Flex Software License for Contrail
Contrail Service Orchestration
Table 1 describes the standard and advance license model support with use case examples for the Contrail Service Orchestration (CSO) software. Table 2 lists the supported devices categorized into device classes.
Figure 1 shows CSO features for the standard and advanced licenses.

Table 1 describes the Flex Software License Model support with use case examples for the Contrail Service Orchestration (CSO) software.
License Model |
Use Case Examples or Solutions |
Features Supported |
---|---|---|
Standard |
Hybrid WAN, next-generation firewall management, and SD-LAN |
A,B, and C class devices supports the following features: Authentication for VPNs, firewall, hybrid WAN-dual WAN links (active/backup), NAT, security event logs and reporting, single-WAN link-managed CPE, user firewall, UTM, and zero-touch provisioning (ZTP) for CPE devices. D and E class devices supports the following features: Automated switch deployment through ZTP, LAN configuration and monitoring, Mist Wi-Fi integration, switch management, and virtual chassis (VC). For more information on device categories, see Table 2. |
Advanced |
Hybrid WAN, next-generation firewall management, and SD-WAN |
A,B, and C class devices supports the following features: APBR, AppQoE, Authentication for VPNs, AWS cloud endpoint, bandwidth-optimized SLA (RPM), dual CPE, firewall, full mesh or dynamic VPN, hub multihoming, hybrid WAN-dual WAN links (active/backup), Internet Zscaler breakout, NAT, network segmentation, real-time-optimized SLA (AppQoE), SD-WAN up to four WAN links (active/active), security event logs and reporting, single-WAN link-managed CPE, SLA-based dynamic path selection, user firewall, UTM, and zero-touch provisioning (ZTP) for CPE devices For more information on device categories, see Table 2. |
CSO supports various Juniper Networks devices. Table 2 lists the supported devices categorized into device classes.
Device Class |
Supported Devices |
|
---|---|---|
A |
SD-WAN Supported Devices |
Next-Generation Firewall |
|
Next-Generation Firewall Devices
|
|
B |
|
Next-Generation Firewall Devices
|
C |
|
Next-Generation Firewall Devices
|
D |
Class D does not support any SD-WAN devices |
SD-LAN Devices
|
E |
Class E does not support any SD-WAN devices |
SD-LAN Devices
|