- play_arrow Introduction
- play_arrow Overview
- play_arrow Access and Manage Paragon Automation Account
-
- play_arrow Administration
- play_arrow Introduction
- play_arrow Organization Management
- play_arrow Site Management
- play_arrow User Management
- play_arrow Inventory Management
- play_arrow Audit Logs
- play_arrow Tags
-
- play_arrow Device Life Cycle Management
- play_arrow Introduction
- play_arrow Day-Wise Activities for Device Life Cycle Management
- play_arrow Field Technician User Interface
- play_arrow Onboarding Profiles
- play_arrow Plan Device Onboarding
- play_arrow View Device Onboarding
- play_arrow Device Management
- Device Management Workflow
- Device Licenses Overview
- About the Features Tab
- About the Licenses Tab
- Manage Device Licenses
- About the Software Images Page
- Upload a Software Image
- Delete a Software Image
- About the Configuration Backups Page
- Configuration Templates Overview
- About the Configuration Templates Page
- Add a Configuration Template
- Edit and Delete a Configuration Template
- Preview a Configuration Template
- Deploy a Configuration Template to a Device
-
- play_arrow Observability
- play_arrow Introduction
- play_arrow Health Dashboard
- play_arrow Troubleshoot Devices
- play_arrow View Network Topology
- Network Topology Visualization Overview
- Network Visualization Options
- View Network Topology Details
- Network Table Overview
- About the Device Tab
- About the Link Tab
- About the Site Tab
- About the Tunnels Tab
- Configure a PCE Server
- Configuring PCEP on a PE Router
- Configuring Topology Acquisition Using BGP-LS
-
- play_arrow Trust and Compliance
- play_arrow Introduction
- play_arrow Manage Trust Settings and Trust Scores
- Compliance Standards Overview
- About the Compliance Benchmarks Page
- About the Compliance Tailorings Page
- Example: Create a Tailoring Document for NTP Settings
- About the Compliance Checklist Page
- Add a Checklist Template
- Add Checklist for a Device
- Import Scans and Update Rule Results in a Checklist
- Trust Plans Overview
- About the Network Score Formula Page
- Trust Score Overview
- About the Network Score Page
- About the Snapshots Page
- Add a Snapshot for a Target
- play_arrow Manage Compliance Scans
- play_arrow Manage Vulnerabilities
- play_arrow Monitor Integrity
-
- play_arrow Active Assurance
- play_arrow Introduction
- play_arrow Test Agents
- play_arrow Tests and Monitors
- play_arrow Test Templates
-
- play_arrow Paragon Shell CLI Reference
- play_arrow Introduction
- play_arrow Operational Mode Commands
- file copy
- monitor
- request paragon backup
- request paragon cluster pods reset
- request paragon cluster upgrade
- request paragon config
- request paragon deploy
- request paragon deploy cluster
- request paragon destroy cluster
- request paragon fix-permission
- request paragon load
- request paragon repair-node
- request paragon replace-node
- request paragon restore
- request paragon running-config
- request paragon ssh
- request paragon ssh-key
- request paragon storage cleanup
- request paragon super-user password reset
- request system decrypt password
- request system reboot
- show configuration paragon cluster
- show host disk usage
- show paragon backup
- show paragon certificate expiry-date certificate-type
- show paragon cluster (o)
- show paragon cluster applications (o)
- show paragon cluster common-services ingress (o)
- show paragon cluster details
- show paragon cluster namespaces
- show paragon cluster nodes
- show paragon cluster pods
- show paragon cluster pods namespace healthbot sort
- show paragon images version
- show paragon images version namespace
- show paragon pvc details
- show paragon version
- play_arrow Configuration Mode Commands
- delete paragon cluster
- load set
- set paragon cluster applications
- set paragon cluster common-services ingress
- set paragon cluster insights victoria-metrics
- set paragon cluster install
- set paragon cluster mail-server
- set paragon cluster nodes
- set paragon cluster ntp
- set paragon cluster papi
- set paragon monitoring
- set system login
- show paragon cluster (c)
- show paragon cluster applications (c)
- show paragon cluster common-services ingress (c)
- play_arrow Troubleshooting Commands
- Troubleshoot Using the Paragon Shell CLI Commands
- request paragon support information
- request paragon troubleshooting information
- request paragon debug
- request paragon debug get-tsdb-data
- request paragon debug insights-kafka-data
- request paragon debug kafka
- request paragon debug logs
- request paragon debug logs namespace
- request paragon debug postgres
- request paragon debug redis
- play_arrow Service Orchestration
- About the Service Orchestration cMGD CLI
- set foghorn:core org-id
- set service design default version
- show service order status
- show service order as-json
- show service order as-yaml
- show service designs
- show device dependent configuration
- show insights configuration
- show configuration foghorn:customers
- show service instance lock status
- show service instance lock token
- show service projects
- show service order history
- request service project add
- request service order sync
- request network resources load
- request service order load
- request service order place
- request service order modify
- request service order delete
- request service order submit
- request service order provision
- request service design install
- request service design uninstall
- request create graphdb
- request service order set
- request service instance lock
- request service instance unlock
-
Service Provisioning Workflow
Service orchestration automates provisioning of Layer 3 VPN (L3VPN), Layer 2 Ethernet VPN (EVPN) and Layer 2 circuit (L2 circuit) services and monitoring the health and quality of a service after it is provisioned. Paragon Automation provides predefined service designs that contain the guidelines and templates for executing the service provisioning and monitoring workflows for the services.
Ethernet VPN (EVPN) is the only L2VPN service supported in this release. EVPN-VPWS is not supported.
LDP signaling without BGP autodiscovery is the only variant of L2 circuit supported in this release.
Redundant pseudowires for L2 circuit are not supported in this release.
The service provisioning workflow includes tasks such as configuring network resources, defining service elements, initiating and publishing service orders for service provisioning, monitoring service order execution states, and troubleshooting issues by monitoring task logs. A network administrator or a superuser provisions a service by using the Paragon Automation GUI, REST API, or the service orchestration cMGD CLI.
To provision a service:
Add customer names in the Customer Inventory page. See About the Customer Inventory Page.
View the installed service designs with version numbers on the Service Designs page. Network administrators and observers have read-only access to this page. Superusers can manage the service design catalog and perform tasks like installing the latest available version of a service design, and setting the default service design version. See About the Service Designs Page and Manage Service Design Versions.
Superusers with root user privileges can manage service designs by using the service orchestration cMGD CLI. See About the Service Orchestration cMGD CLI.
Configure and upload network resources for the services by using the Paragon Automation GUI, REST API, or the service orchestration cMGD CLI. See Add Network Resources for Provisioning VPN Services, About the Resource Instances Page, and request network resources load.
Create or modify service instances by entering data in the corresponding fields in the Paragon Automation GUI or by uploading preconfigured JSON files:
To create an L3VPN service instance, see Add an L3VPN Service Instance.
To create an EVPN service instance, see Add an EVPN Service Instance.
To create an L2 Circuit service instance, see Add an L2 Circuit Service Instance.
To modify a service instance, see Modify a Service Instance.
When you create or modify a service instance, a create or modify service order is generated for these operations.
Publish the service instance by clicking the Publish button on the Service Instances page. Publishing a service instance generates a service order to activate the create or modify workflows.
You can also delete a service instance by clicking More > Deprovision on this page to generate a delete service order to activate the delete workflow. See About the Service Instances Page.
View details of the service order and the execution status of the service order on the Service Orders page. See About the Service Orders Page.
Monitor the workflow run details for each service order from the Workflows page (Orchestration > Monitoring > Workflows). By viewing detailed task logs, you can troubleshoot issues when a workflow run fails. See About the Workflows Page.
As a superuser with root user privileges, you can perform service provisioning tasks by using the service orchestration cMGD CLI. For more information, see About the Service Orchestration cMGD CLI.
Before provisioning a service in the network, Paragon Automation validates the service configuration on all the devices on which the service is provisioned. Paragon Automation automatically configures passive device monitoring rules (for L2 circuit services) and active data plane tests (for L3VPN and EVPN services) to monitor the health and quality of the service after provisioning. You can view the monitoring data generated for each service instance. See View Service Instance Details.