Juniper SSR1400 User manual

Quick Start
Cloud-Ready SSR1400
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 4
Step 3: Keep Going | 13
Step 1: Begin
IN THIS SECTION
Meet the Cloud-Ready SSR1400 | 2
Claim Your Appliance | 2
In this guide, we provide a simple, three-step path, to quickly get the Juniper Networks® SSR1400 appliance up and
running on Juniper Mist™ cloud. You can on-board a single device using your mobile phone, or one or more devices
using your computer. Once on-board, we'll walk you through the steps to create a basic conguraon. You'll need your
Juniper Mist WAN Assurance subscripon and your login credenals for the Juniper Mist portal.
NOTE: Before you begin, you must set up your organizaon and sites, and acvate your subscripons. For more
informaon, see Quick Start: Mist.

Meet the Cloud-Ready SSR1400
The SSR1400 is a 1 U xed conguraon appliance that's ideal for large data center or campus deployments. Powered
by the Juniper® Session Smart Router (SSR) soware, the SSR1400 provides secure and resilient WAN connecvity.
The SSR1400 has four 1 GbE ports, four 1/10/25 GbE SFP28 ports, four 10 GbE SFP+ ports, a management port (for
Mist operaons), 256 GB of memory, and a 512 GB enterprise-grade solid-state drive (SSD) for storage.
Claim Your Appliance
IN THIS SECTION
Mist AI App QR Scan | 2
Enter the Mist Claim Code | 3
The SSR1400 comes ready to manage using the Juniper Mist™ Cloud portal.
To add the SSR1400 to your organizaon's WAN Edge inventory, you must enter the SSR1400 claim informaon into
Mist. The claim code label (QR code scker) on the front panel has the claim informaon.
To enter the claim informaon, do one of the following:
• Scan the QR code with the Mist AI mobile applicaon. See "Mist AI App QR Scan" on page 2.
• Manually enter the claim code in Mist. The claim code is the number above the QR code. For example: In this picture,
the claim code is KF9HC588GPSFRCZ. See "Enter the Mist Claim Code" on page 3.
Mist AI App QR Scan
You can download the Mist AI App from the Mac App Store or from Google Play Store.
2

1. Open the Mist AI app and log in using your account credenals. If you do not have an account, see Create a Mist
Account and Organizaon.
2. Select your organizaon.
3. Tap Claim Devices to Org.
4. Scan the QR code. The app automacally claims the device and adds it into your organizaon's inventory.
5. On the Organizaon screen, tap Device Inventory → Routers → Unassigned.
Review the MAC address.
Onboarding Complete!
Fantasc, the SSR1400 is in your inventory! To provision the SSR1400, see "Step 2: Up and Running" on page 4.
Enter the Mist Claim Code
Claiming mulple devices—When you purchase mulple devices, we provide you with an acvaon code along with
your PO informaon. Make a note of this code.
Claiming a single device—Locate the QR code on your device and make a note of the alphanumeric claim code directly
above it.
1. Open the Juniper Mist™ Cloud portal and log in to your account. If you do not have an account, see Create a Mist
Account and Organizaon.
2. Select Organizaon > Inventory from the menu on the le, then select the WAN Edges tab at the top.
3. Click Claim WAN Edges in the upper right poron of the inventory screen.
4. Enter the SSR1400 Acvaon code or claim code and click Add.
3

5. Clear the Assign claimed WAN Edges to site check box to place the SSR1400 in the inventory. The SSR1400 is
assigned to a site later, see "Assign the SSR1400 to a Site" on page 11.
6. Click the Claim buon to claim the SSR1400 into your inventory.
Video: Add the Claim Informaon in Mist
Onboarding Complete!
Fantasc, the SSR1400 is in your inventory! To provision the SSR1400, see "Step 2: Up and Running" on page 4.
Step 2: Up and Running
SUMMARY
The SSR1400 is onboarded to the Juniper Mist™ Cloud. To
provision the SSR1400 with ZTP, log in to your Mist portal
and begin the WAN conguraon.
IN THIS SECTION
Add the Network | 5
Add Applicaons | 6
Create a WAN Edge Template | 6
Assign the Template to a Site | 11
4

Assign the SSR1400 to a Site | 11
Install the SSR1400 in a Rack | 11
Connect Your SSR1400 to the Mist Cloud | 12
Add the Network
To begin your WAN design, idenfy the network to be used for accessing applicaons over a LAN network segment.
1. Select Organizaon > Networks from the menu on the le.
2. Click Add Networks in the upper-right corner of the Networks page.
Video: Access the Add Networks Page
3. Enter a name for the network.
4. Enter the network subnet. For example, 192.168.1.0/24.
5. Click Add.
Excellent! This network is now dened for use across the enre organizaon, including the template that you will apply
to your SSR1400.
5

Add Applicaons
Dene the applicaons for the WAN to deliver, starng with the Internet.
1. Select Organizaon > Applicaons from the menu on the le.
2. Click Add Applicaons in the upper-right corner of the Applicaons page.
Video: Access the Add Applicaons Page
3. Enter the name of the applicaon. For example, Internet.
4. Enter 0.0.0.0/0, or all IPv4 address space in the IP Addresses eld.
5. Click Add.
Nice! Your organizaon is now set up to provide access to the Internet.
Create a WAN Edge Template
IN THIS SECTION
Create a Template | 7
Congure the WAN Port | 7
Congure the LAN Port | 8
Congure Trac Steering Policy | 10
6

Congure the Applicaon Policy | 10
Excellent! Now you have the SSR1400 waing to be claimed, a network for your LAN, and an applicaon. Next, you
need to create a WAN Edge template that es them all together! Templates are reusable and keep the conguraon
consistent for every SSR1400 you deploy.
Create a Template
To create a Template:
1. Select Organizaon > WAN Edge Templates from the menu on the le.
2. Click Create Template in the upper-right corner of the WAN Edge Templates page.
3. Enter a name for the template.
4. Click Create.
5. Enter the NTP and DNS informaon for the WAN edge device as per your network requirements.
Video: Create the Template
Congure the WAN Port
The rst thing to do in your template is to specify which port to use for the WAN.
1. Scroll to the WAN secon of the template, and click Add WAN.
2. Enter the name for the WAN port. For example, wan1.
Video: Add WAN Conguraon
3. Enter the interface as xe-0/0/0 to designate it as a WAN port.
7

4. Click Add.
Congure the LAN Port
Next, associate your LAN network segment with the appropriate port on the SSR1400.
1. Scroll to the LAN secon of the template, and click Add LAN.
Video: Add LAN Conguraon
2. From the Network dropdown menu, select your network segment to associate it with the LAN port.
3. Enter the interface for the LAN port, for example, xe-0/0/3.
4. Enter 192.168.1.1 as the IP Address that needs to be assigned to the WAN edge device .1 for use as the gateway
in the network.
5. Enter /24 as the Prex Length.
8

6. Select Server under DHCP to provide DHCP services to endpoints on this network.
7. Give your DHCP server an address pool starng with 192.168.1.100 and ending with 192.168.1.200.
8. Enter 192.168.1.1 as the gateway to be assigned to DHCP clients.
9. Finally, enter the IP addresses for the DNS Servers to be assigned to clients on the network. For example, 8.8.8.8,
8.8.4.4.
10. Click Add.
Your template has the WAN and LAN informaon. Now, you need to tell the SSR1400 how to use the informaon to
connect users to applicaons. This is done using trac steering and applicaon policies.
9

Congure Trac Steering Policy
To congure Trac Steering policy:
1. Scroll to the Trac Steering secon of the template, and click Add Trac Steering.
Video: Add Trac Steering Policy
2. Enter a name for the steering policy, for example, local-breakout.
3. Click Add Paths to give your steering policy a path to send trac.
4. Select WAN as the path type, and select your WAN interface. For applicaons that use the policy, this indicates you
want the trac to be sent directly out of the local WAN interface.
5. Click the ✓ buon in the upper right corner of the Add Path panel, and then click Add at the boom of the Add
Trac Steering side panel.
Congure the Applicaon Policy
To congure Applicaon policy:
1. Scroll to the Applicaon Policies secon of the template, and click Add Applicaon Policy.
Video: Add Applicaon Policy
2. Enter a string in the Name column, and click the check mark to the right of your entry.
3. Select your LAN network from the Network column drop-down list. Select Allow from the Acon column drop-down
list.
4. Select your applicaon from the Applicaons column drop-down list. For example, applicaon Internet that you
created in "Add Applicaons" on page 6.
5. Select your local breakout steering policy from the Trac Steering column drop-down list.
Video: Congure the Applicaon Policy
Almost there! You now have a working WAN Edge template that you can apply to many sites and appliances across your
organizaon.
10