Srx5400, Srx5600, And Srx5800 Firewall Card Overview - Juniper SRX5400 Hardware Manual

SRX5400, SRX5600, and SRX5800 Firewall Card Overview

The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800
Firewall to suit the needs of your network. The following types of cards are available for the SRX5400,
SRX5600, and SRX5800 Firewalls:
• I/O cards (IOCs) provide additional physical network connections to the firewall. Their primary
function is to deliver data packets arriving on the physical ports to the Services Processing Cards
(SPCs) and to forward data packets out the physical ports after services processing.
• Flex IOCs have two slots for port modules that add additional physical network connections to the
firewall. Like IOCs, their primary function is to deliver data packets arriving on the physical ports to
the SPCs and to forward data packets out the physical ports after services processing.
• Modular Port Concentrators (MPCs) have slots on the front panel that accept smaller cards called
Modular Interface Cards (MICs). Each MIC has one or more physical interfaces on it. An MPC with
MICs installed functions in the same way as a regular I/O card (IOC), but allows greater flexibility in
adding different types of Ethernet ports to your firewall. MPCs and MICs are similar in form and
function to Flex IOCs and port modules. However, the two use different form-factors, so you cannot
install port modules in an MPC, nor can you install MICs in a Flex IOC.
• Services Processing Cards (SPCs) provide the processing power to run integrated services such as
firewall, IPsec and IDP. All traffic traversing the firewall is passed to an SPC to have services
processing applied to it.
• Switch Control Boards (SCBs) power on and power off IOCs and SPCs; control clocking and system
resets; and control booting, monitor, and system functions. Each SCB has a slot in the front panel for
a Routing Engine.
Although the following modules are not cards in the sense of having a form-factor that fits the card cage
of the SRX5400, SRX5600, and SRX5800 Firewall, this guide also addresses the following modules that
fit into certain SRX5400, SRX5600, and SRX5800 Firewall cards:
• Routing Engines fit into slots in SCBs and maintain the routing tables, manage the routing protocols
used on the device, control the device interfaces and some chassis components, and provide the
interface for system management and user access to the device.
• Port modules fit into slots in Flex IOCs and add additional physical network interface ports to the
firewall.
• Modular Interface Cards (MICs) fit into slots in MPCs and add additional physical network interface
ports to the firewall. MPCs and MICs are similar in form and function to Flex IOCs and port modules.
However, the two use different form-factors, so you cannot install port modules in an MPC, nor can
you install MICs in a Flex IOC.
68