Service Templates basically is a subset of the workflow template to associate services like NGFW, QOS and Application Steering with one or more ORG/Suborg and devices. Thereby, making the configuration change management more service specific and easier to deploy.
How a Device Workflow looks like without any linked Service Template(s)?
How to:
1. Create Service Template
2. Configuring the Service Template
3. Add Service Template to Device Workflow
4. Commit Template to add those services to appliances in ORG/Suborg
Alternate Method: Add Service Template to Device Group
Apart from adding service template to the Device Workflow as in step 3-4, service template(s) can be added to the Device Groups.
5. Create General Service Template
6. Configuring General Service Template (Parameterized Variable)
7. Add Service Template to Device Group
8. Add bind values for the parameterized fields in Device Workflow
9. Commit Template
Create Service Template(s)
For demonstration purpose, we will create 3 service templates for NGFW, Application Steering and QOS
Service Template: NextGen Firewall (NGFW)
- Go to Configuration > Templates > Service Templates
- Select Shared Service Templates
- Click + (add) to add Service Template
- Fill in the Name, Organization and Type = (NextGen Firewall)
Note: The Organization field can be either provided with a specific ORG/Suborg OR alternatively left with a variable (by
clicking the settings icon) to be applied to any ORG in the future.
Service Template: SD-WAN Applications Steering (Applications)
- Go to Configuration > Templates > Service Templates
- Select Shared Service Templates
- Click + (add) to add Service Template
- Fill in the Name, Organization and Type = (Applications)
Note: The Organization field can be either provided with a specific ORG/Suborg OR alternatively left with a variable (by
clicking the settings icon) to be applied to any ORG in the future. (Screenshot above)
Service Template: Class of Service (QOS)
- Go to Configuration > Templates > Service Templates
- Select Shared Service Templates
- Click + (add) to add Service Template
- Fill in the Name, Organization and Type = (QOS)
Note: The Organization field can be either provided with a specific ORG/Suborg OR alternatively left with a variable (by
clicking the settings icon) to be applied to any ORG in the future. (Screenshot above)
Configure Service Template(s)
NGFW
- Click on the Service Template for NextGen Firewall created in Step 1 above.
- Select Services > Next Gen Firewall
For demonstration, we are creating a Firewall Policy with a rule to block Facebook traffic and allow others.
- Select Security > Policies > Access Policies
- Click + (add) to add a Policy
- Select Rules
- Click + (add) to add Rules
Applications
- Click on the Service Template for Application Steering created in Step 1 above.
- Select Services > SDWAN
For demonstration, we are creating an SDWAN rule to apply a Forwarding Profile for traffic related to Amazon sites.
- Select SDWAN > Policies
- Click + (add) to add a Policy
- Select Rules
- Click + (add) to add Rules
QOS
- Click on the Service Template for QOS created in Step 1 above.
- Select Networking > Class of Service
For demonstration, we are creating a QOS rule for all Video Traffic (like Zoom, Webex) and modifying the DSCP to ef.
- Create a QOS Profile
- Create a RW (rewrite) Rule
- Create an App QOS Policy and add Rule
Add Service Template to Device Workflow
- Go to Workflow > Devices > Device
- Verify the ORG and Device Group
- Select Device Service Template > Association icon
- Click + (add) to add Service Template
- Fill in the details for Tenant ORG, Category and Service Template
- Once added, click OK and Redeploy the template
Commit Template
- Go to Administration tab
- Click Commit Template
- Select ORG > Device Template > Device (Appliance to apply the service template to)
- Verify the differences and Commit
Once the Commit Task is successful, the appliance will be embedded with all the associated service templates.
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
-------------------------
Alternate Method:
-------------------------
Create General Service Template
For demonstration purpose, we will create a general service template.
Service Template: General
- Go to Configuration > Templates > Service Templates
- Select Shared Service Templates
- Click + (add) to add Service Template
- Fill in the Name, Organization and Type = (General)
Note: The Organization field can be either provided with a specific ORG/Suborg OR alternatively left with a variable (by
clicking the settings icon) to be applied to any ORG in the future.
Configure General Template(s)
General
- Click on the Service Template for General created in above step.
- You can configure any feature/service in a general service template (not limited to any specific service)
For demonstration, we are creating a LAN interface and DHCP service with parameterized variables to be populated with
Device Workflow bindings
- Select Networking > Interfaces
- Click + (add) to add an interface
- With the main interface, add sub-interface(s) (as required)
- For Static IP Address/Mask on the interface (hit settings icon) to parameterize the field
For DHCP service,
- Select Networking > DHCP
- Create a Lease Profile, click + (add) with required renew time settings (default 3600)
- Create an Address Pool with the added Lease Profile above and parameterize the required fields
Add Service Template to Device Group
- Go to Configuration > Devices > Device Groups
- Select Device Group and verify associated post staging template
- Select Device Service Template Association icon
- Click + (add) to add Service Template
- Fill in the details for Tenant ORG, Category and Service Template
- Once added, click OK and recreate the Device Group
Note: The Order of Service Templates is an important factor to consider when adding service templates.
Add bind values for the parameterized fields
- Go to Workflow > Devices > Device
- Verify the ORG and Device Group (with the defined service template)
- Go to Bind Data and fill in the parameterized fields added in service template above.
- Once added, click OK and Redeploy the template
Commit Template
- Go to Administration tab
- Click Commit Template
- Select ORG > Device Template > Device (Appliance to apply the service template to)
- Verify the differences with diff and Commit
Once the Commit Task is successful, the appliance(s) will be embedded with all the associated service templates.
