Q:

What is the point of Junos outbound SSH service?

Junos outbound SSH service makes a SSH connection from network device to SSH server. What is the point of this? Does it allow the server to somehow make the SSH connection back to network device using this already established SSH connection?

A:

In Junos, outbound-ssh is used to allow the device to connect back to an external management platform via NETCONF over SSH, allowing remote management of devices that were behind NATs or jump-hosts.
If you use Juniper’s Sky Enterprise management solution (aka OneConfig), they use this method exclusively for device connectivity, configuration changes and even remote console.

