . 383
Viewing the Physical Device for a Logical System . . . . . . . . . . . . . . . . . . . . . . . . 384
Chapter 20 Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387
Creating Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387
Modifying Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
Deleting Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389
Chapter 21 Custom Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391
Adding Custom Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391
Adding Custom Labels for a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 392
Adding Custom Labels for Physical Inventory . . . . . . . . . . . . . . . . . . . . . . . . 392
Adding Custom Labels for a Physical Interface . . . . . . . . . . . . . . . . . . . . . . . 393
Adding Custom Labels for a Logical Interface . . . . . . . . . . . . . . . . . . . . . . . . 394
Importing Custom Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394
Modifying Custom Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396
Deleting Custom Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397
Chapter 22 Verifying Template, Image Deployment, Script Execution, and Staged
Images on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 399
Viewing the Device-Template Association (Devices) . . . . . . . . . . . . . . . . . . . . . 399
Viewing Associated Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401
Viewing Script Execution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402
Viewing Staged Images on a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 403
Chapter 23 Device Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405
Viewing Alarms from a Managed Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405
Viewing the Performance Graphs of a Managed Device . . . . . . . . . . . . . . . . . . . 407
Copyright © 2017, Juniper Networks, Inc. ix

Chapter 24 Device Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411

Viewing Device Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411
Viewing Devices and Logical Systems with QuickView . . . . . . . . . . . . . . . . . . . . . 412
Resynchronizing Managed Devices with the Network . . . . . . . . . . . . . . . . . . . . . . 413
Putting a Device in RMA State and Reactivating Its Replacement . . . . . . . . . . . . 414
Putting a Device in RMA State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414
Reactivating a Replacement Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415
Modifying the Target IP Address of a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416
Modifying the Serial Number of a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
Rebooting Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
Deleting Staged Images on a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
Cloning a Device in Junos Space Network Management Platform . . . . . . . . . . . 420
Deleting Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421
Part 3 Device Templates

Chapter 25 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425
Device Templates Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425
Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426
Device Template States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
Device Template Statuses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
Device Templates Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
Device Template Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
Chapter 26 Template Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
Creating a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
Finding Configuration Options in a Template Definition . . . . . . . . . . . . . . . . . . . 440
Working with Rules in a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . 442
Specifying Device-Specific Values in Template Definitions . . . . . . . . . . . . . . . . . 444
Creating a CSV file with device-specific values . . . . . . . . . . . . . . . . . . . . . . . 444
Using a CSV file to set device-specific values . . . . . . . . . . . . . . . . . . . . . . . . 445
Managing CSV Files for a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . 446
Publishing a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447
Viewing a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447
Modifying a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 449
Cloning a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 450
Importing a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451
Exporting a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 452
Unpublishing a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453
Deleting a Template Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453
Chapter 27 Configuring Devices using Device Templates . . . . . . . . . . . . . . . . . . . . . . . . 455
Creating a Device Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455
Assigning a Device Template to Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457
Deploying a Template to the Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459
Modifying a Device Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462
Undeploying a Device Template from the Devices . . . . . . . . . . . . . . . . . . . . . . . . 463
Unassigning a Device Template from the Devices . . . . . . . . . . . . . . . . . . . . . . . . 464
Auditing a Device Template Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465
x Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Chapter 28 Configuring Devices using Quick Templates . . . . . . . . . . . . . . . . . . . . . . . . . 469

Quick Templates Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469
Creating a Quick Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470
Deploying a Quick Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476
Chapter 29 Device Template Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481
Viewing Template Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481
Viewing the Device-Template Association (Device Templates) . . . . . . . . . . . . . 482
Viewing Template Definition Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484
Viewing Device Template Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485
Comparing Templates or Template Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486
Comparing a Device Template Configuration with a Device Configuration . . . . . 487
Cloning a Template in Junos Space Network Management Platform . . . . . . . . . 488
Exporting and Importing a Quick Template in Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489
Exporting a Quick Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490
Importing a Quick Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490
Deleting Device Templates from Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491
Part 4 CLI Configlets

CLI Configlets Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495
Configlet Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
Default Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
User-Defined Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
Predefined Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497
Velocity Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497
Directives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 497
CLI Configlets Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498
Configlet Context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501
Context of an Element . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 502
Context filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 503
Nesting Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 505
Chapter 31 CLI Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507
Creating a CLI Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507
Modifying a CLI Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 511
Viewing CLI Configlet Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 511
Viewing a CLI Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 512
Exporting CLI Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514
CLI Configlet Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 515
Example 1: Setting the description of a physical interface . . . . . . . . . . . . . . . 515
Example 2: Setting the vlan of a logical interface, where the vlan id is chosen
from a predefined set of values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516
Example 3: Setting a description on all the interfaces of a device . . . . . . . . . 517
Example 4: Setting a configuration in all the PICs belonging to a device and
certain configuration only on the first PIC of FPC 0 . . . . . . . . . . . . . . . . 518
Example 5: Halting the description of a physical interface . . . . . . . . . . . . . . 521
Copyright © 2017, Juniper Networks, Inc. xi

Example 6: Deleting configuration from a physical interface . . . . . . . . . . . . . 521

Deleting CLI configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 522
Cloning a CLI Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 522
Importing CLI Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 523
Applying a CLI Configlet to Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 528
Comparing CLI Configet Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 532
Marking and Unmarking CLI Configlets as Favorite . . . . . . . . . . . . . . . . . . . . . . . 533
Marking CLI Configlets as Favorite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 533
Unmarking CLI Configlets Marked as Favorite . . . . . . . . . . . . . . . . . . . . . . . . 534
Chapter 32 Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535
Configuration Views Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535
Configuration View Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536
Configuration View Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537
XML Extensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 538
Creating a Configuration View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 539
Viewing a Configuration View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541
Modifying a Configuration View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 542
Deleting Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543
Exporting and Importing Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . 543
Exporting Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544
Importing Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545
Viewing Configuration Views Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 548
Default Configuration Views Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 548
Default view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549
Example XML view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549
Example Form view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
Example Grid view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
Chapter 33 XPath and Regular Expressions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553
XPath and Regex Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553
Creating Xpath or Regex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553
Modifying Xpath and Regex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554
Deleting Xpath and Regex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555
XPath and Regular Expression Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555
Example 1 – Alphanumeric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555
Example 2 - Logical Interfaces per Physical Interface . . . . . . . . . . . . . . . . . . 556
Example 3 – Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 556
Example 4 – Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 556
Chapter 34 Configuration Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 557
Creating a Configuration Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 557
Modifying a Configuration Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 558
Deleting Configuration Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 558
Part 5 Images and Scripts

Device Images and Scripts Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 563
Viewing Statistics for Device Images and Scripts . . . . . . . . . . . . . . . . . . . . . . . . . 564
xii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Chapter 36 Managing Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567

Device Images Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567
Importing Device Images to Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569
Viewing Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 570
Modifying Device Image Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 572
Staging Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 573
Staging Satellite Software Packages on Aggregation Devices . . . . . . . . . . . . . . . 577
Verifying the Checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 582
Viewing and Deleting MD5 Validation Results . . . . . . . . . . . . . . . . . . . . . . . . . . . 586
Viewing the MD5 Validation Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587
Deleting the MD5 Validation Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 588
Deploying Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 589
Deploying Satellite Software Packages on Aggregation and Satellite Devices . . 601
Viewing Device Image Deployment Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 607
Viewing Device Association of Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609
Undeploying JAM Packages from Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610
Removing Device Images from Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 615
Deleting Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619
Chapter 37 Managing Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 621
Scripts Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 622
Promoting Scripts Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625
Importing Scripts to Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625
Importing Scripts from Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 626
Importing Scripts from a Git Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627
Viewing Script Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630
Modifying Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 632
Modifying Script Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 635
Comparing Script Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 636
Staging Scripts on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 637
Verifying the Checksum of Scripts on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . 641
Viewing Verification Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 643
Enabling Scripts on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 644
Executing Scripts on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647
Executing Scripts on Devices Locally with JUISE . . . . . . . . . . . . . . . . . . . . . . . . . . 651
Viewing Execution Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 655
Exporting Scripts in .tar Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 656
Viewing Device Association of Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 657
Marking and Unmarking Scripts as Favorite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658
Marking Scripts as Favorite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658
Unmarking Scripts Marked as Favorite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 659
Disabling Scripts on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 659
Removing Scripts from Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 662
Deleting Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 666
Script Annotations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 667
Script Execution Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669
Variable Context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670
Local Script Execution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670
Copyright © 2017, Juniper Networks, Inc. xiii

Nesting Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 671

Script Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672
Chapter 38 Managing Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675
Operations Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675
Creating an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 676
Importing an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681
Viewing an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 682
Modifying an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684
Running an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684
Viewing Operation Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688
Copying an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689
Exporting an Operation in .tar Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 690
Deleting an Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 691
Chapter 39 Managing Script Bundles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 693
Script Bundles Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 693
Creating a Script Bundle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694
Viewing Script Bundles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696
Modifying a Script Bundle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 698
Staging Script Bundles on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 699
Enabling Scripts in Script Bundles on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . 701
Executing Script Bundles on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 703
Disabling Scripts in Script Bundles on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . 706
Viewing Device Associations of Scripts in Script Bundles . . . . . . . . . . . . . . . . . . 708
Deleting Script Bundles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 708
Part 6 Reports
Chapter 40 Reports Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713
Reports Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713
Audit Trail Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 715
Device Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 715
Device License Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716
Device Logical Interface Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . 717
Device Physical Interface Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . 718
Device Physical Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 719
Device Software Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 720
Job Inventory Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 720
User Account Report Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721
Chapter 41 Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 723
Creating Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 723
Viewing Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 726
Modifying Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 727
Cloning Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728
Deleting Report Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 729
Viewing Report Definition Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 729
xiv Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Chapter 42 Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

Generating Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 732
Viewing a Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 735
Viewing and Downloading Generated Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . 737
Deleting Generated Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 738
Viewing Report Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 738
Part 7 Network Monitoring

Network Monitoring Workspace Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 744
Working with the Network Monitoring Home Page . . . . . . . . . . . . . . . . . . . . . . . 746
Viewing Nodes with Pending Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 747
Viewing Nodes with Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748
Availability Over the Past 24 Hours . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748
Viewing Outstanding Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748
Viewing Resource Graphs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 749
Viewing KSC Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 750
Searching for Nodes by Using Quick Search . . . . . . . . . . . . . . . . . . . . . . . . . 750
Chapter 44 Managing Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753
Viewing the Node List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753
Managing Surveillance Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755
Modifying Surveillance Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755
Deleting Surveillance Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755
Adding Surveillance Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755
Resynchronizing Nodes in Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . 756
Turning SNMP Data Collection Off and On . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757
Chapter 45 Searching for Nodes and Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759
Searching for Nodes or Nodes with Asset Information . . . . . . . . . . . . . . . . . . . . . 759
Searching for Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759
Searching for Nodes with Asset Information . . . . . . . . . . . . . . . . . . . . . . . . . 761
Working with Node Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 762
Searching for and Viewing Nodes with Asset Information . . . . . . . . . . . . . . 763
Viewing and Modifying Node Asset Information . . . . . . . . . . . . . . . . . . . . . . 764
Chapter 46 Managing Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
Viewing and Tracking Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
Viewing Details about an Outage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
Viewing the List of Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
Configuring Scheduled Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 770
Chapter 47 Using the Network Monitoring Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . 773
Viewing the Network Monitoring Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773
Using the Dashboard Surveillance View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773
Chapter 48 Managing and Configuring Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777
Viewing and Managing Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777
Viewing the Details of an Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778
Searching for Events (Advanced Event Search) . . . . . . . . . . . . . . . . . . . . . . 779
Copyright © 2017, Juniper Networks, Inc. xv

Viewing, Searching for, Sorting, and Filtering Events . . . . . . . . . . . . . . . . . . . 780

Selecting and Sending an Event to the Network Management System . . . . . . . 784
Managing Events Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784
Adding New Events Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784
Deleting Events Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785
Modifying Events Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785
Chapter 49 Managing and Configuring Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787
Viewing and Managing Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787
Viewing Details of an Alarm and Acting on an Alarm . . . . . . . . . . . . . . . . . . 789
Viewing Alarms in Summary and Detailed Views . . . . . . . . . . . . . . . . . . . . . . 791
Viewing NCS Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 797
Searching for Alarms (Advanced Alarms Search) . . . . . . . . . . . . . . . . . . . . . 797
Alarm Notification Configuration Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 799
Basic Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 799
Guidelines for Configuring Alarm Notifications . . . . . . . . . . . . . . . . . . . . . . 800
Advanced Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 800
Configuring Alarm Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801
Configuring a Basic Filter for Alarm Notification . . . . . . . . . . . . . . . . . . . . . . 802
Activating Alarm Notification Configuration Files for Basic Filtering . . . . . . 803
Reloading a Filter Configuration to Apply Filter Configuration Changes . . . 804
Chapter 50 Managing and Configuring Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805
Viewing, Configuring, and Searching for Notifications . . . . . . . . . . . . . . . . . . . . . 805
Notification Escalation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805
Configuring Event Notifications, Path Outages, and Destination Paths . . . . . . . 806
Configuring Event Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 806
Configure Destination Paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808
Configure Path Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 810
Chapter 51 Managing Reports and Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813
Network Monitoring Reports Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813
Resource Graphs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813
Key SNMP Customized Performance Reports, Node Reports, and Domain
Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813
Database Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814
Statistics Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814
Creating Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814
Creating Key SNMP Customized Performance Reports, Node Reports, and
Domain Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814
Creating a New KSC Report from an Existing Report . . . . . . . . . . . . . . . . . . . 815
Viewing Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 816
Viewing Resource Graphs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 816
Viewing Key SNMP Customized (KSC) Performance Reports, Node Reports,
and Domain Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817
Viewing Database Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817
Sending Database Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818
Viewing Pre-run Database Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 819
Viewing Statistics Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 819
Generating a Statistics Report for Export . . . . . . . . . . . . . . . . . . . . . . . . . . . 820
xvi Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Deleting Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Deleting Key SNMP Customized Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821
Deleting Pre-Run Database Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821
Viewing Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821
Chapter 52 Network Monitoring Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 823
Network Monitoring Topology Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 823
Working with Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825
Using the Search Option to View Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 826
Working with Topology Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 826
Viewing the Events and Alarms Associated with a Node . . . . . . . . . . . . . . . 828
Viewing Alarms and Node Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829
Viewing Nodes with Active Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830
Managing Alarms Associated with Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . 831
Viewing the Topology with Different Layouts . . . . . . . . . . . . . . . . . . . . . . . . . 831
Automatic Refresh of the Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832
Viewing the Status of Node Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 833
Viewing the Alarm State of Services Links . . . . . . . . . . . . . . . . . . . . . . . . . . . 833
Pinging a Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 833
Viewing the Resource Graphs Associated with the Node . . . . . . . . . . . . . . . 834
Connecting to a Device by Using SSH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835
Network Monitoring Topology Discovery Methods Supported by Junos Space
Network Management Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 837
Chapter 53 Network Monitoring Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839
Configuring Network Monitoring System Settings . . . . . . . . . . . . . . . . . . . . . . . . 839
Network Monitoring System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . 839
Generating a Log File for Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . 840
Changing the Notification Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841
Updating Network Monitoring After Upgrading the Junos Space Network
Management Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841
Step 1: Monitoring the Software Install Status Window for File Conflicts . . 842
Step 2: Identifying Files with Conflicts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843
Step 3: Merging Files with Conflicts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845
Step 4: Verifying the Manual Merge Status of Configuration Files . . . . . . . . 846
Step 5: Final Steps After Upgrading Network Monitoring . . . . . . . . . . . . . . . 846
Configuring SNMP Community Names by IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . 847
Configuring SNMP Data Collection per Interface . . . . . . . . . . . . . . . . . . . . . . . . . 848
Managing Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849
Creating Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849
Modifying Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 852
Deleting Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 853
Compiling SNMP MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854
Uploading MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854
Compiling MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854
Viewing MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 855
Deleting MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 855
Clearing MIB Console Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 855
Generating Event Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 856
Copyright © 2017, Juniper Networks, Inc. xvii

Generating a Data Collection Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 857

Managing SNMP Collections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859
Adding a New SNMP Collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859
Modifying an SNMP Collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 860
Managing SNMPv3 Trap Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861
Managing Data Collection Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 864
Adding New Data Collection Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 864
Deleting Data Collection Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 864
Modifying Data Collection Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 865
Managing and Unmanaging Interfaces and Services . . . . . . . . . . . . . . . . . . . . . . 867
Starting, Stopping, and Restarting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 867
Part 8 Configuration Files

Managing Configuration Files Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 873
Viewing Configuration File Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 874
Chapter 55 Managing Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 877
Backing Up Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 878
Viewing Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 883
Comparing Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 887
Modifying Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 889
Restoring Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 892
Exporting Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 894
Deleting Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 896
Part 9 Jobs
Jobs Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 901
Chapter 57 Managing Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905
Viewing Statistics for Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905
Viewing the Types of Jobs That Are Run . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906
Viewing the State of Jobs That Have Run . . . . . . . . . . . . . . . . . . . . . . . . . . . 906
Viewing Average Execution Times for Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . 906
Viewing Your Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 907
Viewing Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 908
Viewing Objects on Which a Job is Executed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 911
Viewing Job Recurrence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 913
Rescheduling and Modifying the Recurrence Settings of Jobs . . . . . . . . . . . . . . . 914
Retrying a Job on Failed Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915
Reassigning Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917
Canceling Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 920
Clearing Your Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 921
Archiving and Purging Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 921
Purging Jobs Without Archiving . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 922
Archiving Jobs to a Local Server and Purging the Jobs from the
Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 923
xviii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Archiving Jobs to a Remote Server and Purging the Jobs from the
Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925
Common Error Messages in Device-Related Operations . . . . . . . . . . . . . . . . . . . 927
Part 10 Role-Based Access Control

Role-Based Access Control Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 931
User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 931
RBAC Enforcement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 932
RBAC Enforcement by Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 932
RBAC Enforcement Not Supported on the Getting Started Page . . . . . 932
Chapter 59 Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933
Roles Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933
Predefined Roles Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 934
Creating a User-Defined Role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 953
Managing Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 954
Viewing User Role Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 954
Managing Predefined and User-Defined Roles . . . . . . . . . . . . . . . . . . . . . . . 955
Modifying User-Defined Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 956
Deleting User-Defined Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957
Cloning Predefined and User-Defined Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . 958
Exporting User-Defined Roles from Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 959
Importing Roles to Junos Space Network Management Platform . . . . . . . . . . . 960
Chapter 60 User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 963
Configuring Users to Manage Objects in Junos Space Overview . . . . . . . . . . . . . 963
User-Specific Idle Timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 964
Creating Users in Junos Space Network Management Platform . . . . . . . . . . . . . 965
Creating a User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 966
Modifying a User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 973
Deleting Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 978
Disabling and Enabling Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 980
Unlocking Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 981
Viewing Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983
Sorting Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983
Displaying or Hiding Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 984
Filtering Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 984
Viewing User Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985
Performing Actions on Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987
Exporting User Accounts from Junos Space Network Management Platform . . 988
Creating a User Accounts Report Definition . . . . . . . . . . . . . . . . . . . . . . . . . 988
Generating and Downloading a Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 990
Changing Your Password on Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 992
Clearing User Local Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 993
Viewing User Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 994
Viewing the Number of Users Assigned by Role . . . . . . . . . . . . . . . . . . . . . . 994
Copyright © 2017, Juniper Networks, Inc. xix

Chapter 61 Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 995

Domains Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 995
Accessing Objects In and Across Domains . . . . . . . . . . . . . . . . . . . . . . . . . . 996
Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 997
Assignment of Objects to Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1000
Working with Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1002
Adding a Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1002
Modifying a Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1004
Deleting Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1006
Switching from One Domain to Another . . . . . . . . . . . . . . . . . . . . . . . . . . . 1009
Assigning Objects to an Existing Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1009
Assigning Users to an Existing Domain from the Domains Page . . . . . . . . 1009
Assigning Devices to an Existing Domain from the Domains Page . . . . . . . 1010
Assigning Remote Profiles to an Existing Domain from the Domains
Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1011
Assigning Objects to an Existing Domain from the Inventory Landing
Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1012
Exporting Domains from Junos Space Network Management Platform . . . . . . 1013
Chapter 62 Remote Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1015
Creating a Remote Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1015
Modifying a Remote Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1017
Deleting Remote Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1018
Chapter 63 API Access Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1019
Creating an API Access Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1019
Modifying an API Access Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1021
Deleting API Access Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1021
Chapter 64 User Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023
User Sessions Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023
Limiting User Sessions in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1024
Terminating User Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026
Using the Junos Space CLI to View Users Logged In to the Junos Space GUI . . 1027
Part 11 Audit Logs

Junos Space Audit Logs Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1031
Chapter 66 Managing Audit Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033
Viewing Audit Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033
Viewing Audit Log Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036
Viewing the Dynamic Audit Log Statistical Graph . . . . . . . . . . . . . . . . . . . . 1036
Viewing the Top 10 Active Users In 24 Hours Statistics . . . . . . . . . . . . . . . . 1038
Exporting Audit Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1038
xx Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Converting the Junos Space Audit Log File Timestamp from UTC to Local Time
Using Microsoft Excel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1039
Archiving and Purging or Only Purging Audit Logs . . . . . . . . . . . . . . . . . . . . . . . 1040
Purging Audit Logs Without Archiving . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1041
Purging Audit Logs After Archiving . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1044
Part 12 Administration
Junos Space Administrators Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1051
Viewing the Administration Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053
Viewing System Health Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053
Viewing the System Health Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053
Viewing System Alert Messages in the Last 30 Days . . . . . . . . . . . . . . . . . 1060
Junos Space IPv6 Support Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1062
Maintenance Mode Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1063
Maintenance Mode Access and System Locking . . . . . . . . . . . . . . . . . . . . . 1064
Maintenance-Mode User Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . 1064
Chapter 68 Managing Nodes in the Junos Space Fabric . . . . . . . . . . . . . . . . . . . . . . . . . 1067
Fabric Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1068
Overall System Condition and Fabric Load History Overview . . . . . . . . . . . . . . 1069
Overall System Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069
Fabric Load History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071
Active Users History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071
Junos Space Nodes and FMPM Nodes in the Junos Space Fabric Overview . . . 1072
Understanding the Junos Space Node Functions in a Fabric . . . . . . . . . . . . 1072
Understanding the FMPM Node Functions in a Fabric . . . . . . . . . . . . . . . . . 1075
Dedicated Database Nodes in the Junos Space Fabric Overview . . . . . . . . . . . . 1077
Cassandra Nodes in the Junos Space Fabric Overview . . . . . . . . . . . . . . . . . . . 1080
Adding a Node to an Existing Junos Space Fabric . . . . . . . . . . . . . . . . . . . . . . . 1083
Adding a Junos Space Node to the Junos Space Fabric . . . . . . . . . . . . . . . 1084
Adding an FMPM Node to the Junos Space Fabric . . . . . . . . . . . . . . . . . . . 1088
Obtaining Fingerprint of a Junos Space Node . . . . . . . . . . . . . . . . . . . . . . . 1090
Starting the Cassandra Service on a Junos Space Node . . . . . . . . . . . . . . . . . . . 1091
Viewing Nodes in the Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1092
Changing Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1092
Viewing Fabric Node Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1093
Monitoring Nodes in the Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1098
Viewing and Modifying the SNMP Configuration for a Fabric Node . . . . . . 1099
Starting SNMP Monitoring on Fabric Nodes . . . . . . . . . . . . . . . . . . . . . . . . . 1137
Stopping SNMP Monitoring on Fabric Nodes . . . . . . . . . . . . . . . . . . . . . . . . 1138
Restarting SNMP Monitoring on Fabric Nodes . . . . . . . . . . . . . . . . . . . . . . . 1138
Adding a Third-Party SNMP V1 or V2c Manager on a Fabric Node . . . . . . . . 1139
Adding a Third-Party SNMP V3 Manager on a Fabric Node . . . . . . . . . . . . . 1140
Deleting a Third-Party SNMP Manager from a Fabric Node . . . . . . . . . . . . . 1142
Installing StorMan RPM for Monitor RAID Functionality . . . . . . . . . . . . . . . . 1142
Viewing Alarms from a Fabric Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1142
Shutting Down or Rebooting Nodes in the Junos Space Fabric . . . . . . . . . . . . . . 1145
Disabling the Cassandra Service on a Junos Space Node . . . . . . . . . . . . . . . . . . 1147
Copyright © 2017, Juniper Networks, Inc. xxi

Deleting a Node from the Junos Space Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . 1148

Resetting MySQL Replication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1150
Modifying the Network Settings of a Node in the Junos Space Fabric . . . . . . . . 1152
Modifying the Fabric Virtual IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1154
Modifying the Network Settings of a Node . . . . . . . . . . . . . . . . . . . . . . . . . . 1155
Load-Balancing Devices Across Junos Space Nodes . . . . . . . . . . . . . . . . . . . . . 1159
Replacing a Failed Junos Space Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1159
Generating and Uploading Authentication Keys to Devices . . . . . . . . . . . . . . . . 1160
Generating Authentication Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1161
Uploading Authentication Keys to Multiple Managed Devices for the First
Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1162
Uploading Authentication Keys to Managed Devices With a Key Conflict . . 1164
Configuring the ESX or ESXi Server Parameters on a Node in the Junos Space
Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1165
Creating a System Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1166
Deleting a System Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1169
Restoring the System to a Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1169
Creating a Unicast Junos Space Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1170
Creating a Unicast Junos Space Cluster from a Single Node . . . . . . . . . . . . . 1171
Creating a Unicast Junos Space Cluster from an Existing Multicast Junos
Space Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1172
Changing Unicast Communication to Multicast Communication on a Junos
Space Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1173
NAT Configuration for Junos Space Network Management Platform
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1174
Using eth0 for Device Management Without a Dedicated Network Monitoring
Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1175
Using eth3 for Device Management Without a Dedicated Network Monitoring
Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1178
Using eth0 or eth3 for Device Management With a Dedicated Network
Monitoring Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1180
Configuring the NAT IP Addresses and Ports on Junos Space Platform . . . . . . . 1183
Modifying the NAT IP Addresses and Ports on Junos Space Platform . . . . . . . . 1184
Disabling the NAT Configuration on Junos Space Platform . . . . . . . . . . . . . . . . 1186
Chapter 69 Backing up and Restoring the Junos Space Platform Database . . . . . . . . 1187
Backing Up and Restoring the Database Overview . . . . . . . . . . . . . . . . . . . . . . . 1188
Backing Up a Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190
Restoring a Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1191
Backing Up the Junos Space Network Management Platform Database . . . . . . 1191
Restoring the Junos Space Network Management Platform Database . . . . . . . 1196
Restoring the Junos Space Platform Database from a Local Backup File . . 1197
Restoring the Junos Space Platform Database from a Remote Backup
File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1199
Deleting Junos Space Network Management Platform Database Backup
Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201
Viewing Database Backup Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203
Changing Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203
Viewing Database Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204
xxii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Managing Database Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

Chapter 70 Managing Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1207
Generating and Uploading the Junos Space License Key File . . . . . . . . . . . . . . . 1207
Generating the Junos Space License Key File . . . . . . . . . . . . . . . . . . . . . . . 1208
Uploading the Junos Space License Key File Contents . . . . . . . . . . . . . . . . 1208
Viewing Junos Space Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209
Chapter 71 Managing Junos Space Platform and Applications . . . . . . . . . . . . . . . . . . . 1211
Managing Junos Space Applications Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 1211
Upgrading Junos Space Network Management Platform Overview . . . . . . . . . . 1213
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1213
Pre-Upgrade Checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1214
How an Upgrade Impacts Previously Installed Junos Space Applications . . 1214
Performing the Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1214
Running Applications in Separate Server Instances . . . . . . . . . . . . . . . . . . . . . . . 1215
Adding a Server Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1216
Adding a Server to a Server Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1217
Starting Servers in a Server Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1218
Stopping Servers in a Server Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1218
Removing a Server Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1219
Moving an Application to a Different Server Group . . . . . . . . . . . . . . . . . . . . 1219
Managing Junos Space Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1220
Viewing Detailed Information About Junos Space Platform and
Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1220
Performing Actions on Junos Space Platform and Applications . . . . . . . . . 1220
Modifying Settings of Junos Space Applications . . . . . . . . . . . . . . . . . . . . . . . . . 1221
Modifying Junos Space Network Management Platform Settings . . . . . . . . . . . 1222
Managing File Integrity Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1238
Configuring File Integrity Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1238
Manually Checking File Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1239
Starting, Stopping, and Restarting Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1239
Adding a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1242
Uploading the Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1242
Installing the Uploaded Junos Space Application . . . . . . . . . . . . . . . . . . . . 1244
Upgrading a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1246
Upgrading Junos Space Network Management Platform . . . . . . . . . . . . . . . . . 1248
Synchronizing Time Across Junos Space Nodes . . . . . . . . . . . . . . . . . . . . . . . . . 1253
Upgrading to Junos Space Network Management Platform Release 16.1R1 . . . 1256
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1257
Downloading and Installing the Junos Space Platform 15.2R2 Patch . . . . . 1258
Executing the Data Back Up Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1259
Validating the Backup File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1263
Installing Junos Space Platform Release 16.1R1 as a Standalone Node or
the First Node of the Fabric and Restoring the Backed-Up Data . . . . . 1264
Rolling Back to Junos Space Platform Release 15.2R2 if Upgrade Fails . . . . 1267
Installing Junos Space Platform Release 16.1R1 on the Remaining Nodes of
the Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1271
Configuring Device Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1272
Managing Disaster Recovery Configuration after Upgrade to 16.1 . . . . . . . . 1272
Copyright © 2017, Juniper Networks, Inc. xxiii

Appendix: Sample Data of Time Taken for Backup and Restore While
Upgrading to Junos Space Platform Release 16.1R1 . . . . . . . . . . . . . . . . 1273
Upgrading Junos Space Network Management Platform . . . . . . . . . . . . . . . . . . 1273
Uninstalling a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1279
Chapter 72 Managing Troubleshooting Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281
System Status Log File Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281
System Status Log File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281
Customizing Status Log File Content . . . . . . . . . . . . . . . . . . . . . . . . . . 1282
Downloading System Log Files for a Junos Space Appliance . . . . . . . . . . . 1282
Customizing Log Files to Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1283
Customizing Node System Status Log Checking . . . . . . . . . . . . . . . . . . . . . . . . 1283
Customizing Node Log Files to Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1284
Configuring JBoss and OpenNMS Logs in Junos Space . . . . . . . . . . . . . . . . . . . 1284
Generating JBoss Thread Dump for Junos Space Nodes . . . . . . . . . . . . . . . . . . 1286
Downloading the Troubleshooting Log File in Server Mode . . . . . . . . . . . . . . . . 1288
Downloading the Troubleshooting Log File in Maintenance Mode . . . . . . . . . . . 1292
Downloading Troubleshooting System Log Files Through the Junos Space
CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1293
Downloading a System Log File by Using a USB Device . . . . . . . . . . . . . . . 1293
Downloading System Log File by Using SCP . . . . . . . . . . . . . . . . . . . . . . . . 1294
Chapter 73 Managing Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1299
Certificate Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1300
Authentication Modes Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1301
Custom Junos Space Server Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . 1302
Certificate Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1302
User Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1304
CA Certificates and CRLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1304
Changing the User Authentication Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . 1304
Certificate Expiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1305
Invalid User Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1305
Changing User Authentication Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1306
Changing the User Authentication Mode from Password-Based to Complete
Certificate-Based from the User Interface . . . . . . . . . . . . . . . . . . . . . . 1307
Changing the User Authentication Mode from Complete Certificate-Based
to Certificate Parameter–Based from the User Interface . . . . . . . . . . 1309
Changing the User Authentication Mode from Certificate Parameter–Based
to Complete Certificate-Based from the User Interface . . . . . . . . . . . . . 1311
Changing the User Authentication Mode to Password-Based from the User
Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1312
Changing the User Authentication Mode to Password-Based from the
CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1312
Installing a Custom SSL Certificate on the Junos Space Server . . . . . . . . . . . . . 1313
Installing an X.509 Junos Space Server Certificate . . . . . . . . . . . . . . . . . . . . 1313
Installing a Junos Space Server Certificate in the PKCS #12 Format . . . . . . 1314
Reverting to the Default Junos Space Server SSL Certificate . . . . . . . . . . . . 1315
Uploading a User Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1316
Uploading a User Certificate for a New User . . . . . . . . . . . . . . . . . . . . . . . . . 1316
Uploading a User Certificate for an Existing User . . . . . . . . . . . . . . . . . . . . . 1317
xxiv Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Uploading Your User Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1318

Uploading a CA Certificate and Certificate Revocation List . . . . . . . . . . . . . . . . . 1318
Uploading a CA Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1319
Uploading a Certification Revocation List . . . . . . . . . . . . . . . . . . . . . . . . . . . 1319
Deleting CA Certificates or Certificate Revocation Lists . . . . . . . . . . . . . . . 1320
Deleting a CA Certificate or Certificate Revocation List . . . . . . . . . . . . . . . . . . . 1320
Adding and Activating X.509 Certificate Parameters for X.509 Certificate
Parameter Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1321
Adding X.509 Certificate Parameters for X.509 Certificate Parameter
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1321
Activating an X.509 Certificate Parameter . . . . . . . . . . . . . . . . . . . . . . . . . . 1323
Modifying an X.509 Certificate Parameter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1324
Deleting X.509 Certificate Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1325
Chapter 74 Configuring Authentication Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1327
Remote Authentication Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1327
Junos Space Authentication Modes Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 1329
Local Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1329
Remote Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1329
Remote-Local Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1330
Junos Space Login Behavior with Remote Authentication Enabled . . . . . . . . . . 1331
Managing Remote Authentication Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1336
Creating a Remote Authentication Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1337
Modifying Authentication Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1340
Configuring a RADIUS Server for Authentication and Authorization . . . . . . . . . 1342
Configuring a TACACS+ Server for Authentication and Authorization . . . . . . . . 1344
Chapter 75 Managing SMTP Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1347
Managing SMTP Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1347
Adding an SMTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1348
Chapter 76 Email Listeners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1351
Email Listeners Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1351
Adding Users to the Email Listeners List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1351
Modifying Users in the Email Listeners List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1353
Deleting Users from the Email Listeners List . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1353
Chapter 77 Managing Git Repositories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1355
Git Repositories in Junos Space Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1355
Managing Git Repositories in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1356
Adding Git Repositories to Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1356
Modifying Git Repositories in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . 1357
Deleting Git Repositories from Junos Space . . . . . . . . . . . . . . . . . . . . . . . . 1358
Setting the Active Git Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1358
Testing the Connection to the Git Repository . . . . . . . . . . . . . . . . . . . . . . . . 1359
Viewing Git Repositories in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1360
Copyright © 2017, Juniper Networks, Inc. xxv

Chapter 78 Audit Log Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1361

Audit Log Forwarding in Junos Space Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 1361
Viewing Audit Log Forwarding Criterion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1362
Adding Audit Log Forwarding Criterion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1365
Modifying Audit Log Forwarding Criterion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1366
Deleting Audit Log Forwarding Criterion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1367
Enabling Audit Log Forwarding Criterion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1367
Testing the System Log Server Connection for Audit Log Forwarding . . . . . . . . 1368
Chapter 79 Configuring a Proxy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1371
Configuring Proxy Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1371
Chapter 80 Managing Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1375
Tags Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1376
My Favorite Private Tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1377
Device Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1377
Creating a Tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1377
Managing Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1381
Managing Hierarchical Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1383
Using the Tag Hierarchy Pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1384
Using the Tag Action Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1384
Using the Shortcut Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1385
Using Drag-and-Drop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1387
Using the Quick Info Tool Tip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1388
Browsing Tagged Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1388
Viewing All Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1388
Adding a Child Tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1388
Deleting a Tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1389
Using Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1389
Using the Tabular View Pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1389
Sharing a Tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1389
Renaming Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1390
Deleting Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1392
Tagging an Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1394
Untagging Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1395
Filtering the Inventory by Using Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1396
Viewing Tagged Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1396
Viewing Tags for a Managed Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1400
Exporting Tags from Junos Space Network Management Platform . . . . . . . . . 1400
Chapter 81 Managing DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1403
DMI Schema Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1403
Viewing and Managing DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1405
Adding Missing DMI Schemas or Updating Outdated DMI Schemas by Using the
Update Schema Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1408
Viewing Missing DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1412
Setting a Default DMI Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1414
xxvi Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Configuring Access to Juniper Networks DMI Schema Repository by Using the

Configure SVN Repository Action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1415
Adding Missing DMI Schemas or Updating Outdated DMI Schemas in Junos
Space Network Management Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1416
Adding Missing DMI Schemas by Using the View/Install Missing Schema
Action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1417
Adding Missing DMI Schemas or Updating Outdated DMI Schemas by Using
the Get Latest Action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1417
REST APIs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1418
the Update Schema Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1421
Creating a Compressed TAR File for Updating DMI Schema . . . . . . . . . . . . . . . 1425
Creating a Compressed Tar File on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . 1426
Creating a Compressed Tar File on Microsoft Windows . . . . . . . . . . . . . . . . 1427
Schemas Available in Junos Space Platform . . . . . . . . . . . . . . . . . . . . . . . . 1428
Viewing Missing DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1429
Viewing and Deleting Unused DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . 1430
Chapter 82 Managing Hardware Catalog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1433
Hardware Catalog Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1433
Viewing Information About Hardware Catalog . . . . . . . . . . . . . . . . . . . . . . . . . . 1434
Configuring Access to Juniper Networks Subversion Repository for Downloading
Hardware Catalog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1435
Uploading Hardware Catalog to Junos Space Network Management
Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1436
Updating Hardware Catalog in Junos Space Platform by Using the Get Latest
Action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1436
Uploading Hardware Catalog to Junos Space Platform by Using the Import
Option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1437
Chapter 83 Managing the Purging Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1439
Junos Space Purging Policy and Purging Categories Overview . . . . . . . . . . . . . 1440
Viewing the Junos Space Purging Policy and Purging Criteria . . . . . . . . . . . . . . . 1441
Modifying the Purging Policy and Purging Criteria and Setting the Policy
Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1443
Modifying the Purging Trigger Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . 1443
Modifying the Purging Criteria and Enabling or Disabling a Policy . . . . . . . 1445
Guide 4 Monitoring and Troubleshooting Guide

Part 13 Overview
Monitoring Network Devices and Troubleshooting Software Issues with Junos
Space Network Management Platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1451
Systems of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1451
System Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1452
Backup and Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1452
Maintenance Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1452
Copyright © 2017, Juniper Networks, Inc. xxvii

Audit Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1453

Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1453
Secure Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1453
Looking Glass . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1454
Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1454
Junos Space Debug Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1454
Overall System Condition and Fabric Load History Overview . . . . . . . . . . . . . . . 1455
Overall System Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1455
Fabric Load History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1456
Active Users History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1456
Junos Space Network Management Platform Widgets . . . . . . . . . . . . . . . . . . . 1457
Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1457
Device Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1458
CLI Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1458
Images and Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1458
Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1459
Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1459
Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1459
Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1460
Role Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1460
Audit Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1460
Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1460
Part 14 Log Files and Debug Utilities

Chapter 85 Troubleshooting Junos Space Network Management Platform Issues by
Using Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465
System Status Log File Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465
System Status Log File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465
Customizing Status Log File Content . . . . . . . . . . . . . . . . . . . . . . . . . . 1466
Downloading System Log Files for a Junos Space Appliance . . . . . . . . . . . 1466
Customizing Log Files to Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1467
Junos Space Network Management Platform Log Files Overview . . . . . . . . . . . 1467
Apache Web Server Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1468
JBoss Application Server Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1468
MySQL Database Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1469
Node Management Agent Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1469
Troubleshooting Log File Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1470
Downloading the Troubleshooting Log File in Server Mode . . . . . . . . . . . . . . . . . 1471
Downloading the Troubleshooting Log File in Maintenance Mode . . . . . . . . . . . 1475
Downloading Troubleshooting System Log Files Through the Junos Space
CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1476
Downloading a System Log File by Using a USB Device . . . . . . . . . . . . . . . 1476
Downloading System Log File by Using SCP . . . . . . . . . . . . . . . . . . . . . . . . . 1477
Customizing Node System Status Log Checking . . . . . . . . . . . . . . . . . . . . . . . . 1480
Customizing Node Log Files to Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1481
xxviii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Chapter 86 Troubleshooting Network Devices by Using Junos Space Debug

Utilties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1483
Junos Space Debug Utilities Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1483
Device-Connection Debug Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1483
getDeviceInfo.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1484
DeviceDebugInfoCollector.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1484
getAllDeviceInfo.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1484
cleanupEditChannel.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1484
Device Import Scripts and Java Applications . . . . . . . . . . . . . . . . . . . . . . . . 1485
cleanupDeviceImportTables.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1485
DB-blob-reader.jar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1485
Job Management Scripts and Java Applications . . . . . . . . . . . . . . . . . . . . . 1485
SystemLoadViewer.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1485
getJobThreadSump.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486
JobInfoCollector.jar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486
HornetQ Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486
HornetQInfoProvider.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486
HQMessageViewer.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486
Executing Device-Connection Debug Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . 1487
Executing the Script to Collect Device-Connection Information . . . . . . . . . 1487
Executing the Script to Collect Device Debug Information . . . . . . . . . . . . . 1489
Executing the Script to Unlock the Device Configuration . . . . . . . . . . . . . . 1492
Executing the Script to Collect Node-Connection Information . . . . . . . . . . 1493
Executing Device Import Detail Script and Java Application . . . . . . . . . . . . . . . 1497
Executing the Script to Delete Data from Device Import Tables . . . . . . . . . 1498
Executing the Java Application to View Device XML . . . . . . . . . . . . . . . . . . 1499
Executing Job Management Scripts and Java Applications . . . . . . . . . . . . . . . . 1500
Executing the Java Application to Collect Job Information . . . . . . . . . . . . . 1500
Executing the Script to View the Stack Trace of a Job . . . . . . . . . . . . . . . . . 1503
Executing the Script to View Job Information on Nodes . . . . . . . . . . . . . . . 1504
Executing HornetQ Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1508
Executing the HornetQ Script to View all JBoss Queues . . . . . . . . . . . . . . . 1509
Executing the HornetQ Script to List of Messages in a JBoss Queue . . . . . . 1510
Part 15 Troubleshooting Junos Space Platform Issues

Chapter 87 Troubleshooting Login–Related Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1515
Troubleshooting the Not Able to Log In from the Junos Space Login Page
Issue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1515
Chapter 88 Troubleshooting Device Management–Related Issues . . . . . . . . . . . . . . . . 1517
Troubleshooting Device Discovery Failure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1517
Troubleshooting Device Data Collection Issue . . . . . . . . . . . . . . . . . . . . . . . . . . . 1518
Troubleshooting Devices Discovered Twice Using the Device Discovery
Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1519
Chapter 89 Troubleshooting Network Monitoring–Related Issues . . . . . . . . . . . . . . . . 1521
Troubleshooting the Network Monitoring Page Is Not Available Issue . . . . . . . . 1521
Copyright © 2017, Juniper Networks, Inc. xxix

Chapter 90 Troubleshooting DMI Schema–Related Issues . . . . . . . . . . . . . . . . . . . . . . 1523

Troubleshooting the Nondisplay of the DMI Schema Tree Issue . . . . . . . . . . . . 1523
Guide 5 High Availability and Disaster Recovery Guide

Part 16 High Availability
Junos Space High Availability Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1529
High Availability Characteristics of Junos Space Appliances . . . . . . . . . . . . . . . . 1531
Chapter 92 Understanding the High Availability Software Architecture . . . . . . . . . . . 1533
Junos Space High Availability Software Architecture Overview . . . . . . . . . . . . . 1533
Junos Space Software Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1533
Load-Balancing Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1535
Database Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1535
Inter-Node Communication Among Nodes in a Junos Space Cluster . . . . . 1536
Software Components for Junos Space Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . 1537
Chapter 93 Understanding the Junos Space Cluster (Fabric) Architecture . . . . . . . . . 1541
Understanding the Logical Clusters Within a Junos Space Cluster . . . . . . . . . . . 1541
Apache Load-Balancer Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1542
JBoss Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1543
MySQL Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1544
Cassandra Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1545
Understanding Virtual IP Availability Within a Junos Space Cluster . . . . . . . . . . 1547
Understanding High Availability Nodes in a Cluster . . . . . . . . . . . . . . . . . . . . . . 1548
Understanding High Availability Management of DMI Connections . . . . . . . . . 1550
High Availability for Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1550
High-Availability Fabric without FMPM Nodes . . . . . . . . . . . . . . . . . . . . . . . 1551
High-Availability Fabric with FMPM Nodes . . . . . . . . . . . . . . . . . . . . . . . . . 1552
Understanding How Devices Are Configured to Send SNMP Traps to Junos
Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1553
Chapter 94 Configuring High Availability Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1555
Configuring the Junos Space Cluster for High Availability Overview . . . . . . . . . 1555
Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1555
Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1556
Configuring the First Node in the Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . 1558
Adding a Second Node to the Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1558
Adding Additional Nodes to a Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1559
Configuring FMPM Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1559
Removing Nodes from a Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1560
Chapter 95 High Availability Failover Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1561
Understanding High-Availability Failover Scenarios . . . . . . . . . . . . . . . . . . . . . . 1561
Active VIP Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1561
Standby VIP Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1562
eth0 on the Active VIP Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . 1563
eth0 on the Standby VIP Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . 1563
xxx Copyright © 2017, Juniper Networks, Inc.

Table of Contents
A Non-VIP Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1564

eth0 on a Non-VIP Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1564
eth3 on a Non-VIP Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1565
eth3 on the Active VIP Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . 1565
JBoss Server on a Node Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1566
MySQL Server on the Active VIP Node Goes Down . . . . . . . . . . . . . . . . . . . 1566
MySQL Server on the Standby VIP Node Goes Down . . . . . . . . . . . . . . . . . 1567
Primary Database Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1567
Secondary Database Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1568
MySQL Server on the Primary Database Node Goes Down . . . . . . . . . . . . 1568
MySQL Server on the Secondary Database Node Goes Down . . . . . . . . . . 1568
Apache HTTP Server on the Active VIP Node Goes Down . . . . . . . . . . . . . 1569
Apache HTTP Server on the Standby VIP Node Goes Down . . . . . . . . . . . 1569
Dedicated Cassandra Node Crashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1569
Cassandra Service on a JBoss Node Goes Down . . . . . . . . . . . . . . . . . . . . . 1570
Part 17 Disaster Recovery

Chapter 96 Disaster Recovery Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1573
Disaster Recovery Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1573
Disaster Recovery Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1574
Prerequisites to Configure Disaster Recovery . . . . . . . . . . . . . . . . . . . . . . . . 1576
Connectivity Requirements to Configure Disaster Recovery . . . . . . . . . . . . 1576
Disaster Recovery Watchdog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1577
heartbeat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1577
mysqlMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1578
pgsqlMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1578
fileMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1578
arbiterMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1578
configMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1578
serviceMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1579
notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1579
Failure Detection by Using the Device Arbitration Algorithm . . . . . . . . . . . . 1579
Failure Detection by Using the Custom Failure-Detection Scripts . . . . . . . . 1581
Steps to Configure Disaster Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1589
Disaster Recovery Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1589
Understanding the Normal Operation of Active and Standby Sites . . . . . . . . . . 1592
Understanding Disaster Recovery Failure Scenarios . . . . . . . . . . . . . . . . . . . . . . 1594
Active Site (site1) Goes Down Due to a Disaster or Is Powered Down . . . . 1594
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1594
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1594
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595
No Connectivity Between the Active and Standby Sites and Both Sites Lose
Connectivity with Arbiter Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595
Copyright © 2017, Juniper Networks, Inc. xxxi

No Connectivity Between the Active and Standby Sites . . . . . . . . . . . . . . . 1596

Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596
No Connectivity Between the Active and Standby Sites and the Active Site
(site1) Loses Connectivity with Arbiter Devices . . . . . . . . . . . . . . . . . . 1596
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1597
No Connectivity Between the Active and Standby Sites and the Standby
Site (site2) Loses Connectivity With Arbiter Devices . . . . . . . . . . . . . . 1597
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1597
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1597
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1597
Standby Site (site2) Goes Down Due to Disaster or Is Powered Down . . . 1598
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
No Connectivity Between the Active Site (site1) and Arbiter Devices . . . . . 1598
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598
No Connectivity Between the Standby Site (site2) and Arbiter Devices . . 1599
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1599
Impact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1599
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1599
Understanding How the Standby Site Becomes Operational When the Active
Site Goes Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1599
Chapter 97 Configuring the Disaster Recovery Process . . . . . . . . . . . . . . . . . . . . . . . . . 1601
Configuring the Disaster Recovery Process Between an Active and a Standby
Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1601
Configuring Disaster Recovery at the Active Site . . . . . . . . . . . . . . . . . . . . . 1602
Configuring Disaster Recovery at the Standby Site . . . . . . . . . . . . . . . . . . . 1606
Starting the Disaster Recovery Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1610
Verifying the Status of the Disaster Recovery Process . . . . . . . . . . . . . . . . . 1611
Stopping the Disaster Recovery Process on Junos Space Network Management
Platform Release 14.1R3 and Earlier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1611
Stopping the Backup Process at the Active Site . . . . . . . . . . . . . . . . . . . . . . 1612
Stopping Collecting Backups from the Active Site . . . . . . . . . . . . . . . . . . . . 1613
Chapter 98 Managing the Disaster Recovery Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . 1615
Checking the Status of the Disaster Recovery Configuration . . . . . . . . . . . . . . . 1615
Viewing the Disaster Recovery Configuration and Status of Watchdog
Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1619
Modifying the Disaster Recovery Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 1621
Modifying Applications and Nodes on a Disaster Recovery Setup . . . . . . . . . . . 1630
Upgrading the Junos Space Network Management Platform Software . . . 1631
Upgrading to Junos Space Network Management Platform Release
16.1R1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1635
xxxii Copyright © 2017, Juniper Networks, Inc.

Table of Contents
Installing a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1636

Upgrading a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1637
Uninstalling a Junos Space Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1638
Adding or Removing a JBoss Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1639
Adding or Removing a Dedicated Junos Space Node . . . . . . . . . . . . . . . . . . 1641
Manually Failing Over the Network Management Services to the Standby
Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1643
Stopping the Disaster Recovery Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1646
Resetting the Disaster Recovery Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 1647
Copyright © 2017, Juniper Networks, Inc. xxxiii

xxxiv Copyright © 2017, Juniper Networks, Inc.

List of Figures
Chapter 1 Junos Space Fabric Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Figure 1: Clients Using a Single Virtual IP Address to Access the Junos Space
Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Figure 2: Using a Single Ethernet Interface for All IP Connectivity . . . . . . . . . . . . . 60
Figure 3: Using Two Interfaces for IP Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Chapter 3 Junos Space Network Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Figure 4: Device Management Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Figure 5: Junos Space Platform Default Home Page . . . . . . . . . . . . . . . . . . . . . . . 90
Figure 6: Home Page Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Figure 7: Check Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Figure 8: Check Box Adjacent to the First Column Header . . . . . . . . . . . . . . . . . . 106
Figure 9: Check Box to Select All Objects Across Multiple Pages: Domains
Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Figure 10: Check Box to Select All Objects Across Multiple Pages: Backup
Configuration Files Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Figure 11: Date Picker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Figure 12: Drop-down List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Figure 13: Editable Drop-down List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Figure 14: Option Button . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Figure 15: Search Field . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Figure 16: Global Search . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Figure 17: Spin Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Figure 18: Slider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Figure 19: Text Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Figure 20: Text Box Displaying a Drop-down List . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Figure 21: Minimum Value in a Text Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Figure 22: Maximum Value in a Text Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Figure 23: Tree View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Figure 24: Horizontal Scroll Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Figure 25: Minimize, Maximise, and Close Buttons . . . . . . . . . . . . . . . . . . . . . . . . . 114
Figure 26: Tooltip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Figure 27: Error Message Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Figure 28: Confirmation Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Figure 29: Information Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Figure 30: Message with the Error Icon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Figure 31: Message with the Larger Warning Icon . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Copyright © 2017, Juniper Networks, Inc. xxxv

Figure 32: Message with the Smaller Warning Icon . . . . . . . . . . . . . . . . . . . . . . . . 118

Figure 33: Message with the Information Icon . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Figure 34: Message with the Question Mark Icon . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Figure 35: Message with the Check Mark Icon . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Figure 36: Progress Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Figure 37: Junos Space Platform Dashboard Page . . . . . . . . . . . . . . . . . . . . . . . . 122
Figure 38: Workspace Statistics Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Figure 39: Page Information Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Figure 40: Sorting Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Figure 41: Showing or Hiding Columns in Tables . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Figure 42: Toolbar Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
Figure 43: Typical Submenu for a Date Column . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Part 1 Overview
Figure 44: Junos Space Platform Dashboard Page . . . . . . . . . . . . . . . . . . . . . . . . 174
Part 2 Devices
Figure 45: Device Management Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Chapter 8 Systems of Record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Figure 46: Resynchronization Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

Figure 47: Topology View GUI Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 827
Part 11 Audit Logs

Figure 48: Formatting the Local Times Column in Microsoft Excel . . . . . . . . . . 1040
Figure 49: Fabric Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1068
Figure 50: Overall System Condition Gauge . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1070
Figure 51: Fabric Load History Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071
Figure 52: Active Users History Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071
Figure 53: Fabric with One Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1072
Figure 54: Fabric with Two Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1074
Figure 55: Fabric with Three Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1074
Figure 56: Fabric with FMPM Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1076
Figure 57: Fabric with Database Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1078
Figure 58: Cassandra Service on JBoss Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . 1080
Figure 59: Cassandra Service on Dedicated Cassandra Nodes . . . . . . . . . . . . . . 1081
Figure 60: Cassandra Service on JBoss and Dedicated Cassandra Nodes . . . . . 1081
xxxvi Copyright © 2017, Juniper Networks, Inc.

List of Figures
Figure 61: Disk Usage Threshold Is Normal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1103

Figure 62: Trap Details When Disk Usage Normal . . . . . . . . . . . . . . . . . . . . . . . . 1103
Figure 63: Disk Usage Threshold Exceeds Configured Threshold . . . . . . . . . . . . 1103
Figure 64: Trap Details When DIsk Usage Exceeds Configured Threshold . . . . . 1103
Figure 65: CPU Load Average Threshold Is Normal . . . . . . . . . . . . . . . . . . . . . . . 1106
Figure 66: Trap Details When CPU Load Average Threshold Is Normal . . . . . . . 1106
Figure 67: CPU Load Average Threshold – Upper Limit Exceeded . . . . . . . . . . . 1106
Figure 68: Trap Details When CPU Load 5 Minute Average Exceeds
Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1106
Figure 69: NMA Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1108
Figure 70: Trap Details When NMA Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1108
Figure 71: NMA is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1108
Figure 72: Trap Details When NMA is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1108
Figure 73: WebProxy Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1109
Figure 74: Trap Details When WebProxy Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . 1109
Figure 75: WebProxy Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1109
Figure 76: Trap Details When WebProxy Is Down . . . . . . . . . . . . . . . . . . . . . . . . 1109
Figure 77: JBoss Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110
Figure 78: Trap Details When JBoss Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110
Figure 79: JBoss Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110
Figure 80: Trap Details When JBoss Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110
Figure 81: Mysql Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1111
Figure 82: Trap Details When Mysql Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1111
Figure 83: Mysql Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1111
Figure 84: Trap Details When Mysql Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1111
Figure 85: Postgresql Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1112
Figure 86: Trap Details When Postgresql Is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . 1112
Figure 87: Postgresql Is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1112
Figure 88: Trap Details When Postgresql Is Down . . . . . . . . . . . . . . . . . . . . . . . . 1112
Figure 89: Swap Memory Usage Is Normal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1113
Figure 90: Trap Details When Swap Memory Is Normal . . . . . . . . . . . . . . . . . . . . 1113
Figure 91: Swap Memory Usage Threshold Exceeds Upper Limit . . . . . . . . . . . . . 1113
Figure 92: Trap Details When Swap Memory Usage Exceeds Upper Limit . . . . . 1113
Figure 93: CPU Fan Speed Normal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1116
Figure 94: Trap Details When CPU Fan Speed Is Normal . . . . . . . . . . . . . . . . . . . 1116
Figure 95: CPU Fan Speed Is Below the Configured Threshold . . . . . . . . . . . . . . 1116
Figure 96: Trap Details When CPU Fan Speed Is Below the Configured
Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1116
Figure 97: CPU Voltage Normal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1118
Figure 98: Trap Details When CPU Voltage Is Normal . . . . . . . . . . . . . . . . . . . . . 1118
Figure 99: CPU Voltage Is Lower Than Configured Threshold . . . . . . . . . . . . . . . 1118
Figure 100: Trap Details When CPU Voltage Is Lower Than Configured
Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1118
Figure 101: CPU Temperature Normal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1119
Figure 102: Trap Details When CPU Temperature Is Normal . . . . . . . . . . . . . . . . 1119
Figure 103: CPU Temperature Exceeds The Configured Threshold . . . . . . . . . . . 1119
Figure 104: Trap Details When CPU Temperature Exceeds The Configured
Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1119
Figure 105: Junos Space Node is Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1121
Copyright © 2017, Juniper Networks, Inc. xxxvii

Figure 106: Trap Details When Junos Space Node Is Up . . . . . . . . . . . . . . . . . . . . 1121

Figure 107: Junos Space Node is Down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1121
Figure 108: Trap Details When Junos Space Node is Down . . . . . . . . . . . . . . . . . 1121
Figure 109: Junos Space Node Is Removed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1122
Figure 110: Trap Details When Junos Space Node Is Removed . . . . . . . . . . . . . . 1122
Figure 111: JBoss Multi-Master Detected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1123
Figure 112: Trap Details When JBoss Multi-Master Is Detected . . . . . . . . . . . . . . 1123
Figure 113: VIP Bind Issue Detected In JBoss Node(s) . . . . . . . . . . . . . . . . . . . . . 1124
Figure 114: Trap Details When VIP Bind Issue Is Detected In JBoss Node(s) . . . . 1124
Figure 115: VIP Bind Issue Detected In Database Node(s) . . . . . . . . . . . . . . . . . . 1125
Figure 116: Trap Details When VIP Bind Issue Is Detected In Database
Node(s) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1125
Figure 117: VIP Bind Issue Detected In FMPM Node(s) . . . . . . . . . . . . . . . . . . . . . 1126
Figure 118: Trap Details When VIP Bind Issue Is Detected In FMPM Node(s) . . . 1126
Figure 119: Fabric Monitoring Process Inactive . . . . . . . . . . . . . . . . . . . . . . . . . . . 1127
Figure 120: Trap Details When Fabric Monitoring Process Is Inactive . . . . . . . . . . 1127
Figure 121: Tables Exceed Size Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1128
Figure 122: Trap Details When Tables Exceed Size Limit . . . . . . . . . . . . . . . . . . . 1128
Figure 123: Device Session Count Exceeds Threshold Limit . . . . . . . . . . . . . . . . . 1129
Figure 124: Trap Details When Device Session Count Exceeds Threshold
Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1129
Figure 125: HPROF Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1130
Figure 126: Trap Details When HPROF Files Are Available . . . . . . . . . . . . . . . . . . 1130
Figure 127: JGroup Membership Issue Detected . . . . . . . . . . . . . . . . . . . . . . . . . . 1131
Figure 128: Trap Details When JGroup Membership Issue Detected . . . . . . . . . . . 1131
Figure 129: MySQL In Out Of Sync State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1132
Figure 130: Trap Details When MySQL Is In Out Of Sync State . . . . . . . . . . . . . . 1132
Figure 131: File Intrusion Detection Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . 1133
Figure 132: Trap Details for File Intrusion Detection Monitoring . . . . . . . . . . . . . . 1133
Figure 133: Audit Logs Forwarding Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1134
Figure 134: Trap Details When Audit Logs Forwarding Fails . . . . . . . . . . . . . . . . . 1134
Figure 135: One or More Expected Processes Are Inactive . . . . . . . . . . . . . . . . . . 1135
Figure 136: Trap Details When One or More Expected Processes Are Inactive . . 1135
Figure 137: One or More Expected Processes Are Inactive On Dedicated FMPM
Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136
Figure 138: Trap Details When One or More Expected Processes Are Inactive On
Dedicated FMPM Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136
Figure 139: Network Monitoring Details for the Selected Fabric Node . . . . . . . . 1138
Figure 140: Remote Authentication Server Accepts User . . . . . . . . . . . . . . . . . . 1332
Figure 141: Remote Authentication Server Not Reachable or Rejects User . . . . . 1333
Part 13 Overview
Figure 142: Overall System Condition Gauge . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1456
Figure 143: Fabric Load History Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1456
Figure 144: Active Users History Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1457
xxxviii Copyright © 2017, Juniper Networks, Inc.

List of Figures
Part 16 High Availability

Figure 145: Deployment of a Junos Space Cluster . . . . . . . . . . . . . . . . . . . . . . . . 1530
Chapter 92 Understanding the High Availability Software Architecture . . . . . . . . . . . 1533
Figure 146: Junos Space Software Architecture . . . . . . . . . . . . . . . . . . . . . . . . . 1534
Figure 147: Software Stack on a Junos Space Appliance . . . . . . . . . . . . . . . . . . . 1537
Chapter 93 Understanding the Junos Space Cluster (Fabric) Architecture . . . . . . . . . 1541
Figure 148: Junos Space Logical Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1542
Figure 149: Junos Space Logical Clusters with Dedicated Database Nodes . . . 1544
Figure 150: Junos Space Logical Clusters Including the Cassandra Cluster . . . . 1546
Figure 151: Heartbeat Service on a Linux High Availability Cluster . . . . . . . . . . . . 1547
Figure 152: Linux High Availability Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1551

Figure 153: Disaster Recovery Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1575
Copyright © 2017, Juniper Networks, Inc. xxxix

xl Copyright © 2017, Juniper Networks, Inc.

List of Tables
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix
Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . l
Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . l
Chapter 2 Junos Space System Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Table 3: Junos Space Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Table 4: Global Action Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Table 5: Workspace Names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Table 6: Junos Space Platform Pages that Can Be Set as the Home Page . . . . . . 94
Table 7: Standard Junos Space Message Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Table 8: User Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Table 9: Device Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Table 10: Job Icon Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Table 11: Table Paging and Refreshing Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Table 12: Data Types and Supported Operators . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Table 13: Error Conditions and Error Messages for Filters . . . . . . . . . . . . . . . . . . . . 151
Table 14: Searchable Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Table 15: Query Expressions in the Search Field . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Part 1 Overview
Table 16: Junos Space Platform Workspaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
Part 2 Devices
Table 17: Managed Status in NSOR and SSOR Modes for confirmed-commit . . 182
Table 18: Fields in the Device Management Table . . . . . . . . . . . . . . . . . . . . . . . . . 184
Table 19: Devices Supported by Junos Space Platform . . . . . . . . . . . . . . . . . . . . . 187
Chapter 9 Device Discovery Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Table 20: View Discovery Profile Pop-up Window . . . . . . . . . . . . . . . . . . . . . . . . . 219
Chapter 10 Modeling Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223
Table 21: View Modeled Instance Dialog Box Details . . . . . . . . . . . . . . . . . . . . . . 248
Table 22: Details of Devices Included in the Modeled Instance . . . . . . . . . . . . . . 249
Table 23: View Connection Profile Dialog Box Details . . . . . . . . . . . . . . . . . . . . . 252
Chapter 11 Device Authentication in Junos Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Copyright © 2017, Juniper Networks, Inc. xli

Table 24: Supported Algorithms for Junos Space SSH . . . . . . . . . . . . . . . . . . . . 258

Table 25: Acknowledge Device Fingerprint Page . . . . . . . . . . . . . . . . . . . . . . . . . 268
Chapter 12 Viewing Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Table 26: View Physical Inventory Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Table 27: View Physical Interfaces Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Table 28: Logical Interfaces Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Table 29: Inventory Changes Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283
Chapter 13 Exporting Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Table 30: License Usage Summary Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
Table 31: License Feature or SKU Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
Table 32: Additional Fields in CSV Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
Table 33: View Software Inventory Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
Chapter 14 Configuring Juniper Networks Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
Table 34: Columns in the Selected Devices Area . . . . . . . . . . . . . . . . . . . . . . . . . 302
Table 35: Tabs to View Configuration Deltas . . . . . . . . . . . . . . . . . . . . . . . . . . . . 302
Table 36: View Assigned Shared Objects Table . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
Table 37: Execute Scripts Page in the Devices Workspace . . . . . . . . . . . . . . . . . . 327
Table 38: Script Results Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
Chapter 16 Device Configuration Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343
Table 39: Configuration Change Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348
Table 40: Resolving Out-of-Band Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349
Chapter 17 Adding and Managing Non Juniper Networks Devices . . . . . . . . . . . . . . . . . 353
Table 41: SNMP V3 Configuration Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
Table 42: Columns in a Sample CSV File for Importing Unmanaged Devices . . . 355
Chapter 22 Verifying Template, Image Deployment, Script Execution, and Staged
Images on Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 399
Table 43: Viewing Template Association Page . . . . . . . . . . . . . . . . . . . . . . . . . . 400
Table 44: View Staged Images Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 403
Part 3 Device Templates

Table 45: Templates Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425
Table 46: Data Types and Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427
Table 47: Data Types and Validation Parameters . . . . . . . . . . . . . . . . . . . . . . . . . 427
Table 48: Definitions Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428
Table 49: Device Template States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
Table 50: Device Template Deployment Statuses . . . . . . . . . . . . . . . . . . . . . . . . 429
Chapter 26 Template Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
Table 51: View Template Definition Dialog Box Details . . . . . . . . . . . . . . . . . . . . 448
Chapter 29 Device Template Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481
Table 52: View Template Association Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482
xlii Copyright © 2017, Juniper Networks, Inc.

List of Tables
Part 4 CLI Configlets

Table 53: Default Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496
Table 54: Parameters for a CLI Configlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498
Table 55: Attributes of CLI Configlet Parameters . . . . . . . . . . . . . . . . . . . . . . . . . 499
Table 56: Commands to View XML from the CLI . . . . . . . . . . . . . . . . . . . . . . . . . 502
Table 57: Context Path and XML node referred for different element types . . . . 502
Table 58: XPaths for different elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 503
Chapter 31 CLI Configlets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 507
Table 59: CLI Configlet Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 512
Table 60: Import Configlets page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 526
Chapter 32 Configuration Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535
Table 61: Parameters defined for a Configuration View . . . . . . . . . . . . . . . . . . . . 537
Table 62: Attributes of a parameter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537
Table 63: Columns on the Configuration Views Page . . . . . . . . . . . . . . . . . . . . . . 539
Table 64: View Template Definition Dialog Box Details . . . . . . . . . . . . . . . . . . . . 541
Table 65: Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
Table 66: Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
Table 67: Parameters and Configured Value XPath . . . . . . . . . . . . . . . . . . . . . . . . 551
Part 5 Images and Scripts

Chapter 36 Managing Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567
Table 68: Description of Fields on the Images Page and the Device Image Details
Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571
Table 69: Validation Results Page Field Descriptions . . . . . . . . . . . . . . . . . . . . . . 587
Table 70: Routing Platforms and Software Releases Supporting ISSU . . . . . . . 589
Table 71: Select Devices Table Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592
Table 72: Common Deployment Options Descriptions . . . . . . . . . . . . . . . . . . . . 595
Table 73: Conventional Deployment Options Descriptions . . . . . . . . . . . . . . . . . 596
Table 74: Unified ISSU Deployment Options Descriptions . . . . . . . . . . . . . . . . . . 597
Table 75: Advanced Options Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598
Table 76: Select Devices Table Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 602
Table 77: Common Deployment Options Descriptions . . . . . . . . . . . . . . . . . . . . 605
Table 78: Select Devices Table Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610
Table 79: Advanced Options Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 613
Table 80: Remove Image from Staged Devices page Fields . . . . . . . . . . . . . . . . . 616
Chapter 37 Managing Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 621
Table 81: Import Scripts Page Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 629
Table 82: Fields on the Scripts Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 631
Table 83: Script Details Dialog Box Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 632
Table 84: Script Verification Results Page Fields . . . . . . . . . . . . . . . . . . . . . . . . . 643
Table 85: View Execution Results Page Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 655
Table 86: Types of Script Annotations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 667
Table 87: Variable Context Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670
Chapter 38 Managing Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675
Copyright © 2017, Juniper Networks, Inc. xliii

Table 88: Create Operation Dialog Box Icon Descriptions . . . . . . . . . . . . . . . . . . 680

Table 89: Description of Fields on the Operations Page and the View Operations
dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 683
Chapter 39 Managing Script Bundles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 693
Table 90: Create Script Bundle Page Icon Descriptions . . . . . . . . . . . . . . . . . . . . 696
Table 91: Description of Fields on the Script Bundles Page and the Script Bundle
Detail dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697
Part 6 Reports
Chapter 40 Reports Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713
Table 92: Privileges Required to Generate Reports for Specific Report Definition
Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714
Table 93: Audit Trail Report Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 715
Table 94: Device Inventory Report Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 715
Table 95: Device License Inventory Report Attributes . . . . . . . . . . . . . . . . . . . . . . 716
Table 96: Device Logical Interface Inventory Report Attributes . . . . . . . . . . . . . . . 717
Table 97: Device Physical Interface Inventory Report Attributes . . . . . . . . . . . . . . 718
Table 98: Device Physical Inventory Report Attributes . . . . . . . . . . . . . . . . . . . . . 719
Table 99: Device Software Inventory Report Attributes . . . . . . . . . . . . . . . . . . . . 720
Table 100: Job Inventory Report Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721
Table 101: User Account Report Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721
Chapter 42 Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731
Table 102: View Report Dialog Box Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 736

Chapter 46 Managing Outages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
Table 103: Details of a Service Outage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
Table 104: Fields on the Outages (List) Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . 769
Chapter 47 Using the Network Monitoring Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . 773
Table 105: Fields Displayed in the Alarms Dashlet (Table) . . . . . . . . . . . . . . . . . . 775
Table 106: Fields Displayed in the Notifications Dashlet (Table) . . . . . . . . . . . . . 775
Table 107: Fields Displayed in the Node Status Dashlet (Table) . . . . . . . . . . . . . . 775
Table 108: Fields Displayed in the Resource Graphs Dashlet (Table) . . . . . . . . . 776
Chapter 48 Managing and Configuring Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777
Table 109: Information Displayed About an Event . . . . . . . . . . . . . . . . . . . . . . . . 778
Table 110: Information Displayed on the Events (List) Page . . . . . . . . . . . . . . . . . 783
Chapter 49 Managing and Configuring Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787
Table 111: Details of an Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 789
Table 112: Fields Displayed on the Alarms (List) Page . . . . . . . . . . . . . . . . . . . . . 795
Table 113: Fields in the NCS Alarms (List) Page . . . . . . . . . . . . . . . . . . . . . . . . . . . 797
Table 114: Topology Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 827
Table 115: Topology Discovery Methods Supported for Network Monitoring . . . . 837
Chapter 53 Network Monitoring Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839
xliv Copyright © 2017, Juniper Networks, Inc.

List of Tables
Table 116: Starting, Stopping, and Restarting Network Monitoring . . . . . . . . . . . 868
Part 8 Configuration Files

Chapter 55 Managing Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 877
Table 117: Config Files Management Page and Config File Details Dialog Box
Field Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 884
Part 9 Jobs
Table 118: Junos Space Platform Job Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 902
Chapter 57 Managing Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905
Table 119: Fields on the Job Management Page . . . . . . . . . . . . . . . . . . . . . . . . . . 909
Table 120: Fields on the Jobs Details Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 910
Table 121: Job Icon Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 910
Table 122: Jobs that Support Viewing Objects on Which a Job is Executed . . . . . 912
Table 123: Comon Error Messages in Device-Related Operations . . . . . . . . . . . . 927
Part 10 Role-Based Access Control

Chapter 59 Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933
Table 124: Predefined Roles (A through Q) for the Junos Space Network
Table 125: Predefined Roles (R through Z) for the Junos Space Network
Chapter 60 User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 963
Table 126: Differences Between Temporary and Regular Passwords . . . . . . . . . 966
Table 127: User Detail Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 986
Table 128: X.509 Certificate Detail Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987
Chapter 61 Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 995
Table 129: Tasks Supported on Device Partitions . . . . . . . . . . . . . . . . . . . . . . . . . 998
Chapter 64 User Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023
Table 130: User Sessions Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023
Part 11 Audit Logs

Table 131: Fields on the Audit Log Page and Audit Log Detail Dialog Box . . . . . . 1034
Table 132: Fields on the Job List Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1035
Table 133: Fields for Specifying Recurring Purges . . . . . . . . . . . . . . . . . . . . . . . . 1042
Table 134: Junos Space Administrators and Junos Space UI Users . . . . . . . . . . . 1051
Table 135: System Health Report: Processes and Parameters . . . . . . . . . . . . . . 1054
Table 136: Extended Periods of High CPU Page . . . . . . . . . . . . . . . . . . . . . . . . . 1059
Copyright © 2017, Juniper Networks, Inc. xlv

Table 137: Device Management Sessions Page . . . . . . . . . . . . . . . . . . . . . . . . . . 1059

Table 138: List of HPROF Files Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1059
Table 139: Last JBoss Restarted Time Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060
Table 140: Large Database Tables Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060
Table 141: Details of System Alert Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060
Table 142: IP Address Configurations Supported on Junos Space Platform . . . 1062
Table 143: Number of Existing Nodes and Permitted Node Types . . . . . . . . . . . 1085
Table 144: Information on the Node Detail Tab . . . . . . . . . . . . . . . . . . . . . . . . . . 1093
Table 145: Information on the Reboot Detail Tab . . . . . . . . . . . . . . . . . . . . . . . . 1096
Table 146: Default Messages for Different Reboot Actions . . . . . . . . . . . . . . . . 1096
Table 147: Columns on the Process Detail Tab . . . . . . . . . . . . . . . . . . . . . . . . . . 1096
Table 148: Process Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1097
Table 149: Status of the Processes When OpenNMS Is Running on the Junos
Space Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1097
Table 150: Status of the Processes When OpenNMS Is Running on the FMPM
Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1098
Table 151: SNMP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1099
Table 152: SNMP Configuration Parameters: Monitoring Disk Usage . . . . . . . . . 1102
Table 153: SNMP Configuration Parameters: Monitoring the CPU Load
Average . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1105
Table 154: SNMP Configuration Parameters: Monitoring Processes . . . . . . . . . . 1108
Table 155: SNMP Configuration Parameters: Monitoring Linux Hardware . . . . . . 1114
Table 156: SNMP Configuration Parameters: Monitoring Fabric Health . . . . . . . 1120
Table 157: Mapping of SNMP V3 Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1141
Table 158: domain.xml Subsystem Parameters Affected When Toggling Between
Multicast and Unicast Communication on Junos Space Nodes . . . . . . . . . . 1171
Table 159: Columns on the NAT Configuration Page . . . . . . . . . . . . . . . . . . . . . . 1183
Chapter 69 Backing up and Restoring the Junos Space Platform Database . . . . . . . . 1187
Table 160: Backup Schedule Units and Increments . . . . . . . . . . . . . . . . . . . . . . . 1195
Table 161: Fields in the Manage Databases Table . . . . . . . . . . . . . . . . . . . . . . . . 1204
Chapter 70 Managing Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1207
Table 162: License Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1210
Chapter 71 Managing Junos Space Platform and Applications . . . . . . . . . . . . . . . . . . . 1211
Table 163: Application Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1220
Table 164: Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1223
Table 165: User Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1226
Table 166: Password Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1227
Table 167: Advanced Password Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1229
Table 168: Domain Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1230
Table 169: Audit Log Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1230
Table 170: Search Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1231
Table 171: CLI Configlet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1231
Table 172: REST API Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1232
Table 173: Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1233
xlvi Copyright © 2017, Juniper Networks, Inc.

List of Tables
Table 174: Supported TLS Version 1.2 Algorithms for HTTPS Access When Weak
Algorithms Are Disabled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1234
Table 175: Health Monitoring Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1235
Table 176: X509 Certificate Parameter (Variable) Details . . . . . . . . . . . . . . . . . 1236
Table 177: Starting, Stopping, and Restarting Network Monitoring . . . . . . . . . . . 1240
Table 178: Items needed for upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1257
Table 179: Sample Data Showing Approximate Time Taken for Backup and
Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273
Chapter 72 Managing Troubleshooting Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1281
Table 180: Log Files included in the troubleshoot File . . . . . . . . . . . . . . . . . . . . . 1282
Table 181: Log Levels and their Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1285
Table 182: Log Files in the Troubleshooting Log File and Their Location . . . . . . 1290
Chapter 73 Managing Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1299
Table 183: Certificate Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1302
Table 184: Login Behavior with Remote Authentication Only Enabled . . . . . . . . 1334
Table 185: Login Behavior with Remote-Local Authentication Enabled . . . . . . . 1335
Table 186: Remote Authentication Server Parameters . . . . . . . . . . . . . . . . . . . . 1338
Chapter 77 Managing Git Repositories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1355
Table 187: Git Repositories Page Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1360
Chapter 78 Audit Log Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1361
Table 188: Audit Log Forwarding Page Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 1363
Chapter 80 Managing Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1375
Table 189: Tag Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1382
Table 190: Tagged Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1397
Table 191: List of Supported Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1398
Chapter 81 Managing DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1403
Table 192: Information About DMI Schemas . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1405
Table 193: Information Displayed About Available Schemas . . . . . . . . . . . . . . . . 1411
Table 194: Information Displayed About Available Schemas . . . . . . . . . . . . . . . 1424
Table 195: Sample URLs for the Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1426
Table 196: Schema Name Mapping Information . . . . . . . . . . . . . . . . . . . . . . . . . 1429
Chapter 83 Managing the Purging Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1439
Table 197: Purging Categories and Criteria . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1442
Part 14 Log Files and Debug Utilities

Chapter 85 Troubleshooting Junos Space Network Management Platform Issues by
Using Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465
Table 198: Log Files included in the troubleshoot File . . . . . . . . . . . . . . . . . . . . 1466
Table 199: Junos Space Network Management Platform Log Files . . . . . . . . . . 1467
Table 200: Apache Web Server Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1468
Table 201: JBoss Directories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1468
Table 202: Joss Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1468
Copyright © 2017, Juniper Networks, Inc. xlvii

Table 203: MySQL Database Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1469

Table 204: NMA Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1470
Table 205: List of Log Files in the Troubleshooting Log File . . . . . . . . . . . . . . . . . 1471
Table 206: Log Files in the Troubleshooting Log File and Their Location . . . . . . 1473

Table 207: API Sections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1581
Table 208: Details of the Custom Script Output . . . . . . . . . . . . . . . . . . . . . . . . 1588
Table 209: Disaster Recovery Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1590
Chapter 98 Managing the Disaster Recovery Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . 1615
Table 210: jmp-dr toolkit config update command options . . . . . . . . . . . . . . . . 1621
xlviii Copyright © 2017, Juniper Networks, Inc.

About the Documentation
• Documentation and Release Notes on page xlix

• Supported Platforms on page xlix
• Documentation Conventions on page xlix
• Documentation Feedback on page li
• Requesting Technical Support on page lii
Documentation and Release Notes

®
To obtain the most current version of all Juniper Networks technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
Documentation Conventions
Table 1 defines notice icons used in this guide.
Copyright © 2017, Juniper Networks, Inc. xlix

Table 1: Notice Icons

Icon Meaning Description
Informational note Indicates important features or instructions.
Caution Indicates a situation that might result in loss of data or hardware damage.
Warning Alerts you to the risk of personal injury or death.
Laser warning Alerts you to the risk of personal injury from a laser.
Tip Indicates helpful information.
Best practice Alerts you to a recommended use or implementation.
Table 2 defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions

Convention Description Examples
Bold text like this Represents text that you type. To enter configuration mode, type the
configure command:
user@host> configure
Fixed-width text like this Represents output that appears on the user@host> show chassis alarms
terminal screen.
No alarms currently active
Italic text like this • Introduces or emphasizes important • A policy term is a named structure
new terms. that defines match conditions and
• Identifies guide names. actions.
• Junos OS CLI User Guide
• Identifies RFC and Internet draft titles.
• RFC 1997, BGP Communities Attribute
Italic text like this Represents variables (options for which Configure the machine’s domain name:
you substitute a value) in commands or
configuration statements. [edit]
root@# set system domain-name
domain-name
l Copyright © 2017, Juniper Networks, Inc.

Table 2: Text and Syntax Conventions (continued)

Convention Description Examples
Text like this Represents names of configuration • To configure a stub area, include the
statements, commands, files, and stub statement at the [edit protocols
directories; configuration hierarchy levels; ospf area area-id] hierarchy level.
or labels on routing platform • The console port is labeled CONSOLE.
components.
< > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>;
| (pipe symbol) Indicates a choice between the mutually broadcast | multicast

exclusive keywords or variables on either
side of the symbol. The set of choices is (string1 | string2 | string3)
often enclosed in parentheses for clarity.
# (pound sign) Indicates a comment specified on the rsvp { # Required for dynamic MPLS only
same line as the configuration statement
to which it applies.
[ ] (square brackets) Encloses a variable for which you can community name members [
substitute one or more values. community-ids ]
Indention and braces ( { } ) Identifies a level in the configuration [edit]

hierarchy. routing-options {
static {
route default {
; (semicolon) Identifies a leaf statement at a
nexthop address;
configuration hierarchy level.
retain;
}
}
}
GUI Conventions
Bold text like this Represents graphical user interface (GUI) • In the Logical Interfaces box, select
items you click or select. All Interfaces.
• To cancel the configuration, click
Cancel.
> (bold right angle bracket) Separates levels in a hierarchy of menu In the configuration editor hierarchy,
selections. select Protocols>Ospf.
Documentation Feedback
We encourage you to provide feedback, comments, and suggestions so that we can

improve the documentation. You can provide feedback by using either of the following
methods:
• Online feedback rating system—On any page of the Juniper Networks TechLibrary site
at http://www.juniper.net/techpubs/index.html, simply click the stars to rate the content,
and use the pop-up form to provide us with information about your experience.
Alternately, you can use the online feedback form at
http://www.juniper.net/techpubs/feedback/.
Copyright © 2017, Juniper Networks, Inc. li

• E-mail—Send your comments to techpubs-comments@juniper.net. Include the document

or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or Partner Support Service
support contract, or are covered under warranty, and need post-sales technical support,
you can access our tools and resources online or open a case with JTAC.
• JTAC policies—For a complete understanding of our JTAC procedures and policies,

review the JTAC User Guide located at
http://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
• Product warranties—For product warranty information, visit

http://www.juniper.net/support/warranty/.
• JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with the
following features:
• Find CSC offerings: http://www.juniper.net/customers/support/
• Search for known bugs: https://prsearch.juniper.net/
• Find product documentation: http://www.juniper.net/documentation/
• Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/
• Download the latest versions of software and review release notes:

http://www.juniper.net/customers/csc/software/
• Search technical bulletins for relevant hardware and software notifications:

http://kb.juniper.net/InfoCenter/
• Join and participate in the Juniper Networks Community Forum:

http://www.juniper.net/company/communities/
• Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/
To verify service entitlement by product serial number, use our Serial Number Entitlement
(SNE) Tool: https://entitlementsearch.juniper.net/entitlementsearch/
Opening a Case with JTAC

You can open a case with JTAC on the Web or by telephone.
• Use the Case Management tool in the CSC at http://www.juniper.net/cm/.
• Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
lii Copyright © 2017, Juniper Networks, Inc.

For international or direct-dial options in countries without toll-free numbers, see

http://www.juniper.net/support/requesting-support.html.
Copyright © 2017, Juniper Networks, Inc. liii

liv Copyright © 2017, Juniper Networks, Inc.

Getting Started Guide
Copyright © 2017, Juniper Networks, Inc. 55

56 Copyright © 2017, Juniper Networks, Inc.

CHAPTER 1
Junos Space Fabric Deployment
• Junos Space Fabric Architecture on page 57

• Junos Space Fabric Deployment Overview on page 57
Junos Space Fabric Architecture
To support the rapid growth in network size, Junos Space is designed to be highly scalable.
You can cluster multiple Junos Space appliances to create a single management fabric,
which is accessible from a single virtual IP (VIP) address.
All graphical user interface (GUI) and northbound interface (NBI) clients use the Junos
Space VIP address to connect to the Junos Space fabric. The fabric incorporates a
front-end load balancer that distributes client sessions across all the active Junos Space
nodes within the fabric. You can increase or decrease the fabric by simply adding or
deleting nodes to or from the Junos Space Network Management Platform user interface,
and the Junos Space system automatically starts applications and services on the active
nodes. Each node in the cluster is fully utilized and all nodes work together to provide
automated resource management and service availability.
A Junos Space fabric architecture comprising multiple appliances eliminates any single
point of failure. When a node in the fabric goes down, all client sessions and device
connections currently served by that node are automatically migrated to the active nodes
in the fabric without any user-initiated action.
Related • Junos Space Fabric Deployment Overview on page 57

Documentation
Junos Space Fabric Deployment Overview
You can install and deploy Junos Space Hardware Appliances (JA2500), Junos Space
Virtual Appliances, or both to form a fabric. Each appliance in the fabric is called a node.
All nodes in the fabric work together as a cluster of Junos Space instances running in
active-active configuration (that is, all nodes are active in the cluster).
Figure 1 displays how a Junos Space fabric employs a software load balancer to distribute
HTTP sessions across the nodes to ensure that the load presented by the Junos Space
Network Management Platform user interface and NBI clients is equally distributed within
the fabric.

Figure 1: Clients Using a Single Virtual IP Address to Access the Junos

Space Fabric
A Junos Space fabric of appliances provides scalability and ensures high availability of
your management platform. The fabric provides an N+1 redundancy solution where the
failure of a single node in the fabric does not affect the functioning of the fabric. When
a node in the fabric fails, the sessions of the clients accessing Junos Space from the user
interface automatically migrate away from the failed node. Similarly, managed devices
that were connected to the failed node are automatically reconnected with another
functioning node in the fabric.
Deploying a Junos Space Hardware Appliance

When you power on the Junos Space Hardware Appliance and log in to the CLI console,
you can view a menu-driven command-line interface to specify the initial configuration
of the appliance.
You need to specify the following parameters:
• IP address and subnet mask for the “eth0” interface
• Virtual IP address (when you configure the first node in the cluster) to access the Junos
Space user interface from Web browsers. The IP address should be in the same subnet
as the IP address assigned to the “eth0” interface.
• IP address of the default gateway
• IP address of the name server
• IP address and subnet mask for the “eth3” interface if you choose to manage devices
on a different Ethernet interface (see Figure 3).
• Whether the appliance will be added to an existing cluster. Choose “n” to add the first
node to a new cluster and choose “y” to add subsequent nodes to the cluster.
• NTP server settings with which to synchronize the appliance’s time
• Maintenance mode user ID and password
NOTE: Ensure that you remember the Maintenance mode user ID and
password. These details are required when you upgrade software and
restore databases.
Refer to the JA2500 Junos Space Appliance Quick Start Guide for detailed instructions on
how to configure the hardware appliance during initial deployment.

Chapter 1: Junos Space Fabric Deployment
Deploying a Junos Space Virtual Appliance

The Junos Space Virtual Appliance is stored in the open virtual appliance (OVA) format
and is packaged as an *.ova file, which is a single folder that contains all the files of the
Junos Space Virtual Appliance. OVA is not a bootable format and you must deploy each
Junos Space Virtual Appliance to a hosted ESX or ESXi server before you can run the
Junos Space Virtual Appliance.
You can deploy a Junos Space Virtual Appliance on a VMware ESX server version 4.0 or
later or VMware ESXi server version 4.0 or later. After the Junos Space Virtual Appliance
is deployed, you can use the VMware vSphere client that is connected to the VMware
ESX (or VMware ESXi) server to configure the Junos Space Virtual Appliance. You can
deploy Junos Space Virtual Appliance 14.1R2.0 and later on qemu-kvm Release
0.12.1.2-2/448.el6. You must deploy and configure the Junos Space Virtual Appliance on
a KVM server by using the Virtual Machine Manager (VMM) client.
The CPU, RAM, and disk space provided by the VMware ESX server or KVM server must
meet or exceed the documented CPU, RAM, and disk space requirements for deploying
a Junos Space Virtual Appliance. In addition, we recommend that, for a multinode fabric,
you deploy the first and second virtual appliances on separate servers to ensure failover
support.
The distributed Junos Space Virtual Appliance files are created with 135 GB of disk space.
If you create a multinode cluster, ensure that the first and second nodes that you deploy
should contain the same amount of disk space. When the disk resources are used beyond
80% capacity, add sufficient disk space (more than 10 GB) to the disk partitions.
When you log in to the console of the VMware vSphere client or VMM client, you need to
specify the same parameters used to deploy a hardware appliance. Refer to the Junos
Space Virtual Appliance Deployment and Configuration Guide for detailed instructions on
how to configure the virtual appliance during initial deployment.
Basic Requirements for a Fabric Deployment

When you deploy multiple appliances to create a Junos Space fabric, each appliance in
the fabric uses the eth0 interface for all internode communication within the fabric. On
each appliance, you can choose to use a separate interface (eth3) for all communication
between the appliance and managed devices, as shown in Figure 3.
The following are required when you deploy a Junos Space fabric:
• You must be able to ping the default gateway IP address, or else the fabric will not
form correctly.
• The IP addresses assigned to the eth0 interface on the first two appliances in the fabric
must be in the same subnet.
• The virtual IP address configured on the first appliance in the fabric must be in the
same subnet as the eth0 interface on the first two appliances.
• Multicast packets must be routable among all nodes because JBoss cluster-member
discovery uses multicast routing.

• If you are deploying a fabric of virtual appliances, we recommend that the first and
second appliances added to the fabric be hosted on a separate VMware ESX or ESXI
server to ensure failover support.
• All appliances in the fabric must use the same external NTP source to ensure consistent
time setting across all appliances in the fabric You must specify the NTP source on
each appliance before adding the appliance to the fabric.
• All nodes in the fabric are running the same version of the software.
Configuring Network Connectivity for a Junos Space Fabric

A Junos Space appliance (hardware or virtual) has four RJ45 10/100/1000 Ethernet
interfaces that are named eth0, eth1, eth2, and eth3. When deploying the appliance, you
need to ensure that it has IP connectivity with the following:
• Devices in your managed network
• Desktops, laptops, and workstations from which Junos Space users access the Junos
Space user interface as well as external systems hosting NBI clients
• Other appliances that form a Junos Space fabric along with this appliance
Junos Space allows you to use two of the four Ethernet interfaces: eth0 and eth3. The
other two Ethernet interfaces are reserved for future use. You can choose one of the
following two options for configuring interfaces for IP connectivity:
• Use the eth0 interface for all network connectivity of the appliance, as shown in Figure 2.
Figure 2: Using a Single Ethernet Interface for All IP Connectivity

Chapter 1: Junos Space Fabric Deployment
• Use the eth0 interface for network connectivity with Junos Space user interface clients
and other appliances in the same fabric, and use the eth3 interface for network
connectivity with managed devices, as shown in Figure 3.
Figure 3: Using Two Interfaces for IP Connectivity
Adding Nodes to a Junos Space Fabric

You must be assigned the System Administrator user role to be able to add nodes to a
Junos Space fabric. You add nodes to a Junos Space fabric from the Add Fabric Node
page (Network Management Platform > Administration > Fabric > Add Fabric Node). To
add a node to a fabric, you specify the IP address assigned to the eth0 interface of the
new node, a name for the new node, and (optionally) a scheduled date and time to add
the node to the fabric. Junos Space software automatically handles all necessary
configuration changes to add the node to the fabric. After the new node is added to the
fabric, you can monitor the status of the node from the Fabric page (Network Management
Platform > Administration > Fabric).
For complete information about adding nodes to a fabric, see the “Adding a Node to an
Existing Junos Space Fabric” on page 1083 topic (in the Junos Space Network Management
Platform Workspaces Feature Guide).
Related • Junos Space Fabric Architecture on page 57

Documentation
• Installing and Upgrading Junos Space Software Overview on page 63


CHAPTER 2
Junos Space System Administration
• Installing and Upgrading Junos Space Software Overview on page 63

• Junos Space Applications Supported on the Junos Space Platform on page 67
• Junos Space License Installation Overview on page 68
• DMI Schema Overview on page 69
• Backing Up the Junos Space Platform Database on page 69
• Configuring User Access Controls Overview on page 70
Installing and Upgrading Junos Space Software Overview
The following sections describe the primary software administration tasks for the Junos
Space Network Management Platform and Junos Space applications:
CAUTION: Do not modify the filename of the software image that you
download from the Juniper Networks support site. If you modify the filename,
the installation or upgrade fails.
• Installing Junos Space Applications on page 63

• Upgrading Junos Space Applications on page 64
• Upgrading Junos Space Network Management Platform on page 64
• Uninstalling Junos Space Applications on page 66
Installing Junos Space Applications

Before installing an application, verify that the application is compatible with the Junos
Space Network Management Platform. For more information about application
compatibility, see the Knowledge Base article KB27572 at
http://kb.juniper.net/InfoCenter/index?page=content&id=KB27572.
You can upload an application image file to Junos Space from the Add Application page
( Administration > Applications > Add Application). You can upload an application image
file by using HTTP (Upload via HTTP option) or Secure Copy Protocol (SCP) (Upload via
SCP option). We recommend that you upload the file by using SCP, which initiates a
direct transfer from an SCP server to Junos Space and is performed as a back-end job.
If you choose to upload the file by using SCP, you must first make the image file available

on an SCP server that Junos Space can access. You must also provide the IP address of
the SCP server and the login credentials needed to access this SCP server. The main
advantage of using SCP is that your user interface is not blocked while the file transfer
is in progress, and you can monitor the progress of the file transfer from the Jobs
workspace.
NOTE: A Junos Space node can also be used as an SCP server. To do this,
copy the application image file (using SCP or SSH FTP [SFTP]) to the /tmp/
directory on the Junos Space node, and in the Upload Software via SCP dialog
box specify the credentials (username and password), the IP address of the
Junos Space node, the CLI credentials, and the file path for the software
image.
After the image file for the application is uploaded successfully, you can view the
application from the Add Application page. You can then select the application file and
click the Install button to install the application. The application installation process does
not cause any downtime for the Junos Space Network Management Platform or any
applications installed on Junos Space. Junos Space Network Management Platform
ensures that the application is installed on all nodes in the Junos Space fabric and access
to the application is load balanced across all nodes in the Junos Space fabric.
For more information about installing Junos Space applications, see the “Managing Junos
Space Applications Overview” on page 1211 topic (in the Junos Space Network Management
Upgrading Junos Space Applications

You can easily upgrade an application from the Junos Space user interface. You must
download the image file for the new version of the application, navigate to the Applications
page ( Administration > Applications), right-click the application that you want to upgrade,
and select Upgrade Application to upload the image file into Junos Space through HTTP
or SCP. We recommend that you use the SCP option, which initiates a direct transfer
from an SCP server to Junos Space. After the image file is uploaded, select the uploaded
file and click the Upgrade button to start the upgrade process. If you perform the upgrade
by using SCP, then the upgrade process is executed as a back-end job by the Junos Space
Network Management Platform, and you can monitor the progress of the upgrade from
the Jobs workspace. An application upgrade does not cause downtime for the Junos
Space Network Management Platform or other applications that are hosted by Junos
Space.
For more information about upgrading Junos Space applications, see the “Managing
Junos Space Applications Overview” on page 1211 topic (in the Junos Space Network
Management Platform Workspaces Feature Guide).
Upgrading Junos Space Network Management Platform

Juniper Networks typically produces two major releases of the Junos Space Network
Management Platform per year. In addition, one or more patch releases might accompany

Chapter 2: Junos Space System Administration
each major release. You can upgrade to a newer platform release by performing a few
simple steps from the user interface in your current Junos Space platform.
NOTE: If you are upgrading to Junos Space Platform Release 16.1R1 or 16.1R2,
follow the procedure outlined in the topic “Upgrading to Junos Space Network
Management Platform Release 16.1R1” on page 1256 in the Workspaces Feature
Guide.
WARNING: Upgrading to a new Junos Space Network Management Platform

version might disable functionality and the ability to use the installed Junos
Space applications. Before you upgrade the Junos Space Network
Management Platform, take inventory of the applications installed. If Junos
Space Network Management Platform is upgraded and a compatible
application is not available, the installed application is deactivated and
cannot be used until a compatible application has been released.
If you are upgrading Junos Space Platform to releases other than Junos Space Platform
Release 16.1R1, the workflow for performing the upgrade is similar to that of installing an
application. You first download the required image file (.img extension) from the Juniper
Networks software download site. You then navigate to the Applications page (
Administration > Applications), right-click the image file, and select Upgrade Platform to
upload the image file into Junos Space through HTTP or SCP. We recommend that you
use the SCP option, which initiates a direct transfer from an SCP server to Junos Space
and is performed as a back-end job. If you choose the SCP option, you must first make
the image file available on an SCP server that Junos Space can access. After the image
file is uploaded, select the uploaded file, and click the Upgrade button to start the upgrade
process. The Network Management Platform upgrade forces the system into Maintenance
mode, which requires that you enter the Maintenance mode username and password to
proceed with the upgrade.
During the Junos Space Network Management Platform upgrade process, all the data
in the Junos Space database is migrated to the new schema that is part of the new Junos
Space release. The upgrade process also seamlessly upgrades all nodes in the fabric.
The upgrade process requires a restart of JBoss application servers on all nodes and
might also require a reboot of all the nodes if the OS packages are also upgraded. The
time required for the upgrade depends on a number of factors, including the amount of
data being migrated, the number of nodes in the fabric, the number of third-party
components upgraded, and so forth. You should expect an average downtime of 30 to
45 minutes for upgrade of a single-node fabric, and approximately 45 to 60 minutes for
upgrade of a two-node fabric.

NOTE: You can use this workflow to upgrade to Release 17.2 from Release
17.1 or Release 16.1 or to Release 15.2 from Release 15.1 or Release 14.1. If you
are upgrading to Release 17.2 from a release earlier than 16.1, you must first
upgrade the installation to Release 16.1R2 and then, upgrade to Release 17.2.
You must perform multistep upgrades if a direct upgrade is not supported
between the version from which you want to upgrade and the version to
which you want to upgrade..For detailed information about the releases from
which Junos Space Platform can be upgraded, see the Junos Space Network
Management Platform Release Notes.
Before you upgrade Junos Space Platform to Release 17.2, ensure that the
time on all Junos Space nodes is synchronized. For information about
synchronizing time on Junos Space nodes, see “Synchronizing Time Across
Junos Space Nodes” on page 1253.
For more information about upgrading the Junos Space Network Management Platform,
see the “Upgrading Junos Space Network Management Platform Overview” on page 1213
topic in the Junos Space Network Management Platform Workspaces Feature Guide.
Uninstalling Junos Space Applications

To uninstall a Junos Space application, navigate to the Applications page ( Administration
> Applications), right-click the application that you want to uninstall, and select Uninstall
Application. You are prompted to confirm the uninstallation process. Upon confirmation,
the uninstallation process for the application is executed as a back-end job by Junos
Space. You can monitor the progress of the job from the Job Management page (Jobs >
Job Management). The uninstallation process does not cause downtime for Junos Space
Network Management Platform or other applications hosted by the Junos Space Network
Management Platform.
For more information about uninstalling Junos Space applications, see the “Uninstalling
a Junos Space Application” on page 1279 topic in the Junos Space Network Management
Related • Junos Space License Installation Overview on page 68

Documentation
• Configuring User Access Controls Overview on page 70

Junos Space Applications Supported on the Junos Space Platform
A number of high-level applications are available for Junos Space Network Management
Platform. You can install these applications to simplify network operations, scale services,
automate support, and open the network to new business opportunities.
The Junos Space Network Management Platform is a multitenant platform that enables
you to install hot-pluggable applications. Junos Space automatically deploys the installed
applications across the fabric. You can install, upgrade, and remove applications without
disrupting or causing any downtime for the Junos Space Network Management Platform
or other hosted applications.
The following applications are currently available for Junos Space Network Management
Platform:
• Junos Space Log Director–Enables log collection across SRX Series Services Gateways
and enables log visualization
• Junos Space Network Director–Enables unified management of Juniper Networks EX

Series Ethernet Switches, EX Series Ethernet switches with ELS support, QFX Series
switches, QFabric, wireless LAN devices, and VMware vCenter devices in your network
• Junos Space Security Director –Allows you to secure your network by creating and
publishing firewall policies, IPsec VPNs, network address translation (NAT) policies,
intrusion prevention system (IPS) policies, and application firewalls
• Junos Space Services Activation Director–Collection of the following applications that

facilitate automated design and provisioning of Layer 2 VPN and Layer 3 VPN services,
configuration of QoS profiles, validation and monitoring of service performance, and
management of synchronization:
• Network Activate
• Junos Space OAM Insight
• Junos Space QoS Design
• Junos Space Transport Activate
• Junos Space Sync Design
• Junos Space Service Automation–End-to-end solution designed to streamline

operations and enable proactive network management for Junos OS devices. The
Service Automation solution consists of the following:
• Junos Space Service Now
• Junos Space Service Insight
• Advanced Insight Scripts (AI-Scripts)
• Junos Space Virtual Director–Enables the provisioning, bootstrapping, monitoring, and

lifecycle management of a variety of Juniper virtual appliances and related virtual
security solutions

NOTE: For information about the Junos Space applications supported for a
specific version of the Junos Space Network Management Platform, see the
Knowledge Base article KB27572 at
http://kb.juniper.net/InfoCenter/index?page=content&id=KB27572.
Related • Installing and Upgrading Junos Space Software Overview on page 63

Documentation
Junos Space License Installation Overview
Junos Space Network Management Platform comes with a 60-day full-featured trial
license. You must procure and install a valid license during this period to ensure continued
operation beyond the trial period.
If you fail to upload a valid license during the 60-day trial period, the Junos Space user
interface displays an error message when you log in indicating that the license has expired.
Your access is limited to the Licenses page (Administration > Licenses) from where you
can execute the Import License task to enter a valid license.
You can use either of the following options to install a valid license for Junos Space
Platform:
• If you plan to use the Junos Space Platform with only the Support Automation
applications (Service Now and Service Insight), you can navigate to the Add Organization
page (Service Now > Administration > Organizations > Add Organization) in the Service
Now user interface to activate these applications. However, to activate these
applications, you must have a valid support contract for your Juniper Networks devices
and valid credentials to access the Juniper Support System (JSS) back end.
NOTE: If you choose this option and if you want to use other Junos Space
applications beyond the trial period, you must purchase a license for Junos
Space Platform (as explained in the bulleted item that follows).
• If you want to use Junos Space applications other than Service Now and Service Insight,
or if you do not have a valid support contract for your Juniper Networks devices, you
must purchase a license for Junos Space Platform. After you obtain the license file,
you can install the license from the Import License page (Administration > Licenses >
Import License). For more information about installing a valid license for Junos Space
Platform, see the “Generating and Uploading the Junos Space License Key File” on
page 1207 topic (in the Junos Space Network Management Platform Workspaces Feature
Guide).

Documentation

DMI Schema Overview
Each device type is described by a unique data model that contains all the configuration
data for that device. The schemas for this data model list all the possible fields and
attributes for a type of device. The newer schemas describe the new features associated
with recent device releases.
Junos Space Network Management Platform provides support for managing devices
based on Device Management Interface (DMI) schema.
You must load all your device schemas into Junos Space Network Management Platform;
otherwise, only a default schema is applied when you try to edit a device configuration
using the device configuration edit action in the Devices workspace (as described in
“Modifying the Configuration on the Device” on page 296 in the Junos Space Network
If the Junos Space Network Management Platform contains exactly the right schema
for each of your devices, you can access all the configuration options specific to each
device. You can add or update schemas for all Junos Space devices from the
Administration > DMI Schemas workspace. You can use this workspace to check whether
a schema for a device is missing. On the Manage DMI Schemas page, in tabular view, the
DMI Schema column displays "Need Import" if the Junos OS schema for that particular
device OS is not bundled with the Junos Space Network Management Platform. Then
you need to download the schema from the Juniper Schema Repository.
For complete information about managing DMI schema , see the “DMI Schema
Management Overview” on page 1403 topic (in the Junos Space Network Management
Related • Device Management in Junos Space Platform on page 79

Documentation
Backing Up the Junos Space Platform Database
You must back up the Junos Space database regularly so that you are able to roll back
the system data to a previously known point. You can create a backup schedule on the
Database Backup and Restore page in the Administration workspace (Network Management
Platform > Administration > Database Backup and Restore). You can store the backup
file on the local file system of the Junos Space appliance, or on a remote server by using
the Secure Copy Protocol (SCP). We recommend that you back up files on a remote
server because this ensures that the backup files are available even if an error occurs on
the appliance. In addition, if you back up files remotely instead of locally, you ensure
optimal use of the disk space on the Junos Space appliance.
To perform remote backups, you must set up a remote server that can be accessed
through the SCP and that has its IP address and credentials available. We recommend
that you have a separate partition on this server to store Junos Space backups and that
you provide the full path of this partition in the Junos Space user interface when you set
up the backup schedule. You can also specify the start date and time for the first backup,

the recurrence interval required (hourly, daily, weekly, monthly, or yearly), and the date
and time of the last backup (if required). In most cases, we recommend that you back
up the database daily. You can customize the backup frequency based on the needs of
your organization and the amount of change that occurs in the network. In addition, you
can schedule backups to run automatically when the system usage is low. Creating a
backup schedule ensures that database backups occur at the scheduled time and at the
scheduled recurrence intervals. You can also perform database backups on demand
from the Database Backup and Restore page, in the Administration workspace (Network
Management Platform > Administration > Database Backup and Restore), by clearing the
check boxes that control the time of occurrence and recurrence intervals.
Whether scheduled or performed on demand, each successful backup generates an

entry that is available on the Database Backup and Restore page. You can select the
database backup entry and select the Restore From Remote File action to restore the
system data to the selected backup.
NOTE: Performing a database restore action causes a downtime in your

Junos Space fabric, which goes into Maintenance mode to restore the
database from the chosen backup and then waits for the application servers
to be restarted.
For complete information about performing backup and restore operations for the Junos
Space Network Management Platform, see the “Backing Up and Restoring the Database
Overview” on page 1188 and “Backing Up the Junos Space Network Management Platform
Database” on page 1191 topics (in the Junos Space Network Management Platform
Workspaces Feature Guide).

Documentation
Configuring User Access Controls Overview
Junos Space Network Management Platform provides a robust user access control
mechanism system that you use to enforce appropriate access policies on the Junos
Space system through your Junos Space administrators. In Junos Space, administrators
can serve different functional roles. A CLI administrator installs and configures Junos
Space appliances. A Maintenance-mode administrator performs system-level tasks,
such as troubleshooting and database restoration operations. After the appliances are
installed and configured, you can create users and assign roles that allow these users to
access the Junos Space Platform workspaces and manage the applications, users,
devices, services, customers, and so forth.
Table 3 shows the Junos Space administrators and the tasks that can be performed.
Table 3: Junos Space Administrators
Junos Space Administrator Function Description Tasks

Table 3: Junos Space Administrators (continued)

CLI administrator An administrator responsible for setting • Install and configure basic settings for
up and managing system settings for Junos Space appliances.
Junos Space appliances from the serial • Change network and system settings
console for appliances, for example:
• Change the CLI administrator
The CLI administrator name is “admin.”
password.
The CLI administrator password can be • Modify routing parameters.
changed from the console system • Modify DNS server settings.
settings menu.
• Change time zone and NTP server
settings.
• Expand the VM drive size (Junos
Space Virtual Appliances only).
• Retrieve log files for
troubleshooting.
Maintenance-mode administrator An administrator responsible for • Restore Junos Space Network

performing system-level maintenance Management Platform to its previous
on Junos Space Network Management state by using a database backup file.
Platform • Shut down Junos Space nodes by
entering Maintenance mode.
The Maintenance-mode administrator
• Retrieve log files for troubleshooting.
name is “maintenance.”
• Exit Maintenance mode and explicitly
The Maintenance-mode password is start up the Junos Space system.
configured from the serial console when
you first configure a Junos Space
appliance.
Junos Space user interface users A Junos Space user that is assigned one For more information about the
or more predefined roles. Each role predefined roles that can be assigned to
assigned to a user provides specific a Junos Space user, see “Configuring
access and management privileges on User Access Controls Overview” on
the objects (applications, devices, users, page 70.
jobs, services, and customers) available
from a workspace in the Junos Space
user interface.

You can configure user access control by:
• Deciding how users will be authenticated and authorized to access Junos Space
Platform
• Segregating users based on the system functionality they are allowed to access. You
can assign a different set of roles to different users. Junos Space Network Management
Platform includes more than 25 predefined user roles and allows you to create custom
roles that are based on the needs of your organization. When a user logs in to Junos
Space, the workspaces that the user can access and the tasks that they can perform
are determined by the roles that have been assigned to that particular user account.
• Segregating users based on the domains that they are allowed to access. You can use
the Domains feature in Junos Space to assign users and devices to the global domain
and create subdomains, and then assign users to one or more of these domains. A
domain is a logical grouping of objects, which can include devices, templates, users,
and so on. When a user logs in to Junos Space, the set of objects that they are allowed
to see is based on the domains to which that user account has been assigned.
You can use multiple domains to separate large, geographically distant systems into
smaller, more manageable sections and control administrative access to individual
systems. You can assign domain administrators or users to manage devices and objects
that are assigned to their domains. You can design the domain hierarchy in such a way
that a user assigned to one domain need not necessarily have access to objects in
another domain. You can even restrict users assigned to a domain from viewing objects
that are in the parent domain (in Junos Space Release 13.3, from viewing the objects
in the global domain).
For example, a small organization might have only one domain (the global domain)
for their entire network, whereas a large, international organization might have several
subdomains within the global domain to represent each of its regional office networks
across the world.
The following sections describe how to configure a user access control mechanism:
• Authentication and Authorization Mode on page 72

• Certificate–Based and Certificate Parameter–based Authentication on page 74
• User Roles on page 74
• Remote Profiles on page 75
• Domains on page 76
• User Accounts on page 76
• Device Partitions on page 77
Authentication and Authorization Mode

The first decision to be made is regarding the mode of authentication and authorization
that you want. The default mode in Junos Space is local authentication and authorization,
which means that you must create user accounts in the Junos Space database with a
valid password and assign a set of roles assigned to those accounts. User sessions are

authenticated based on this password, and the set of roles assigned to the user account
determine the set of tasks the user can perform.
If your organization relies on a set of centralized authentication, authorization, and

accounting (AAA) servers, you can configure Junos Space to work with these servers by
navigating to the Authentication Servers page in the Administration workspace (Network
Management Platform > Administration).
NOTE:
• You must have Super Administrator or System Administrator privileges to
configure Junos Space to work with these servers.
• You need to know the IP addresses, port numbers, and shared secrets of
the remote AAA servers for configuring Junos Space to access them. We
recommend that you use the Connection button to test the connection
between Junos Space and the AAA server as soon as you add the server in
Junos Space. This immediately lets you know whether there is any problem
with the configured IP address, port, or credentials.
• You can configure an ordered list of AAA servers. Junos Space contacts
them in the order you configured; the second server is contacted only if the
first one is unreachable, and so on.
• You can configure RADIUS or TACACS+ servers over Password

Authentication Protocol (PAP) or Challenge Handshake Authentication
Protocol (CHAP). You are allowed to have a mix of RADIUS and TACACS+
servers in the ordered list of AAA servers that Junos Space maintains.
• There are two modes of remote authentication and authorization:

remote-only and remote-local.
• remote-only—Authentication and authorization are performed by a set

of remote AAA servers (RADIUS or TACACS+).
• remote-local—In this case, when a user is not configured on the remote

authentication servers, when the servers are unreachable, or when the
remote servers deny the user access, then the local password is used if
such a local user exists in the Junos Space database.
If you are using remote-only mode, you do not have to create any local user accounts in
Junos Space. Instead, you must create user accounts in the AAA servers that you use and
associate a remote profile name to each user account. A remote profile is a collection of
roles that define the set of functions that a user is allowed to perform in Junos Space.
You create the remote profiles in Junos Space. For more information about remote
profiles, see “Remote Profiles” on page 75. Remote profile names can be configured as
a vendor-specific attribute (VSA) in RADIUS and as an attribute-value pair (AVP) in
TACACS+. When an AAA server successfully authenticates a user session, the remote
profile name is included in the response message that is sent back to Junos Space. Junos
Space looks up the remote profile based on this remote profile name and determines
the set of functions that the user is allowed to perform.

Even in the case of remote-only mode, you might want to create local user accounts in
Junos Space in either of the following cases:
• You want to ensure that a user is allowed to log in to Junos Space even if all the AAA
servers are down. In this case, if a local user account exists in the Junos Space database,
the user session is authenticated and authorized based on the local data. You might
choose to do this for a few important user accounts for whom you want to ensure
access even in this scenario.
• You want to use device partitions to partition a device into subgroups and assign these
subobjects to different users. You use device partitions to share the physical interfaces,
logical interfaces, and physical inventory elements across multiple subdomains. Device
partitions are supported only on M Series and MX Series routers. For more information,
see the “Creating Device Partitions” on page 387 topic in the Junos Space Network
Management Platform Workspaces Feature Guide.
For more information about user authentication, see the “Junos Space Authentication
Modes Overview” on page 1329 topic (in the Junos Space Network Management Platform
Certificate–Based and Certificate Parameter–based Authentication

Junos Space Network Management Platform supports certificate–based and certificate
parameter–based authentication for a user. Starting in Release 15.2R1, you can also
authenticate users in certificate parameter–based authentication mode.With
certificate–based and certificate parameter–based authentication, instead of
authenticating a user based on the user’s credentials, you can authenticate a user based
on the user’s certificate and certificate parameters. These authentication modes are
considered more secure than password-based authentication. With certificate
parameter–based authentication, you can define a maximum of four parameters that
are authenticated during the log in process. Certificate–based and certificate
parameter–based authentication over an SSL connection can be used to authenticate
and authorize sessions among various servers and users. These certificates can be stored
on a smart card, a USB drive, or a computer’s hard drive. The users typically swipe their
smart card to log in to the system without entering their username and password.
For more information about certificate–based and certificate parameter–based

authentication, see the “Certificate Management Overview” on page 1300 topic in the Junos
Space Network Management Platform Workspaces Feature Guide.
User Roles
When configuring Junos Space, you must decide how you want to segregate users based
on the system functionality that users are allowed to access. You do this by assigning a
different set of roles to different users. A role defines a collection of workspaces that a
Junos Space user is allowed to access and a set of actions that the user is allowed to
perform within each workspace. To evaluate the predefined user roles that the Junos
Space Network Management Platform supports, navigate to the Roles page (Network
Management Platform > Role Based Access Control > Roles). In addition, every Junos
Space application that is installed on the Junos Space Network Management Platform

has its own predefined user roles. The Roles page lists all existing Junos Space application
roles, their descriptions, and the tasks that are included in each role.
If the default user roles do not meet your needs, you can configure custom roles by
navigating to the Create Role page (Network Management Platform > Role Based Access
Control > Roles > Create Role). To create a role, you select the workspaces that a user
with this role is allowed to access, and for each workspace, choose the set of tasks that
the user can perform from that workspace.
NOTE: You might need to go through several iterations of creating user roles
to arrive at the optimal set of user roles that your organization needs.
After the user roles are defined, they can be assigned to various user accounts (in the
case of local user accounts created in Junos Space) or assigned to remote profiles to be
used for remote authorization.
For more information about configuring user roles, see the “Role-Based Access Control
Overview” on page 931 topic (in the Junos Space Network Management Platform Workspaces
Feature Guide).
Remote Profiles
Remote profiles are used in the case of remote authorization. A remote profile is a
collection of roles defining the set of functions that a user is allowed to perform in Junos
Space. There are no remote profiles created by default, and you need to create them by
navigating to the Create Remote Profile page (Network Management Platform > Role
Based Access Control > Remote Profiles > Create Remote Profile). When creating a remote
profile, you need to select one or more roles that belong to it. Then you can configure the
name of the remote profile for one or more user accounts in the remote AAA servers.
When an AAA server successfully authenticates a user session, the AAA server includes
the configured remote profile name for that user in the response message that comes
back to Junos Space. Junos Space looks up the remote profile based on this name and
determines the set of roles for the user. Junos Space then uses this information to control
the set of workspaces the user can access and the tasks the user is allowed to perform.
NOTE: If you decide to use local authorization along with remote

authentication, you do not need to configure any remote profiles. In this case,
you must create local user accounts and assign roles to these user accounts.
The configured AAA servers perform authentication, and for each
authenticated session, Junos Space performs the authorization based on the
roles configured locally for the user account in the database.
For more information about creating remote profiles, see the “Creating a Remote Profile”
on page 1015 topic (in the Junos Space Network Management Platform Workspaces Feature
Guide).

Domains
You can add, modify, or delete a domain from the Domains page (Role Based Access
Control > Domains). This page is accessible only when you are logged in to the global
domain, which means that you can add, modify, or delete a domain only from the global
domain. By default, any domain you create is added under the global domain. When you
add a domain, you can choose to allow users in this domain to have read-only access to
the parent domain. If you choose to do so, then all users in the subdomain can view
objects of the parent domain in read-only mode.
NOTE: Only two levels of hierarchy are supported: the global domain and
any other domains that you might add under the global domain.
For more information about managing domains, see the “Domains Overview” on page 995
topic (in the Junos Space Network Management Platform Workspaces Feature Guide).
User Accounts
You need to create user accounts in Junos Space in the following cases:
• To perform local authentication and authorization—You create user accounts in Junos

Space. Each user account must contain a valid password and a set of user roles. To
create user accounts, navigate to the Create User page (Network Management Platform
> Users> User Accounts > Create User).
• To perform remote authentication and local authorization—You create a user account

for each user of the system and ensure that a set of roles is assigned to each user
account. It is not mandatory to enter a password for the user accounts because
authentication is performed remotely.
• To perform remote authentication and authorization and allow certain users to be able
to access Junos Space even if all AAA servers are down or are not reachable from Junos
Space—You create local user accounts for these users with a valid password. The
system forces you to configure at least one role for these users. However, authorization
is performed based on the remote profile name that the AAA server provides.
• To perform remote authentication and authorization but also override remote

authentication failures for specified users and allow them to access Junos Space— A
typical scenario would be when you need to create a new Junos Space user but do not
have immediate access to configure the user on the remote AAA servers. You must
create local user accounts for such users with a valid password and a valid set of roles.
• To perform remote authentication and authorization but also segregate devices among
users based on domains—Because domains must be assigned to user objects in Junos
Space, you must create remote profiles in Junos Space and assign roles and domains
to those profiles.

NOTE: If you decide to use local authorization along with remote

authentication, you do not need to configure any remote profiles. In this
case, you must create local user accounts and assign roles to these user
accounts. The configured AAA servers perform authentication, and for each
authenticated session, Junos Space performs the authorization based on
the roles configured locally for the user account in the database.
NOTE: Junos Space enforces certain rules for valid passwords. You configure
these rules as part of the Network Management Platform settings from the
Applications page (Network Management Platform > Administration >
Applications). Right-click the application and select Modify Application
Settings. Then select Password on the left side of the window. On the
subsequent page, you can view and modify the current settings.
For more information about creating user accounts, see the “Creating Users in Junos
Space Network Management Platform” on page 965 topic (in the Junos Space Network
Device Partitions
You can partition a device from the Devices page (Network Management Platform >
Devices > Device Management). You can partition a device into subgroups and then assign
these subobjects to different users by assigning the partitions to different domains. Only
one partition of a device can be assigned to a domain.
NOTE: Device partitions are supported only on M Series and MX Series routers.
For more information about device partitions, see the “Creating Device Partitions” on
page 387 topic (in the Junos Space Network Management Platform Workspaces Feature
Guide).
Release History Table Release Description
15.2R1 Starting in Release 15.2R1, you can also authenticate users in certificate
parameter–based authentication mode.

Documentation
• Backing Up the Junos Space Platform Database on page 69


CHAPTER 3
Junos Space Network Management
• Device Management in Junos Space Platform on page 79

• Device Configuration Management in Junos Space Platform on page 83
Device Management in Junos Space Platform
When using Junos Space to manage your network, you must first discover the devices in
your network through a device discovery profile, add these devices to the Junos Space
Platform database, and allow the devices to be managed by Junos Space Platform.
When devices are successfully discovered and managed by Junos Space Platform, the
following actions occur:
• A dedicated Device Management Interface (DMI) session is established between Junos

Space and each device. This DMI session typically rides on top of an SSHv2 connection
with the device. For devices running the export version of Junos OS (ww Junos OS
devices), DMI uses a Telnet connection through the wwadapter. The DMI session is
maintained till the device is deleted from Junos Space, which means that the session
is reestablished in case of transient network problems, device reboots, Junos Space
restarts, and so forth.
• When the network itself is the system of record (NSOR), Junos Space imports the
complete configuration and inventory of the device into its own database. To keep
device information current, Junos Space listens to system log events raised by the
device that indicate device configuration or inventory changes, and Junos Space
automatically resynchronizes its database with the latest information from the device.
When the Junos Space Network Management Platform is the system of record (SSOR),
Junos Space reflects the changes on the device, but a Junos Space user with appropriate
user privileges must resolve out-of-band changes.
• By default, Junos Space adds itself as an SNMP trap destination by automatically

inserting the appropriate SNMP configuration on the device during device discovery;
however, you can disable this behavior from the Network Management Platform >
Administration > Applications Network Management Platform > Modify Application
Settings page.
• Junos Space uses SNMP polling to collect key performance indicators (KPIs) from the
devices. To enable SNMP polling on managed devices requires that the Network
Monitoring feature be turned on.

NOTE: By default, Junos Space Network Monitoring is turned on for all

devices.
NOTE: Starting in Release 16.1R1, you can use a NAT server to discover and
manage devices that are outside your Junos Space network and which cannot
reach Junos Space Platform. When you add a NAT configuration on the
Administration > Fabric > NAT Configuration page and forwarding rules on the
NAT server, the IP addresses translated through the NAT server are added
to the outbound ssh stanza of the external devices.
The following sections list the device management capabilities of Junos Space Platform:
• Discovering Devices on page 80

• Authenticating Devices on page 81
• Viewing the Device Inventory on page 82
• Upgrading Device Images on page 82
Discovering Devices
Before you can discover devices into Junos Space, ensure the following:
• You know the key details about the devices to discover. You provide this information
as input to discover devices:
• Device details–IP address or hostname of the device or subnet to scan
• Credentials–User ID and password of a user account that has appropriate user

privileges on the device
• SNMP Credentials–Community string with read-only access if you are using SNMPv2c
or valid SNMPv3 credentials. SNMP credentials are not required if you do not plan
to use Junos Space to monitor faults and performance of managed devices.
• The IP address of the device can be reached from your Junos Space server.
• SSHv2 is enabled on the device (set system services ssh protocol protocol-version v2)
and any firewalls along the way allow Junos Space to connect to the SSH port (default
TCP/22) on the device. To discover devices running the export version of Junos OS,
the wwadapter must be installed on Junos Space and Telnet must be enabled on the
device and reachable from Junos Space.
• SNMP port (UDP/161) on the device is accessible from Junos Space, which allows
Junos Space to perform SNMP polling on the device to collect KPI data for performance
monitoring.
• SNMP trap port (UDP/162) on Junos Space is accessible from the device, which allows
the device to send SNMP traps to Junos Space for fault management.

Chapter 3: Junos Space Network Management
Starting in Release 16.1R1, you can create a device discovery profile (in the Devices
workspace) to set preferences for discovering devices. After verifying the prerequisites,
you create a device discovery profile from the Network Management Platform > Devices
> Device Discovery Profiles page. The device discovery profile contains the preferences
to discover devices, such as, device targets, probes, authentication details, SSH
credentials, and a schedule at which the profile should be run to discover devices. You
can also manually run the device discovery profile from the Network Management Platform
> Devices > Device Discovery Profiles page. The time required to complete the discovery
process depends on multiple factors such as the number of devices you are discovering,
the size of configuration and inventory data on the devices, the network bandwidth
available between Junos Space and the devices, and so forth.
After your devices are successfully discovered in Junos Space, you can view the devices
from the Network Management Platform > Devices > Device Management page. The
Connection Status for the discovered devices should display “Up” and the managed
status should be “In Sync” as shown in Figure 4, which indicates that the DMI session
between Junos Space and the device is up and that the configuration and inventory data
in Junos Space is in sync with the data on the device.
Figure 4: Device Management Page
For complete information about discovering and managing devices, see the Devices
workspace documentation in the Junos Space Network Management Platform Workspaces
Feature Guide.
Authenticating Devices
Starting in Release 16.1R1, new enhancements to device authentication are introduced.
Junos Space Network Management Platform can authenticate a device by using
credentials (username and password), 2048 bit or 4096 bit keys (which uses public-key
cryptographic principles such as RSA, DSS, ECDSA), or the device’s SSH fingerprint. You
can choose an authentication mode on the basis of the level of security needed for the
managed device. The authentication mode is displayed in the Authentication Status

column on the Device Management page. You can also change the authentication mode.
You need to ensure the following to use these modes of authentication:
• Credentials-Based–Device login credentials with administrative privileges are configured

on the device before the device connects to Junos Space Platform.
• Key-Based (keys generated by Junos Space Platform)–By default, a Junos Space

installation includes an initial public and private key pair. You can generate a new key
pair from the Administration workspace and upload the Junos Space’s public key to
the devices that are to be discovered from the Devices workspace. Junos Space logs
in to these devices through SSH and configures the public key on all the devices. You
need not specify a password during device discovery; you need to specify only the
username.
• Custom key-based–A private key and an optional passphrase. You can upload the
private key to Junos Space Platform and use the passphrase to authenticate the private
key. You don’t need to upload the private key to devices.
For complete information about device authentication, see the Devices workspace
documentation in the Junos Space Network Management Platform Workspaces Feature
Guide.
Viewing the Device Inventory

Junos Space Platform maintains up-to-date inventory details of all managed devices in
the database. This includes the complete hardware, software, and license inventory of
each device as well as details of all physical and logical interfaces on these devices. You
can resynchronize a managed device with the Junos Space Platform database to fetch
the current configuration and inventory details.
You can view and export hardware, software, and license inventory details, and the
physical and logical interfaces of a device from the Junos Space user interface. You can
acknowledge the inventory changes on a device from the Junos Space user interface.
For complete information about these tasks, see the Devices workspace documentation
in the Junos Space Network Management Platform Workspaces Feature Guide.
Upgrading Device Images

Junos Space Platform can be a central repository for all device OS images and provide
workflows to download and install these images on managed devices. You can upload,
stage, and verify the checksum of device images, and deploy device images and Junos
Continuity software packages to a device or multiple devices of the same device family
simultaneously from the Images and Scripts workspace. For complete information about
upgrading device images, see the Images and Scripts workspace documentation in the
Junos Space Network Management Platform Workspaces Feature Guide.

16.1R1 Starting in Release 16.1R1, you can use a NAT server to discover and manage
devices that are outside your Junos Space network and which cannot reach
Junos Space Platform.
16.1R1 Starting in Release 16.1R1, you can create a device discovery profile (in the
Devices workspace) to set preferences for discovering devices.
16.1R1 Starting in Release 16.1R1, new enhancements to device authentication are

introduced.
Related • DMI Schema Overview on page 69

Documentation
Device Configuration Management in Junos Space Platform
Junos Space Platform maintains an up-to-date database copy of the complete

configuration of each managed device. You can view and modify the device configurations
from the Junos Space user interface. Because a Junos device configuration is described
in terms of an XML schema and Junos Space Platform has access to this schema, Junos
Space user interface uses this schema to graphically render the device configuration.
With an up-to-date schema, you can view and configure all configuration options as you
would modify the configuration from the device CLI.
By default, Junos Space Platform operates in the mode where it considers the network
as the system of record (NSOR). In this mode, Junos Space Platform listens to all
configuration changes on managed devices and automatically resynchronizes its database
copy with the modified device configuration to reflect the changes. You can change this
to a mode where Junos Space considers itself as the system of record (SSOR). In this
mode, Junos Space Platform does not automatically synchronize its copy of the device
configuration with the modified device configuration when it receives information about
out-of-band configuration changes made on a managed device. Instead, the device is
marked as “Device Changed” and you can view the changes and decide whether to accept
the changes. If you accept the changes, the changes are written into the Junos Space
Platform database copy of the device configuration. If you reject the changes, Junos
Space Platform removes the configuration from the device. For complete information
about NSOR and SSOR modes, see the Devices workspace documentation in the Junos
Space Network Management Platform Workspaces Feature Guide.
The following sections list the device configuration management capabilities of Junos
Space Platform:
• Modifying the Device Configuration by Using the Schema-Based Configuration

Editor on page 84
• Modifying the Device Configuration by Using Device Templates on page 84
• Viewing Configuration Changes on page 84
• Backing Up and Restoring Device Configuration Files on page 85

Modifying the Device Configuration by Using the Schema-Based Configuration Editor

You modify the configuration on a single device by using the Schema-based Configuration
Editor. To modify a device configuration on a device, right-click the device listed on the
Device Management page (in the Devices workspace) and select Modify Configuration.
You can view the following details:
• Current configuration on the device
• Tree view of the device’s configuration hierarchy. Click and expand this tree to locate
the configuration stanzas of interest. For more information about the configuration
options on a device, refer to Junos OS technical documentation.
• Options to filter the configuration and search for specific configuration options in the
tree
• Details of a configuration node when you click the node in the tree
• Options to create, edit, delete, and order entries on the list when you navigate within
a configuration node
• Options to view information about individual parameters (blue information icons), add
comments about individual parameters (yellow comment icons), and activate or
deactivate a configuration option
• Options to preview, validate, and deploy the configuration to the device
For complete information about modifying and deploying the configuration by using the
Schema-based Configuration Editor, see the Devices workspace documentation in the
Junos Space Network Management Platform Workspaces Feature Guide.
Modifying the Device Configuration by Using Device Templates

You may need to create a common configuration change and push it to multiple devices.
You can use the Device Templates feature in Junos Space Platform to create and deploy
changes from the Junos Space user interface. You first create a template definition to
restrict the scope of a device template to a specific device family and Junos OS version.
You then create a device template by using the template definition. You can also create
and deploy a configuration by using Quick templates (without using a template definition).
You can validate the templates, view the configuration in multiple formats, and deploy
(or schedule the deployment of) the configuration to multiple devices. For complete
information about creating and deploying a configuration to devices by using device
templates, see the Device Templates workspace documentation in the Junos Space
Network Management Platform Workspaces Feature Guide.
Viewing Configuration Changes

Junos Space Platform tracks all the configuration changes (from the Schema-Based
Configuration Editor, Device Templates feature, Junos Space applications, or the device
CLI) made on managed devices. You can view the list of configuration changes on the
device in multiple formats from the Junos Space user interface. To view the list of
configuration changes, right-click the device and select View Configuration Change Log.
Each configuration change log entry includes details such as the timestamp of change,

user who made the change, the configuration change in XML format, whether the change
was made from Junos Space or out-of-band, and also the name of the application or
feature that was used to change the configuration. If you have set up Junos Space Platform
as the system of record, out-of-band configuration changes on a device modify the
managed status of the device to Device Changed. You can view and resolve such
out-of-band changes by selecting the device and selecting Resolve Out-of-band Changes.
You can view a list of all out-of-band changes made on the device. You can accept or
reject the changes.
For complete information about viewing configuration changes, see the Device Templates
workspace documentation in the Junos Space Network Management Platform Workspaces
Feature Guide.
Backing Up and Restoring Device Configuration Files

Junos Space Platform allows you to maintain multiple versions of device configuration
files (running, candidate, and backup configuration of managed devices) in the Junos
Space Platform database. You can recover device configuration files in case of a system
failure and maintain consistent configuration across multiple devices. You can select
and back up the configuration from multiple devices from the Configuration Files
workspace. A separate configuration file is created in the database for each managed
device. For complete information about backing up and restoring device configuration
files, see the Configuration Files workspace documentation in the Junos Space Network
Related • DMI Schema Overview on page 69

Documentation


User Interface Guide


CHAPTER 4
Overview
• Junos Space User Interface Overview on page 89

• Junos Space Home Page Overview on page 94
Junos Space User Interface Overview
The Junos Space UI is designed to look and behave in a way that most users are familiar
with. The left tree structure facilitates navigation and the right pane displays information
about the workspace or task selected in the left pane. Multiple users can access the UI
through Web browsers concurrently. All users have access to the same current information
in the same system wide database. Access to tasks and objects is controlled by
permissions assigned to each user.
The Junos Space UI is common to Junos Space Network Management Platform and
Junos Space applications. The information displayed on the Junos Space UI changes
according to the application you select. The examples shown here are from the Junos
Space Platform UI. Other applications may have design variations.
When you log in to Junos Space Platform, the previously configured home page is
displayed. The Junos Space Platform Dashboard, which is the default home page, is
shown in Figure 5.

Figure 5: Junos Space Platform Default Home Page
1— Junos Space Banner 4— Global Action Icons
2— Global Search Text Box 5— Junos Space Dashboard
3— Domain Switcher 6—Task Tree
This display contains three main parts: a task tree on the left, which is always available;
a main window on the right, whose content changes as you select items from the task
tree; and a banner across the top, which offers the date and time, the domain to which
you are logged in, global search, and several icon buttons for frequently used actions.
These parts are described in the following sections.
• Junos Space Banner on page 90

• Task Tree on page 91
• Main Window on page 93
Junos Space Banner

The Junos Space banner, as indicated in Figure 5, displays the date and server time in
the active time zone, the domain to which you are logged in, global search, and the global
actions icons. This banner is always present. For more information about global search
and domain features, see “Using Global Search” on page 162 and the “Domains Overview”
on page 995 topic (in the Junos Space Network Management Platform Workspaces Feature
Guide).
NOTE: If you access the Junos Space Platform UI in two tabs of the same
browser with two different domains selected and access the same page in
both tabs, the information displayed on the page is based on the latest domain
selected. To view pages that are accessible only in the Global domain, ensure
that you are in the Global domain in the most recent tab in which you are
accessing the UI.

Chapter 4: Overview
Table 4 describes the global action icons on the right side of the banner.
Table 4: Global Action Icons

Global Action
Icon Description
Enables you to access the Junos Space home page or set the Junos Space home page. Refer to the “Setting
and Accessing the Junos Space Home Page” on page 101 for details.
Displays the application Help. To access workspace context-sensitive Help, click the Help icon after navigating
to that workspace. See “Accessing Help on Junos Space” on page 104.
Displays the My Jobs dialog box from which you can view the progress and status of your current managed
jobs. You can view all your completed, in-progress, canceled, and scheduled jobs in Junos Space Platform.
See “Viewing Your Jobs” on page 164 in the Junos Space Network Management Platform Workspaces Feature
Guide.
Displays the Change User Settings dialog box from which you can change user preferences, such as the
password. See “Changing Your Password on Junos Space” on page 165.
Logs you out of the system. See “Logging Out of Junos Space” on page 166.
Task Tree
The task tree on the left side of the display is always present and facilitates navigation
in the Junos Space Platform UI. As shown in Figure 5, when you first log in, the Application
Selector list displays Network Management Platform by default. You can drop this list
down to see all the Junos Space applications available on your system. (You can install
other applications by using the Applications task group, as described in “Managing Junos
Space Applications Overview” on page 1211 in the Junos Space Network Management
Platform Workspaces Feature Guide.)
You can collapse the task tree to the left by clicking the double left arrow buttons in its
header, and reexpand it by clicking the double right arrow buttons.
Below the application name is the word Dashboard, selected by default. It indicates that
what you see in the right-hand window is the dashboard for the current application—in
this case, Junos Space Platform. The dashboard shows several measures of overall
system health.
Below the Dashboard item in the tree is a list of the workspaces available in the current
application. This list forms the top level of the task tree. If you select a different application
from the Applications list, you see the workspace list change. This topic describes the
workspaces for Junos Space Platform; for the workspaces in other applications, see the
documentation for those applications.
The workspaces in the Junos Space Platform are described at a high level in Table 5.

Table 5: Workspace Names

Workspace
Name Function
Devices Manage devices, including adding, discovering, importing, and updating them.
See “Device Management Overview” on page 179 (in the Junos Space Network
Device Create configuration definitions and templates used to deploy configuration

Templates changes on multiple Juniper Networks devices. See “Device Templates
Overview” on page 425 (in the Junos Space Network Management Platform
CLI Configlets Easily apply a configuration to a device. Configlets are configuration tools
provided by Junos OS. See “CLI Configlets Overview” on page 495 (in the Junos
Space Network Management Platform Workspaces Feature Guide).
Images and Deploy, verify, enable, disable, remove, and execute scripts deployed to devices.
Scripts See “Scripts Overview” on page 622 (in the Junos Space Network Management
Download a device image from the Juniper Networks Software download site
to your local file system, upload it into Junos Space, and deploy it on one or
more devices simultaneously. See “Device Images Overview” on page 567 (in
the Junos Space Network Management Platform Workspaces Feature Guide).
Reports Generate customized reports for managing network resources. See “Reports
Overview” on page 713 (in the Junos Space Network Management Platform
Network Assess the performance of your network, not only at a point in time, but also
Monitoring over a period of time. See “Network Monitoring Workspace Overview” on
page 744 (in the Junos Space Network Management Platform Workspaces Feature
Guide).
Configuration See “Managing Configuration Files Overview” on page 873 (in the Junos Space
Files Network Management Platform Workspaces Feature Guide).
Jobs Monitor the progress of ongoing jobs. See “Jobs Overview” on page 901 (in the
Junos Space Network Management Platform Workspaces Feature Guide).
Role Based Add, manage, and delete users, custom roles, domains, and remote profiles.
Access Control From this workspace, you can also manage user sessions. See “Configuring
Users to Manage Objects in Junos Space Overview” on page 963 (in the Junos
Audit Logs View and filter system audit logs, including those for user login and logout,
tracking device-management tasks, and displaying services that were
provisioned on devices. See “Junos Space Audit Logs Overview” on page 1031
(in the Junos Space Network Management Platform Workspaces Feature Guide).

Chapter 4: Overview
Table 5: Workspace Names (continued)

Workspace
Name Function
Administration Add network nodes, back up your database, manage licenses and applications,
or troubleshoot. See “Junos Space Administrators Overview” on page 1051,
“Maintenance Mode Overview” on page 1063, and other topics related to the
Administration workspace in the (in the Junos Space Network Management
You can expand any of these workspaces by clicking the expansion symbol (+) to the
left of its name. When you do so, the next level of the task tree for that workspace opens.
Some items at this second level may also be expandable subgroups.
You can expand as many workspaces or task groups as you like; previously expanded
ones remain open until you collapse them. The design of the task tree enables you to
jump from area to area within an application with the minimum number of selections.
Main Window
When you log in to Junos Space Platform, the main window shows the application
dashboard by default. If you have set another home page, the main window displays that
page. See “Setting and Accessing the Junos Space Home Page” on page 101 for more
information.
When you select a workspace name (as opposed to expanding it), the main window
changes and displays graphical statistics for that workspace. This display is called
Workspace Statistics. It is similar in functionality to the overall system dashboard, but it
pertains only to that workspace. See “Workspace Statistics Page Overview” on page 123
for more information.
Selecting the name of a task group or task within the workspace causes the main window
to display an inventory of the objects managed in tabular format. See “Inventory Landing
Page Overview” on page 125 for more information.
Related • Inventory Landing Page Overview on page 125

Documentation
• Workspace Statistics Page Overview on page 123
• Viewing the Junos Space Platform Dashboard on page 121
• Using the Getting Started Assistants on Junos Space on page 103
• Junos Space Home Page Overview on page 94

Junos Space Home Page Overview
When you log in to Junos Space Network Management Platform, the default page
displayed is the Junos Space Dashboard page. However, you can set a different page as
the home page and on subsequent logins to Junos Space Platform, the configured home
page is displayed. This is useful because you can configure the home page to the page
that you visit frequently or the page that is related to your role; for example, a device
administrator might configure the Devices Dashboard page as the home page.
Table 6 displays the list of pages in Junos Space Network Management Platform that
you are allowed to set as the home page.
Table 6: Junos Space Platform Pages that Can Be Set as the Home Page
Workspace Page
None Junos Space Dashboard
Devices • (Devices) Dashboard

• Device Management
• Device Discovery (Dashboard)
• Device Discovery Profiles
• Unmanaged Devices
• Model Devices
• Connection Profiles
• Secure Console
• Device Adapter
Device Templates • (Device Templates) Dashboard

• Definitions
• Templates
CLI Configlets • (CLI Configlets) Dashboard

• Configlets
• Configuration View
• Configuration Filter
• Xpath and Regex
Images and Scripts • (Images and Scripts) Dashboard

• Images
• Scripts
• Operations
• Script Bundles
Reports • (Reports) Dashboard

• Report Definitions
• Generated Reports

Chapter 4: Overview
Table 6: Junos Space Platform Pages that Can Be Set as the Home Page (continued)
Workspace Page
Network Monitoring • (Networking Monitoring) Dashboard

• Node List
• Resync Nodes
• Search
• Outages
• Dashboard
• Events
• Alarms
• Notifications
• Assets
• Reports
• Charts
• Topology
• Admin
• SNMPv3 Trap Configuration
Configuration Files • (Configuration Files) Dashboard

• Config Files Management
Jobs • (Jobs) Dashboard

• Job Management
Role Based Access Control • (Role Based Access Control) Dashboard

• User Accounts
• Roles
• Domains
• Remote Profiles
• API Access Profiles
• User Sessions
Audit Logs • (Audit Logs) Dashboard

• Audit Log

Table 6: Junos Space Platform Pages that Can Be Set as the Home Page (continued)
Workspace Page
Administration • (Administration) Dashboard

• Fabric
• Space Node Settings
• SNMP Manager
• NAT Configuration
• Database Backup and Restore

• Licenses
• Applications
• Space Troubleshooting
• Log Configuration
• Platform Certificate
• CA/CRL Certificates
• Authentication Servers
• SMTP Servers
• Email Listeners
• Git Repositories
• Audit Log Forwarding
• Proxy Server
• Tags
• DMI Schemas
• Hardware Catalog
• Purging Policy
The Junos Space Platform home page is displayed in the following cases:
• When you log in to Junos Space
• When you the click the Home icon on the Junos Space banner and select Go to homepage
• When you switch domains and if the page that was displayed prior to the domain
switch is not accessible in the new domain
NOTE: If the configured home page is not accessible in the new domain,
then the Junos Space Dashboard page is loaded.
NOTE: If an installed Junos Space application supports the Junos Space

home page, the Home Page icon is displayed when you access the application;
otherwise it is hidden.
For more information about how to set and access the Junos Space home page, refer to
“Setting and Accessing the Junos Space Home Page” on page 101.

Chapter 4: Overview
17.1R1 SNMPv3 Trap Configuration
17.1R1 Hardware Catalog
16.1R2 Space Troubleshooting
16.1R2 Log Configuration
16.1R2 Audit Log Forwarding
15.2R1 Git Repositories
Related • Junos Space User Interface Overview on page 89

Documentation


CHAPTER 5
Working in the Junos Space User Interface
• Logging In to Junos Space on page 99

• Setting and Accessing the Junos Space Home Page on page 101
• Using the Getting Started Assistants on Junos Space on page 103
• Accessing Help on Junos Space on page 104
• Understanding GUI Controls on page 105
• Understanding Tooltips and Messages on page 115
• Understanding Status Indicators on page 119
• Workspace Statistics Page Overview on page 123
• Inventory Landing Page Overview on page 125
• Filter Management in Junos Space Platform User Interface on page 132
• Global Search Overview on page 155
• Using Global Search on page 162
• Viewing Your Jobs on page 164
• Changing Your Password on Junos Space on page 165
• Logging Out of Junos Space on page 166
Logging In to Junos Space

®
You can connect to the Junos Space UI by using your Web browser. Internet Explorer
versions 9, 10, and 11, and latest stable versions of Mozilla Firefox and Google Chrome
Web browsers are supported.
NOTE: Although you can access Junos Space Platform by using Internet
Explorer versions 9.0 and 10.0, we recommend that you upgrade to Internet
Explorer version 11.0 because it is the only version now supported by Microsoft.
We recommend a screen resolution of 1280 x 1024 pixels or higher.

WARNING: To avoid a Browser Exploit Against SSL/TLS (BEAST) attack,

whenever you log in to Junos Space through a browser tab or window, make
sure that the tab or window was not previously used to access a non-HTTPS
website. Best practice is to close your browser and relaunch it before logging
in to Junos Space.
NOTE:
• The Network Monitoring Topology feature of Junos Space Platform is not
supported on Internet Explorer.
• Before you log in to Junos Space, ensure that the Adobe Flash version 10
or later plug-in is installed in your browser.
To access and log in to Junos Space:
1. In the address bar of your browser window, enter https://virtual-IP-address/mainui/,

where virtual-IP-address is the previously configured virtual IP (VIP) address that is
used for Web access to Junos Space.
2. Press Enter or click Search.
The Junos Space login page appears.
3. In the Username text box, enter your username. The default username is super. For
information about how to change your username, consult your system administrator.
4. In the Password text box, enter your password. The default password is juniper123.
For information about how to change your password, see “Changing Your Password
on Junos Space” on page 165.
5. (Optional) If the remote authentication server is configured for Challenge/Response,

you are presented with challenge questions. Provide valid responses to the challenge
questions to log in successfully. For more information, see “Remote Authentication
Overview” on page 1327 in the Junos Space Network Management Platform Workspaces
Feature Guide.
6. Click Log In.
The Junos Space home page appears. If the home page is not set, the Junos Space
Dashboard page is displayed. If the home page is inaccessible due to role or domain
restrictions, a warning message is displayed and the Junos Space Dashboard page is
loaded.

Chapter 5: Working in the Junos Space User Interface
NOTE: If you are a user with access to more than one domain, then an
informational message about switching domains is displayed in a dialog
box.
Do one of the following:
• To prevent the informational message from appearing again, ensure

that the Don’t show again check box is selected and click OK. The Don’t
show again check box is selected by default.
• To allow the informational message to continue appearing, clear the

Don’t show again check box and click OK.
NOTE: By default, Junos Space Platform authenticates a user's username

and password. However, you can also use certificates to authenticate and
authorize sessions among various servers and users. To configure
certificate-based authentication, see “Certificate Management Overview”
on page 1300 (in the Junos Space Network Management Platform Workspaces
Feature Guide).
For more information about the Junos Space Platform UI, see “Junos Space User Interface
Overview” on page 89.
Related • Logging Out of Junos Space on page 166

Documentation
Setting and Accessing the Junos Space Home Page
By default, the Junos Space Network Management Platform Dashboard page is displayed
when you log in to Junos Space. You can, however, set a different page as the home page.
You use the Home icon on the Junos Space banner to set and access the Junos Space
home page.
NOTE: If you are already on the home page, then the Set as Homepage' and
Go to Homepage actions are disabled. When you mouse over the actions, a
message is displayed in a tool tip indicating that you are already on the home
page.
This topic has the following sections:
• Setting the Junos Space Home Page on page 102

• Accessing the Junos Space Home Page on page 103

Setting the Junos Space Home Page

To set a page as the home page:
NOTE: For more information about which pages can be set as home pages,
see “Junos Space Home Page Overview” on page 94.
1. Navigate to the page that you want to set as the Junos Space home page by using
the task tree in the left-hand pane of the Junos Space Platform UI.
2. Click the Home icon on the Junos Space banner.
A drop-down menu is displayed as shown in Figure 6
Figure 6: Home Page Menu
3. Click Set as Homepage.
NOTE: The Set as Homepage action is enabled or disabled depending on

the page that you are on. If the current page can be set as the home page,
the action is enabled; otherwise, the action is disabled and when you
mouse over the Set as Homepage action, a message is displayed (in a
tooltip) indicating that the page cannot be set as the home page.
A dialog box is displayed indicating the home page is set successfully.
4. Click OK to close the dialog box.
NOTE: When you are not on the home page, click the Home icon on the Junos
Space banner and mouse over Go to Homepage to view the name of the
current home page.

Accessing the Junos Space Home Page

To access the Junos Space home page:
NOTE: The roles that you are assigned and the domains to which you have
access determine whether or not you can access the home page. If your role
does not allow you access to a specific page or if a page is not accessible in
a particular domain, a dialog box is displayed when you click the Go to
Homepage action:
• If the page from which you try to access the home page is the Junos Space
Dashboard page, a message indicating that you do not have permission to
access the home page is displayed.
• If the page from which the you try to access the home page is not the Junos
Space Dashboard page, a message indicating that you do not have
permission to access the home page is displayed and you can choose
whether to load the Junos Space Dashboard page or remain on the current
page.
1. Click the Home icon on the Junos Space banner.
A drop-down menu is displayed as shown in Figure 6
2. Click Go to Homepage.
You are taken to the configured Junos Space home page. On the navigation tree, the
node corresponding to the home page is selected and subtasks, if any, are visible.

Documentation
Using the Getting Started Assistants on Junos Space
The Getting Started assistants display steps and help on how to complete common
tasks, such as increasing the storage capacity. Getting Started appears in the sidebar
when you log in to Junos Space only if the Show Getting Started on Startup check box at
the bottom of the sidebar is selected. If the sidebar is not shown, you can display it by
selecting the Help icon in the Junos Space banner.
The Getting Started topics are context-sensitive per application. Getting Started displays
all the steps of a task. From a step in a task, you can jump to that point in the UI and
complete the task.
Some applications implement the Getting Started assistants; others do not.

To use a Getting Started assistant:
1. Select an application from the Applications list above the task tree.
2. In the sidebar, expand Getting Started.
A main Getting Started topic link appears on the sidebar.
If the sidebar is not displayed, select the Help ( ) icon at the right side of the Junos
Space header. The sidebar appears.
3. Select a main topic.
For example, if you are in the Network Management Platform UI, click the Increase
Space Capacity link. A list of required steps appears in the sidebar. Each step contains
a task link and a link to Help.
4. Perform the required task by clicking the task link.
You move to a point in the UI from where you can complete the task. The assistant
remains visible on the sidebar to aid navigation to subsequent tasks.
5. Access help for a specific step by clicking the Help icon next to that step.
To close the Getting Started sidebar, click the double-arrow button on its top-right corner.
Related • Accessing Help on Junos Space on page 104

Documentation
Accessing Help on Junos Space
Junos Space provides a Help system that is context-sensitive per workspace. The Help
system provides information about each element in the system, including workspaces,
dashboards, tasks, inventory pages, and actions. Help topics appear as links on the
sidebar.
To access online Help:
1. Click the workspace with which you want to work.
2. Click the Help icon at the right side of the Junos Space header.
The help icon is represented as .
The sidebar appears, if it is not already displayed, with the Help section open listing
specific topics for that workspace and tasks.
3. Click a topic link to view its contents.

The Help topic appears in a separate window.
4.
Click the icon at the top right of the sidebar to hide it.
For more information about the Junos Space Platform UI, see the “Junos Space User
Interface Overview” on page 89 topic.
Related • Using the Getting Started Assistants on Junos Space on page 103
Documentation
Understanding GUI Controls
The following sections describe the various controls that can appear on the Junos Space
UI:
• Check Box on page 105

• Date Picker on page 108
• Drop-down List on page 108
• Option Button on page 109
• Search Field on page 109
• Spin Box on page 110
• Slider on page 110
• Text Box on page 110
• Tree View on page 113
• Scrolling Controls on page 114
• Sizing Controls on page 114
Check Box
You can use check boxes to select or deselect an option. For example, to ensure that
there is at least one uppercase character when a user creates or modifies a password,
an administrator can select the At least one uppercase character check box (as shown
in Figure 7) on the Administration > Applications > Network Management Platform >
Modify Application Settings (from the Actions menu) > Password > Advanced Settings
page. On a page, you can select one or more check boxes.
Figure 7: Check Box

Selecting All Objects on a Single Page
With Junos Space, you can select all objects on an inventory landing page by selecting
the check box that is displayed adjacent to the first column header. For example, you
can select the check box (see Figure 8) adjacent to the Name column on the Device
Management inventory landing page to select all devices displayed on this page.
Figure 8: Check Box Adjacent to the First Column Header
Selecting All Objects Across Multiple Pages
For certain tasks, you can select an appropriate check box in the Junos Space UI to select
all objects spread across multiple pages. With this feature, you do not need to select
each object individually on multiple pages.
For example, when you want to assign all devices to a domain, you can select the Select
all items across all pages check box on the Domains page at the time of domain creation,
which selects all devices (indicated by the check mark next to the devices as shown in
Figure 9). However, after all the devices are selected, you can deselect one or more
devices, if needed.

Figure 9: Check Box to Select All Objects Across Multiple Pages: Domains
Page
Though some pages support selection of all objects across multiple pages, you may not
be able to deselect any of these objects after the selection. For example, when you select
the Select All across Pages check box when backing up the configuration files (on the
Configuration Files > Config Files Management > Backup Configuration Files page), you
cannot deselect any of the selected devices (see Figure 10). The configuration of all
devices are backed up.
Figure 10: Check Box to Select All Objects Across Multiple Pages: Backup
Configuration Files Page

NOTE: Only certain pages in the Junos Space UI support the selection of
objects across multiple pages.
Date Picker
Using a date picker, you can select a date by either typing it into a text box or by using a
drop-down Calendar control.
In Figure 11, you can specify a date by typing the date in the text box or from the Calendar
control by clicking the icon next to the text box. To select today’s date, click Today on
the Calendar control.
Figure 11: Date Picker
Drop-down List
With a drop-down list, you can select from a list of values (see Figure 12). Clicking the
arrow next to the list box opens the list. Junos Space also provides an editable drop-down
list, which is a combination of a drop-down list and an editable text box (see Figure 13).
You can enter the first few letters in the text box to narrow down the list of values.
Figure 12: Drop-down List

Figure 13: Editable Drop-down List
Option Button
Using an option button, you can make a single choice among a set of mutually exclusive,
related options. Only one button at a time can be selected from the available options.
The default option is selected (see Figure 14).
Figure 14: Option Button
Search Field
Use the Search text field on the right of the inventory page banner to look for specific
objects to display on the inventory landing page. To find objects (within columns) on this
page, enter the search criteria in the Search field (see Figure 15). This field supports the
same search syntax as the global search field (see “Using Global Search” on page 162).
For example, enter “os:junos AND down” to find devices that are down on the Device
Management inventory landing page. This feature is more powerful than the column
filter because it allows you to use Boolean expressions.
Clicking the magnifying glass at the right of the search field displays a list of objects
matching the search criteria. If you press the down arrow after entering the search criteria
in the search field , a list of search options is displayed. When you select a search option
from the list, only those inventory items that are specific to that search option are
displayed on the page.
You can create tags to categorize objects. For more information about tagging objects
to select similar objects, see “Tagging an Object” on page 1394 (in the Junos Space Network
To display all the inventory objects on the page again, clear the contents of the Search
field and press Enter.
NOTE: You must append "*" if you want to search using partial keywords.
Otherwise, the search might return zero matches.

Figure 15: Search Field
To search for specific objects across the entire Junos Space Network Management
Platform, use the Search field on the banner at the top of the inventory page (see
Figure 16). For more information about global search, see “Using Global Search” on
page 162.
Figure 16: Global Search
Spin Box
A spin box is a text box with up and down arrows that you can click to change the value
incrementally (see Figure 17). You can also type a valid value in the box.
Figure 17: Spin Box
Slider
Using a slider, you can select a value from a continuos range of values by sliding the
indicator along a bar. The indicator shows the current value.
In Figure 18, the automatic logout of a user due to inactivity is set to 90 minutes by using
the slider control.
Figure 18: Slider
Text Box
A text box enables you to:
• Enter or edit text (for example, the Login ID or Password fields in Figure 19).
• Upload files from your computer to the Junos Space server, such as the Image File or
X509 Cert File fields in Figure 19.

• Choose a value from a drop-down list of values when you enter the first few letters in
the text box (see Figure 20).
Use the label associated with a text box to identify the purpose of a text box. You can
gain additional information about some of the text boxes from the information icons that
are associated with the text boxes ( ). For example, the Temporary Password and
Password text boxes have information icons associated with them as shown in Figure 19.
You must mouse over the information icon for Junos Space to display information about
the text box with which the information icon is associated. For example, when you mouse
over the information icon associated with the Password text box, the conditions that
must be met when you enter a password are displayed.
NOTE: Not all text boxes in Junos Space have information icons associated
with them.
Figure 19: Text Box

Figure 20: Text Box Displaying a Drop-down List
Identifying the Range of Values
Usually, if there is a default value associated with a text box, then it is displayed by default
on the text box. However, to determine the range of values that is accepted in a text box,
perform the following steps:
• To determine the minimum value, enter a negative value (for example, –1) in the text
box. An error icon appears next to the text box. Mouse over this icon to see the minimum
value that is accepted in this text box (see Figure 21).
Figure 21: Minimum Value in a Text Box
• To determine the maximum value, enter a very high value in the text box. An error icon
appears next to the text box. Mouse over this icon to see the maximum value that is
accepted in this text box (see Figure 22).

Figure 22: Maximum Value in a Text Box
Tree View
Using the tree view, you can view and interact with a collection of Junos Space objects
that are arranged hierarchically. You can select only one object from the objects that are
displayed in tree view. You can expand and collapse an object by clicking the plus and
minus expander buttons respectively (see Figure 23).
Figure 23: Tree View

Scrolling Controls
Junos Space Network Management Platform provides horizontal and vertical scroll bars
on inventory landing pages, which you can use to scroll the contents of the page by
clicking one of the scroll arrows, clicking an area in the scroll bar, or dragging the scroll
bar. For example, to view data that is at the bottom of the Junos Space page, you can
drag the vertical scroll bar toward the bottom of the page. Figure 24 shows the horizontal
scroll bar that enables you to scroll horizontally through the Junos Space page allowing
you to view data that is on the left or right.
Figure 24: Horizontal Scroll Bar
Sizing Controls
You can use the minimize, maximize, and close buttons of your browser window to hide
the Junos Space application window, enlarge the window to fill the whole screen, and
close the window, respectively.
NOTE: Minimize the window when you want the Junos Space application
window to be temporarily out of the way instead of closing it.
Close the window when you have finished working on it and there is no need
for you to return.
To resize a window (make it smaller or bigger), point to any of the window's borders or
corners. When the mouse pointer changes to a double-headed arrow, drag the border
or corner to shrink or enlarge the window. You cannot resize a window that is already
maximized.
Figure 25 displays the minimize, maximize, and close buttons.
Figure 25: Minimize, Maximise, and Close Buttons

Documentation

Understanding Tooltips and Messages
Junos Space Network Management Platform displays tooltips, which are small pop-up
windows that provide information about an unlabeled control, such as the information
that is displayed automatically when you mouse over an icon on a toolbar (see Figure 26).
Figure 26: Tooltip
Also, Junos Space sometimes displays pop-up messages to report conditions that require
your attention. Depending on the severity level, the icons that are displayed in a message
differ. To gain an understanding of the various types of messages and the icons that are
displayed in the Junos Space UI, see the following sections:
• Error Messages on page 115

• Confirmation Messages on page 115
• Information Messages on page 116
• Standard Icons in Messages on page 116
Error Messages
Junos Space displays an error message to alert you about a problem that has already
occurred along with a recommendation, if any, to resolve the problem. For example, in
Figure 27, the error message alerts you that the Junos Space UI may be out of sync with
the Junos Space server and that you need to refresh the browser window (which is likely
to resolve the issue).
Figure 27: Error Message Dialog Box
Confirmation Messages
Junos Space often displays a confirmation dialog box, which is a modal dialog box that
asks you whether you want to proceed with the action that you initiated from Junos Space
Network Management Platform. A confirmation dialog box typically consists of a question
and two or more responses. You have to select a response and based on your choice
Junos Space completes or cancels the task that you initiated. For example, when you

initiate a database backup operation, you are asked to confirm whether you want to
perform the backup operation because this operation may have an impact on Junos
Space performance. In Figure 28, clicking OK initiates the database backup operation,
whereas clicking Cancel closes the current page.
Figure 28: Confirmation Dialog Box
Information Messages
An information message communicates some sort of information to you pertaining to
your current activity and appears in a modal dialog box. For example, when you choose
to proceed with the database backup operation, Junos Space displays an information
message containing a job ID, which you can click to know whether the backup operation
is a success or a failure (see Figure 29).
Figure 29: Information Dialog Box
Standard Icons in Messages

Icons that are associated with various messages help you assess the situation at a glance
and decide what action to take. If the severity level of the message is high, which is usually
indicated by the Error icon, revisit the past action and make suitable corrections (for
example, enter missing information in a mandatory field) before you proceed to the next
step.

NOTE: Not all messages that are displayed in Junos Space are associated
with icons.
Table 7: Standard Junos Space Message Icons

Icon Description Message with the Icon
Error icon—Indicates that an error or problem For example, the following error message is displayed if you
has occurred, which should be resolved try to create a tag without a tag name or a user without a
before you proceed username. Providing appropriate information in all fields
where the icon appears usually resolves this type of

error.
Figure 30: Message with the Error Icon

Table 7: Standard Junos Space Message Icons (continued)

• Warning icon—Indicates a condition that For example, the following error is displayed when you try
might cause a problem in the future to delete an SMTP server that is active:
• These icons come in two different sizes: Figure 31: Message with the Larger Warning
larger and smaller. A smaller warning icon
Icon
indicates that you might have to think twice
before you proceed with the action. A larger
warning icon indicates that the action you
initiated cannot be performed because of
various constraints.
The following message is a warning that you may not be

able to retrieve the tags if you confirm the deletion.
Figure 32: Message with the Smaller

Warning Icon
Information icon—Presents you with useful The following message indicates that a backup operation
information. is triggered:
Figure 33: Message with the Information

Icon

Table 7: Standard Junos Space Message Icons (continued)

Question mark icon—Normal confirmation Depending on your response to the following message, Junos
message to which you typically respond with Space performs a suitable action.
a "Yes" or "No"
Figure 34: Message with the Question Mark
Icon
Check mark icon—Indicates that the action The following message indicates that a private tag with the
you initiated is a success name “test” is successfully created:
Figure 35: Message with the Check Mark

Icon

Documentation
Understanding Status Indicators
Junos Space Network Management Platform status indicators enable you to monitor
the status of an action that you initiated from Junos Space. The following status indicators
in Junos Space are the most common:
• Progress Bars on page 119

• Status Indicator Icons on page 120
Progress Bars
The progress bar shows you the progress of an action that you initiated from Junos Space.
In Junos Space, progress bars are typically displayed when you export files from Junos
Space to your computer, add an application to Junos Space, and so on. For example,
when you export a configuration file, Junos Space displays the progress of the export
action in a dialog box (see Figure 36). When the action is completed, the progress bar
displays 100%.

Figure 36: Progress Bar
Status Indicator Icons

Status indicator icons on an inventory landing page indicate the status of a Junos Space
object, such as whether a user is in the enabled or disabled state. Status indicators are
not displayed for all Junos Space objects.
Status indicators that are displayed for users are listed in Table 8:
Table 8: User Status Indicators

User Status Indicator Description
User is in enabled state.
User is in disabled state.
Users in disabled state cannot log in to Junos Space Network Management Platform. For more
information about enabling or disabling a user, see “Disabling and Enabling Users” on page 980 (in
the Junos Space Network Management Platform Workspaces Feature Guide).
Status indicators that are displayed for devices are listed in Table 9:
Table 9: Device Status Indicators

Device Status Indicator Description
Device is up.
Device is down.
Ensure that the status of the device is up before initiating any action on the device. Actions
initiated on devices that are down are likely to fail.
Device is in synchronized state.
Each job has a job status indicator. Table 10 describes these indicators.

Table 10: Job Icon Status Indicators
Job Status Indicator Description

The job was completed successfully.
The job failed.
The job was canceled by a user.
The job is scheduled.
The job is in progress. You can cancel only those jobs that are in progress from the Actions
menu.

Documentation
Viewing the Junos Space Platform Dashboard
When you log in to Junos Space Network Management Platform, the home page is
displayed. By default, the home page for Junos Space Platform is the Dashboard page.
However, if you previously configured a different page as the home page, then the
configured home page is displayed when you log in.
The Junos Space Platform dashboard, as shown in Figure 37, displays graphs that provide
information about the overall system condition, the fabric load history, the active users
history, and the percentage of jobs in different states. The charts are visible to all users
and are updated in real time.
NOTE: If you do not have user privileges to view detailed data, you might not
be able to view detailed information if you select a gadget.

Figure 37: Junos Space Platform Dashboard Page
To access the Junos Space Dashboard page:
1. On the Junos Space Platform UI, select Dashboard.
The Dashboard page is displayed.
2. (Optional) To view more information related to the overall system condition, click
Overall System Condition or the indicator needle.
You are taken to the Fabric page, where you can view detailed information about the
nodes in the fabric. For more information, see “Viewing Nodes in the Fabric” on page 1092.
3. (Optional) To view information related to the fabric load, on the Fabric Load History
graph:
• Mouse over a graph data point to view the average CPU usage percentage.
• Click the blue line depicting the CPU usage to view detailed information.
You are taken to the Fabric page, where you can view detailed information about
the CPU, memory, and disk usage for the nodes in the fabric.
4. (Optional) To view information related to the active users, on the Active Users History
graph:
• Mouse over a graph data point to view the total number of active users at that point.

• Click a data point on the graph to view more information about the active users at
that point.
You are taken to the User Accounts page, where the active users are displayed. For
more information, see “Viewing User Statistics” on page 994.
5. (Optional) To view information related to the jobs, on the Job Information graph:
• Mouse over a segment in the pie chart to view the percentage of jobs with a particular
status; for example, cancelled jobs, successful jobs, or failed jobs.
• Click a segment of the pie chart to view details of jobs with status corresponding
to the segment.
You are taken to the Job Management page, where the jobs filtered by the status
are displayed. For more information, see “Viewing Jobs” on page 908.
6. (Optional) You can move any chart displayed on the Dashboard page by clicking
inside the title bar and dragging the chart.
7. (Optional) You can resize any chart displayed on the Dashboard page by hovering
over an edge and clicking and dragging the edge.
Related • Junos Space Platform Workspaces Overview on page 171

Documentation
• Overall System Condition and Fabric Load History Overview on page 1069
Workspace Statistics Page Overview
Use the task tree on the left side of the page to navigate application workspaces and
perform tasks within a workspace. When you select an application from the Applications
list (at the top left of the Junos Space UI), all the workspaces for the selected application
are displayed in the task tree.
If you know the workspace in which you want to perform an action (task), select the
workspace from the task tree on the left side of the page. The right side of the page
displays information about the selected workspace and its objects.
Workspace Statistics
When you select the name of a workspace from the task tree, Junos Space Network
Management Platform displays high-level statistics representing the status of managed
objects in that workspace. The statistics and charts displayed for different workspaces
are different. Figure 38 shows the charts displayed on the Devices workspace statistics
page.

Figure 38: Workspace Statistics Pages
If a chart has more data points than can be viewed clearly simultaneously, a scroll bar
appears at the bottom or side of the chart.
If you click a bar or pie-chart segment, you navigate to the corresponding inventory page,
filtered according to the bar or segment you selected. For example, if you click the MX240
devices bar on the Device Count by Platform bar chart, you navigate to the Devices >
Device Management inventory page, which in this case displays all the MX240 devices
on the network that are discovered and managed by Junos Space Network Management
Platform.
You can move the charts and graphs on the page or resize them.
You can also print or save the statistics by right-clicking the graphic (bar chart or pie
chart) and selecting the appropriate option.

Documentation

Inventory Landing Page Overview
In the Junos Space Network Management Platform UI, you navigate to an inventory page
by selecting an application, expanding an application workspace, then selecting a
management task. For example, to view the Device Management inventory page, select
Devices > Device Management.
The inventory pages display information related to managed objects for a particular task
group or task in tabular format. The fields that are displayed are different for different
inventory pages, depending on the task group that you selected.
For each managed object, specific data associated with it is stored in the Junos Space
Platform database. For example, in the case of devices, device name, interfaces, OS
version, platform, IP address, connection, managed status, and so on are stored.
Inventory pages enable you to view and manipulate managed objects individually or
collectively. Managed objects include devices, logs, users, jobs, clients, software, licenses,
and so on. You can organize your view to display only those objects that you want to see,
in the way that you want to see them.
You can select an object or objects by selecting the check box to the left of each object
on the inventory page. You can select one, several, or all objects and perform actions on
them using the shortcut menu or the Actions menu. Selecting the check box to the left
in the first column of the column header row selects or deselects all items. The objects
that you select and on which you perform an action remain selected.
NOTE: The function and implementation of individual inventory pages

depends on the Junos Space Platform application design.
• Organizing Your View on page 125

• Working with Objects on an Inventory Page on page 128
• Exporting Data on page 130
Organizing Your View

Before you start working on data that is displayed on various inventory landing pages
(ILPs), it would be best to organize your view on the ILP so that Junos Space presents
you with only the information that you need. The following sections provide information
about how you can organize your view.
• Paging Controls on page 126

• Sorted-by Indicator on page 126
• Show or Hide Columns on page 127
• Filter Submenus on page 128

Paging Controls
Figure 39 shows the paging controls that appear at the bottom of the inventory page.
You can use these controls to browse the inventory when the inventory is too large to fit
on one page.
Figure 39: Page Information Bar
The Page box lets you jump to a specific page of the inventory. Type the page number in
the Page box and press Enter to jump to that page. The Show box enables you to
customize the number of objects displayed per page. Table 11 describes other table
controls.
Table 11: Table Paging and Refreshing Controls

Page Control Operation
Advances to the next page of the table
Returns to the previous page of the table
Displays the last page of the table
Displays the first page of the table
Refreshes the table content
Sorted-by Indicator
The sorted-by indicator is a small arrowhead next to a column name. It displays how the
objects are sorted in a column. When you sort a column, the column name is highlighted
and the indicator appears.
You can sort inventory data using the Sort Ascending and Sort Descending commands
on the column header drop-down menu. Click the down arrow on a table header to view
the menu. In Figure 40, the device inventory is sorted by the Name column.

Figure 40: Sorting Tables
Some columns do not support sorting.
Show or Hide Columns
You can show or hide columns on the inventory page by selecting or not selecting the
column name on the Columns cascading menu, as shown in Figure 41. All column header
drop-down menus have this option. Only the columns that are selected appear in the
inventory table.

Figure 41: Showing or Hiding Columns in Tables
Filter Submenus
For information about filtering options in Junos Space Platform Release 17.2R1 and later,
see “Filter Management in Junos Space Platform User Interface” on page 132.
Working with Objects on an Inventory Page

To initiate an action on the objects that are available on an inventory page, you can use:
• Toolbar Icons on page 129

• Actions Menu and Shortcut Menu on page 129

Toolbar Icons
Almost all inventory landing pages provide a toolbar containing icons that provide easy
access to frequently used tasks. While some icons are common across inventory landing
pages such as the Display Quick View icon (which displays a small window summarizing
data about the selected object), most icons are specific to an inventory landing page.
For example, in Figure 42, the Modify User icon is specific to the User Accounts inventory
landing page.
Figure 42: Toolbar Icons
Actions Menu and Shortcut Menu
You can perform actions on one or more selected items on an inventory page by using
the Actions menu, or by right-clicking the items to invoke the shortcut menu. To use the
Actions menu, select one or more objects, select an action or subgroup of actions from
the Actions menu. (Note that the subgroup has an arrowhead next to its name.) For
example, to view the physical interfaces of a device, select that device on the Device
Management inventory page, open the Actions menu, expand the Device Inventory
subgroup, and select View Physical Inventory.
You can also select one or more items on the inventory page, then right-click. The shortcut
menu appears and you can select an action or subgroup of actions.

NOTE: If you are using Mozilla Firefox earlier versions, the Advanced JavaScript
Settings might disable the shortcut menu.
To ensure that you can use the shortcut menu:
1. In Mozilla Firefox, select Tools > Options to display the Options dialog box.
2. In the Options dialog box, click the Content tab.
3. Click Advanced to display the Advanced JavaScript Settings dialog box.
4. Select the Disable or replace context menus option.
5. Click OK in the Advanced JavaScript Settings dialog box.
6. Click OK in the Options dialog box.
If you are using newer versions of Mozilla Firefox, it may not be necessary to
perform the preceding steps. By default, you need not change any of the
Firefox settings. But, if you have changed the settings or for some reason the
shortcut menus do not appear properly, then you need to perform the
following steps in the recent versions:
1. Disable or replace context menus—Deselect this option to prevent webpages

from disabling or changing the Firefox shortcut menu.
2. In about:config(URL): dom.event.contextmenu.enabled, set it to false to

block sites. The default value is true.
Exporting Data
You can export data that is displayed on certain inventory landing pages such as the MD5
Validation Result inventory page (in the Images workspace) as well as export job details
pertaining to certain tasks initiated from Junos Space Platform. For example, you can
export job details related to device discovery, staging and deployment of device images,
and so on.
NOTE: Not all jobs in Junos Space support the export of job details.
The data is exported as a comma-separated file (CSV) to your computer, allowing you
to process the data offline. For example, you can use this data to identify devices on
which staging or deployment of an image failed.

To export the data that is displayed on the MD5 Validation Result page as a CSV file:
1. On the Junos Space Platform UI, select Images and Scripts > Images.
The Images page displays the list of device images.
2. Select a device image.
3. Select MD5 Validation Result from the Actions menu.
The MD5 Validation Result page displays the results of verification tasks.
4. Click Export to CSV from the Actions menu.
You are prompted to save the file.
5. Click OK on the File Save dialog box to save the file to your local file system.
6. After you save the file, to return to the MD5 Validation Result page, click the [X] icon
on the Exporting Validation Results dialog box to close it.
Navigate to the location where you saved the file and open the file by using an application
such as Microsoft Excel. If you are opening this file as an Excel workbook, then filter the
data for the Failed status in the Checksum Result column to identify devices in which the
images are not staged completely. From the filtered data, see the Device Image Name
column to obtain information about the images that are not staged completely.
To export the image deployment job details as a CSV file:
1. On the Junos Space Platform UI, select Jobs > Job Management.
2. Double-click the image deployment job whose details you want to export as a CSV
file.
3. Click Export as CSV.
You are prompted to save the file.
4. Click OK on the File Save dialog box to save the file to your local file system.
5. To return to the Job Management page, click OK on the Exporting Device Image Job
dialog box.
Use an application such as Microsoft Excel to open the downloaded file from your
computer. If you are using Microsoft Excel, you can filter data in the Status column to
identify the devices on which the deployment of images failed.


Documentation
Filter Management in Junos Space Platform User Interface
This section contains the following topics:
• Understanding Filtering Options in Junos Space Platform User Interface on page 132
• Managing Filtering Options on page 143
• Error Conditions and Error Messages for Filters on page 151
Understanding Filtering Options in Junos Space Platform User Interface

This topic contains the following sections:
• Overview on page 132

• Benefits on page 133
• Pages and Columns that Support Filtering on page 133
Overview
On various Junos Space Platform pages, you can use the Filter menu to show or hide
table entries based on the filtering criteria that you specify. Filters enable you to quickly
find and evaluate the entries that are relevant to your specific needs.
Many of the columns in Junos Space page tables support filtering. To know whether or
not a column supports filtering of data, click the down arrow next to the column name.
If the Filter submenu appears, then that column supports filtering of data. The filtering
criteria that are available for you depend on the selected column. You can create filters
that combine criteria from more than one column.
From Release 17.2R1 onward, Junos Space Platform introduces the following
enhancements to filtering options:
• Ability to save, modify, and delete filters
• Ability to share saved filters with other users
• Ability to mark filters as favorites
• Ability to manually enter filter conditions with autocomplete and suggestion support.
For a list of pages and columns that support filtering, see “Pages and Columns that
Support Filtering” on page 133.
In releases earlier than 17.2R1, Junos Space Platform supports only basic filtering. In those
releases, you can specify only one set of filter criteria at a time, and the filter setting is
lost when you modify the criteria. From Junos Space Platform Release 17.2R1 onward,
you can save multiple filters. You can also mark up to 10 filters as favorites in each of the
pages that support enhanced filtering.

The Filter menu that appears when you click the filter icon lists up to 10 filters. The 10
filters that are listed in the Filter menu are arranged in the following order of filter
categories: favorite filters, public filters, and private filters. If there are more than 10 filters,
those filters are listed under the More Filters submenu.
NOTE: The More Filters submenu is not displayed if you have not saved any
filter. However, the More Filters submenu appears even if you have saved only
one filter.
If you have Filter Management permissions to create or modify filters, you can also choose
to share the saved filters with other users by marking the filters as public.
For more information about creating, saving, modifying, and deleting filters, see “Managing
Filtering Options” on page 143.
From Junos Space Platform Release 17.2R1, you can also manually enter filter criteria in
the filter text box that appears when you click the Show/ Clear and Hide Filters option
from the Filter menu. For more information about manually specifying filter criteria, see
“Managing Filtering Options” on page 143.
Benefits
Filters enable you to quickly find and evaluate the entries that are relevant to your specific
needs. Ability to save and share filters enables you to configure multiple filters for a page
that can be preserved across sessions and shared with multiple users.
Pages and Columns that Support Filtering
This section contains the following topics:
• Pages and Columns that Support Enhanced Filtering on page 134

• Pages That Support Basic Filtering on page 143

Pages and Columns that Support Enhanced Filtering
The following table lists the pages and columns that support enhanced filtering and also
the data types for each of the columns:
Page Column Data Type
Device Management Name String
Device Alias String
IP Address Number
Serial Number String
Connection Status List
Managed Status List
Platform String
OS Version String
Domain String
Device Family String
Configuration State List
Last Rebooted Time Date
Vendor String
Authentication Status String
Aggregation Device String
Satellite Devices String
Device Network List

View Physical Interfaces Physical Interface Name String
IP Address String
IPv6 Address String
MAC Address String
Operational Status List
Admin Status List
Link Level Type String
Link Type String
Speed String
MTU String
Description String
Domain String
View Logical Interfaces Interface Name String
IP Address String
IPv6 Address String
Description String
Domain String
Device Discovery Profiles Profile Name String
Target Type List
Target Details String
Profile Visibility List
Job ID Number

Model Devices Name String
Description String
Devices Count Number
Device Adapter Name String
Device Family String
Version String
Adapter State List
Template Definitions Name String
Domain String
Description String
Last Modified By String
Templates Name String
Domain String
Template Type List
Latest Version String
Description String
Deployment Status List

Configlets Name String
Domain String
Category String
Device Family Series List
Latest Version String
Git Version String
Git Branch String
Execution Type List
Creation Time Date
Last Updated Time Date
Reference Number Number
Configuration View Name String
Domain String
Title String
View Type List
Creation Time Date
Configuration Filter Name String
Domain String

Xpath and Regex Name String
Domain String
Value String
Property Type List
Creation Time Date
Images File Name String
Domain String
Version String
Type List
Scripts Script Name String
Domain String
Descriptive Name String
Type List
Category String
Execution Type String
Format List
Latest Revision String
Git Version String
Git Branch String

Operations Operation Name String
Domain String
Description String
Creation Time Date
Script Bundles Script Bundle Name String
Domain String
Config Files Management Config File Name String
Device Name String
Device Alias String
Latest ConfigFile Version String
Creation Date Date
Last Updated Date Date

Job Management ID Number
Domain String
Name String
Percent Number
State List
Job Type String
Parameters String
Summary String
Scheduled Start Time Date
Actual Start Time Date
End Time Date
Owner String
Retry Group Id Number
Previous Retry Number
User Accounts User Name String
First Name String
Last Name String
Email String
User Type List
Status List
GUI/API Access List
Locked Out List

Roles Role Title String
Type List
Description String
User Sessions User Name String
IP Address String
Fabric Node Name String
Session Start Time Date
Audit Log ID Number
User Name String
User IP String
Domain String
Application String
Task String
Timestamp Date
Result String
Description String
Job ID Number
Fabric Last Monitored Time Date
Last Boot Time Date

Audit Log Forwarding Name String
Description String
Server Address String
Port Number
Protocol List
Last Updated User String
Enabled List
Tags Name String
Owner String
Description String
Access Type List
Report Definitions Name String
Domain String
Created By String
Created Time Date
Description String

Generated Reports Name String
Generated Time Date
Domain String
Description String
Definition Name String
Generated By String
Format String
Job ID Number
Pages That Support Basic Filtering
Junos Space Platform supports basic filtering options on the following pages:
• Role Based Access Control > Domains
• Administration > CA/CRL Certificates
• Administration > SMTP Servers
• Administration > DMI Schemas
NOTE: Filtering is supported only for the State and Schema Installed
columns.
See Also • Managing Filtering Options on page 143
Managing Filtering Options

From Junos Space Platform 17.2R1 onward, you can save filters, modify the saved filters,
and delete the filters. You can also mark the filters as public or favorites or both. The
following sections explain the various filter management tasks that you can perform
from the Junos Space Platform user interface (UI):
• Creating Filters by Manually Entering the Filter Criteria on page 144

• Creating Filters by Using the Filter Submenu Options on page 146
• Saving a Filter on page 148
• Modifying a Filter on page 149

• Creating a Public Filter on page 150

• Applying a Filter on page 150
• Clearing a Filter on page 150
• Deleting a Filter on page 150
Creating Filters by Manually Entering the Filter Criteria
From Junos Space Platform Release 17.2R1 onward, you can manually enter the filtering
criteria to create the filters that meet your specific requirements.
To manually enter filtering criteria:
1. From any of the pages that support Filter Management options, click the Filter icon.
The Filter menu appears.
2. Click Show/ Clear and Hide Filters on the Filter menu.
The Filter field appears.
3. Click inside the Filter field.
A list showing the names of columns that support filtering and the following two
options appears:
• An opening parenthesis [ ( ] symbol. The bracket enables you to group conditions.

A closing parenthesis [ ) ] symbol appears in the list after you specify a condition if
you used an opening parenthesis before specifying the condition.
• Not. The Not option enables you to specify conditions based on which you want to
filter out entries.
4. From the list, select the columns for which you want to specify the filter conditions
and specify the conditions by using any of the operators supported for the specified
column. Table 12 lists various operators that you can use for each of the data types
supported for filtering.
You can specify multiple conditions by using an AND or an OR operator. The Filter
field supports autocomplete and provides suggestions for column names, attributes,
and operators even as you type inside the field.
NOTE: If the values you enter for any of the parameters contain spaces,
enclose such values in single quotation marks. For example, Domain
Contains 'test domain'. However, if the single quotation mark is part of the
search string, use the backslash escape character (\) before the quotation
mark. For example: Domain Contains '\'test domain\''.

Table 12: Data Types and Supported Operators

Data Type Supported Operators
String (Other than Domain Column) Starts-with
Ends- with
Contains
!=
String (Domain Column only) Contains
Not-contains
Numbers or Date =
!=
>
<
<=
>=
List =
!=
The following examples show samples of manually entered filter criteria:
• ID > 2000000 AND 'Job Type' ends-with 'elements' AND Parameters contains '1.1.1.1'
OR Parameters = 192.168.27.72 AND Owner = SUPER
This filter on the Job page displays jobs that meet the following criteria: The job ID
is a number greater than 2000000, the job type ends with the text elements, the
Parameter field contains 1.1.1.1 or 192.168.27.72, and the owner is the superuser.
• ( 'Connection Status' = 'down' ) AND ('Managed Status' = 'In Sync' OR 'Managed

Status' = Synchronizing ) AND 'Device Family' starts-with 'junos'
This filter on the Device page displays devices that have the connection status set
to down, the managed status set to in sync or synchronizing, and device family
name starts with Junos.,
5. After you enter the conditions, you can save or apply the filter. To save the filter, click
the Save Filter icon and complete the steps as explained in “Saving a Filter” on page 148.

To apply the filter without saving, click the Apply Filter icon. For more information
about applying filters, see “Applying a Filter” on page 150.
To clear the filter conditions you entered or the filter that you applied, click the Clear
Filter icon. Alternatively, you can click the Clear and and Hide icon to clear the filters
and hide the filter bar.
For a list of error messages, see “Error Conditions and Error Messages for Filters” on
page 151.
Creating Filters by Using the Filter Submenu Options
Many of the columns in Junos Space user interface tables support filtering. To know
whether or not a column supports filtering of data, click the down arrow next to the
column name. If the Filter submenu appears, then that column supports filtering of data.
The criteria that are available for you to filter on depend on the selected column. You
can create filters that combine criteria from more than one column.
On Junos Space pages that support enhanced filtering options, the Filter field and the
Save Filter, Apply Filter, and Clear Filter icons appear when you select any of the items
from the Filter submenu. The selected criteria are displayed in the Filter field. You can
choose to apply, save, or clear the filtering criteria by clicking the appropriate icon.
On Junos Space pages that do not support enhanced filtering options, when you select
any of the items from the Filter submenu, Junos Space Platform displays the filter criteria,
including the columns being filtered, above the table. Junos Space Platform displays a
red X to the left of the filter criteria above the table. You can clear the filter and restore
the table to its original view by clicking the X.
Figure 43 shows a typical Filter submenu for a date column.
Figure 43: Typical Submenu for a Date Column

The following procedures describe how to use the different types of available filters.
To filter entries on the Junos Space pages:
1. On the Junos Space Platform UI, click the down arrow on the column header and
select Filters.
The Filters submenu appears, displaying the list of operators or values that you can
select, based on the type of values in the column.
2. Based on the submenu that appears, perform one of the following procedures.
To specify filters for a date field:
a. From the Filter submenu, select Before, After, or On.
You can select both Before and After dates and times to filter the entries by a
specific time period. You can also select On to view events recorded on a specific
date.
b. Click the calendar icon and select the date from the calendar.
You can click Today to view the events that occurred today at the specified time.
c. Click the arrow beside the time list and select the time.
To specify filters for a text field:
a. In the text box that appears, type the alphanumeric string based on which you
want to filter entries.
To specify filters for a field with discrete values such as Success or Failure, or True or
False:
a. From the list of values that appears, select the check boxes for one or more values
based on which you want to filter entries.
To specify filters for a numeric field:
a. Enter values for each operator that you want to specify.
3. Click Go to view the entries filtered based on the criteria that you specified.
4. On pages that support enhanced filtering options, you can choose to save the filter
after you specify the required criteria. To save the filter, click the Save Filter icon and
complete the steps as explained in “Saving a Filter” on page 148. To apply the filter
without saving, click the Apply Filter icon. For more information about applying filters,
see “Applying a Filter” on page 150.

To clear the filter conditions you entered or the filter that you applied, click the Clear
Filter icon.
You can also filter entries based on combined filters with different criteria specified for
different columns. For example, you can filter for all events on a certain date whose
status was success. When you use multiple filters, the filters are joined using the logical
AND operator.
To clear only the part of a filter that applies to a any of the columns, click the down arrow
on the column header and clear the check box next to Filter.
Saving a Filter
You can create a filter either by using the filtering options that are available in the Junos
Space Platform UI or by manually entering the filter criteria in the Filter field that appears
when you click the Filter icon. After you specify the filtering criteria, you can save the filter.
To save a filter:
1. Create a filter as explained in either of the following topics:
• Creating Filters by Manually Entering the Filter Criteria on page 144
• Creating Filters by Using the Filter Submenu Options on page 146
The criteria you specified, either by typing in the Filter field or by using the Filter
submenu options in the Junos Space Platform UI, appear in the Filter field.
2. Click the Save Filter icon next to the Filter field.
The Save Filter page appears.
3. In the Name field, enter a name for the filter.
4. (Optional) In the Description field, enter a description for the filter.
5. (Optional)To share the filter with other users, select the Make Public check box.
NOTE: You cannot change a public filter to a private filter after you save
the changes. However, you can change a private filter to a public filter
from the Modify Filters page.
6. (Optional) If you want to mark the filter as a favorite, select the Mark as Favorite check
box.
Alternatively, you can add a filter to the list of favorites or remove a filter from the list
of favorites from the Manage Filters page.
7. Click Save to save the filter. To close the page without saving the filter, click Cancel.

Modifying a Filter
From the Manage Filters page. you can modify saved filters.
1. From the Junos Space Platform UI, go to the page that contains the filter that you
want to modify. For example, the Device Management or View Physical Devices page.
2. Click the Filter icon to view the Filter menu.
3. From the Filter menu, click Manage Filters.
The Manage Filters page appears.
4. From the list of filters, click the filter entry that you want to modify.
The selected filter entry appears highlighted.
5. Modify the following parameters as required:
• Name–The name of the filter.
• Description–Description for the filter.
• Filter Criteria–Filter criteria to apply for the filter. For information about manually
entering the filter criteria, see “Creating Filters by Manually Entering the Filter Criteria”
on page 144.
• Make Public–Specify whether the filter is a public filter. Public filters are available
for all users. However, note that only users with Filter Management permissions to
create or modify filters can create public filters. This check box is disabled if the
selected filter is a Public filter. That is, you cannot clear this check box after you
select this check box and save the filter.
NOTE: To create a public filter, you must have both Create Filter and
Modify Filter roles assigned to your account.
• Mark as Favorite–Specify whether the filter is a favorite or not. You can select this
check box to mark the selected filter as favorite. To remove a filter from the list of
favorites, clear this check box. Favorite filters are listed on top of the Filter menu
options. If there are favorite filters and filters that are not marked as favorites, the
filters that are not marked as favorites appear in the More Filters submenu.
6. Click Modify to save the changes. Click Reset if you want to discard the changes.
For a list of error messages, see “Error Conditions and Error Messages for Filters” on
page 151.

Creating a Public Filter
Public filters are filters that are available to all users. To create a public filter, you must
have both Create Filter and Modify Filter roles assigned to your account. Junos Space
Platform adds the suffix (Public) to the names of filters that are made public.
To make a filter public:
1. When you save a filter, select the Make Public check box. For more information about
saving filters, see “Saving a Filter” on page 148.
2. When you modify a filter, select the Make Public check box. For more information
about modifying filters, see “Modifying a Filter” on page 149
NOTE: After you make a filter public, you cannot change that to a private
filter.
Applying a Filter
Junos Space Platform provides you multiple options to apply a filter.
• From pages that support enhanced filtering, you can apply a filter by clicking the name
of the filter from the Filter menu. Alternatively, while creating a filter, you can click the
Apply Filter icon (the green tick mark) next to the Filter field.
• From pages that do not support enhanced filtering, you can apply a filter by selecting
and specifying filter options from the Filter submenu available for columns that support
filtering and then clicking Go.
Clearing a Filter
Junos Space Platform provides you the following options to clear a filter that is applied
to a page.
• On Junos Space pages that support enhanced filtering options, if a filter is applied to
the page, the filter criteria is displayed in the Filter field. You can click the Clear Filter
icon to clear the applied filter. Alternatively, you can click the Clear and Hide Filters icon
from the Filter bar or the Show/Clear and Hide item in the Filter menu.
• On Junos Space pages that do not support enhanced filtering options, when you select
any of the items from the Filter submenu, Junos Space Platform displays the filter
criteria, including the columns being filtered, above the table. Junos Space Platform
displays a red X icon to the left of the filter criteria above the table. You can clear the
filter and restore the table to its original view by clicking the X icon.
Deleting a Filter
From the Manage Filters page. you can delete saved filters.

To delete a saved filter:
1. From the Junos Space Platform UI, go to the page that contains the filter that you
want to delete. For example, the Device Management or View Physical Devices page.
2. Click the Filter icon to view the Filter menu.
3. From the Filter menu, click Manage Filters.
The Manage Filters page appears.
4. From the list of filters, click the filter entry that you want to delete.
The selected filter entry appears highlighted.
5. Click the Delete icon above the top-left corner of the list of filters.
The Delete Filter page appears.
6. On the Delete Filter page, click OK. Click Cancel if you do not want to delete the selected
filter.
See Also • Understanding Filtering Options in Junos Space Platform User Interface on page 132
Error Conditions and Error Messages for Filters

The following table lists common error conditions you might encounter while saving or
applying filters and the error messages for those conditions:
Table 13: Error Conditions and Error Messages for Filters

Validation Error
Validation Error Message on the
Sample Filter Message at Apply Save Filter and
Error Condition Data Filter Manage Filter Page
Invalid column 'namm' Invalid column name: Invalid filter query

name. namm
Incorrect filter 'Name' juniper Incorrect filter query, Invalid filter query
query. please provide a
Comparison 'Name' has test OR comparison after
missing after 'Device Alias' column name
column name. contains test (Name)
Incorrect filter Name = Incorrect filter query, Invalid filter query

query. Value after please provide a
comparison Name = juniper OR value after
missing. Name = comparison (=)

Table 13: Error Conditions and Error Messages for Filters (continued)
Validation Error
Incorrect filter ( Name = test Incorrect filter query, Invalid filter query
query; “)” missing. please insert ")" to
complete the query
(test)
Incomplete filter ( Name = juniper ) Incomplete filter Invalid filter query

query. Column OR query. Please provide
name or "(" a column name or "("
missing. to complete the
query after (OR)
Incomplete filter ( Name = juniper ) Incomplete filter Invalid filter query

query. Column OR NOT query. Please provide
name or "(" a column name or "("
missing after to complete the
(NOT) query after(NOT)
Incorrect filter Name = test ) Incorrect filter query, Invalid filter query
query; Unexpected token
Unexpected ")"
token ")"
Incorrect filter Name = test AND ( Incorrect filter query, Invalid filter query
query; Name = test1)) Unexpected token
Unexpected ")"
token ")"
Incorrect filter Name = test AND ( Incorrect filter query, Invalid filter query
query; Name = test1)( Unexpected token
Unexpected "("
token "("
Incorrect filter ( Name = test AND Incorrect filter query, Invalid filter query
query; ")" ( Name = test1) please insert ")" to
missing. complete the query
(test)
Invalid filter ) Invalid filter query. Invalid filter query

query. Query Query should start
must start with with "(" or NOT or
"(" or NOT or column name.
column name.
Invalid filter query ( Name starts-with Invalid filter query. Invalid filter query
") Query should start
with "(" or NOT or
column name.

Validation Error
The equal Domain = Filtering of “Domain”

condition is not SUCCESS column is not possible
supported for the with “Equal” condition
specified column.
The not equal Domain != Filtering of “Domain”

condition is not SUCCESS column is not possible
supported for the with “Not Equal”
specified column. condition
The greater than Name > Test Filtering of “Name” Filtering of “Name”
condition is not column is not column is not possible
supported for the possible with with “Greater than”
specified column. “Greater than” condition
condition
The less than Name < Test Filtering of “Name” Filtering of “Name”
supported for the possible with “Less with “Less than”
specified column. than” condition condition
The “greater than Name >= Test Filtering of “Name” Filtering of “Name”
or equal to” column is not column is not possible
condition is not possible with with “Greater than or
supported for the “Greater than or equal to” condition
specified column. equal to” condition
The “Less than or Name <= Test Filtering of “Name” Filtering of “Name”
equal to” column is not column is not possible
condition is not possible with “Less with “Less than or
supported for the than or equal to” equal to” condition
The “contains” ID contains 123 Filtering of “ID” Filtering of “ID”

supported for the possible with with “contains”
specified column. “contains” condition condition
The ID not-contains 123 Filtering of “ID” Filtering of “ID”

“not-contains” column is not column is not possible
condition is not possible with with “not-contains”
supported for the “not-contains” condition
The “starts-with” ID starts-with 123 Filtering of “ID” Filtering of “ID”

supported for the possible with with “starts-with”
specified column. “starts-with” condition
condition

Validation Error
The “ends-with” ID ends-with 123 Filtering of “ID” Filtering of “ID”

supported for the possible with with “ends-with'
specified column. “ends-with” condition
condition
The specified ID = test “ID” column accepts “ID” column accepts

column supports only Numbers only Numbers
only numbers for
values.
The input value is 'Device Network' = “Device Network” “Device Network”

not supported for 123 column can not be column can not be
the specified filtered with the filtered with the
column. provided filter value provided filter value
“123” “123”
The input date 'End Time' = 10pm “End Time” column “End Time” column
and time value accepts only valid accepts only valid
does not match date, Example: date, Example:
the supported 11/03/2017 01:14AM 11/03/2017 01:14AM
format.
The input value is State = SUCCES “State” column can “State” column can
not supported for not be filtered with not be filtered with
the specified the provided filter the provided filter
column. value “SUCCES” value “SUCCES”
The input column State = SUCCESS Column name “State

name is invalid or is invalid or Filtering of
is of a column for that column is not
which filtering is supported.
not supported.
See Also • Understanding Filtering Options in Junos Space Platform User Interface on page 132
• Managing Filtering Options on page 143

Global Search Overview
The global search field on the Junos Space Network Management Platform UI helps you
to quickly locate objects within Junos Space Platform. When you search for an object by
using global search, Junos Space Platform performs a full-text search operation for
objects within Junos Space Platform, and displays the matches found.
The search results are filtered on the basis of your Role-Based Access Control (RBAC)
permissions, such as the tasks that a user is allowed to perform and the domains to which
a user is assigned. For example, users are shown results only for tasks for which they
have the appropriate permissions or results related to domains to which the users are
assigned. For more information about RBAC permissions, see the “Role-Based Access
Control Overview” on page 931 topic (in the Junos Space Network Management Platform
The search is performed and the results are displayed based on how the Junos Space
Platform objects are indexed. Table 14 lists the indexed objects on which you can perform
a search operation by using the global search feature.
Junos Space Platform monitors its database at regular intervals to identify new objects
that need to be indexed. The default interval is set to five seconds.
NOTE:
• An administrator can configure the refresh interval from the Administration
workspace. For more information about configuring the refresh interval,
see the Index auto update interval in seconds parameter in “Modifying Junos
Space Network Management Platform Settings” on page 1222 (in the Junos
• An administrator can also refresh the search index manually from the
Administration workspace by navigating to Administration > Applications
> Network Management Platform and selecting Refresh Search Index from
the Actions menu.

Table 14: Searchable Objects

Object Category Indexed Fields (Category) and Description
Device • name—Name of the device.

• deviceFamily—Device family of the device.
• platform—Hardware platform.
• os—Junos OS version of the device.
• ip—Device management IP address.
• connectionStatus—Device connection state, which indicates whether the device is up or
down.
• managedStatus—Device management status, such as “In Sync,” “Connecting,” “Sync Failed,”
and so on.
• serialNumber—Serial number of the device.
• ccState—Candidate configuration state of the device, such as “Created,” “Accepted,” or
“Rejected”.
• vendor—Name of the device vendor.
• authenticationStatus—Indicateshow the device is connected to Junos Space, such as
“Credential Based,” “Key based,” or “Key Conflict.” Credential-based uses username and
password for connection; whereas, key-based needs an RSA key for establishing a
connection. The UI displays key conflict when the keys on Junos Space and device are not
the same.
• connectionType—Connection type of the device.
Physical interface • name—Name of the physical interface.

• ip—Assigned IP address of the physical interface.
• mac—MAC address of the physical interface.
• operationStatus—Operational status of the physical interface (up or down).
• adminStatus—Administrative status of the physical interface (up or down).
• linkLevelType—Link level type of the physical interface.
• linkType—Link type of the physical interface, such as full-duplex or half-duplex.
• speed—Link speed on the physical interface.
• mtu—MTU of the physical interface.
• description—Description of the physical interface.
Logical interface • name—Name of the logical interface.

• ip—IP address of the logical interface.
• encapsulation—Encapsulation on the logical interface, such as VLAN-VPLS.
• vlanId—Assigned VLAN number of the logical interface.
• description—Description of the logical interface.
Device physical inventory • name—Name of the module.

• version—Software release version of the module.
• modelNumber—Model number of the module.
• model—Device family of the module.
• partNumber—Part number of the module.
• serialNumber—Serial number of the module.
• status—Status of the module.
• description—Description of the module

Table 14: Searchable Objects (continued)

Software inventory • model—Model of this device.

• routingEngine—Routing engine of the device.
• name—Name of the installed software package.
• version—Version number of the installed software package.
• type—Type of the installed software package. Permitted values are operating-system,
internal-package, and extension.
• major—Major portion of the version number. For example, in version 13.1R1.14, the major
portion is 13.
• minor—Minor portion of the version number. For example, in version 13.1R1.14, the minor
portion is 1.
• revisionNumber—Revision number of the package. For example, in version 13.1R1.14, the
revision number is 1.14.
• description—Description of the installed software package
Tags name—List of tags assigned to an object
Audit log • userName—Name of the user who performed an action that generated this audit log entry.
For example, when userA logs in to Junos Space Network Management Platform, an audit
log entry is generated to record the login activity. When you search for userA, this audit log
entry is displayed as part of the search results.
• userIpAddr—IP address from which the action was performed.
• taskName—Action that was performed by the user, such as Login, Logout, and so on.
• timeStamp—Date and time of action.
• executionResult—Result of the action, such as Success, Job Scheduled, and so on.
• description—Description of the action, such as Login Succeeded, Logout Succeeded, and
so on.
• jobId—Job ID of the action that was performed.
NOTE: Not all actions trigger a job.
• recId—Audit log ID.
Job • jobId—Job ID.

• name—Name of the job.
• percent—Percentage of job completed at a given instant,such as 30, 100, and so on.
• state—Indicates whether the job is a success, failure, or in progress.
• jobType—Type of job.
• scheduledStartTime—Date and time at which the job is scheduled to start.
• actualStartTime—Date and time at which the job actually started.
• endTime—Date and time at which the job was completed.
• owner—Name of the user who triggered the job.
• retryGroupId—Job ID of the original job.
• previousRetry—Job ID of the previous job.
• parameter—Objects on which a job is performed or is scheduled to be performed.
• summary—Operations executed for the job.


Configlets • configletsName—Name of the configlet.

• configletsCategory—Category specified by a user at the time of creation or modification of
a configlet.
• configletsDeviceFamilySeries—Family of the device.
• configletsLastestVersion—Latest version of the configlet.
• configletsDescription—Description of the configlet specified by a user at the time of creation
or modification of a configlet.
• configletsExecutionType—Type of execution of the configlet—single or grouped.
• configletsCreationTime—Time at which the configlet was created.
• configletsLastUpdatedTime—Time at which the configlet was last updated.
• configletsLastModifiedBy—Name (login ID) of the user who last modified the configlet.
• referenceNumber—Reference number of the configlet, which a user has provided during
creation or modification of the configlet.
Configuration View • configurationViewName—Name of the configuration view

• configurationViewTitle—Title of the configuration view
• configurationViewDeviceFamilySeries—Family of the device.
• configurationViewDescription—Description of the configuration view specified by a user at
the time of creation or modification of a configuration view
• configurationViewOrder—Order in which the configuration view must be applied
• configurationViewType—Type of configuration view—Form view, Grid view, XML view, and
CLI view
• configurationViewCreationTime—Time at which the configuration view was created
• configurationViewLastUpdatedTime—Time at which the configuration view was last
updated
• configurationViewLastModifiedBy—Name (login ID) of the user who last modified the
configuration view
Scripts • scriptName—Name of the script file

• scriptDescriptiveName—Descriptive name of the script that is mentioned within the script
• scriptType—Type of script—Commit Script, Op Script, and Event Script
• scriptExecutionType—Type of execution—Device (script with this execution type should
be staged on to a device before it can be executed) and Local (script with this execution
type can be executed without having to stage it on a device)
• scriptFormat—Format of the script file (XSL and SLAX)
• scriptLatestRevision—Latest version number of the script
• scriptCreationDate—Time at which the script was imported to the Junos Space server
• scriptDescription—Description of the script
• scriptLastUpdatedTime—Time at which the script was last updated
• deviceNameList—Devices with which a script is associated


Templates • name—Name of the device template

• currentVersion—Current version of the device template
• description—Description of the device template
• modifiedBy—Name (login ID) of the user who last modified the device template
• modifiedTime—Time at which the template was last updated
• state—Device template deployment readiness (Needs Review, Disabled, or Enabled)
• deployStat—Deployment status of the template (assigned, created, or deployed)
• type—Type of device template (configuration template or quick template)
• deviceFamily—Supported device family of this device template"
Template Definition • name—Name of the template definition.

• description—Description of the template definition.
• deviceFamily—Supported device family of the template definition.
• state—State of the template definition.
• schemaVersion—Schema version of the template definition.
• modifiedBy—User who last modified user the template definition.
• modifiedTime—Time that the template definition was last modified.
Xpath and Regex • xpathRegexName—Name of the regular expression or XPath

• xpathRegexValue—XPath or regex value. For example: [a-zA-Z0-9],
/device/configuration/interfaces/interface/unit, or
/device/configuration/interfaces/interface[name="$INTERFACE.get(0)"]/unit/name/text()
• xpathRegexPropertyType—Property type—Regular Expression, XPath Context, or XPath
Search
• xpathRegexCreationTime—Time at which the XPath or regular expression was created
• xpathRegexLastUpdatedTime—Time at which the XPath or regular expression was last
updated
• xpathRegexLastModifiedBy—Name (login ID) of the user who last modified the XPath or
regular expression
Images • imagesFileName—Filename of the device image. For example,

jinstall-ex-4200-12.3R4.6-domestic-signed.tgz
• imagesVersion—Version of the device image
• imagesSeries—Series supported by the device image
• deviceNameList—Devices on which the device image is deployed
Report Definitions • name—Name of the report definition

• reportDefintionsCreatedBy—Name (login ID) of the user who created the report definition
• reportDefinitionsCreatedTime—Time at which the report definition was created
• reportDefinitionsDecription—Description of the report definition


Generated Reports • name—Name of the generated report

• generatedReportsGeneratedTime—Time at which the report was generated
• generatedReportsDescription—Description of the generated report
• generatedReportsDefinitionName—Name of the report definition using which the report
was generated
• generatedReportsGeneratedBy—Name (login ID) of the user who generated the report
• generatedReportsFormat—Format of the generated report
• generatedReportsJobId—ID of the job associated with report generation
Configuration Files • name—Name of the configuration file, which is the device serial name with the .conf file
extension
• configFileDeviceName—Name of the device whose configuration file is backed up
• lastestConfigFileVersion—Latest version number of the backup configuration file
• configFileCreationDate—Time when the configuration file was created on the Junos Space
server. It corresponds to the time at which you back up a device configuration for the first
time from the Junos Space server.
• configFileLastUpdatedDate—Time at which the device configuration was last modified
User Accounts • userName—Login ID of the Junos Space user

• userFirstName—First name of the Junos Space user
• userLastName—Last name of the Junos Space user
• userEmail—E-mail ID of the Junos Space user
• userType—Type of the user—local, remote, or read only
• userStatus—Status of the user—enabled or disabled
• passwordStatus—Status of the password—active or expired
• lockedOut—Whether the user is locked out or not
• roleType—Whether the user has access to the UI, API, or both
NOTE:
• If you are searching for entries in Junos Space Platform on the basis of the
date or time field, the correct search results are not returned if the comma
(,) or the colon (:) characters are part of the search string.
For example, to search for Nov 10, 2016 6:21:33 AM, enter the following
search string: Nov 10 2016 6 21 33 AM. An exact match is returned if found;
otherwise, merged results that match any of the parts of the search string
are returned. In this example, if an exact match, Nov 10, 2016 6:21:33 AM,
is not found, the search results will return all entries that match any of the
space-separated parts of the search string, for example, Nov 9, 2016 7:37:21
AM, Jun 10, 2016 6:21:14 PM, and Nov 4, 2015, 2:12:45 PM.
• Date and time search works only if both the Junos Space server and the
user executing the search are in the same time zone.

The global search operation also supports query expressions. You can search for phrases
and multiple terms. The default operator for multiple terms is the OR operator.
NOTE:
When you enter a query expression, be aware of the following:
• You must add a back slash “\” if you want to use the following special
characters in the search text:
+ && || ! ( ) { } [ ] ^ “ ~ * ? : \
• Field names are case-sensitive. To search within a specific field, the search
syntax is:
“<Indexed field or column name>:<search text>”
For example, if you have a few systems running on Junos OS 12.3 Release
4.5, then “os: 12.3R4.5” returns search results, whereas “OS: 12.3R4.5” does
not return search results. This is because the field name that is indexed is
“os” and not “OS.” Another example to search for information pertaining
to the Junos EX Series devices is to enter “deviceFamily:junos-ex” in the
Search field.
• If you want to search for a term that includes a space, enclose the term
within double quotation marks.
For example, to search for all devices that are synchronized (that is, In
Sync), enter “In Sync” in the Search field.
• You must append "*" if you want to search using partial keywords.
Otherwise, the search returns 0 (zero) matches or hits.
Table 15 provides examples of query expressions that you can enter in the Search field.
Table 15: Query Expressions in the Search Field

Query Expression Matches Objects That Contain
snmp snmp
snmp ntp snmp or ntp
snmp OR ntp snmp or ntp
snmp AND ntp snmp and ntp
protocol:snmp snmp in the protocol field
protocol:snmp AND NOT subject:snmp snmp in the protocol field but not in the subject field
(snmp OR ntp) AND http http and the terms—snmp or ntp
description:“http server” Exact phrase “http server” in the description field

Table 15: Query Expressions in the Search Field (continued)

Query Expression Matches Objects That Contain
description: “http server”~5 http and server within five positions of one another in the description field
(that is, http and server need to have no more than 5 words in-between
them)
ge-* Terms that begin with “ge-,” such as ge-0/0/1 or ge-0/0/1.4
s??p Terms such as smtp or snmp
lastmodified:[1/1/2012 TO 12/31/2012] Last modified field values between the dates January 1, 2012 and December
31, 2012
port:(80 8080 8888) 80, 8080, or 8888 in the port field
IPAddress:10.1.1.1 10.1.1.1 or 10.1.1.0/24 in the IPAddress field

Documentation
• Using Global Search on page 162
Using Global Search
You can use the global search feature of Junos Space Network Management Platform
to find objects within Junos Space Platform.

To search for objects using the global search feature:
1. In the Search field, located at the top of the Junos Space Platform UI, type the search
criteria and press Enter. (Alternatively, you can click the magnifying glass icon adjacent
to the Search field.)
If none of the objects in Junos Space Platform match your search criteria, the following
error message is displayed:
No matching results were found. Please enter different search criteria.
If any of the objects match the search criteria, the results appear on the search results
page, which is divided into two areas. The area on the left displays the filters that you
can use to refine your search results, and the area on the right displays the search
results with a short description about each result.
The search criteria that you typed are highlighted in the search results. Each search
result may also provide a URL to help you navigate to the corresponding object on
the inventory landing page.
NOTE: When the search results are displayed, an informational message

about how to hide the search results is displayed in a dialog box.
Perform one of the following actions:
• To prevent the informational message from appearing again, ensure

that the Don’t show again check box is selected and click OK. The Don’t
show again check box is selected by default.
• To allow the informational message to continue appearing, clear the

Don’t show again check box and click OK.
2. (Optional) Click the URL provided with the search result to navigate to the inventory
landing page of the desired object.
3. (Optional) To filter the search results, select the relevant category or subcategories
displayed on the left of the search results page.
4. (Optional) To view the previous search results, click View Last Search Results. However,
if this is your first search after logging in to Junos Space, then this link is not displayed.
5. To dismiss the search results page or to navigate to the inventory landing page from
which you performed the search, click one of the following:
• The Hide Search Results button
• The left navigation tree or any of the global action icons
• The close [X] button on the top-right of the search results panel


Documentation
• Global Search Overview on page 155
Viewing Your Jobs
You can view all your completed, in-progress, canceled, failed, and scheduled jobs in
Junos Space Network Management Platform. Your jobs include jobs that were triggered
by you as well as jobs that were reassigned to you. The My Jobs icon on the banner of
the Junos Space Platform UI, allows you to quickly access summary and detailed
information about all your jobs, from any workspace and from any task that you are
currently performing.
To view your jobs:
1. In the banner of the Junos Space Platform UI, click the My Jobs icon located at the top
right.
The My Jobs dialog box appears, displaying your 25 most recent jobs.
For each job, the following information is displayed:
• Job ID
• Job name
• Job status
• Date and time—The date and time displayed depends on the status of the job:
• For jobs that are in progress, the date and time at which the job started are
displayed.
• For failed jobs, the date and time when the job failed are displayed.
• For successful jobs, the date and time when the job succeeded are displayed.
• For jobs that are scheduled for later, the date and time at which the job is
scheduled to run are displayed.
• Percentage of the job completed
2. (Optional) To view all your jobs, click Manage My Jobs.
The Job Management page appears and displays a list of all your jobs.
3. (Optional) To view the details of a specific job, click the job ID.
The Job Management page appears and displays the details of the selected job in a
dialog box.
4. Click Close to exit the My Jobs page.
For troubleshooting, see the /var/log/jboss/servers/server1/server.log file.

Related • Viewing Statistics for Jobs on page 905

Documentation
• Canceling Jobs on page 920
• Jobs Overview on page 901
• Clearing Your Jobs on page 921
Changing Your Password on Junos Space
After you log in to Junos Space Network Management Platform, you can change your
password using the User Settings icon on the Junos Space banner. You do not require
any particular Junos Space role to change your password.
Starting with Junos Space Platform Release 12.1, Junos Space has implemented a default
standard for passwords that is compliant with the industry standard for security.
NOTE:
• When you upgrade to Junos Space Platform Release 12.1 or later, the default
standard takes effect immediately. All local users receive password
expiration messages the first time they log in to Junos Space after the
update.
• You need to have set your local password to be able to change it. If you do
not have a local password set, you will not be able to set or change it.
• You can use the User Settings icon to change only your local password. The
change does not affect any passwords that an administrator might have
configured for you on a remote authentication server.
To change your local password:
1. On the Junos Space Platform UI, click the User Settings icon on the right side of the
Junos Space banner.
The Change User Settings dialog box appears.
2. In the Old Password text box, enter your old password.
NOTE: Mouse over the information icon (small blue i) next to the New
Password text box to view the rules for password creation. For more
information about the password rules, see “Modifying Junos Space Network
Management Platform Settings” on page 1222.
3. In the New Password text box, enter your new password.
4. In the Confirm Password text box, enter your new password again to confirm it.

NOTE: The fields on the X.509 Certificate tab are applicable when you
want to use certificate-based authentication. If you are using
password-based authentication, you can ignore these fields. For more
information about certificate-based authentication, see the “Certificate
Management Overview” on page 1300 topic in the Junos Space Network
5. (Optional) Select the Manage objects from all assigned domains check box on the
Object Visibility tab to view and manage objects from all the domains that you are
assigned to.
6. Click OK.
You are logged out of the system. To log in to Junos Space again, you must use your
new password. Other sessions logged in with the same username are unaffected until
the next login.
Related • Logging In to Junos Space on page 99

Documentation
Logging Out of Junos Space
After you complete your administrative tasks in the Junos Space UI, log out to prevent
unauthorized users from accessing Junos Space.
• To log out of Junos Space, click the Log Out icon on the Junos Space application banner.
The logout page appears. A user who is idle and has not performed any action, such as
keystrokes or mouse-clicks, is automatically logged out of Junos Space after a specified
amount of time. This setting conserves server resources and protects the system from
unauthorized access. The default setting is 5 minutes of inactivity. You can change the
setting on the Applications inventory page. Select Administration > Applications > Network
Management Platform > Modify Application Settings (from the Actions menu) > User >
Automatic logout after inactivity (minutes) to modify the automatic logout setting.
To log in to the system again, click the Click here to log in again link on the logout page.
Related • Logging In to Junos Space on page 99

Documentation

Workspaces Feature Guide


PART 1
Overview
• Introduction on page 171


CHAPTER 6
Introduction
• Junos Space Platform Workspaces Overview on page 171

Junos Space Platform Workspaces Overview
In Junos Space Network Management Platform, the different tasks that you can perform
are categorized into workspaces. The task tree on the left side of a Junos Space Platform
page is expanded by default and displays the different Junos Space Platform workspaces
and the tasks that you can perform in each workspace.
NOTE: When you log in to Junos Space, the Applications list displays Network
Management Platform by default. You can expand this list to see the installed
Junos Space applications.
You can collapse the task tree to the left by clicking the double left arrow (<<) button
and expand the task tree by clicking the double right arrow (>>) button.
The first item in the task tree is Dashboard, which provides you access to the Junos Space
Platform Dashboard page. After this, the list of the workspaces available in Junos Space
Platform are displayed; these workspaces are described at a high level in Table 5.
NOTE: If you select a Junos Space application from the Applications list, the
task tree for that application is displayed. This topic describes the workspaces
for Junos Space Platform; for the tasks in Junos Space applications, refer to
the documentation for Junos Space applications.
You can expand any workspace by clicking the expansion symbol (+) to the left of its
name. When you do so, the next level of the tasks for that workspace is displayed; some
items at the second level might contain further sub-tasks.
You can expand as many workspaces or tasks as you like; previously-expanded ones
remain open until you collapse them. The design of the task tree enables you to easily
navigate across the different Junos Space Platform workspaces and tasks.

Table 16: Junos Space Platform Workspaces

Workspace Name Description
Devices Manage devices, including adding, discovering,

importing, and updating them. For more
information, see “Device Management
Device Templates Create configuration definitions and templates

used to deploy configuration changes on
multiple Juniper Networks devices. For more
information, see “Device Templates Overview”
on page 425.
CLI Configlets CLI Configlets are configuration tools provided

by Junos OS that allow you to apply a
configuration to a device easily. For more
information, see “CLI Configlets Overview” on
page 495.
Images and Scripts Deploy, verify, enable, disable, remove, and

execute scripts deployed to devices. For more
information, see “Scripts Overview” on page 622.
Download a device image from the Juniper

Networks Software download site to your local
file system, upload it into Junos Space, and
deploy it on one or more devices
simultaneously. For more information, see
“Device Images Overview” on page 567.
Reports Generate customized reports for managing

network resources. For more information, see
“Reports Overview” on page 713.
Network Monitoring Perform fault monitoring and performance

monitoring of managed devices and fabric
nodes. For more information, see “Network
Monitoring Workspace Overview” on page 744.
Configuration Files Maintain backups of device configuration in the

Junos Space Platform database. For more
information, see “Managing Configuration Files
Jobs Monitor the progress of ongoing jobs. For more

information, see “Jobs Overview” on page 901.
Role Based Access Control Add, manage, and delete users, custom roles,
domains, and remote profiles, and manage user
sessions. For more information, see “Configuring
Users to Manage Objects in Junos Space

Chapter 6: Introduction
Table 16: Junos Space Platform Workspaces (continued)

Workspace Name Description
Audit Logs View and filter system audit logs, including

those for user login and logout, tracking
device-management tasks, and displaying
services that were provisioned on devices. For
more information, see “Junos Space Audit Logs
Administration Add network nodes, back up your database,

manage licenses and applications, or
troubleshoot. For more information, see “Junos
Space Administrators Overview” on page 1051,
“Maintenance Mode Overview” on page 1063, and
other topics related to the Administration
workspace.
Related • Viewing the Junos Space Platform Dashboard on page 121

Documentation
Viewing the Junos Space Platform Dashboard
When you log in to Junos Space Network Management Platform, the home page is
displayed. By default, the home page for Junos Space Platform is the Dashboard page.
However, if you previously configured a different page as the home page, then the
configured home page is displayed when you log in.
The Junos Space Platform dashboard, as shown in Figure 37, displays graphs that provide
information about the overall system condition, the fabric load history, the active users
history, and the percentage of jobs in different states. The charts are visible to all users
and are updated in real time.
NOTE: If you do not have user privileges to view detailed data, you might not
be able to view detailed information if you select a gadget.

Figure 44: Junos Space Platform Dashboard Page
To access the Junos Space Dashboard page:
1. On the Junos Space Platform UI, select Dashboard.
The Dashboard page is displayed.
2. (Optional) To view more information related to the overall system condition, click
Overall System Condition or the indicator needle.
You are taken to the Fabric page, where you can view detailed information about the
nodes in the fabric. For more information, see “Viewing Nodes in the Fabric” on page 1092.
3. (Optional) To view information related to the fabric load, on the Fabric Load History
graph:
• Mouse over a graph data point to view the average CPU usage percentage.
• Click the blue line depicting the CPU usage to view detailed information.
You are taken to the Fabric page, where you can view detailed information about
the CPU, memory, and disk usage for the nodes in the fabric.
4. (Optional) To view information related to the active users, on the Active Users History
graph:
• Mouse over a graph data point to view the total number of active users at that point.

Chapter 6: Introduction
• Click a data point on the graph to view more information about the active users at
that point.
You are taken to the User Accounts page, where the active users are displayed. For
more information, see “Viewing User Statistics” on page 994.
5. (Optional) To view information related to the jobs, on the Job Information graph:
• Mouse over a segment in the pie chart to view the percentage of jobs with a particular
status; for example, cancelled jobs, successful jobs, or failed jobs.
• Click a segment of the pie chart to view details of jobs with status corresponding
to the segment.
You are taken to the Job Management page, where the jobs filtered by the status
are displayed. For more information, see “Viewing Jobs” on page 908.
6. (Optional) You can move any chart displayed on the Dashboard page by clicking
inside the title bar and dragging the chart.
7. (Optional) You can resize any chart displayed on the Dashboard page by hovering
over an edge and clicking and dragging the edge.
Related • Junos Space Platform Workspaces Overview on page 171

Documentation
• Overall System Condition and Fabric Load History Overview on page 1069


PART 2
Devices
• Device Management on page 179
• Systems of Record on page 195
• Device Discovery Profiles on page 201
• Modeling Devices on page 223
• Device Authentication in Junos Space on page 255
• Viewing Device Inventory on page 273
• Exporting Device Inventory on page 285
• Configuring Juniper Networks Devices on page 295
• Device Adapter on page 339
• Device Configuration Management on page 343
• Adding and Managing Non Juniper Networks Devices on page 353
• Accessing Devices on page 357
• Logical Systems (LSYS) on page 381
• Device Partitions on page 387
• Custom Labels on page 391
• Verifying Template, Image Deployment, Script Execution, and Staged Images on
Devices on page 399
• Device Monitoring on page 405
• Device Maintenance on page 411


CHAPTER 7
Device Management
• Device Management Overview on page 179

• Confirmed-commit from Junos Space Network Management Platform on page 181
• Viewing Managed Devices on page 183
• Juniper Networks Devices Supported by Junos Space Network Management
Platform on page 187
• Uploading Device Tags by Using a CSV File on page 192
• Filtering Devices by CSV on page 194
Device Management Overview
The Devices workspace in Junos Space Network Management Platform simplifies the
management of devices in your network. You use the device discovery profile or model
device workflows to add multiple devices to the Junos Space Platform database. Then
you can perform the following tasks to manage, configure, and monitor the devices from
the Devices workspace:
• View the connection status and managed status of the managed devices.
• View the operational and administrative status of the physical interfaces of the devices.
• View the hardware inventory of a selected device, such as information about power
supplies, chassis cards, fans, Flexible PIC Concentrators (FPCs), and available PIC
slots.
• Change the mode to authenticate the devices.
• View, modify, and deploy the configuration to the devices. For example, deploy a service
order to activate a service on your managed devices.
• Execute scripts on and apply CLI Configlets to the devices.
• View information about the scripts associated with or executed on the devices and
the device images staged on the devices.
• Access the devices from the Junos Space user interface and execute commands on
the devices.
• If the network is the system of record, resynchronize a managed device with the Junos
Space Network Management Platform database so that both the device and the

database contain the same device configuration. (If Junos Space Network Management
Platform is the system of record, this capability is not available.)
• View statistics about the managed devices in your network, including the number of
devices by platform and the number of devices by Junos OS release.
• Clone the devices.
• Reboot the devices.
• Monitor and troubleshoot problems on the devices.
This topic describes the following:
• Managed and Unmanaged Devices on page 180

• IPv4 and IPv6 Address Support on page 180
Managed and Unmanaged Devices

With Junos Space Platform, you can add the following types of devices to the Junos
Space Platform database:
• Managed devices–Managed devices are Juniper Networks devices running Junos OS.
For more information about Juniper Networks devices supported on Junos Space
Platform, refer to “Juniper Networks Devices Supported by Junos Space Network
Management Platform” on page 187.
Juniper Networks devices, such as MX480 and MX960 routers running as aggregation
devices, display the number of satellite devices to which the aggregation device is
connected and the mode of the aggregation device (that is, single-home or multihome).
For more information about inventory and interfaces, see “Device Inventory Overview”
on page 273. For more information about aggregation devices, satellite devices, and
Junos Fusion technology, refer to the Junos Fusion documentation.
• Unmanaged devices–Unmanaged devices are non-Juniper Networks devices. Junos

Space Platform displays the IP addresses and hostnames of unmanaged devices. The
managed status of unmanaged devices is Unmanaged. The device status in several
columns is displayed as NA. For more information, refer to “Viewing Managed Devices”
on page 183. For information about adding unmanaged devices to Junos Space Network
Management Platform, see “Adding Unmanaged Devices” on page 353.
IPv4 and IPv6 Address Support

Junos Space Platform supports both IPv4 and IPv6 addresses for the following device
management tasks:
• Discovering devices
• Adding unmanaged devices
• Creating connection profiles and modeling devices
• Connecting to devices through Secure Console
• Uploading RSA keys to devices

Chapter 7: Device Management
NOTE: The IP addresses that you input for these tasks either manually or by
using a CSV file are validated on the basis of the format of the IP address.
Related • Device Discovery Profiles Overview on page 201

Documentation
• Device Inventory Overview on page 273
• Systems of Record in Junos Space Overview on page 195
• DMI Schema Management Overview on page 1403
• Understanding How Junos Space Automatically Resynchronizes Managed Devices on

page 197
• Junos Space IPv6 Support Overview on page 1062
Confirmed-commit from Junos Space Network Management Platform
Junos Space Network Management Platform supports the Junos OS confirmed-commit

functionality. By default, Junos Space Platform uses confirmed-commit for all commit
operations on all devices that are discovered on Junos Space Platform and that support
the confirmed-commit NETCONF capability. The default timeout value for the
confirmed-commit operations issued by Junos Space Platform is 10 minutes. You can
override this default value by setting a custom timeout value in the candidate configuration
with the setConfirmedCommitTimeout API. Junos Space Platform sends a remote
procedure call (RPC) for confirmed-commit immediately after sending the RPC for a
commit. The devices stay connected even if the commit operation contains an incorrect
configuration edit that may disconnect the device from Junos Space Platform. An EJB
callback method is used to verify the change in configuration on the device.
A candidate configuration created using the Schema-based Configuration Editor and

Configuration Guides support the confirmed-commit functionality. If you are deploying
the configuration by using a template, you need to publish these templates to the
candidate configuration of the device. When you push the configuration to the devices
by using the Schema-based Configuration Editor, templates, or the Configuration Guide,
the job triggered for these tasks display the timeout value of confirmed-commit. Job
details include the time taken for the EJB callback method to return a value and the time
taken to confirm the commit operation or perform a rollback operation.
Table 17 lists the managed status of the device in NSOR and SSOR modes when a
candidate configuration is deployed to a device that supports the confirmed-commit
NETCONF capability. It also lists the status of the job details when the confirmed-commit
operation is a success or failure in these modes.

Table 17: Managed Status in NSOR and SSOR Modes for confirmed-commit
Confirmed-commit and EJB Callback Job Result and
Method Success and Failure Conditions NSOR Mode SSOR Mode Details
Junos Space Platform issues a In Sync Space Changed NA

confirmed-commit operation with a timeout
value.
An EJB callback is sent to the device to verify NA NA NA

the change in configuration on the device.
The EJB callback method does not return any In Sync Space Changed Failed
value within the confirmed-commit timeout
interval.
The EJB callback method returns True and Out Of Sync followed by In Sync or Space Changed (if Success
the commit is confirmed. resynchronization by Junos new changes are added to the
Space Platform candidate configuration)
The EJB callback method returns False and Out Of Sync followed by Space Changed Failure with the
the configuration is rolled back. resynchronization by Junos failed callback
Space Platform error
The EJB callback method returns False and Out Of Sync followed by Space Changed, Device Failure with
the device is automatically rolled back to the resynchronization by Junos Changed (after Junos Space auto-rollback
currently active configuration. Space Platform Platform receives the system details
log about the auto-rollback
operation on the device)
NOTE: In SSOR mode, if a confirmed-commit is not successful and if the

device is automatically rolled back, you need to manually accept the change
by using the Resolve Out-of-band Changes workflow to change the managed
status of the device to In Sync.
NOTE: If a device is disconnected from Junos Space Platform (that is,

Connection Status is down) after Junos Space Platform issues a
confirmed-commit and is automatically rolled back before connecting back
to Junos Space Platform, you need to manually check the device configuration
from the CLI to confirm that the commit operation was successful.
Related • Viewing the Configuration Change Log on page 348

Documentation
• Reviewing and Deploying the Device Configuration on page 300

Viewing Managed Devices
You can view details of all managed devices in your network, such as the operating
system, platform, IP address, license, and connection status. Device information is
displayed in a table. Unmanaged devices are also shown, but without status and some
other information.
You can also view devices that are in the managed status from the Network Monitoring
workspace, through the Node List (see “Viewing the Node List” on page 753). If the network
is the system of record, you can resynchronize your managed devices with the Junos
Space Platform database (see “Resynchronizing Managed Devices with the Network”
on page 413).
Neither manual nor automatic resynchronization occurs when Junos Space Network
Management Platform is the system of record. See “Systems of Record in Junos Space
To view configuration and runtime information of managed devices:
1. On the Network Management Platform UI, select Devices > Device Management.
The Device Management page is displayed.
Figure 45 shows the Device Management page.
Figure 45: Device Management Page
Table 18 describes the fields displayed on the inventory page. In the table, an asterisk
against a field name indicates that the field is not shown by default.

Table 18: Fields in the Device Management Table

Field Description
Name Name of the device as stored in the Junos Space Platform database
Device Alias Value of the Device Alias custom label for the device. By default, this field is not displayed on
the page. (This field is empty if the Device Alias custom label is not added or no value is assigned
to the Device Alias custom label for the device.)
IP Address IPv4 or IPv6 address of the device
Serial Number Serial number of the device chassis (This field displays Unknown for an unmanaged device.)
Connection Status Connection status of the device in Junos Space Platform. Different values are displayed in
network as system of record (NSOR) and Junos Space as system of record (SSOR) modes.
• up—The device is connected to Junos Space Platform.

When the connection status is up, in NSOR mode, the managed status is Out Of Sync,
Synchronizing, In Sync, or Sync Failed.
In SSOR mode, the status is In Sync, Device Changed, Space Changed, Both Changed, or
Unknown (which usually means connecting).
• down—The device is not connected to Junos Space Platform.
When the Connection status is down, the managed status is None or Connecting.
• NA—The device is unmanaged.
Managed Status Current status of the managed device in Junos Space Platform:
• Connecting—Junos Space Platform has sent a connection remote procedure call (RPC) and
is waiting for the first connection from the device.
• In Sync—The synchronization operation has completed successfully; Junos Space Platform
and the device are synchronized with each other.
• None—The device is discovered, but Junos Space Platform has not yet sent a connection
RPC.
• Out Of Sync—In NSOR mode, the device has connected to Junos Space Platform, but the
synchronization operation has not been initiated, or an out-of-band configuration change
on the device was detected and auto-resynchronization is disabled or has not yet started.
• Device Changed—In SSOR mode, there are changes made to the device configuration from
the device CLI.
• Space Changed—In SSOR mode, there are changes made to the device configuration from
Junos Space Platform.
• Space & Device Changed—In SSOR mode, there are changes made to the device configuration
from the device CLI and Junos Space Platform. Neither automatic nor manual
resynchronization is available.
• Synchronizing—The synchronization operation has started as a result of device discovery, a
manual resynchronization operation, or an automatic resynchronization operation.
• Sync Failed—The synchronization operation failed.
• Unmanaged—The device is unmanaged.
• Modeled—The device is modeled.
• Waiting for deployment—The modeled device is unreachable and needs to be activated.
Platform Model number of the device (For an unmanaged device, the platform details are discovered
through SNMP. If the platform details cannot be discovered, the field displays Unknown.)

Table 18: Fields in the Device Management Table (continued)

Field Description
OS Version Operating system firmware version running on the device (This field displays Unknown for an
unmanaged device.)
Schema Version DMI schema version that Junos Space Platform uses for this device (This field displays Unknown
for an unmanaged device.) See “DMI Schema Management Overview” on page 1403.
Physical Interfaces Link to the view of physical interfaces for the device (The field displays NA for an unmanaged
device.)
Logical Interfaces Link to the view of logical interfaces for the device (The field displays NA for an unmanaged
device.)
Device Family Device family of the selected device (For an unmanaged device, this is the same as the vendor
name you provided. The field displays Unknown if no vendor name was provided and if SNMP
is not used or has failed.)
Configuration State Current state of the device configuration:
• NA – No change is made to the configuration. This is the default state.

• Created – A change is made to the device configuration from Junos Space Platform.
• Approved – The device configuration is approved.
• Rejected – The device configuration is rejected.
Last Rebooted Time Date and time when the device was last rebooted manually (that is, the device status changes
from Down to Up) or from Junos Space Platform
Vendor Name of the device vendor (For an unmanaged device, the field displays Unknown if the vendor
name was not provided and cannot be discovered through SNMP.)
Authentication Status • Key Based—The authentication key was successfully uploaded.

• Credential Based—A key upload was not attempted; log in to this device with your credentials.
• Key Based - Unverified—The new fingerprint on the device is not updated in the Junos Space
Platform database.
• Key Conflict - Unverified—The key upload was unsuccessful; the new fingerprint on the device
is not updated in the Junos Space Platform database.
• Credentials Based - Unverified—The new fingerprint on the device is not updated in the Junos
Space Platform database.
• Key Conflict—The device was not available; the key upload was unsuccessful.
• Fingerprint Conflict—The fingerprint stored in the Junos Space Platform database differs
from the fingerprint on the device.
• NA—The device is unmanaged.
Aggregation Device Mode of the aggregation device: single-home or multihome
Satellite Devices(Number) Number of satellite devices connected to the aggregation device

Table 18: Fields in the Device Management Table (continued)

Field Description
Connection Type • Reachable Device initiated—This is a device-initiated connection from an internal device
(without a NAT server to route the connection) and the device is reachable.
• Reachable Device initiated–External—This is a device-initiated connection from an external
device (NAT server routes the connection) and the device is reachable.
• Junos Space initiated—This is a connection initiated by Junos Space to an internal device
(without a NAT server to route the connection).
• Junos Space initiated–External—This is a connection initiated by Junos Space to an external
device (NAT server routes the connection) and the device is reachable.
• Modeled—This is a device-initiated connection and the device is unreachable.
Device Network Whether the device is connected to Junos Space Platform through a NAT server
• Internal—The device is connected to Junos Space Platform directly—that is, without a NAT
server
• External—The NAT server routes the connection to Junos Space Platfom
2. (Optional) Sort the table by mousing over the column head for the data that you want
to sort and clicking the down arrow. Select Sort Ascending or Sort Descending.
3. (Optional) Show columns not in the default tabular view, or hide columns, as follows:
a. Mouse over any column head and click the down arrow.
b. Select Columns from the menu.
c. Select the check boxes against the columns that you want to view. Clear the check
boxes against the columns that you want to hide.
4. (Optional) View information about devices as follows:
• To restrict the display of devices, enter search criteria of one or more characters in
the Search field and press Enter.
All devices that match the search criteria are shown in the main display area.
• To view hardware inventory for a device, select the row against the device and select
Device Inventory > View Physical Inventory from the Actions menu. Alternatively,
right-click the device name and select Device Inventory > View Physical Inventory.
• To view the physical or logical interfaces of a device, click the View link in the
appropriate column and row for the device.
To view the physical or logical interfaces of more than one device, select the required
devices, right-click and select Device Inventory > View Logical Interfaces.
The View Logical Interfaces page displays the list of logical interfaces of the selected
devices.

16.1R1 Reachable Device initiated–External—This is a device-initiated connection

from an external device (NAT server routes the connection) and the device is
reachable.
16.1R1 Junos Space initiated–External—This is a connection initiated by Junos Space

to an external device (NAT server routes the connection) and the device is
reachable.
Related • Viewing the Physical Inventory on page 275

Documentation
• Exporting the License Inventory on page 285
• Viewing Physical Interfaces of Devices on page 280
• Device Discovery Profiles Overview on page 201
• Viewing the Node List on page 753
• Resynchronizing Nodes in Network Monitoring on page 756
Juniper Networks Devices Supported by Junos Space Network Management Platform
Table 19 lists all the Juniper Networks product series and devices supported by Junos
Space Network Management Platform. The Junos Space Platform release notes lists
only the new devices that are supported with that release.
Table 19: Devices Supported by Junos Space Platform

Product Series Devices
ACX Series ACX500
ACX1000
ACX1100
ACX2000
ACX2100
ACX2200
ACX4000
ACX5000
ACX5048
ACX5096
BX Series BX7000

Table 19: Devices Supported by Junos Space Platform (continued)

EX Series EX2200
EX2300
EX3200
EX3300
EX3400
EX4200
EX4200-Copper
EX4300
EX4500
EX4550
EX4550-40G
EX4600
EX6200
EX6210
EX8208
EX8216
EX9200
EX9204
EX9208
EX9214
Junos Fusion Data Center
Junos Fusion Enterprise
EX Virtual Chassis EX3300-VC
EX4200-VC
EX4300-VC
EX4500-VC
EX4550-VC
MIXED-MODE-EX-VC
EX-XRE


Firefly vSRX Firefly
J Series J2320
J2350
J4350
J6350
Junos Fusion Junos Fusion Data Center
Junos Fusion Edge
Junos Fusion Enterprise
LN Series LN1000
LN2600
M Series M7i
M10i
M40e
M120
M320
MCG Series MCG5000
MX Series MX5
MX10
MX80
MX104
MX240
MX480
MX960
MX2008
MX2010
MX2020
MX Series Virtual Chassis MX-VC


PTX Series PTX1000
PTX3000
PTX5000
QFX Series QFX3000
QFX3000-G
QFX3000-M
QFX3500
QFX3600
QFX5100
QFX5110-32Q
QFX5110-48S
QFX5100-96S
QFX5200
QFX5200-32C-R
QFX10002-36Q
QFX10002-36Q-DC
QFX10002-72Q
QFX10002-72Q-DC
QFX10008
QFX10016
QFX Series Virtual Chassis QFX-VC


SRX Series SRX100
SRX110H-VB
SRX210
SRX220
SRX240
SRX300
SRX320
SRX320-PoE
SRX340
SRX345
SRX550
SRX550-M
SRX650
SRX1400
SRX1500
SRX3400
SRX3600
SRX4100
SRX4200
SRX4600
SRX5000
SRX5400
SRX5600
SRX5800
X45-Major 3 - SW
X44-D10-Minor-SW


T Series T320
T640
T1600
T4000
TX Matrix
TX Matrix Plus
TXP-3D
Virtual MX Series vMX
Virtual route reflector (VRR) VRR
WLC Series WLC device
Related • Device Management Overview on page 179

Documentation
• Junos OS Releases Supported in Junos Space Network Management Platform on

page 307
Uploading Device Tags by Using a CSV File
Device tags help you easily identify managed devices when deploying a device template,
upgrading a device image, staging scripts, or applying CLI Configlets to devices. Device
tags associate the IP address or hostname of a managed device with a tag.
Starting with Junos Space Network Management Platform Release 15.2R1, you can upload
device tags from the local computer to Junos Space Network Management Platform.
You use the Devices workspace to upload device tags by using a CSV file. You can assign
the tags created using this task to other Junos Space objects. For more information, refer
to “Tagging an Object” on page 1394.

NOTE: You must create a CSV file with the correct IP address or hostname
of a device, tag name, and tag type, which could be private or public. If you
do not specify whether the tag is private or public, by default a public tag is
created.
Tag names must not exceed 255 characters. Tag names must not start with
a space, and cannot contain a comma, double quotation marks, and
parentheses. Also, you cannot name a tag “Untagged” because it is a reserved
term.
Entries pertaining to incorrect IP addresses or hostnames are not uploaded

to Junos Space Platform. You can view incorrect entries in the job results.
To upload device tags by using a CSV file:
1. On the Junos Space Network Management Platform user interface, select Devices >
Device Management.
The Device Management page that appears displays all devices managed by Junos
Space Platform.
2. Click the Tag Devices by CSV icon.
The Upload Tags CSV File pop-up window is displayed.
3. (Optional) To view a sample CSV file, click the Sample CSV hyperlink.
4. Click Browse to select the CSV file from the local computer.
5. Click Import.
The details of the devices and tags are uploaded to Junos Space Platform. A Job
Information dialog box is displayed.
a. Click OK.
You are redirected to the Device Management page.
To view job details:
a. Click the job ID in the Job Information dialog box.
You are redirected to the Job Management page with the filtered view of the job.
When the job is complete, all devices with correct details are assigned the tags you
uploaded through the CSV file. To view the tags, go to Administration > Tags.

15.2R1 Starting with Junos Space Network Management Platform Release 15.2R1,
you can upload device tags from the local computer to Junos Space Network
Management Platform.
Related • Tags Overview on page 1376

Documentation
• Deleting Tags on page 1392
• Exporting Tags from Junos Space Network Management Platform on page 1400
Filtering Devices by CSV
You can filter the devices on the Device Management page using a CSV file.
To filter devices using a CSV file:
1. On the Junos Space Network Management Platform user interface, select Devices
>Device Management.
The Device Management page is displayed.
2. Select Filter by CSV from the Actions menu.
The Select CSV File pop-up window is displayed.
3. (Optional) To view a sample CSV file, click the Sample CSV hyperlink.
4. Click Browse and select the CSV file from the local computer.
5. Click Import.
A progress bar is displayed. Junos Space Network Management Platform validates

the values you provided in the CSV file. If the validation fails, a pop-window is displayed.
This pop-up window displays the list of devices that were not validated.
If the CSV file is imported successfully, the Device Management page is filtered and
lists only those devices whose host names were listed in the CSV file.
Related • Device Management Overview on page 179

Documentation
• Uploading Device Tags by Using a CSV File on page 192

CHAPTER 8
Systems of Record

• Understanding How Junos Space Automatically Resynchronizes Managed
Devices on page 197
Systems of Record in Junos Space Overview
Although by default the Junos Space network you are administering is the system of
record (SOR)—each device defines its own official state—you may prefer to have the
Junos Space Network Management Platform database contain the official state of the
network, enabling you to restore that official state if unwanted out-of-band changes are
made to a device. This feature enables you to designate Junos Space Network
Management Platform as the SOR if you prefer.
• Systems of Record on page 195

• Implications on device management on page 196
Systems of Record
A network managed by Junos Space Network Management Platform contains two
repositories of information about the devices in the network: the devices themselves
(each device defines and reports its official state) and the Junos Space Network
Management Platform database (which contains information that is reported by the
device during device discovery). One of these repositories must have precedence over
the other as the accepted desirable state. By default, the network itself is the system of
record (NSOR).
In NSOR, when a local user commits a change in the configuration of a network device,
the commit operation triggers a report via system log to Junos Space Network
Management Platform. The values in the Junos Space Network Management Platform
database are automatically changed to match the new device values, and the timestamps
are synchronized. Thus the devices control the contents of the database.
As of version 12.2, you can designate the Junos Space Network Management Platform
database values as having precedence over any values configured locally at a device. In
this scenario, Junos Space Network Management Platform (database) is the system of
record (SSOR). It contains the configurations that the Junos Space administrator considers
best for the network devices. If an out-of-band commit operation is executed on a network
device, Junos Space Network Management Platform receives a system log message, but

the values in the Junos Space Network Management Platform database are not
automatically changed or synchronized. Instead, the administrator can choose whether
or not to overwrite the device's local changes by pushing the accepted configuration to
the device from the Junos Space Network Management Platform database.
The choice of pushing the Junos Space Network Management Platform configuration is
left to the administrator because the local device changes may, for example, be part of
a temporary test that the administrator would not want to interrupt. However, if the
tester forgets to reset the configuration at the end of the test, the administrator might
then push the SSOR configuration to the device.
Implications on device management

The basic difference between NSOR and SSOR lies in whether or not the Junos Space
Network Management Platform database is automatically synchronized when changes
are made to a network device, and which set of values has precedence.
Setting the Junos Space Network Management Platform database as the system of
record does not protect your network from local changes. The device notifies Junos Space
Network Management Platform via system log when the changes occur, and it does not
resynchronize, so you still have the previous configuration and you can reset the remote
device quickly if you need to do so. In an NSOR scenario, Junos Space Network
Management Platform is also notified via system log. You can still push a more desirable
configuration to the device, but this process is less efficient.
In the NSOR scenario, you can disable automatic resynchronization. When

autoresynchronozation is turned off, the server continues to receive notifications and
goes into the out-of-sync state; however, autoresynchronozation does not run on the
device. You can manually resynchronize a device in such a case.
NSOR with automatic resynchronization disabled is not equivalent to SSOR: manually

resynchronizing under NSOR updates the values in the Junos Space Network Management
Platform database to reflect those on the device. This never happens under SSOR, where
the Junos Space Network Management Platform database values have precedence over
the device values, and synchronizing them involves pushing the database values to the
device, effectively resetting the device’s out-of-band changes.
Related • Understanding How Junos Space Automatically Resynchronizes Managed Devices on

Documentation page 197

Chapter 8: Systems of Record
Understanding How Junos Space Automatically Resynchronizes Managed Devices
When configuration changes are made on a physical device that Junos Space Network
Management Platform manages, Junos Space Platform reacts differently depending on
whether the network itself is the system of record (NSOR) or Junos Space Platform is
the system of record (SSOR).
In the NSOR case, Junos Space Platform receives a system log message from the modified
device and automatically resynchronizes the configuration values in its database with
those of the device. This ensures that the device inventory information in the Junos Space
Platform database matches the current configuration information on the device.
In the SSOR case, the Junos Space Platform receives a system log message from the
modified device. The Managed Status of that device changes from In Sync to Device
Changed (if the changes are made from the device CLI), Space Changed (if the changes
are made from Junos Space Platform), or Space & Device Changed (if the changes are
made both from the device CLI and Junos Space Platform), but no resynchronization
occurs. The Junos Space Platform administrator can choose whether or not to reset the
device’s configuration to match the configuration values in the Junos Space Platform
database.
This topic covers:
• Network as System of Record on page 197

• Junos Space as System of Record on page 199
Network as System of Record

After Junos Space Platform discovers and imports a device, if the network is the system
of record, Junos Space Platform enables the auto-resynchronization feature on the device
by initiating a commit operation.
After auto-resynchronization is enabled, any configuration changes made on the device,

including out-of-band CLI commits and change-request updates, automatically trigger
resynchronization on the device. Figure 46 shows how a commit operation resynchronizes
the configuration information in the Junos Space Platform database with that on the
device.

Figure 46: Resynchronization Process
When a commit operation is performed on a managed device in NSOR mode, Junos

Space Platform, by default, schedules a resynchronization job to run 20 seconds after
the commit operation is received. However, if Junos Space Platform receives another
commit notification within 20 seconds of the previous commit notification, no additional
resynchronization jobs are scheduled because Junos Space Platform resynchronizes
both commit operations in one job. This damping feature of automatic resynchronization
provides a window of time during which multiple commit operations can be executed
on the device, but only one or a few resynchronization jobs are required to resynchronize
the Junos Space Platform database with the multiple configuration changes executed
on the device.
You can change the default value of 20 seconds to any other duration by specifying the
value in seconds in the Administration > Applications > Network Management Platform >
Modify Application Settings > Device > Max auto resync waiting time secs field. For example,
if you set the value of this field to 120 seconds, then Junos Space Platform automatically
schedules a resynchronization job to run 120 seconds after the first commit operation is
received. If Junos Space Platform receives any other commit notification within these
120 seconds, it resynchronizes both commit operations in one job.
For information about setting the damper interval to change the resynchronization time
delay and information about disabling the auto-resynchronization feature, see “Modifying
Settings of Junos Space Applications” on page 1221.
When Junos Space Platform receives the device commit notification, the Managed Status
is Out of Sync. When the resynchronization job begins on the device, the Managed Status
of the device changes to Synchronizing and then In Sync after the resynchronization job

Chapter 8: Systems of Record
has completed, unless a pending device commit operation causes the device to display
Out of Sync while it was synchronizing.
When a resynchronization job is scheduled to run but another resynchronization job on

the same device is in progress, Junos Space Platform delays the scheduled
resynchronization job. The time delay is determined by the damper interval that you can
set from the Application workspace. By default, the time delay is 20 seconds. The
scheduled job is delayed as long as the other resynchronization job to the same device
is in progress. When the currently running job finishes, the scheduled resynchronization
job starts.
You can disable the auto-resynchronization feature in the Administration workspace.

When auto-resynchronization is turned off, the server continues to receive notifications
and goes into the Out of Sync state; however, the auto-resynchronization feature does
not run on the device. To resynchronize a device when the auto-resynchronization feature
is disabled, use the Resynchronize with Network workflow. The auto-resynchronization
jobs are not displayed on the Job Management page. These jobs run in the background
and cannot be canceled from the Junos Space user interface. You can view the status
of the auto-resynchronization job in the Managed Status column on the Device
Management page or from the Device Count by Synchronization State widget on the
Devices page. You can collect more information about these jobs from the server.log and
autoresync.log files in the /var/log/jboss/servers/server1 directory.
NOTE: You can view the auto-resynchronization jobs that were scheduled
to execute before upgrading to Junos Space Platform Release 15.1R1, from
the Job Management page.
Junos Space as System of Record

If Junos Space Platform is the system of record, automatic resynchronization of the
configuration information between the Junos Space Platform database and the managed
device does not occur. When Junos Space Platform receives a system log message from
the modified device, the Managed Status of the device goes from In Sync to Device
Changed (if the changes are made from the device CLI), Space Changed (if the changes
are made from Junos Space Platform), or Space & Device Changed (if the changes are
made both from the device CLI and Junos Space Platform) and remains so unless you
manually push the system of record configuration from the Junos Space Platform
database to the device.
Related • Systems of Record in Junos Space Overview on page 195

Documentation
• Resynchronizing Managed Devices with the Network on page 413


CHAPTER 9
Device Discovery Profiles

• Creating a Device Discovery Profile on page 204
• Running Device Discovery Profiles on page 215
• Modifying a Device Discovery Profile on page 216
• Cloning a Device Discovery Profile on page 217
• Viewing a Device Discovery Profile on page 219
• Deleting Device Discovery Profiles on page 220
• Exporting the Device Discovery Details As a CSV File on page 220
Device Discovery Profiles Overview
You use the device discovery profile to add devices to Junos Space Network Management
Platform from the Devices workspace. Discovery is the process of finding a device and
then synchronizing the device inventory and configuration with the Junos Space Network
Management Platform database. To use device discovery, you must be able to connect
Junos Space Network Management Platform to the device.
A device discovery profile contains preferences used to discover devices, such as discovery
targets, probes used to discover devices, mode and details for authentication, SSH
fingerprints of devices, and the schedule to use this discovery profile. You can start the
discovery process using a discovery profile in the following ways: scheduling a discovery
after creating a discovery profile, or selecting a discovery profile and clicking Run Now.
Executing or running a discovery profile discovers, authenticates, and manages the device
on Junos Space Network Management Platform. With appropriate privileges for
discovering devices, you can create multiple discovery profiles with different combinations
of targets, probes, and authentication modes on your Junos Space setup. You can clone,
modify, and delete the device discovery profiles from Junos Space Network Management
Platform. You can also choose whether to share device discovery profiles with other
users with device discovery permissions.
To discover network devices using a device discovery profile, Junos Space Network
Management Platform uses the SSH, ICMP Ping, and SNMP protocols. When the device
is discovered, device authentication is handled through the administrator login SSH v2
credentials and SNMP v1, SNMP v2c, or SNMP v3 settings, keys generated from Junos

Space Network Management Platform (RSA, DSS, or ECDSA keys), or custom keys. You
can optionally enter the SSH fingerprint for each device and let Junos Space Network
Management Platform save the fingerprint in the database during the discovery process
and validate the fingerprint when the device connects to Junos Space Network
Management Platform. Fingerprint validation is available only for SSH-enabled Juniper
Networks devices and not for ww Junos OS devices and modeled devices. For more
information about device authentication in Junos Space, see “Device Authentication in
Junos Space Overview” on page 255.
For device targets, you can specify a single IP address, a DNS hostname, an IP range, or
an IP subnet to discover devices on a network. When a device discovery profile is executed
or run (either instantly or based on a schedule), Junos Space Network Management
Platform connects to the physical device and retrieves the running configuration and the
status information of the device. To connect with and configure devices, Junos Space
Network Management Platform uses the Device Management Interface (DMI) of Juniper
Networks devices, which is an extension of the NETCONF network configuration protocol.
• Connections Initiated by Junos Space or the Device on page 202

• Device Information Fetched During Device Discovery on page 203
Connections Initiated by Junos Space or the Device

When a device is discovered , Junos Space Network Management Platform creates an
object in the Junos Space Network Management Platform database to represent the
physical device and maintains a connection between the object and the physical device
so that their information is linked.
Junos Space can manage devices in either of the following ways:
• Junos Space initiates and maintains a connection to the device.
• The device initiates and maintains a connection to Junos Space.
By default, Junos Space manages devices by initiating and maintaining a connection to

the device. When Junos Space initiates the connection to the device, you can discover
and manage devices irrespective of whether the management system is behind a Network
Address Translation (NAT) server. For ww Junos OS devices, Junos Space uses SSH with
an adapter to manage the devices.
If a device-initiated connection to Junos Space is enabled, the DMI channel and port
7804 are used and the following (sample) configuration is added on the device to
establish the connection to Junos Space:
set system services outbound-ssh client 00111DOCEFAC device-id 7CE5FE

set system services outbound-ssh client 00111DOCEFAC secret “$ABC123”
set system services outbound-ssh client 00111DOCEFAC services netconf
set system services outbound-ssh client 00111DOCEFAC 172.22.199.10 port 7804
To discover and manage devices through a device-initiated connection, clear the Junos
Space initiated connection to device check box on the Modify Application Settings page
in the Administration workspace. For information about configuring connections initiated
by Junos Space by a device, see “Modifying Junos Space Network Management Platform
Settings” on page 1222.

Chapter 9: Device Discovery Profiles
You can configure a NAT server to route connections between the Junos Space setup
and managed devices. Both device-initiated connections to a Junos Space setup and
connections initiated by Junos Space to managed devices, when the Junos Space setup
is behind the NAT server, are supported on Junos Space Network Management Platform.
If a NAT server is used, the managed devices connect to Junos Space Network
Management Platform through the IP address of Junos Space Network Management
Platform translated by NAT. For more information about using a NAT server on a Junos
Space setup, see “NAT Configuration for Junos Space Network Management Platform
When configuration changes are made in Junos Space Network Management

Platform—for example, when you deploy service orders to activate a service on your
network devices—the configuration is pushed to the physical device.
If the network is the system of record (NSOR), when configuration changes are made on
the physical device (out-of-band CLI commits and change-request updates), Junos
Space Network Management Platform automatically resynchronizes with the device so
that the device inventory information in the Junos Space Network Management Platform
database matches the current device inventory and configuration information. If Junos
Space Network Management Platform is the system of record (SSOR), this
resynchronization does not occur and the database is unchanged.
Device Information Fetched During Device Discovery

The following device inventory and configuration data are captured and stored in relational
tables in the Junos Space Network Management Platform database:
• Devices—Hostname, IP address, credentials
• Physical Inventory—Chassis, FPM board, power entry module (PEM), Routing Engine,
Control Board (CB), Flexible PIC Concentrator (FPC), CPU, PIC, transceiver, fan tray
Junos Space Network Management Platform displays the model number, part number,
serial number, and description for each inventory component, when applicable.
• Logical Inventory—Subinterfaces, encapsulation (link-level), type, speed, maximum

transmission unit (MTU), VLAN ID
• License information:
• License usage summary—License feature name, feature description, licensed count,

used count, given count, needed count
• Licensed feature information—Original time allowed, time remaining
• License SKU information—Start date, end date, and time remaining
• Loopback interface
Other device configuration data is stored in the Junos Space Network Management
Platform database as binary large objects and is available only to northbound interface
(NBI) users.

16.1R1 You use the device discovery profile to add devices to Junos Space Network
Management Platform from the Devices workspace.
Related • Creating a Device Discovery Profile on page 204

Documentation
• Running Device Discovery Profiles on page 215
• Cloning a Device Discovery Profile on page 217
• Viewing a Device Discovery Profile on page 219
• Understanding How Junos Space Automatically Resynchronizes Managed Devices on

page 197
• Resynchronizing Managed Devices with the Network on page 413
• Device Management Overview on page 179
• DMI Schema Management Overview on page 1403
Creating a Device Discovery Profile
You create a device discovery profile to create a set of preferences for device targets,
probes, authentication mode and credentials, SSH fingerprints, and the schedule to
discover devices to Junos Space Network Management Platform. In addition to scheduling
the discovery, you can manually start the discovery process by running the device discovery
profile. For more information, see “Running Device Discovery Profiles” on page 215.
NOTE: To discover a device with dual Routing Engines, always specify the
IP address of the current primary Routing Engine. When the current primary
IP address is specified, Junos Space Network Management Platform manages
the device and the redundancy. If the primary Routing Engine fails, the backup
Routing Engine takes over and Junos Space Network Management Platform
manages the transition automatically without bringing down the device.

NOTE: When you initiate discovery on a device running Junos OS, Junos Space
Network Management Platform automatically enables the NETCONF protocol
over SSH by pushing the following command to the device:
set system services netconf ssh
To create a device discovery profile, complete the following tasks:
1. Specifying Device Targets on page 205

2. Specifying Probes on page 208
3. Selecting the Authentication Method and Specifying Credentials on page 211
4. (Optional) Specifying SSH Fingerprints on page 212
5. Scheduling Device Discovery on page 213
Specifying Device Targets

Device targets are IP addresses or hostnames of devices that you want Junos Space
Network Management Platform to discover.
To specify the device targets that you want Junos Space Network Management Platform
to discover:
1. On the Junos Space Network Management Platform user interface, select Devices >
Device Discovery > Device Discovery Profiles.
The Discover Discovery Profiles page is displayed.
2. Click the Create Device Discovery Profile icon on the toolbar.
The Device Discovery Target page is displayed on the left. The list of different tasks
that should be completed to create a profile is displayed on the right: Device Discovery
Target, Specify Probes, Specify Credentials, Specify Device FingerPrint, and
Schedule/Recurrence.
NOTE: At any point in time, you can click the links to the different tasks
(on the right of the page) and navigate to those pages.
3. In the Discovery Profile Name field, enter the name of the device discovery profile.
The device discovery profile name cannot exceed 255 characters and can contain
letters, numbers, spaces, and special characters. The special characters allowed are
period (.), hyphen (-), and underscore (_). The device discovery profile name cannot
start with letters or numbers and cannot contain leading or trailing spaces.
NOTE: The Make Public check box is selected by default so that the device
discovery profile is visible to all users.

4. In the Discovery Parameters field, you can add devices manually by specifying the
details on the Device Discovery Target page or by uploading the details of the devices
through a CSV file.
To add devices manually:
a. Click the Add Manually option button.

b. In the Target Type area, select how you want to specify the targets: IP addresses
or hostnames, IP ranges, or a subnet.
• To enter the IP address or hostname of the device:
i. Select the IP Address/Hostname option button.
ii. In the Target Details field, enter the IP address or hostname.
NOTE: You can enter the IP address in either IPv4 or IPv6 format.
Refer to
http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml
for the list of restricted IPv4 addresses and
http://www.iana.org/assignments/ipv6-address-space/ipv6-address-space.xhtml
for the list of restricted IPv6 addresses.
NOTE: You can enter a combination of the following separated

by a comma (,):
• IP addresses
• Hostnames
• IP address range expressions
• Subnet expressions
For example, 192.168.27.1, example.abc.com,

192.168.27.50-192.168.27.60,192.168.26.0/24
• To enter a range of IP addresses for the devices:
i. Select the IP Range option button.
The maximum number of IP addresses for an IP range target is 1024.
ii. In the Start IP Address field, enter the first IP address.
iii. In the End IP Address field, enter the last IP address.

Язык

Добро пожаловать в Scribd!

software-guide-junos-space-platform.pdf

Загружено:

Сведения о документе

Дата загрузки

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Описание:

Авторское право:

Доступные форматы

software-guide-junos-space-platform.pdf

Загружено:

Описание:

Авторское право:

Доступные форматы

Похожие издания

Junos Space Network Management

Complete Software Guide

Copyright © 2017, Juniper Networks, Inc.

Junos Space Network Management Platform Complete Software Guide

YEAR 2000 NOTICE

END USER LICENSE AGREEMENT

ii Copyright © 2017, Juniper Networks, Inc.

Guide 1 Getting Started Guide

Copyright © 2017, Juniper Networks, Inc. iii

Chapter 3 Junos Space Network Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Guide 2 User Interface Guide

iv Copyright © 2017, Juniper Networks, Inc.

Understanding Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Guide 3 Workspaces Feature Guide

Copyright © 2017, Juniper Networks, Inc. v

vi Copyright © 2017, Juniper Networks, Inc.

Activating a Modeled or Cloned Device in Junos Space Network Management

Copyright © 2017, Juniper Networks, Inc. vii

Chapter 14 Configuring Juniper Networks Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

viii Copyright © 2017, Juniper Networks, Inc.

Chapter 18 Accessing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357

Copyright © 2017, Juniper Networks, Inc. ix

Chapter 24 Device Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411

Part 3 Device Templates

x Copyright © 2017, Juniper Networks, Inc.

Chapter 28 Configuring Devices using Quick Templates . . . . . . . . . . . . . . . . . . . . . . . . . 469

Part 4 CLI Configlets

Copyright © 2017, Juniper Networks, Inc. xi

Example 6: Deleting configuration from a physical interface . . . . . . . . . . . . . 521

Part 5 Images and Scripts

xii Copyright © 2017, Juniper Networks, Inc.

Chapter 36 Managing Device Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567

Copyright © 2017, Juniper Networks, Inc. xiii

Nesting Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 671

xiv Copyright © 2017, Juniper Networks, Inc.

Chapter 42 Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

Part 7 Network Monitoring

Copyright © 2017, Juniper Networks, Inc. xv

Viewing, Searching for, Sorting, and Filtering Events . . . . . . . . . . . . . . . . . . . 780

xvi Copyright © 2017, Juniper Networks, Inc.

Deleting Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Copyright © 2017, Juniper Networks, Inc. xvii

Generating a Data Collection Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 857

Part 8 Configuration Files

xviii Copyright © 2017, Juniper Networks, Inc.

Part 10 Role-Based Access Control

Copyright © 2017, Juniper Networks, Inc. xix

Chapter 61 Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 995

Part 11 Audit Logs

xx Copyright © 2017, Juniper Networks, Inc.

Copyright © 2017, Juniper Networks, Inc. xxi

Deleting a Node from the Junos Space Fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . 1148

xxii Copyright © 2017, Juniper Networks, Inc.

Managing Database Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

Copyright © 2017, Juniper Networks, Inc. xxiii

xxiv Copyright © 2017, Juniper Networks, Inc.

Uploading Your User Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1318

Copyright © 2017, Juniper Networks, Inc. xxv