_____________________________________________________________________
724-746-5500 | blackbox.com Page 304
3. Create an OPG backup of the templated golden master appliance.
4. Restore this configuration to each target devices via the CLI, web UI or using a USB thumb drive.
5. Login via the CLI to complete configuration using setup-wizard.
6. (Optional) On Lighthouse, use enrollment-wizard to automatically place appliances under management. This may
be local/routable appliances, or remote appliances that have automatically Call Home using callhome-wizard.
Note: Steps 5 and 6 may be reversed for remote setup via Lighthouse
Note: Full details for the above steps can be found in the Knowledge Base
15.16 Zero Touch Provisioning
Zero Touch Provisioning (ZTP) was introduced with firmware release 3.15.1 to allow appliances to be provisioned during
their initial boot from a DHCP server.
15.16.1 Preparation
These are typical steps for configuration over a trusted network:
1. Configure a same-model Console server device.
2. Optionally use the Bulk Provisioning wizard scripts to remove any appliance-specific settings (i.e. create a
template configuration) and/or prepare the configuration for automated Lighthouse enrollment, see the section
entitled Bulk Provisioning in this document.
3. Save the configuration as an Console server backup (.opg) file under System: Configuration Backup in the web
UI, or via config -e in the CLI. Alternatively, you can save the XML configuration as a file ending in .xml.
4. Publish the .opg or.xml file on a fileserver that understands one of the HTTPS, HTTP, FTP or TFTP protocols.
5. Configure your DHCP server to include a "vendor specific" option for Console server devices. The option text
should be a URL to the location of the .opg or .xml file. The option text should not exceed 250 characters in
length. It must end in either .opg or .xml.
6. Connect a new Console server device (either at defaults from the factory, or config erased) to the network and
apply power.
7. It may take up to 5 minutes for the device to find the .opg or .xml file via DHCP, download, install the file and
reboot itself.
15.16.2 Setup for an untrusted LAN
If network security is a concern, and you can have remote hands insert a trusted USB flash drive into the Console server
device during provisioning, then follows are a summary of the steps required for deploying configuration in an untrusted
network:
To Next Page
Loading...
