Troubleshoot Session Smart Router Deployed as WAN Edge
Follow these steps to enable alerts, use testing tools, and get packet captures.
Discover efficient methods for troubleshooting your WAN Edge device in the Juniper Mist™ portal after the initial deployment phase. This topic provides guidance for system administrators and technical support responsible for maintaining enterprise SD-WAN networks.
Troubleshooting Session Smart WAN Edge Alarms
In this section, you’ll configure WAN Edge alarms and e-mail alerts to the administrator.
From the Mist dashboard, select Monitor > Alerts.

Filter to the Site that you want to see the alarms for.

Set the Time Range for This Week so we can see some Alerts. Next, select the Alerts Configuration button in the upper right corner to set up e-mail notifications.
Note:Under Alerts Configuration, set the Applies to Scope alerts to the Entire Org, as shown in the screenshot below. This configuration follows best practices and ensures comprehensive monitoring. You can also direct the system to send alerts to organization administrators and site administrators by selecting the relevant check boxes in the Email Recipients Settings section. Enter recipient e-mail addresses in the To additional email recipients field.

- Click the My Account link. This brings you to the
My Account settings page. Click the ENABLE
button in the Email Notification section. It’s important to note that
even for an administrator, e-mails are disabled by default.

In the Enable Email Notifications window, enable e-mail alerts by selecting the checkbox in the Notification column to select the specific sites that you want to receive notifications for. Select Enable Org Notifications if you want to receive notifications for the entire organization.

Click the Close button at the bottom of the window when you are done.
From the left menu, navigate back to Monitor > Alerts > Alerts Configuration.
Scroll down under Alert Types to Infrastructure, then find the WAN Edge alerts.

Also scroll to Marvis > WAN. You can select the checkbox next to WAN to enable all WAN Edge alerts, or just select individual alerts. Select the checkbox to the right to enable e-mail notifications for that alert.

When an event happens, such as a device losing connection to the Juniper Mist cloud, your administrator receives an e-mail about the event both when it first happens and after the issue is resolved. The See Alert Details link in the e-mail directs you to the Alerts page.

After the connection to the Juniper Mist cloud has been restored, another e-mail will indicate the status change with a link to the Alerts page, with the second event reported.

Session Smart Router Testing Tools for Troubleshooting
The Session Smart Router in WAN Assurance relies on SLE and Marvis insights for all your troubleshooting actions. An administrator can see beneath the surface of the GUI using the utilities we’ll cover in this section. The Session Smart Router device and its Programmable CLI (PCLI) provides a simplified and streamlined experience in the Mist UI for diagnosing your WAN Edge device issues.
First, we’ll dive into the Utilities that you can use for troubleshooting your WAN Edge. Navigate to WAN Edges > WAN Edges, and select the WAN Edge device to troubleshoot.

The Utilities drop-down list contains the following options:
-
Testing Tools
-
Send WAN Edge Log to Mist
-
Reboot WAN Edge
-
Upgrade Firmware
-
Replace WAN Edge
-
Sync Configuration
Sending the WAN edge device logs to the Juniper Mist cloud and rebooting your selected WAN edge device are straightforward activities.
By using the Upgrade Firmware utility, you can pick the WAN Edge device’s preferred firmware version and set up a specific time to download it.

Navigate back to the Utilities menu to explore the Testing Tools option.
The Testing Tools option allows you to issue ICMP-Ping, identify BGP status reviews, sift through Application and Session knowledge, review Address Resolution Protocol (ARP) tools for your WAN edge, review FIB table information, and view OSPF route information.
Navigate to Utilities > Testing Tools > Utility >Ping to quickly troubleshoot device interfaces and connectivity. In this example, we send an ICMP ping to the public DNS 8.8.8.8. Enter an IP address, specify the port name, and specify the ping count and size. Mist opens an instance of the Session Smart PCLI for you.

Next, click the BGP tab at the top. When you select any of the tools for BGP, Mist simplifies the Session Smart PCLI and gathers the information for you. In this example, we see a summary of BGP neighbors and their relevant information by quickly selecting Summary > Show Summary.

Navigate to the Applications tab. Select an application name from the drop-down list, then select the Show Path button.
Remember that Mist is intent-driven, and the Secure Vector Routing (SVR) protocol that Session Smart Routers use leverages the sources and destinations in Mist, the networks, and applications to create point-to-point SVR paths. You can diagnose those paths between Session Smart devices in the WAN Edge Testing Tools utility. If BGP advertisements are sent over SVR paths, bgp-over-svr is listed in the Type column.
For SVR, Mist applications are called services in the Session Smart paradigm. For more information about the Session Smart platform, refer to the platform considerations, Juniper Mist WAN Assurance Platform Considerations.

Now select the ARP tab in WAN Edge Testing Tools. Select Table to see the information displayed in table format. Finally, select the Show ARP button. The Mist dashboard leverages the Session Smart PCLI for you and generates and generates ARP information for interfaces on node.0.
For deeper insights not shown on the output text of the window, select the output from the Utility in your browser and paste it to an ASCII editor for further review.

Next, select the FIB tab at the top of WAN Edge Testing Tools to see the Forwarding Information Base table.
The FIB table is useful for determining if traffic in the network is being routed to the correct destination. The FIB informs you which destination IP address, ports, transport protocols, and tenants are allowed to access which Services (applications) and notifies you what their next hop is.
On the FIB Lookup tab, you can perform a FIB Lookup by selecting a network, entering a Destination IP Address, selecting a protocol and a destination port, then click Lookup. This will display the FIB table entries to you.
You can also click the FIB By Application tab to do a FIB lookup by application name. Select an application from the drop-down list, and optionally enter in VRF and Prefix information. Then, click Show FIB to see the FIB table.

Finally, select the OSPF tab at the top of WAN Edge Testing Tools to troubleshoot Open Shortest Path First (OSPF). You can view information such as Summary, Interfaces, Neighbors, Database, and Routes as they relate to your OSPF configuration.
The combination of Marvis, WAN SLEs, WAN Edge Insights, and the WAN Edge Testing Tools utility make a complete suite for diagnosis at the WAN edge.
See Also
Troubleshoot Session Smart Routers Using Packet Captures
Juniper Session Smart Router (SSR) ports support manual and dynamic packet captures (PCAP). Packet capture is a tool that helps you to analyze network traffic and troubleshoot network problems. It captures real-time data packets traveling over the network for monitoring and logging.
For more information, see Dynamic and Manual Packet Captures.
Initiate a Manual Packet Capture
Manual packet captures are initiated by users from the WAN Edge Packet capture page.
To initiate manual PCAP for an SSR device:
Go to Site > WAN Edge Packet Captures.
On the WAN tab, click Add WAN Edge + and select an SSR device.

Specify the number of packets to capture , packet size in bytes, and the duration of the capture session.
Select the Add Port Filter button and select the port name that you want the packet capture to be performed on. Then click Save.

Finally, click Captured Files to access a manual PCAP file and analyze it.

Access Dynamic Packet Captures
Dynamic packet captures are short-term packet captures automatically triggered by a service impacting event. They are saved to the Mist cloud and are available for you to download in the WAN Edge Events section on the WAN Edge Insights page.
Here are the events which can generate a dynamic packet capture for an SSR device:
- Failure of the ARP request to next-hop gateway
- DHCP address resolution failure
- WAN Edge failure to establish BGP peering based on configuration
- WAN Edge failure to establish SVR peering based on configuration
To download and analyze a dynamic packet capture file:
Go to Monitor > Service Levels. By default, you will land on the Insights tab.
Scroll down to WAN Edge Events section. Each event with a dynamic packet capture file available is indicated by a paperclip icon next to the event name.
Click a dynamic packet capture event and then click the Download Packet Capture button available in the details section on the right.