Network Edge virtual devices require a manual replacement process in cases where the Virtual Network Function (VNF) goes into an unrecoverable state. This topic provides general instructions for the replacement of the following VNF types.
-
Arista CloudEOS (Router)
-
Check Point CloudGuard Security (Firewall)
-
Cisco Catalyst 8000V Autonomous mode (BYOL)
-
Cisco Adaptive Security Appliance (Firewall)
-
Fortinet FortiGate (Firewall / SD-WAN)
-
Juniper vSRX (Firewall / SD-WAN)
-
Palo Alto VM-Series Firewall
-
ZScaler App Connector and Private Service Edge
For device replacement processes for other VNF types, including SD-WAN devices, see the following documentation:
-
Palo Alto Networks VM-Series Firewall Cluster (Single Node)
What is Manual Device Replacement?
If you want to replace a VNF due to issues with the VNF itself (not related to the underlying infrastructure), use the self-guided device replacement process from the Network Edge portal. This process re-instantiates the VNF to the initially provisioned image without changing the Virtual Connections associated with the VNF. You are responsible for restoring your device configuration and then re-applying the license.
Replace Device
This section describes the high-level workflow of the replacement process. Each vendor requires different information to start the replacement process.
Before Replacing Your Device:
-
Make a copy of the configuration backup. If you don't have a configuration backup, you will have to manually configure the replacement.
-
Unregister the license from the existing device, or procure a new license for the new device.
-
Apply the license from the portal as applicable.
After Replacing a Virtual Device:
-
Apply the saved backup configuration.
-
Check the license status to make sure it's registered.
-
Apply the license if required.
-
Verify interface and BGP configurations.
The following device attributes are retained on the replacement device:
-
Virtual Device UUID
-
Public IP
-
Virtual Connections
-
DLG
The following device attribute is changed on the replacement device:
-
System generated password
Required Information
The following information is required by each vendor.
| Device Type | Attributes Required |
|---|---|
| Cisco Catalyst 8000V Autonomous mode | SSH Public Key, user name for SSH / console access, License Token (BYOL) |
| Fortinet FortiGate Firewall | SSH Public Key, user name for SSH / console access, Token ID or FortiFlex license |
| Fortinet FortiGate SD-WAN | Token ID or FortiFlex license, Temporary Password, Controller IP (Controller/Orchestrator IP) |
| Palo Alto VM-Series Firewall | SSH Public Key, Token ID (Optional for non-Cluster) |
| Zscaler App Connector and Private Service Edge | Image version, SSH Public Key, Provisioning Key |
Re-Instantiate Device
-
Sign in to the Equinix Customer Portal and navigate to Network Edge.
-
On the Network Edge menu, select Virtual Device Inventory.
-
Use the search filters to locate the virtual device you want to replace. Make sure you select the correct device to replace.
-
Click the device name, and then click Tools.
-
In the Replace Virtual Device section, click Request Replacement.
The required information is dependent upon the vendor. See the table below for each vendor’s specific request example.
- After entering the required information for your device, click Request.
-
In the Confirm Request box, click Submit Request.
| Vendor | Request Example |
|---|---|
| Arista CloudEOS | 
|
| Check Point CloudGuard Security | 
|
| Cisco Adaptive Security Appliance | 
|
| Cisco Catalyst 8000V Autonomous Mode | 
|
| Fortigate Firewall | 
|
| Fortigate SD-WAN | 
|
| Juniper vSRX | 
|
| Palo Alto Networks VM-Series Firewall | 
|
| Zscaler App Connector and Private Service Edge | 
|
Warning: Once the request has been submitted, this process can’t be canceled.
While the device request is in progress, the device status will change to Provisioning.
Once the replacement process is done, the status changes to Completed and includes a time stamp. The Device Provisioning Status changes to Provisioned.
If any issues prevent the replacement process from completing successfully, the status will read Failed. If a failure occurs, open a support case. For information about opening a case, see Support.
