Juniper SSR1500 User manual

Quick Start Guide
SSR1500
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 6
Step 3: Keep Going | 15
Step 1: Begin
SUMMARY
In this guide, we provide a simple, three-step path, to quickly
get the Juniper Networks® SSR1500 appliance up and
running on Juniper Mist™ cloud. You'll learn how to install,
power on, and congure basic sengs for an AC-powered
SSR1500 appliance.
IN THIS SECTION
Meet the SSR1500 | 1
Install the SSR1500 | 2
Power On | 5
Meet the SSR1500
The SSR1500 is a 1 U xed conguraon appliance that's ideal for large data center or campus deployments. Powered
by the Juniper® Session Smart Router (SSR) soware, the SSR1500 provides secure and resilient WAN connecvity.
The SSR1500 has four 1 GbE ports, twelve 1/10/25 GbE SFP28 ports, a management port (for Mist operaons), 512
GB of memory, and a 1 TB enterprise-grade solid-state drive (SSD) for storage.

Install the SSR1500
IN THIS SECTION
What's in the Box? | 2
What Else Do I Need? | 2
Rack It | 3
What's in the Box?
Along with your SSR1500, you’ll nd:
• RJ-45 to USB A serial cable
• AC power cord (country-specic)
• Rack mount kit
• Two front mounng brackets
• Two side mounng rails
• Two rear mounng blades
• Six M4 i-head screws (for the front mounng brackets)
• Ten rack screws and cage nuts
• Eight M4 at-head screws
What Else Do I Need?
• Number 2 or 3 Phillips (+) screwdriver, depending on the size of your rack screws
• A management host such as a laptop or desktop PC
2

• A grounding cable
CAUTION: Ensure that a licensed electrician has aached the appropriate grounding lug to your
grounding cable. Using a grounding cable with an incorrectly aached lug can damage the SSR1500.
Rack It
Here’s how to install the SSR1500 in a four-post rack:
1. Review the General Safety Guidelines and Warnings.
2. Wrap and fasten one end of the electrostac discharge (ESD) cable grounding strap around your bare wrist, and
connect the other end to a site ESD point.
3. Aach the front mounng brackets to the front of the chassis using the six M4 at-head screws.
4. Secure the six M4 i-head screws to the sides of the chassis. Posion the side mounng rails such that the keyholes
of the side mounng rails align with the M4 i-head screws on the chassis. Slide and lock the side mounng rails in
place and use the two M4 at-head screws to secure the rails.
5. Grasp both sides of the SSR1500 chassis, li it, and posion it in the rack so that the front mounng bracket holes
align with the threaded holes in the rack rail.
NOTE: Ensure that the rear of the device is supported while you mount the SSR1500 in the rack.
6. While you’re holding the SSR1500 in place, have a second person insert and ghten the rack-mount screws to
secure the front mounng brackets to the rack rails. Tighten the screws in the two boom holes rst, then ghten
the screws in the two top holes.
3

7. Connue to support the SSR1500 in place and have the second person slide the rear mounng blades into the
channels of the side mounng rails.
8. Secure the rear mounng blades on each side of the chassis to the rack post using the rack mounng screws.
9. Check that the front mounng brackets on each side of the rack are lined up with each other.
10. Aach a grounding cable to earth ground and then aach the other end to the SSR1500 grounding point.
4

11. Dress the grounding cable. Ensure that it doesn’t touch or block access to other device components, and that it
doesn’t drape where people could trip over it.
Power On
Now that you’ve installed your SSR1500 in the rack and grounded the chassis, you’re ready to connect it to power.
The SSR1500 supports redundant AC power supplies that are pre-installed at the factory. It comes with two AC power
supplies preinstalled on the rear of the device.
1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end to one of
the ESD grounding points on the router.
2. Turn o the power switch on the SSR1500.
3. Make sure that the power supplies are fully inserted in the chassis.
4. Push the end of the power cord retainer strip into the hole under the power supply socket unl it snaps into place.
Ensure that the loop in the retainer strip faces the input on the PSU.
5. Press the small tab on the retainer strip to loosen the loop. Slide the loop unl there is enough space to insert the
power cord coupler through the loop into the power supply socket.
6. Insert the power cord coupler rmly into the power supply socket.
7. Slide the loop toward the power supply socket unl it is snug against the base of the coupler.
8. Press the tab on the loop and draw out the loop into a ght circle.
9. If the AC power source outlet has a power switch, turn it o.
10. Insert the power cord plug into an AC power source outlet.
WARNING: Ensure that the power cord does not block access to the appliance components or
drape where people can trip on it.
11. If the AC power source outlet has a power switch, turn it on.
12. Turn on the power switch on the SSR1500.
5

Step 2: Up and Running
IN THIS SECTION
Connect Your SSR1500 to the Mist Cloud | 6
Claim Your Appliance | 7
Add the Network | 9
Add Applicaons | 9
Create a Template | 10
Assign the Template to a Site | 14
Assign the SSR1500 to a Site | 14
Now that the SSR1500 is powered on, let's get it up and running on Juniper Mist™ cloud. You'll need Juniper Mist WAN
Assurance subscripon and login credenals for the Juniper Mist portal.
Connect Your SSR1500 to the Mist Cloud
Your SSR1500 uses port MGMT (mgmt-0/0/0) as the default port to contact Mist for zero-touch provisioning (ZTP). It
uses port 2/1 (xe-0/2/1) to connect to the LAN.
1. Connect the MGMT port to an Ethernet link that can assign a DHCP address to the SSR1500 and provide
connecvity to the Internet and Mist.
NOTE: For management, you can connect the SSR1300 to Mist using the MGMT port. You can also connect
to Mist from one of the WAN ports only when the MGMT port is disconnected, or does not have a valid
DHCP leased address and default route.
2. Connect port 2/1 to your LAN devices, such as
• Mist-managed Juniper EX switches
• Mist APs
• User devices
6

3. Power on the SSR1500.
Your SSR1500 is now connected to the Mist cloud.
Claim Your Appliance
IN THIS SECTION
Mist AI App QR Scan | 8
Enter the Mist Claim Code | 8
To add the SSR1500 to your organizaon's WAN Edge inventory, you'll need to enter the SSR1500 claim informaon
into Mist. The claim label (QR code scker) on the front panel has the claim informaon.
To enter the claim informaon, do one of the following:
• Scan the QR code with the Mist mobile applicaon.
• You can also manually enter the claim code in Mist. The claim code is the number above the QR code. For example:
In this picture, the claim code is FVDHMB5NGFEVY40.
7

Mist AI App QR Scan
You can download the Mist AI App from the Mac App Store or from Google Play Store.
1. Open the Mist AI app.
2. Click Claim Devices to Org.
3. Scan the QR code.
Enter the Mist Claim Code
1. Log in to your organizaon on the Juniper Mist cloud.
2. Select Organizaon > Inventory from the menu on the le, then select the WAN Edges tab at the top.
3. Click Claim WAN Edges in the upper right poron of the inventory screen.
4. Enter the SSR1500 claim code and click Add.
5. Uncheck the Assign claimed WAN Edges to site check box to place the SSR1500 in the inventory. The SSR1500 is
assigned to a site later.
6. Click the Claim buon to claim the SSR1500 into your inventory.
8

Video: Add the Claim Informaon in Mist
Add the Network
Add the network to be used for accessing applicaons over a LAN network segment.
1. Select Organizaon > Networks from the menu on the le.
2. Click Add Networks in the upper-right corner of the Networks page.
Video: Access the Add Networks Page
3. Enter a name for the network.
4. Enter the network subnet as 192.168.1.0/24.
5. Click Add.
This network is now dened for use across the enre organizaon, including the template that you'll apply to your
SSR1500.
Add Applicaons
1. Select Organizaon > Applicaons from the menu on the le.
2. Click Add Applicaons in the upper-right corner of the Applicaons page.
9

Video: Access the Add Applicaons Page
3. Enter the name for the applicaon as Internet.
4. Enter 0.0.0.0/0, or all IPv4 address spaces in the IP Addresses eld.
5. Click Add.
Your organizaon is now set up to provide access to the Internet.
Create a Template
Excellent! Now you have the SSR1500 waing to be claimed, a network for your LAN, and an Internet applicaon. Next,
you need to create a WAN Edge template that es them all together. Templates are reusable and keep the conguraon
consistent for every SSR1500 you deploy.
1. Select Organizaon > WAN Edge Templates from the menu on the le.
2. Click Create Template in the upper-right corner of the WAN Edge Templates page.
3. Enter a name for the template.
4. Click Create.
5. Enter the NTP and DNS informaon for the WAN edge device.
Video: Create the Template
Congure the WAN Port
The rst thing to do in your template is to dene which port to use for the WAN.
10

1. Scroll to the WAN secon of the template, and click Add WAN.
2. Enter the name for the WAN port as wan1.
Video: Add WAN Conguraon
3. Enter the interface as ge-0/1/0 to designate it as a WAN port.
4. Click Add.
Congure the LAN Port
Next, associate your LAN network segment with the appropriate port on the SSR1500.
1. Scroll to the LAN secon of the template, and click Add LAN.
Video: Add LAN Conguraon
2. From the Network drop-down menu, select your network segment to associate it with the LAN port.
3. Enter the interface for the LAN port, for example, xe-0/2/1.
4. Enter 192.168.1.1 as the IP Address that needs to be assigned to the WAN edge device .1 for use as the gateway
in the network.
5. Enter /24 as the Prex Length.
11

6. Select Server under DHCP to provide DHCP services to endpoints on this network.
7. Give your DHCP server an address pool starng with 192.168.1.100 and ending with 192.168.1.200.
8. Enter 192.168.1.1 as the gateway to be assigned to DHCP clients.
9. Finally, enter the IP addresses for the DNS Servers to be assigned to clients on the network. For example, 8.8.8.8,
8.8.4.4.
12

10. Click Add.
Congure Trac Steering and Applicaon Policies
Your template has the WAN and LAN informaon. Now, you need to tell the SSR1500 how to use the informaon to
connect users to applicaons. This is done using trac steering and applicaon policies.
To congure the steering policy:
1. Scroll to the Trac Steering secon of the template and click Add Trac Steering.
Video: Add Trac Steering Policy
2. Enter a name for the steering policy, for example, local-breakout.
3. Click Add Paths to give your steering policy a path to send trac.
4. Select WAN as the path type, and select your WAN interface. For applicaons that use the policy, this indicates you
want the trac to be sent directly out of the local WAN interface.
13

5. Click the ✓ buon in the upper right corner of the Add Path panel, and then click Add at the boom of the Add
Trac Steering side panel.
To congure the applicaon policy:
1. Scroll to the Applicaon Policies secon of the template, and click Add Applicaon Policy.
Video: Add Applicaon Policy
2. Enter a string in the Name column, and click the check mark to the right of your entry.
3. Select your LAN network from the Network column drop-down list. Select Allow from the Acon column drop-down
list.
4. Select your Internet applicaon from the Applicaons column drop-down list.
5. Select your local breakout steering policy from the Trac Steering column drop-down list.
Video: Congure the Applicaon Policy
Almost there! You now have a working WAN Edge template that you can apply to many sites and appliances across your
organizaon.
Assign the Template to a Site
Now that you've set up the template, you need to save and assign it to the site where your WAN edge device will be
deployed.
1. Scroll to the top of the page and click Save.
2. Click the Assign to Site buon, and select the site where you want the template conguraon applied.
Assign the SSR1500 to a Site
Aer the SSR1500 is onboarded to the Mist cloud, you'll need to assign it to a site so you can begin to manage the
conguraon and gather data in Mist cloud.
1. Select Organizaon > Inventory. The status of the SSR1500 is shown as Unassigned.
2. Select the SSR1500 and from the More drop-down list, select Assign to Site.
3. Select the site from the Site list.
14

NOTE: Under Manage Conguraon, do not check the Manage Conguraon with Mist checkbox for the
SSR1500 if it is using Session Smart Router soware version 5.4.4. This allows the SSR1500 to reach out to
the conductor IP address specied when the site was created to receive conguraon informaon.
If you are onboarding a Mist-managed appliance using Session Smart Router soware version 6.0, select
Manage Conguraon with Mist. If you do not select Manage Conguraon with Mist, the SSR1500 will not
be managed by Mist.
4. Click Assign to Site.
Video: Assign the SSR1500 to a Site
The site assignment takes a few minutes. Aer the site is fully onboarded, use the Mist WAN Edge - Device View to
access the SSR1500, and the Insights view to view events and acvity.
Step 3: Keep Going
SUMMARY
Congratulaons! Now that you've done the inial
conguraon, your SSR1500 is ready to use. Here are some
things you can do next:
IN THIS SECTION
What's Next? | 15
General Informaon | 16
Learn with Videos | 16
What's Next?
If you want to Then
Understand the various conguraons available on the
SSR1500
See Conguraon Management on the SSR
Congure essenal user access and authencaon features See Access Management
Upgrade the soware See Upgrading the SSR Networking Plaorm
15

General Informaon
If you want to Then
See all documentaon available for the SSR1500 See the SSR1500 Documentaon in the Juniper Networks
TechLibrary
See all documentaon available for SSR soware Visit Session Smart Router (formerly 128T)
Stay up-to-date with new and changed features and known and
resolved issues
See the SSR Release Notes
Learn with Videos
Here are some great video and training resources that will help you expand your knowledge of SSR Soware.
If you want to Then
Get short and concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Videos on Juniper Networks main YouTube
page
View a list of the many free technical trainings we oer at
Juniper
Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
16