Step 1: Prepare the Site for SRX5400 Services Gateway Installation | 4 Rack-Mounting Requirements | 5 Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation | 6 Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack | 6...
Page 2
Configure System Attributes | 24 Commit the Configuration | 26 Safety Warnings | 29 SRX5400 Services Gateway Compliance Statements for EMC Requirements | 31 Canada | 31 European Community | 32 Japan | 32 United States | 32 SRX Series Documentation and Release Notes | 32...
The SRX5400 Services Gateway is a high-performance, highly scalable, carrier-class security device with multi-processor architecture. The SRX5400 Services Gateway is 5 rack units (U) tall. Five of these devices can be stacked in a single floor-to-ceiling rack, for increased port density per unit of floor space.
NOTE: MPCs are the only interface cards supported by the SRX5400 Services Gateway. The SRX5400 Services Gateway does not support the IOCs or Flex IOCs supported on other services gateways in the SRX5000 line. Four AC power supplies (PSUs) provide full power redundancy. Each AC power supply provides power to all components in the device.
Rack-Mounting Requirements You can install the services gateway in a four-post rack or cabinet or an open-frame rack. The rack rails must be spaced widely enough to accommodate the services gateway chassis' external dimensions: 8.71 in. (22.1 cm) high, 24.5 in. (62.2 cm) deep, and 17.45 in. (44.3 cm) wide. The mounting brackets extend the width to 19 in.
When mounting the services gateway in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack. Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation To unpack the services gateway and prepare for installation, you need the following tools: A mechanical lift—recommended...
Page 7
3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of each flange on a mounting screw. 4. Partially insert screws into the open holes in each flange of the mounting shelf (see Figure 2 on page 8 Figure 3 on page 5.
Page 8
Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet Four-post open rack Small mounting shelf...
Figure 3: Mounting Hardware for an Open-Frame Rack Proceed to “Step 3: Install the Services Gateway” on page Step 3: Install the Services Gateway IN THIS SECTION Remove Components | 10 Install the Services Gateway Using a Lift | 11 Install the Services Gateway Without a Mechanical Lift | 13 Reinstall Components | 14 Because of the services gateway’s size and weight, you must remove all components, as shown in...
Remove Components Figure 4: Components to Remove from the Front of the Services Gateway SPCs Figure 5: Components to Remove from the Rear of the Services Gateway Power supplies Air filter Fan tray Before you lift the services gateway, you must remove the following components: Power supplies Routing Engine Air filter...
1. Ensure that the rack is in its permanent location and is secured to the building. Ensure that the installation site allows adequate clearance for both airflow and maintenance. For details, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
Page 12
Figure 6: Load the Services Gateway onto the Lift 3. Using the lift, position the services gateway in front of the rack or cabinet, centering it in front of the mounting shelf. 4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf, and position it as close as possible to the shelf.
8. Install a mounting screw into each of the open mounting holes aligned with the rack, starting from the bottom. 9. Visually inspect the alignment of the services gateway. If the services gateway is installed properly in the rack, all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the services gateway should be level.
Reinstall Components 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
Page 15
5. Disconnect the ESD grounding strap from the site ESD grounding point, and connect it to one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
Step 5: Connect External Devices and Network Cables IN THIS SECTION Connect to a Network for Out-of-Band Management | 16 Connect a Management Console | 16 Connect the Network Cables | 17 To connect external devices and network cables: Connect to a Network for Out-of-Band Management 1.
Connect the Network Cables 1. Have ready a length of the type of cable used by the interface. For cable specifications, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 2. If the cable connector port is covered by a rubber safety plug, remove the plug.
CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose. CAUTION: Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.
Page 19
ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 2. Locate the power cords you will use to connect the device to AC power. See the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/...
Figure 10: Connecting AC Power to the Services Gateway Connect Power to a DC-Powered Services Gateway This procedure addresses connecting power to services gateways equipped with DC power supplies. WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power.
Page 21
1. Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable leads might become active during installation. 2. Check the setting of the input mode switch: a. Move or remove the metal plate that covers the input mode switch. On some power supply versions, the cover pivots at one end, and you can simply swing it up out of the way.
Page 22
4. Connect each DC power cable to the appropriate external DC power source. NOTE: For information about connecting to external DC power sources, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 5. Switch on the power supply breakers to provide voltage to the DC power source cable leads.
Step 7: Perform the Initial Software Configuration IN THIS SECTION Enter Configuration Mode | 23 Configure User Accounts and Passwords | 24 Configure System Attributes | 24 Commit the Configuration | 26 Enter Configuration Mode 1. If you have not already done so, switch the circuit breaker or toggle switch for each power supply to the ON position to start the device.
Configure User Accounts and Passwords 1. Set the root authentication password by entering a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA). [edit] root@# set system root-authentication plain-text-password New password: password Retype new password: password 2.
Page 25
[edit] admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length 4. Configure the traffic interface. [edit] admin@# set interfaces ge-2/0/0 unit 0 family inet address address/prefix-length admin@# set interfaces ge-2/1/5 unit 0 family inet address address/prefix-length 5. Configure the default route. [edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway 6.
Commit the Configuration 1. Check the configuration for validity. [edit] admin@# commit check configuration check succeeds 2. Optionally, display the configuration to verify that it is correct. admin@# show ## Last changed: 2008-05-07 22:43:25 UTC version "9.2I0 [builder]"; system { autoinstallation;...
Page 27
{ interactive-commands any; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; interfaces { ge-0/0/0 { unit 0; ge-2/0/0 { unit 0 { family inet { address 5.1.1.1/24; ge-2/1/5 { unit 0 { family inet { address 192.1.1.1/24;...
Page 28
security { zones { security-zone trust { interfaces { ge-2/1/5.0; security-zone untrust { interfaces { ge-2/0/0.0; policies { from-zone trust to-zone untrust { policy bob { match { source-address any; destination-address any; application any; then { permit; 3. Commit the configuration to activate it on the services gateway. [edit] admin@# commit 4.
Only trained and qualified personnel should install or replace the services gateway. Perform only the procedures described in this guide or the SRX5400 Services Gateway Hardware Guide. Other services should be performed by authorized service personnel only.
Page 30
Read the installation instructions before you connect the services gateway to a power source. Before you install the services gateway, read the guidelines for site preparation in the SRX5400 Services Gateway Hardware Guide to make sure that the site meets power, environmental, and clearance requirements for the services gateway.
AC power cable warning (Japan): WARNING: The attached power cable is only for this product. Do not use the cable for another product. SRX5400 Services Gateway Compliance Statements for EMC Requirements IN THIS SECTION Canada | 31 European Community | 32...
Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. SRX Series Documentation and Release Notes For a list of related SRX Series documentation, see https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the Junos Release Notes. To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at www.juniper.net/documentation/.
Need help?
Do you have a question about the SRX5400 and is the answer not in the manual?
Questions and answers