Ready. Set. Let’s go!
Use the following high-level steps to set up your Contrail Service Orchestration (CSO) solution with Administration Portal. Click the Online Help (?) links for additional information, or refer to the Administration Portal Help Center.
Cloud CPE Solution
Centralized deployment—End users at a customer site access network services in a service provider’s cloud. Sites in this deployment are called cloud sites.
Distributed deployment—End users at a customer site access network services on a CPE device located at that site. Sites in this deployment are called on-premise sites.
Combined centralized and distributed deployment—Customers can have both cloud sites and on-premise sites.
SD-WAN Solution
The SD-WAN deployment supports hub-and-spoke topology and full mesh topology. The CPE devices are the same as those used in a distributed deployment.
Administration portal enforces role-based access control (RBAC), which prevents tenants from accessing administrator data; and supports different backend authentication methods for service provider users and tenant users. An SP Administrator can assign service provider, OpCo, and tenant roles to service provider users and tenant roles to tenant users.
Note The following steps are intended for an SP Administrator user at the Global scope. An SP Administrator user can view tenant-specific objects, and perform tasks that a Tenant Administrator user can perform, by switching the scope to a single tenant.
After you log in for the first time, you must configure the SMTP settings for your deployment.
To configure SMTP settings:
The SMTP page appears.
The status of the save operation is displayed.
This task describes how to add a single point of presence (POP). You can also import a file that contains data for multiple POPs by clicking Resources > POPs > Import POPs > Import.
Note You must create a separate POP for Hybrid WAN and SD-WAN deployments.
To create a single POP:
The POPs page appears.
The Add POP page appears.
For a centralized deployment, configure:
A POP
(Optional) The SDN gateway device, if you want Contrail Service Orchestration (CSO) to manage or display data for the device
One or more virtualized infrastructure managers (VIMs)
(Optional) An element management system (EMS), if you use a virtualized network function (VNF) that requires an EMS other than the default EMS microservice
For a distributed deployment, configure:
A POP
(Optional) A provider edge (PE) router, if you want CSO to manage or display data for the device
(Optional) An SD-WAN gateway device, if you use one and want CSO to manage or display data for the device
For a combined deployment, you must configure two POPs—one for a centralized deployment and the other for a distributed deployment
The following tasks describe how to add tenants and sites:
This task describes how to add a single tenant and sites for that tenant. You can also import a file that contains data for multiple tenants and their sites by clicking Tenants > Import Tenants > Import.
To add a single tenant:
This task describes how to add a cloud site.
Note You must select a single tenant from the scope switcher for which you want to add the site.
To add an on-premise site:
The Sites page appears.
The Add Site for Tenant-Name page appears.
The status of the add operation is displayed.
This task describes how to add an on-premise site. You can add the following types of on-premise site:
On-Premise Spoke—An on-premise spoke represents an endpoint that is part of CPE at some physical location such as branch office or point of sale location. Typically, these points are connected using overlay connections to hub sites.
On-Premise Hub—An on-premise hub represents an automation end point that is part of CPE at headquarter or main branch office. The hub site is connected to multiple spoke sites using the overlay connections.
Note When you create an on-premise site with dual CPE devices, you must select either dual CPE NFX or dual CPE SRX connection plan. The Device Redundancy option is enabled only when you select a dual connection plan.
Note You must select a single tenant from the scope switcher for which you want to add the site.
To add an on-premise site:
The Sites page appears.
The Add Site for Tenant-Name page appears.
The status of the add operation is displayed.
Note In a Hybrid-WAN deployment, you can create spoke, local service edge, and regional service edge sites. In an SD-WAN deployment, you can create on-premise spoke, on-premise hub, cloud spoke, and cloud hub sites.
After you add a site, you must configure the site.
Note You can also configure an SD-WAN on-premise spoke site using dual CPE devices. The workflow for configuring a site with a single CPE or dual CPE devices is similar. You must provide the serial number and the activation code for both the primary and the secondary devices.
Note You must select a single tenant from the scope switcher for which you want to configure the site.
To configure a site:
The Sites page appears.
The Configure Site page appears.
The status of the site configuration operation is displayed.
After you configure a site, you must activate the device associated with the site.
Note If you have configured an SD-WAN on-premise spoke site with dual CPE devices, you must activate both the primary and the secondary devices simultaneously.
Note You must select a single tenant from the scope switcher for which you want to add the site.
To activate a site:
The Sites page appears.
The Site Name page appears.
The Activate Device page appears.
The status of the site activation operation is displayed.
To activate a cloud hub device:
The Cloud Hub Devices page appears.
The Activate Device page appears.
The status of the activation operation is displayed.
The following tasks describe how to prepare CPE devices:
To upload a CPE Device or VNF image:
The Upload Image page appears.
The Upload Image page displays the progress of the image upload.
The status of the save operation is displayed.
To upload a license:
The Upload License page displays the progress of the license upload.
The status of the save operation is displayed.
You must assign network services to tenants to enable them to access the network services. Before you assign network services, you must create network services in Network Service Designer. After you publish the service to the network service catalog from Network Service Designer, you can see the network service in Administration Portal. You can assign services in the following ways:
Assign one or more services to a single tenant:
The Tenants page appears.
The Allocate Network Services to Tenant-Name page appears.
You are returned to the Tenants page and the status of the assign operation is displayed.
Assign a service to one or more tenants:
The Network Services page appears.
The Select Tenant(s) to allocate the Service page appears.
You are returned to the Network Services page. The count in the Tenants column is incremented by the number of tenants that you assigned to the service.
Configuring SMTP Settings
Creating a Single POP
Adding a Single Tenant
Adding Cloud Spoke Sites for SD-WAN Deployment
Adding Cloud Hub Sites for SD-WAN Deployment
Adding On-Premise Spoke Sites for SD-WAN Deployment
Creating On-Premise Hub Sites for SD-WAN Deployment
Configuring a Single Site
Activating a CPE Device
Uploading a Device Image
Allocating Network Services to a Tenant
Network Service Designer Overview
Accessing Network Service Designer
Uploading a License File
Configuring SMTP Settings
Creating a Single POP
Adding a Single Tenant
Adding Cloud Spoke Sites for SD-WAN Deployment
Adding Cloud Hub Sites for SD-WAN Deployment
Adding On-Premise Spoke Sites for SD-WAN Deployment
Creating On-Premise Hub Sites for SD-WAN Deployment
Configuring a Single Site
Activating a CPE Device
Uploading a Device Image
Allocating Network Services to a Tenant
Network Service Designer Overview
Accessing Network Service Designer
Uploading a License File