Internet Backhaul Through an SSR Hub

This document describes how to use SSR Traffic Steering to originate and inject routes into an overlay network without relying on dynamic routing protocols. It applies to environments where dynamic routing is undesirable or unavailable.

The configuration uses an SSR hub providing Internet backhaul and demonstrates how the SSR can inject a default route into the overlay. To enable route injection, create an Application Policy that satisfies two requirements:

1. Apply Traffic Steering toward a LAN or WAN interface.

   Traffic Steering that targets only the overlay does not cause the SSR to originate routes.

2. Apply the policy only to non‑local networks.

   Ensure that none of the networks in the policy are reachable from any LAN interface on the SSR.

When these conditions are met, the SSR performs protocol redistribution for the addresses defined in the policy. If the policy includes an application such as “any” (0.0.0.0/0), the SSR originates a default route.

In networks where the SSR should learn routes from external devices, avoid using Traffic Steering in application policies except when steering traffic to the overlay. In these situations, the SSR follows the routes in its routing table without requiring policy‑driven injection.