So far you have an SSR device waiting to be claimed, a network for your LAN, and an
Internet application for your WAN to deliver.
A WAN Edge template ties them all together! The use of templates allow for re-usable and consistent configuration for every SSR device you deploy.
- Navigate back to the WAN section of the organization sidebar menu, and select WAN Edge Templates.
- Select Create Template in the upper right.
- Name the template.
- Enter NTP and DNS information to be used by the WAN edge device.
The first thing to do in your template is to describe which port to use for the WAN.
- Scroll to the WAN section of the template, and select Add WAN.
- Name the WAN port
- Since you already plugged port 0 on the device into the Internet, enter
ge-0/0/0to designate it as a WAN port.
- Make sure IP Configuration is set to be learned from DHCP, and that Source NAT is enabled.
Addat the bottom of the Edit WAN Configuration side panel.
Next, associate your LAN network segment with the appropriate port on the device, and give the LAN additional network services such as DHCP.
- Scroll to the LAN section of the template, and select Add LAN.
- From the Network dropdown menu, select your network segment to associate it with the LAN.
- Enter the port used for the LAN port, for example
- In the IP Address setting, enter
192.168.1.1to assign the WAN edge device
.1for use as gateway in the network.
/24for the Prefix Length.
- To provide DHCP services to endpoints on this network, select the button for DHCP server.
- Give your DHCP server an address pool starting with
192.168.1.100and ending with
192.168.1.1as the Gateway to be assigned to DHCP clients.
- Finally, enter
18.104.22.168,22.214.171.124as DNS Servers to be assigned to clients on the network.
Addat the bottom of the Edit LAN Configuration side panel.
Your template has WANs and LANs; now you need to tell the device how to use them to connect users to applications. This is done using Traffic Steering and Application Policies.
- Scroll to the Traffic Steering section of the template, and select Add Traffic Steering.
- Name your steering policy, for example,
- Select Add Paths to give your steering policy a path to send traffic.
WANas the path type, and select your WAN interface. For apps that use the policy, this indicates you want them sent directly out of the local WAN interface.
- Click the check in the upper right of the Add Path box, and then click
Addat the bottom of the Add Traffic Steering side panel.
Finally, tie your networks and applications together in an application policy.
- Scroll to the Application Policy section of the template, and select Add Policy.
- Enter a string in the name column, and click the check to the right of your entry.
- From the Network column dropdown, select your LAN network.
- From the Applications column dropdown, select your Internet app.
- From the Traffic Steering column dropdown, select your local breakout steering policy.
Almost there! You now have a working WAN Edge template you can apply to many sites and devices across your organization.
Assign to Site
With your template set up, you need to save and assign it to the site where your WAN edge device will be deployed.
- Scroll to the top and click Save.
- Click the Assign to Site button, and select the site where you want the template config applied.
Great work! All that remains is to associate the device with a site.