- play_arrow Customer Portal
- play_arrow Introduction
- Unified Administration and Customer Portal Overview
- Customer Portal Overview
- Switching the Tenant Scope
- Accessing Customer Portal
- Setting Up Your Network with Customer Portal
- Changing the Password on First Login
- Changing the Customer Portal Password
- Resetting the Password
- Extending the User Login Session
- play_arrow Using the Dashboard
- play_arrow Managing Objects
- play_arrow Monitoring Security Alerts and Alarms
- play_arrow Monitoring Security and Device Events
- About the All Security Events Page
- About the Firewall Events Page
- About the Web Filtering Events Page
- About the IPsec VPNs Events Page
- About the Content Filtering Events Page
- About the Antispam Events Page
- About the Antivirus Events Page
- About the IPS Events Page
- About the Device Events Page
- About the Screen Events Page
- play_arrow Monitoring SD-WAN Events
- play_arrow Monitoring Applications
- play_arrow Monitoring Threats
- play_arrow Monitoring Jobs
- play_arrow Managing Devices
- play_arrow Managing Device Images
- play_arrow Configuring Network Services in a Distributed Deployment
- Network Service Overview
- About the Network Services Page
- About the Service Overview Page
- About the Service Instances Page
- Configuring VNF Properties
- vSRX VNF Configuration Settings
- LxCIPtable VNF Configuration Settings
- Cisco CSR-1000v VNF Configuration Settings
- Riverbed Steelhead VNF Configuration Settings
- play_arrow Managing Firewall Policies
- Firewall Policy Overview
- About the Firewall Policy Page
- Creating Firewall Policy Intents
- Editing, Cloning, and Deleting Firewall Policy Intents
- Selecting Firewall Source
- Selecting Firewall Destination
- Firewall Policy Examples
- Firewall Policy Schedules Overview
- About the Firewall Policy Schedules Page
- Creating Schedules
- Editing, Cloning, and Deleting Schedules
- play_arrow Unified Threat Management
- UTM Overview
- Configuring UTM Settings
- About the UTM Profiles Page
- Creating UTM Profiles
- Editing, Cloning, and Deleting UTM Profiles
- About the Web Filtering Profiles Page
- Creating Web Filtering Profiles
- Editing, Cloning, and Deleting Web Filtering Profiles
- About the Antivirus Profiles Page
- Creating Antivirus Profiles
- Editing, Cloning, and Deleting Antivirus Profiles
- About the Antispam Profiles Page
- Creating Antispam Profiles
- Editing, Cloning, and Deleting Antispam Profiles
- About the Content Filtering Profiles Page
- Creating Content Filtering Profiles
- Editing, Cloning, and Deleting Content Filtering Profiles
- About the URL Patterns Page
- Creating URL Patterns
- Editing, Cloning, and Deleting URL Patterns
- About the URL Categories Page
- Creating URL Categories
- Editing, Cloning, and Deleting URL Categories
- play_arrow Managing SD-WAN
- play_arrow Managing NAT Policies
- NAT Policies Overview
- About the NAT Policies Page
- Creating NAT Policies
- Editing and Deleting NAT Policies
- About the Single NAT Policy Page
- Creating NAT Policy Rules
- Editing, Cloning, and Deleting NAT Policy Rules
- Deploying NAT Policy Rules
- Selecting NAT Source
- Selecting NAT Destination
- NAT Pools Overview
- About the NAT Pools Page
- Creating NAT Pools
- Editing, Cloning, and Deleting NAT Pools
- play_arrow Managing SSL Proxies
- SSL Forward Proxy Overview
- About the SSL Proxy Policy Page
- Creating SSL Proxy Policy Intents
- Editing, Cloning, and Deleting SSL Proxy Policy Intents
- Understanding How SSL Proxy Policy Intents Are Applied
- About the SSL Proxy Profiles Page
- Creating SSL Forward Proxy Profiles
- Editing, Cloning, and Deleting SSL Forward Proxy Profiles
- Configuring and Deploying an SSL Forward Proxy Policy
- play_arrow Managing Shared Objects
- Addresses and Address Groups Overview
- About the Addresses Page
- Creating Addresses or Address Groups
- Editing, Cloning, and Deleting Addresses and Address Groups
- Services and Service Groups Overview
- About the Services Page
- Creating Services and Service Groups
- Creating Protocols
- Editing and Deleting Protocols
- Editing, Cloning, and Deleting Services and Service Groups
- Application Signatures Overview
- About the Application Signatures Page
- Creating Application Signature Groups
- Editing, Cloning, and Deleting Application Signature Groups
- About the Departments Page
- Creating a Department
- Modifying a Department
- Deleting a Department
- play_arrow Managing Deployments
- play_arrow Managing Sites
- About the Sites Page
- Local Breakout Overview
- Multihoming Overview
- Device Redundancy Support Overview
- Upgrading Sites Overview
- Creating Spoke Sites for Hybrid WAN Deployment
- Creating Local Service Edge Sites for Hybrid WAN Deployment
- Creating Regional Service Edge Sites for Hybrid WAN Deployment
- Creating On-Premise Hub Sites for SD-WAN Deployment
- Creating On-Premise Spoke Sites for SD-WAN Deployment
- Creating Cloud Hub Sites for SD-WAN Deployment
- Creating Cloud Spoke Sites for SD-WAN Deployment
- Provisioning a Cloud Spoke Site in AWS VPC
- Importing Multiple Sites
- Managing a Single Site
- Configuring a Single Site
- Upgrading Sites
- Managing LAN Segments on a Tenant Site
- Activating a CPE Device
- Activating Dual CPE Devices (Device Redundancy)
- Viewing the History of Tenant Device Activation Logs
- Configuring VRFs and PNE Details for a Site in a Centralized Deployment
- play_arrow Managing Site Groups
- play_arrow Security Reports
- Reports Overview
- About the Security Report Definitions Page
- Performing Different Actions on Reports
- About the Security Generated Reports Page
- Creating Log Report Definition
- Creating Bandwidth Report Definition
- Editing and Deleting Log Report Definitions
- Editing and Deleting Bandwidth Report Definitions
- play_arrow SD-WAN Reports
- play_arrow Managing Tenant Users
- play_arrow Managing Audit Logs
- play_arrow Managing Tenant User Roles
- play_arrow Licenses
- play_arrow Signature Database
- play_arrow Managing Certificates
- play_arrow Managing Juniper Identity Management Service
-
- play_arrow Designer Tools
- play_arrow Configuration Designer
- Configuration Designer Overview
- Accessing the Configuration Designer
- Using the Configuration Designer
- Changing Your Password
- About the Requests Page for the Configuration Designer
- Creating Requests for Configuration Templates
- Designing Templates with a YANG Configuration
- Designing Templates with a Configuration
- Publishing Configuration Templates
- About the Designs Page for the Configuration Designer
- Cloning Configuration Templates
- Deleting Configuration Template Designs
- play_arrow Resource Designer
- Resource Designer Overview
- Using the Resource Designer
- Accessing the Resource Designer
- About the Requests Page for the Resource Designer
- VNF Overview
- Creating Requests for VNF Packages
- Designing VNF Packages
- Adding VNF Managers
- Publishing VNF Packages
- About the Designs Page for the Resource Designer
- Cloning VNF Packages
- Importing VNF Packages
- Exporting VNF Packages
- Deleting VNF Packages
- play_arrow Network Service Designer introduction
- play_arrow Creating Requests for Network Services
- play_arrow Creating Network Services
- About the Build Page for the Network Service Designer
- Viewing Information About VNFs
- Designing Network Services
- Connecting VNFs in a Service Chain
- Defining Ingress and Egress Points for a Service Chain
- Monitoring Performance Goals
- Configuring Network Services
- vSRX Configuration Settings
- LxCIPtable VNF Configuration Settings
- Cisco CSR-1000v VNF Configuration Settings
- Riverbed Steelhead VNF Configuration Settings
- Fortinet VNF Configuration Settings
- Ubuntu VNF Configuration Settings
- play_arrow Managing Network Services
-
- play_arrow Downloads
About the Device Template Page
To access this page, click Resources > Device Templates.
Tasks You Can Perform
You can perform the following tasks from this page:
Clone a device template. See Cloning a Device Template.
Import a device template from a file. See Importing a Device Template.
Configure a device template. See Configuring a Device Template.
Modify a device template description. See Modifying a Device Template Description.
Delete a device template. See Deleting a Device Template.
View details about a device template. See Viewing Object Details.
Show or hide columns about the templates. See Sorting Objects.
Search an object about the templates. See Searching for Text in an Object Data Table.
Field Descriptions
Table 1 describes the fields on the Device Templates page.
Table 1: Fields on the Device Templates Page
Field | Description |
|---|---|
Name | Displays the name of the device template |
Description | Displays the description of the device template. Example: NFX250 device deployed as a CPE device with SD-WAN capability. |
Assigned to | Displays the number of tenant sites using the device template. Example: 2 Tenants (2 Sites) |
Workflows | Displays the number of workflows used in the device template. Example: 7 |
Target Family | Displays the name of the device family for which the device template is created. Example: juniper-srx |
Last Updated | Displays the date and time when the device template was last updated. Example: 05/23/2017 06:22 |
Table 2 describes the list of supported device templates.
Table 2: List of Supported Device Templates
SI NO. | Device Template Name | Device Template Description |
|---|---|---|
1 | MX as SD-WAN Hub | Device template for an MX Series router acting as a hub device in an SD-WAN deployment(in hub-and-spoke topology). |
2 | MX as Hybrid WAN IPSec Hub | Default template for an MX Series router acting as an hub device in hybrid WAN topology. Select this option for MX Series routers in centralized and distributed deployments. |
3 | MX as Gateway for vCPE | Device template for an MX Series router acting as an SDN gateway that prevents the creation of black holes when an administrative user activates a service at a site or prevents internet traffic blackhole at sites during VNF instantiation. Select this option only if you have been advised to do so by Juniper Networks. |
4 | NFX250 as Hybrid WAN CPE | Device template for an NFX250 device acting as a CPE device in a distributed deployment. This template supports port-forwarding with a CSO-initiated connection. This device template supports the NFX250 device as a CPE device with MPLS WAN link and optional Internet WAN link as backup |
5 | NFX250 as Secure Internet CPE | Device template for an NFX250 device acting as a CPE device in a distributed deployment. This template supports outbound SSH, which is device-initiated connection, with port-forwarding capability. This device template supports the NFX250 device as CPE with one Internet WAN link that has IPsec encryption(DHCP IP address configuration). |
6 | NFX250 as Managed Internet CPE | Device template for an NFX250 device acting as a CPE for a managed Internet service. This device template supports managed Internet Service with one Gigabit Ethernet WAN link. |
7 | NFX250 as SD-WAN CPE | Device template for an NFX250 device acting as a CPE in an SD-WAN deployment with hub-and-spoke topology. This device template supports SD-WAN deployment with up to four WAN links. |
8 | Dual NFX250 as SD-WAN CPEs | Device template for NFX250 devices in device redundancy mode in an SD-WAN deployment. This device template supports device redundancy in SD-WAN deployment with up to four WAN links. |
9 | NFX150 as Managed Internet CPE | Device template for an NFX150 device as CPE for managed Internet service. This device template supports managed Internet Service with one Gigabit Ethernet WAN link. |
10 | NFX150 as Hybrid WAN CPE | Device template for an NFX150 device as CPE in a distributed deployment. This device template supports port-forwarding with a CSO-initiated connection, MPLS WAN links, and optional Internet WAN link as backup. |
11 | NFX150 as Secure Internet CPE | Device template for an NFX150 device as CPE in a distributed deployment. This device template supports port-forwarding with device-initiated connection, one Internet WAN link with IPsec encryption (DHCP IP address configuration) and outbound SSH. |
12 | NFX150 as SD-WAN CPE | Device template for an NFX150 device as CPE in an SD-WAN deployment with hub-and-spoke topology. This device template supports up to four WAN links. |
13 | SRX as Hybrid WAN CPE | Device template for an SRX Series Services Gateway or a vSRX instance acting as a CPE device in a distributed hybrid WAN deployment. |
14 | SRX as Managed Internet CPE | Device template for SRX Series Services Gateway devices acting as a CPE device for managed internet service. This device template supports managed Internet Service with one Gigabit Ethernet WAN link |
15 | SRX as SD-WAN CPE | Device template for an SRX Series Services Gateway acting as a CPE device in an SD-WAN deployment with hub-and-spoke topology. This device template supports SD-WAN deployment with up to four WAN links. |
16 | SRX as SDWAN Hub | Device template for an SRX Series Services Gateway acting as a hub device in an SD-WAN deployment with hub-and-spoke topology. This device template supports SD-WAN deployment with up to four WAN links. |
17 | Dual SRX as SD-WAN CPEs | Device template for SRX Series Services Gateways acting as CPE devices in device redundancy mode in an SD-WAN deployment. This device template supports SD-WAN deployment with up to four WAN links. |
18 | vSRX as SD-WAN spoke in AWS | Device template for a vSRX instance acting as spoke in AWS for SD-WAN deployment. This device template supports SD-WAN deployment with up to four WAN links. |
The list of device templates and their default configurations are listed in Table 3, Table 4, Table 5, and Table 6.
Table 3: Default Settings Supported on NFX250 Device Templates
Field Name | NFX250 as Hybrid WAN CPE | NFX250 as Managed Internet CPE | NFX250 as Secure Internet CPE | NFX250 as SD-WAN CPE | Dual NFX250 as SD-WAN CPEs |
|---|---|---|---|---|---|
AUTO_DEPLOY_STAGE2_CONFIG | Disabled | Disabled | Disabled | Disabled | Disabled |
ACTIVATION_CODE_ENABLED | Enabled | Enabled | Enabled | Disabled | Disabled |
S2_MODEL_HUGEPAGE_COUNT | 21 | 21 | 21 | 13 | 13 |
S1_MODEL_HUGEPAGE_COUNT | 9 | 9 | 9 | 9 | 9 |
USE_SINGLE_SSH_TO_NFX | Enabled | Enabled | Enabled | Enabled | — |
ENC_ROOT_PASSWORD | Specified | Specified | Specified | Specified | Specified |
VNF_OAM_TRANSLATED | 49152 | 49152 | 49152 | 49152 | 49152 |
AUTO_INSTALL_LICENSE | Disabled | Disabled | Disabled | Disabled | Disabled |
GWR_VSRX_IMAGE | Not Specified | Not Specified | Not Specified | Not Specified | Not Specified |
GWR_VSRX_IMAGE | vsrx-vmdisk- | vsrx-vmdisk- | vsrx-vmdisk- | vsrx-vmdisk- | vsrx-vmdisk- |
INTERNAL_OAM_ | 10.10.10.0/24 | 10.10.10.0/24 | 10.10.10.0/24 | 10.10.10.0/24 | 10.10.10.0/24 |
OOB_MGMT_ | Enabled | Enabled | Enabled | Disabled | Enabled |
ADSL_VPI | — | — | — | 8 | 8 |
ADSL_ENCAP | — | — | — | llcsnap-bridged-802.1q | llcsnap-bridged-802.1q |
ADSL_VCI | — | — | — | 36 | 36 |
DSL_VLAN | — | — | — | 50 | 50 |
CONTROL_LINK_PORT_NAME | — | — | — | — | xe-0/0/12 |
FAB_LINK_PORT_NAME | — | — | — | — | xe-0/0/13 |
WAN Port Names | WAN_0 ge-0/0/8 WAN_1 ge-0/0/9 | WAN_0 ge-0/0/8 | WAN_0 ge-0/0/8 | WAN_0 ge-0/0/10 WAN_1 ge-0/0/11 WAN_2 xe-0/0/12 WAN_3 xe-0/0/13 | WAN_0 primary ge-0/0/10 WAN_1 secondary ge-0/0/10 WAN_2 primary ge-0/0/11 WAN_3 secondary ge-0/0/11 |
LAN Port Names | LAN_0 10.10.1.0/24 LAN_1 10.10.2.0/24 | LAN_0 10.10.1.0/24 LAN_1 10.10.2.0/24 | LAN_0 10.10.1.0/24 LAN_1 10.10.2.0/24 | LAN_0 ge-0/0/0 LAN_1 ge-0/0/1 LAN_2 ge-0/0/2 LAN_3 ge-0/0/3 LAN_4 ge-0/0/4 LAN_5 ge-0/0/5 LAN_6 ge-0/0/6 LAN_7 ge-0/0/7 LAN_8 ge-0/0/8 LAN_9 ge-0/0/9 | LAN_0 ge-0/0/0 LAN_1 ge-0/0/1 LAN_2 ge-0/0/2 LAN_3 ge-0/0/3 LAN_4 ge-0/0/4 LAN_5 ge-0/0/5 LAN_6 ge-0/0/6 LAN_7 ge-0/0/7 LAN_8 ge-0/0/8 LAN_9 ge-0/0/9 |
LAN_Subnets | — | — | — | — | LAN_0 10.10.1.0/24 LAN_1 10.10.2.0/24 |
AUX Subnets | AUX_0 10.10.0.0/24 AUX_1 10.10.12.0/24 AUX_2 10.10.13.0/24 | AUX_0 10.10.0.0/24 AUX_1 10.10.12.0/24 AUX_2 10.10.13.0/24 | AUX_0 10.10.0.0/24 AUX_1 10.10.12.0/24 AUX_2 10.10.13.0/24 | AUX_0 10.10.0.0/24 AUX_1 10.10.12.0/24 AUX_2 10.10.13.0/24 | AUX_0 10.10.0.0/24 AUX_1 10.10.12.0/24 AUX_2 10.10.13.0/24 |
Table 4: Default Settings Supported on NFX150 Device Templates
Field Name | NFX150 as Hybrid WAN CPE | NFX150 as Managed Internet CPE | NFX150 as Secure Internet CPE | NFX150 as SD-WAN CPE |
|---|---|---|---|---|
VNF_OAM_TRANSLATED_PORT_START | 49152 | 49152 | 49152 | 49152 |
AUTO_INSTALL_LICENSE_TO_DEVICE | Disabled | Disabled | Disabled | Disabled |
ZTP_ENABLED | Enabled | Enabled | Enabled | Enabled |
INTERNAL_OAM_SUBNET | 10.10.10.0/24 | 10.10.10.0/24 | 10.10.10.0/24 | 10.10.10.0/24 |
ENC_ROOT_PASSWORD | Specified | Specified | Specified | Specified |
ACTIVATION_CODE_ENABLED | Enabled | Enabled | Enabled | Enabled |
AUTO_DEPLOY_STAGE2_CONFIG | Disabled | Disabled | Disabled | Disabled |
USE_SINGLE_SSH_TO_NFX | Enabled | — | — | Enabled |
ADSL_VPI | — | — | — | 8 |
ADSL_ENCAP | — | — | — | llcsnap-bridged-802.1q |
ADSL_VCI | — | — | — | 36 |
WAN Port Names for SKU with single slot | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-0-2 WAN_3 ge-1/0/4 heth-0-3 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-0-2 WAN_3 ge-1/0/4 heth-0-3 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-0-2 WAN_3 ge-1/0/4 heth-0-3 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-0-2 WAN_3 ge-1/0/4 heth-0-3 |
WAN Port Names for SKU with EM-6T2SFP expansion module. | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-1-6 WAN_3 ge-1/0/4 heth-1-7 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-1-6 WAN_3 ge-1/0/4 heth-1-7 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-1-6 WAN_3 ge-1/0/4 heth-1-7 | WAN_0 ge-1/0/1 heth-0-4 WAN_1 ge-1/0/2 heth-0-5 WAN_2 ge-1/0/3 heth-1-6 WAN_3 ge-1/0/4 heth-1-7 |
Table 5: Default Settings Supported on SRX Series Device Templates
Field Name | SRX as Managed Internet CPE | SRX as Hybrid WAN CPE | SRX as SD-WAN CPE | SRX as SD-WAN Hub | Dual SRX as SD-WAN CPEs |
|---|---|---|---|---|---|
AUTO_DEPLOY_STAGE2_CONFIG | Disabled | Disabled | Disabled | Disabled | Disabled |
ZTP_ENABLED | Enabled | Disabled | Enabled | Enabled | Disabled |
PRE-STAGED-CPE | Disabled | — | — | — | — |
ACTIVATION_CODE_ENABLED | Disabled | Disabled | Enabled | Enabled | Disabled |
OOB_OAM_Port | fxp0 | fxp0 | fxp0 | fxp0 | ge-0/0/0 |
ENC_ROOT_PASSWORD | Specified | Specified | Specified | Specified | Specified |
AUTO_INSTALL_LICENSE_TO_DEVICE | Disabled | Disabled | Disabled | Disabled | Disabled |
CLUSTER_OFFSET | — | — | — | — | 5 |
WAN Port Names | WAN_0 ge-0/0/0 | WAN_0 ge-0/0/0 WAN_1 ge-0/0/1 | WAN_0 ge-0/0/0 WAN_1 ge-0/0/1 WAN_2 ge-0/0/2 WAN_3 ge-0/0/3 | WAN_0 ge-0/0/0 WAN_1 ge-0/0/1 WAN_2 ge-0/0/2 WAN_3 ge-0/0/3 | WAN_0 ge-0/0/3 WAN_1 ge-{ {CLUSTER_OFFSET.value}}/0/3 WAN_2 ge-0/0/4 WAN_3 ge-{ {CLUSTER_OFFSET.value}}/0/4 |
OAM CE Port Names | — | — | — | OAM_CE_0 ge-0/0/0 OAM_CE_1 ge-0/0/1 OAM_CE_2 ge-0/0/2 OAM_CE_3 ge-0/0/3 | — |
FAB Port Names | — | — | — | — | FAB_0 ge-0/0/2 FAB_1 ge-{ {CLUSTER_OFFSET.value}}/0/2 |
LAN Port Names | — | — | LAN_0 ge-0/0/0 LAN_1 ge-0/0/1 LAN_2 ge-0/0/2 LAN_3 ge-0/0/3 LAN_4 ge-0/0/4 LAN_5 ge-0/0/5 LAN_6 ge-0/0/6 LAN_7 ge-0/0/7 LAN_8 ge-0/0/8 LAN_9 ge-0/0/9 LAN_10 ge-0/0/10 | — | LAN_0_0 ge-0/0/7 LAN_0_1 ge-0/0/8 LAN_0_2 ge-0/0/9 LAN_0_3 ge-0/0/10 |
RESERVED_MEMBER_PORT_NAMES | — | — | — | — | PORT_0_0 ge-0/0/5 PORT_0_1 ge-0/0/6 |
RESERVED_SUBNETS | — | — | — | — | NODE_0 10.10.12.0/24 NODE_1 10.10.13.0/24 |
Table 6: Default Settings Supported on MX Series Device Template
Field Name | MX as SD-WAN Hub |
|---|---|
AUTO_DEPLOY_STAGE2_CONFIG | Disabled |
ZTP_ENABLED | Disabled |
ACTIVATION_CODE_ENABLED | Disabled |
OOB_OAM_Port | fxp0 |
AUTO_INSTALL_LICENSE_TO_DEVICE | Disabled |
WAN Port Names | WAN_0 ge-0/0/0 WAN_1 ge-0/0/1 WAN_2 ge-0/0/2 WAN_3 ge-0/0/3 |
