Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Add a Provider Hub (DATA_ONLY Capability)


You can add an SRX Series services gateway or a vSRX instance as a provider hub device. The device template that is currently supported for provider hub devices is SRX as SD-WAN Hub. You can configure a provider hub with the DATA_ONLY capability.

To add a provider hub device with DATA_ONLY capability:

  1. Select Resources > Cloud Hub Devices.

    The Cloud Hub Devices page appears.

  2. Click the add icon (+).

    The Add Cloud Hub Device page appears.

  3. Complete the configuration according to the guidelines provided in Table 1.
  4. Click Ok. If you want to discard your changes, click Cancel instead.

    If you click Ok, the provider hub device is added. The information about the new provider hub device appears on the Cloud Hub Devices page.

Table 1: Fields on the Add Cloud Hub Device Page




Enter the name of the cloud hub device.

You can use alphanumeric characters, including special character(-). The maximum length is 15 characters.

Example: SRX-cloud-hub

Management Region

Displays the regional server with which the device communicates. The management region name is populated based on the information from the device template.

Example: regional


Select the POP where the hub device needs to be added.

Example: pop_blue

Site Capability

Select the site capability of the provider hub device as DATA_ONLY, which indicates that the hub transmits only the data traffic.

A secure connection is established between the provider hub with data capability and the provider hub (with OAM capability) that are owned and managed by the Juniper Network team that hosts the cloud-based CSO.

Authentication Type

Select the authentication method—Preshared Key (PSK) or Public Key Infrastructure (PKI).

Advanced Configuration

Name Server IP List

Specify one or more IPv4 addresses of the DNS server. To enter more than one DNS server address, type the address, press Enter, and then type the next address, and so on.

DNS servers are used to resolve hostnames into IP addresses.

NTP Server

Specify the fully qualified domain names (FQDNs) or IP addresses of one or more NTP servers.


The site must have DNS reachability to resolve the FQDN during site configuration.

Select Timezone

Select the time zone of the site.

Device Template

Device Series

Select the device series to which the provider hub belongs—SRX.

Device Template

Select a device template for the selected device series.

The device template contains information for configuring a device.

Device Information

Serial Number

Enter the serial number of the provider hub device.

The serial number is a 12-digit number present on the rear panel of the device. Serial numbers are case-sensitive.

Auto Activate

Click the toggle button to enable or disable automatic activation of the provider hub device.

When you enable this field, zero-touch provisioning (ZTP) of the provider hub device is automatically triggered after the site is added to CSO.

The device template that you select determines whether this option is enabled or disabled by default.

Boot image

Select the boot image from the drop-down list if you want to upgrade the image for the provider hub device.

The boot image is the latest build image uploaded to the image management system. The boot image is used to upgrade the device when the CSO starts the ZTP process.

If the boot image is not provided, then the device skips the procedure to upgrade the device image. The boot image (NFX or SRX) is populated based on the device template that you have selected while creating a site. .

Management Connectivity

Loopback IP Prefix

By default, CSO assigns the IPv4 address prefix for the loopback interface on the device. If you prefer to use a specific loopback address contact the Juniper Networks team.

WAN Links





Select a WAN link to enable it. After selecting the link, specify the following information:

  • WAN Interface—Displays the interface name configured in the device template. You cannot modify this field.

    Example: ge-0/0/0

  • Link Type—Select the link type (MPLS or Internet) configured in the device template.

    Example: Internet

  • Address Assignment—Select STATIC to assign a static IP address.

  • Static IP Prefix—Enter a private IPv4 address from the subnet

  • Gateway IP Address—Enter the gateway IP address of the default route.

  • Data VLAN ID—(Optional) Enter the VLAN ID that is associated with the data link. A data VLAN identifier is an integer in the range 0–65,535.

    Example: 201

After you add the cloud hub device:

  • If you have enabled the Auto Activate field, the cloud hub device gets automatically activated.

  • If you have disabled the Auto Activate field, select the cloud hub device on the Resources > Cloud Hub Devices page and click Activate Device.

During activation, the cloud hub device is discovered and the required details are stored in CSO.