Boot and Initialize the SSR400 Routers
Use the following procedures to boot, initialize, and onboard your SSR400 Router.
Because the SSR400 routers do not have a power switch, each device powers up into the boot process when power is applied. You can apply power either by plugging an appliance into a live outlet or by operating an external power switch.
For a manual upgrade, copy the new image to a USB drive and insert the USB into the device prior to powering on the SSR400. Manual upgrade supports images later than 7.1.0. See Re-Installing SSR Software from a USB for more information.
Normal System Boot
To boot an SSR400 for the first time:
Connect a terminal emulator to the front USB-C serial console port. The baud rate must be configured to 115,200bps. For more information, see Connect Your Device to a Management Console Using a USB-C Connector.
Power the system on. The system LED flashes red to indicate a hardware reset is in progress.
BootROM - 2.03 Starting CP-0 IOROM 1.07 Secure boot from SPI NOR flash 0 (0x34) Found valid image at boot postion 0x000
The system LED changes from red to amber, indicating the firmware boot is in progress.
Secure boot from SPI NOR flash 0 (0x34) Found valid image at boot postion 0x000 U-Boot 2023.01-12.25.07-34 (Sep 02 2025 - 17:11:49 UTC) CPLD version: 1f Golden CPLD version: 1f Firmware version: 12.25.07-34 Golden firmware version: 12.25.07-34 Press Esc to boot from USBAfter 5 seconds, or if Esc is pressed, the system LED changes to green and then to amber to indicate an SSR software boot is in progress.
Any time the system is rebooted, the firmware checks the system and compares it against the firmware capsule versions available on disk. Any required firmware updates are automatically installed. During this process, the system LED color changes to amber, indicating a firmware update is in progress.
Note:The SSR can install multiple firmware updates with an automatic reboot after each individual update. Do not power cycle or interrupt the firmware update process.
Found 1 update capsule on disk disk:00-cn9130-leopard-flash-image-12.25.06-33-signed.capsule:firmware:33 Capsule 1 of 1: disk:00-cn9130-leopard-flash-image-12.25.06-33-signed.capsule Firmware: capsule version is 33, current version is 32 Reading capsule Applying capsule The primary flash is unlocked Capsule authentication successful ############################################################################### ############################################################################### ############################################################################### ############################################################################### ################################################ Apply succeeded. Rebooting...
Subsequent boots skip previously installed updates.
Found 2 update capsules on disk disk:00-cn9130-leopard-flash-image-12.25.06-33-signed.capsule:firmware:33 disk:01-cn9130-leopard-cpld-1f-signed.capsule:cpld:1f Capsule 1 of 2: disk:00-cn9130-leopard-flash-image-12.25.06-33-signed.capsule Firmware: capsule version is 33, current version is 33 Skipping capsule Capsule 2 of 2: disk:01-cn9130-leopard-cpld-1f-signed.capsule CPLD: capsule version is 1f, current version is 1f Skipping capsule
To indicate booting is in progress, the system LED changes from green to amber.
After the OS boot has completed, the hardware bootstrapper runs. The system LED changes from green to teal twice during this activity. When the SSR software application is up and running, the system LED displays the following colors to indicate status:
- Red: Error detected in the device.
- Purple: Degraded service.
- Steady Green: Device operating normally.
After the system LED changes to green, initialize your device as either a Conductor-managed router or a Mist-managed router.
To initialize your router, connect your laptop to any of the designated LAN ports and
connect to 192.168.128.1 to access the SSR Initialization workflow.
If you prefer to use the CLI, use the information provided in the Advanced Initialization Workflow.
Reinstall SSR Software from a USB
Use the following procedure to manually upgrade an SSR400 router using a USB drive. This procedure is most common in secure networks with no external internet connection, or in a case where the SSR400 is upgraded prior to deployment. Reinstallation deletes all configuration and settings, but does not perform a secure erase. Refer to the Factory Reset procedure to return to zero if necessary.
This procedure assumes you have already copied the
SSR-7.1.x*.aarch64*.iso to a USB drive. For information about the
procedure, see Creating a Bootable USB.
Insert the USB drive with the new image into the USB-C port on the rear of the device.
Power on the system.
- At the instruction in the terminal window:
Press ESC for boot menu, press Esc to boot from the USB. The USB installer boots as follows:Esc pressed, booting from USB starting USB... Bus usb3@500000: Register 2000120 NbrPorts 2 Starting the controller USB XHCI 1.00 Bus usb3@510000: Register 2000120 NbrPorts 2 Starting the controller USB XHCI 1.00 scanning bus usb3@500000 for devices... 1 USB Device(s) found scanning bus usb3@510000 for devices... 2 USB Device(s) found scanning usb for storage devices... 1 Storage Device(s) found 1404928 bytes read in 44 ms (30.5 MiB/s) Booting /EFI\BOOT\BOOTAA64.EFI The secondary flash is locked The primary flash is locked GRUB version 2.06 ┌──────────────────────────────────────────────────────────────────────────── │*Install Session Smart Router - SSR400-CW-US │ │ Maintenance Operations --> │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ └────────────────────────────────────────────────────────────────────────────┘ Use the ▲ and ▼ keys to select which entry is highlighted. Press enter to boot the selected OS The highlighted entry will be executed automatically in 30s... Press Enter or wait for the countdown timer to expire. The SSR OS installer boots:
Loading signature database Loading kernel and verifying signature... Loading ramfs and verifying signature... Booting... EFI stub: Booting Linux Kernel... EFI stub: EFI_RNG_PROTOCOL unavailable EFI stub: Using DTB from configuration table EFI stub: Exiting boot services... [ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd083] [ 0.000000] Linux version 5.15.0-308.179.6.3.el9uek.128tech.30.aarch64 [ 0.000000] Machine model: CN9130-Leopard [ 0.000000] efi: EFI v2.100 by Das U-Boot [ 0.000000] secureboot: Secure boot enabled ...
Once the installer has booted, the following menu is displayed:
Welcome to the Session Smart Router Installer for SSR-7.1.0-1.r1.el9.aarch64.ibu-v0 Skipping removable device /dev/sda Disk device /dev/mmcblk0 has size 83 GB Install Options: 1 - FIPS 140-3 : ENABLED 2 - Cloud-init : DISABLED Press a number/letter to change current selections, [Esc] to reboot or [Enter] to start the installation: Installation will begin in 30 seconds...
- The default installation options for the SSR400 routers are shown above: FIPS
enabled and cloud-init disabled. Press 1 or 2 to toggle the options if
required. To start the installation, press Enter or wait for the countdown
timer to expire. The system LED changes to teal, indicating the installation is in
progress.
Install device selections total 2 GB for boot and 81 GB for root Install Configuration: MIN_RAM_MB=7000 MIN_BOOT_GB=2 MIN_ROOT_GB=58 CLOUDINIT_ENABLE=0 FIPS_ENABLE=1 BOOT_INSTALL_DEV=/dev/mmcblk0 ROOT_INSTALL_DEV=/dev/mmcblk0 Launching unpacker... cloud-init will be disabled Building for aarch64 /dev/mapper/live-rw on / type ext4 (rw,relatime) Removing detected vg00 volume group. Erasing device /dev/mmcblk0 Creating partitions on target /dev/mmcblk0 Writing first stage bootloader on target /dev/mmcblk0 Writing second stage bootloader on target /dev/mmcblk0 Writing rootfs on target /dev/mmcblk0 Decompressing image slice 1 of 5 Decompressing image slice 2 of 5 Decompressing image slice 3 of 5 Decompressing image slice 4 of 5 Decompressing image slice 5 of 5 Applying boot configuration defaults Adding boot config Adding CN9130-Leopard nic interface rename files Pre-populating saved package repository unpacker was successful Press [Esc] to reboot or [Enter] to shutdown: System will shutdown in 1 second... Shutting down... [ 371.037680] dracut Warning: Killing all remaining processes dracut Warning: Killing all remaining processes [ 371.117798] dracut Warning: Unmounted /oldroot. dracut Warning: Unmounted /oldroot. 371.152352 | invalid value for WatchdogSec: "0" Powering off. [ 371.419135] reboot: Power down
You must manually reboot the system. Press Esc to reboot. You can press Enter to shut down the system; however, you must manually power cycle the system to perform the required reboot.
- After the OS boot has completed, the hardware bootstrapper runs. The system LED
changes from green to teal twice during this activity. When the SSR software
application is up and running, the system LED displays the following colors to
indicate status:
- Red: Error detected in the device.
- Purple: Degraded service.
- Steady Green: Device operating normally.
- After the system LED has changed from cyan to green or purple, initialize your device as either a Conductor-managed router or a Mist-managed router.
To initialize your router, connect your laptop to any of the designated LAN ports and
connect to 192.168.128.1 to access the SSR Initialization workflow.
If you prefer to use the CLI, use the information provided in the Advanced Initialization Workflow.