This article provides step-by-step instructions for onboarding an SSR router to a Conductor using the CLI method.

Prerequisite:

Ensure that the new SSR router has IP reachability to the Conductor. Configure the Linux interface or device interface appropriately before starting the onboarding process.

Step 1: Add the Router on the Conductor (UI)

1. Navigate to:
   Conductor → Authority → Add New Router
2. Add the node and configure the Associated Asset ID
   • This value must match the minion_id on the SSR router.
3. Set Inter-node Security Policy to Internal (required).
4. Commit the configuration.

Step 2: Configure the SSR Router (CLI)

1. On the SSR router, go to the Salt configuration directory:
   # cd /etc/salt
   
   
2. Check the existing files:
   # cat minion
   # cat minion_id
   
   
3. Set the minion_id to match the Associated Asset ID configured on the Conductor:
   # echo "RouterA" > minion_id
   # cat minion_id
   
   

Example: RouterA

Sample minion file for reference:

auth_safemode: true
autoload_dynamic_modules: false
enable_legacy_startup_events: false
include: /usr/lib/128technology/python/salt/file_roots/_beacons/*.conf
master:
- 127.0.1.2
master_alive_interval: 30
master_tries: -1
ping_interval: 0
random_reauth_delay: 120
recon_default: 5000
recon_max: 30000
recon_randomize: true
tcp_authentication_retries: -1
tcp_keepalive_cnt: 3
tcp_keepalive_idle: 5
tcp_keepalive_intvl: 10
transport: tcp

Step 3: Restart Salt Minion Service

# systemctl restart salt-minion.service
# systemctl status salt-minion.service

Ensure the service starts successfully and connects to the Conductor.

Step 4: Verify Asset Status from Conductor

On the Conductor PCLI, run:
# show assets

The router should appear in connected or running state.

Step 5: Review Logs if Router Does Not Show as Connected

On the Conductor:
# shell su -
# cd /var/log/128technology/
# tail -f automatedProvisioner.log
# grep -iR "RouterA" automatedProvisioner.log

Above logs will helps to identify onboarding or Salt connectivity issues.

If you face any further issues, please contact JUNIPER JTAC Support for assistance.