This article describes how to return the configuration on a SRX or J Series device to the factory default version (configuration file that is shipped with the device).

For other topics about SRX, go to the SRX Getting Started main page.

How to reset the configuration to the factory default.

There are three ways to reset an SRX and J-Series device to its factory default configuration.

• Using the Reset Config Button (requires access to the front panel of the device)


• Using the load factory-default Command (requires login to the CLI)


• Using the Root Password Recovery Process (requires console access to the device)

Using the Reset Config Button

For instructions, refer to the following links:

Using the load factory-default Command

If you are still able to logon to the device via the CLI, you can use the load factory-default command to return the device to its factory default configuration. This command loads and commits the factory configuration; but this command does not delete other configuration files on the device.

For more information about this command, refer to the documentation on Changing from Router Context to Secure Context​
 

1. Type the load factory-default command:

   root@host# load factory-default

2. Use the set system root-authentication plain-text-password command to set a new root password for the device:

   root@host# set system root-authentication plain-text-password

3. Type the root password and retype it to confirm it:

   New password:
   Retype new password:

   
   
   Caution: Prior to committing the changes, if an IP address is not assigned for the 'ge-0/0/0' interface, create a local user account and type the routing information; either via the CLI configuration or DHCP. The SRX device will no longer be remotely accessible.
   
   To manage the SRX device, you must connect a PC or laptop to the physical console or attach the PC or laptop to a subnet that is directly connected to the ge-0/0/0 interface, which is assigned an IP address of '192.168.2.1'.

4. Use the commit and-quit command to commit the configuration and exit the configuration mode, if the configuration contains no errors and the commit is successful:

   root@host# commit and-quit

   
   After the commit, the factory default configuration will be the running configuration.

Using the Root Password Recovery Process

If you are unable to logon to the device, use the root password recovery process to reset the device to its factory default configuration. You must have console access to use the password recovery process.

• ​Recovering the Root Password for SRX Series Devices​
• For older releases(10.x) that does not disable watchdog automatically, See KB17565 - [SRX] Root password recovery not working with Junos versions 10.0R1 or later.

2017/11/06: Update documentation link and add links for new HW platforms. 
2019/06/18: Checked content for accuracy, updated links.