Juniper NETWORKS SSR120 Smart Router User Guide

: June 16, 2024
: JUNIPER NETWORKS

Table of Contents

Begin
Up and Running
Keep Going
What’s Next?
General Information
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

**Juniper NETWORKS SSR120 Smart Router User Guide

**

Begin

IN THIS SECTION

Meet the SSR120 | 2
Onboarding the SSR120 | 2
Onboard the SSR120 Using the Mist AI Mobile App | 3
Onboard the SSR120 Using a Web Browser | 3

This guide walks you through the simple steps to get a new cloud-ready Juniper Networks® SSR120 router up and running in the Juniper Mist™ cloud portal. You can onboard a single device using your mobile phone, or one or more devices using your computer. Once onboarded, we’ll walk you through the steps to create a basic conC]†r-ঞonĺ

You’ll need your Juniper Mist WAN Assurance s†bscrbrঞon and your login cr;7 ;nঞ-Ѵs for the Juniper Mist portal.

Meet the SSR120

The Juniper Networks SSR120 network appliance is part of the Juniper® Session Smart™ Ro†ঞn] roroѴboĺ TheSSR120 features four 1 GbE ports and two 1 GbE RJ-45/SFP combo ports.

The SSR120 runs the FIPS 140-2 Level 1 compliant Juniper® Session Smart™ Ro†ঞn] (SSR) so[w-r;ķ which provides secure and resilient WAN conn;cঞvb|yĺ

The SSR120 is available in models with or without LTE support.

Switch

Onboarding the SSR120

The SSR120 comes ready to install and manage using the Juniper Mist™ Cloud portal. You can onboard one or more routers using your computer, or a single router using your mobile phone.

To onboard your SSR120 using your mobile phone, see “Onboard the SSR120 using the Mist AI Mobile App” on page 3.

To manually onboard your SSR120, see “Onboard the SSR120 using a Web Browser” on page 3.

To perform either onboarding process, you will need to locate the SSR120 claim code label on the rear panel of your device.
Scan The QR Code

Onboard the SSR120 Using the Mist AI Mobile App

From your mobile phone:

Download and install the Mist AI app from the Google Play Store or Apple App Store.
Open the Mist AI app and log in using your account cr;7;nঞ-Ѵsĺ If you do not have an account, see Create a Mist Account and r]-nbz-ঞon for details about cr;-ঞn] one.
Select your or]-nbz-ঞonĺ
Tap Claim Devices to Org and focus the camera on the QR code on the claim code label. The app -†|om-ঞc-ѴѴy claims the device and adds it into your or]-nbz-ঞonŝs inventory.
On the r]-nbz-ঞon screen, tap Device Inventory → Routers → Unassigned. Review the MAC address

Onboarding Complete!
F-n|-sঞcķ the SSR120 is in your inventory! To provision the SSR120, see “Step 2: Up and Running” on page 4 and conঞn†; with Add the Network.

Onboard the SSR120 Using a Web Browser

Onboarding m†ѴঞrѴ; switches— When you purchase m†ѴঞrѴ; switches, we provide you with an -cঞv-ঞon code along with your PO bn=orm-ঞonĺ Make a note of this code.

Onboarding a single switch— Locate the QR code on your switch and make a note of the alphanumeric claim code directly above it.

Log in to your account at _‚rsĹņņm-n-];ĺmbs|ĺcomņ. If you do not have an account, see Create a Mist Account and r]-nbz-ঞon for details about cr;-ঞn] one.
Log in to your Mist or]-nbz-ঞonŝs dashboard.
Navigate to your or]-nbz-ঞonŝs inventory, and select the WAN tab at the top.
Select the Claim WAN Edges b†‚on in the upper right of the inventory screen.
Add the claim code into the list of devices to claim.
Clear the Assign claimed WAN edges to site check box. This places the device into inventory, to be assigned to a site later.
Click the Claim b†‚on to claim the device into your inventory.
If you claim m†ѴঞrѴ; routers, expect a slight delay for the Router Claim Results window to pop up.
Review the bn=orm-ঞon and Close the window.
View your new router or routers on the Inventory page. Expect to see the status as Disconnected.

Onboarding Complete!
F-n|-sঞcķ the SSR120 is in your inventory! To provision the SSR120, see “Step 2: Up and Running” on page 4 and
conঞn†; with Add the Network.

Up and Running

IN THIS SECTION

Create a Template | 5
Assign the Template to a Site | 6
Assign the SSR120 to a Site | 7
Install the SSR120 Hardware | 7
Connect your SSR120 to the Mist Cloud | 8

The SSR120 has been onboarded to the Juniper Mist™ cloud. To provision the SSR120 with ZTP, log in to your Mist portal and begin the WAN conC]†r-ঞonĺ

onC]†rbn] your SSR device is made simple through the use of the SSR WAN Edge Templates.

Create a Template

The WAN Edge Templates provide you with the basic network conC]†r-ঞon in a single step, and allow for re usable and consistent conC]†r-ঞon for every SSR device you deploy. The template provides device sr;cbCcķ rr;conC]†r;7 WAN interfaces, LAN interfaces, a |r-Lc steering policy, and an -rrѴbc-ঞon policy. You simply name the template and select the device type

From the the or]-nbz-ঞon sidebar menu, select WAN Edge Templates.
Select Create Template in the upper right.
Give the template a name.
Place a checkmark in the Create from Device Model box.
Select your SSR model from the dropdown.
Click Create.

The device template is displayed. Scroll down through the template to see the rr;conC]†r;7 WAN interfaces, LAN interfaces, $r-Lc Steering, and rrѴbc-ঞon Policies. Great job! You now have a working WAN Edge template you can apply to many sites and devices across your or]-nbz-ঞonĺ.
Create Template

Assign the Template to a Site

Now that you have set up a template, you need to assign it to the site where your SSR will be deployed.

Scroll to the top and click Assign to Site.
Select the site from the list where you want the template applied.
Click Apply.

Great work! All that remains is to associate the SSR120 with a site.

Assign the SSR120 to a Site

Once you associate the SSR120 with a site and a template, the working conC]†r-ঞon will be complete.

Select r]-nbz-ঞon on the Ѵ;[ sidebar, and navigate to your or]-nbz-ঞonŝs WAN Edges Inventory.
Select your SSR120 and assign it to your site.
If you are conC]†rbn] a Mist-managed router (SSR So[w-r; version 6.x and greater), check the Manage conC]†r-ঞon with Mist check box. For version 5.4.x and greater conductor-managed routers, make sure there is no check mark in the Manage onC]†r-ঞon from Mist under Manage onC]†r-ঞon.
Select Assign to Site.

Congratulation you now have a Mist-claimed SSR120, and a basic conC]†r-ঞon ready to send to your device!

Install the SSR120 Hardware

Your SSR120 bns|-ѴѴ-ঞon has sr;cbCc features that must be installed depending on your use and environment. Refer to the SSR120 Hardware ns|-ѴѴ-ঞon Guide to complete the following procedures:

Rack, Wall, or Surface o†nঞn]
LTE Antenna Install
SIM Card Install
Connecting Power

Please return here -[;r comrѴ;ঞn] those procedures to complete the network conn;cঞonsĺ

Connect your SSR120 to the Mist Cloud

Your SSR120 uses port 0 (ge-0-0) as a default WAN port to contact Mist for zero-touch provisioning (ZTP). You’ll need to set up port 3 (ge-0-3) with a LAN network.

Connect port 0 to an Ethernet WAN link that can provide:
- DHCP address assignment
- Connectivity to the Internet and Mist (see Firewall Requirements)
Connect SSR port 3 to your LAN devices, including:
- Mist-managed Juniper EX switches
- Mist APs
- User devices

Great job, your SSR120 is now connected to the Mist cloud! In just a few minutes, Mist will send the template-driven conC]†r-ঞon down to your device. Once the conC]†r-ঞon has been applied, it will begin forwarding sessions from LAN to WAN as described by your policy.

Head over to the WAN Edges menu on the Mist sidebar, select your device, and watch events as the device completes ZTP.

As your client devices connected to the LAN are assigned addresses from the WAN Edge DHCP server and begin sending sessions, telemetry will populate the insights page, and Marvis will start analyzing it on your behalf.

For conductor-managed devices, -77bঞon-Ѵ views for Cloud Telemetry are conC]†r-bѴ; in the SSR GUI and PCLI.

Keep Going

IN THIS SECTION

Learn with Videos | 10

on]r-|†Ѵ-ঞonsĴ Now that you’ve done the bnbঞ-Ѵ conC]†r-ঞonķ your SSR120 is ready to use. Here are some things you can do next:

What’s Next?

If you want to	Then
Get an overview of Configuration and Configuration Management on the SSR120

See the SSR Configuration Management section of the SSR Documentation in the Juniper Networks TechLibrary

General Information

If you want to	Then
See all documentation available for the SSR120	See the SS120 Documentation in

the Juniper Networks TechLibrary
Get more details about installing and maintaining the SSR120 hardware| See the SSR120 Hardware Guide
See all documentation available for SSR software| Visit Session Smart Router Documentation in the Juniper Networks TechLibrary
If you want to| Then
---|---
Stay up-to-date about new and changed features and known and resolved issues| See the SSR Release Notes

Learn with Videos
Here are some great video and training resources that will help you expand your knowledge of SSR Software

If you want to	Then
Learn about Virtual Router Redundancy Protocol for the SSR	See SSR Virtual

Router Redundancy Protocol on the SSR YouTube page
Learn about BFD for Traditional Routing| See BFD for Traditional Routing on the SSR YouTube page
Learn about Configuration Concurrency with the SSR| See Configuration Concurrency on the SSR YouTube page
Learn about Service Route Redundancy and Vectors| See Service Route Redundancy and Vectors on the SSR YouTube page
Get short, concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies| See Learning with Juniper on Juniper Networks main YouTube page
View a list of free technical training offered by Juniper| Visit the Getting Started page on the Juniper Learning Portal

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their r;sr;cঞv; owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this r †bѴbc-ঞon without noঞc;ĺ Copyright © 2023 Juniper Networks, Inc. All rights reserved.