Juniper SSR130 User manual

Quick Start
SSR130
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 15
Step 3: Keep Going | 16
Step 1: Begin
IN THIS SECTION
Meet the SSR130 | 2
Claim Your Device | 2
Add the Network | 4
Add an Applicaon | 6
Create a Template | 7
Create Policies | 11
Assign the Template to a Site | 13
Assign the SSR130 to a Site | 14
This guide walks you through the simple steps to get a new cloud-ready SSR130 up and running in the Juniper Mist AI
cloud portal. You can onboard a single device using your mobile phone, or one or more devices using your computer.
Once onboarded, we'll walk you through the steps to create a basic conguraon.

You'll need a Juniper Mist WAN Assurance subscripon and your login credenals for the Juniper Mist portal.
Meet the SSR130
The Juniper Networks SSR130 network appliance is part of the SSR porolio. The SSR130 features four 1 GbE ports,
two 1 GbE RJ-45/SFP combo ports, 8 GB of memory, and a 120 GB enterprise-grade solid-state drive (SSD) for storage.
The SSR130 runs the FIPS 140-2 Level 1 compliant Session Smart Router (SSR) soware, which provides secure and
resilient WAN connecvity.
The SSR130 is available in models with or without LTE support.
Claim Your Device
IN THIS SECTION
Scan the QR Code | 3
Enter the Mist Claim Code | 4
To add the SSR130 to your organizaon's WAN Edge inventory, you'll need to enter the SSR130 claim informaon into
Mist. Locate the claim label on the rear panel.
There are two ways to enter the device claim informaon into Mist. Choose the method that is best for you.
• Scan the QR code with the MistAI app
• Manually enter the claim code in Mist
2

NOTE: You can download the Mist Applicaon from the following mobile app stores:
For Apple Devices
For Android Devices
Scan the QR Code
1. Open your MistAI App.
2. Select Claim Devices to Org.
3. Scan the QR code.
3

Enter the Mist Claim Code
1. Log in to your Mist organizaon's dashboard.
2. Navigate to your organizaon's inventory, and select the WAN tab at the top.
3. Select the Claim WAN Edges buon in the upper right of the inventory screen.
4. Add the claim code into the list of devices to claim.
5. Clear the Assign claimed WAN edges to site check box. This places the SSR into inventory, to be assigned to a site
later.
6. Click the Claim buon to claim the SSR into your inventory.
Onboarding Complete!
Fantasc, the SSR130 is in your inventory! To provision the SSR130 with ZTP, log in to Mist and connue with WAN
conguraon.
Add the Network
To begin your WAN design, idenfy the network the SSR will use to access applicaons over a LAN network segment.
4

1. From the Mist dashboard, navigate to the WAN secon of the organizaon sidebar menu, and select Networks.
2. Select Add Networks in the upper right.
3. Give the network a name.
5

4. Congure the network subnet as 192.168.1.0/24.
5. Click Save at the boom of the Edit Network side panel.
Excellent! You have now dened this network for use across the enre organizaon, including the template you will
apply to your new SSR130.
Add an Applicaon
SUMMARY
Next, dene the applicaons for the WAN to deliver, starng with the Internet.
1. Navigate back to the WAN secon of the organizaon sidebar menu, and select Applicaons.
2. Select Add Applicaons in the upper right.
3. Name the applicaon Internet.
6

4. Enter 0.0.0.0/0, or an IPv4 address space in the IP Addresses conguraon.
5. Click Save at the boom of the Add Applicaon side panel.
Nice! Your organizaon is set up to provide access to the Internet using the WAN.
Create a Template
IN THIS SECTION
Dene the WAN Port | 9
Dene the LAN Port | 10
So far you have an SSR device waing to be claimed, a network for your LAN, and an Internet applicaon for your WAN
to deliver. Next, you need to create a WAN Edge template that es them all together. Templates provide a re-usable and
consistent conguraon for every SSR you deploy.
1. Navigate back to the WAN secon of the organizaon sidebar menu, and select WAN Edge Templates.
7

2. Select Create Template in the upper right.
3. Name the template.
4. Click Create.
8

5. Enter NTP and DNS informaon to be used by the WAN edge device.
Dene the WAN Port
The rst thing to do in your template is to dene which port to use for the WAN.
1. Scroll to the WAN secon of the template, and select Add WAN.
2. Name the WAN port wan1.
3. Since you already plugged port 0 on the SSR130 into the Internet, enter ge-0/0/0 to designate it as a WAN port.
4. Make sure IP Conguraon is set to DHCP, and that Source NAT is enabled.
9

5. Click Add at the boom of the Edit WAN Conguraon side panel.
Dene the LAN Port
Next, associate your LAN with the appropriate port on the SSR, and give the LAN addional network services such as
DHCP.
1. Scroll to the LAN secon of the template, and select Add LAN.
2. From the Network drop-down menu, select your network segment to associate it with the LAN.
3. Enter the port used for the LAN port, for example ge-0/0/3.
4. Enter 192.168.1.1 as the IP Address to assign the WAN edge device .1 as a gateway in the network.
10

5. Enter /24 for the Prex Length.
6. Enable the DHCP Server buon to provide DHCP services to endpoints on this network.
7. Give your DHCP server an address pool starng with 192.168.1.100 and ending with 192.168.1.200.
8. Enter 192.168.1.1 as the Gateway to be assigned to DHCP clients.
9. Finally, enter 1.1.1.1,8.8.8.8 as DNS Servers to be assigned to clients on the network.
10. Click Add at the boom of the Edit LAN Conguraon side panel.
Create Policies
IN THIS SECTION
Dene the Trac Steering Policy | 12
Dene the Applicaon Policy | 13
11

Your template has WANs and LANs; now you need to tell the SSR130 how to use them to connect users to applicaons.
This is done using Trac Steering and Applicaon Policies.
Dene the Trac Steering Policy
1. Scroll to the Trac Steering secon of the template, and select Add Trac Steering.
2. Name your steering policy, for example, local-breakout.
3. Select Add Paths to give your steering policy a path to send trac.
4. Select WAN as the path type, and select your WAN interface. For apps that use the policy, this indicates you want
them sent directly out of the local WAN interface.
5. Click the check in the upper right of the Add Path box, and then click Add at the boom of the Add Trac Steering
side panel.
Next, dene the Applicaon Policy.
12

Dene the Applicaon Policy
The Applicaon Policy es the networks and applicaons together.
1. Scroll to the Applicaon Policy secon of the template, and select Add Policy.
2. Enter a string in the name column, and click the check box to the right of your entry.
3. From the Network column drop-down, select your LAN network.
4. From the Applicaons column drop-down, select your Internet app.
5. From the Trac Steering column drop-down, select your local breakout steering policy.
Almost there! You now have a working WAN Edge template that you can apply to many sites and devices across your
organizaon.
Assign the Template to a Site
Now that you have set up a template, you need to save and assign it to the site where your SSR will be deployed.
1. Scroll to the top and click Save.
13

2. Click the Assign to Site buon, and select the site where you want the template cong applied.
Great work! All that remains is to associate the SSR with a site.
Assign the SSR130 to a Site
Associang the device with the site and template gets you a working cong!
1. Go to your organizaon's WAN Edges Inventory.
2. Select your SSR130.
3. Assign the SSR to your site.
4. If you are conguring a Mist-managed router (SSR Soware version 6.x and greater), check the Manage conguraon
with Mist check box. For version 5.4.x and greater conductor-managed routers, make sure there is no check mark in
the Manage Conguraon from Mist under Manage Conguraon.
5. Select Assign to Site.
Congratulaons you now have a Mist-claimed SSR130 with a basic conguraon ready to send to your device! Step 2
will get your SSR130 rack or wall mounted, powered up, and connected to your network.
14

Step 2: Up and Running
IN THIS SECTION
Install the SSR130 Hardware | 15
Connect to the Network | 15
Connect your SSR130 to the Mist Cloud | 15
Now that the SSR130 is onboarded to the Juniper Mist™ cloud, and you have a working conguraon ready to push to
the device, let's get that SSR130 mounted and running!
Install the SSR130 Hardware
Your SSR130 installaon has specic features that must be installed depending on your use and environment . Refer to
the SSR130 Hardware Installaon Guide to complete the following procedures:
• Rack, Wall, or Surface Mounng
• LTE Antenna Install
• SIM Card Install
•Connecng Power
Please return here aer compleng those procedures to complete the network connecons.
Connect to the Network
Once the SSR130 has been mounted appropriately and power is connected, it's me to make your network
connecons!
Connect your SSR130 to the Mist Cloud
Your SSR130 uses port 0 (ge-0-0) as a default WAN port to contact Mist for zero-touch provisioning (ZTP). You'll need to
set up port 3 (ge-0-3) with a LAN network.
1. Connect SSR port 0 to an Ethernet WAN link that can provide:
15

• DHCP address assignment
•Connecvity to the Internet and Mist (see Firewall Requirements)
2. Connect SSR port 3 to your LAN devices, including:
• Mist-managed Juniper EX switches
• Mist APs
• User devices
Great job, your SSR130 is now connected to the Mist cloud! In just a few minutes, Mist will send the template-driven
conguraon down to your device. Once the conguraon has been applied, it will begin forwarding sessions from LAN
to WAN as described by your policy.
Head over to the WAN Edges menu on the Mist sidebar, select your device, and watch events as the device completes
ZTP.
As your client devices connected to the LAN are assigned addresses from the WAN Edge DHCP server and begin
sending sessions, telemetry will populate the insights page, and Marvis will start analyzing it on your behalf.
For conductor-managed devices, addional views for Cloud Telemetry are congurable in the SSR GUI and PCLI.
Step 3: Keep Going
IN THIS SECTION
What's Next? | 17
General Informaon | 17
16

Learn with Videos | 17
Congratulaons! Now that you've done the inial conguraon, your SSR130 is ready to use. Here are some things you
can do next:
What's Next?
If you want to Then
Get an overview of the SSR conguraon and how it is
managed
See the SSR Conguraon Management secon of the SSR
Documentaon in the Juniper Networks TechLibrary
General Informaon
If you want to Then
See all documentaon available for the SSR130 See the SSR130 Documentaon in the Juniper Networks
TechLibrary
See all documentaon available for SSR soware Visit Session Smart Router Documentaon in the Juniper
Networks TechLibrary
Stay up-to-date about new and changed features and known
and resolved issues
See the SSR Release Notes
Learn with Videos
Here are some great video and training resources that will help you expand your knowledge of SSR Soware.
17

If you want to Then
Learn about Virtual Router Redundancy Protocol for the SSR See SSR Virtual Router Redundancy Protocol on the SSR
YouTube page
Learn about BFD for Tradional Roung See BFD for Tradional Roung on the SSR YouTube page
Learn about Conguraon Concurrency with the SSR See Conguraon Concurrency on the SSR YouTube page
Learn about Service Route Redundancy and Vectors See Service Route Redundancy and Vectors on the SSR YouTube
page
Get short, concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Juniper on Juniper Networks main YouTube
page
View a list of free technical training oered by Juniper Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
18