Juniper Networks SSR120 Day One+
This guide provides a simple, three-step path to quickly get you up and running with your new SSR120 appliance. You will learn how to install the SSR in a rack, power it up, create a basic configuration, and deploy it on your network.
IN THIS GUIDE
- Step 1: Begin | 1
- Step 2: Up and Running | 7
- Step 3: Keep Going | 19
Step 1: Begin
This section covers the initial setup and physical installation of the SSR120 appliance.
IN THIS SECTION
- Meet the SSR120 | 2
- Install the SSR120 in a Rack | 2
- Rack It | 3
- Installing Antennas for the SSR120 Appliances that Support LTE | 4
- Inserting the SIM Card | 5
- Get Grounded | 6
- Power On | 6
Meet the SSR120
The Juniper Networks SSR120 network appliance is part of the SSR portfolio. The SSR120 features four 1 GbE ports, two 1 GbE RJ-45/SFP combo ports, 8 GB of memory, and a 120 GB enterprise-grade solid-state drive (SSD) for storage. The SSR120 runs the FIPS 140-2 Level 1 compliant Session Smart Router (SSR) software, which provides secure and resilient WAN connectivity. The SSR120 appliance is available in models with or without LTE support.
Image Description: Front panel of the Juniper Networks SSR120 appliance, showing POWER and RESET buttons, a CONSOLE port, and four 1 GbE RJ-45/SFP combo ports.
Install the SSR120 in a Rack
You can install the SSR120 on a table or desk, on a wall, or in a rack. This guide details rack installation.
What's in the Box?
- SSR 120 appliance
- LTE antennas (provided for SSR120-AA and SSR120-AE models)
- A power cord appropriate for your geographic location
- An RJ-45 cable
- A DB-9 adapter
What Else do I Need?
To mount the SSR120 in a rack, you will need to order the rack mount kit SSR100-RMK. The kit contains:
- 2 mounting brackets
- 4 M5x7.0 mm flat-head bracket screws
- 4 flat-head M6x16 mm Phillips round head mounting screws
- 4 M6 floating nut in cage, steel+zinc
- 4 M6 plastic washers
You will also need to provide:
- Assistance for the installation
- Rack mount screws appropriate for your rack
- A number 2 Phillips (+) screwdriver
Note: Use the Juniper Support portal to register all new Juniper Networks hardware products, changes to an existing installed product, as well as activate your hardware replacement service-level agreements (SLAs).
Rack It
- Remove the SSR120 from the shipping carton.
- Attach the mounting brackets to the side panels of the appliance using the M5x7.0mm flat-head screws. Tighten the screws firmly. Ensure the curved part of the bracket fits snugly on the lower portion of the appliance's body.Diagram Description: Illustration showing mounting brackets being attached to the sides of the SSR120 appliance using M5x7.0mm flat-head screws.
- Have one person grasp both sides of the appliance and position it in the rack, aligning the mounting bracket holes with the threaded holes in the rack rail. Align the bottom hole in each mounting bracket with a hole in each rack rail, making sure the appliance is level.Diagram Description: Illustration showing the SSR120 appliance being positioned into a rack, with mounting brackets aligning with rack rails.
- Have a second person secure the appliance to the rack by using the 4 flat-head M6x16 mm Phillips round head mounting screws, 4 M6 floating nut in cage, and 4 M6 plastic washers. Tighten the screws firmly.Diagram Description: Illustration showing the SSR120 appliance secured in a rack using M6x16 mm screws, floating nuts, and plastic washers.
- Ensure that the appliance is level by verifying that all screws on one side of the rack line up with the screws on the other side.
Installing Antennas for the SSR120 Appliances that Support LTE
To install the antennas:
- Remove the dust caps from the SMA connectors on the SSR120 front panel.
- Attach the antennas to the SMA connectors and tighten them firmly by hand.Diagram Description: Illustration showing an antenna being screwed onto an SMA connector on the rear of the SSR120 appliance.
- Rotate the antennas 0-90 degrees in the vertical direction.
Inserting the SIM Card
- Use a Phillips screwdriver to remove the SIM card slot cover on the side of the appliance.Diagram Description: Illustration showing the side of the SSR120 appliance with the SIM card slot cover removed.
- Insert the SIM card into slot SIM1. Note that even though there are multiple slots, only slot 1 should be used for the SIM card.Diagram Description: Close-up illustration of the SIM card slot showing SIM1 with a SIM card being inserted.
- Replace the SIM card slot cover and tighten the screws.Diagram Description: Illustration showing the SIM card slot cover being reattached to the SSR120 appliance.
Get Grounded
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must connect the chassis to earth ground before you connect it to power. To ground the appliance:
- Wrap and fasten one end of the ESD grounding strap around your wrist and connect the other end to a site ESD point. For more details, see Prevention of Electrostatic Discharge Damage.
- Ensure that all grounding surfaces are clean and brought to a bright finish before grounding connections are made.
- Connect the ground cable to a proper earth ground, such as the appliance rack.
- Use a Phillips screwdriver to remove the screw from the grounding point on the rear of the chassis.
- Place the ground cable lug attached to the ground cable over the grounding point, and secure the lug with the screw.Diagram Description: Illustration showing the rear of the SSR120 appliance with a ground cable attached to the grounding point.
- Dress the ground cable and verify that it does not touch or block access to the appliance components, and that it doesn't hang where someone could trip over it.
Power On
Now that the SSR 120 is rack mounted, it's time to power up.
- Wrap and fasten one end of the electrostatic discharge (ESD) ground strap around your bare wrist, and connect the other end to a site ESD point.
- Plug the power cord barrel connector into the +12 VDC input on the SSR120 and tighten the lock ring.
- If the AC power source outlet has a power switch, turn it off.
- Insert the power cord plug into an AC power source outlet.
- If the AC power source outlet has a power switch, turn it on.
Step 2: Up and Running
Now that the SSR120 is powered on, let's get it set up in the Mist Cloud with WAN Assurance.
IN THIS SECTION
- Connect your Device to the Cloud | 7
- WAN and LAN Connections | 8
- Claim Your Device | 8
- Scan the QR Code with Mobile App | 9
- Mist Claim Code Entry | 9
- WAN Configuration | 10
- Add a Network | 10
- Applications | 11
- Add an Application | 11
- WAN Edge Templates | 12
- Create a Template | 13
- WAN | 14
- LAN | 15
- Policy | 16
- Steering Policy | 16
- Application Policy | 17
- Assign to Site | 18
- Add the Device to the Site | 19
- Add the Device | 19
Connect your Device to the Cloud
Your SSR appliance uses port 0 (ge-0/0/0) as a default WAN port to contact Mist for zero-touch provisioning (ZTP). You will also be setting up port 3 (ge-0/0/3) with a LAN network.
WAN and LAN Connections
- Connect port 0 to an Ethernet WAN link that can provide the device with:
- DHCP address assignment
- Connectivity to the Internet and Mist (see Firewall Requirements)
- Connect port 3 to your LAN devices, including:
- Mist-managed Juniper EX switches
- Mist APs
- User devices
- Power on the device.
Great job! Your SSR device is now connected to the Mist cloud and awaiting further instructions.
Diagram Description: Network diagram showing the Internet and a DHCP server connected to a Juniper SSR120 appliance via a WAN port (ge-0 WAN). The SSR120 is connected to LAN Devices via a LAN port (ge-3 LAN).
Claim Your Device
To add the device to your organization's WAN Edge inventory, locate the claim label found on the device.
Image Description: A device claim label featuring a QR code, the text "CLAIM CODE", "SAMPLECODELABEL", and "DO NOT USE".
Scan the QR Code with Mobile App
There are two ways to enter the device claim information into Mist. Choose the method best for you:
- Scan the QR code with the Mist Mobile app
- Manually enter the claim code in Mist
To scan the QR code:
- Open your MistAI App.
- Select Claim Devices to Org.
- Scan the QR code.
Screenshot Description: MistAI mobile app interface showing "TRAINING ORG" at the top, with options like "Device Inventory", "Claim Devices to Org", and "Sites" visible.
Mist Claim Code Entry
- Log in to your Mist organization's dashboard.
- Navigate to your organization's inventory, and select the WAN tab at the top.
- Select the Claim WAN Edges button in the upper right of the inventory screen.
- Add the device claim code into the list of devices to claim.
- Clear the Assign claimed WAN edges to site check box. This places the device into inventory, to be assigned to a site later.
- Click the Claim button to claim the device into your inventory.
Screenshot Description: Mist organization dashboard showing "TRAINING ORG" and the "WAN Edges" section in the left sidebar, with the "Claim WAN Edges" button highlighted in the upper right.
Note: The MistAI app can be downloaded from mobile app stores: For Apple Devices, For Android Devices
Onboarding Complete! Fantastic, your device is in your inventory! To provision your SSR device with ZTP, log in to Mist and continue with WAN configuration.
WAN Configuration
To begin your WAN design, identify the network to be used for accessing applications over a LAN network segment.
Add a Network
- Navigate to the WAN section of the organization sidebar menu, and select Networks.
- Select Add Networks in the upper right.
- Give the network a name (e.g., "my-lan").
- Configure the network subnet as 192.168.1.0/24.
- Click Save at the bottom of the Edit Network side panel.
Screenshot Description: Mist UI showing the "Networks" section with a "Add Networks" button and a dialog box for "Add Network" where fields like Name, Subnet IP Address, and Prefix Length can be configured.
Excellent! This network is now defined for use across the entire org, including the template you will apply to your new SSR device.
Applications
Next, describe the applications for the WAN to deliver, starting with the Internet.
Add an Application
- Navigate back to the WAN section of the organization sidebar menu, and select Applications.
- Select Add Applications in the upper right.
- Name the application Internet.
- Enter 0.0.0.0/0, or an IPv4 address space in the IP Addresses configuration.
- Click Save at the bottom of the Add Application side panel.
Screenshot Description: Mist UI showing the "Applications" section with an "Add Applications" button and a dialog box for "Add Application" where fields like Name, IP Addresses, and Domain Names can be configured.
Nice! Your organization is set up to provide access to the Internet using the WAN.
WAN Edge Templates
A WAN Edge template ties them all together! The use of templates allow for re-usable and consistent configuration for every SSR device you deploy.
Create a Template
- Navigate back to the WAN section of the organization sidebar menu, and select WAN Edge Templates.
- Select Create Template in the upper right.
- Name the template (e.g., "branch").
- Click Create.
Screenshot Description: Mist UI showing the "WAN Edge Templates" section with a "Create Template" button and a "NEW TEMPLATE" dialog box for entering the template name and type (Standalone/Spoke).
WAN
The first thing to do in your template is to describe which port to use for the WAN.
- Scroll to the WAN section of the template, and select Add WAN.
- Name the WAN port wan1.
- Since you already plugged port 0 on the device into the Internet, enter ge-0/0/0 to designate it as a WAN port.
- Make sure IP Configuration is set to be learned from DHCP, and that Source NAT is enabled.
Screenshot Description: WAN configuration section within a template, showing an "Add WAN" button and fields for Name, Interface, WAN Type, IP Configuration, and Source NAT.
Click Add at the bottom of the Edit WAN Configuration side panel.
Screenshot Description: "Add WAN Configuration" dialog box with fields for Name, WAN Type (Ethernet, DSL, LTE), Interface, VLAN ID, IP Configuration (DHCP, Static, PPPoE), and Source NAT (Enabled/Disabled).
LAN
Next, associate your LAN network segment with the appropriate port on the device, and give the LAN additional network services such as DHCP.
- Scroll to the LAN section of the template, and select Add LAN.
- From the Network drop-down menu, select your network segment to associate it with the LAN.
- Enter the port used for the LAN port, for example ge-0/0/3.
- In the IP Address setting, enter 192.168.1.1 to assign the WAN edge device .1 for use as gateway in the network.
- Enter /24 for the Prefix Length.
- To provide DHCP services to endpoints on this network, select the button for DHCP server.
- Give your DHCP server an address pool starting with 192.168.1.100 and ending with 192.168.1.200.
- Enter 192.168.1.1 as the Gateway to be assigned to DHCP clients.
- Finally, enter 1.1.1.1,8.8.8.8 as DNS Servers to be assigned to clients on the network.
- Click Add at the bottom of the Edit LAN Configuration side panel.
Screenshot Description: "Add LAN Configuration" dialog box showing fields for Network, Interface, IP Address, Prefix Length, and DHCP server configuration (IP Start, IP End, Gateway, DNS Servers).
Policy
Your template has WANs and LANs; now you need to tell the device how to use them to connect users to applications. This is done using Traffic Steering and Application Policies.
Steering Policy
- Scroll to the Traffic Steering section of the template, and select Add Traffic Steering.
- Name your steering policy, for example, `local-breakout`.
- Select Add Paths to give your steering policy a path to send traffic.
- Select WAN as the path type, and select your WAN interface. For apps that use the policy, this indicates you want them sent directly out of the local WAN interface.
- Click the check in the upper right of the Add Path box, and then click Add at the bottom of the Add Traffic Steering side panel.
Screenshot Description: "Add Traffic Steering" dialog box showing fields for Name, Strategy, and Paths, with a "WAN" type path selected.
Application Policy
Finally, tie your networks and applications together in an application policy.
- Scroll to the Application Policy section of the template, and select Add Policy.
- Enter a string in the name column, and click the check box to the right of your entry.
- From the Network column drop-down, select your LAN network.
- From the Applications column drop-down, select your Internet app.
- From the Traffic Steering column drop-down, select your local breakout steering policy.
Screenshot Description: "APPLICATION POLICIES" table showing an entry with "my-lan" selected for Network, "Internet" for Application, and "local-breakout" for Traffic Steering.
Almost there! You now have a working WAN Edge template you can apply to many sites and devices across your organization.
Assign to Site
With your template set up, you need to save and assign it to the site where your WAN edge device will be deployed.
- Scroll to the top and click Save.
- Click the Assign to Site button, and select the site where you want the template config applied.
Screenshot Description: Template configuration screen showing "APPLIES TO SITES" with "Assign to Sites" button, and NTP/DNS settings.
Great work! All that remains is to associate the device with a site.
Add the Device to the Site
At this point you have the following:
- Your SSR device in your inventory.
- A WAN edge template for configuration in Mist.
- Your WAN edge template associated with your site in Mist.
Associating the device with the site and template gets you a working config!
Add the Device
- Go to your organization's WAN Edges Inventory.
- Select your device.
- Assign the device to your site.
- If you are configuring a Mist-managed router (SSR Software version 6.x and greater), check the Manage configuration with Mist check box. For version 5.4.x and greater conductor-managed routers, make sure there is no check mark in the Manage Configuration from Mist under Manage Configuration.
- Select Assign to Site.
Congratulations! Mist is now sending the template-driven configuration down to your device. After a few minutes to process and apply the configuration, it will begin forwarding sessions from LAN to WAN as described by your policy. Head over to the WAN Edges menu on the sidebar, select your device, and watch events as the device completes ZTP. As your client devices connected to the LAN are assigned addresses from the WAN Edge DHCP server and begin sending sessions, telemetry will populate the insights page, and Marvis will start analyzing it on your behalf. For conductor-managed devices, additional views for Cloud Telemetry are configurable in the SSR GUI and PCLI.
Step 3: Keep Going
IN THIS SECTION
- Learn with Videos | 20
Congratulations! Now that you've done the initial configuration, your SSR120 is ready to use. Here are some things you can do next:
What's Next?
| If you want to | Then |
|---|---|
| Get an overview of Configuration and Configuration Management on the SSR120 | See the SSR Configuration Management section of the SSR Documentation in the Juniper Networks TechLibrary |
General Information
| If you want to | Then |
|---|---|
| See all documentation available for the SSR120 | See the SS120 Documentation in the Juniper Networks TechLibrary |
| See all documentation available for SSR software | Visit Session Smart Router Documentation in the Juniper Networks TechLibrary |
| Stay up-to-date about new and changed features and known and resolved issues | See the SSR Release Notes |
Learn with Videos
Here are some great video and training resources that will help you expand your knowledge of SSR Software.
| If you want to | Then |
|---|---|
| Learn about Virtual Router Redundancy Protocol for the SSR | See SSR Virtual Router Redundancy Protocol on the SSR YouTube page |
(Continued)
| If you want to | Then |
|---|---|
| Learn about BFD for Traditional Routing | See BFD for Traditional Routing on the SSR YouTube page |
| Learn about Configuration Concurrency with the SSR | See Configuration Concurrency on the SSR YouTube page |
| Learn about Service Route Redundancy and Vectors | See Service Route Redundancy and Vectors on the SSR YouTube page |
| Get short, concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies | See Learning with Juniper on Juniper Networks main YouTube page |
| View a list of free technical training offered by Juniper | Visit the Getting Started page on the Juniper Learning Portal |
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2023 Juniper Networks, Inc. All rights reserved.
Get Started with Free Juniper Training
CEC Juniper Community
Session Smart Router Software Documentation | Juniper Networks
