Configuring Stage-2 Initial Configuration in a Device Template

In general, the tenant administrators initiate stage-2 configuration through Customer Portal. However, in certain cases, the same stage-2 configuration needs to be deployed to CPE devices in all sites that are activated using a specific device template. In such cases, you can attach an initial configuration to a stage-2 configuration template of a device template. When a new CPE device in the site is activated using the device template, the initial configuration is automatically deployed to the CPE device.

The list of initial configurations that are supported are:

Policies configuration
LAN configuration
SD-WAN configuration
Routing configuration
APN configuration

To update an initial configuration for stage-2 configuration template:

Select Resources > Templates > Device Templates.
The Device Templates page appears.
Select the device template for which you want to configure the stage-2 configuration and then select Edit Device Template > Stage-2 Initial Config.
The Stage-2 Initial Configuration page appears, listing the existing settings.
Complete the configuration settings according to the guidelines provided in Table 1, Table 2, and Table 3 and Table 4.
Click Ok.

Table 1: Fields for the VLAN Settings on the Stage-2 Initial Configuration Page
Field	Description
VLAN ID	Specify the identifier for the Layer 2 VLAN for the CPE device. Example: 230
IRB IP Prefix	Specify the IP address, including the subnet prefix, and the integrated routing and bridging (IRB) interface on the CPE device. Example: 192.0.2.15/24
LAN Ports	Specify the LAN ports on the CPE device. Example: ge-0/0/0

Table 2: Fields for the LAN Settings on the Stage-2 Initial Configuration Page
Field	Description
LAN port	Specify the LAN ports on the CPE device. Example: ge-0/0/0
IP Address	Specify the IP address on the CPE device. Example: 192.0.2.255

Table 3: Fields for the SRX Basic SD-WAN Settings on the Stage-2 Initial Configuration Page
Field	Description
Manage App Group	Click to manage the application groups. The application group is predefined in the system for all SRX Series and vSRX Virtual Firewall configuration settings. The settings are preloaded and displayed on the portal. You can also create new application groups.
Manage App SLA Profile	Click to manage the application service-level agreements (SLA) profiles.
Rule Name	Specify the rule name. Example: critical-apps
Application/Groups	Specify the applications or application groups for the rule. Example: Oracle, SAP
Application SLA Profile	Specify the application SLA profile for the rule. Example: critical-apps

Table 4: Fields for the APN Configuration Settings on the Stage-2 Initial Configuration Page
Field	Description
Use default APN settings	Click the toggle button to change the default APN settings. Enabled—Select this option to use the default APN setting that is shipped along with the CPE device. This is the default option. Disabled—Select this option to configure the APN settings.
APN Settings
APN Name	Enter the access point name (APN) of the gateway router.
SIM Change Required	Click the toggle button to change the SIM card. You change the SIM card either to use a different LTE service provider or to use a private APN with the current LTE service provider. Enabled—Select this option to change the APN settings and to use a new SIM card. This is the default option. Disabled—Select this option to change the APN settings without changing the SIM card.
Authentication Method	Select the authentication method for the APN configuration. PAP— Select to use Password Authentication Protocol (PAP) authentication. This is the default option. CHAP— Select to use Challenge Handshake Authentication Protocol (CHAP) authentication. None—Select to indicate that there is no authentication method.
Authentication Information
SIP User ID	Enter the Session Initiation Protocol (SIP) user ID for authentication.
SIP Password	Enter the SIP password for authentication.

Configuring Stage-2 Initial Configuration in a Device Template

Related Documentation