If he has no SSN, document "None" on CTR.
I wouldn't automatically assume that he is "illegal" because he doesn't have a social security number. If, however, he is working then he should have a number. If I determined that hiring undocumented workers was SAR worthy, it would be the employer that would be reported.
_________________________
Life without Jesus is like an unsharpened pencil - it has no point.