Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Setting Up a Distributed Deployment



You must send an activation code to the customer for each NFX250 device. The customer’s administrative user must provide this code during the NFX250 installation and configuration process. The Juniper Networks Redirect Service uses this code to authenticate the device.

Before you set up a deployment, complete the following tasks:

  • Publish network services with Network Service Designer.

  • Add or import customers (tenants) in Administration Portal.

  • Allocate networks services to each customer.

After you have installed Contrail Service Orchestration and published network services with Network Service Designer, you use Administration Portal to set up the distributed deployment. The following workflow describes the process:

  1. Log in to Administration Portal.

  2. Access the tenant view for the first customer.

  3. Add an on-premise spoke site for each site in the customer’s network.


    Alternatively customers can add the spoke sites themselves.

  4. Repeat Step 3 for each customer in the network.

  5. Access the All Tenants view for the customers.

  6. Add data for the POPs and provider edge (PE) router.

  7. Upload images for devices used in the deployment, such as the vSRX gateway and the NFX250 device, to the central activation server.

  8. Configure activation data for CPE devices.

  9. Upload VNF images.

  10. Upload and install licenses:

    1. Upload licenses for vSRX and SRX devices and VNFs with the installer tool (see Installing Licenses with the License Tool).
    2. Upload licenses for other VNFS with Administration Portal.
    3. Manually install licenses for other VNFs.
  11. Allocate network services to customers.

  12. Activate CPE devices at customer sites.


    Alternatively customers can add the spoke sites themselves.

    When an administrator installs and configures the NFX250 devices at a customer site, the device automatically interacts with the Redirect Service. The Redirect Service authenticates the device and sends information about its assigned regional server. The device then obtains a boot image and configuration image from the regional server and uses the images to become operational.

    Customers activate SRX Series Services Gateways and vSRX instances acting as CPE devices through Customer Portal.

For detailed information about using Administration Portal, see the Contrail Service Orchestration User Guide.