Users have reported difficulties using Zero Touch Provisioning (ZTP) to deploy ATP and USG FLEX series firewalls on Nebula. Specifically, the ZTP configuration option appears greyed-out in the Nebula Control Center (NCC).
As of firmware version V5.37 Patch 1, ZTP mode has been removed for the following models:
- ATP Series: ATP100, ATP100W, ATP200, ATP500, ATP700, ATP800
- USG FLEX Series: USG FLEX 50, USG FLEX 50W, USG FLEX 100, USG FLEX 100W, USG FLEX 200, USG FLEX 500, USG FLEX 700, USG20-VPN, USG20W-VPN
Consequently, these devices must now be deployed using Nebula Native Mode.
Solution:
Verify Device Compatibility with Native Mode
Not all devices support Nebula Native Mode. To determine compatibility:
-
Check Serial Number: Devices with serial numbers starting with
S23xxxxxxxxxx orS24xxxxxxxxxx are eligible for Native Mode registration. - Check Firmware Version: Devices running firmware versions V5.37 Patch 1 or later have ZTP mode removed.
2. Deploying Devices Using Native Mode
For compatible devices:
- Reset to Factory Defaults: Press the RESET button on the device's front panel.
-
Access Setup Wizard: Connect to the device via
https://192.168.1.1and follow the wizard. - Select Management Mode: Choose Nebula Mode when prompted.
- Configure WAN Settings: Ensure the device has internet connectivity.
- Register Device on Nebula: Log in to the Nebula Control Center, create an organisation and site if necessary, and add the device using its MAC address and serial number.
3. For Devices Incompatible with Native Mode
If your device is not compatible with Native Mode (e.g., serial numbers not starting with S23 or S24):
- Downgrade Firmware: Revert to a firmware version that supports ZTP (e.g., V5.37(ABUI.0) for USG FLEX 200).
| ATP | USG FLEX | ||
|---|---|---|---|
| ATP100 | 5.37(ABPS.0)C0 | USG FLEX 50 | 5.37(ABAQ.0)C0 |
| ATP100W | 5.37(ABRW.0)C0 | USG FLEX 50W | 5.37(ABAR.0)C0 |
| ATP200 | 5.37(ABFW.0)C0 | USG FLEX 100 | 5.37(ABUH.0)C0 |
| ATP500 | 5.37(ABFU.0)C0 | USG FLEX 100W | 5.37(ABWC.0)C0 |
| ATP700 | 5.37(ABTJ.0)C0 | USG FLEX 200 | 5.37(ABUI.0)C0 |
| ATP800 | 5.37(ABIQ.0)C0 | USG FLEX 500 | 5.37(ABUJ.0)C0 |
| USG FLEX 700 | 5.37(ABWD.0)C0 | ||
- Reset to Factory Defaults: Press the RESET button on the device's front panel.
- Deploy Using ZTP Mode: Follow the ZTP deployment process as outlined in the following guide:
- Upgrade Firmware via Nebula: Once the device is online in Nebula, you can upgrade to the latest firmware version through the NCC.