Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Appendix

 

Supported Devices, and Ports and Protocols to Open

Table 16 lists the enterprise hub and CPE device models that are supported by CSO and the list of ports or protocols that must be opened for these devices.

Note

During the site activation process for SRX4100, SRX4200, and vSRX 3.0, you must copy the stage-1 configuration (generated automatically by CSO) to the device, and commit the configuration on the device.

Before you add the enterprise hub site or the branch site:

  • Connect cables to the device according to your network design, and power on the device. For more information, see the hardware documentation links in Table 16.

    Note

    We assume that the branch (SD-WAN CPE) devices will obtain the DHCP IP address (if DHCP is configured as the address assignment method) and will have Internet connectivity along with DNS resolution, when connected according to the network design.

  • Ensure that the NAT and firewall ports and protocols listed in Table 16 are open on the network.

  • Ensure that the devices are running the recommended version of Junos OS. For information about the supported Junos OS versions in a CSO release, refer to the CSO Release Notes for that release (available at the CSO Documentation page).

  • Before you initiate ZTP for the enterprise hub, ensure that the hub device can connect to CSO.

Table 16: Supported Enterprise Hub and SD-WAN CPE Devices, and NAT and Firewall Ports to Open

Device Model

Supported Site Type

NAT and Firewall Protocols or Ports

WAN Link Ports

Hardware Documentation Links

NFX150

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 8060

heth-0-0

heth-0-5

heth-0-2

heth-0-3

NFX150 Chassis

NFX250

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 7804

TCP Port 8060

ge-0/0/10

ge-0/0/11

xe-0/0/12

xe-0/0/13

NFX250 Chassis

SRX300

SRX320

SRX340

SRX345

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 8060

ge-0/0/0

ge-0/0/1

ge-0/0/2

ge-0/0/3

SRX300 Chassis

SRX320 Chassis

SRX340 Chassis

SRX345 Chassis

SRX550M

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 8060

ge-0/0/0

ge-0/0/1

ge-0/0/2

ge-0/0/3

SRX550 HM Chassis

SRX1500

Enterprise hub

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 8060

ge-0/0/7

ge-0/0/8

xe-0/0/18

xe-0/0/19

SRX1500 Chassis

SRX4100

SRX4200

Enterprise hub

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

TCP Port 500

TCP and UDP Ports 4500

TCP Port 8060

xe-0/0/0

xe-0/0/1

xe-0/0/2

xe-0/0/3

SRX4100 Chassis

SRX4200 Chassis

vSRX

Enterprise hub

Branch Site (SD-WAN)

IP Protocol 50

IP Protocol 51

TCP Port 443

UDP Port 500

TCP and UDP Ports 4500

TCP Port 8060

ge-0/0/0

ge-0/0/1

ge-0/0/2

ge-0/0/3

vSRX Deployment Guides

Additional Documentation

Table 17 lists the additional CSO documentation that you can see for more information about CSO’s SD-WAN features.

Table 17: Additional CSO Documentation

Documentation

Link

Deployment Guide

Getting Started section of the CSO Documentation page

Administration Portal User Guide

Customer Portal User Guide

User Guides section of the CSO Documentation page

Release Notes

Release Notes section of the CSO Documentation page

Monitoring and Troubleshooting Guide

System Administration section of the CSO Documentation page