Juniper SSR1500 User manual

Quick Start
Cloud-Ready SSR1500
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 5
Step 3: Keep Going | 8
Step 1: Begin
IN THIS SECTION
Meet the Cloud-Ready SSR1500 | 2
Claim Your Appliance | 2
In this guide, we provide a simple, three-step path, to quickly get the Juniper Networks® SSR1500 appliance up and
running on Juniper Mist™ cloud. You can on-board a single device using your mobile phone, or one or more devices
using your computer. Once on-board, we'll walk you through the steps to create a basic conguraon. You'll need your
Juniper Mist WAN Assurance subscripon and your login credenals for the Juniper Mist portal.
NOTE: Before you begin, you must set up your organizaon and sites, and acvate your subscripons. For more
informaon, see Quick Start: Mist.

Meet the Cloud-Ready SSR1500
The SSR1500 is a 1 U xed conguraon appliance that's ideal for for extra large data center or campus deployments.
Powered by the Juniper® Session Smart Router (SSR) soware, the SSR1500 provides secure and resilient WAN
connecvity.
The SSR1500 has four 1 GbE ports, twelve 1/10/25 GbE SFP28 ports, a management port (for Mist operaons), 512
GB of memory, and a 1 TB enterprise-grade solid-state drive (SSD) for storage.
Claim Your Appliance
IN THIS SECTION
Mist AI App QR Scan | 3
Enter the Mist Claim Code | 3
The SSR1500 comes ready to manage using the Juniper Mist™ Cloud portal.
To add the SSR1500 to your organizaon's WAN Edge inventory, you must enter the SSR1500 claim informaon into
Mist. The claim code label (QR code scker) on the front panel has the claim informaon.
To enter the claim informaon, do one of the following:
• Scan the QR code with the Mist AI mobile applicaon. See "Mist AI App QR Scan" on page 3.
• Manually enter the claim code in Mist. The claim code is the number above the QR code. For example: In this picture,
the claim code is FVDHMB5NGFEVY40. See "Enter the Mist Claim Code" on page 3.
2

Mist AI App QR Scan
You can download the Mist AI App from the Mac App Store or from Google Play Store.
1. Open the Mist AI app and log in using your account credenals. If you do not have an account, see Create a Mist
Account and Organizaon.
2. Select your organizaon.
3. Tap Claim Devices to Org.
4. Scan the QR code. The app automacally claims the device and adds it into your organizaon's inventory.
5. On the Organizaon screen, tap Device Inventory → Routers → Unassigned.
Review the MAC address.
Onboarding Complete!
Fantasc, the SSR1500 is in your inventory! To provision the SSR1500, see "Step 2: Up and Running" on page 5.
Enter the Mist Claim Code
Claiming mulple devices—When you purchase mulple devices, we provide you with an acvaon code along with
your PO informaon. Make a note of this code.
Claiming a single device—Locate the QR code on your device and make a note of the alphanumeric claim code directly
above it.
1. Open the Juniper Mist™ Cloud portal and log in to your account. If you do not have an account, see Create a Mist
Account and Organizaon.
3

2. Select Organizaon > Inventory from the menu on the le, then select the WAN Edges tab at the top.
3. Click Claim WAN Edges in the upper right poron of the inventory screen.
4. Enter the SSR1500 Acvaon code or claim code and click Add.
5. Clear the Assign claimed WAN Edges to site check box to place the SSR1500 in the inventory. The SSR1500 is
assigned to a site later, see "Assign the SSR1500 to a Site" on page 6.
6. Click the Claim buon to claim the SSR1500 into your inventory.
Video: Add the Claim Informaon in Mist
Onboarding Complete!
Fantasc, the SSR1500 is in your inventory! To provision the SSR1500, see "Step 2: Up and Running" on page 5.
4

Step 2: Up and Running
SUMMARY
The SSR1500 is onboarded to the Juniper Mist™ Cloud. To
provision the SSR1500 with ZTP, log in to your Mist portal
and begin the WAN conguraon. Conguring your SSR
device is made simple through the use of the SSR WAN Edge
Templates.
IN THIS SECTION
Create a WAN Edge Template | 5
Assign the Template to a Site | 6
Assign the SSR1500 to a Site | 6
Install the SSR1500 in a Rack | 7
Connect Your SSR1500 to the Mist Cloud | 7
Create a WAN Edge Template
IN THIS SECTION
Create a Template | 5
The WAN Edge Templates provide you with the basic network conguraon in a single step, and allow for re-usable and
consistent conguraon for every SSR device you deploy. The template provides device specic, precongured WAN
interfaces, LAN interfaces, a trac steering policy, and an applicaon policy.
Create a Template
To create a Template:
1. Select Organizaon > WAN Edge Templates from the menu on the le.
2. Click Create Template in the upper-right corner of the WAN Edge Templates page.
3. Enter a name for the template.
4. Select Create from Device Model.
5. Select your SSR device from the Model drop down.
6. Click Create. Your SSR device template is displayed.
5

7. Scroll down through the template to see the precongured WAN interfaces, LAN interfaces, TRAFFIC STEERING,
and APPLICATION POLICIES.
Video: Create a Template
Great job! You now have a working WAN Edge template you can apply to many sites and devices across your
organizaon.
Assign the Template to a Site
Now that you have set up the template, you need to assign it to the site where your SSR device will be deployed.
1. Click the Assign to Site buon, and select the site to which you want to apply the template conguraon.
2. Click Apply.
Great work! All that remains is to associate the SSR1500 with a site.
Assign the SSR1500 to a Site
Aer the SSR1500 is onboarded to the Mist cloud, you'll need to assign it to a site so you can begin to manage the
conguraon and gather data in Mist cloud.
1. Select Organizaon > Inventory. The status of the SSR1500 is shown as Unassigned.
2. Select the SSR1500 and from the More drop-down list, select Assign to Site.
3. Select the site from the Site list.
NOTE: Under Manage Conguraon, do not check the Manage Conguraon with Mist checkbox for the
SSR1500 if it is using Session Smart Router soware version 5.4.4. This allows the SSR1500 to reach out to
the conductor IP address specied when the site was created to receive conguraon informaon.
If you are onboarding a Mist-managed appliance using Session Smart Router soware version 6.0, select
Manage Conguraon with Mist. If you do not select Manage Conguraon with Mist, the SSR1500 will not
be managed by Mist.
4. Click Assign to Site.
Video: Assign the SSR1500 to a Site
The site assignment takes a few minutes. Aer the site is fully onboarded, use the Mist WAN Edge - Device View to
access the SSR1500, and the Insights view to view events and acvity.
6

Install the SSR1500 in a Rack
Install the SSR1500 in a rack and connect it to power. For instrucons see the hardware guide on the Juniper Mist
Supported Hardware page.
Connect Your SSR1500 to the Mist Cloud
Your SSR1500, uses port labelled MGMT (mgmt-0/0/0) as the default port to contact Mist for zero-touch provisioning
(ZTP). It uses port 2/1 (xe-0/2/1) to connect to the LAN.
1. Connect the MGMT port to an Ethernet link that can assign a DHCP address to the SSR1500 and provide
connecvity to the Internet and Mist.
NOTE: For management, you can connect the SSR1500 to Mist using the MGMT port. You can also connect
to Mist from one of the WAN ports only when the MGMT port is disconnected, or does not have a valid
DHCP leased address and default route.
Do not change the Mist management port once your appliance is powered on and connected to the Mist
Cloud instance.
2. Connect port 2/1 to your LAN devices, such as
• Mist-managed Juniper EX switches
• Mist APs
• User devices
3. Power on the SSR1500.
Great job! Your SSR1500 is now connected to the Mist cloud! In just a few minutes, Mist will send the template-driven
conguraon down to your device. Once the conguraon has been applied, it will begin forwarding sessions from LAN
to WAN as described by your policy.
Go to the WAN Edges menu on the Mist sidebar, select your device, and watch events as the device completes ZTP.
7

As your client devices connected to the LAN are assigned addresses from the WAN Edge DHCP server and begin
sending sessions, telemetry will populate the insights page, and Marvis will start analyzing it on your behalf.
Step 3: Keep Going
SUMMARY
Congratulaons! Now that you've done the inial
conguraon, your SSR1500 is ready to use. Here are some
things you can do next:
IN THIS SECTION
What's Next? | 8
General Informaon | 8
Learn with Videos | 9
What's Next?
If you want to Then
Understand the various conguraons available on the
SSR1500
See Conguraon Management on the SSR
Congure essenal user access and authencaon features See Access Management
Upgrade the soware See Upgrading the SSR Networking Plaorm
General Informaon
If you want to Then
See all documentaon available for the SSR1500 See the SSR1500 Documentaon in the Juniper Networks
TechLibrary
See all documentaon available for SSR soware Visit Session Smart Router (formerly 128T)
8

(Connued)
If you want to Then
Stay up-to-date with new and changed features and known and
resolved issues
See the SSR Release Notes
Learn with Videos
Here are some great video and training resources that will help you expand your knowledge of SSR Soware.
If you want to Then
Get short and concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Videos on Juniper Networks main YouTube
page
View a list of the many free technical trainings we oer at
Juniper
Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
9