Juniper SRX345 Hardware Manual
  1. Manuals
  2. Brands
  3. Juniper Manuals
  4. Network Hardware
  5. SRX345
  6. Hardware manual
Juniper SRX345 Hardware Manual

Juniper SRX345 Hardware Manual

Firewall
Hide thumbs Also See for SRX345:
Table of Contents

Advertisement

Quick Links

Download this manual
SRX345 Firewall Hardware Guide
Published
2024-03-21

Advertisement

Table of Contents
loading

Related Manuals for Juniper SRX345

Summary of Contents for Juniper SRX345

  • Page 1 SRX345 Firewall Hardware Guide Published 2024-03-21...
  • Page 2 The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ("EULA") posted at https:/ /support.juniper.net/support/eula/.

  • Page 3: Table Of Contents

    General Site Installation Guidelines for the SRX345 Firewall | 22 SRX345 Firewall Environmental Specifications | 23 SRX345 Firewall Electrical Wiring Guidelines | 23 SRX345 Firewall Physical Specifications | 25 SRX345 Firewall Clearance Requirements for Airflow and Hardware Maintenance | 25...
  • Page 4 Powering Off the SRX345 Services Gateway | 45 Connecting the SRX345 to External Devices | 46 Connecting the Dial-Up Modem to the Console Port on the SRX345 Services Gateway | 46 Connecting to the SRX345 Firewall CLI Using a Dial-Up Modem | 47...
  • Page 5 Maintaining Components Maintaining the SRX345 Components | 65 Required Tools and Parts for Maintaining the SRX345 Firewall Hardware Components | 65 Routine Maintenance Procedures for the SRX345 Services Gateway | 65 Maintaining the SRX345 Firewall Cooling System Components | 66...
  • Page 6 Contacting Customer Support | 76 Returning a SRX345 Firewall Component to Juniper Networks | 77 Locating the SRX345 Firewall Chassis Serial Number and Agency Labels | 77 Locating the Mini-PIM Serial Number Label | 78 Listing the SRX345 Firewall Component Details with the CLI | 78...

  • Page 7: About This Guide

    Use this guide to install hardware and perform initial software configuration, routine maintenance, and troubleshooting for the SRX345 Firewall. After completing the installation and basic configuration procedures covered in this guide, refer to the Junos OS documentation for information about further software configuration.

  • Page 8: Overview

    C HAPTER Overview SRX345 Firewall Overview | 2 SRX345 Chassis | 4 SRX345 Cooling System | 13 SRX345 Power System | 14...

  • Page 9: Srx345 Firewall Overview

    The SRX345 Firewall has a capacity of 5 gigabits per second (Gbps) and is 1 rack unit (U) tall. The services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports, one management port, 4 GB of DRAM memory, 8 GB of flash memory, and four Mini-Physical Interface Module (Mini-PIM) slots.

  • Page 10: Srx345 Firewall Field Replaceable Units Overview

    Feature Explorer. You can manage the SRX345 Firewall by using the same interfaces that you use for managing other devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space. The SRX345 Firewall is available with a single AC power supply (Junos OS Release 15.1X49-D35 and later), dual AC power supplies (Junos OS Release 15.1X49-D110 and later), or a single DC power supply...

  • Page 11: Srx345 Chassis

    SRX345 Firewall Interface Modules Overview | 12 SRX345 Firewall Chassis Overview The SRX345 Firewall chassis is a rigid sheet metal structure that houses all of the other services gateway components. The chassis installs in standard 800–mm (or larger) enclosed cabinets, 19 in.

  • Page 12: Srx345 Firewall Front Panel

    Management Port LEDs | 9 Network Port LEDs | 10 Figure 2 on page 5 shows the front panel of the SRX345 Firewall with a single AC or DC power supply. Figure 2: SRX345 Firewall (Single AC or DC Power Supply) Front Panel Figure 3 on page 6 shows the front panel of the SRX345 Firewall with dual AC power supplies.
  • Page 13 Figure 3: SRX345 Firewall (Dual AC Power Supplies) Front Panel Table 1 on page 6 provides details about the front panel components. Table 1: SRX345 Firewall Front Panel Components Callout Component Description Reset Config button Returns the services gateway to the rescue configuration or the factory-default configuration.
  • Page 14 Four slots for Mini-PIMs. Mini-PIMs can be used to provide LAN and WAN functionality along with connectivity to various media types. NOTE: The SRX345 device with dual AC power supplies ships with tamper-proof labels. ESD point For personal safety, while working on the services gateway,...
  • Page 15 (Continued) Table 1: SRX345 Firewall Front Panel Components Callout Component Description Power button Use the Power button to power on or power off the services gateway. Chassis Status LEDs Figure 4 on page 8 shows the LEDs on the front panel.
  • Page 16 (Continued) Table 2: SRX345 Firewall Front Panel LEDs Component Description • Solid green (receiving power) • Solid amber (Power-off triggered) • Off (no power) • Solid green (all HA links are available) • Solid amber (some HA links are unavailable) •...

  • Page 17: Srx345 Firewall Back Panel

    • Off—There is no link activity. SRX345 Firewall Back Panel Figure 5 on page 11 Figure 6 on page 11 show the back panel of the SRX345 Firewall with a single AC power supply and dual AC power supplies, respectively.
  • Page 18 Figure 6: SRX345 Firewall Back Panel (Dual AC Power Supplies) Figure 7 on page 11 shows the back panel of the SRX345 Firewall with a DC power supply. Figure 7: SRX345 Firewall Back Panel (DC Power Supply) Table 5 on page 11 lists the components on the back panel.

  • Page 19: Srx345 Firewall Interface Modules Overview

    Connects the services gateway to the AC power supply. Table 6 on page 12 describes the LEDs on the AC power supplies for the SRX345 Firewall with dual AC power supplies. Table 6: SRX345 Firewall (with Dual AC Power Supplies) Back Panel LEDs...

  • Page 20: Srx345 Cooling System

    SRX345 Cooling System The cooling system for the SRX345 Firewall includes four fixed fans. The fans draw air through vents on the front of the chassis and exhaust the air through the back of the chassis. The airflow produced by the fans keeps device components within the acceptable temperature range.

  • Page 21: Srx345 Power System

    Figure 8: Airflow Through the SRX345 Firewall Chassis RELATED DOCUMENTATION Maintaining the SRX345 Firewall Cooling System Components | 66 SRX345 Power System IN THIS SECTION SRX345 Firewall Power Supply | 15 SRX345 Firewall Power Specifications and Requirements | 16 SRX345 Firewall Supported AC Power Cords | 17...

  • Page 22: Srx345 Firewall Power Supply

    The power supply is fixed in the chassis and is not a field-replaceable unit. To identify the SRX345 model, check the Description field in the output of the show chassis hardware command.

  • Page 23: Srx345 Firewall Power Specifications And Requirements

    Maintaining the SRX345 Firewall Power Supply | 66 SRX345 Firewall Power Specifications and Requirements The AC power system electrical specifications for the SRX345 Firewall are listed in Table 7 on page 16 Table 7: Power System Electrical Specifications for the SRX345 Firewall (AC Models)

  • Page 24: Srx345 Firewall Supported Ac Power Cords

    Table 8: Power System Electrical Specifications for the SRX345 Firewall (DC Model) Power Requirement Specification Rated DC voltage range –48 to –60 VDC (with -15% and +20% tolerance) Operating voltage range –40.8 to –72 VDC DC system current rating 6 A at –48 VDC...
  • Page 25 250 VAC, 10 A, 50 Hz BS 1363A Figure 9: AC Plug Types NOTE: Power cords and cables must not block access to services gateway components or drape where people might trip on them. RELATED DOCUMENTATION SRX345 Firewall Electrical Wiring Guidelines | 23...

  • Page 26: Site Planning, Preparation, And Specifications

    C HAPTER Site Planning, Preparation, and Specifications SRX345 Site Preparation Checklist | 20 SRX345 Site Guidelines and Requirements | 22 SRX345 Transceiver Specifications and Pinouts | 27...

  • Page 27: Srx345 Site Preparation Checklist

    Locate sites for connection of "Connecting the SRX345 Services Gateway Grounding Cable" on page 39 system grounding. Calculate the power "SRX345 Services Gateway Power Specifications and Requirements" on page 16 consumption and requirements.
  • Page 28 Table 10: Site Preparation Checklist for SRX345 Firewall Installation Item or Task Additional Information Plan the rack location, "Preparing the SRX345 Services Gateway for Rack-Mount Installation" on page including required space clearances. Secure the rack to the floor and building structure.

  • Page 29: Srx345 Site Guidelines And Requirements

    Cabinet Requirements | 26 General Site Installation Guidelines for the SRX345 Firewall The following precautions help you plan an acceptable operating environment for your SRX345 Firewall and avoid environmentally caused equipment failures: • For the cooling system to function properly, the airflow around the chassis must be unrestricted.

  • Page 30: Srx345 Firewall Environmental Specifications

    SRX345 Firewall Environmental Specifications Table 11 on page 23 provides the required environmental conditions for normal SRX345 Firewall operations. Table 11: Environmental Specifications for the SRX345 Firewall Description Value Altitude No performance degradation up to 10,000 ft (3048 Relative humidity...
  • Page 31 Table 12: Site Electrical Wiring Guidelines for the SRX345 Firewall Site Wiring Factor Guideline Signaling Limitations To ensure that signaling functions optimally: • Install wires correctly. Improperly installed wires can emit radio interference. • Do not exceed the recommended distances or pass wires between buildings.

  • Page 32: Srx345 Firewall Physical Specifications

    SRX345 Firewall Clearance Requirements for Airflow and Hardware Maintenance When planning the installation site for the SRX345 Firewall, you need to allow sufficient clearance around the device. Consider the following: • For the operating temperature of the services gateway to be optimal, the airflow around the chassis must be unrestricted.

  • Page 33: Rack Requirements

    • If you are mounting the device in a rack with other equipment, or if you are placing it on the desktop near other equipment, ensure that the exhaust from other equipment does not blow into the intake vents of the chassis. For information on the airflow through the SRX345 Firewall chassis, see "SRX345 Cooling System" on page 13 Rack Requirements When installing the services gateway in a rack, you must ensure that the rack complies with a 1U (19 in.

  • Page 34: Srx345 Transceiver Specifications And Pinouts

    • Route and dress all cables to minimize the blockage of airflow to and from the chassis. RELATED DOCUMENTATION SRX345 Installation Overview | 32 SRX345 Transceiver Specifications and Pinouts IN THIS SECTION...

  • Page 35: Srx345 Transceiver Support

    The Hardware Compatibility Tool enables you to search by product, displaying all the transceivers supported on that device, or category, by interface speed or type. The list of supported transceivers for the SRX345 is located at https:/ /apps.juniper.net/hct/product/#prd=SRX345.

  • Page 36: Rj-45 Connector Pinouts For The Srx345 Firewall Console Port

    (Continued) Table 14: RJ-45 Connector Pinouts for the SRX345 Firewall Ethernet Port Signal BI_DD+ BI_DD RJ-45 Connector Pinouts for the SRX345 Firewall Console Port Table 15 on page 29 describes the RJ-45 connector pinouts for the console port. Table 15: RJ-45 Connector Pinouts for the SRX345 Firewall Console Port...

  • Page 37: Mini-Usb Connector Pinouts For The Srx345 Firewall Console Port

    Mini-USB Connector Pinouts for the SRX345 Firewall Console Port The SRX345 Firewall has two console ports: an RJ-45 Ethernet port and a mini-USB Type-B port. If your management device (laptop or PC) does not have a DB-9 plug connector pin or an RJ-45 connector pin,...

  • Page 38: Initial Installation And Configuration

    Unpacking and Mounting the SRX345 | 33 Connecting the SRX345 to Power | 38 Connecting the SRX345 to External Devices | 46 Configuring Junos OS on the SRX345 | 48 Installing the Optional SATA Solid-State Drive in SRX340 and SRX345 Services Gateways | 59...

  • Page 39: Srx345 Installation Overview

    SRX345 Firewall Autoinstallation Overview | 32 SRX345 Firewall Installation Overview After you have prepared the site for installation and unpacked the SRX345 Firewall, you are ready to install the device. It is important to proceed through the installation process in the following order: 1.

  • Page 40: Unpacking And Mounting The Srx345

    For more information about configuring autoinstallation, see the following topics: • Installation and Upgrade Guide for Security Devices • Network Monitoring and Troubleshooting Guide Unpacking and Mounting the SRX345 IN THIS SECTION Unpacking the SRX345 Firewall | 34 Verifying Parts Received with the SRX345 Firewall | 35...

  • Page 41: Unpacking The Srx345 Firewall

    • Phillips (+) screwdriver, number 2 • Blank panels to cover any slots not occupied by a component The SRX345 Firewall is shipped in a cardboard carton and secured with foam packing material. The carton also contains an accessory box and quick start instructions.

  • Page 42: Verifying Parts Received With The Srx345 Firewall

    Verifying Parts Received with the SRX345 Firewall The SRX345 Firewall shipment package contains a packing list. Check the parts in the shipment against the items on the packing list. The packing list specifies the part numbers and carries a brief description of each part in your order.

  • Page 43: Preparing The Srx345 Firewall For Rack-Mount Installation

    • Verify that the site meets the requirements described in "SRX345 Site Preparation Checklist" on page • Verify that you have the following parts available in your rack-mounting kit for the SRX345 Firewall: • Rack-mounting brackets • Eight mounting screws to attach the mounting brackets to the chassis of the services gateway •...

  • Page 44: Installing The Srx345 Firewall Into A Rack

    Installing the SRX345 Firewall into a Rack You can front-mount the SRX345 Firewall in a rack. Many types of racks are acceptable, including four- post (telco) racks, enclosed cabinets, and open-frame racks. NOTE: If you are installing multiple devices in one rack, install the lowest one first and proceed upward in the rack.

  • Page 45: Connecting The Srx345 To Power

    RELATED DOCUMENTATION Configuring Junos OS on the SRX345 | 48 Connecting the SRX345 to Power IN THIS SECTION Required Tools and Parts for Grounding the SRX345 Services Gateway | 39 Connecting the SRX345 Firewall Grounding Cable | 39...

  • Page 46: Required Tools And Parts For Grounding The Srx345 Services Gateway

    Connecting the SRX345 Firewall Grounding Cable To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must connect the SRX345 Firewall to earth ground before you connect power to the services gateway. You ground the services gateway by connecting a grounding cable to earth ground and then attaching it to the chassis grounding point located on the side of the device using two #10-32 UNF screws.
  • Page 47 4. Place the grounding cable lug over the grounding point (sized for #10-32 UNF screws) on the side of the chassis. Figure 13: Connecting the Grounding Cable to the SRX345 Firewall 5. Secure the grounding cable lug to the grounding point, first with the washer, then with the screws.

  • Page 48: Connecting The Srx345 Firewall To An Ac Power Supply

    Figure 14: Connecting the SRX345 Firewall to an AC Power Supply 4. If you are using a SRX345 Firewall with dual AC power supplies, then repeat steps 1 through 3 for the second power supply.

  • Page 49: Connecting The Srx345 Firewall To A Dc Power Supply

    Connecting the SRX345 Firewall to a DC Power Supply You connect DC power to the services gateway by attaching power cables from the external DC power sources to the terminal studs on the rear panel of the services gateway. WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power.
  • Page 50 power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply. 4. Install heat-shrink tubing insulation around the power cables: a. Slide the tubing over the portion of the cable where it is attached to the lug barrel. Ensure that the tubing covers the end of the wire and the barrel of the lug attached to it.

  • Page 51: Powering On The Srx345 Firewall

    2. Turn on the power to the AC power receptacle. Observe the power supply faceplate LED. If the power supply is installed correctly and functioning normally, the LED glows steady green. 3. If you are using a SRX345 Firewall with dual AC power supplies, then repeat steps 1 and 2 for the second power supply.

  • Page 52: Powering Off The Srx345 Services Gateway

    Powering Off the SRX345 Services Gateway You can power off the services gateway in one of the following ways: • Graceful shutdown—Press and immediately release the Power button. The device begins gracefully shutting down the operating system and then powers itself off.

  • Page 53: Connecting The Srx345 To External Devices

    Connecting the SRX345 to External Devices IN THIS SECTION Connecting the Dial-Up Modem to the Console Port on the SRX345 Services Gateway | 46 Connecting to the SRX345 Firewall CLI Using a Dial-Up Modem | 47 Connecting the Dial-Up Modem to the Console Port on the SRX345...

  • Page 54: Connecting To The Srx345 Firewall Cli Using A Dial-Up Modem

    JNP-CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable). Connecting to the SRX345 Firewall CLI Using a Dial-Up Modem To remotely connect to the CLI through a dial-up modem connected to the console port on the services gateway: 1.

  • Page 55: Configuring Junos Os On The Srx345

    Configure the Device Using ZTP with Juniper Networks Network Service Controller | 58 The services gateway is shipped with the Juniper Networks Junos operating system (Junos OS) preinstalled and ready to be configured when the device is powered on. You can perform the initial software configuration of the services gateway by using the browser-based setup wizard or by using the command-line interface (CLI).
  • Page 56 MGMT fxp0 Server 192.168.1.1/24 Table 22: LTE Interfaces Interface Security Zone IP Address cl-1/0/0 dl0 (logical) untrust ISP assigned* Only if the LTE Mini-PIM is present The SRX345 device is shipped with the following services and protocols enabled by default:...
  • Page 57 Table 23: Services, Protocols, and Startup Mode Services Protocols Device Startup Mode RSTP (all interfaces) Switching HTTPS NETCONF over SSH To provide secure traffic, a basic set of screens are configured on the untrust zone. If the current active configuration fails, you can use the load factory-default command to revert to the factory-default configuration.

  • Page 58: Initial Configuration Using The Cli

    2. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management device. 3. Connect the other end of the Ethernet cable to the serial console port on the SRX345. Figure 17: Connect to the Console Port on the SRX345 4.

  • Page 59: Connect To The Mini-Usb Console Port

    3. Plug the large end of the USB cable supplied with the SRX320 into a USB port on the management device. 4. Connect the other end of the USB cable to the mini-USB console port on the SRX345. 5. Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal) and select the new COM port installed by the USB console driver software.

  • Page 60: Configure The Srx345 Using The Cli

    • Stop bits—1 • Flow control—None 7. If you have not already done so, power on the SRX345 by pressing the Power button on the front panel. Verify that the PWR LED on the front panel turns green. The terminal emulation screen on your management device displays the startup sequence. When the SRX345 has finished starting up, a login prompt appears.

  • Page 61: Initial Configuration Using J-Web

    4. Commit the configuration to activate it on the device. [edit] root# commit Initial Configuration Using J-Web IN THIS SECTION Configure Using J-Web | 54 Customize the Configuration for Junos OS Release 19.2 | 56 Customize the Configuration for Junos OS Release 15.1X49-D170 | 57 Configure Using J-Web To configure the device by using J-Web: 1.
  • Page 62 Figure 18: Connecting the SRX345 to a Management Device The SRX345 functions as a DHCP server and automatically assigns an IP address to the laptop. 3. Ensure that the management device acquires an IP address on the 192.168.1.0/24 network from the device.

  • Page 63: Customize The Configuration For Junos Os Release 19.2

    The J-Web login page appears. The SRX345 already has factory-default settings configured to make it a plug-and-play device. So all you have to do to get the SRX345 up and running is connect it to your LAN and WAN networks.

  • Page 64: Customize The Configuration For Junos Os Release 15.1X49-D170

    You can select any one of the configuration modes to customize the configuration: • Guided Setup (uses a dynamic IP address)—Enables you to set up the SRX345 in a custom security configuration. You can select either the Basic or the Expert option.

  • Page 65: Configure The Device Using Ztp With Juniper Networks Network Service Controller

    • Default Setup (uses a dynamic IP address)—Enables you to quickly set up the SRX345 with the default configuration. Any additional configuration can be done after the wizard setup is completed. • High Availability—Enables you to set up a chassis cluster with a default basic configuration.

  • Page 66: Installing The Optional Sata Solid-State Drive In Srx340 And Srx345 Services Gateways

    Figure 19: Authentication Code Page On successful authentication, the initial configuration is applied and committed on the SRX345. Optionally, the latest Junos OS image is installed on the SRX345 before the initial configuration is applied. • If you do not have the authentication code, you can use the J-Web setup wizard to configure the SRX345.
  • Page 67 Before you install the SSD, ensure that you have taken the necessary precautions to prevent Prevention of Electrostatic Discharge Damage electrostatic discharge (ESD) damage (see To install the SSD: 1. Power off the services gateway. 2. Attach an ESD grounding strap to your bare wrist and connect the strap to the ESD point on the chassis.
  • Page 68 Figure 21: Securing the SSD to the SSD Tray 5. Slide the SSD tray into the slot and secure the cover plate. Figure 22: Installing the SSD 6. Power on the services gateway. If the SSD is unformatted, the SSD is formatted during the bootup process. A single partition in the Unix (UFS) format is created, which occupies the entire SSD.
  • Page 69 Hardware inventory: Item Version Part number Serial number Description Chassis CZ2916AF0098 SRX345 Routing Engine REV 0x07 650-065042 CZ2916AF0098 RE-SRX345 7718 MB ATP CG eUSB Nand Flash 95396 MB SFSA100GQ1AA4TO-C-LB-21 000060158419A3000068 Hard Disk...
  • Page 70 /cf/var/jail 5239224 27584 4792504 1% /jail/var /cf/var/jails/rest-api 5239224 27584 4792504 1% /web-api/var /cf/var/log 5239224 27584 4792504 1% /jail/var/log devfs 100% /jail/dev /dev/md3 1884 1730 0% /jail/mfs /dev/ssd 96138198 3406 88443738 0% /var/ssd...

  • Page 71: Maintaining Components

    C HAPTER Maintaining Components Maintaining the SRX345 Components | 65...

  • Page 72: Maintaining The Srx345 Components

    Maintaining the SRX345 Components IN THIS SECTION Required Tools and Parts for Maintaining the SRX345 Firewall Hardware Components | 65 Routine Maintenance Procedures for the SRX345 Services Gateway | 65 Maintaining the SRX345 Firewall Cooling System Components | 66 Maintaining the SRX345 Firewall Power Supply | 66...

  • Page 73: Maintaining The Srx345 Firewall Cooling System Components

    • To check the status of the power supplies on an SRX345 Firewall with dual AC power supplies, use the show chassis environment or show chassis hardware command. The output is similar to the following: user@host>...

  • Page 74: Replacing Mini-Physical Interface Modules In The Srx345 Firewall

    8xGE,8xGE SFP Base PIC Power Supply 1 NOTE: If one of the power supplies on an SRX345 Firewall with dual AC power supplies has failed, the output of the show chassis hardware command displays only the power supply that is operational.

  • Page 75: Troubleshooting Hardware

    C HAPTER Troubleshooting Hardware Troubleshooting the SRX345 | 69...

  • Page 76: Troubleshooting The Srx345

    IN THIS SECTION Troubleshooting Resources for the SRX345 Firewall Overview | 69 Troubleshooting Chassis and Interface Alarm Messages on the SRX345 Firewall | 69 Troubleshooting the Power System on the SRX345 Firewall | 71 Using the RESET CONFIG Button | 73...
  • Page 77 Table 24 on page 70 describes alarms that can occur for an SRX345 Firewall chassis component. Table 24: SRX345 Firewall Chassis Alarm Conditions and Corrective Actions Component Alarm Conditions Action Alarm Severity Boot media The services gateway Amber (minor) •...

  • Page 78: Troubleshooting The Power System On The Srx345 Firewall

    (Continued) Table 24: SRX345 Firewall Chassis Alarm Conditions and Corrective Actions Component Alarm Conditions Action Alarm Severity Mini-PIM A Mini-PIM has failed. Red (major) • Contact the Juniper Networks Technical Assistance Center (JTAC). • If you must replace the failed...
  • Page 79 JTAC. The SRX345 Firewall with dual AC power supplies provides a system alarm that alerts you when one of the power supplies fails. You can display the messages for this alarm by issuing the show system alarms or show chassis alarms operational mode command.

  • Page 80: Using The Reset Config Button

    Using the RESET CONFIG Button If a configuration fails or denies management access to the services gateway, you can use the RESET CONFIG button to restore the device to the factory-default configuration or a rescue configuration. For example, if someone inadvertently commits a configuration that denies management access to a services gateway, you can delete the invalid configuration and replace it with a rescue configuration by pressing the RESET CONFIG button.
  • Page 81 admin@host# set chassis config-button no-rescue You can still press and hold the button for 15 seconds or more to reset the gateway to the factory- default configuration. • To disable the button and prevent the device from resetting to either the factory-default or rescue configuration: admin@host# set chassis config-button no-clear no-rescue The no-clear option prevents the RESET CONFIG button from deleting all configurations on the services...

  • Page 82: Contacting Customer Support And Returning The Chassis Or Components

    C HAPTER Contacting Customer Support and Returning the Chassis or Components Returning the SRX345 Chassis or Components | 76...

  • Page 83: Returning The Srx345 Chassis Or Components

    Contacting Customer Support Once you have located the serial numbers of the device or component, you can return the device or component for repair or replacement. For this, you need to contact Juniper Networks Technical Assistance Center (JTAC). You can contact JTAC 24 hours a day, 7 days a week, using any of the following methods: •...

  • Page 84: Returning A Srx345 Firewall Component To Juniper Networks

    Returning a SRX345 Firewall Component to Juniper Networks To return an SRX345 Firewall or component to Juniper Networks for repair or replacement: 1. Determine the part number and serial number of the services gateway or component.

  • Page 85: Locating The Mini-Pim Serial Number Label

    Mini-PIMs, depending on the placement of components on the Mini-PIM. Listing the SRX345 Firewall Component Details with the CLI Before contacting Juniper Networks to request an RMA, you must find the serial number on the SRX345 Firewall or component.

  • Page 86: Packing The Srx Series Services Gateway For Shipment

    To pack the SRX Series Services Gateway for shipment: Retrieve the shipping carton and packing materials in which the services gateway was originally shipped. If you do not have these materials, contact your Juniper Networks representative about approved packaging materials.
  • Page 87 1. Make sure that it is adequately protected with packing materials and securely packed so that the pieces do not move around inside the carton. 2. Use the original shipping materials if they are available. 3. Place each component in an individual electrostatic bag. 4.
  • Page 88 General Electrical Safety Guidelines and Warnings | 99 AC Power Electrical Safety Guidelines | 100 DC Power Electrical Safety Guidelines | 101 SRX345 Firewall Agency Approvals | 108 SRX345 Firewall Acoustic Noise Compliance Statements | 110 SRX345 Firewall EMC Requirements | 110...

  • Page 89: Definitions Of Safety Warning Levels

    Definitions of Safety Warning Levels Warning formats): The documentation uses the following levels of safety warnings (there are two NOTE: You might find this information helpful in a particular situation, or you might overlook this important information if it was not highlighted in a Note. CAUTION: You need to observe the specified guidelines to prevent minor injury or discomfort to you or severe damage to the device.

  • Page 90: General Safety Guidelines And Warnings

    Warnung Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu einer Körperverletzung führen könnte. Bevor Sie mit der Arbeit an irgendeinem Gerät beginnen, seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur Vermeidung von Unfällen bewußt. Avvertenza Questo simbolo di avvertenza indica un pericolo.
  • Page 91 • Do not wear loose clothing or jewelry, such as rings, bracelets, or chains, which could become caught in the device. • Wear safety glasses if you are working under any conditions that could be hazardous to your eyes. • Do not perform any actions that create a potential hazard to people or make the equipment unsafe. •...

  • Page 92: Restricted Access Warning

    Restricted Access Warning WARNING: This unit is intended for installation in restricted access areas. A restricted access area is an area to which access can be gained only by service personnel through the use of a special tool, lock and key, or other means of security, and which is controlled by the authority responsible for the location.

  • Page 93: Qualified Personnel Warning

    que possua uma ferramenta, chave e fechadura especial, ou qualquer outra forma de segurança. Esta área é controlada pela autoridade responsável pelo local. ¡Atención! Esta unidad ha sido diseñada para instalarse en áreas de acceso restringido. Área de acceso restringido significa un área a la que solamente tiene acceso el personal de servicio mediante la utilización de una herramienta especial, cerradura con llave, o algún otro medio de seguridad, y que está...

  • Page 94: Prevention Of Electrostatic Discharge Damage

    ¡Atención! Estos equipos deben ser instalados y reemplazados exclusivamente por personal técnico adecuadamente preparado y capacitado. Varning! Denna utrustning ska endast installeras och bytas ut av utbildad och kvalificerad personal. Prevention of Electrostatic Discharge Damage Device components that are shipped in antistatic bags are sensitive to damage from static electricity. Some components can be impaired by voltages as low as 30 V.

  • Page 95: Fire Safety Requirements

    Figure 23: Placing a Component into an Antistatic Bag CAUTION: ANSI/TIA/EIA-568 cables such as Category 5e and Category 6 can get electrostatically charged. To dissipate this charge, always ground the cables to a suitable and safe earth ground before connecting them to the system. Attention Les câbles ANSI/TIA/EIA-568, par exemple Cat 5e et Cat 6, peuvent emmagasiner des charges électrostatiques.
  • Page 96 NOTE: To keep warranties effective, do not use a dry chemical fire extinguisher to control a fire at or near a Juniper Networks device. If a dry chemical fire extinguisher is used, the unit is no longer eligible for coverage under a service agreement.

  • Page 97: Laser And Led Safety Guidelines And Warnings

    Class 1 LED Product Warning | 91 Laser Beam Warning | 92 Juniper Networks devices are equipped with laser transmitters, which are considered a Class 1 Laser Product by the U.S. Food and Drug Administration and are evaluated as a Class 1 Laser Product per IEC/EN 60825-1 requirements.
  • Page 98 Class 1 Laser Product Warning LASER WARNING: Class 1 laser product. Waarschuwing Klasse-1 laser produkt. Varoitus Luokan 1 lasertuote. Avertissement Produit laser de classe I. Warnung Laserprodukt der Klasse 1. Avvertenza Prodotto laser di Classe 1. Advarsel Laserprodukt av klasse 1. Aviso Produto laser de classe 1.

  • Page 99: Radiation From Open Port Apertures Warning

    Laser Beam Warning LASER WARNING: Do not stare into the laser beam or view it directly with optical instruments. Waarschuwing Niet in de straal staren of hem rechtstreeks bekijken met optische instrumenten. Varoitus Älä katso säteeseen äläkä tarkastele sitä suoraan optisen laitteen avulla. Avertissement Ne pas fixer le faisceau des yeux, ni l'observer directement à...

  • Page 100: Maintenance And Operational Safety Guidelines And Warnings

    Varoitus Koska portin aukosta voi emittoitua näkymätöntä säteilyä, kun kuitukaapelia ei ole kytkettynä, vältä säteilylle altistumista äläkä katso avoimiin aukkoihin. Avertissement Des radiations invisibles à l'il nu pouvant traverser l'ouverture du port lorsqu'aucun câble en fibre optique n'y est connecté, il est recommandé de ne pas regarder fixement l'intérieur de ces ouvertures.
  • Page 101 Lightning Activity Warning | 96 Operating Temperature Warning | 97 Product Disposal Warning | 98 While performing the maintenance activities for devices, observe the following guidelines and warnings: Battery Handling Warning WARNING: Replacing a battery incorrectly might result in an explosion. Replace a battery only with the same or equivalent type recommended by the manufacturer.
  • Page 102 Aviso Existe perigo de explosão se a bateria for substituída incorrectamente. Substitua a bateria por uma bateria igual ou de um tipo equivalente recomendado pelo fabricante. Destrua as baterias usadas conforme as instruções do fabricante. ¡Atención! Existe peligro de explosión si la batería se reemplaza de manera incorrecta. Reemplazar la baterían EXclusivamente con el mismo tipo o el equivalente recomendado por el fabricante.
  • Page 103 Avvertenza Prima di intervenire su apparecchiature collegate alle linee di alimentazione, togliersi qualsiasi monile (inclusi anelli, collane, braccialetti ed orologi). Gli oggetti metallici si riscaldano quando sono collegati tra punti di alimentazione e massa: possono causare ustioni gravi oppure il metallo può saldarsi ai terminali. Advarsel Fjern alle smykker (inkludert ringer, halskjeder og klokker) før du skal arbeide på...
  • Page 104 6 in. (15.2 cm) of clearance around the ventilation openings. Waarschuwing Om te voorkomen dat welke switch van de Juniper Networks router dan ook oververhit raakt, dient u deze niet te bedienen op een plaats waar de maximale aanbevolen omgevingstemperatuur van 40°...
  • Page 105 40° C. Para evitar a restrição à circulação de ar, deixe pelo menos um espaço de 15,2 cm à volta das aberturas de ventilação. ¡Atención! Para impedir que un encaminador de la serie Juniper Networks switch se recaliente, no lo haga funcionar en un área en la que se supere la temperatura ambiente máxima recomendada de 40°...

  • Page 106: Action To Take After An Electrical Accident

    Avertissement La mise au rebut définitive de ce produit doit être effectuée conformément à toutes les lois et réglementations en vigueur. Warnung Dieses Produkt muß den geltenden Gesetzen und Vorschriften entsprechend entsorgt werden. Avvertenza L'eliminazione finale di questo prodotto deve essere eseguita osservando le normative italiane vigenti in materia Advarsel Endelig disponering av dette produktet må...

  • Page 107: Ac Power Electrical Safety Guidelines

    • Canada—Canadian Electrical Code, Part 1, CSA C22.1 • Other countries—International Electromechanical Commission (IEC) 60364, Part 1 through Part 7 • Evaluated to the TN power system • Locate the emergency power-off switch for the room in which you are working so that if an electrical accident occurs, you can quickly turn off the power.

  • Page 108: Dc Power Electrical Safety Guidelines

    • AC-powered devices are shipped with a three-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet. Do not circumvent this safety feature. Equipment grounding must comply with local and national electrical codes. • You must provide an external certified circuit breaker (2-pole circuit breaker or 4-pole circuit breaker based on your device) rated minimum 20 A in the building installation.
  • Page 109 DC Power Electrical Safety Guidelines The following electrical safety guidelines apply to a DC-powered services gateway: • A DC-powered services gateway is equipped with a DC terminal block that is rated for the power requirements of a maximally configured services gateway. To supply sufficient power, terminate the DC input wiring on a facility DC source capable of supplying at least 30 A @ -48 VDC for the system.
  • Page 110 DC Power Disconnection Warning WARNING: Before performing any of the following procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.
  • Page 111 Aviso Antes de executar um dos seguintes procedimentos, certifique-se que desligou a fonte de alimentação de energia do circuito de corrente contínua. Para se assegurar que toda a corrente foi DESLIGADA, localize o disjuntor no painel que serve o circuito de corrente contínua e coloque-o na posição OFF (Desligado), segurando nessa posição a manivela do interruptor do disjuntor com fita isoladora.
  • Page 112 Avvertenza In fase di installazione dell'unità, eseguire sempre per primo il collegamento a massa e disconnetterlo per ultimo. Advarsel Når enheten installeres, må jordledningen alltid tilkobles først og frakobles sist. Aviso Ao instalar a unidade, a ligação à terra deverá ser sempre a primeira a ser ligada, e a última a ser desligada.
  • Page 113 Stromversorgung ist -48V zu -48V, +RTN zu +RTN und dann Erdanschluss zu Erdanschluss. Es ist zu beachten dass der Erdanschluss immer zuerst angeschlossen und als letztes abgetrennt wird. Avvertenza Mostra la morsettiera dell alimentatore CC. Cablare l'alimentatore CC usando i connettori adatti all'estremità del cablaggio, come illustrato. La corretta sequenza di cablaggio è...
  • Page 114 grijperschop type waarbij de aansluitpunten omhoog wijzen. Deze aansluitpunten dienen de juiste maat voor de draden te hebben en dienen zowel de isolatie als de geleider vast te klemmen. Varoitus Jos säikeellinen johdin on tarpeen, käytä hyväksyttyä johdinliitäntää, esimerkiksi suljettua silmukkaa tai kourumaista liitäntää, jossa on ylöspäin käännetyt kiinnityskorvat.

  • Page 115: Srx345 Firewall Agency Approvals

    RELATED DOCUMENTATION AC Power Electrical Safety Guidelines SRX345 Firewall Agency Approvals IN THIS SECTION Compliance Statement for Argentina | 109 The services gateway complies with the following standards: • Safety • CAN/CSA-C22.2 No.60950-1 (2007) Information Technology Equipment • UL 60950-1 (2nd Ed.) Information Technology Equipment •...
  • Page 116 • Reduction of Hazardous Substances (ROHS) 6 • Telco • Common Language Equipment Identifier (CLEI) code Compliance Statement for Argentina EQUIPO DE USO IDÓNEO. RELATED DOCUMENTATION SRX345 Firewall Acoustic Noise Compliance Statements | 110 SRX345 Firewall EMC Requirements | 110...

  • Page 117: Srx345 Firewall Acoustic Noise Compliance Statements

    German Translation: Maschinenlärminformations-Verordnung - 3. GPSGV, der höchste Schalldruckpegel beträgt 70 dB(A) oder weniger gemäss EN ISO 7779. RELATED DOCUMENTATION SRX345 Firewall Agency Approvals | 108 SRX345 Firewall EMC Requirements | 110 SRX345 Firewall EMC Requirements IN THIS SECTION Canada | 110...

  • Page 118: European Community

    Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. European Community This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. Israel The preceding translates as follows: This product is Class A.

  • Page 119: United States

    Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. RELATED DOCUMENTATION SRX345 Firewall Agency Approvals | 108 SRX345 Firewall Acoustic Noise Compliance Statements | 110...

Table of Contents