[Sky Enterprise] ZTP with SRX3xx Shows "Configuration Failed" state

Summary:

A device is added in Sky Enterprise and is using the Zero Touch Provisioning (ZTP) template skyent-us-basic-srx+new_dhcp.xml. However, the ZTP state for the device shows as "Configuration Failed."

This article gives the probable cause for the failure and the solution to resolve the problem.

Symptoms:

A device is added in Sky Enterprise, and is using the ZTP template but the ZTP state for the device shows as "Configuration Failed."

The SRX3xx device is running Junos OS release 15.1X49-D170.

Cause:

When ZTP state shows "Configuration Failed," this usually means that there has been a commit failure, because Junos OS sees a conflict or an incompatibility issue with some configuration that the ZTP template is pushing. In this case, it was determined that there is incompatibility with using the command dhcp on Junos OS release 15.1X49-D170.

This is the portion of the configuration that ZTP was pushing down:

unit 0 {
    family inet {
        ##
        ## Warning: Incompatible with the dhcp-local-server configured under 'system services dhcp-local-server group
        ## Warning: Incompatible with 'system autoinstallation'
        ##
        dhcp;
    }

Solution:

To resolve this problem, simply change the ZTP template to use dhcp-client, instead of dhcp. Alternatively, you can use the ZTP template skyent-us-basic-srx.xml. You can use this ZTP template for all SRX devices that use the Junos OS release 15.1X49 code. If the devices are running Junos OS release 18.4 or later, use skyent-us-basic-srx+new_dhcp.xml instead.

Knowledge Base