Juniper SRX5400 Getting Started Manual
Juniper SRX5400 Getting Started Manual

Juniper SRX5400 Getting Started Manual

Services gateway
Hide thumbs Also See for SRX5400:

Advertisement

Quick Links

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SRX5400 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Juniper SRX5400

  • Page 1: Table Of Contents

    Step 1: Prepare the Site for SRX5400 Services Gateway Installation | 4 Rack-Mounting Requirements | 5 Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation | 6 Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack | 6...
  • Page 2 Configure System Attributes | 24 Commit the Configuration | 26 Safety Warnings | 29 SRX5400 Services Gateway Compliance Statements for EMC Requirements | 31 Canada | 31 European Community | 32 Japan | 32 United States | 32 SRX Series Documentation and Release Notes | 32...
  • Page 3: About This Guide

    The SRX5400 Services Gateway is a high-performance, highly scalable, carrier-class security device with multi-processor architecture. The SRX5400 Services Gateway is 5 rack units (U) tall. Five of these devices can be stacked in a single floor-to-ceiling rack, for increased port density per unit of floor space.
  • Page 4: Step 1: Prepare The Site For Srx5400 Services Gateway Installation

    NOTE: MPCs are the only interface cards supported by the SRX5400 Services Gateway. The SRX5400 Services Gateway does not support the IOCs or Flex IOCs supported on other services gateways in the SRX5000 line. Four AC power supplies (PSUs) provide full power redundancy. Each AC power supply provides power to all components in the device.
  • Page 5: Rack-Mounting Requirements

    Rack-Mounting Requirements You can install the services gateway in a four-post rack or cabinet or an open-frame rack. The rack rails must be spaced widely enough to accommodate the services gateway chassis' external dimensions: 8.71 in. (22.1 cm) high, 24.5 in. (62.2 cm) deep, and 17.45 in. (44.3 cm) wide. The mounting brackets extend the width to 19 in.
  • Page 6: Tools Required To Unpack And Prepare The Srx5400 Services Gateway For Installation

    When mounting the services gateway in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack. Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation To unpack the services gateway and prepare for installation, you need the following tools: A mechanical lift—recommended...
  • Page 7 3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of each flange on a mounting screw. 4. Partially insert screws into the open holes in each flange of the mounting shelf (see Figure 2 on page 8 Figure 3 on page 5.
  • Page 8 Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet Four-post open rack Small mounting shelf...
  • Page 9: Step 3: Install The Services Gateway

    Figure 3: Mounting Hardware for an Open-Frame Rack Proceed to “Step 3: Install the Services Gateway” on page Step 3: Install the Services Gateway IN THIS SECTION Remove Components | 10 Install the Services Gateway Using a Lift | 11 Install the Services Gateway Without a Mechanical Lift | 13 Reinstall Components | 14 Because of the services gateway’s size and weight, you must remove all components, as shown in...
  • Page 10: Remove Components

    Remove Components Figure 4: Components to Remove from the Front of the Services Gateway SPCs Figure 5: Components to Remove from the Rear of the Services Gateway Power supplies Air filter Fan tray Before you lift the services gateway, you must remove the following components: Power supplies Routing Engine Air filter...
  • Page 11: Install The Services Gateway Using A Lift

    1. Ensure that the rack is in its permanent location and is secured to the building. Ensure that the installation site allows adequate clearance for both airflow and maintenance. For details, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
  • Page 12 Figure 6: Load the Services Gateway onto the Lift 3. Using the lift, position the services gateway in front of the rack or cabinet, centering it in front of the mounting shelf. 4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf, and position it as close as possible to the shelf.
  • Page 13: Install The Services Gateway Without A Mechanical Lift

    8. Install a mounting screw into each of the open mounting holes aligned with the rack, starting from the bottom. 9. Visually inspect the alignment of the services gateway. If the services gateway is installed properly in the rack, all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the services gateway should be level.
  • Page 14: Reinstall Components

    Reinstall Components 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
  • Page 15 5. Disconnect the ESD grounding strap from the site ESD grounding point, and connect it to one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
  • Page 16: Step 5: Connect External Devices And Network Cables

    Step 5: Connect External Devices and Network Cables IN THIS SECTION Connect to a Network for Out-of-Band Management | 16 Connect a Management Console | 16 Connect the Network Cables | 17 To connect external devices and network cables: Connect to a Network for Out-of-Band Management 1.
  • Page 17: Connect The Network Cables

    Connect the Network Cables 1. Have ready a length of the type of cable used by the interface. For cable specifications, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 2. If the cable connector port is covered by a rubber safety plug, remove the plug.
  • Page 18: Step 6: Connect Power Cables

    CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose. CAUTION: Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.
  • Page 19 ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 2. Locate the power cords you will use to connect the device to AC power. See the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/...
  • Page 20: Connect Power To A Dc-Powered Services Gateway

    Figure 10: Connecting AC Power to the Services Gateway Connect Power to a DC-Powered Services Gateway This procedure addresses connecting power to services gateways equipped with DC power supplies. WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power.
  • Page 21 1. Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable leads might become active during installation. 2. Check the setting of the input mode switch: a. Move or remove the metal plate that covers the input mode switch. On some power supply versions, the cover pivots at one end, and you can simply swing it up out of the way.
  • Page 22 4. Connect each DC power cable to the appropriate external DC power source. NOTE: For information about connecting to external DC power sources, see the SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/. 5. Switch on the power supply breakers to provide voltage to the DC power source cable leads.
  • Page 23: Step 7: Perform The Initial Software Configuration

    Step 7: Perform the Initial Software Configuration IN THIS SECTION Enter Configuration Mode | 23 Configure User Accounts and Passwords | 24 Configure System Attributes | 24 Commit the Configuration | 26 Enter Configuration Mode 1. If you have not already done so, switch the circuit breaker or toggle switch for each power supply to the ON position to start the device.
  • Page 24: Configure User Accounts And Passwords

    Configure User Accounts and Passwords 1. Set the root authentication password by entering a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA). [edit] root@# set system root-authentication plain-text-password New password: password Retype new password: password 2.
  • Page 25 [edit] admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length 4. Configure the traffic interface. [edit] admin@# set interfaces ge-2/0/0 unit 0 family inet address address/prefix-length admin@# set interfaces ge-2/1/5 unit 0 family inet address address/prefix-length 5. Configure the default route. [edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway 6.
  • Page 26: Commit The Configuration

    Commit the Configuration 1. Check the configuration for validity. [edit] admin@# commit check configuration check succeeds 2. Optionally, display the configuration to verify that it is correct. admin@# show ## Last changed: 2008-05-07 22:43:25 UTC version "9.2I0 [builder]"; system { autoinstallation;...
  • Page 27 { interactive-commands any; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; interfaces { ge-0/0/0 { unit 0; ge-2/0/0 { unit 0 { family inet { address 5.1.1.1/24; ge-2/1/5 { unit 0 { family inet { address 192.1.1.1/24;...
  • Page 28 security { zones { security-zone trust { interfaces { ge-2/1/5.0; security-zone untrust { interfaces { ge-2/0/0.0; policies { from-zone trust to-zone untrust { policy bob { match { source-address any; destination-address any; application any; then { permit; 3. Commit the configuration to activate it on the services gateway. [edit] admin@# commit 4.
  • Page 29: Safety Warnings

    Only trained and qualified personnel should install or replace the services gateway. Perform only the procedures described in this guide or the SRX5400 Services Gateway Hardware Guide. Other services should be performed by authorized service personnel only.
  • Page 30 Read the installation instructions before you connect the services gateway to a power source. Before you install the services gateway, read the guidelines for site preparation in the SRX5400 Services Gateway Hardware Guide to make sure that the site meets power, environmental, and clearance requirements for the services gateway.
  • Page 31: Srx5400 Services Gateway Compliance Statements For Emc Requirements

    AC power cable warning (Japan): WARNING: The attached power cable is only for this product. Do not use the cable for another product. SRX5400 Services Gateway Compliance Statements for EMC Requirements IN THIS SECTION Canada | 31 European Community | 32...
  • Page 32: European Community

    Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. SRX Series Documentation and Release Notes For a list of related SRX Series documentation, see https://www.juniper.net/documentation/.
  • Page 33: Requesting Technical Support

    If the information in the latest release notes differs from the information in the documentation, follow the Junos Release Notes. To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at www.juniper.net/documentation/.
  • Page 34: Revision History

    Copyright © 2019 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. and/or its affiliates in the United States and other countries. All other trademarks may be property of their respective owners.

Table of Contents