Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Updating Stage-2 Configuration Template in a Device Template

Each device template has a set of configuration templates that can be used to deploy additional configuration on to the CPE device after it is activated. These templates are known as stage-2 configuration templates. You can add or remove stage-2 configuration templates from a device template.

Note:

By default, the CPE device configuration is not supported on the CPE device. If you need the CPE device configuration, then you must configure it through stage-2 configuration in the device templates.

To add a stage-2 configuration template:

  1. Select Resources > Templates > Device Template.

    The Device Templates page appears.

  2. Select a device template for which you want to add the stage-2 configuration and select Edit Device Template > Stage-2 Config Templates.

    The Stage-2 Configuration Templates page appears. Table 1 lists the fields (and their descriptions) on the Stage-2 Configuration Templates page.

  3. Click the add icon (+) and complete the configuration settings according to the guidelines provided in Table 2.
  4. Click Save.

    The new stage-2 configuration template is included in the device template.

Table 1: Fields on the Stage-2 Configuration Templates Page

Name

Description

Name

View the name of the stage-2 configuration template.

Example: LAN side config

Component Name

View the name of the component through which the settings are configured. The components that are currently supported are:

  • JUNOS—Supported only on SRX Series Services Gateway.

  • Juniper Device Manager (JDM)—Supported on NFX250 device. JDM is a Linux container that manages software components.

  • Juniper Control Plane (JCP)—Supported on NFX250 device. JCP is the Junos VM running on the hypervisor. Administrators can use JCP to configure the network ports of the NFX250 device. JCP is used to configure the switching and routing function on the NFX250 device.

  • Gateway Router (GWR)—Supported on NFX250 device. vSRX Virtual Firewall as a gateway provides the same capabilities as Juniper Networks SRX Series Firewalls in a virtual form factor, providing perimeter security, IPsec connectivity, and filtering for malicious traffic without sacrificing reliability, visibility, or policy control. This virtual security and routing appliance ensures reliability and high availability for each application.

Example: JUNOS

Hide

Displays whether the template is hidden on Customer Portal.

  • true—Template is not visible on Customer Portal.

  • false—Template is visible on Customer Portal.

Example: false

Copy input from

Displays the template from which you copied the settings.

Auto Deploy

Displays whether the stage-2 configuration is automatically pushed to the device during ZTP process.

Enable for

Displays whether the stage-2 configuration template is enabled for all tenants, no tenants, or specific tenants.

Table 2: Fields on the Add New Template Page

Name

Description

Template

Select the configuration template from the drop-down list.

Example: srx-basic-sdwan-cpe-config

Display Name

Specify the name of the template that you want to display on the configuration interface.

Example: SDWAN Config

Component Name

Specify the component name through which the settings are configured. The components that are currently supported are:

  • JUNOS—Supported on SRX Series Services Gateway.

  • Juniper Device Manager (JDM)— Supported on NFX250 device. JDM is a Linux container that manages software components.

  • Juniper Control Plane (JCP)—Supported on NFX250 device. JCP is the Junos VM running on the hypervisor. Administrators can use JCP to configure the network ports of the NFX250 device. JCP is used to configure the switching and routing function on the NFX250 device.

  • Gateway Router (GWR)—Supported on NFX250 device. vSRX Virtual Firewall as a gateway provides the same capabilities as Juniper Networks SRX Series Firewalls in a virtual form factor, providing perimeter security, IPsec connectivity, and filtering for malicious traffic without sacrificing reliability, visibility, or policy control. This virtual security and routing appliance ensures reliability and high availability for each application.

Example: JUNOS

Hide

Specify whether you want to hide the configuration template on Customer Portal. You might want to choose to hide the template if you are reusing the template for multiple components.

  • hide—White dot on right with blue background.

  • show—White dot on left with gray background.

Example: hide

Copy From Template

If you have chosen to hide the configuration template on the user interface, then specify the template from which you want to copy the settings.

Example: srx-mis-lan-to-wan-config

Auto Deploy

Specify whether the stage-2 configuration must be automatically pushed to the device during ZTP process. The available options are

  • Same as global settings

  • Yes

  • No

Enabled for

You can enable the stage-2 configuration template for all tenants, specific tenants, an SP administrator or an OpCo administrator.

Note:

Only users with SP administrator or OpCo administrator role can enable stage-2 configuration templates.

The available options are:

  • All Tenants—Select this option to enable stage-2 configuration template for all tenants. Both SP and OpCo administrators can view templates for all tenants by switching the scope to the specific tenant. By default, stage-2 configuration templates assigned to all tenants are automatically applied to any new tenant.

  • No Tenants—Select this option to enable stage-2 configuration template for an SP administrator or an OpCo administrator. An SP administrator can modify the stage-2 configuration template. An OpCo administrator cannot modify the stage-2 configuration template. However, an OpCo administrator can clone the stage-2 configuration template and then modify the template.

  • Selective Tenants—Select this option to enable stage-2 configuration template for specific tenants. A tenant administrator can view and manage stage-2 template for a specific tenant.

    When you select the Selective Tenants option, the Tenants section is displayed.

    Select one or more tenants. Click the greater-than icon (>) to move the selected tenant or tenants from the Available column to the Selected column. You can use the search icon on the top right of each column to search for tenant names.

The default option is All Tenants.

To remove a stage-2 configuration template:

  1. Select Resources > Templates > Device Templates.

    The Device Templates page appears.

  2. Select the device template for which you want to remove the stage-2 configuration and then select Edit Device Template > Stage-2 Config Templates.

    The Stage-2 Config Templates page appears.

  3. Select a configuration template and click the delete icon (X).

    A page requesting confirmation for the deletion appears.

  4. Click Yes to confirm that you want to delete the stage-2 configuration template.

    The configuration template is deleted.