ssh root@<qfx-mgmt-ip> You will get Connection refused because the SSH service is disabled in factory state.
load factory-default commit The root password is cleared. The switch reverts to root: (blank). qfx default password
Every engineer who unboxes a QFX, performs a zeroize, or loads factory-default configuration must immediately set a strong root password or—preferably—disable root login entirely. Document the change, verify it, and include it in your configuration management database. Every engineer who unboxes a QFX, performs a
request system zeroize or
set system login user admin uid 2000 set system login user admin class super-user set system login user admin authentication plain-text-password # (set admin password) set system root-authentication ssh-rsa "ssh-rsa AAAAB3..." # key-only, or set system root-authentication load-key-file /var/tmp/root_key.pub delete system root-authentication plain-text-password 4.3 Enforcing Password Policies set system login password format sha512 set system login password minimum-length 12 set system login password change-type user-set 4.4 Saving Configuration to Prevent Reversion After committing, save to both rescue and backup: Author’s note: This article applies to all QFX
Because in networking, as in security: the default is rarely your friend. Author’s note: This article applies to all QFX models including QFX5100, QFX5110, QFX5120, QFX5130, QFX5200, QFX5700, and QFX10000 series running Junos 15.1X53 and later.
login: root Password: Press Enter at the password prompt. You are now logged in as root. If the switch has been configured for serial over LAN but the password was later cleared (e.g., via load factory-default ), the same blank password applies. 2.3 SSH – Not Enabled by Default Contrary to some misconceptions, SSH is not enabled out of the box. If you try: