Contents
Contents
Contents
Device Template Overview
A device template contains configuration and provision settings for a physical device, such as a CPE device or a router, which you manage through Contrail Service Orchestration (CSO). The CSO installation includes several default device templates for CPE devices and other physical devices. You can either use a default CPE device template as is if the template suits your specific topology requirements or customize the default CPE device template to meet your specific requirements. You can also create your own device templates and upload that to CSO. The CPE device templates are specific to the type of device and topology of the solution. The device templates for non-CPE devices are fixed and you cannot customize them. You must assign a device template to each CPE device at the site. You assign a device template to a device in CSO when you add a point of presence (POP). In some cases, you might want all CPE devices to use the same values, through device templates, you have the options to provide the values.
Note In CSO Release 5.0, device templates are owned and managed by the Juniper Networks team that manages the cloud installation of CSO. If you need to modify device templates, talk to your Juniper Networks representative.
The CPE device templates contain three types of information:
Template settings information—It prepares the device for remote activation, connects the device to the peer router, and establishes an IPsec tunnel with the router.
Stage-2 configuration template information—It specifies the additional settings that you or your customer can configure for the device. For example, you can enable configuration of LAN and firewall policies. You create these configuration templates in Configuration Designer and provide implementation details in the device template.
Stage-2 initial configuration information—It provides the actual values for the stage-2 configuration templates. In general, your customers perform this configuration through the Customer Portal.
The CPE device templates support four deployment models: Hybrid WAN CPE, SD-WAN CPE, Secure Internet CPE, and Managed Internet CPE.
Hybrid WAN CPE
You can use the NFX Hybrid WAN CPE or SRX Hybrid WAN CPE device template for a CPE device in hybrid WAN deployment.
Figure 5 shows the topology for a hybrid WAN CPE deployment model.
Figure 5: Hybrid WAN CPE
Table 67 lists the connectivity details for hybrid WAN CPE.
Table 67: Connectivity Details for Hybrid WAN CPE
Link Name | Type | Default Interface | IP Assignment | Overlay | Traffic |
|---|---|---|---|---|---|
WAN_0 | MPLS | ge-1/0/1 (NFX150) ge-0/0/8 (NFX250) ge-0/0/0 (SRX) | Static | — | Data, OAM |
WAN_1(Optional) | Internet | ge-1/0/2 (NFX150) ge-0/0/9 (NFX250) ge-0/0/1 (SRX) | DHCP | IPsec | Backup data path |
SD-WAN CPE
You can use the NFX 150 as SDWAN CPE, NFX 250 as SDWAN CPE, Dual NFX 250 as SDWAN CPE, SRX as SDWAN CPE, SRX-1500 as SDWAN CPE, SRX-4x00 as SDWAN CPE, Dual SRX as SDWAN CPE, Dual SRX 1500 as SDWAN CPE, or Dual SRX 4x00 as SDWAN CPE device template for a CPE device in an SD-WAN deployment.
Figure 6 shows the topology for an SD-WAN CPE deployment model.
Figure 6: SD-WAN CPE
Table 68 lists the connectivity details for an SD-WAN CPE.
Table 68: Connectivity Details for SD-WAN CPE
Link Name | Type | Default Interface | IP Assignment | Overlay | Traffic |
|---|---|---|---|---|---|
WAN_0 | MPLS, Internet | ge-1/0/1 (NFX150 ge-0/0/10 (NFX250) ge-0/0/0 (SRX) xe-0/0/0 (SRX4x00) | Static, DHCP | IPsec | Data, OAM |
WAN_1 | MPLS, Internet | ge-1/0/2 (NFX150) ge-0/0/11 (NFX250) ge-0/0/1 (SRX) xe-0/0/0 (SRX4x00) | Static, DHCP | IPsec | Data, OAM |
WAN_2 | MPLS, Internet | ge-1/0/3 (NFX150) (NFX1250) ge-0/0/2 (SRX) xe-0/0/0 (SRX4x00) | Static, DHCP | IPsec | Data, OAM |
WAN_3 | MPLS, Internet | ge-1/0/4 (NFX150) (NFX250) ge-0/0/3 (SRX) xe-0/0/0 (SRX4x00) | Static, DHCP | IPsec | Data, OAM |
Secure Internet CPE
You can use the NFX 150 as Secure Internet CPE or NFX 250 as Secure Internet CPE device template to provide a secure Internet connection through the CPE device.
Figure 7 shows the topology for a secure Internet CPE deployment model.
Figure 7: Secure Internet CPE
Table 69 lists the connectivity details for secure Internet CPE.
Table 69: Connectivity Details for Secure Internet CPE
Link Name | Type | Default Interface | IP Assignment | Overlay | Traffic |
|---|---|---|---|---|---|
WAN_0 | Internet | ge-1/0/1 (NFX150) ge-0/0/8 (NFX250) | DHCP | IPsec | Data, OAM |
Managed Internet CPE
You can use the NFX Managed Internet CPE or SRX Managed Internet CPE device template to provide a managed Internet connection through the CPE device.
Figure 8 shows the topology for a managed Internet CPE deployment model.
Figure 8: Managed Internet CPE
Table 70 lists the connectivity details for a managed Internet CPE deployment model.
Table 70: Connectivity details for Managed Internet CPE
Link Name | Type | Default Interface | IP Assignment | Overlay | Traffic |
|---|---|---|---|---|---|
WAN_0 | Internet | ge-1/0/1 (NFX150) ge-0/0/8 (NFX250) | DHCP | — | Data, OAM |
Related Documentation
Feedback Received. Thank You!
Related Topics