Junos Space Developer
Highlighted
Junos Space Developer

Cannot add EX2300 switch

a month ago

I upgraded an EX2300 to the JTAC recommended firmware via Space.  After the upgrade, the switch worked fine, but never reconnected to Space.  I deleted the device and tried to rediscover it.  The discovery failed with the error: "Fingerprint mismatch.  Host key verification failed."

 

I know this is likely because the new firmware generated a new SHA key for the switch, but I don't know how to clear the existing keys on Space.  I looked at this article talking about similar issues with an SRX, but it didn't help.

 

I'm currently useing Space version 15.2R2.4.

8 REPLIES 8
Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago
Please try below doc to resolve key conflict.

https://www.juniper.net/documentation/en_US/junos-space17.2/platform/topics/task/operational/device-...

Regards,
Pravin
-PL
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. Kudos are always appreciated!
Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago

I can't do this because the switch is not listed in the devices.  It was at one point, but I removed it when access was lost to the switch.  I now cannot rediscover the switch because of the fingerprint mismatch.

Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago
What exact error you are getting while device discovery? And do you get an option to put fingerprint while discovery if so, try to put it while discovery.

Regards,
Pravin
-PL
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. Kudos are always appreciated!
Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago

When I was trying to discover the device, I was using a super-user account setup on the switch for the discovery.  Using this account, I recevied the following error message from Space when the job failed: "Fingerprint mismatch. Host key verification failed."

 

I ran the following commands to find the RSA fingerprint on the switch:

switch>start shell
%ssh-keygen -E md5 -lf /etc/ssh/ssh_host_rsa_key.pub
2048 MD5:fingerprint information root@switch (RSA)

I put the fingerprint information in the discovery job, but then received the following error: "SSH connection failed. Device might not be reachable through device management interface."

 

I tried discovery again but changed the account to the root account.  I then received the following error: "Fingerprint mismatch. Host key verification failed."

 

Both time while discovering, I did not check the box for Enable Key based authentication.

Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago

When it failed with  "Fingerprint mismatch. Host key verification failed." did the device object gets added under Device Management? if yes, try to resolve key conflict and check.

 

-PL

-PL
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. Kudos are always appreciated!
Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

a month ago

No, the device does not appear under device management.

Highlighted
Junos Space Developer
Solution
Accepted by topic author Jconn
4 weeks ago

Re: Cannot add EX2300 switch

a month ago

Oh, you are using Space version 15.2R2.4, it was a known issue.

16.1 (CentOS is upgraded to 6.8) onwards this issue is fixed.

 

-PL

-PL
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. Kudos are always appreciated!
Highlighted
Junos Space Developer

Re: Cannot add EX2300 switch

4 weeks ago

Thanks for your assistance.  I'll look into updating our Space installation.