What is Zero Touch Provisioning (ZTP)?

Zero touch provisioning or so called ZTP is the way to automatic configuration on Cisco vEdge devices for which almost zero manual intervention required. If we talk about the Zero touch provisioning,

Networking traditionally has been a complex and manual for IT. The advent of SDN changed it all. Out of all benefits of SD-WAN, ZTP is among the top three. With ZTP, networking is automated and an intent driven process. Zero touch provisioning is a switch, that simplifies provisioning and configuration of devices automatically without any manual intervention. The switch (ZTP) downloads and runs the centrally stored configuration, which it acquires by sending a request through DHCP or TFTP. ZTP seamlessly allows IT to update OSs, deploy patches and bug fixes and embed additional features prior to connection. Using Scripts, ZTP can also connect to configuration management platforms or a custom tool.


ZTP relies on below service which are:

• A license file provided by Cisco for overlay network.
• Marking of a device as valid or staging. 
• The configuration template for the device.

ZTP allows the hardware to be installed directly into the environment and for that act to be the last hands-on moment.  When it’s powered on, the switch sends out a request through DHCP (Dynamic Host Configuration Protocol) or TFTP (Trivial File Transfer Protocol) to get the location of its centrally stored image and configuration, which it downloads and runs.

ZTP on Lavelle Networks SD-WAN

Using ZTP with Lavelle networks CloudStation (orchestrator) and CloudPort (device), each CloudPort (network node) at a branch or DC location, needs to know the web service URL of its CloudStation (parent SD-WAN controller). The service URL is pre-configured on the CloudPort, prior to shipping the device to the location. An alternate method is to use a factory default service URL – “bootstrap.cloudstation.io”. Either way, the CloudPort on first power up, attempts to establish an HTTPS connection to the preconfigured CloudStation service URL. At this time, the only prerequisite is that there be a functional WAN connection to the CloudStation. In case any or all of the WAN interfaces use an automatic IP assignment protocol like DHCP, this is really simple. In case a static IP address, or a site specific network IP assignment is needed, then this has to be entered at the site using the CloudPort local web interface (which is served over the LAN interface using a default URL – “local.cloudport.io”). The CloudPort uses one of the forms of authentication parameters:

• Device based unique identifier, using the MAC address of the ethernet ports. 
• The identifier also uses an internal algorithm to combine hardware model numbers, device serial numbers,
• Username, and password, which are pre-configured on the appliance, or can be configured at run time using the local web interface.

Conclusion

Zero touch provisioning allows IT to automatically update, pre-configure initial configuration and update scripts. With Zero touch Provisioning, enterprises can cater to new emerging challenges rising due to the high usage of network functions virtualization (NFV). Only with Zero touch provisioning, enterprise ITs can configure new virtual functions.  From India’s 2nd largest retail network, to the fifth largest insurance network, from production locations, ranging from the largest cities to the smallest towns, covering several regions in India, Lavelle Networks SD-WAN solution has proven its ZTP architecture across the nation.