Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Add an SD-WAN On-Premise Spoke Site


The following illustration shows a simple SD-WAN topology.

Before you add an on-premise spoke site:

To add an on-premise spoke site for SD-WAN:

  1. From the Sites page (Resources > Site Management) of the CSO portal, click Add and select On-Premise Spoke Site.

    The Add Site wizard appears.

  2. Complete the settings as explained in Table 2.
  3. Click OK to add the site.

    When the site is successfully created, the Site Status in the Sites page changes to Provisioned.

    Table 2: SD-WAN On-Premise Spoke Site Settings




    Site Name

    Enter a unique name for the site. You can use alphanumeric characters and hyphen (-); the maximum length is 10 characters.

    Site Capabilities

    Select SD-WAN.

    Primary Hub

    Select an enterprise hub site as the primary hub from the list of available hub sites. If there is only one hub site available, that one is selected by default.


    Device Series

    Select the CPE device.

    Device Template

    Select a device template for the CPE device.

    Serial Number

    Enter the serial number of the CPE device.

    Auto Activate

    If the selected device template supports ZTP, Auto Activate is enabled. When Auto Activate is enabled, zero-touch provisioning of the device is automatically triggered when the site is added.

    The Activation Code field appears if the selected device template does not support ZTP or if you disable the Auto Activate option.

    In such cases, specify the activation code of the device to manually activate a device. For information about manually activating a device, see Activate a Device.

    Link Type

    Specify whether the link is an Internet link or an MPLS link.

    If you select Internet as the Link Type, select the Access Type. The access type options available for Internet link are: Ethernet, LTE, ADSL, and VDSL.

    Egress Bandwidth

    Specify the maximum bandwidth allocated for the WAN link.

    Address Assignment

    Specify whether to use DHCP or Static addresses.

    If you select Static, specify a Static IP Prefix and Gateway IP Prefix.

    Service Provider

    Enter the name of the service provider.

    Cost per month

    Enter the per month cost of the link. This information is used to identify the least expensive link when link switch occurs.

    LAN Segment

    Add LAN Segment

    Click to add a LAN segment.


    Enter a unique name for the LAN segment.

    Gateway Address/Mask

    Enter a valid gateway IP address andmask for the LAN segment; for example,


    Select a department from the list; if no department is available, click Create Department and add one.

    A department is a grouping of LAN segments within a site. You use departments to apply specific policies to LAN segments that are members of a department.

    CPE Port

    Select at least one CPE port.

After the site is provisioned, you can complete the following tasks as required:

  • Upload and install licenses. For example, Administration > Licenses.

  • Install signatures. For example, Administration > Signature Database.

  • Add, edit, and deploy an SD-WAN policy. For example, Configuration > SD-WAN Policy .

  • Create and generate reports. For example, Reports > Report Definitions > SD-WAN.

  • Monitor alerts and alarms, SLA performance of tenants, and jobs. For example, Monitor > Jobs.

For more information about these tasks, see the Contrail Service Orchestration user guide at documentation/product/en_US/contrail-service-orchestration.