Page 1
SRX2300 Firewall Hardware Guide Published 2024-03-15...
Page 2
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ("EULA") posted at https:/ /support.juniper.net/support/eula/.
Chassis Status LEDs | 15 Management Port LEDs | 18 Network Port LEDs | 18 Cooling System and Airflow in SRX2300 Firewalls | 22 SRX2300 Power System | 24 Site Planning, Preparation, and Specifications Site Preparation Checklist for SRX2300 | 33...
Page 4
Cable Specifications and Pinouts for SRX2300 | 41 Transceiver Support for SRX2300 | 41 RJ-45 Connector Pinouts for the SRX2300 Firewall Management Port | 42 RJ-45 Connector Pinouts for the SRX2300 Firewall Console Port | 43 Initial Installation and Configuration...
Page 5
Troubleshoot the SRX2300 | 83 Troubleshooting Resources for the SRX2300 Firewall | 83 Troubleshooting Chassis and Interface Alarm Messages on the SRX2300 Firewall | 83 Troubleshooting the Power System on the SRX2300 | 85 Contacting Customer Support and Returning the Chassis or Components...
Page 6
Safety and Compliance Information Safety Information | 93 SRX2300 Agency Approvals | 93...
Use this guide to install the hardware and perform initial software configuration, routine maintenance, and troubleshooting for the Juniper Networks® SRX2300 Firewall. After completing the installation and basic configuration procedures covered in this guide, you can refer to the Junos® OS documentation for...
47 Install the SRX2300 in a Rack You can install the SRX2300 Firewall in a four-post rack or cabinet. We’ll walk you through the steps to install an AC-powered firewall in a square-hole four-post rack. Before you install, review the following: •...
Page 10
4. Align the guide blocks of the rear-mounting rail with the rear-post holes. Pull the rear-mounting rail toward the front of the rack to lock the rail in place. You'll hear a distinct click when the latch locks into the rack holes. 5.
Slide the device into the channels of the mounting rails. 8. Tighten the two thumbscrews to secure the device. Connect to Power IN THIS SECTION Ground the SRX2300 Firewall | 5 Connect the Power Cord and Power On the Firewall | 5...
Page 12
To connect the SRX2300 firewall to AC power, you must do the following: Ground the SRX2300 Firewall To ground the SRX2300 Firewall, do the following: 1. Wrap and fasten one end of the electrostatic discharge (ESD) cable grounding strap around your bare wrist, and connect the other end to a site ESD point.
Security Director, or configure SRX2300 firewalls using J-Web or Junos OS CLI. If you have a Juniper® Security Director license, you can follow a few simple steps to get an SRX2300 up and running on the Juniper® Security Director Cloud portal. See...
Page 14
Juniper Licensing licenses to unlock additional features for your SRX Guide firewall You can also configure the SRX2300 using the Junos OS CLI. See Table 3 on page 7 for more information. Table 3: Configure SRX2300 Using Junos OS CLI...
Page 15
(Continued) Table 3: Configure SRX2300 Using Junos OS CLI If you want to Then Explore the software features supported on the Feature Explorer SRX2300 Configure Junos features on the SRX2300 User Guides...
C HAPTER Overview SRX2300 Firewall Overview | 10 SRX2300 Chassis | 12 Cooling System and Airflow in SRX2300 Firewalls | 22 SRX2300 Power System | 24...
• Two 10/25/40/50/100 GbE QSFP28 • Two 1 GbE SFP High Availability (HA) ports All ports are MACsec-capable ports. We ship the SRX2300 with two 120 GB SSDs that are not field replaceable. The SRX2300 Firewall is available in both AC and DC models. The SRX2300 runs the Junos OS and provides next-generation firewall capabilties including Application ID (AppID), User Firewall (UserFW), intrusion prevention system (IPS), Content Security, etc.
Page 18
Field-Replaceable Units in SRX2300 Field-replaceable units (FRUs) are components that you can replace at your site. The SRX2300 supports the following FRUs: • Fan modules • Power supply units (PSUs) • Transceivers You can remove and replace the power supply units, fan modules, and transceivers without powering off the device or disrupting the device functions.
The SRX2300 Firewall chassis is a rigid sheet metal structure that houses all the other hardware components. Chassis Physical Specifications for SRX2300 The SRX2300 Firewall has a 1RU form factor and can be installed in a standard 19-inch rack. Table 4 on page 12 summarizes the physical specifications of SRX2300.
SRX2300. Figure 1: Front Panel Components of SRX2300 Table 5 on page 13 lists and describes the front panel components of the firewall. Table 5: Components on the Front Panel of the SRX2300 Callout Component (Label on the Description...
AC variant of the SRX2300. Figure 2: Rear Panel Components of the AC Variant of SRX2300 Table 6 on page 15 lists and describes the rear panel components of the AC variant of the SRX2300.
Empty PSU slot Blank slot to install an additional PSU (1+1 redundancy). NOTE: We ship the SRX2300 with only one power supply. You can order the second power supply separately, if required. You must not mix AC and DC power supplies in the same chassis.
Page 23
Figure 3: SRX2300 Front Panel Status LEDs Table 7: SRX2300 Front Panel LEDs Callout Description • Solid green—The device is powered on. • Blinking green—The device is powered on. The device is in the bootup phase before OS initialization. •...
Page 24
(Continued) Table 7: SRX2300 Front Panel LEDs Callout Description • Solid green—The redundant power supply (RPS) is operating normally. • Solid red—The RPS is not operating normally. • Off—The RPS is not present on the device. 4 and 5 SSD1 and SSD0 •...
Management Port LEDs Figure 4 on page 18 shows the LEDs for the management ports. Figure 4: SRX2300 Management Port LEDs Table 8: Management Port LEDs Callout Description Link (LED on the left) • Solid green—A link is established. •...
Page 26
Figure 5: LEDs on the Network Ports Table 9: LEDs on the Network Ports Callout 1 Callout 2 Description (for RJ-45, SFP, SFP+, and SFP28 ports) Link and Activity LED (Right LED) Status LED (Left LED) Default (power on with or without Transceiver) Solid Green Solid Green...
Page 27
(Continued) Table 9: LEDs on the Network Ports Callout 1 Callout 2 Description (for RJ-45, SFP, SFP+, and SFP28 ports) Link and Activity LED (Right LED) Status LED (Left LED) This indicates one of the following: • The link is down or a fault has occurred.
Page 28
(Continued) Table 10: LEDs on the QSFP28 Network Ports State Description Blinking Green 4x25 Gbps or 4x10 Gbps link is up and there is traffic on the port. This indicates one of the following: • The link is down or a fault has occurred.
IN THIS SECTION Fan Modules | 22 SRX2300 Fan Module LEDs | 24 The cooling system in SRX2300 firewalls consists of four fan modules. In addition to the fans, an internal fan in each PSU also cools the device components. Fan Modules The fan modules in SRX2300 firewalls are hot-insertable and hot-removable field-replaceable units (FRUs).
Page 30
4.41 in. (11.2 cm) 0.16 lb (74 g) The SRX2300 firewalls provide front-to-back airflow. The fan modules pull the air toward them through the front of the chassis, and exhaust it out through the back of the chassis. Figure 9: Airflow through the SRX2300 Chassis...
SRX2300 Power System IN THIS SECTION AC Power Supply for SRX2300 Firewalls | 25 Supported AC Power Cords | 27 DC Power Supply for SRX2300 Firewalls | 28...
Page 32
PSU LEDs on SRX2300 Firewalls | 29 The SRX2300 is powered by two power supplies for 1 + 1 redundancy. The SRX2300 has hot-removable and hot-insertable power supply units (PSUs). If one PSU fails, you can replace it without powering off or disrupting the device function.
Page 33
Table 14: AC Power Supply Unit for SRX2300 Callout Name Power cord retainer PSU handle AC power inlet PSU latch Table 15: Physical Specifications of the SRX2300 AC PSU Height Width Depth Weight 1.61 in. (4.1 cm) 2.17 in. (5.5 cm) 14.17 in.
Page 34
Supported AC Power Cords WARNING: The AC power cord for the firewall is intended for use with the firewall only and not for any other use. NOTE: In North America, AC power cords must not exceed a length of 4.5 m (approximately 14.75 ft).
Page 35
NOTE: Power cords and cables must not block access to firewall components or drape where people might trip on the cables. DC Power Supply for SRX2300 Firewalls The following figure shows the DC PSU. Figure 13: DC Power Supply PSU for SRX2300 Table 18: DC Power Supply Unit for SRX2300 Callout Name...
Page 36
(Continued) Table 18: DC Power Supply Unit for SRX2300 Callout Name PSU latch Table 19: Physical Specifications of the SRX2300 DC PSU Height Width Depth Weight 1.61 in. (4.1 cm) 2.17 in. (5.5 cm) 14.17 in. (36 cm) 2.16 lb (980 g) Table 20 on page 29 describes the DC power specifications for SRX2300.
Page 37
Figure 14: LEDs on the AC PSU Table 21: LEDs on the AC PSU Callout Color State Description Unlit No power input. Green PSU is operating normally. Blinking The device is in standby mode. Amber Blinking PSU is operating under overload. The system has detected an error in the PSU.
Page 38
Table 22: LEDs on the DC PSU Callout Name Color State Description Input Unlit No power input. Green The PSU is operating normally. Output Unlit No power output. Green The PSU is operating normally. Fault Amber The system has detected an error in the PSU.
C HAPTER Site Planning, Preparation, and Specifications Site Preparation Checklist for SRX2300 | 33 SRX2300 Site Guidelines and Requirements | 34 Cable Specifications and Pinouts for SRX2300 | 41...
The checklist in Table 23 on page 33 summarizes the tasks you need to perform when preparing a site to install the SRX2300. Table 23: Site Preparation Checklist to install the SRX2300 Item or Task Additional Information Environment Verify that environmental "Environmental Requirements and Specifications for SRX2300"...
Table 23: Site Preparation Checklist to install the SRX2300 (Continued) Item or Task Additional Information Plan the rack location, including required space clearances. Secure the rack to the floor and building structure. Cables • Acquire cables and connectors. • Review the maximum distance allowed for each cable.
Rack Requirements for SRX2300 | 38 General Site Installation Guidelines Take the following precautions to plan an acceptable operating environment for your SRX2300 and avoid prevent equipment failures caused due to environment: • Keep the area around the chassis free from dust.
Page 43
Table 24: Site Electrical Wiring Guidelines Site Wiring Factor Guidelines Signaling limitations If your site experiences any of the following problems, consult experts in electrical surge suppression and shielding: • Improperly installed wires cause radio frequency interference (RFI). • Damage from lightning strikes occurs when wires exceed recommended distances or pass between buildings.
When planning the site for installing an SRX2300, ensure that there is sufficient space around the installed chassis. • For the operating temperature of the SRX2300 to be optimal, the airflow around the chassis must be unrestricted. • For service personnel to remove and to install hardware components, and to accommodate the interface and power cable bend radius, there must be adequate space at the front and rear of the appliance.
Figure 16: Clearance Requirements for Hardware Maintenance of SRX2300 Rack Requirements for SRX2300 You can mount the SRX2300 on four-post racks. The rack mounting kit is shipped with the device. Table 26 on page 39...
Page 46
Table 26: Rack Requirements and Specifications Rack Requirement Guidelines Rack type Use a four-post rack with bracket holes or hole patterns spaced at 1 U increments (1.75 in. or 4.45 cm). Ensure that the rack meets the size and strength requirements to support the weight. A U is the standard rack unit as defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310–D) published by the Electronics...
Page 47
36 in. (91.4 cm) front-to-back. • Ensure that the rack is strong enough to support the weight of the device. A fully-configured SRX2300 with 2 PSUs weighs about 19.12 lb (8.5 kg). • Ensure that the spacing of rails and adjacent racks allows for proper clearance around the device and rack.
You can search for transceivers by product and the tool displays all the transceivers supported on that device. You can also search by category, interface speed, or type. The list of supported transceivers for the SRX2300 is located at https:/ / apps.juniper.net/hct/product/.
Juniper Networks optic or cable that is qualified for the device. RJ-45 Connector Pinouts for the SRX2300 Firewall Management Port The port on the front panel labeled MGMT is a 10/100/1000 Mbps Ethernet RJ-45 receptacle that accepts an Ethernet cable for connecting the services gateway to a management LAN (or other device that supports out-of-band management).
The port on the front panel labeled CON is an asynchronous serial interface that accepts an RJ-45 connector. Table 28 on page 43 describes the RJ-45 connector pinouts for the console port. Table 28: RJ-45 Connector Pinouts for the SRX2300 Firewall Console Port Signal Description Request to Send...
Initial Installation and Configuration SRX2300 Firewall Installation Overview | 45 Unpack the SRX2300 | 45 Install the SRX2300 in a Rack | 47 Connect the SRX2300 to Power | 57 Connect the SRX2300 to External Devices | 65 Configure Junos OS on the SRX2300 | 67...
1. Follow instructions in "Unpack the SRX2300" on page 45 2. Install the firewall as described in "Install the SRX2300 in a Rack" on page 47 3. Connect cables to external devices as described in "Connect the SRX2300 to External Devices" on page 65 4.
We ship the parts as per the configuration you order. If any part on the packing list is missing, contact your customer service representative or contact Juniper customer care from within the U.S. or Canada by telephone at 1-888-314-5822. For international-dial or direct-dial options in countries without toll-free numbers, see https:/ /www.juniper.net/support/...
1 (only for AC models) geographical location Rack mount kit Documentation Roadmap NOTE: We ship the SRX2300 with only one power supply unit (PSU). You can order the second power supply separately, if required. Install the SRX2300 in a Rack IN THIS SECTION...
TL-1RU-RMK Rack Mount Kit on a Threaded- Hole 4-Post Rack | 51 You can mount the SRX2300 on a four-post rack or in a cabinet. Use the toolless rack mount kit shipped with the device. Complete these prerequisites before you mount the device: •...
Page 56
• A pair of front and rear mounting rails that attach to the rack posts—provided with the rack mount kit. To mount the device on a four-post rack: 1. Review the General Safety Guidelines and Warnings. 2. Wrap and fasten one end of the electrostatic discharge (ESD) cable grounding strap around your bare wrist, and connect the other end to a site ESD point.
Page 57
Figure 19: Install the Rear Mounting Rails b. Align the guide blocks of the front mounting rails with the front-post holes. Push the front mounting rails toward the rear of the rack to lock the rails in place. You will hear a distinct click sound when the latch locks into the corresponding rack holes.
Figure 21: Slide the Device into the Rack 7. Tighten the two thumbscrews to secure the device. Figure 22: Tighten the Thumbscrews Mount your Device by Using the JNP-4P-TL-1RU-RMK Rack Mount Kit on a Threaded-Hole 4-Post Rack Ensure that you have the following tools and parts available: •...
Page 59
• A pair of side mounting brackets that attach to the chassis—provided with the rack mount kit. • A pair of mounting front and rear rails that attach to the rack posts—provided with the rack mount kit. To mount the device on a four-post rack with threaded holes: 1.
Page 60
Figure 24: Removing the Guide Blocks from the Front Mounting Rail b. Remove the guide blocks from the rear mounting rail by loosening the screws and washers. Preserve the guide blocks, screws, and washers for later use. Figure 25: Removing the Guide Blocks from the Rear Mounting Rail c.
Page 61
a. Insert the guide pin of the rear mounting rails into the rear-post holes. Pull the rear mounting rails toward the front of the rack to lock the rails in place. You will hear a distinct click sound when the latch locks into place.
Page 62
Figure 29: Secure the Rear Mounting Brackets d. Visually ensure that the front and rear latches are locked into place on the mounting rails. The mounting rails should be securely installed on the rack. Figure 30: Mounting Rails Installed and Secured 6.
Page 63
Figure 31: Slide the Device into the Rack 7. Tighten the two thumbscrews to secure the device. Figure 32: Tighten the Thumbscrews...
Power Off the SRX2300 | 64 NOTE: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must connect the SRX2300 to an earth ground before you connect it to power. Connect Earth Ground to SRX2300...
Page 65
To ground the SRX2300, connect a grounding cable to earth ground. Attach the grounding cable to the chassis grounding point located on the rear of the device. Under all circumstances, use this grounding connection to ground the chassis.
NOTE: Ensure that the device is permanently connected to ground during operation. Connect AC Power to an SRX2300 Firewall The AC power supply units (PSUs) in an SRX2300 are hot-removable and hot-insertable field- replaceable units (FRUs). You can remove and replace the PSUs without powering off the device or disrupting its functions.
Page 67
ESD point on the device. 2. Ensure that you fully insert the power supplies into the chassis. 3. Locate the AC power cords shipped with the SRX2300; the cords have plugs appropriate for your geographical location. See "Supported AC Power Cords"...
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the chassis before connecting power. See "Connect Earth Ground to SRX2300" on page 57 for instructions. WARNING: Before performing the following procedure, ensure that you remove the power from the DC circuit.
Page 69
Install heat-shrink tubing insulation around the power cables: a. Slide the tubing over the portion of the cable where it is attached to the terminal barrel. Ensure that the tubing covers the end of the wire and the barrel of the terminal attached to it. b.
Page 70
Figure 37: Remove the Terminal Cover Verify that you have correctly labeled the DC power cables before making connections to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the ohm output of the -48 V and return (RTN) DC cables to chassis ground.
10. Connect the power cables to the external DC power source. If the external DC power source has a switch, set it to the ON (|) position. Power Off the SRX2300 You can power off the firewall in any of the following two ways: •...
NOTE: The fans in the power supply continue to rotate even after you power off the SRX2300 Firewall. To stop the fans, remove the power cord from the power supply. The fans will stop in a few seconds.
You can monitor and manage your device by using a dedicated management channel. Use the management port to connect your device to the management device. The management port accepts an Ethernet cable that has an RJ-45 connector. To connect a device to a network for out-of-band management: 1.
IN THIS SECTION Configuring the SRX2300 Using J-Web | 68 Configure the SRX2300 using Juniper® Security Director Cloud | 69 Accessing the CLI on the SRX2300 | 69 Configuring Root Authentication and the Management Interface from the CLI | 70...
We ship the SRX2300 Firewall with preinstalled Junos OS, which is ready to be configured when you power on the device. You can use the J-Web GUI, Juniper® Security Director on Premise, Juniper® Security Director Cloud or the CLI to perform the initial configuration.
Configure the SRX2300 using Juniper® Security Director Cloud Juniper® Security Director Cloud is a cloud-based software-as-a-solution (SaaS) portal that helps you securely migrate your network to a Secure Access Service Edge (SASE) architecture. Follow the instructions in the...
• Data bits—8 • Stop bits—1 • Flow control—none 4. Power on the device. You can start performing initial software configuration on the device after the device is up. NOTE: After you have completed the initial configuration, you can connect your device to a network for out-of-band management as described in "Connect Your Device to a Network for Out-of-Band Management"...
8. Commit the configuration changes. [edit] root@# commit Factory-Default Configuration of the SRX2300 Your firewall comes configured with a factory-default configuration. The default configuration includes the following security configuration: • Two security zones are created: trust and untrust.
If the current active configuration fails, you can use the load factory-default command to revert to the factory-default configuration. Viewing the SRX2300 Firewall Factory-Default Configuration To view the factory-default configuration of the firewall using the CLI: 1. Log in as the root user and provide your credentials.
C HAPTER Maintaining Components Routine Maintenance Procedures for the SRX2300 | 74 SRX2300 Power Supply Maintenance | 74 SRX2300 Cooling System Maintenance | 79...
Install the AC PSU in the SRX2300 | 75 The SRX2300 rear panel has two AC PSUs, which are hot-removable and hot-insertable field- replaceable units (FRUs). You can remove and replace the PSUs without powering off the SRX2300 or disrupting the firewall functions.
• Antistatic bag or an antistatic mat • A replacement AC PSU • A blank cover panel (in case you're not replacing the component) Remove the AC PSU from the SRX2300 To remove an AC PSU from the appliance (see Figure 43 on page 75 CAUTION: Avoid leaving the PSU slot empty for more than 30 minutes whem the device is operational.
4. Using both hands, place the PSU in the PSU slot on the rear panel of SRX2300. Slide the PSU straight into the chassis until the PSU is fully seated in the chassis slot. Ensure that the PSU faceplate is flush with the adjacent PSU faceplate.
• A replacement DC PSU • A blank cover panel (in case you're not replacing the component) Remove the DC PSU from an SRX2300 To remove a DC PSU from the appliance (see Figure 45 on page 77 CAUTION: Avoid leaving the PSU slot empty for more than 30 minutes when the device is operational.
5. Using both hands, place the PSU in the PSU slot on the rear panel of SRX2300. Slide the PSU straight into the chassis until the PSU is fully seated in the chassis slot. Ensure that the PSU faceplate is flush with the adjacent PSU faceplate.
Install the Fan Module in the SRX2300 | 80 The SRX2300 has four independent, field-replaceable fans at the rear of the chassis. Each fan module is a hot-removable and hot-insertable field-replaceable unit (FRU). You can remove and replace the fans without turning off power to the appliance or disrupting its functions.
4. Grasp the handle on the fan module and pull it firmly to slide the fan module out of the chassis. Figure 47: Remove the Fan Module from the SRX2300 5. Place the fan module in the antistatic bag or on the antistatic mat.
Page 88
Figure 48: Install the Fan Module in the SRX2300 4. Tighten the captive screws on the faceplate of the fan module by using your fingers. If you can't tighten the captive screws by using your fingers, use the screwdriver.
Troubleshoot the SRX2300 IN THIS SECTION Troubleshooting Resources for the SRX2300 Firewall | 83 Troubleshooting Chassis and Interface Alarm Messages on the SRX2300 Firewall | 83 Troubleshooting the Power System on the SRX2300 | 85 Troubleshooting Resources for the SRX2300 Firewall To troubleshoot a device, you use the Junos OS CLI and LEDs on the components: •...
Page 91
Specifications for SRX2300" on page 37 • Check the air flow. See "Clearance Requirements for Hardware Maintenance of SRX2300" on page 37 The firewall fan has Place your hand near the Red (major) failed. exhaust vents at the rear of the...
NOTE: For more information about alarms, see the Junos OS Monitoring and Troubleshooting for Security Devices Guide. Troubleshooting the Power System on the SRX2300 The LEDs on the firewall enable you to determine the performance and operation of the power system.
Page 93
(Continued) Table 31: PWR LED Description LED Status LED State Meaning Possible Cause and Corrective Action The firewall is not show chassis alarms Issue the command receiving power. to determine the source of the problem. • Verify that the AC power cord or DC power supply cable is not damaged.
C HAPTER Contacting Customer Support and Returning the Chassis or Components Contacting Customer Support and Returning the Chassis or Components | 88...
NOTE: Do not return any component to Juniper Networks unless you have first obtained an RMA number. Juniper Networks reserves the right to refuse shipments that do not have an RMA number. Refused shipments are returned to you by collect freight.
• From the U.S. and Canada: 1-888-314-JTAC (5822) • From all other locations: 1-408-745-9500 NOTE: If contacting JTAC by telephone: • To report a new incident, press the star (*) key to be routed to the next available support engineer. •...
Figure 49: Location of the Serial Number Label Contact Customer Support to Obtain Return Material Authorization If you are returning a device or hardware component to Juniper Networks for repair or replacement, obtain a Return Material Authorization (RMA) number from the Juniper Networks Technical Assistance Center (JTAC).
NOTE: For international or direct-dial options in countries without toll-free numbers, see https:/ / support.juniper.net/support/. If contacting JTAC by telephone: • To report a new incident, press the star (*) key to be routed to the next available support engineer.
Page 99
C HAPTER Safety and Compliance Information Safety Information | 93 SRX2300 Agency Approvals | 93...
Page 100
Networks products. Follow the guidelines provided in the guide to reduce the likelihood of personal injury, equipment damage, and damage to surrounding areas. Along with the information provided in the Juniper Networks Safety Guide, you must read and SRX2300 specific safety information provided in this hardware guide.
Page 101
• IEC 62368-1 2018 (3rd Edition) Audio/Video, Information and Communication Technology Equipment • EN 62368-1:2014+A11:2017 Audio/Video, Information and Communication Technology Equipment • UL/CSA 62368-1 :2019 (3rd Edition) Audio/Video, Information and Communication Technology Equipment • EMC • FCC 47 CFR Part 15 •...
Page 102
• The battery return connection is to be treated as an isolated DC return (i.e.DC-I), as defined in GR-1089-CORE. • For Juniper Networks systems with AC power supplies, an external surge protective device (SPD) must be used at the AC power source.