Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 

Known Issues

This section lists known issues for the Juniper Networks Cloud CPE Solution Release 3.0.1.

  • Administration Portal might take a short while to update data fields after you delete objects.


  • Some notifications about the success or failure of create and delete operations in Administration Portal are difficult to understand.

    Workaround: Monitor the create, update, or delete status of the object in the object table.


  • You cannot add a firewall rule for the UTM function in a network service that uses the vSRX VNF.


  • Deactivating an SRX Series Services Gateway acting as a CPE device might not remove all configuration settings from the device.

    Workaround: Manually delete the configuration settings from the SRX Series Services Gateway.


  • You cannot deploy two network services simultaneously on a CPE device.

    Workaround: Deploy only one network service on a CPE device.


  • The device profile srx-deployment-option-1 assigns OAM traffic to the fxp0 interface, which is not available on the SRX Series Services Gateway.

    Workaround: Edit the stage 1 configuration for the CPE device in Customer Portal to use an interface other than fxp0 for OAM traffic. [CXU-3779]

  • The traffic rate value does not change when you monitor a service on an SRX Series Services Gateway in Customer Portal.

    Workaround: None


  • The NFX250 device does not receive communications to block unicast reverse path forwarding (uRPF) because two interfaces on the NFX250 device communicate separately with one interface on the regional microservices server.

    Workaround: Disable the uRPF check in JDM on all interfaces for each NFX Series device.


  • You must use a different router for a PE in a distributed deployment and an SDN gateway in a centralized deployment. You cannot use the same router for both of these functions.

    Workaround: None


  • You must configure the VLAN settings for an NFX250 device before you configure the Silver Peak VX VNF in Customer Portal.


  • An end user cannot change the password for Customer Portal if the current password is not available.

    Workaround: Delete and re-create the customer with Administration Portal or the API.


  • You cannot edit the settings for a customer in Administration Portal.

    Workaround: Use Administration Portal to import a JSON file that contains the correct data for the customer. [CXU-4538]

  • You can only view one network service at a time on a CPE device in Customer Portal.


  • When you configure the MX Series router as an IPsec concentrator in a distributed deployment, you must specify the Internet Gateway of the IPsec concentrator in the default routing instance. Otherwise, the IPsec tunnel is not established.


  • You must specify a target URL if you select http-get for the probe type when you configure IP monitoring for a CPE device in Customer Portal, Network Service Designer, or the APIs. Otherwise, the configuration fails.


  • Deployment of the .NFX Series device behind NAT is not supported.

    Workaround: None


  • After you install CSO, the username and password that CSO uses to access Contrail Analytics may not match the corresponding username and password in Contrail Analytics,

    Workaround: Complete the following actions:

    1. Log in to the CSO central infrastructure VM as root
    2. Verify the username is admin.
      root@host:~/# etcdctl get /csp/infra/contrailanalytics/queryuser admin
    3. Verify the password is contrail123.
      root@host:~/# etcdctl get /csp/infra/contrailanalytics/querypassword contrail123

      If the user name and password match the required values, you do not need to take further action.

    If the username and password do not match the required values, update them on the central infrastructure VM as follows:

    1. Log in to the CSO central infrastructure VM as root
    2. Update the username and password.
      root@host:~/# etcdctl set /csp/infra/contrailanalytics/queryuser admin
      root@host:~/# etcdctl set /csp/infra/contrailanalytics/querypassword contrail123
    3. Log in to the regional infrastructure VM as root.
    4. Update the username and password.
      root@host:~/# etcdctl set /csp/infra/contrailanalytics/queryuser admin
      root@host:~/# etcdctl set /csp/infra/contrailanalytics/querypassword contrail123


  • The configuration for a CPE device might not be removed when you deactivate the device in Administration Portal.

    Workaround: To deactivate the CPE device, first delete the configuration from the CPE device with Customer Portal, and then deactivate the device with Administration Portal. [CXU-6059]

  • You cannot edit or delete login credentials that you configure for a tenant when you create the tenant in Administration Portal.

    Workaround: Delete the tenant and re-create it. [CXU-6217]

  • You cannot edit the Deployment Type (vCPE-Only or uCPE-Only) in a request that you create with Network Service Designer.

    Workaround: Create a new request. [CXU-6474]

  • Remote activation of an NFX250 device might fail because a VNF can not be activated.

    Workaround: Use Administration portal to delete the device and then re-configure its activation data. [CXU-6576 ]

  • After you have assigned a device template to a CPE device in Administration Portal, you might not be able to change the device template.

    Workaround: Use Administration Portal to delete the on-premise site for the CPE device and then re-create the site. [CXU-6648]

  • Using Heat v2 API on Contrail 3.0.2, we support only 120 Contrail Service Orchestration instances for a centralized deployment. Use of more Contrail Service Orchestration instances for a centralized deployment results in high latency and timeout issues due to Contrail bug

    Workaround: Use fewer than 120 Contrail Service Orchestration instances for a centralized deployment with Heat v2 API or use Heat v1 APi for larger numbers of Contrail Service Orchestration instances.


  • After you complete an operation in Customer Portal, the GUI might not update to show the latest status.

    Workaround: Refresh the Web page in Customer Portal.


  • Device templates do not contain an option for configuring the root password of a CPE device.

    Workaround: Configure the root password on the CPE device.


  • Remote activation of an NFX Series CPE device configured for SD-WAN may fail.

    Workaround: Repeat the activation for the CPE device.


  • The design tools may not be available when you install Contrail Service Orchestration.

    Workaround: Log in as root to the centralmsvm VM and restart the restart the csp-design-tools pod.


  • If you import a JSON file that contains details of multiple CPE devices into Administration Portal, some devices may not be detected.

    Workaround: Reimport the JSON file.


  • Device templates do not contain an option that provides the IP address and port details that customers need to log into a VNF on a NFX Series device.

    Workaround: Log in to the NFX Series device through the console and get the IP address of the gateway router (GWR) internet ports.


  • TCP ports other than port 22 are blocked by the security group that is created when a network service in a centralized deployment is activated.

    Workaround: Configure the security group manually to open the required ports.


  • You cannot use the Activate Device option in Customer Portal to activate a vSRX CPE device.

    Workaround: Paste the stage-1 configuration for the device from the Monitor page in Customer Portal into the console screen of the vSRX instance and commit the configuration.


  • The utility on the Monitor page in Customer Portal for dragging a dropping a network service might not work.

    Workaround: Clear your browser cache and repeat the drag and drop operation.


  • The Activate Device status for an on-premise site on the Monitor page in Customer Portal may persist after you activate the CPE device.

    Workaround: After you activate a device, log out of Customer Portal and log in again. Customer Portal displays the correct status for the device activation.


  • The provision_vm tool that you can use to provision virtual machines during Contrail Service Orchestration installation requires Internet access.

    Workaround: Provision the VMs manually if you do not use Internet access for the installation.


  • You might not be able to access a third-party VNF through SSH if you have more than one NFX Series device in the same layer 2 network.

    Workaround: Use only one NFX Series device in a layer 2 network.


  • Application data on an SD-WAN link for an SRX CPE device might not be visible.

    Workaround: None


  • Information might be missing from the log files associated with importing tenants.

    Workaround: None


  • The location of a site or POP ion the geographical map on the Monitor page in Administration Portal might not be correct, even though the street address is correct.

    Workaround: None


Modified: 2017-07-25