- play_arrow Customer Portal
- play_arrow Introduction
- Unified Administration and Customer Portal Overview
- Customer Portal Overview
- Switching the Tenant Scope
- Accessing Customer Portal
- Setting Up Your Network with Customer Portal
- Changing the Password on First Login
- Changing the Customer Portal Password
- Resetting the Password
- Extending the User Login Session
- play_arrow Using the Dashboard
- play_arrow Managing Objects
- play_arrow Monitoring Security Alerts and Alarms
- play_arrow Monitoring Security and Device Events
- About the All Security Events Page
- About the Firewall Events Page
- About the Web Filtering Events Page
- About the IPsec VPNs Events Page
- About the Content Filtering Events Page
- About the Antispam Events Page
- About the Antivirus Events Page
- About the IPS Events Page
- About the Device Events Page
- About the Screen Events Page
- play_arrow Monitoring SD-WAN Events
- play_arrow Monitoring Applications
- play_arrow Monitoring Threats
- play_arrow Monitoring Jobs
- play_arrow Managing Devices
- play_arrow Managing Device Images
- play_arrow Configuring Network Services in a Distributed Deployment
- Network Service Overview
- About the Network Services Page
- About the Service Overview Page
- About the Service Instances Page
- Configuring VNF Properties
- vSRX VNF Configuration Settings
- LxCIPtable VNF Configuration Settings
- Cisco CSR-1000v VNF Configuration Settings
- Riverbed Steelhead VNF Configuration Settings
- play_arrow Managing Firewall Policies
- Firewall Policy Overview
- About the Firewall Policy Page
- Creating Firewall Policy Intents
- Editing, Cloning, and Deleting Firewall Policy Intents
- Selecting Firewall Source
- Selecting Firewall Destination
- Firewall Policy Examples
- Firewall Policy Schedules Overview
- About the Firewall Policy Schedules Page
- Creating Schedules
- Editing, Cloning, and Deleting Schedules
- play_arrow Unified Threat Management
- UTM Overview
- Configuring UTM Settings
- About the UTM Profiles Page
- Creating UTM Profiles
- Editing, Cloning, and Deleting UTM Profiles
- About the Web Filtering Profiles Page
- Creating Web Filtering Profiles
- Editing, Cloning, and Deleting Web Filtering Profiles
- About the Antivirus Profiles Page
- Creating Antivirus Profiles
- Editing, Cloning, and Deleting Antivirus Profiles
- About the Antispam Profiles Page
- Creating Antispam Profiles
- Editing, Cloning, and Deleting Antispam Profiles
- About the Content Filtering Profiles Page
- Creating Content Filtering Profiles
- Editing, Cloning, and Deleting Content Filtering Profiles
- About the URL Patterns Page
- Creating URL Patterns
- Editing, Cloning, and Deleting URL Patterns
- About the URL Categories Page
- Creating URL Categories
- Editing, Cloning, and Deleting URL Categories
- play_arrow Managing SD-WAN
- play_arrow Managing NAT Policies
- NAT Policies Overview
- About the NAT Policies Page
- Creating NAT Policies
- Editing and Deleting NAT Policies
- About the Single NAT Policy Page
- Creating NAT Policy Rules
- Editing, Cloning, and Deleting NAT Policy Rules
- Deploying NAT Policy Rules
- Selecting NAT Source
- Selecting NAT Destination
- NAT Pools Overview
- About the NAT Pools Page
- Creating NAT Pools
- Editing, Cloning, and Deleting NAT Pools
- play_arrow Managing SSL Proxies
- SSL Forward Proxy Overview
- About the SSL Proxy Policy Page
- Creating SSL Proxy Policy Intents
- Editing, Cloning, and Deleting SSL Proxy Policy Intents
- Understanding How SSL Proxy Policy Intents Are Applied
- About the SSL Proxy Profiles Page
- Creating SSL Forward Proxy Profiles
- Editing, Cloning, and Deleting SSL Forward Proxy Profiles
- Configuring and Deploying an SSL Forward Proxy Policy
- play_arrow Managing Shared Objects
- Addresses and Address Groups Overview
- About the Addresses Page
- Creating Addresses or Address Groups
- Editing, Cloning, and Deleting Addresses and Address Groups
- Services and Service Groups Overview
- About the Services Page
- Creating Services and Service Groups
- Creating Protocols
- Editing and Deleting Protocols
- Editing, Cloning, and Deleting Services and Service Groups
- Application Signatures Overview
- About the Application Signatures Page
- Creating Application Signature Groups
- Editing, Cloning, and Deleting Application Signature Groups
- About the Departments Page
- Creating a Department
- Modifying a Department
- Deleting a Department
- play_arrow Managing Deployments
- play_arrow Managing Sites
- About the Sites Page
- Local Breakout Overview
- Multihoming Overview
- Device Redundancy Support Overview
- Upgrading Sites Overview
- Creating Spoke Sites for Hybrid WAN Deployment
- Creating Local Service Edge Sites for Hybrid WAN Deployment
- Creating Regional Service Edge Sites for Hybrid WAN Deployment
- Creating On-Premise Hub Sites for SD-WAN Deployment
- Creating On-Premise Spoke Sites for SD-WAN Deployment
- Creating Cloud Hub Sites for SD-WAN Deployment
- Creating Cloud Spoke Sites for SD-WAN Deployment
- Provisioning a Cloud Spoke Site in AWS VPC
- Importing Multiple Sites
- Managing a Single Site
- Configuring a Single Site
- Upgrading Sites
- Managing LAN Segments on a Tenant Site
- Activating a CPE Device
- Activating Dual CPE Devices (Device Redundancy)
- Viewing the History of Tenant Device Activation Logs
- Configuring VRFs and PNE Details for a Site in a Centralized Deployment
- play_arrow Managing Site Groups
- play_arrow Security Reports
- Reports Overview
- About the Security Report Definitions Page
- Performing Different Actions on Reports
- About the Security Generated Reports Page
- Creating Log Report Definition
- Creating Bandwidth Report Definition
- Editing and Deleting Log Report Definitions
- Editing and Deleting Bandwidth Report Definitions
- play_arrow SD-WAN Reports
- play_arrow Managing Tenant Users
- play_arrow Managing Audit Logs
- play_arrow Managing Tenant User Roles
- play_arrow Licenses
- play_arrow Signature Database
- play_arrow Managing Certificates
- play_arrow Managing Juniper Identity Management Service
-
- play_arrow Designer Tools
- play_arrow Configuration Designer
- Configuration Designer Overview
- Accessing the Configuration Designer
- Using the Configuration Designer
- Changing Your Password
- About the Requests Page for the Configuration Designer
- Creating Requests for Configuration Templates
- Designing Templates with a YANG Configuration
- Designing Templates with a Configuration
- Publishing Configuration Templates
- About the Designs Page for the Configuration Designer
- Cloning Configuration Templates
- Deleting Configuration Template Designs
- play_arrow Resource Designer
- Resource Designer Overview
- Using the Resource Designer
- Accessing the Resource Designer
- About the Requests Page for the Resource Designer
- VNF Overview
- Creating Requests for VNF Packages
- Designing VNF Packages
- Adding VNF Managers
- Publishing VNF Packages
- About the Designs Page for the Resource Designer
- Cloning VNF Packages
- Importing VNF Packages
- Exporting VNF Packages
- Deleting VNF Packages
- play_arrow Network Service Designer introduction
- play_arrow Creating Requests for Network Services
- play_arrow Creating Network Services
- About the Build Page for the Network Service Designer
- Viewing Information About VNFs
- Designing Network Services
- Connecting VNFs in a Service Chain
- Defining Ingress and Egress Points for a Service Chain
- Monitoring Performance Goals
- Configuring Network Services
- vSRX Configuration Settings
- LxCIPtable VNF Configuration Settings
- Cisco CSR-1000v VNF Configuration Settings
- Riverbed Steelhead VNF Configuration Settings
- Fortinet VNF Configuration Settings
- Ubuntu VNF Configuration Settings
- play_arrow Managing Network Services
-
- play_arrow Downloads
Adding a Cloud Hub Device
You can add an MX Series router, an SRX Series services gateway, or a vSRX instance as a cloud hub device in a hub-and-spoke topology or full mesh topology.
The device templates that are currently supported for cloud hub devices are:
MX as SD-WAN Hub
SRX as SD-WAN Hub
An MX Series router can be added as a cloud-hub device in brownfield deployment only.
An MX Series router can be used as an SD-WAN hub in single-hub and multihoming deployment.
An MX Series router is not supported as an on-premise SD-WAN hub.
When you use an MX Series router as SD-WAN hub, you must configure the NAT pools by using the stage-2 configuration template.
Before You Begin
Create all the resources required for the network point of presence (POP). See Creating a Single POP.
To add a cloud hub device:
- Select Resources > Cloud Hub Devices.
The Cloud Hub Devices page appears.
- Click the add icon (+).
The Add Hub Device page appears.
- Complete the configuration according to the guidelines provided in Table 1.
- Click Ok. If you want to discard your changes,
click Cancel instead.
If you click Ok, the cloud hub device is created. The information about the new cloud hub device appears on the Cloud Hub Devices page.
Table 1: Fields on the Add Hub Device Page
Field | Description |
|---|---|
Name | Enter the name of the cloud hub device. You can use alphanumeric characters, including special character(-). The maximum length is 15 characters. Example: MX-cloud-hub |
Management Region | Displays the regional server with which the CPE device communicates. The management region name is populated based on the information from the device template. Example: regional |
POP | Select the POP where the hub device needs to be added. Example: pop_blue |
Capability | Select the capability of the cloud hub device. The following options are available:
|
Proxy OAM Hub Device | For each hub device with data-only capability, select an OAM hub device to handle the OAM traffic. |
Device Template | Select the device template that supports SD-WAN deployment. Example: MX as SD-WAN Hub |
| Connectivity Based on the deployment scenario, the following fields are displayed: | |
GRE Interfaces | Enter one or more interface names for the generic routing encapsulation (GRE) tunnel. Press Enter to provide multiple values. You configure this field when you select the MX Series router as a cloud hub device. Example: gr-0/0/1 |
VT Interfaces | Enter one or more interface names for the virtual tunnel (VT). Press Enter to provide multiple values. You configure this field when you select the MX Series router as a cloud hub device. Example: vt-0/0/1 |
MS Interfaces | Enter one or more interface names for the multiservices (MS) . Press Enter to provide multiple values. You configure this field when you select the MX Series router as a cloud hub device. Example: ms-0/0/1 |
OAM Traffic Information | (Optional) Select this option if the management connectivity is initiated by Contrail Service Orchestration (CSO). |
Management Connectivity OAM Connectivity | |
Loopback IP Prefix | Enter an IPv4 address prefix for the loopback interface on the CPE device. The IP address prefix must be a /32 IP address prefix and must be unique across the entire management network. Example: 192.168.1.1/32 |
OAM Interface | Select an interface on the cloud hub device to connect to the CSO. The interface is used only for OAM connectivity. The interface names are listed based on the configuration in device template for the cloud hub device. Example: ge-0/0/1 |
OAM Interface IP Prefix | Enter an IPv4 address prefix for the OAM interface in the cloud hub device. The OAM IP Prefix must be unique across the entire management network.
|
OAM Interface VLAN ID | Enter an OAM VLAN ID for in-band management of the site. If you specify an OAM VLAN ID, then an in-band OAM traffic reaches the site through the selected OAM interface. The range is 0 through 65535. |
OAM Gateway | Enter the IP address of the next-hop through which the CSO connectivity is established. |
WAN_0 WAN_1 WAN_2 WAN_3 | Select a WAN link to enable it. After selecting the link, specify the following information:
|
| Devices | |
Serial Number | Enter the serial number of the hub device. The serial number is a unique string of alphanumeric characters and it is case-sensitive. Example: XXXXXXXXXXXX |
User Name | Enter the username that you configured when you set up the device. You use this username to log in to the device. Providing login credentials gives CSO access to the device. |
Password | Enter the password that you configured when you set up the device. You use this password to log in to the device. Providing login credentials gives CSO access to the device. |
After you add the cloud hub device, select the cloud hub device on the Resources > Cloud Hub Devices page and click Activate Device. The cloud hub device gets activated. During activation, the cloud hub device is discovered and the required details are stored in CSO.
