Junos outbound SSH service makes a SSH connection from network device to SSH server. What is the point of this? Does it allow the server to somehow make the SSH connection back to network device using this already established SSH connection?
In Junos, outbound-ssh
is used to allow the device to connect back to an external management platform via NETCONF over SSH, allowing remote management of devices that were behind NATs or jump-hosts.
If you use Juniper’s Sky Enterprise management solution (aka OneConfig), they use this method exclusively for device connectivity, configuration changes and even remote console.
outbound SSH service
feature? I guess it has something to do with some Juniper zero touch provisioning system. – Martin Sep 16 '19 at 14:46outbound-ssh
feature does that.. Juniper documentation says that:Once the connection is established, the management application initiates the SSH sequence as the client and the router or switch as the server that authenticates the client.
. However, I'm not sure how to understand this.. – Martin Sep 16 '19 at 15:38