Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Customer Portal FAQ

This topic presents frequently asked questions and answers about Customer Portal.

How do I get started with Customer Portal?

To get started and quickly learn the basics of Customer Portal, access the Customer Portal Getting Started guide by clicking the help ? icon and selecting Getting Started.

How do I log in to Customer Portal?

When a Contrail Service Orchestration (CSO) account is created for you, an account activation e-mail is sent containing:

  • Your username (e-mail address you used to create the CSO account).
  • A link to set your password. The link expires in 24 hours or after it is used.
  • A link to the CSO portal.

After setting the password, you can log in using the CSO portal link. You can bookmark the CSO portal link for easy access. For more information, see Accessing Customer Portal.

I forgot my password and I am unable to log in. What should I do?

You can reset your password from the CSO login page. Access the login page and enter your username in the first field (Username). Click the Forgot Password? link and follow the instructions to reset your password.

Is there a recommended browser for accessing CSO GUIs?

We recommend that you use Google Chrome (Version 60 or later) or Firefox (Version 78 or later) to access CSO GUIs.

How do I navigate within the Customer Portal?

You can easily navigate within Customer Portal using the left side menu (default) on every page. The actions that you can perform depends on your role and access privileges. For more information, see Customer Portal Overview.

Where can I view the deployment status of my policies?

You can view the policies that are awaiting deployment by clicking the pending deployments icon on the banner. Alternatively, you can view and manage deployments from the Jobs page (Monitor > Jobs).

What is the character limit for a site name?

The site name can contain alphanumeric characters and hyphens (-) and must not exceed 32 characters.

What type of sites can a Tenant Administrator add?

Tenant Administrator users can add:

  • On-premise spoke sites with the following capabilities:
    • SD-WAN
    • Next-generation firewall
  • Cloud spoke sites
  • Provider hub sites
  • Enterprise hub sites

Can Tenant Administrator users upload device images for the devices from Customer Portal?

No. Tenant Administrator users can view the list of device images that are uploaded by the Service Provider (SP) administrator or the Operating Company (OpCo) administrator users.

Can Tenant Administrator users add device or CSO license files from Customer Portal?

Tenant Administrator users can:

  • add and push device license files from the Device License Files page (Administration > License> Device Licenses).
  • view the list of CSO license files (added by SP or OpCo administrator users) from the CSO Licenses page (Administration > License> CSO Licenses).

How many WAN links of a site can have LTE, ADSL, or VDSL access type?

You can select only one WAN link with LTE, asymmetric digital subscriber line (ADSL), or very-high-bit-rate digital subscriber line (VDSL) access type.

Is it mandatory to specify an activation code that customers must enter in Customer Portal when they activate their CPE devices?

No; specifying an activation code for CPE devices is optional. If you do not want to specify an activation code, on the Template Settings page (Resources > Device Template > Device-Template-Name > Edit Device Template > Template Settings), disable the ACTIVATION_CODE_ENABLED field and save the changes.

Can I configure APN settings on all CPE devices?

Currently, Access Point Name (APN) configuration is supported only on LTE WAN links. CSO supports LTE WAN links on NFX150 and NFX250 CPE devices.

Can I configure APN settings while onboarding the CPE device?

No, you cannot configure the APN settings while onboarding the CPE device. After successful device activation, you can configure the APN settings by using a stage-2 configuration template.

How do I activate SRX4100 and SRX4200 CPE devices?

The phone-home client (PHC) is not present on SRX4100 and SRX4200 CPE devices. Therefore, you must manually activate an SRX4100 or SRX4200 device by copying the stage-1 configuration from CSO, pasting it to the device CLI, and committing the configuration.

What is a department?

A department is a grouping of LAN segments within a site. You use departments to apply specific policies to LAN segments that are members of a department.

What is an enterprise hub site?

An enterprise hub site is an SD-WAN site that is used to carry site-to-site traffic between on-premise spoke sites and to break out backhaul (central breakout) traffic from on-premise spoke sites. An enterprise hub site typically has a data center department behind it; however, this is not enforced in Contrail Service Orchestration (CSO). In releases earlier than CSO 5.0.0, enterprise hub sites were called gateway sites.

What are the differences between a provider hub and an enterprise hub?

The following table explains the differences between a provider hub and a enterprise hub:

Table 1:
  Provider Hub Enterprise Hub
Tenant Support Shared between multiple tenants of an OpCo or a service provider Specific for a single tenant
Can be Added by SP Administrator or OpCo Administrator Tenant Administrator
Cloud Spoke Support Supported Not supported
Dynamic Mesh Support Not supported Supported
Backhaul (Central Breakout) Support Supported Supported
Meshing Between a Spoke Site and a Hub Not supported Supported
Meshing Between Two Hubs (Provider hub-Provider hub or Enterprise hub-Enterprise hub) Supported only through customized stage-2 configurations Supported
Breakout to Internet Supported Supported. However, you need to enable Enable Local Breakout and Autocreate Source NAT Rule for WAN link on the Add Site page.
LTE Supported Supported

What are the different types of logs available in CSO? For how long are these logs saved?

Table 1 lists the different types of logs and the time duration for which these logs are saved.

Table 2: Logs and Their Retention Period
Log Description Retention Period
Apptrack Logs Traffic logs that are generated by Junos OS devices for events such as session create, session delete, and session update. 1 day

See the Note in this table for on-premises installations.
Audit Logs A record of activities that affected a specific operation or procedure. Audit logs are useful for tracing events and for maintaining historical data. Retained for the duration of a tenant in CSO if not purged earlier by the tenant.
Job logs Provide details of the tasks executed in each workflow; for example, add, edit, delete, clone, and so on. Retained for the duration of a tenant in CSO.
Junos OS logs Logs that are generated by the Junos OS devices for events related to firewall, web filtering, Intrusion Prevention System (IPS), and spams. 30 days

See the Note in this table for on-premises installations.
Note: For an on-premises installation, the Apptrack logs and Junos OS logs are stored for the specified number of days or till 70% of the disk space is consumed, whichever is earlier. When 70% of the disk space is consumed, the oldest log record is deleted.

Can I add sites without entering serial number?

From CSO Release 5.4.0 onward, a tenant administrator can add on-premises spoke sites, enterprise hub sites, and provider hub sites without entering serial number of the CPE device. You must enter the serial number (or serial numbers for a dual CPE device) when activating the site later.