Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

ON THIS PAGE
 

Step 2: Up and Running

The SSR130 is onboarded to the Juniper Mist™ cloud. To provision the SSR130 with ZTP, log in to your Mist portal and begin the WAN configuration.

Add the Network

To begin your WAN design, identify the network the SSR will use to access applications over a LAN network segment.

  1. From the Mist dashboard, navigate to the WAN section of the organization sidebar menu, and select Networks.
  2. Select Add Networks in the upper right of the screen as shown below.
  3. Give the network a name.
  4. Configure the network subnet as 192.168.1.0/24.
  5. Click Save at the bottom of the Edit Network side panel.
Excellent! You have now defined this network for use across the entire organization, including the template you will apply to your new SSR130.

Add an Application

Next, define the applications for the WAN to deliver, starting with the Internet.
  1. Navigate back to the WAN section of the organization sidebar menu, and select Applications.
  2. Select Add Applications in the upper right of the screen as shown below.
  3. Name the application Internet.
  4. Enter 0.0.0.0/0, or an IPv4 address space in the IP Addresses configuration.
  5. Click Save at the bottom of the Add Application side panel.
Nice! Your organization is set up to provide access to the Internet using the WAN.

Create a Template

So far you have an SSR device waiting to be claimed, a network for your LAN, and an Internet application for your WAN to deliver. Next, you need to create a WAN Edge template that ties them all together. Templates provide a re-usable and consistent configuration for every SSR you deploy.

  1. Navigate back to the WAN section of the organization sidebar menu, and select WAN Edge Templates.

  2. Select Create Template in the upper right of the screen as shown below.

  3. Give the template a name.

  4. Click Create.

  5. Enter NTP and DNS information to be used by the WAN edge device.

Define the WAN Port

The first thing to do in your template is to define which port to use for the WAN.

  1. Scroll to the WAN section of the template, and select Add WAN.

  2. Name the WAN port wan1.

  3. Since you already plugged port 0 on the SSR130 into the Internet, enter ge-0/0/0 to designate it as a WAN port.

  4. Make sure IP Configuration is set to DHCP, and that Source NAT is enabled.

  5. Click Add at the bottom of the Edit WAN Configuration side panel.

Define the LAN Port

Next, associate your LAN with the appropriate port on the SSR, and give the LAN additional network services such as DHCP.

  1. Scroll to the LAN section of the template, and select Add LAN.

  2. From the Network drop-down menu, select your network segment to associate it with the LAN.

  3. Enter the port used for the LAN port, for example ge-0/0/3.

  4. Enter 192.168.1.1 as the IP Address to assign the WAN edge device .1 as a gateway in the network.

  5. Enter /24 for the Prefix Length.

  6. Enable the DHCP Server button to provide DHCP services to endpoints on this network.

  7. Give your DHCP server an address pool starting with 192.168.1.100 and ending with 192.168.1.200.

  8. Enter 192.168.1.1 as the Gateway to be assigned to DHCP clients.

  9. Finally, enter 1.1.1.1,8.8.8.8 as DNS Servers to be assigned to clients on the network.

  10. Click Add at the bottom of the Edit LAN Configuration side panel.

Create Policies

Your template has WANs and LANs; now you need to tell the SSR130 how to use them to connect users to applications. This is done using Traffic Steering and Application Policies.

Define the Traffic Steering Policy

  1. Scroll to the Traffic Steering section of the template, and select Add Traffic Steering.

  2. Name your steering policy, for example, local-breakout.

  3. Select Add Paths to give your steering policy a path to send traffic.

  4. Select WAN as the path type, and select your WAN interface. For apps that use the policy, this indicates you want them sent directly out of the local WAN interface.

  5. Click the check in the upper right of the Add Path box, and then click Add at the bottom of the Add Traffic Steering side panel.

Next, define the Application Policy.

Define the Application Policy

The Application Policy ties the networks and applications together.

  1. Scroll to the Application Policy section of the template, and select Add Policy.

  2. Enter a string in the name column, and click the check box to the right of your entry.

  3. From the Network column drop-down, select your LAN network.

  4. From the Applications column drop-down, select your Internet app.

  5. From the Traffic Steering column drop-down, select your local breakout steering policy.

Almost there! You now have a working WAN Edge template that you can apply to many sites and devices across your organization.

Assign the Template to a Site

Now that you have set up a template, you need to save and assign it to the site where your SSR will be deployed.
  1. Scroll to the top of your template and click Save.
  2. Click the Assign to Site button, and select the site where you want to apply the template configuration.
Great work! All that remains is to associate the SSR130 with a site.

Assign the SSR130 to a Site

Once you associate the SSR130 with a site and a template, the working configuration will be complete.
  1. Select Organization on the left sidebar, and navigate to your organization's WAN Edges Inventory.
  2. Select your SSR130 and assign it to your site.
  3. If you are configuring a Mist-managed router (SSR Software version 6.x and greater), check the Manage configuration with Mist check box. For version 5.4.x and greater conductor-managed routers, make sure there is no check mark in the Manage Configuration from Mist under Manage Configuration.
  4. Select Assign to Site.

Congratulations you now have a Mist-claimed SSR130, and a basic configuration ready to send to your device!

Install the SSR130 Hardware

Your SSR130 installation has specific features that must be installed depending on your use and environment . Refer to the SSR130 Hardware Installation Guide to complete the following procedures:

  • Rack, Wall, or Surface Mounting
  • LTE Antenna Install
  • SIM Card Install
  • Connecting Power

Please return here after completing those procedures to complete the network connections.

Connect your SSR130 to the Mist Cloud

Your SSR130 uses port 0 (ge-0-0) as a default WAN port to contact Mist for zero-touch provisioning (ZTP). You'll need to set up port 3 (ge-0-3) with a LAN network.

  1. Connect SSR port 0 to an Ethernet WAN link that can provide:
  2. Connect SSR port 3 to your LAN devices, including:
    • Mist-managed Juniper EX switches
    • Mist APs
    • User devices
Great job, your SSR130 is now connected to the Mist cloud! In just a few minutes, Mist will send the template-driven configuration down to your device. Once the configuration has been applied, it will begin forwarding sessions from LAN to WAN as described by your policy.

Head over to the WAN Edges menu on the Mist sidebar, select your device, and watch events as the device completes ZTP.

As your client devices connected to the LAN are assigned addresses from the WAN Edge DHCP server and begin sending sessions, telemetry will populate the insights page, and Marvis will start analyzing it on your behalf.

For conductor-managed devices, additional views for Cloud Telemetry are configurable in the SSR GUI and PCLI.