Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

ON THIS PAGE
 

Step 1: Begin

This guide walks you through the steps to get your new, cloud-ready SSR120 up and running in the Juniper Mist AI cloud portal. You can onboard a single device using your mobile phone, or one or more devices using your computer. Once onboarded, we'll walk you through the steps to create a basic configuration.

Meet the SSR120

The Juniper Networks SSR120 network appliance is part of the SSR portfolio. The SSR120 features four 1 GbE ports, two 1 GbE RJ-45/SFP combo ports, 8 GB of memory, and a 120 GB enterprise-grade solid-state drive (SSD) for storage.

The SSR120 runs the FIPS 140-2 Level 1 compliant Session Smart Router (SSR) software, which provides secure and resilient WAN connectivity.

The SSR120 appliance is available in models with or without LTE support.

Claim Your Device

To add the device to your organization's WAN Edge inventory, locate the claim label found on the device.

There are two ways to enter the device claim information into Mist. Choose the method best for you.

  • Scan the QR code with the Mist Mobile app

  • Manually enter the claim code in Mist

Scan the QR Code with Mobile App

  1. Open your MistAI App.
  2. Select Claim Devices to Org.
  3. Scan the QR code.

Mist Claim Code Entry

  1. Log in to your Mist organization's dashboard.
  2. Navigate to your organization's inventory, and select the WAN tab at the top.
  3. Select the Claim WAN Edges button in the upper right of the inventory screen.
  4. Add the device claim code into the list of devices to claim.
  5. Clear the Assign claimed WAN edges to site check box. This places the device into inventory, to be assigned to a site later.
  6. Click the Claim button to claim the device into your inventory.
Note:

The MistAI app can be downloaded from mobile app stores:

For Apple Devices

For Android Devices

Onboarding Complete!

Fantastic, your device is in your inventory! To provision your SSR device with ZTP, log in to Mist and continue with WAN configuration.

WAN Configuration

To begin your WAN design, identify the network to be used for accessing applications over a LAN network segment.

Add a Network

  1. Navigate to the WAN section of the organization sidebar menu, and select Networks.
  2. Select Add Networks in the upper right.
  3. Give the network a name.
  4. Configure the network subnet as 192.168.1.0/24.
  5. Click Save at the bottom of the Edit Network side panel.
Excellent! This network is now defined for use across the entire org, including the template you will apply to your new SSR device.

Applications

Next, describe the applications for the WAN to deliver, starting with the Internet.

Add an Application

  1. Navigate back to the WAN section of the organization sidebar menu, and select Applications.
  2. Select Add Applications in the upper right.
  3. Name the application Internet.
  4. Enter 0.0.0.0/0, or an IPv4 address space in the IP Addresses configuration.
  5. Click Save at the bottom of the Add Application side panel.
Nice! Your organization is set up to provide access to the Internet using the WAN.

WAN Edge Templates

So far you have an SSR device waiting to be claimed, a network for your LAN, and an Internet application for your WAN to deliver.

A WAN Edge template ties them all together! The use of templates allow for re-usable and consistent configuration for every SSR device you deploy.

Create a Template

  1. Navigate back to the WAN section of the organization sidebar menu, and select WAN Edge Templates.
  2. Select Create Template in the upper right.
  3. Name the template.
  4. Click Create.
  5. Enter NTP and DNS information to be used by the WAN edge device.

WAN

The first thing to do in your template is to describe which port to use for the WAN.
  1. Scroll to the WAN section of the template, and select Add WAN.
  2. Name the WAN port wan1.
  3. Since you already plugged port 0 on the device into the Internet, enter ge-0/0/0 to designate it as a WAN port.
  4. Make sure IP Configuration is set to be learned from DHCP, and that Source NAT is enabled.
  5. Click Add at the bottom of the Edit WAN Configuration side panel.

LAN

Next, associate your LAN network segment with the appropriate port on the device, and give the LAN additional network services such as DHCP.
  1. Scroll to the LAN section of the template, and select Add LAN.
  2. From the Network drop-down menu, select your network segment to associate it with the LAN.
  3. Enter the port used for the LAN port, for example ge-0/0/3.
  4. In the IP Address setting, enter 192.168.1.1 to assign the WAN edge device .1 for use as gateway in the network.
  5. Enter /24 for the Prefix Length.
  6. To provide DHCP services to endpoints on this network, select the button for DHCP server.
  7. Give your DHCP server an address pool starting with 192.168.1.100 and ending with 192.168.1.200.
  8. Enter 192.168.1.1 as the Gateway to be assigned to DHCP clients.
  9. Finally, enter 1.1.1.1,8.8.8.8 as DNS Servers to be assigned to clients on the network.
  10. Click Add at the bottom of the Edit LAN Configuration side panel.

Policy

Your template has WANs and LANs; now you need to tell the device how to use them to connect users to applications. This is done using Traffic Steering and Application Policies.

Steering Policy

  1. Scroll to the Traffic Steering section of the template, and select Add Traffic Steering.
  2. Name your steering policy, for example, `local-breakout`.
  3. Select Add Paths to give your steering policy a path to send traffic.
  4. Select WAN as the path type, and select your WAN interface. For apps that use the policy, this indicates you want them sent directly out of the local WAN interface.
  5. Click the check in the upper right of the Add Path box, and then click Add at the bottom of the Add Traffic Steering side panel.

Application Policy

Finally, tie your networks and applications together in an application policy.
  1. Scroll to the Application Policy section of the template, and select Add Policy.
  2. Enter a string in the name column, and click the check box to the right of your entry.
  3. From the Network column drop-down, select your LAN network.
  4. From the Applications column drop-down, select your Internet app.
  5. From the Traffic Steering column drop-down, select your local breakout steering policy.
Almost there! You now have a working WAN Edge template you can apply to many sites and devices across your organization.

Assign to Site

With your template set up, you need to save and assign it to the site where your WAN edge device will be deployed.
  1. Scroll to the top and click Save.
  2. Click the Assign to Site button, and select the site where you want the template config applied.
Great work! All that remains is to associate the device with a site.

Add the Device to the Site

At this point you have the following:

  • Your SSR device in your inventory.

  • A WAN edge template for configuration in Mist.

  • Your WAN edge template associated with your site in Mist.

Associating the device with the site and template gets you a working config!

Add the Device

  1. Go to your organization's WAN Edges Inventory.
  2. Select your device.
  3. Assign the device to your site.
  4. If you are configuring a Mist-managed router (SSR Software version 6.x and greater), check the Manage configuration with Mist check box. For version 5.4.x and greater conductor-managed routers, make sure there is no check mark in the Manage Configuration from Mist under Manage Configuration.
  5. Select Assign to Site.

Congratulations, you have a Mist-claimed SSR120, with a basic configuration ready to send to your device! Step 2 will get your SSR120 rack or wall mounted, connected to your network, and powered up.