Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Add an On-Premise Spoke Site with Hybrid WAN Capability


You add an on-premise spoke site with Hybrid WAN capability from the Sites page. The Hybrid WAN sites can have a maximum of two WAN links (one of the links functions as a backup) and run network services from the CPE device.

The following image illustrates a simple Hybrid WAN topology.

Before you add an on-premise spoke site with Hybrid WAN capability:

To add a hybrid WAN site:

  1. From the Add list of the Sites page, click On-Premise Spoke Site.

    The Add Site wizard appears.

  2. Complete the configuration settings in the General and WAN sections according to the guidelines provided in Table 2.
  3. Review the configuration and modify the settings, if needed, from the Summary tab.
  4. Click Next to review the settings and then, click OK to add the site.

    When the site is successfully created, the Site Status in the Sites page changes to Provisioned.

Table 2: Fields on the Add OSpoke Site Page




Site Information

Site Name

Enter a site name. You can use any number of alphanumeric characters, including special characters. The maximum length is 10 characters.

Site Capabilities

WAN Capabilities

Select Hybrid WAN to include Hybrid WAN capability in the on-premise spoke site.

Device Profile

Device Series

Select the device series to which the CPE belongs—SRX, NFX150, or NFX250.

Device Template

Select a device template for the selected device series.

The device template contains information for configuring a device.

Device Information

Serial Number

Enter the serial number of the CPE device.

Auto Activate

If the selected device template supports ZTP, Auto Activate is enabled. When Auto Activate is enabled, zero-touch provisioning of the device is automatically triggered when the site is added.

The Activation Code field appears if the selected device template does not support ZTP or if you disable the Auto Activate option.

In such cases, specify the activation code of the device to manually activate a device. For information about manually activating a device, see Activate a Device.


CPE Info

CPE AS Number

Specify the autonomous system(AS) number.

Access Info

Router Name

Specify the router name.

Router AS Number

Specify the AS number for the router.

Management Connectivity

OAM Traffic Information

Select this option to set up an OAM link with CSO.

IP Prefix

Enter the IPv4 prefix to be used for the management network. This IP address must be unique across the entire management network.

  • For NFX150 and NFX250 devices, if the USE_SINGLE_SSH_TO_NFX parameter is disabled in the device template,enter the IP address prefix as /29 or lower based on the number of VNFs.

  • For all other devices, enter the IP address prefix as /32.

Gateway IP

If you configured the address assignment method as STATIC, enter the IP address of the gateway of the WAN service provider.

WAN links

One of the two links functions as a backup link.


Link Type

Select whether the link would be an MPLS link or Internet link.


Specify the identifier for the Layer 2 VLAN for the CPE device.

VRF Name

Specify the name of the virtual routing and forwarding (VRF) instance.

IPsec Concentrator Name

Specify the name of the IPsec concentrator device.

Internet Gateway IP

If you specified that the device is an IPsec concentrator, then specify the IPv4 address of the Internet gateway.


Refer to the fields described for WAN_0 for an explanation of the fields.