Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Flex Software License for Contrail

Contrail Service Orchestration

Table 1 describes the standard and advance license model support with use case examples for the Contrail Service Orchestration (CSO) software. Table 2 lists the supported devices categorized into device classes.

Figure 1 shows CSO features for the standard and advanced licenses.

Figure 1: Contrail Service Orchestration Contrail Service Orchestration

Table 1 describes the Flex Software License Model support with use case examples for the Contrail Service Orchestration (CSO) software.

Table 1: CSO SKUs for Standard and Advanced License Model

License Model

Use Case Examples or Solutions

Features Supported

Standard

Hybrid WAN, next-generation firewall management, and SD-LAN

A,B, and C class devices supports the following features:

Authentication for VPNs, firewall, hybrid WAN-dual WAN links (active/backup), NAT, security event logs and reporting, single-WAN link-managed CPE, user firewall, UTM, and zero-touch provisioning (ZTP) for CPE devices.

D and E class devices supports the following features:

Automated switch deployment through ZTP, LAN configuration and monitoring, Mist Wi-Fi integration, switch management, and virtual chassis (VC).

For more information on device categories, see Table 2.

Advanced

Hybrid WAN, next-generation firewall management, and SD-WAN

A,B, and C class devices supports the following features:

APBR, AppQoE, Authentication for VPNs, AWS cloud endpoint, bandwidth-optimized SLA (RPM), dual CPE, firewall, full mesh or dynamic VPN, hub multihoming, hybrid WAN-dual WAN links (active/backup), Internet Zscaler breakout, NAT, network segmentation, real-time-optimized SLA (AppQoE), SD-WAN up to four WAN links (active/active), security event logs and reporting, single-WAN link-managed CPE, SLA-based dynamic path selection, user firewall, UTM, and zero-touch provisioning (ZTP) for CPE devices

For more information on device categories, see Table 2.

CSO supports various Juniper Networks devices. Table 2 lists the supported devices categorized into device classes.

Table 2: CSO supported Device Classification

Device Class

Supported Devices

A

SD-WAN Supported Devices

Next-Generation Firewall

  • CPE/Spoke (<250)

    SRX300 line of devices with Junos Software Enhanced (JSE)

    NFX150

    vSRX (2 vCPUs)

Next-Generation Firewall Devices

  • Next-Generation Firewall servies with Junos Software Enhanced (JSE)

    SRX300 line of devices

    vSRX (2 vCPUs)

B

  • CPE/Spoke (<1Gbps)

    NFX250

    SRX550 with Junos Software Enhanced (JSE)

    vSRX (5 vCPUs)

  • Enterprise Hub Devices (Gateway) (<1Gbps)

    SRX1500 (CSO release 5.0x onwards)

    Services gateways with Junos Software Enhanced (JSE)

  • Cloud Hub Devices (<1Gbps)

    SRX1500

    Services gateways with Junos Software Enhanced (JSE)

Next-Generation Firewall Devices

  • Next-Generation Firewall servies with Junos Software Enhanced (JSE)

    vSRX (5 vCPUs)

C

  • Enterprise Hub Devices (Gateway) (>1Gbps)

    SRX4100 and SRX4200

    Services gateways with Junos Software Enhanced (JSE)

  • Cloud Hub Devices (>1Gbps)

    Services gateways with Junos Software Enhanced (JSE)

    SRX4100 and SRX4200

    MX80, MX104, MX240, MX480, and MX960

    vSRX (7 or 19 vCPUs)

Next-Generation Firewall Devices

  • Next-Generation Firewall servies with Junos Software Enhanced (JSE)

    vSRX (7 or 19 vCPUs)

D

Class D does not support any SD-WAN devices

SD-LAN Devices

  • EX2300, EX3400, and EX4300 switches

E

Class E does not support any SD-WAN devices

SD-LAN Devices

  • EX4600 and EX4650 switches