New and Changed Features in Contrail Service Orchestration Release 5.0.0
This section describes the new features or enhancements to existing features in Contrail Service Orchestration (CSO) Release 5.0.0.
Enhancements for tenant onboarding—From CSO Release 5.0.0 onward, a tenant can use one or more of the following services:
Support for EX Series switches—From CS0 Release 5.0.0 onward, you can provision, deploy, and monitor EX Series switches in branch deployments. You can connect an EX Series switch to a Customer Premise Equipment (CPE) device such as an SRX Series device functioning as a secure SD-WAN router, enterprise hub, or next-generation firewall. You can also connect an EX Series switch to a third-party Internet gateway device.
In CSO Release 5.0.0, the following EX Series switches are supported: EX2300, EX3400, and EX4300.
Support for next-generation firewall sites—From CSO Release 5.0.0 onward, you can add a standalone site with next-generation firewall capabilities. You can also add a site with LAN capabilities along with next-generation firewall capabilities.
Integration with Mist access points—From CSO Release 5.0.0 onward, you can enable integration of Mist access points with CSO and provide the credentials for accessing the Mist portal from CSO. If you enable integration with Mist access points, the Mist access points are listed among the devices for a site, and you can click the item to launch the Mist portal and view the details about the access points.
Support for site templates—From CSO Release 5.0.0 onward, you can add site templates in CSO. A site template enables you to specify values for many of the attributes used to add a site. You can then use the site template to add multiple sites that share the same set of values (for attributes already specified in the site template) and specify values only for site-specific attributes.
Site templates are applicable only for on-premise spoke sites.
Support for firewall device configuration—From CSO Release 5.0.0 onward, you can configure zones, routing instances, and logical interfaces for a firewall device. You can use these zones, routing instances, and logical interfaces when you define firewall and NAT policies.
Support for firewall policy management—From CSO Release 5.0.0 onward, CSO supports both zone-based intents (intents with zones as source and destination) and enterprise-based intents (intents with sites, site groups, departments, and addresses as source and destination) for a firewall policy.
SSL profile is applicable for zone-based intents.
SSL policy is not applicable for enterprise-based intents.
Support for automatically allocating OAM hubs—From CSO Release 5.0.0 onward, CSO automatically allocates an OAM hub for an on-premise spoke site and an enterprise hub site.
Identify connectivity issues by using ping and traceroute—From CSO Release 5.0.0 onward, you can identify connectivity issues between a device and a remote host by using the ping and traceroute options.
Enhancements to SD-WAN policy management—From Release 5.0.0 onward, CSO provides predefined SD-WAN intent policies, application groups and SLA profiles.
The enhancements to SLA profiles are as follows:
Predefined SLA parameters (target metrics) for specific traffic type
SLA profile recommendations for system defined application groups
SLA profiles are categorized as follows:
SLA-based steering profile—A profile for which you define one or more SLA parameters.
Path-based steering profile—A profile for which you define only the path preference (MPLS or Internet) but no SLA parameters.