Software Licenses for Contrail Service Orchestration

Contrail Service Orchestration supports subscription licenses.

Go through the following tables:

• CSO Software Licenses

• CSO Supported Devices

• Legacy Licenses for Contrail Service OrchestrationLegacy Licenses for Contrail Service Orchestration

Table 1: CSO Software Licenses

Features with License	Advanced: A, B, and C class devices	Standard: A, B, and C class devices	Standard: D and E class devices
Use Case	Hybrid WAN, next-generation firewall management, and SD-WAN	Hybrid WAN, next-generation firewall management, and SD-LAN	Hybrid WAN, next-generation firewall management, and SD-LAN
Authentication for VPNs	Supported	Supported	Not Supported
Firewall	Supported	Supported	Not Supported
Hybrid WAN-dual WAN links (active/backup)	Supported	Supported	Not Supported
NAT	Supported	Supported	Not Supported
Security event logs and reporting	Supported	Supported	Not Supported
Single-WAN link-managed CPE	Supported	Supported	Not Supported
User firewall	Supported	Supported	Not Supported
Content Security	Supported	Supported	Not Supported
Zero-touch provisioning (ZTP) for CPE devices	Supported	Supported	Not Supported
Automated switch deployment through ZTP	Not Supported	Not Supported	Supported
LAN configuration and monitoring	Not Supported	Not Supported	Supported
Mist Wi-Fi integration	Not Supported	Not Supported	Supported
Switch management	Not Supported	Not Supported	Supported
Virtual chassis (VC)	Not Supported	Not Supported	Supported
APBR	Supported	Not Supported	Not Supported
AppQoE	Supported	Not Supported	Not Supported
AWS cloud endpoint	Supported	Not Supported	Not Supported
Bandwidth-optimized SLA (RPM)	Supported	Not Supported	Not Supported
Dual CPE	Supported	Not Supported	Not Supported
Full mesh or dynamic VPN	Supported	Not Supported	Not Supported
Hub multihoming	Supported	Not Supported	Not Supported
Internet Zscaler breakout	Supported	Not Supported	Not Supported
Network segmentation	Supported	Not Supported	Not Supported
Real-time-optimized SLA (AppQoE)	Supported	Not Supported	Not Supported
SD-WAN up to four WAN links (active/active)	Supported	Not Supported	Not Supported
SLA-based dynamic path selection	Supported	Not Supported	Not Supported

For more information on device categories, see Table 2 CSO supported Device Classification.

Table 2: CSO Supported Devices

Device Class	Supported Devices
A	SD-WAN Supported Devices	Next-Generation Firewall
	CPE/Spoke (<250) SRX300 line of devices with Junos Software Enhanced (JSE) NFX150 vSRX (2 vCPUs)	Next-Generation Firewall Devices Next-Generation Firewall services with Junos Software Enhanced (JSE) SRX300 line of devices vSRX (2 vCPUs)
B	CPE/Spoke (<1Gbps) NFX250 SRX550 with Junos Software Enhanced (JSE) vSRX (5 vCPUs) Enterprise Hub Devices (Gateway) (<1Gbps) SRX1500 (CSO release 5.0x onwards) Services gateways with Junos Software Enhanced (JSE) Cloud Hub Devices (<1Gbps) SRX1500 Services gateways with Junos Software Enhanced (JSE)	Next-Generation Firewall Devices Next-Generation Firewall services with Junos Software Enhanced (JSE) vSRX (5 vCPUs)
C	Enterprise Hub Devices (Gateway) (>1Gbps) SRX4100 and SRX4200 Services gateways with Junos Software Enhanced (JSE) Cloud Hub Devices (>1Gbps) Services gateways with Junos Software Enhanced (JSE) SRX4100 and SRX4200 vSRX (7 or 19 vCPUs)	Next-Generation Firewall Devices Next-Generation Firewall services with Junos Software Enhanced (JSE) vSRX (7 or 19 vCPUs)
D	Class D does not support any SD-WAN devices	SD-LAN Devices EX2300, EX3400, and EX4300 switches
E	Class E does not support any SD-WAN devices	SD-LAN Devices EX4600 and EX4650 switches

To access this page, click Administration > Licenses> Device Licenses.

You can use the Device License Files page to upload licenses for devices and virtual network services from your local file system. Each device license file should contain only one license key. A license key is required to enable various features including virtual network services such as application-based routing, application monitoring, and vSRX Virtual Firewall security features.

Tasks You Can Perform

You can perform the following tasks from this page:

• Add device license files. See Uploading a License File.

• Edit and delete device license entries.

• Push licenses to devices.

• View details of a device license. Click the details icon that appears when you mouse over the row for each license file or click More > Details. See Viewing Object Details.

• Show or hide columns about the device license files.

• Sort the device license files. See Sorting Objects.

• Search an object about the device license files. See Searching for Text in an Object Data Table.

Field Descriptions

describes the fields on the License Files page.

Table 3: Fields on the License Files Page

Field	Description
File Name	Displays the filename of the license. Example: license_Image_v1.txt
Description	Displays the description of the license. Example: License file for application routing.
Tenant	Displays the name of the tenant if the license is associated with a tenant. Example: Tenant 1
Uploaded By	Displays the administrator who uploaded the license. Example: test_admin
Uploaded	Displays the date and time when the license was uploaded. Example: Jun 5, 2018, 12:41:08 PM
Devices	Displays the number of devices to which the license is pushed. Click the number to view the devices to which the license is pushed.

Uploading a Device License File

To upload a device license file:

1. Click Administration > Licenses > Device Licenses.

   The Device License Files page appears.

2. Click the plus icon (+).

   The Add Device Licenses page appears.

3. In the Device License File field, specify the location of the license file that you want to upload. Alternatively, you can click Browse to navigate to the file location and select the file.

   Note:

   Each license file should contain only one license key.

4. (Optional) From the Tenants list, select the tenant to which you want to associate the license file.

   If you associate a license with a tenant, you can apply that license only to devices that belong to that tenant. If a tenant has licenses associated with the tenant, when a device is activated during ZTP, a matching license from the licenses associated with the tenant is downloaded to the device.

   You can apply a license that is not associated with a tenant to any device of any of the tenants. During ZTP, when a device is activated for a tenant that does not have any license associated with it, a matching license from the licenses that are not associated with any tenant is downloaded to the device.

5. In the Description field, enter a description for the license that you want to upload.

6. Click OK to upload the license.

   You are returned to the Device License Files page.

Editing a Device License Entry

You can edit a device license entry to modify the description for the license file.

1. Click Administration > Licenses > Device Licenses.

   The Device License Files page appears.

2. Select the device license for which you want to modify the description and click the Edit icon.

   The Update Device License page appears.

3. Update the description.

4. Click OK to save the changes. To discard the changes, click Cancel.

   If you click Cancel, a confirmation message appears. Click Yes to confirm that you want to cancel the update.

Deleting a Device License

To delete a device license:

1. Click Administration > Licenses > Device Licenses.

   The Device License Files page appears.

2. Select the device license that you want to delete and click the delete icon.

3. In the confirmation message, click Yes to delete the device license.

   To cancel the delete operation, click No.

Pushing a License to Devices

You can push licenses on to devices from the Licenses page of the Administration portal. If a license is associated with a tenant, you can push that license only to devices associated with that tenant. However, if no tenant is associated with a license, you can apply the license to any device that belongs to any tenant.

When a license is applied to a device, the license information is added to the device object. When the same license is pushed to the device again, a device-level error message is created. Similarly, if a pushed license does not match a device, the device generates an error message.

To push a license to a device:

1. Click Administration > Licenses > Device Licenses.

   The License Files page appears.

2. Select the license that you want to push to a device.

   The Push License button is enabled.

3. Click the Push License button.

   The Push License page appears.

4. From the Tenants list, select the tenant associated with the site and devices to which you want to apply the license.

   Note:

   If the license has already been associated with a tenant, you cannot select a different tenant. You can apply the license only to the sites and devices associated with the tenant.

   Sites and devices associated with the selected tenant appear.

5. Select the sites and devices to which you want to apply the license and click Push Licenses.

   CSO applies the license to the selected devices.

About the CSO Licenses Page

To access this page, click Administration > Licenses > CSO Licenses.

Users with the OpCo Administrator role can use the CSO Licenses page to view information about the CSO licenses issued by the SP administrator, assign the licenses to one or more tenants, and update or unassign license assignments.

Tasks You Can Perform

You can perform the following tasks from this page:

• Assign CSO licenses to one or more tenants.

• View the tenants previously assigned to a CSO license—Click assigned-number corresponding to a license. The View Assigned page appears displaying the tenants and quantity assigned to each tenant.

• Update or unassign CSO license assignments.

• Search for CSO licenses by using keywords—Click the search icon and enter the search term in the text box and press Enter. The search results are displayed on the same page.

  You can search using license SKU, sales order, type, tier, or device class.

• Sort CSO licenses—Click a column name to sort based on the column name.

  Note:

  Sorting is applicable only to some fields.

• Show or hide columns—Click the Show Hide Columns icon at the top right corner of the page and select the columns that you want displayed on the CSO Licenses page.

Field Descriptions

Table 4: Fields on the CSO Licenses Page

Field	Description
License SKU	Displays the license SKU name; for example, S-CSO-C-S1-A-3.
Sales Order	Sales order number; for example, 15563238.
Type	Type of site—on-premise or cloud.
Tier	Support tier associated with the license; for example, Standard.
Device Class	Class of the Juniper device associated with the license; for example, B-class.
SSRN	Software support reference number, which is necessary to identify your purchase order when you contact Juniper Networks for support
Start Date	Date (in MMM DD, YYYY format) from which the license is valid; for example, Aug 29, 2019.
End Date	Date (in MMM DD, YYYY format) up to which the license is valid. CSO calculates the end date based on the validity of the license SKU.
Device Quantity	Total number of devices (that the tenant can add) that you can assign for a license.
Available	Available number of devices (that the tenant can add) that you can assign to tenants.
Assigned	Number of devices (that the tenant can add) that are already assigned to one or more tenants: Click assigned-number to view the tenants and quantity assigned for each tenant. The View Assigned page appears displaying the tenants and quantity assigned to each tenant. If the CSO license is not assigned to any tenants, click Assign to assign the license to one or more tenants.

Assign CSO Licenses, and Update or Unassign CSO License Assignments

Users with the Operating Company (OpCo) Administrator role can:

• Assign a CSO license to one or more tenants.

• Update the assignment of a CSO license that was previously assigned to one or more tenants.

• Unassign a CSO license that was previously assigned to a tenant.

Assign CSO Licenses to Tenants

To assign a CSO license that is not yet assigned to a tenant:

1. Select Administration > Licenses > CSO Licenses.

   The CSO Licenses page appears.

2. Click the Assign link corresponding to the license that you want to assign (in the Assigned column).

   The Assign CSO License page appears.

3. Configure the fields according to the guidelines.

4. Click Assign.

   CSO validates the quantities that you assigned against the total quantity for the license:

   • If the sum of assigned quantities is greater than the total quantity, an error message is displayed. You must then modify the assigned quantities to proceed.

   • If the sum of assigned quantities is less than or equal to the total quantity, a job is triggered. You are returned to the CSO Licenses, and a confirmation message is displayed on the top of the page. After the job completes successfully, the CSO Licenses page displays the updated information in the Available and Assigned columns.

Table 5: Fields on the Assign CSO License Page

Field	Description
License Information	Displays the following information for the license: Sales Order License SKU Start Date
License Assignment
Device Quantity	Displays the total quantity that can be assigned to tenants.
Available	Displays the available quantity that can be allocated to tenants.
Tenants List	To assign the license to one or more tenants: Click the + icon. A row is added to the grid and selected. In the Tenant column, select the tenant to which you want to assign the license. In the Device Quantity column, enter the quantity that you want to assign to the tenant. Click √ (check mark) to save your changes. (Optional) Click the pencil icon to modify the tenant name or the quantity and click √ (check mark) to save your changes. (Optional) Repeat the steps if you want to assign the license to additional tenants.

Update or Unassign CSO License Assignments

For a CSO license that is already assigned to one or more tenants, to update or unassign the license assignment:

1. Select Administration > Licenses > CSO Licenses.

   The CSO Licenses page appears.

2. Select the license for which you want to update or unassign the license assignment and click the Update Assignment button.

   The Assign CSO License page appears.

3. From the list of tenants displayed in the grid, select the tenant (row) and do one of the following:

   • To update the license assignment:

     1. Click the edit (pencil) icon.

     2. In the Device Quantity column, modify the device quantity.

     3. Click √ (check mark) to save your changes.

        The modification that you made is displayed in the grid.

   • To unassign the license assignment:

     1. Click the delete (trash can) icon.

        A popup appears asking you to confirm the unassign operation.

     2. Click Yes.

        The license is unassigned from the tenant that you selected, and the tenant is removed from the grid.

4. (Optional) If the available quantity is non-zero, you can assign the license to additional tenants.

5. Click Assign.

   CSO validates the modifications against the total device quantity for the license:

   • If the sum of assigned quantities is greater than the total quantity, an error message is displayed. You must then modify the assigned quantities to proceed.

   • If the sum of assigned quantities is less than or equal to the total quantity, a job is triggered, and you are returned to the CSO Licenses page. A confirmation message is displayed on the top of the page.

     After the job completes successfully, the CSO Licenses page displays the updated information in the Available and Assigned columns.