Single Conductor Interactive Installation
This process assumes you have already created a bootable device using a USB. Instructions for downloading and creating a bootable device are available in Downloading an SSR ISO and Creating a Bootable USB.
The steps in this section describe the interactive conductor installation from the packaged-based ISO. The section Initialize the SSR describes using the Initializer to configure the system as a Conductor after installing from the Interactive ISO.
The Conductor installation must be completed before installing a Session Smart Router or routers using the ISO. The same ISO is used for both installations.
To install a router after installing and configuring the Conductor, use the SSR Installation. The Router Installation Using OTP procedure can be used to install more complex router configurations.
- Ensure that the platform you are installing on meets the SSR hardware requirements.
- Verify that the boot priority of the USB drive is properly listed in the system BIOS.
- Local console connectivity to the device/VM.
Choose the Installation Type
After imaging the ISO onto removable media, insert it into the target device and power it on.
Upon boot, the following screen is displayed. The default selection is booting to the serial console (115200 baud). You must manually choose the installation process suited for your environment.
To install using the Interactive Installation, use the arrow keys to select either
Install 128T Routing Software Serial Console or
Install 128T Routing Software VGA Console. As noted earlier, this guide describes the installation process using the Interactive Installation, specifically using the VGA console.
Because not all hardware has video support, booting to the serial console 115200 baud is the default, and is automatically selected after 30 seconds. When using the serial console, the terminal size is 80x25 - anything smaller may result in abnormal navigation behavior.
Selecting the wrong type of console (Serial or VGA) may result in garbled characters being displayed. If allowed to continue it will result in an incorrect installation. If the wrong console is selected, reboot the target system and select the correct line for the target hardware.
Install via Serial Console
Use this option when running on hardware with no video chipset. It uses
/dev/ttyS0 115200 baud as the serial console for interacting with the installer.
For serial console issues please refer to Serial Console Troubleshooting.
Install via VGA Console
Use this option when running on hardware that has onboard graphics chipsets. This installs SSR software using the GUI installer.
The procedure that follows here is the Interactive Install on the VGA Console.
FIPS Enforcement Mode
FIPS Enforcement is available for version 6.0 and later. FIPS mode can be enabled manually during the installation. In cases where the flag was not or cannot be set during installation, a FIPS RPM is available for download from the SSR repos, and can be installed.
If you require strict FIPS compliance, the
fips=1 kernel option must be added to the kernel command line during system installation to ensure that key generation is done with FIPS approved algorithms and continuous monitoring tests in place.
If FIPS enablement is done retrospectively via RPM installation, the already created accounts could be using non-FIPS compliant cyphers.
Use the following procedure to enable FIPS enforcement.
Use up/down keys to highlight the desired install mode.
Press TAB to edit the config.
fips=1to the end of the vmlinuz parameters.
Press Enter to start the install.
After the Linux installation completes, the SSR software installation begins. Note that this may take several minutes to complete (approximately 20 minutes). After the installation has completed, the following screen is displayed:
<Yes> to shut down the system. Remove the bootable media, then power the system up to complete the installation process.
Initial Boot and NMTUI
When the system boots from the
Install 128T Routing Software... Interactive Installation work flow, the system asks whether to configure initial Linux Networking before the SSR Initializer is started.
Yes launches the CentOS NMTUI application to perform an initial network interface setup.
Initialize the SSR Node
The SSR Initializer tunes your operating system, prepares the platform to run the SSR software, and creates the bootstrapping files necessary to load the software. The Initializer is launched on first boot.
There are three different types of conductor installations;
- Standalone Conductor
- Conductor High Availability
- Conductor High Availability for Cloud Deployments
On the SSR Initializer wizard screen, use the space bar to select the Conductor role for the SSR node, and press the Enter key to select OK.
When asked What kind of Router/Conductor node is this?, select Standalone from the following options:
- Standalone: This router/conductor has no highly available peer, and is not currently planned for high availability.
Enter the following system properties on the Node Info screen:
- Node Name: The name of the system within your Conductor, for example, conductor-node1. By default this field uses the Linux system's hostname. The node name identifies the conductor node under the Conductor element in the Authority.
Both routers and conductors can consist of one node (for standalone systems) or two nodes (for highly available systems).
- Conductor Name: The name of the Conductor system as a whole. When referring to a running SSR software instance, it is identifiable by the full name; e.g.,
conductor-node1.conductor. The full system name is reflected in the PCLI prompt.
On the Password Setup screen, create a password for the SSR Admin user. The administrator password must be at least 8 characters long, contain at least 1 uppercase letter, at least 1 lowercase letter, at least 1 number, cannot contain the username in any form, and cannot repeat characters more than 3 times. This operation is only performed on the standalone or first node in the HA peer, and the password must be entered twice.note
Resetting a password requires entering the old password. If a password is lost or forgotten and the account is inaccessible, the account cannot be recovered. Please keep password records accessible and secure.
Press the Enter key to select OK. The Initializer performs a hardware compatibility check. The compatibility check may fail due to warnings or failure notices, which are displayed in the output script. If no failures are present, you can choose to continue with the installation even if multiple warnings exist. For information on why a specific test may have failed or generated a warning, contact Juniper Technical Support.
When prompted, select
<Yes>to start the conductor.note
A system reboot is required.
Verify the Installation
After installing the SSR Software it is important to verify that the installation was completed successfully.
To Verify the SSR Installation:
Launch a command prompt window.
Execute the command:
sudo systemctl status 128T
When the service is listed as Active, log into the system as Admin using the system default password. By logging into the system, you have verified the installation.
Close the command prompt window.
Use a web browser to navigate to the IP address of the SSR GUI. For example;
Log in to the SSR GUI using the admin name and password you created earlier.
Configure the Token
To save repository access credentials, use the PCLI command
set software access-token. For information on this command, see
set software access-token.