Juniper SRX5600 Hardware Manual
  1. Manuals
  2. Brands
  3. Juniper Manuals
  4. Gateway
  5. SRX5600
  6. Hardware manual

Juniper SRX5600 Hardware Manual

Services gateway
Hide thumbs Also See for SRX5600:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual, Instruction and Installation Manual
SRX5600 Services Gateway Hardware
Guide
Published
2020-02-14

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SRX5600 and is the answer not in the manual?

Questions and answers

Related Manuals for Juniper SRX5600

Summary of Contents for Juniper SRX5600

  • Page 1 SRX5600 Services Gateway Hardware Guide Published 2020-02-14...
  • Page 2 END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at https://support.juniper.net/support/eula/.

  • Page 3: Table Of Contents

    SRX5600 Services Gateway Cable Manager Description | 33 SRX5600 Services Gateway Craft Interface Overview | 34 SRX5600 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button | 35 SRX5600 Services Gateway Craft Interface Host Subsystem LEDs | 36...
  • Page 4 SRX5600 Services Gateway AC Power Supply LEDs | 51 AC Power Cord Specifications for the SRX5600 Services Gateway | 52 AC Power Circuit Breaker Requirements for the SRX5600 Services Gateway | 55 SRX5600 Services Gateway DC Power Supply | 55...
  • Page 5 SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 92 SRX5600 Services Gateway Card Terminology | 93 Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 94 SRX5600 Services Gateway Card Cage and Slots | 98 SRX5600 Services Gateway SPC Description | 98...
  • Page 6 Calculating Power Requirements for the SRX5600 Services Gateway | 166 SRX5600 Network Cable and Transceiver Planning | 178 Routing Engine Interface Cable and Wire Specifications for the SRX5600 Services Gateway | 178 Signal Loss in Multimode and Single-Mode Fiber-Optic Cable for the SRX5600 Services...
  • Page 7 Removing the Power Supplies Before Installing the SRX5600 Services Gateway Without a Lift | 202 Removing the Fan Tray Before Installing an SRX5600 Services Gateway Without a Lift | 203 Removing Cards Before Installing an SRX5600 Services Gateway Without a Lift | 204...
  • Page 8 Connecting the SRX5600 Services Gateway to a Management Console or an Auxiliary Device | 214 Connecting the SRX5600 Services Gateway to a Network for Out-of-Band Management | 215 Connecting an SRX5600 Services Gateway to an External Alarm-Reporting Device | 216...
  • Page 9 Connecting the Alarm Relay Wires to the SRX5600 Services Gateway Craft Interface | 246 Maintaining the SRX5600 Cooling System | 247 Maintaining the Fan Tray on the SRX5600 Services Gateway | 247 Replacing the SRX5600 Services Gateway Fan Tray | 248...
  • Page 10 SRX5K-SCB3 in a Chassis Cluster | 298 Maintaining the SRX5600 Line Cards and Modules | 302 Maintaining Interface Cards and SPCs on the SRX5600 Services Gateway | 303 Holding an SRX5600 Services Gateway Card | 305 Storing an SRX5600 Services Gateway Card | 307...
  • Page 11 Maintaining the SRX5600 Cables and Connectors | 342 Maintaining SRX5600 Services Gateway Network Cables | 342 Replacing the Management Ethernet Cable on the SRX5600 Services Gateway | 344 Replacing the SRX5600 Services Gateway Console or Auxiliary Cable | 345 Replacing an SRX5600 Services Gateway Network Interface Cable | 346...
  • Page 12 Contacting Customer Support | 411 Return Procedure for the SRX5600 Services Gateway | 412 Listing the SRX5600 Services Gateway Component Serial Numbers with the CLI | 413 Locating the SRX5600 Services Gateway Chassis Serial Number Label | 414 Locating the SRX5600 Services Gateway Power Supply Serial Number Labels | 414...
  • Page 13 xiii Chassis and Component Lifting Guidelines | 431 Ramp Warning | 432 Rack-Mounting and Cabinet-Mounting Warnings | 432 Grounded Equipment Warning | 438 Laser and LED Safety Guidelines and Warnings | 438 General Laser Safety Guidelines | 439 Class 1 Laser Product Warning | 440 Class 1 LED Product Warning | 441 Laser Beam Warning | 442 Radiation from Open Port Apertures Warning | 443...
  • Page 14 TN Power Warning | 480 Action to Take After an Electrical Accident | 480 SRX5600 Services Gateway Agency Approvals | 481 SRX5600 Services Gateway Compliance Statements for EMC Requirements | 482 Canada | 482 European Community | 482 Israel | 483...

  • Page 15: About The Documentation

    If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration.

  • Page 16: Merging A Full Example

    If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example is a full example. In this case, use the load merge command. If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In this case, use the load merge relative command.

  • Page 17: Merging A Snippet

    xvii Merging a Snippet To merge a snippet, follow these steps: 1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the file with a name, and copy the file to a directory on your routing platform. For example, copy the following snippet to a file and name the file ex-script-snippet.conf.
  • Page 18 xviii Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser.
  • Page 19 Table 2: Text and Syntax Conventions (continued) Convention Description Examples Italic text like this Represents variables (options for Configure the machine’s domain which you substitute a value) in name: commands or configuration [edit] statements. root@# set system domain-name domain-name Text like this Represents names of configuration To configure a stub area, include statements, commands, files, and...

  • Page 20: Documentation Feedback

    URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active Juniper Care or Partner Support Services support contract, or are...

  • Page 21: Self-Help Online Tools And Resources

    JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: https://www.juniper.net/customers/support/...

  • Page 22: Overview

    SRX5600 Services Gateway System Overview | 25 SRX5600 Chassis | 28 SRX5600 Services Gateway Cooling System Description | 42 SRX3400 and SRX5600 Services Gateways Air Deflector Kits | 45 SRX5600 Power System | 47 SRX5600 Host Subsystem | 63 SRX5600 Line Cards and Modules | 91...

  • Page 24: Srx5600 Services Gateway System Overview

    The SRX5600 Services Gateway is a high-performance, highly scalable, carrier-class security device with multi-processor architecture. The SRX5600 Services Gateway is 8 rack units (U) tall. Three of these devices can be stacked in a single floor-to-ceiling rack, for increased port density per unit of floor space.

  • Page 25: Benefits Of The Srx5600 Services Gateway

    Benefits of the SRX5600 Services Gateway The next generation SPCs and IOCs on the SRX5600 Services Gateway support up to 570 IMIX Gbps firewall throughput, 180 million concurrent sessions, and 460 Gbps IPS. The ability to support unique security policies per zone and ability to scale with the growth of the network infrastructure, makes the SRX5600 an ideal deployment for consolidation of services in large enterprise, service provider, or mobile operator environments.

  • Page 26: Srx5600 Services Gateway Component Redundancy

    SPCs MPCs MICs SRX5600 Services Gateway Component Redundancy The following major hardware components are redundant: SCBs—The host subsystem consists of a Routing Engine installed in an SCB. The device must have one host subsystem installed. You can install a second SCB for redundancy. If a second SCB is installed, the host subsystem SCB functions as the master and the other functions as the backup.

  • Page 27: Srx5600 Chassis

    SRX5600 Services Gateway Cable Manager Description | 33 SRX5600 Services Gateway Craft Interface Overview | 34 SRX5600 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button | 35 SRX5600 Services Gateway Craft Interface Host Subsystem LEDs | 36...

  • Page 28: Srx5600 Services Gateway Chassis

    SRX5600 Services Gateway Craft Interface Online Buttons | 38 SRX5600 Services Gateway Craft Interface Alarm Relay Contacts | 41 SRX5600 Services Gateway Chassis The services gateway chassis is a rigid sheet metal structure that houses all the other components (see...
  • Page 29 Figure 1: Front View of a Fully Configured Services Gateway Chassis SPCs IOCs Figure 2: Rear View of a Fully Configured AC-Powered Services Gateway Chassis...

  • Page 30: Srx5600 Services Gateway Physical Specifications

    Figure 3: Rear View of a Fully Configured DC-Powered Services Gateway Chassis SRX5600 Services Gateway Physical Specifications Table 4 on page 31 summarizes the physical specifications for the services gateway chassis. Table 4: Physical Specifications Description Value Chassis dimensions 14.0 in. (35.6 cm) high 17.45 in.

  • Page 31: Srx5600 Services Gateway Midplane Description

    SRX5K-RE-13-20) High-capacity AC power supply weight 6.6 lb (3.0 kg) SRX5600 Services Gateway Midplane Description The midplane is located toward the rear of the chassis and forms the rear of the card cage (see Figure 4 on page 33). IOCs, Flex IOCs, SPCs, and SCBs install into the midplane from the front of the chassis, and the power supplies install into the midplane from the rear of the chassis.

  • Page 32: Srx5600 Services Gateway Cable Manager Description

    The midplane supports link speeds up to 10 Gbps and is not field replaceable. Figure 4: Midplane SRX5600 Services Gateway Cable Manager Description The cable management system (see Figure 5 on page 34...

  • Page 33: Srx5600 Services Gateway Craft Interface Overview

    Figure 5: Cable Manager Figure 6: Cable Management System Installed on the Device SRX5600 Services Gateway Craft Interface Overview The craft interface shows you status and troubleshooting information at a glance and lets you perform many system control functions. It is hot-insertable and hot-removable. The craft interface is located on the front of the services gateway above the upper fan tray.

  • Page 34: Srx5600 Services Gateway Craft Interface Alarm Leds And Alarm Cutoff/Lamp Test Button

    At least one SCB must be installed in the services gateway for the craft interface to obtain power. SRX5600 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button Two large alarm LEDs are located at the upper right of the craft interface. The circular red LED lights to indicate a critical condition that can result in a system shutdown.

  • Page 35: Srx5600 Services Gateway Craft Interface Host Subsystem Leds

    Causes all LEDs on the craft interface to light (for testing) when pressed and held. SRX5600 Services Gateway Craft Interface Host Subsystem LEDs The host subsystem has three LEDs, located in the middle of the craft interface, that indicate its status.

  • Page 36: Srx5600 Services Gateway Craft Interface Power Supply Leds

    SRX5600 Services Gateway Craft Interface Power Supply LEDs Each power supply has two LEDs on the craft interface that indicate its status. The LEDs, labeled 0 through 3, are located near the middle of the craft interface next to the PEM label.

  • Page 37: Srx5600 Services Gateway Craft Interface Online Buttons

    The Online/Offline buttons are only supported for slots containing MPC interface cards. You can install MPCs into slots: SRX5400–Any slot except bottom slot 0 SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0 or 1 NOTE: The Online/Offline buttons are not supported for removal and replacement of SPCs or SCB.
  • Page 38 Slot State Total Interrupt DRAM (MB) Heap Buffer Online 1024 Online 1024 Online 2048 An MPC can also be taken offline via CLI command: user@host> request chassis fpc slot 2 offline node0: -------------------------------------------------------------------------- Offline initiated, use "show chassis fpc" to verify {primary:node0} user@host>...
  • Page 39 2. Issue the CLI show chassis fpc command to check the status of installed MPCs. As shown in the sample output, the value Online in the column labeled State indicates that the MPC in slot 1 is functioning normally: Verify if the MPC is offline: user@host>...

  • Page 40: Srx5600 Services Gateway Craft Interface Alarm Relay Contacts

    1024 Online 1024 SRX5600 Services Gateway Craft Interface Alarm Relay Contacts The craft interface has two alarm relay contacts for connecting the device to external alarm devices (see Figure 8 on page 41). Whenever a system condition triggers either the major or minor alarm on the craft interface, the alarm relay contacts are also activated.

  • Page 41: Srx5600 Services Gateway Cooling System Description

    LED and relay contacts. The alarm relay contacts can also be used to activate other devices such as bells or buzzers. Figure 9: Example Alarm Reporting Device SRX5600 Services Gateway Cooling System Description The cooling system consists of the following components:...
  • Page 42 Two types of fan trays are available: The standard capacity fan tray has six fans that operate at 432 cubic feet per minute (CFM) at full speed and is adequate for services gateways in which standard-capacity power supplies are installed. The high-capacity fan tray has six fans that operate at 579 cubic feet per minute (CFM) at full speed and is required when high-capacity power supplies are installed.
  • Page 43 Figure 11: Fan Tray Figure 12: Air Filter RELATED DOCUMENTATION Maintaining the Fan Tray on the SRX5600 Services Gateway | 247 Maintaining the Air Filter on the SRX5600 Services Gateway | 250 Troubleshooting the SRX5600 Services Gateway Cooling System | 397...

  • Page 44: Srx3400 And Srx5600 Services Gateways Air Deflector Kits

    SRX3400 and SRX5600 Services Gateways Air Deflector Kits Optional air deflector kits are available that let you install the SRX3400 and SRX5600 Services Gateways in a hot aisle/cold aisle ventilation environment. These kits convert the services gateway from side-to-side ventilation into front-to-back ventilation. The air deflectors contain no additional fans, so they require no additional electrical power.
  • Page 45 Figure 13: SRX3400 Services Gateway Air Deflector Kit Figure 14: SRX5600 Services Gateway Air Deflector Kit (Services Gateway Chassis Contents Omitted for Clarity) RELATED DOCUMENTATION...

  • Page 46: Srx5600 Power System

    SRX5600 Services Gateway AC Power Supply LEDs | 51 AC Power Cord Specifications for the SRX5600 Services Gateway | 52 AC Power Circuit Breaker Requirements for the SRX5600 Services Gateway | 55 SRX5600 Services Gateway DC Power Supply | 55...
  • Page 47 For detailed power supply specifications, see “SRX5600 Services Gateway AC Power Supply Specifications” on page 51 “SRX5600 Services Gateway DC Power Supply Specifications” on page Table 13: Power Supply Type Summary...

  • Page 48: Srx5600 Services Gateway Ac Power Supply

    Table 14 on page 49 Table 14: SRX5600 Services Gateway Power Distribution (DC Power Supplies) Zone Power Supplies...
  • Page 49 Figure 15: Standard-Capacity AC Power Supply Figure 16: High-Capacity AC Power Supply NOTE: The services gateway must be running Junos OS Release 12.1X44-D10 or later in order to use high-capacity AC power supplies. WARNING: The services gateway is pluggable type A equipment installed in a restricted-access location.

  • Page 50: Srx5600 Services Gateway Ac Power Supply Specifications

    SRX5600 Services Gateway AC Power Supply Specifications Table 15 on page 51 lists the AC power supply electrical specifications. Table 16 on page 51 lists the AC power system electrical specifications. Table 15: AC Power Supply Electrical Specifications Specification Item...

  • Page 51: Ac Power Cord Specifications For The Srx5600 Services Gateway

    Check AC OK and DC OK LEDs for more information. AC Power Cord Specifications for the SRX5600 Services Gateway Each AC power supply has a single AC appliance inlet located on the power supply that requires a dedicated AC power feed.
  • Page 52 Table 18: AC Power Cord Specifications (continued) Country Model Number Electrical Specification Plug Type Europe (except CBL-M-PWR-RA-EU 220 or 230 VAC, 50 Hz AC CEE 7/7 Denmark, Italy, Switzerland, and United Kingdom) Italy CBL-M-PWR-RA-IT 230 VAC, 50 Hz AC CEI 23-16/VII Japan CBL-PWR-RA-JP15 125 VAC, 50 or 60 Hz AC...
  • Page 53 To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5600 Services Gateway” on page 220 for instructions. CAUTION: Power cords and cables must not block access to device components or drape where people could trip on them.

  • Page 54: Ac Power Circuit Breaker Requirements For The Srx5600 Services Gateway

    AC Power Circuit Breaker Requirements for the SRX5600 Services Gateway Each AC power supply has a single AC appliance inlet located on the power supply that requires a dedicated AC power feed. We recommend that you use a customer site circuit breaker rated for 15 A (250 VAC) minimum for each AC power supply, or as required by local code.

  • Page 55: Srx5600 Services Gateway Dc Power Supply Specifications

    NOTE: The services gateway must be running Junos OS Release 12.1X44-D10 or later in order to use high-capacity DC power supplies. SRX5600 Services Gateway DC Power Supply Specifications Table 19 on page 56 lists the DC power supply electrical specifications.

  • Page 56: Srx5600 Services Gateway Dc Power Supply Leds

    4800 W 5200 W system SRX5600 Services Gateway DC Power Supply LEDs Each DC power supply faceplate contains three LEDs that indicate the status of the power supply (see Table 21 on page 57). In addition, a power supply failure triggers the red alarm LED on the craft interface.

  • Page 57: Dc Power Cable Specifications For The Srx5600 Services Gateway

    DC input is present, but not in valid operating range or connected in reverse polarity. DC Power Cable Specifications for the SRX5600 Services Gateway Table 22 on page 58 summarizes the specifications for the power cables, which you must supply.

  • Page 58: Dc Power Cable Lug Specifications For The Srx5600 Services Gateway

    DC Power Cable Lug Specifications for the SRX5600 Services Gateway The accessory box shipped with the services gateway includes the cable lugs that attach to the terminal studs of each power supply (see Figure 20 on page 59). Figure 20: DC Power Cable Lug 2.25...

  • Page 59: Dc Power Source Cabling For The Srx5600 Services Gateway

    DC Power Source Cabling for the SRX5600 Services Gateway Figure 21 on page 60 shows a typical DC source cabling arrangement. Figure 21: Typical DC Source Cabling to the Services Gateway Central office Central office Rectifiers secondary ground DC power...

  • Page 60: Srx5600 Services Gateway Chassis Grounding Point Specifications

    To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5600 Services Gateway” on page 220 for instructions. CAUTION: Before services gateway installation begins, a licensed electrician must attach cable lugs to the grounding and power cables that you supply.

  • Page 61: Srx5600 Services Gateway Grounding-Cable Lug Specification

    Additional grounding is provided to an AC-powered services gateway when you plug its power supplies into grounded AC power receptacles. SRX5600 Services Gateway Grounding-Cable Lug Specification The accessory box shipped with the services gateway includes the cable lug that attaches to the grounding...

  • Page 62: Srx5600 Host Subsystem

    SRX5600 Host Subsystem IN THIS SECTION SRX5600 Services Gateway Host Subsystem Description | 63 Switch Control Board SRX5K-SCB Overview | 64 Switch Control Board SRX5K-SCB Specifications | 65 Switch Control Board SRX5K-SCBE Overview | 68 Switch Control Board SRX5K-SCBE Specifications | 69...

  • Page 63: Switch Control Board Srx5K-Scb Overview

    NOTE: SRX5K-SCB4 is not supported on SRX5400 Services Gateways. Routing Engine SRX5K-RE-13-20–from Junos OS Release 9.2 to 12.3X48 SRX5K-RE-1800X4–from Junos OS Release 12.1X47-D15 and later SRX5K-RE3-128G–from Junos OS Release 19.3R1 and later NOTE: You can only configure the following combination of Routing Engine and SCB within a host subsystem: SRX5K-RE-13-20 and SRX5K-SCB SRX5K-RE-1800X4 and SRX5K-SCBE...

  • Page 64: Switch Control Board Srx5K-Scb Specifications

    The SCBs install horizontally into the slots at the bottom of the card cage labeled 0 and 1. If any slots are empty, you must install a blank panel. For detailed information about SCBs supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/.
  • Page 65 SRX5400 and SRX5600 Services Gateways have one SCB each installed and you can install a second SCB for redundancy. The SRX5800 Services Gateway has two SCBs installed and you can install a third SCB for switch fabric redundancy. The host subsystem is composed of a Routing Engine installed directly into a slot on the faceplate of the SCB.
  • Page 66 Cables and connectors Slot for Routing Engine Controls None Supported Slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power Requirement 150 W Weight Approximately 10 lb (4.5 kg)

  • Page 67: Switch Control Board Srx5K-Scbe Overview

    Serial Number Location The serial number label is located as shown in Figure 26 on page Figure 26: SCB Serial Number Label Serial number ID label Switch Control Board SRX5K-SCBE Overview The SRX5000 line enhanced Switch Control Board (SRX5K-SCBE) caters to high-end security markets requiring support for higher capacity traffic.

  • Page 68: Switch Control Board Srx5K-Scbe Specifications

    Figure 27: SRX5K-SCBE Switch Control Board SRX5K-SCBE Specifications Each SRX5K-SCBE consists of the following components: I2C bus logic for low-level communication with each component Component redundancy circuitry Control Board/Routing Engine mastership mechanism Gigabit Ethernet switch that is connected to the embedded CPU complex on all components Switch fabric to provide the switching functions for the MPCs 1000BASE-T Ethernet controller to provide a 1-Gbps Ethernet link between the Routing Engines...
  • Page 69 Slot for Routing Engine Controls None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 160 W at 131º F (55º C) 130 W at 104º F (40º C) 120 W at 77º...

  • Page 70: Srx5K-Scbe Leds

    Serial number location The serial number label is located as shown in Figure 28 on page Figure 28: SRX5K-SCBE Serial Number Label Serial number ID label SRX5K-SCBE LEDs Table 23 on page 71 describes the SRX5K-SCBE LEDs and their states. Table 23: SRX5K-SCBE LEDs Label Color...

  • Page 71: Switch Control Board Srx5K-Scb3 Overview

    The SRX5K-SCB3 (SCB3) caters to high-end security markets requiring support for higher capacity traffic, greater interface density (slot and capacity scale), and improved services. The SCB3 is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. The SCB3 supports the standard midplane and the enhanced midplane.

  • Page 72: Switch Control Board Srx5K-Scb3 Specifications

    Cables and connectors Slot for Routing Engine Controls None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 300 W Weight 9.6 lb (4.4 kg) with Routing Engine...

  • Page 73: Srx5K-Scb3 Leds

    Serial number location The serial number label is located as shown in Figure 30 on page Figure 30: SRX5K-SCB3 Serial Number Label SRX5K-SCB3 LEDs Table 24 on page 74 describes the SCB3 LEDs and their states. Table 24: SRX5K-SCB3 LEDs Label Color State...

  • Page 74: Switch Control Board Srx5K-Scb4 Overview

    CLI. If you change the fabric mode of SCB4 to Redundant Fabric mode you must install two SCB4s in SRX5600 and you can install either two or three SCB4s in SRX5800 Services Gateways. If you are upgrading from SCB3 (Redundant Fabric mode is the default fabric mode in SCB2 and SCB3) to SCB4 and installing only two SCB4s, you must have Junos OS 19.3R1 or later and change the default fabric...

  • Page 75: Switch Control Board Srx5K-Scb4 Specifications

    The Routing Engine installs directly into a slot on the SCB4, as shown in Figure 31 on page Figure 31: SRX5K-SCB4 SRX5K-SCB4 Switch Control Board SRX5K-SCB4 Specifications SRX5K-SCB4 (SCB4) consists of the following components: LEDs to provides status of the SCB4. Circuits for chassis management and control.
  • Page 76 Controls None Supported slots SRX5400–Not supported SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement At different temperatures: 55° C: 425 W 40° C: 400 W 25° C: 385 W Cooling requirement For efficient and reliable power and cooling, you must install SRX Series high-capacity power supplies and fan trays in the SRX Series chassis.

  • Page 77: Srx5K-Scb4 Leds

    SRX5K-SCB4 LEDs Table 25 on page 78 describes the SCB4 LEDs and their states. Table 25: SRX5K-SCB4 LEDs Label Color State Description OK/FAIL Green On steadily SCB4 is online. On steadily SCB4 has failed. – SCB4 is offline. FABRIC ACTIVE Green On steadily The switch fabric on this board is in Active mode.

  • Page 78: Routing Engine Srx5K-Re-1800X4 Overview

    Routing Engine SRX5K-RE-1800X4 Overview The enhanced Routing Engine is an Intel-based PC platform that runs Junos OS. Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device.The Routing Engine must be installed directly into the SRX5K-SCBE.

  • Page 79: Srx5K-Re-1800X4 Routing Engine Boot Sequence

    Reset button—Reboots the Routing Engine when pressed. Online/Offline button—Takes the Routing Engine online or offline when pressed. Extractor clips—Inserts and extracts the Routing Engine. Captive screws—Secures the Routing Engine in place. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways...
  • Page 80 RESET button–Reboots the Routing Engine when pressed. Supported slots Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 NOTE: The services gateway host subsystem Routing Engine must be installed in the SCB in slot 0.

  • Page 81: Srx5K-Re-1800X4 Leds

    Serial number location The serial number label is located as shown in Figure 34 on page Figure 34: SRX5K-RE-1800X4 Serial Number Label SRX5K-RE-1800X4 LEDs Each Routing Engine has four LEDs that indicate its status. The LEDs, labeled MASTER, STORAGE, ONLINE, and OK/FAIL, are located directly on the faceplate of the Routing Engine.

  • Page 82: Routing Engine Srx5K-Re-13-20 Overview

    A USB port on the Routing Engine accepts a USB memory card that allows you to load Junos OS. Figure 35: SRX5K-RE-13-20 Routing Engine For detailed information about the Routing Engines supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/.

  • Page 83: Routing Engine Srx5K-Re-13-20 Specifications

    Routing Engine SRX5K-RE-13-20 Specifications The SRX5K-RE-13-20 Routing Engine (Figure 36 on page 84) is an Intel-based PC platform that runs the Junos operating system (Junos OS). Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device.
  • Page 84 For specific information about Routing Engine components (for example, the amount of DRAM), issue the show chassis routing-engine command. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways Software release Junos OS Release 9.2 and later Junos OS Release 10.0 and later required to install a second Routing Engine Cables and connectors AUX—Connects the Routing Engine to a laptop, a modem, or another auxiliary device through...
  • Page 85 MASTER LED: Blue–The Routing Engine is Primary. NOTE: The SRX5400, SRX5600, and SRX5800 Services Gateways do not support a secondary or backup Routing Engine, so the MASTER LED should always be lit. OK/FAIL LED, one bicolor: Off–The Routing Engine is operating normally.

  • Page 86: Routing Engine Srx5K-Re3-128G Specifications

    MASTER Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways, based on Intel’s Haswell-EP CPU with 6 cores, and 128GB of DDR4 memory. It provides increased control plane performance and scalability along with virtualization features in the SRX Series 5000 line of chassis.
  • Page 87 NOTE: In the SRX5600 or SRX5800 Services Gateways chassis cluster configurations, dual control links functionality is not supported if you mix SRX5K-RE-1800X4 and SRX5K-RE3-128G Routing Engines. To support dual control links you have to install two SRX5K-RE3-128Gs.

  • Page 88: Srx5K-Re3-128G Routing Engine Components

    Serial number location The serial number label is located as shown in Figure 39 on page Figure 39: SRX5K-RE3-128G Serial Number Label Serial number ID label SRX5K-RE3-128G Routing Engine Components Each Routing Engine consists of the following components: CPU—Runs Junos OS to maintain the routing tables and routing protocols. EEPROM—Stores the serial number of the Routing Engine.

  • Page 89: Srx5K-Re3-128G Routing Engine Leds

    NOTE: The control interface names differ based on the routing engine: For RE2, the control interfaces are displayed as em0 and em1. For RE3, the control interfaces are displayed as ixlv0 and igb0. For more information, see show chassis cluster interfaces. Status LEDs—Table 27 on page 90 describes the functions of the ONLINE, OK/FAIL, MASTER, DISK1,...

  • Page 90: Srx5K-Re3-128G Routing Engine Boot Sequence

    SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 92 SRX5600 Services Gateway Card Terminology | 93 Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 94 SRX5600 Services Gateway Card Cage and Slots | 98 SRX5600 Services Gateway SPC Description | 98...

  • Page 91: Srx5400, Srx5600, And Srx5800 Services Gateway Card Overview

    SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800 Services Gateway to suit the needs of your network. The following types of cards are available for the SRX5400, SRX5600, and SRX5800 Services Gateways: I/O cards (IOCs) provide additional physical network connections to the services gateway.

  • Page 92: Srx5600 Services Gateway Card Terminology

    Although the following modules are not cards in the sense of having a form-factor that fits the card cage of the SRX5400, SRX5600, and SRX5800 Services Gateway, this guide also addresses the following modules that fit into certain SRX5400, SRX5600, and SRX5800 Services Gateway cards:...

  • Page 93: Cards Supported On Srx5400, Srx5600, And Srx5800 Services Gateways

    Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways Table 28 on page 94 describes the cards and other modules supported on the SRX5400, SRX5600, and SRX5800 Services Gateways. Table 28: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways...
  • Page 94 Table 28: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 Services Processing Card 18.2R1-S1 18.2R1-S1...
  • Page 95 Table 28: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 Switch Control Board Not supported 19.3R1...
  • Page 96 Table 28: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 Routing Engine 19.3R1 19.3R1 SRX5K-RE3-128G Specifications...

  • Page 97: Srx5600 Services Gateway Card Cage And Slots

    Table 29 on page 98 describes the types of cards that you can install into each slot. Table 29: SRX5600 Services Gateway Card Cage Slots Eligible Cards Card Cage Slot Flex IOC SRX5600 Services Gateway SPC Description...

  • Page 98: Services Processing Card Srx5K-Spc-2-10-40 Specifications

    Figure 42: Typical SPC For detailed information about SPCs supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/. Services Processing Card SRX5K-SPC-2-10-40 Specifications The SRX5K-SPC-2-10-40 Services Processing Card (SPC) contains two Services Processing Units (SPUs),...
  • Page 99 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces.
  • Page 100 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) Controls None Supported Slots SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE. Power Maximum 351 W...
  • Page 101 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the two SPUs SPU 0 and SPU 1: Green–The SPU is operating normally.

  • Page 102: Services Processing Card Srx5K-Spc-4-15-320 Specifications

    Serial Number The serial number label is located as shown in Figure 44 on page 103. Location Figure 44: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Services Processing Card SRX5K-SPC-4-15-320 Specifications The SRX5K-SPC-4-15-320 Services Processing Card (SPC) contains four Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 45 on page...
  • Page 103 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces.
  • Page 104 Supported Slots SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE.
  • Page 105 LEDs...
  • Page 106 OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the four SPUs SPU 0 through SPU 3: Green–The SPU is operating normally. Amber–The SPU is initializing.

  • Page 107: Services Processing Card Srx5K-Spc3 Specifications

    Off–The chassis cluster control port is disabled. Serial Number The serial number label is located as shown in Figure 46 on page 108. Location Figure 46: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Services Processing Card SRX5K-SPC3 Specifications The SRX5K-SPC3 Services Processing Card (SPC) contains two Services Processing Units (SPUs) with...
  • Page 108 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces One Gigabit Ethernet switch that provides control connectivity to the Routing Engine.
  • Page 109 SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except slot 11, and the slots 0 or 1 which are reserved for SCB/RE.
  • Page 110 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each SPU SPU 0 and SPU 1: Off–The SPU is offline. Blinking Amber–The SPU is initializing.

  • Page 111: Srx5600 Services Gateway Interface Card Description

    SRX5600 Services Gateway Interface Card Description Interface cards are cards that support physical interfaces that you use to connect the services gateway to your data network. Three different types of interface cards are available: I/O Cards (IOCs) have fixed interface ports on the front panel of the card.
  • Page 112 Figure 48: Typical IOCs Figure 49 on page 113 shows a Flex IOC with two typical port modules installed. Figure 49: Flex IOC with Port Modules Flex IOC 4x10GE-XFP port module in slot 0 16x1GE-TX port module in slot 1 Figure 50 on page 114 shows an MPC.

  • Page 113: Modular Port Concentrator (Srx5K-Mpc) Specifications

    You can install MPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 114 Figure 51: SRX5K-MPC MPC (empty)
  • Page 115 NOTE: When installing an SRX5K-MPC in an SRX5600 or SRX5800 Services Gateway: If the session-distribution-mode has not been explicitly configured using the CLI command: user@host set security forwarding-process application-services session-distribution-mode The SRX5K-MPC defaults to hash-based mode automatically even if existing SRX5K-MPC or non-MPCs are installed.

  • Page 116: Srx5K-Mpc3-40G10G Specifications

    Maximum of 570 W for the MPC with two MICs, including applicable transceivers. NOTE: To install and use SRX5K-MPCs in the SRX5600 and SRX5800 Services Gateways, you must have high-capacity power supplies (either AC or DC) and high-capacity fan trays installed in the services gateways.
  • Page 117 Figure 52: SRX5K-MPC3-40G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 118 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0 through 0/11 and 1/0 through 1/11 40-Gigabit Ethernet ports: 2/0 through 2/2 and 3/0 through 3/2 Software features Optical diagnostics and related alarms Two packet-forwarding engines, PFE0 and PFE1.

  • Page 119: Srx5K-Mpc3-100G10G Specifications

    The SRX5K-MPC3-100G10G (IOC3) is an interface card that provides 100 Gigabit Ethernet and 10 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 54 on page 121.
  • Page 120 Figure 54: SRX5K-MPC3-100G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 121 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0, 0/1, 2/0, and 2/1 100-Gigabit Ethernet ports: 1/0 and 3/0 Software features Configurable LAN-PHY mode options per 10-Gigabit Ethernet port Optical diagnostics and related alarms...

  • Page 122: Mic With 20X1Ge Sfp Interfaces (Srx-Mic-20Ge-Sfp)

    Serial Number Location The serial number label is located as shown in Figure 55 on page 123. Figure 55: SRX5K-MPC3-100G10G Serial Number Label MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) You use Modular Interface Cards (MICs) and Modular Port Concentrators (MPCs) to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
  • Page 123 Figure 56: SRX-MIC-20GE-SFP Description MIC with twenty 1-Gigabit Ethernet SFP Ethernet ports Fits into either of the two slots of SRX-5K-MPC Supports up to 20 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 20 Gbps Software release Junos OS Release 12.1X47-D10 Cables and connectors Sockets for 20 SFP Gigabit Ethernet transceivers.
  • Page 124 Port and Interface Numbering...
  • Page 125 2 or 3 when installed in the second slot. port—Port number. Figure 57 on page 126 shows the SRX-MIC-20GE-SFP MIC installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 57: SRX-MIC-20GE-SFP Interface Port Mapping SRX-MIC-20GE-SFP...
  • Page 126 The sample output of the show chassis fpc pic-status command output displays two 20-port Gigabit Ethernet MICs with SFP — inserted into the slots of an MPC in slot 2. The logical PICs of the two MICs— 10x 1GE(LAN) SFP — are shown as PIC 0, PIC 1, PIC 2, and PIC 3.
  • Page 127 user@host> show interfaces terse Interface Admin Link Proto Local Remote gr-0/0/0 ip-0/0/0 lt-0/0/0 ge-2/0/0 ge-2/0/1 down ge-2/0/2 down ge-2/0/3 down ge-2/0/4 down ge-2/0/5 ge-2/0/6 down ge-2/0/7 down ge-2/0/8 ge-2/0/9 ge-2/1/0 down ge-2/1/1 ge-2/1/2 down ge-2/1/3 down ge-2/1/4 ge-2/1/5 down ge-2/1/6 down ge-2/1/7 down...

  • Page 128: Mic With 10X10Ge Sfp+ Interfaces (Srx-Mic-10Xg-Sfpp)

    ge-2/3/9 down Serial number location The serial number label is yellow and is located as shown in Figure 58 on page 129. Figure 58: SRX-MIC-20GE-SFP Serial Number Label NOTE: The serial number for the mezzanine card is shown only for reference and is never used for any purpose.
  • Page 129 Figure 59: SRX-MIC-10XG SFPP Description MIC with ten SFP+ 10-Gigabit Ethernet ports Fits into MPC Supports up to 100 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 100 Gbps Software Junos OS Release 12.1X46-D10 release Cables and Sockets for ten 10-Gbps SFP+ transceivers connectors Hardware Compatibility Tool...
  • Page 130 Port and Interface Numbering...
  • Page 131 Figure 60 on page 132 shows the port and interface numbering of an SRX-MIC-10XG-SFPP MIC when it is installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 60: SRX-MIC-10XG-SFPP Port and Interface Numbering...
  • Page 132 PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 2 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP+ PIC 2 Online 10x 10GE SFP+ The show interfaces terse command output displays the 10–Gigabit Ethernet interfaces that correspond to the 10 ports located on each MIC.

  • Page 133: Mic With 1X100Ge Cfp Interface (Srx-Mic-1X100G-Cfp)

    Serial number The serial number label is yellow and located as shown in Figure 61 on page 134. location Figure 61: SRX-MIC-10XG-SFPP Serial Number Label MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
  • Page 134 Software release Junos OS Release 12.1X46-D10 Cables and connectors One socket for a 100-Gigabit CFP transceiver. Supported CFP transceivers: 100GBASE-LR4 (model number: SRX-CFP-100G-LR4) 100GBASE-SR10 (model number: SRX-CFP-100G-SR10) Supported slots Either slot in SRX5K-MPC Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Green–The MIC is operating normally.

  • Page 135: Mic With 2X40Ge Qsfp+ Interfaces (Srx-Mic-2X40G-Qsfp)

    MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-2X40G-QSFP (see Figure 64 on page 136) can be installed in an MPC to add two 40-Gigabit quad small form-factor pluggable (QSFP+) Ethernet ports.

  • Page 136: Srx5K-Ioc4-10G Specifications

    SRX5K-IOC4-10G Specifications SRX5K-IOC4-10G is a fixed-configuration interface card with a Packet Forwarding Engine that provides 400-Gbps line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600 and SRX5800 Services Gateways. See Figure 66 on page 137.
  • Page 137 If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 138 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Forty 10-Gigabit Ethernet ports. The ports support SFP+ transceivers. Requires high-capacity power supplies and high-capacity fan trays. The ports are labeled as (seeFigure 66 on page 137): 0/0 through 0/9 0/10 through 0/19 1/0 through 1/9...

  • Page 139: Srx5K-Ioc4-Mrat Specifications

    SRX5K-IOC4-MRAT is a fixed-configuration interface card with a Packet Forwarding Engine that provides up to 480-Gbps (240-Gbps per PIC slot) line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 68 on page 140.
  • Page 140 If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 141 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Twelve Gigabit Ethernet ports that can be configured as 40-Gigabit Ethernet port or as 4X10-Gigabit Ethernet port using a breakout cable. The ports support quad small-form factor pluggable plus (QSFP+) transceivers. Four out of the twelve ports can be configured as 100-Gigabit Ethernet ports.
  • Page 142 Software features Application security Application Layer Gateway (ALG) Attack detection and prevention Class of service (CoS) Equal-cost multipath (ECMP) load balancing GPRS Tunneling Protocol (GTP) High availability (chassis cluster) Intrusion detection and prevention (IDP) IPsec VPN Layer 2 transparent mode Logical systems Network Address Translation (NAT) Routing protocols (BFD, BGP, IGMP, IS-IS, MLD,...

  • Page 143: I/O Card Srx5K-40Ge-Sfp Specifications

    I/O Card SRX5K-40GE-SFP Specifications The SRX5K-40GE-SFP I/O card (IOC) is optimized for Ethernet density and supports 40 Gigabit Ethernet ports (see Figure 70 on page 144). The IOC assembly combines packet forwarding and Ethernet interfaces on a single board, with four 10-Gbps Packet Forwarding Engines. Each Packet Forwarding Engine consists of one I-chip for Layer 3 processing and one Layer 2 network processor.
  • Page 144 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2/6 Power Requirement 312 W typical, 365 W maximum Weight Approximately 13 lb (5.9 kg)

  • Page 145: I/O Card Srx5K-4Xge-Xfp Specifications

    Serial Number Location The serial number label is located as shown in Figure 71 on page 146. Figure 71: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 I/O Card SRX5K-4XGE-XFP Specifications The SRX5K-4XGE-XFP I/O card (IOC) supports four 10-Gigabit Ethernet ports (see Figure 72 on page 147).
  • Page 146 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET 10GBASE-SR (model numbers SRX-XFP-10GE-SR and SRX-XFP-10GE-SR-ET ) Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2 Power Requirement 312 W typical, 365 W maximum Weight...

  • Page 147: Flex I/O Card (Srx5K-Fpc-Ioc) Specifications

    LEDs OK/FAIL LED, one bicolor: Steady green–The IOC is operating normally. Red–The IOC has failed and is not operating normally. Off–The IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 73 on page 148.
  • Page 148 Cables and connectors Slots for two port modules Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2/6 Power Requirement 312 W typical, 365 W maximum (includes port modules) Weight Approximately 10 lb (4.5 kg)

  • Page 149: Flex I/O Card Port Module Srx-Ioc-16Ge-Sfp Specifications

    Serial Number Location The serial number label is located as shown in Figure 75 on page 150. Figure 75: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.
  • Page 150 Software release Junos OS Release 9.5R1 and later Cables and connectors 16 Gigabit Ethernet SFP ports Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls ONLINE Button–The ONLINE button on the port module front panel toggles the port module online and offline Supported Slots...

  • Page 151: Flex I/O Card Port Module Srx-Ioc-16Ge-Tx Specifications

    Serial Number Location The serial number label is located as shown in Figure 77 on page 152. Figure 77: Port Module SRX-IOC-16GE-SFP Serial Number Label Serial number ID label JX0123 Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.

  • Page 152: Flex I/O Card Port Module Srx-Ioc-4Xge-Xfp Specifications

    Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Steady green–The port module is operating normally. Red–The port module has failed and is not operating normally. Off–The port module is powered down. LINK LED, single color, one per port: Steady green–The link is active.
  • Page 153 Figure 80: Flex IOC Port Module SRX-IOC-4XGE-XFP Description Port module with four 10-Gigabit Ethernet XFP ports Maximum throughput: 10 Gbps Oversubscription ratio: 4:1 Maximum configurable MTU: 9192 bytes Software release Junos OS Release 9.5R1 and later Cables and connectors 4 XFP Ethernet ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET...
  • Page 154 Serial Number Location The serial number label is located as shown in Figure 81 on page 155. Figure 81: Port Module SRX-IOC-4XGE-XFP Serial Number Label Serial number ID label JX0123...

  • Page 155: Site Planning, Preparation, And Specifications

    C HAPTER Site Planning, Preparation, and Specifications Site Preparation Checklist for the SRX5600 Services Gateway | 159 SRX5600 Site Guidelines and Requirements | 160 SRX5600 Rack and Cabinet Requirements | 164 Calculating Power Requirements for the SRX5600 Services Gateway | 166...

  • Page 157: Site Preparation Checklist For The Srx5600 Services Gateway

    Site Preparation Checklist for the SRX5600 Services Gateway The checklist in Table 30 on page 159 summarizes the tasks you need to perform when preparing a site for services gateway installation. Table 30: Site Preparation Checklist Item or Task For More Information ...

  • Page 158: Srx5600 Site Guidelines And Requirements

    SRX5600 Services Gateway Environmental Specifications | 160 General Site Guidelines | 161 Site Electrical Wiring Guidelines | 162 Clearance Requirements for SRX5600 Services Gateway Airflow and Hardware Maintenance | 163 SRX5600 Services Gateway Environmental Specifications Table 31 on page 161 specifies the environmental specifications required for normal services gateway operation.

  • Page 159: General Site Guidelines

    Table 31: Services Gateway Environmental Specifications Description Value Altitude No performance degradation to 10,000 ft (3048 m) Relative humidity Normal operation ensured in relative humidity range of 5% to 90%, noncondensing Temperature Normal operation ensured in temperature range of 32°F (0°C) to 104°F (40°C) Nonoperating storage temperature in shipping container: –40°F (–40°C) to 158°F (70°C) Seismic...

  • Page 160: Site Electrical Wiring Guidelines

    Site Electrical Wiring Guidelines Table 32 on page 162 describes the factors you must consider while planning the electrical wiring at your site. WARNING: You must provide a properly grounded and shielded environment and use electrical surge-suppression devices. Table 32: Site Electrical Wiring Guidelines Site Wiring Factor Guidelines Signaling limitations...

  • Page 161: Clearance Requirements For Srx5600 Services Gateway Airflow And Hardware Maintenance

    Figure 82: Chassis Dimensions and Clearance Requirements RELATED DOCUMENTATION SRX5600 Services Gateway Agency Approvals | 481 SRX5600 Services Gateway Fire Safety Requirements and Fire Suppression Equipment SRX5600 Services Gateway Definition of Safety Warning Levels General Electrical Safety Guidelines and Warnings...

  • Page 162: Srx5600 Rack And Cabinet Requirements

    IN THIS SECTION SRX5600 Services Gateway Rack Size and Strength Requirements | 164 Spacing of Rack Mounting Bracket Holes for the SRX5600 Services Gateway | 165 Connection to Building Structure for the SRX5600 Services Gateway Rack | 165 SRX5600 Services Gateway Cabinet Size and Clearance Requirements | 165...

  • Page 163: Spacing Of Rack Mounting Bracket Holes For The Srx5600 Services Gateway

    (100 kg). If you stack five fully configured devices in one rack, it must be capable of supporting up to 1100 lb (500 kg). Spacing of Rack Mounting Bracket Holes for the SRX5600 Services Gateway The services gateway can be mounted in any rack that provides holes or hole patterns spaced at 1 U (1.75 in.) increments.

  • Page 164: Srx5600 Services Gateway Cabinet Airflow Requirements

    We recommend that you provision power according to the maximum input current listed in the power supply electrical specifications (see “SRX5600 Services Gateway AC Power Supply Specifications” on page 51 “SRX5600 Services Gateway DC Power Supply Specifications” on page 56). Use the following procedures to calculate the power requirement: 1. Calculate the power requirement.
  • Page 165 AC power supplies are mandatory for low-line power. The SRX5600 Services Gateway chassis with AC power supplies has one overall zone. Two AC power supplies are mandatory for high-line power, and three AC power supplies are mandatory for low-line power.
  • Page 166 1. Calculate the power requirements (usage) as shown in Table 34 on page 168. Table 34: Sample Power Requirements for an SRX5600 Services Gateway with SCB1 and RE1 Zone 1 Chassis Component Part Number Power Requirement Zone 0 Power Power...
  • Page 167 Table 35: Calculating Power Budget, AC-Powered Chassis with SCB1 and RE1 Maximum Output Maximum Output Power Power Supply Power of Power Supply for System Nonzoned Unused Power SRX5600 AC 1027 W (low-line) 3081 W 3081 W - 3880 W = -799 W standard-capacity (3+1 Redundancy) Power Exceeded...
  • Page 168 Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration. Table 37: Calculating System Input Power for SRX5600 Services Gateway with SCB1 and RE1 Power Supply Efficiency...
  • Page 169 Sample configuration for SRX5600 Services Gateway chassis with SRX5K-SCBE (SCB2) and SRX5K-RE-1800X4 (RE2): Services Processing Card SPC2 Switch control boards with one Routing Engine installed in SCB slot 0. SRX5K-MPC (IOC2) with fully loaded optical modules and two MICs such as:...
  • Page 170 1. Calculate the power requirements (usage) as shown in Table 39 on page 172. Table 39: Sample Power Requirements for an SRX5600 Services Gateway with SCB2 and RE2 Zone 1 Chassis Component Part Number Power Requirement Zone 0 Power Power...
  • Page 171 Table 40: Calculating Power Budget, AC-Powered Chassis with SCB2 and RE2 Maximum Output Power Maximum Output Power Power Supply of Power Supply for System Nonzoned Unused Power SRX5600 AC 1027 W (low-line) 3081 W 3081 W - 4025 W = -944 W standard-capacity (3+1 Redundancy) Power Exceeded...
  • Page 172 Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration. Table 42: Calculating System Input Power for SRX5600 Services Gateway with SCB2 and RE2 Power Supply Efficiency...
  • Page 173 1. Calculate the power requirements (usage) as shown in Table 44 on page 175. Table 44: Sample Power Requirements for an SRX5600 Services Gateway with SCB3, IOC3, and RE2 Zone 1 Chassis Component Part Number...
  • Page 174 Table 45: Calculating Power Budget, AC-Powered Chassis with SCB3, IOC3, and RE2 Maximum Output Power Maximum Output Power Power Supply of Power Supply for System Nonzoned Unused Power SRX5600 AC 1027 W (low-line) 3081 W 3081 W - 4262 W = -1181W standard-capacity (3+1 Redundancy) Power Exceeded...
  • Page 175 Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration. Table 47: Calculating System Input Power for SRX5600 Services Gateway with SCB3, IOC3, and RE2 Power Supply...

  • Page 176: Srx5600 Network Cable And Transceiver Planning

    Table 48: Calculating System Thermal Output for SRX5600 Services Gateway with SCB3, IOC3, and RE2 Power Supply Thermal Output (BTUs per hour) SRX5600 AC standard-capacity 5202 * 3.41 = 17,738 BTU/hr SRX5600 AC high-capacity 4968 * 3.41 = 16,940 BTU/hr SRX5600 DC standard-capacity 4512 * 3.41 = 15,385 BTU/hr...

  • Page 177: Signal Loss In Multimode And Single-Mode Fiber-Optic Cable For The Srx5600 Services Gateway

    Compared with multimode fiber, single-mode fiber has higher bandwidth and can carry signals for longer distances. It is consequently more expensive. Attenuation and Dispersion in Fiber-Optic Cable for the SRX5600 Services Gateway Correct functioning of an optical data link depends on modulated light reaching the receiver with enough power to be demodulated correctly.

  • Page 178: Calculating Power Budget For Fiber-Optic Cable For The Srx5600 Services Gateway

    The optical power budget must allow for the sum of component attenuation, power penalties (including those from dispersion), and a safety margin for unexpected losses. Calculating Power Budget for Fiber-Optic Cable for the SRX5600 Services Gateway To ensure that fiber-optic connections have sufficient power for correct operation, you need to calculate the link's power budget, which is the maximum amount of power it can transmit.

  • Page 179: Calculating Power Margin For Fiber-Optic Cable For The Srx5600 Services Gateway

    Calculating Power Margin for Fiber-Optic Cable for the SRX5600 Services Gateway After calculating a link's power budget, you can calculate the power margin (P ), which represents the amount of power available after subtracting attenuation or link loss (LL) from the power budget (P ).

  • Page 180: Srx5600 Alarm And Management Cable Specifications And Pinouts

    Console Port Cable and Wire Specifications for the SRX5600 Services Gateway | 183 RJ-45 Connector Pinouts for the SRX5600 Services Gateway Routing Engine Ethernet Port | 183 RJ-45 Connector Pinouts for the SRX5600 Services Gateway Routing Engine Auxiliary and Console Ports | 184...

  • Page 181: Alarm Relay Contact Wire Specifications For The Srx5600 Services Gateway

    Alarm Relay Contact Wire Specifications for the SRX5600 Services Gateway Table 51 on page 183 lists the specifications for the wires that connect to the alarm relay contacts. Table 51: Cable and Wire Specifications for Alarm Interfaces Port Cable Specification...

  • Page 182: Connector Pinouts For The Srx5600 Services Gateway Routing Engine Auxiliary And Console Ports

    Termination network Termination network Termination network RJ-45 Connector Pinouts for the SRX5600 Services Gateway Routing Engine Auxiliary and Console Ports The ports on the Routing Engine labeled AUX and CONSOLE are asynchronous serial interfaces that accept an RJ-45 connector. The ports connect the Routing Engine to an auxiliary or console management device.
  • Page 183 Table 54: RJ-45 Connector Pinout for the AUX and CONSOLE Ports (continued) Signal Description Clear to Send...

  • Page 184: Initial Installation And Configuration

    Installing the SRX5600 Using a Mechanical Lift | 198 Installing the SRX5600 Without a Mechanical Lift | 201 Connecting the SRX5600 to External Devices | 213 Connecting the SRX5600 to Power | 219 Performing the Initial Software Configuration for the SRX5600 | 229...

  • Page 186: Overview Of Installing The Srx5600 Services Gateway

    214 Connecting the SRX5600 Services Gateway to a Network for Out-of-Band Management on page 215 Connecting the Alarm Relay Wires to the SRX5600 Services Gateway Craft Interface on page 246 7. Connect the grounding cable as described in “Grounding the SRX5600 Services Gateway” on page 220.

  • Page 187: Unpacking The Srx5600

    230. Unpacking the SRX5600 IN THIS SECTION Tools and Parts Required to Unpack the SRX5600 Services Gateway | 190 Unpacking the SRX5600 Services Gateway | 190 Verifying the SRX5600 Services Gateway Parts Received | 192 Tools and Parts Required to Unpack the SRX5600 Services Gateway...
  • Page 188 5. Slide the remainder of the shipping crate cover off the pallet. 6. Remove the foam covering the top of the device. 7. Remove the accessory box and the SRX5600 Services Gateway Getting Started Guide. 8. Verify the parts received as described in “Verifying the SRX5600 Services Gateway Parts Received”...

  • Page 189: Verifying The Srx5600 Services Gateway Parts Received

    Shipping crate base Verifying the SRX5600 Services Gateway Parts Received A packing list is included in each shipment. Check the parts in the shipment against the items on the packing list. The packing list specifies the part numbers and descriptions of each part in your order.
  • Page 190 Terminal block plug, 3–pole, 5.08 mm spacing, 12A, to connect the device alarms 720-029106 Assy, Cbl, Fiber Optic, Duplex, LC/LC, Multimode, 3 m, UL94V-0 740-011613 SFP, GbE, 850 nm, 550 m Reach, SX, DDM, -10°C to 85°C Temp Label, accessories contents, SRX5600 USB flash drive with Junos OS Read me first document...

  • Page 191: Installing The Srx5600 Mounting Hardware

    Installing the SRX5600 Mounting Hardware IN THIS SECTION Installing the SRX5600 Services Gateway Mounting Hardware for a Rack or Cabinet | 194 Moving the Mounting Brackets for Center-Mounting the SRX5600 Services Gateway | 197 Installing the SRX5600 Services Gateway Mounting Hardware for a Rack or Cabinet The services gateway can be installed in a four-post rack or cabinet or an open-frame rack.
  • Page 192 NOTE: An optional air deflector kit is available that lets you install the SRX5600 Services Gateway in a hot aisle/cold aisle ventilation environment. If you use this air deflector kit, you do not need to install the mounting shelf as described in this section.
  • Page 193 Figure 84: Installing the Front Mounting Hardware for a Four-Post Rack or Cabinet...

  • Page 194: Moving The Mounting Brackets For Center-Mounting The Srx5600 Services Gateway

    Figure 85: Installing the Mounting Hardware for an Open-Frame Rack Moving the Mounting Brackets for Center-Mounting the SRX5600 Services Gateway Two removable mounting brackets are attached to the mounting holes closest to the front of the chassis. You can move the pair of brackets to another position on the side of the chassis for center-mounting the services gateway.

  • Page 195: Installing The Srx5600 Using A Mechanical Lift

    Installing the SRX5600 Using a Mechanical Lift IN THIS SECTION Tools Required to Install the SRX5600 Services Gateway with a Mechanical Lift | 198 Installing the SRX5600 Services Gateway Using a Mechanical Lift | 199 Tools Required to Install the SRX5600 Services Gateway with a Mechanical...

  • Page 196: Installing The Srx5600 Services Gateway Using A Mechanical Lift

    NOTE: An optional air deflector kit is available that lets you install the SRX5600 Services Gateway in a hot aisle/cold aisle ventilation environment. To install the services gateway using a lift (see...
  • Page 197 8. Install a mounting screw into each of the open mounting holes aligned with the rack, starting from the bottom. 9. Visually inspect the alignment of the services gateway. If the services gateway is installed properly in the rack, all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the device should be level.

  • Page 198: Installing The Srx5600 Without A Mechanical Lift

    Removing Components from the SRX5600 Chassis Before Installing It Without a Lift | 202 Installing the SRX5600 Services Gateway Chassis in the Rack Manually | 207 Reinstalling Components in the SRX5600 Services Gateway Chassis After Installing It Without a Lift | 209 Overview of Installing the SRX5600 Services Gateway Without a Mechanical...

  • Page 199: Tools Required To Install The Srx5600 Services Gateway Without A Mechanical Lift

    With components removed, the chassis weighs approximately 65 lb (29 kg). Removing the Power Supplies Before Installing the SRX5600 Services Gateway Without a Lift | 202 Removing the Fan Tray Before Installing an SRX5600 Services Gateway Without a Lift | 203...

  • Page 200: Removing The Fan Tray Before Installing An Srx5600 Services Gateway Without A Lift

    Figure 87: Removing a Power Supply Before Installing the Device Removing the Fan Tray Before Installing an SRX5600 Services Gateway Without a Lift To remove the fan tray (see Figure 88 on page 204): 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 201: Removing Cards Before Installing An Srx5600 Services Gateway Without A Lift

    Figure 88: Removing the Fan Tray Removing Cards Before Installing an SRX5600 Services Gateway Without a Lift The services gateway holds up to six cards (IOCs, Flex IOCs, MPCs, SCBs, and SPCs), which are installed horizontally in the front of the device. Each card weighs up to 18.3 lb (8.3 kg), be prepared to accept its full weight.
  • Page 202 WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cable connected to a transceiver emit laser light that can damage your eyes. CAUTION: Do not leave a fiber-optic transceiver uncovered except when inserting or removing cable.
  • Page 203 CAUTION: The weight of the card is concentrated in the back end. Be prepared to accept the full weight—up to 18.3 lb (8.3 kg)—as you slide the card out of the chassis. When the card is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors.

  • Page 204: Installing The Srx5600 Services Gateway Chassis In The Rack Manually

    Installing the SRX5600 Services Gateway Chassis in the Rack Manually To install the device in the rack (see Figure 90 on page 208): CAUTION: If you are installing more than one services gateway in a rack, install the lowest one first. Installing a services gateway in an upper position in a rack or cabinet requires a lift.
  • Page 205 5. Install a mounting screw into each of the open mounting holes aligned with the rack, starting from the bottom. 6. Visually inspect the alignment of the services gateway. If the services gateway is installed properly in the rack, all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the services gateway should be level.

  • Page 206: Reinstalling Components In The Srx5600 Services Gateway Chassis After Installing It Without A Lift

    Reinstalling Power Supplies After Installing the SRX5600 Services Gateway Without a Lift | 209 Reinstalling the Fan Tray After Installing the SRX5600 Services Gateway Without a Lift | 210 Reinstalling SCBs After Installing the SRX5600 Services Gateway Without a Lift | 211...

  • Page 207: Reinstalling The Fan Tray After Installing The Srx5600 Services Gateway Without A Lift

    Figure 91: Reinstalling a Power Supply Reinstalling the Fan Tray After Installing the SRX5600 Services Gateway Without a Lift To reinstall the fan tray (see Figure 92 on page 211): 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 208: Reinstalling Scbs After Installing The Srx5600 Services Gateway Without A Lift

    Figure 92: Reinstalling the Fan Tray Reinstalling SCBs After Installing the SRX5600 Services Gateway Without a Lift To reinstall an SCB (see Figure 93 on page 212): CAUTION: Before removing or replacing an SCB, ensure that the ejector handles are stored horizontally and pressed toward the center of the SCB.

  • Page 209: Reinstalling Iocs, Flex Iocs, And Spcs After Installing The Srx5600 Services Gateway Without A Lift

    Figure 93: Reinstalling an SCB SC B Reinstalling IOCs, Flex IOCs, and SPCs After Installing the SRX5600 Services Gateway Without a Lift To reinstall IOCs, Flex IOCs, MPCs, and SPCs, follow this procedure for each card (see Figure 94 on page 213): 1.

  • Page 210: Connecting The Srx5600 To External Devices

    IN THIS SECTION Tools and Parts Required for SRX5600 Services Gateway Connections | 213 Connecting the SRX5600 Services Gateway to a Management Console or an Auxiliary Device | 214 Connecting the SRX5600 Services Gateway to a Network for Out-of-Band Management | 215...

  • Page 211: Connecting The Srx5600 Services Gateway To A Management Console Or An Auxiliary Device

    Wire cutters Pliers Electrostatic discharge (ESD) grounding wrist strap Connecting the SRX5600 Services Gateway to a Management Console or an Auxiliary Device To use a system console to configure and manage the Routing Engine, connect it to the appropriate CONSOLE port on the Routing Engine. To use a laptop, modem, or other auxiliary device, connect it to the AUX port on the Routing Engine.

  • Page 212: Connecting The Srx5600 Services Gateway To A Network For Out-Of-Band Management

    Data bits—8 Stop bits—1 Flow control—none Connecting the SRX5600 Services Gateway to a Network for Out-of-Band Management To connect the services gateway Routing Engine to a network for out-of-band management, connect an Ethernet cable with RJ-45 connectors to the ETHERNET port on the Routing Engine. One Ethernet cable is provided with the services gateway.

  • Page 213: Connecting An Srx5600 Services Gateway To An External Alarm-Reporting Device

    Connecting an SRX5600 Services Gateway to an External Alarm-Reporting Device To connect the services gateway to external alarm-reporting devices, attach wires to the RED ALARM and YELLOW ALARM relay contacts on the craft interface. (See Figure 99 on page 216.) A system condition that triggers the red or yellow alarm LED on the craft interface also activates the corresponding alarm relay contact.

  • Page 214: Connecting Network Cables To Srx5600 Services Gateway Iocs And Port Modules

    4. Attach the other end of the wires to the external device. To attach a reporting device for the other kind of alarm, repeat the procedure. Connecting Network Cables to SRX5600 Services Gateway IOCs and Port Modules To connect the IOCs, MPC, or port modules to the network (see...
  • Page 215 CAUTION: Do not leave a fiber-optic transceiver uncovered except when inserting or removing a cable. The safety cap keeps the port clean and prevents accidental exposure to laser light. 3. Insert the cable connector into the cable connector port on the faceplate. NOTE: The XFP cages and optics on the components are industry standard parts that have limited tactile feedback for insertion of optics and fiber.

  • Page 216: Connecting The Srx5600 To Power

    Connecting the SRX5600 to Power IN THIS SECTION Tools and Parts Required for SRX5600 Services Gateway Grounding and Power Connections | 219 Grounding the SRX5600 Services Gateway | 220 Connecting Power to an AC-Powered SRX5600 Services Gateway | 221 Powering On an AC-Powered SRX5600 Services Gateway | 223...

  • Page 217: Grounding The Srx5600 Services Gateway

    Grounding the SRX5600 Services Gateway WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. You ground the device by connecting a grounding cable to earth ground and then attaching it to the chassis grounding points using UNC 1/4-20 two screws.

  • Page 218: Connecting Power To An Ac-Powered Srx5600 Services Gateway

    9. Dress the grounding cable and verify that it does not touch or block access to device components, and that it does not drape where people could trip on it. Connecting Power to an AC-Powered SRX5600 Services Gateway WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power.
  • Page 219 To connect the AC power cords to the device for each power supply (see Figure 103 on page 222): 1. Locate or obtain the power cords you will use with the services gateway. The power cords must have a plug appropriate for your geographical location. 2.

  • Page 220: Powering On An Ac-Powered Srx5600 Services Gateway

    Powering On an AC-Powered SRX5600 Services Gateway To power on an AC-powered services gateway: 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. 2. Verify that the power supplies are fully inserted in the chassis.

  • Page 221: Connecting Power To A Dc-Powered Srx5600 Services Gateway

    Connecting Power to a DC-Powered SRX5600 Services Gateway WARNING: Before performing DC power procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off position, and tape the switch handle of the circuit breaker in the off position.
  • Page 222 Figure 104: DC High-Capacity Power Supply Input Mode Switch 5. Remove the clear plastic cover protecting the terminal studs on the faceplate. 6. Verify that the DC power cables are correctly labeled before making connections to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the –48V and RTN DC cables to chassis ground: The cable with very large resistance (indicating an open circuit) to chassis ground is –48V.
  • Page 223 feeds derived from feed B. This configuration provides the commonly deployed A/B feed redundancy for the system. 9. Route the power cables along the cable restraint toward the left or right corner of the chassis. If needed, thread plastic cable ties, which you must provide, through the openings on the cable restraint to hold the power cables in place.

  • Page 224: Powering On A Dc-Powered Srx5600 Services Gateway

    Powering On a DC-Powered SRX5600 Services Gateway To power on a DC-powered services gateway: 1. Verify that an external management device is connected to one of the Routing Engine ports (AUX, CONSOLE, or ETHERNET). 2. Turn on the power to the external management device.

  • Page 225: Powering Off The Srx5600 Services Gateway

    Junos OS image on the CompactFlash card. After powering on a power supply, wait at least 60 seconds before turning it off. Powering Off the SRX5600 Services Gateway NOTE: After powering off a power supply, wait at least 60 seconds before turning it back on.

  • Page 226: Performing The Initial Software Configuration For The Srx5600

    On a DC-powered services gateway, switch the circuit breaker on each power supply to the off position (OFF). RELATED DOCUMENTATION General Safety Guidelines and Warnings | 421 Preventing Electrostatic Discharge Damage to the SRX5600 Services Gateway Performing the Initial Software Configuration for the SRX5600 IN THIS SECTION...

  • Page 227: Initially Configuring The Srx5600 Services Gateway

    IP address of a DNS server Password for the root user Initially Configuring the SRX5600 Services Gateway This procedure connects the device to the network but does not enable it to forward traffic. For complete information about enabling the device to forward traffic, including examples, see the appropriate Junos OS configuration guides.
  • Page 228 [edit] root@# set system root-authentication plain-text-password New password: password Retype new password: password 6. Configure an administrator account on the device. When prompted, enter the password for the administrator account. [edit] root@# set system login user admin class super-user authentication plain-text-password New password: password Retype new password: password 7.
  • Page 229 12. Configure the default route. [edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway 13. Configure basic security zones and bind them to traffic interfaces. [edit] admin@# set security zones security-zone trust interfaces ge-6/3/5 admin@# set security zones security-zone untrust interfaces ge-6/2/0 14.
  • Page 230 { http { interface ge-0/0/0.0; syslog { user * { any emergency; file messages { any any; authorization info; file interactive-commands { interactive-commands any; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; interfaces { ge-0/0/0 { unit 0; ge-6/2/0 {...
  • Page 231 unit 0 { family inet { address 5.1.1.1/24; ge-6/3/5 { unit 0 { family inet { address 192.1.1.1/24; fxp0 { unit 0 { family inet { address 192.168.10.2/24; routing-options { static { route 0.0.0.0/0 next-hop 5.1.1.2; security { zones { security-zone trust { interfaces { ge-6/3/5.0;...

  • Page 232: Performing Initial Software Configuration Using J-Web

    destination-address any; application any; then { permit; 18. Commit the configuration to activate it on the device. [edit] admin@# commit 19. Optionally, configure additional properties by adding the necessary configuration statements. Then commit the changes to activate them on the device. [edit] admin@# commit 20.

  • Page 233: Configuring Root Authentication And The Management Interface From The Cli

    Configuring Root Authentication and the Management Interface from the CLI Before you can use J-Web to configure your device, you must access the CLI to perform the initial configuration. To configure root authentication and the management interface: 1. Log in as root. There is no password. 2.

  • Page 234: Configuring Interfaces, Zones, And Policies With J-Web

    Configuring Security Policies | 239 You can configure hostnames, interfaces, zones, and security policies using J-Web. NOTE: You cannot use J-Web to configure SRX5400, SRX5600, and SRX5800 Services Gateways in Junos OS Release 15.1X49-D10. Before you begin: Ensure you have configured the IP address, root authentication, and default route. See “Configuring...
  • Page 235 Configuring the Hostname To configure the hostname: 1. Launch a Web browser from the management device. 2. Enter the IP address of the device in the URL address field. 3. Specify the default username as root and enter the password. See “Configuring Root Authentication and the Management Interface from the CLI”...
  • Page 236 A message appears after your configuration changes are applied successfully. 9. Click OK. You have successfully configured the physical interface. Repeat these steps to configure the second physical interface for the device. Configuring Zones and Assigning Interfaces To assign interfaces within a trust zone and an untrust zone: 1.
  • Page 237 3. Configure the source IP address by selecting any listed under Available and moving it under Selected. 4. Configure the destination IP address by selecting any listed under Available and moving it under Selected. 5. Configure the application by selecting any listed under Available and moving it under Selected. 6.

  • Page 238: Maintaining Components

    Maintaining the SRX5600 Power System | 253 Maintaining the SRX5600 Host Subsystem | 269 Maintaining the SRX5600 Line Cards and Modules | 302 Maintaining the SRX5600 Cables and Connectors | 342 Replacing a Routing Engine in an SRX Series High-End Chassis Cluster | 355...

  • Page 240: Maintaining The Srx5600 Chassis

    Replacing the SRX5600 Services Gateway Craft Interface To replace the craft interface, perform the following procedures in sequence: Disconnecting the Alarm Relay Wires from the SRX5600 Services Gateway Craft Interface | 243 Removing the SRX5600 Services Gateway Craft Interface | 244...

  • Page 241: Removing The Srx5600 Services Gateway Craft Interface

    4. Using the 2.5-mm flat-blade screwdriver, loosen the small screws on the side of the terminal block. Remove existing wires from the slots in the front of the block. Figure 106: Alarm Relay Contacts Removing the SRX5600 Services Gateway Craft Interface To remove the craft interface (see Figure 107 on page 245): 1.

  • Page 242: Installing The Srx5600 Services Gateway Craft Interface

    5. Disconnect the ribbon cable from the back of the faceplate by gently pressing on both sides of the latch with your thumb and forefinger. Remove the craft interface from the chassis. Figure 107: Removing the Craft Interface Installing the SRX5600 Services Gateway Craft Interface To install the craft interface (see Figure 108 on page 246): 1.

  • Page 243: Connecting The Alarm Relay Wires To The Srx5600 Services Gateway Craft Interface

    Figure 108: Installing a Craft Interface Connecting the Alarm Relay Wires to the SRX5600 Services Gateway Craft Interface Before you begin connecting the alarm relay wires to the services gateway and an alarm-reporting device Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...

  • Page 244: Maintaining The Srx5600 Cooling System

    Figure 109: Alarm Relay Contacts Maintaining the SRX5600 Cooling System IN THIS SECTION Maintaining the Fan Tray on the SRX5600 Services Gateway | 247 Replacing the SRX5600 Services Gateway Fan Tray | 248 Maintaining the Air Filter on the SRX5600 Services Gateway | 250...

  • Page 245: Replacing The Srx5600 Services Gateway Fan Tray

    Replacing the SRX5600 Services Gateway Fan Tray To replace a fan tray, perform the following procedures in sequence: Removing the SRX5600 Services Gateway Fan Tray | 248 Installing the SRX5600 Services Gateway Fan Tray | 249 Removing the SRX5600 Services Gateway Fan Tray...

  • Page 246: Installing The Srx5600 Services Gateway Fan Tray

    Figure 110: Removing the Fan Tray Installing the SRX5600 Services Gateway Fan Tray To install the fan tray (see Figure 111 on page 250): 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 247: Maintaining The Air Filter On The Srx5600 Services Gateway

    Discard used filters, do not attempt to clean and reuse them. NOTE: Air filters will not be replaced by Juniper Networks under the Juniper Networks Hardware Replacement Support Plan, you need to purchase them for replacement.

  • Page 248: Replacing The Srx5600 Services Gateway Air Filter

    Replacing the SRX5600 Services Gateway Air Filter To replace the air filter, perform the following procedures in sequence: Removing the SRX5600 Services Gateway Air Filter | 251 Installing the SRX5600 Services Gateway Air Filter | 252 Removing the SRX5600 Services Gateway Air Filter...

  • Page 249: Installing The Srx5600 Services Gateway Air Filter

    3. Remove the air filter cover. 4. Slide the air filter out of the chassis. Figure 112: Removing the Air Filter Installing the SRX5600 Services Gateway Air Filter To install the air filter (see Figure 113 on page 253): 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 250: Maintaining The Srx5600 Power System

    Replacing an SRX5600 Services Gateway DC Power Supply | 259 Replacing an SRX5600 Services Gateway DC Power Supply Cable | 263 Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies | 265 Maintaining SRX5600 Services Gateway Power Supplies Purpose For optimum services gateway performance, verify the condition of the power supplies.

  • Page 251: Replacing An Srx5600 Services Gateway Ac Power Supply

    Replacing an SRX5600 Services Gateway AC Power Supply To replace an AC power supply, perform the following procedures: Removing an SRX5600 Services Gateway AC Power Supply | 255 Installing an SRX5600 Services Gateway AC Power Supply | 256...

  • Page 252: Removing An Srx5600 Services Gateway Ac Power Supply

    Removing an SRX5600 Services Gateway AC Power Supply The power supplies are located at the rear of the chassis. Each AC power supply weighs approximately 5.0 lb (2.3 kg). CAUTION: Do not leave a power supply slot empty for more than 30 minutes while the services gateway is operational.

  • Page 253: Installing An Srx5600 Services Gateway Ac Power Supply

    Figure 114: Removing an AC Power Supply Installing an SRX5600 Services Gateway AC Power Supply To install an AC power supply (see Figure 115 on page 257): 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 254: Replacing An Srx5600 Services Gateway Ac Power Supply Cord

    Figure 115: Installing an AC Power Supply Replacing an SRX5600 Services Gateway AC Power Supply Cord To replace an SRX5600 Services Gateway AC power supply cord, perform the following procedures: Disconnecting an SRX5600 Services Gateway AC Power Supply Cord | 258...

  • Page 255: Disconnecting An Srx5600 Services Gateway Ac Power Supply Cord

    Disconnecting an SRX5600 Services Gateway AC Power Supply Cord WARNING: Before working on an AC-powered device or near power supplies, unplug the power cord. To disconnect the AC power cord: 1. Unplug the power cord from the power source receptacle.

  • Page 256: Replacing An Srx5600 Services Gateway Dc Power Supply

    Replacing an SRX5600 Services Gateway DC Power Supply To replace a DC power supply, perform the following procedures: Removing an SRX5600 Services Gateway DC Power Supply | 259 Installing an SRX5600 Services Gateway DC Power Supply | 260 Removing an SRX5600 Services Gateway DC Power Supply The power supplies are located at the rear of the chassis.

  • Page 257: Installing An Srx5600 Services Gateway Dc Power Supply

    10. Pull the power supply straight out of the chassis. Figure 116: Removing a DC Power Supply Installing an SRX5600 Services Gateway DC Power Supply To install a DC power supply: 1. Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable leads might become active during installation.
  • Page 258 Figure 117: DC High-Capacity Power Supply Input Mode Switch 5. Using both hands, slide the power supply straight into the chassis until the power supply is fully seated in the chassis slot. The power supply faceplate should be flush with any adjacent power supply faceplate (see Figure 118 on page 261).
  • Page 259 9. Secure each power cable lug to the terminal studs, first with the washer, then with the nut. Apply between 23 lb-in. (2.6 Nm) and 25 lb-in. (2.8 Nm) of torque to each nut. (see Figure 119 on page 262). a.

  • Page 260: Replacing An Srx5600 Services Gateway Dc Power Supply Cable

    An SCB must be present for the PWR OK LED to go on. Replacing an SRX5600 Services Gateway DC Power Supply Cable To replace an SRX5600 Services Gateway DC power supply cable, perform the following procedures: Disconnecting an SRX5600 Services Gateway DC Power Supply Cable | 263...

  • Page 261: Connecting An Srx5600 Services Gateway Dc Power Supply Cable

    9. Loosen the captive screws on the power supply faceplate. 10. Carefully move the power cable out of the way. Connecting an SRX5600 Services Gateway DC Power Supply Cable To install a replacement power cable for a DC power supply (see...

  • Page 262: Upgrading An Srx5600 Services Gateway From Standard-Capacity To High-Capacity Power Supplies

    Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies You can replace the standard-capacity power supplies in the SRX5600 Services Gateway with either two or four high-capacity power supplies of the same input type (AC or DC). Two high-capacity power supplies...
  • Page 263 2. If you have not already done so, replace the standard-capacity fan tray with a high-capacity fan tray. For more information, see “Replacing the SRX5600 Services Gateway Fan Tray” on page 248. 3. Check the LEDs on all of the installed power supply faceplates to ensure that they are operating properly.
  • Page 264 9. Check the LEDs on both high-capacity AC power supply faceplates to ensure that they are operating properly. 10. Remove the remaining two standard-capacity AC power supply from the services gateway. See “Removing an SRX5600 Services Gateway AC Power Supply” on page 255 for instructions on removing AC power supplies.
  • Page 265 5. Remove both of the standard-capacity power supplies from the services gateway. See “Removing an SRX5600 Services Gateway AC Power Supply” on page 255 for instructions on removing DC power supplies. 6. If you are installing four high-capacity DC power supply to achieve 2+2 redundancy, install high-capacity DC power supplies in the slots vacated in Step 5.

  • Page 266: Maintaining The Srx5600 Host Subsystem

    Maintaining the SRX5600 Host Subsystem IN THIS SECTION Maintaining the SRX5600 Services Gateway Host Subsystem and SCBs | 269 Taking the SRX5600 Services Gateway Host Subsystem Offline | 271 Operating and Positioning the SRX5600 Services Gateway SCB Ejectors | 272...
  • Page 267 user@host> show chassis routing-engine Routing Engine status: Slot 0: Current state Master Election priority Master (default) Temperature 36 degrees C / 96 degrees F CPU temperature 33 degrees C / 91 degrees F DRAM 2048 MB Memory utilization 12 percent CPU utilization: User 1 percent...

  • Page 268: Taking The Srx5600 Services Gateway Host Subsystem Offline

    For more information about using the CLI, see the Explorer. Taking the SRX5600 Services Gateway Host Subsystem Offline The host subsystem is composed of an SCB with a Routing Engine installed in it. You take the host subsystem offline and bring it online as a unit. Before you replace an SCB or a Routing Engine, you must take the host subsystem offline.

  • Page 269: Operating And Positioning The Srx5600 Services Gateway Scb Ejectors

    Operating and Positioning the SRX5600 Services Gateway SCB Ejectors When removing or inserting an SCB, ensure that the SCBs or blank panels in adjacent slots are fully inserted to avoid hitting them with the ejector handles. The ejector handles require that all adjacent components be completely inserted so the ejector handles do not hit them, which could result in damage.

  • Page 270: Removing An Srx5600 Services Gateway Scb

    Removing an SRX5600 Services Gateway SCB To remove an SCB (see Figure 121 on page 274): NOTE: The SCB and Routing Engine are removed as a unit. You can also remove the Routing Engine separately. CAUTION: Before removing an SCB, ensure that you know how to operate the ejector handles properly to avoid damage to the equipment.

  • Page 271: Installing An Srx5600 Services Gateway Scb

    11. If you are not replacing the SCB now, install a blank panel over the empty slot. Figure 121: Removing an SCB SC B Ejectors Installing an SRX5600 Services Gateway SCB To install an SCB (see Figure 122 on page 276): 1.
  • Page 272 3. Physically turn off the power and remove the power cables from the chassis. 4. Carefully align the sides of the SCB with the guides inside the chassis. 5. Slide the SCB into the chassis until you feel resistance, carefully ensuring that it is correctly aligned. 6.

  • Page 273: Replacing The Srx5600 Services Gateway Routing Engine

    The procedure to replace a Routing Engine applies to both SRX5K-RE-13-20, SRX5K-RE-1800X4, and and SRX5K-RE-128G. Removing the SRX5600 Services Gateway Routing Engine | 276 Installing the SRX5600 Services Gateway Routing Engine | 277 Removing the SRX5600 Services Gateway Routing Engine...

  • Page 274: Installing The Srx5600 Services Gateway Routing Engine

    Figure 123: Removing a Routing Engine SC B SC B Routing Engine Installing the SRX5600 Services Gateway Routing Engine To install a Routing Engine into an SCB (see Figure 124 on page 279): NOTE: If you install only one Routing Engine in the service gateway, you must install it in SCB slot 0 of service gateway chassis.
  • Page 275 3. Ensure that the ejector handles are not in the locked position. If necessary, flip the ejector handles outward. 4. Place one hand underneath the Routing Engine to support it. 5. Carefully align the sides of the Routing Engine with the guides inside the opening on the SCB. 6.
  • Page 276 Figure 124: Installing the Routing Engine 10. If the Routing Engine was replaced on one of the nodes in a chassis cluster, then you need to copy certificates and key pairs from the other node in the cluster: a. Start the shell interface as a root user on both nodes of the cluster. b.

  • Page 277: Low Impact Hardware Upgrade For Scb3 And Ioc3

    1. Ensure that the secondary node does not have an impact on network traffic by isolating it from the network when LICU is in progress. For this, disable the physical interfaces (RETH child interfaces) on the secondary node. For SRX5400 Services Gateways admin@cluster#set interfaces xe-5/0/0 disable admin@cluster#set interfaces xe-5/1/0 disable For SRX5600 Services Gateways admin@cluster#set interfaces xe-9/0/0 disable...
  • Page 278 admin@cluster#set interfaces xe-9/0/4 disable For SRX5800 Services Gateways admin@cluster#set interfaces xe-13/0/0 disable admin@cluster#set interfaces xe-13/1/0 disable 2. Disable SYN bit and TCP sequence number checking for the secondary node to take over. admin@cluster#set security flow tcp-session no-syn-check admin@cluster#set security flow tcp-session no-sequence-check 3.
  • Page 279 Powering On an AC-Powered SRX5400 Services Gateway Powering On a DC-Powered SRX5400 Services Gateway Powering On an AC-Powered SRX5600 Services Gateway on page 223 Powering On a DC-Powered SRX5600 Services Gateway on page 227 Powering On an AC-Powered SRX5800 Services Gateway Powering On a DC-Powered SRX5800 Services Gateway 8.
  • Page 280 For more information about mounting the USB drive on the device, refer to KB articles KB12880 and KB12022 from the Knowledge Base. Perform this step when you upgrade the MPC.
  • Page 281 a. Configure the control port, fabric port, and RETH child ports on the secondary node. [edit] root@clustert# show | display set | grep delete delete groups global interfaces fab1 delete groups global interfaces fab0 delete interfaces reth0 delete interfaces reth1 delete interfaces xe-3/0/5 gigether-options redundant-parent reth0 delete interfaces xe-9/0/5 gigether-options redundant-parent reth0 delete interfaces xe-3/0/9 gigether-options redundant-parent reth...
  • Page 282 set interfaces reth1 vlan-tagging set interfaces reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 unit 0 vlan-id 30 set interfaces reth1 unit 0 family inet address 55.55.55.1/8 9. Verify that the secondary node is running the upgraded Junos OS release. root@cluster> show version node1 Hostname: <displays the hostname>...
  • Page 283 For SRX5400 Services Gateways admin@cluster#set interfaces xe-2/0/0 disable admin@cluster#set interfaces xe-2/1/0 disable admin@cluster#delete interfaces xe-5/0/0 disable admin@cluster#delete interfaces xe-5/1/0 disable For SRX5600 Services Gateways admin@cluster#set interfaces xe-2/0/0 disable admin@cluster#set interfaces xe-2/0/4 disable admin@cluster#delete interfaces xe-9/0/0 disable admin@cluster#delete interfaces xe-9/0/4 disable...
  • Page 284 Powering On an AC-Powered SRX5400 Services Gateway Powering On a DC-Powered SRX5400 Services Gateway Powering On an AC-Powered SRX5600 Services Gateway on page 223 Powering On a DC-Powered SRX5600 Services Gateway on page 227 Powering On an AC-Powered SRX5800 Services Gateway Powering On a DC-Powered SRX5800 Services Gateway 16.
  • Page 285 c. Upload the configuration to RE2 from the USB device.
  • Page 286 For more information about mounting the USB drive on the device, refer to KB articles KB12880 and KB12022 from the Knowledge Base. Perform this step when you upgrade the MPC.
  • Page 287 a. Configure the control port, fabric port, and RETH child ports on the primary node. [edit] root@clustert# show | display set | grep delete delete groups global interfaces fab1 delete groups global interfaces fab0 delete interfaces reth0 delete interfaces reth1 delete interfaces xe-3/0/5 gigether-options redundant-parent reth0 delete interfaces xe-9/0/5 gigether-options redundant-parent reth0 delete interfaces xe-3/0/9 gigether-options redundant-parent reth0...
  • Page 288 available to take over network traffic. root@cluster> show version node1 Hostname: <displays the hostname> Model: <displays the model number> Junos: 15.1X49-D10 JUNOS Software Release [15.1X49-D10] root@cluster> show chassis cluster status Monitor Failure codes: Cold Sync monitoring Fabric Connection monitoring GRES monitoring Hardware monitoring Interface monitoring IP monitoring...
  • Page 289 For SRX5400 Services Gateways admin@cluster#set interfaces xe-5/0/0 disable admin@cluster#set interfaces xe-5/1/0 disable admin@cluster#delete interfaces xe-2/0/0 disable admin@cluster#delete interfaces xe-2/1/0 disable For SRX5600 Services Gateways admin@cluster#set interfaces xe-9/0/0 disable admin@cluster#set interfaces xe-9/0/4 disable admin@cluster#delete interfaces xe-2/0/0 disable admin@cluster#delete interfaces xe-2/0/4 disable...
  • Page 290 Powering On an AC-Powered SRX5400 Services Gateway Powering On a DC-Powered SRX5400 Services Gateway Powering On an AC-Powered SRX5600 Services Gateway on page 223 Powering On a DC-Powered SRX5600 Services Gateway on page 227 Powering On an AC-Powered SRX5800 Services Gateway Powering On a DC-Powered SRX5800 Services Gateway a.
  • Page 291 24. Commit the configuration. root@#commit 25. After the secondary node is up, verify that it synchronizes with the primary node. admin@cluster#delete interfaces xe-4/0/5 disable admin@cluster#delete interfaces xe-10/0/5 disable 26. Enable SYN bit and TCP sequence number checking for the secondary node. admin@cluster#delete security flow tcp-session no-syn-check admin@cluster#delete security flow tcp-session no-sequence-check 27.
  • Page 292 node0: -------------------------------------------------------------------------- Slot 1 Online SRX5k IOC II PIC 0 Online 1x 100GE CFP PIC 2 Online 2x 40GE QSFP+ Slot 2 Online SRX5k SPC II PIC 0 Online SPU Cp PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow...
  • Page 293 Slot 5 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP+ PIC 2 Online 2x 40GE QSFP+ root@cluster> show chassis cluster status Cold Sync monitoring Fabric Connection monitoring GRES monitoring Hardware monitoring Interface monitoring IP monitoring Loopback monitoring Mbuf monitoring Nexthop monitoring NPC monitoring SPU monitoring...
  • Page 294 node1: -------------------------------------------------------------------------- Flow session Flow session CP session CP session FPC PIC CPU Mem current maximum current maximum --------------------------------------------------------------------------- 1999999 104857600 289065 4194304 289062 4194304 289060 4194304 289061 4194304 281249 4194304 281251 4194304 281251 4194304 Enable the traffic interfaces on the secondary node. root@cluster>...

  • Page 295: In-Service Hardware Upgrade For Srx5K-Re-1800X4 And Srx5K-Scbe Or Srx5K-Re-1800X4 And Srx5K-Scb3 In A Chassis Cluster

    While performing the ISHU, in the SRX5800 service gateway, the second SCB can contain a Routing Engine but the third SCB must not contain a Routing Engine. In the SRX5600 services gateway, the second SCB can contain a Routing Engine.
  • Page 296 12.1X47-D15 or later for SRX5K-SCBE with SRX5K-RE-1800X4 and 15.1X49-D10 or later for SRX5K-SCB3 with SRX5K-RE-1800X4. For more information on cards supported on the services gateways see Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways. For more information about unified in-service software upgrade (unified ISSU), see...
  • Page 297 Powering On an AC-Powered SRX5400 Services Gateway Powering On a DC-Powered SRX5400 Services Gateway Powering On an AC-Powered SRX5600 Services Gateway on page 223 Powering On a DC-Powered SRX5600 Services Gateway on page 227 Powering On an AC-Powered SRX5800 Services Gateway Powering On a DC-Powered SRX5800 Services Gateway 6.
  • Page 298 After the node boots, it must join the cluster as a secondary node. To verify, issue the following command admin@cluster> show chassis cluster status NOTE: The command output must indicate that the node priority is set to a non-zero value, and that the cluster contains a primary node and a secondary node. 12.

  • Page 299: Maintaining The Srx5600 Line Cards And Modules

    Replacing SRX5600 Services Gateway Flex IOCs | 313 Replacing SRX5600 Services Gateway SPCs | 318 Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis Cluster | 323 In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster | 326...

  • Page 300: Maintaining Interface Cards And Spcs On The Srx5600 Services Gateway

    Maintaining Interface Cards and SPCs on the SRX5600 Services Gateway Purpose For optimum services gateway performance, verify the condition of the Services Processing Cards (SPCs) and interface cards (IOCs, Flex IOCs and MPCs). The services gateway can have up to 6 SPCs and interface cards mounted horizontally in the card cage at the front of the chassis.
  • Page 301 Slot 1 information: State Online Temperature 43 degrees C / 109 degrees F Total CPU DRAM 1024 MB Total RLDRAM 256 MB Total DDR DRAM 4096 MB Start time: 2007-07-10 12:28:38 PDT Uptime: 1 hour, 33 minutes, 47 seconds Slot 2 information: State Online Temperature...

  • Page 302: Holding An Srx5600 Services Gateway Card

    Offline For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Holding an SRX5600 Services Gateway Card When carrying a card, you can hold it either vertically or horizontally. NOTE: A card weighs up to 18.3 lb (8.3 kg).
  • Page 303 You can rest the faceplate of the card against your body as you carry it. As you carry the card, do not bump it against anything. Card components are fragile. Never hold or grasp the card anywhere except those places that this topic indicates are appropriate. In particular, never grasp the connector edge, especially at the power connector in the corner where the connector and bottom edges meet (see Figure 125 on page...

  • Page 304: Storing An Srx5600 Services Gateway Card

    If you must rest the card temporarily on an edge while changing its orientation between vertical and horizontal, use your hand as a cushion between the edge and the surface. Storing an SRX5600 Services Gateway Card You must store a card as follows:...

  • Page 305: Replacing Srx5600 Services Gateway Iocs

    Never stack a card under or on top of any other component. Replacing SRX5600 Services Gateway IOCs To replace an IOC, perform the following procedures: Removing an SRX5600 Services Gateway IOC | 308 Installing an SRX5600 Services Gateway IOC | 310 Removing an SRX5600 Services Gateway IOC An IOC weighs up to 13.1 lb (5.9 kg).
  • Page 306 6. Physically turn off the power and remove the power cables from the chassis. 7. Disconnect the cables from the IOC. If the IOC uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap. Arrange the disconnected cables in the cable management system to prevent the cables from developing stress points.

  • Page 307: Installing An Srx5600 Services Gateway Ioc

    IOC from a different slot, or inserting an IOC into a different slot. Figure 127: Removing an IOC SC B SC B Installing an SRX5600 Services Gateway IOC An IOC weighs up to 14.5 lb (6.6 kg). Be prepared to accept its full weight.
  • Page 308 To install an IOC (see Figure 128 on page 313): 1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end of the strap to the ESD point on the chassis. 2.
  • Page 309 Issue the following CLI command: user@host>request chassis fpc slot slot-number online For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. CAUTION: After the OK LED turns green, wait at least 30 seconds before removing the IOC again, removing an IOCfrom a different slot, or inserting an IOC in a different slot.

  • Page 310: Replacing Srx5600 Services Gateway Flex Iocs

    Replacing SRX5600 Services Gateway Flex IOCs To replace a Flex IOC, perform the following procedures: Removing an SRX5600 Services Gateway Flex IOC | 313 Installing an SRX5600 Services Gateway Flex IOC | 316 Removing an SRX5600 Services Gateway Flex IOC...
  • Page 311 Issue the following CLI command: user@host>request chassis fpc slot slot-number offline For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. 4. Power off the services gateway using the command request system power-off. user@host# request system power-off NOTE: Wait until a message appears on the console confirming that the services stopped.
  • Page 312 CAUTION: The weight of the Flex IOC is concentrated in the back end. Be prepared to accept the full weight—up to 13.1 lb (5.9 kg)—as you slide the Flex IOC out of the chassis. When the Flex IOC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors.

  • Page 313: Installing An Srx5600 Services Gateway Flex Ioc

    Installing an SRX5600 Services Gateway Flex IOC NOTE: Your services gateway must be running Junos OS Release 9.5R1 or later in order to recognize Flex IOCs and port modules. To install a Flex IOC (see Figure 131 on page 317): 1.
  • Page 314 Issue the following CLI command: user@host>request chassis fpc slot slot-number online For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. CAUTION: After the OK LED turns green, wait at least 30 seconds before removing the card again, removing a card from a different slot, or inserting a card in a different slot.

  • Page 315: Replacing Srx5600 Services Gateway Spcs

    Replacing SRX5600 Services Gateway SPCs To replace an SPC, perform the following procedures: Removing an SRX5600 Services Gateway SPC | 318 Installing an SRX5600 Services Gateway SPC | 320 Removing an SRX5600 Services Gateway SPC An SPC weighs up to 18.3 lb (8.3 kg). Be prepared to accept its full weight.
  • Page 316 CAUTION: Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light. CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  • Page 317: Installing An Srx5600 Services Gateway Spc

    SPCs in the clustered devices without shutting down both of the devices at the same time. This eliminates the network downtime you would otherwise incur while adding SPCs. For more information, see Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis Cluster.
  • Page 318 5. Identify the slot on the services gateway where the SPC will be installed. 6. Verify that each fiber-optic transceiver is covered with a rubber safety cap. If it does not, cover the transceiver with a safety cap. 7. Orient the SPC so that the faceplate faces you, the text on the card is right-side up, and the EMI strip is on the right-hand side.
  • Page 319 14. Power on the services gateway. The OK LED on the power supply faceplate should blink, then light steadily. 15. Verify that the SPC is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands. Figure 133: Installing an SPC Figure 134: Attaching a Cable to an SPC...

  • Page 320: Replacing Spcs In An Operating Srx5400, Srx5600, Or Srx5800 Services Gateways Chassis Cluster

    Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis Cluster If your Services Gateway is part of an operating chassis cluster, you can replace the first-generation SRX5K-SPC-2-10-40 SPCs with the second generation SRX5K-SPC-4-15-320 SPCs by incurring a minimum downtime on your network.
  • Page 321 If your installation does not meet these criteria, use the procedure in Installing an SRX5400 Services Gateway SPC, or “Installing an SRX5600 Services Gateway SPC” on page 320, or Installing an SRX5800 Services Gateway SPC to install SPCs in your services gateway.
  • Page 322 7. Remove the SPC from the powered-off services gateway using the procedure in Removing an SRX5400 Services Gateway SPC, or “Removing an SRX5600 Services Gateway SPC” on page 318, or Removing an SRX5800 Services Gateway SPC. 8. Install the new SPC or SPCs in the powered-off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC, or “Installing an SRX5600 Services Gateway SPC”...

  • Page 323: In-Service Hardware Upgrade For Srx5K-Spc3 In A Chassis Cluster

    More than two SRX5K-SPC3s in the chassis, the CP mode is Full CP mode. The services gateway must already be equipped with high-capacity power supplies and fan trays, and the high-capacity air filters. See “Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies” on page 265 “Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies”...
  • Page 324 7. Install the new SPC3 or SPC3s in the powered-off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC, or “Installing an SRX5600 Services Gateway SPC” on page 320, or Installing an SRX5800 Services Gateway SPC.

  • Page 325: Maintaining Mics And Port Modules On The Srx5600 Services Gateway

    18. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero. Maintaining MICs and Port Modules on the SRX5600 Services Gateway Purpose For optimum services gateway performance, verify the condition of the MICs installed in MPCs, and port modules installed in Flex IOCs.

  • Page 326: Replacing Srx5600 Services Gateway Mics

    Reference at www.juniper.net/documentation/. Replacing SRX5600 Services Gateway MICs To replace an MIC, perform the following procedures: Removing an SRX5600 Services Gateway MIC | 329 Installing an SRX5600 Services Gateway MIC | 331 Removing an SRX5600 Services Gateway MIC The MICs are located in the MPCs installed in the front of the services gateway. A MIC weighs less than 2 lb (0.9 kg).
  • Page 327 WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes. CAUTION: Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable.

  • Page 328: Installing An Srx5600 Services Gateway Mic

    9. If you are not reinstalling a MIC into the emptied MIC slot within a short time, install a blank MIC panel over the slot to maintain proper airflow in the MPC card cage. Installing an SRX5600 Services Gateway MIC To install a MIC: 1.
  • Page 329 CAUTION: Slide the MIC straight into the slot to avoid damaging the components on the MIC. 7. After the MIC is seated in its slot, verify that the ejector knob is engaged by pushing it all the way in toward the MPC faceplate. 8.

  • Page 330: Replacing Srx5600 Services Gateway Port Modules

    Replacing SRX5600 Services Gateway Port Modules To replace a port module, perform the following procedures: Removing an SRX5600 Services Gateway Port Module | 333 Installing an SRX5600 Services Gateway Port Module | 335 Removing an SRX5600 Services Gateway Port Module Port modules are installed in Flex IOCs in the services gateway card cage.
  • Page 331 5. Power off the services gateway. 6. Disconnect the cables from the port module. If the port module uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap. Arrange the disconnected cables in the cable management system to prevent the cables from developing stress points. WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables.

  • Page 332: Installing An Srx5600 Services Gateway Port Module

    Installing an SRX5600 Services Gateway Port Module To install a port module into a Flex IOC (see Figure 138 on page 336): 1.
  • Page 333 7. Orient the port module so that the faceplate faces you. 8. Lift the port module into place and carefully align the right and left edges of the port module with the guides inside the Flex IOC. 9. Slide the port module all the way into the Flex IOC until it is fully seated. 10.

  • Page 334: Replacing Srx5600 Services Gateway Mpcs

    You can also verify that the port module is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands. Replacing SRX5600 Services Gateway MPCs To replace an MPC, perform the following procedures: Removing an SRX5600 Services Gateway MPC | 338 Installing an SRX5600 Services Gateway MPC | 340...

  • Page 335: Removing An Srx5600 Services Gateway Mpc

    Removing an SRX5600 Services Gateway MPC When you remove an MPC, the services gateway continues to function, although the MIC interfaces installed on the MPC being removed no longer function. An MPC installs horizontally in the front of the services gateway. A fully configured MPC can weigh up to 18.35 lb (8.3 kg).
  • Page 336 7. Arrange the disconnected cables in the cable management brackets to prevent the cables from developing stress points. 8. Simultaneously turn both the ejector handles counterclockwise to unseat the MPC. 9. Grasp the handles, and slide the MPC straight out of the card cage halfway. See Figure 139 on page 339.

  • Page 337: Installing An Srx5600 Services Gateway Mpc

    13. If you are not reinstalling an MPC into the emptied line card slots within a short time, install a blank DPC panel over each slot to maintain proper airflow in the card cage. Installing an SRX5600 Services Gateway MPC An MPC installs horizontally in the front of the services gateway. A fully configured MPC can weigh up to 18.35 lb (8.3 kg).
  • Page 338 Figure 140: Installing an MPC in the SRX5600 Services Gateway SC B SC B 10. Slide the MPC all the way into the card cage until you feel resistance. 11. Grasp both ejector handles, and rotate them clockwise simultaneously until the MPC is fully seated.

  • Page 339: Maintaining Srx5600 Services Gateway Network Cables

    IN THIS SECTION Maintaining SRX5600 Services Gateway Network Cables | 342 Replacing the Management Ethernet Cable on the SRX5600 Services Gateway | 344 Replacing the SRX5600 Services Gateway Console or Auxiliary Cable | 345 Replacing an SRX5600 Services Gateway Network Interface Cable | 346...
  • Page 340 On a regular basis: Use the cable managers to support cables and prevent cables from dislodging or developing stress points. Figure 141: Cable Managers Place excess cable out of the way in the cable manager. Do not allow fastened loops of cable to dangle from the connector or cable manager, because this stresses the cable at the fastening point.

  • Page 341: Replacing The Management Ethernet Cable On The Srx5600 Services Gateway

    Use only an approved alcohol-free fiber-optic cable cleaning kit, such as the Opptex Cletop-S Fiber Cleaner. Follow the directions for the cleaning kit you use. Replacing the Management Ethernet Cable on the SRX5600 Services Gateway One Ethernet cable with RJ-45 connectors is provided with the services gateway.

  • Page 342: Replacing The Srx5600 Services Gateway Console Or Auxiliary Cable

    Figure 142: Cable Connector Figure 143: Ethernet Port Replacing the SRX5600 Services Gateway Console or Auxiliary Cable To use a system console to configure and manage the Routing Engine, connect it to the CONSOLE port on the Routing Engine. To use a laptop, modem, or other auxiliary device, connect it to the AUX port on the Routing Engine.

  • Page 343: Replacing An Srx5600 Services Gateway Network Interface Cable

    To replace a network interface cable connected to an IOC, port module, or MIC, perform the following procedures: Removing an SRX5600 Services Gateway Network Interface Cable | 346 Installing an SRX5600 Services Gateway Network Interface Cable | 348 Removing an SRX5600 Services Gateway Network Interface Cable Removing and installing network interface cables does not affect services gateway function, except that the component does not receive or transmit data while its cable is disconnected.
  • Page 344 For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. To take an interface card offline : Press and hold the corresponding online button on the craft interface. The green OK LED next to the button begins to blink.

  • Page 345: Installing An Srx5600 Services Gateway Network Interface Cable

    4. Remove the cable from the cable manager and detach it from the destination port. Installing an SRX5600 Services Gateway Network Interface Cable Before you begin installing a network interface cable: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
  • Page 346 For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. To bring a port module online: Press the port module online button until the PIC LED lights green. Use a narrow-ended tool that fits inside the opening that leads to the button.

  • Page 347: Replacing Srx5600 Services Gateway Xfp And Sfp Transceivers

    Replacing SRX5600 Services Gateway XFP and SFP Transceivers To replace an XFP or SFP transceiver, perform the following procedures: Removing an SRX5600 Services Gateway SFP or XFP Transceiver | 350 Installing an SRX5600 Services Gateway SFP or XFP Transceiver | 352 Removing an SRX5600 Services Gateway SFP or XFP Transceiver Transceivers are installed in a MIC or SPC.
  • Page 348 WARNING: Do not leave a fiber-optic transceiver uncovered except when inserting or removing a cable. The rubber safety cap keeps the port clean and prevents accidental exposure to laser light. 3. Remove the cable connector from the transceiver. Cover the transceiver and the end of each fiber-optic cable connector with a rubber safety cap immediately after disconnecting the fiber-optic cables.

  • Page 349: Installing An Srx5600 Services Gateway Sfp Or Xfp Transceiver

    CAUTION: If you face a problem running a Juniper Networks device that uses a third-party optic or cable, the Juniper Networks Technical Assistance Center (JTAC) can help you diagnose the source of the problem. Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.

  • Page 350: Replacing The Srx5600 Services Gateway Cable Manager

    Replacing the SRX5600 Services Gateway Cable Manager To replace the cable manager, perform the following procedures: Removing the SRX5600 Services Gateway Cable Manager | 353 Installing the SRX5600 Services Gateway Cable Manager | 354 Removing the SRX5600 Services Gateway Cable Manager The cable management system is located on both sides of the card cage.

  • Page 351: Installing The Srx5600 Services Gateway Cable Manager

    Figure 146: Removing or Installing the Cable Management System Installing the SRX5600 Services Gateway Cable Manager To install the cable management system: 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.

  • Page 352: Replacing A Routing Engine In An Srx Series High-End Chassis Cluster

    Junos OS currently installed on the device. Use the show version command to identify the Junos OS version. You can download the firmware from https://support.juniper.net/support/downloads/ The chassis cluster has only two redundancy groups (RG0 and RG1) configured. This procedure includes the steps for replacing the Routing Engine on node 0 of a chassis cluster setup.
  • Page 353 To replace a Routing Engine on node 0 of a chassis cluster using a USB flash drive: 1. Prepare to shut down node 0: a. Perform a manual failover of the redundancy groups (RGs) from node 0 to node 1. Fail over RG1: root@node0>...
  • Page 354 c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth permanent subscriber-addr permanent subscriber-vlan permanent subscriber-ip permanent scale-subscriber 1000 permanent scale-l2tp 1000 permanent...
  • Page 355 Password: root@node0% b. Before you mount the USB flash drive, list all the directories with names starting with da in the dev folder: root@node0% ls /dev/da* root@node0% ls /dev/da* /dev/da0 /dev/da0s1c /dev/da0s2a /dev/da0s3 /dev/da0s3e /dev/da0s1 /dev/da0s1f /dev/da0s2c /dev/da0s3c /dev/da0s1a /dev/da0s2 /dev/da0s2f /dev/da0s3d c.
  • Page 356 root@node0% cli show configuration | save /var/tmp/config[date] h. Copy the configuration file to the USB flash drive: root@node0% cp /var/tmp/config[date] /var/tmp/usb/config[date] i. Check whether any scripts are referenced in the configuration: root@node0> show configuration system scripts {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0>...
  • Page 357 3. Install the replacement Routing Engine: a. Power off node 0: root@node0> request system power-off b. Wait until a message appears on the console confirming that the services have stopped, and then physically turn off the power. c. Label and disconnect all the cables connected to node 0. d.
  • Page 358 root@node0% cp -r /var/tmp/usb/scripts/ /var/db/scripts/ c. Unmount the USB flash drive: root@node0% umount /var/tmp/usb d. Remove the USB flash drive. e. Exit the shell. root@node0% exit 5. Configure the Routing Engine: a. Load the firmware: root@node0>request software add /var/tmp/junos-release-domestic.tgz reboot The device reboots and comes up with the intended Junos OS version.

  • Page 359: Replacing A Routing Engine: External Scp Server Method

    root@node1> show chassis cluster status Node 0 comes up and becomes the secondary node on both RG0 and RG1. Wait until the node 0 priority on RG1 changes to the configured value. 11. Verify that sessions are showing up on node 0, and that the number of sessions on node 0 is nearly equal to the number of sessions on the primary node, node 1: root@node1>...
  • Page 360 To replace a Routing Engine on node 0 of a chassis cluster using an external Secure Copy Protocol (SCP) server: 1. Prepare to shut down node 0: a. Perform a manual failover of the redundancy groups (RGs) from node 0 to node 1. Fail over RG1: root@node0>...
  • Page 361 c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth permanent subscriber-addr permanent subscriber-vlan permanent subscriber-ip permanent scale-subscriber 1000 permanent scale-l2tp 1000 permanent...
  • Page 362 root@node0> start shell user root c. Copy the configuration file to an external server with SCP enabled: root@node0% scp /var/tmp/node0-config-yyyy-mm-dd root@server-ip:/node0-config-yyyy-mm-dd d. Check whether any scripts are referenced in the configuration: root@node0> show configuration system scripts {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0>...
  • Page 363 b. Wait until a message appears on the console confirming that the services have stopped, and then physically turn off the power. c. Label and disconnect all the cables connected to node 0. d. Replace the Routing Engine. e. To prevent a split-brain scenario (where the control link is connected while both the nodes are in the primary state), reconnect only the console cable and the cable to the fxp0 interface.
  • Page 364 You can view the control port configuration from node 1: root@node1>show configuration chassis cluster control-ports | display set c. Commit the configuration: root@node0# commit NOTE: Management and basic routing configuration are complete at this point. You can verify the reachability of the external server from the node by using the ping command.
  • Page 365 root@node0# load override /var/tmp/node0-config-yyyy-mm-dd root@node0# commit root@node0# exit 5. Check the status of all the FPCs and PICs, and ensure that all the FPCs and PICs are online. root@node0>show chassis fpc pic-status 6. Halt node 0 from the console: root@node0> request system halt 7.

  • Page 366: Replacing The Routing Engine: File Transfer Method

    0 is used as an example): 1. Ensure that the firmware image is available on node 1 in the /var/tmp folder. You can download the firmware from https://support.juniper.net/support/downloads/. 2. Save a local copy of the configuration in the /var/tmp folder on node 1: user@node1# show configuration | save /var/tmp/cfg-node1 3.
  • Page 367 Redundancy group: 1 , Failover count: 1 node0 secondary None node1 primary None c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth...
  • Page 368 {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0> show configuration event-options {secondary:node0} root@node0> show configuration event-options set event-options generate-event 60s time-interval 60 set event-options policy NAT-POOL-UTIL events 60s set event-options policy NAT-POOL-UTIL then event-script srx-nat-bucket-overload.slax arguments utilization-threshold 90 set event-options policy NAT-POOL-UTIL then event-script srx-nat-bucket-overload.slax arguments pool GLOBAL...
  • Page 369 {primary:node1} root@node1> show chassis cluster interfaces Control link status: Down Control interfaces: Index Interface Monitored-Status Internal-SA Security Down Disabled Disabled Down Disabled Disabled Fabric link status: Down Control interfaces: Name Child-Interface Status Security (Physical/Monitored) fab0 xe-11/0/3 Down / Down Disable fab0 g.
  • Page 370 root@node1> show configuration chassis cluster control-ports | display set c. Commit the configuration: root@node0# commit d. Exit configuration mode: root@node0# exit root@node0> e. Copy the image and configuration from node 1 to node 0 using Secure Copy Protocol (SCP). Use the IP address configured for the node 0 fxp0 interface in Step 5.
  • Page 371 8. Wait until a message appears on the console confirming that the services have stopped, and then connect all the disconnected cables. 9. Boot up node 0 by pressing any key on the console. 10. Check the chassis cluster status on node 1: root@node1>show chassis cluster status Node 0 comes up and becomes the secondary node on both RG0 and RG1.

  • Page 372: Troubleshooting Hardware

    C HAPTER Troubleshooting Hardware Troubleshooting the SRX5600 | 377...

  • Page 374: Troubleshooting The Srx5600

    IN THIS SECTION Troubleshooting the SRX5600 Services Gateway with the Junos OS CLI | 377 Troubleshooting the SRX5600 Services Gateway with Chassis and Interface Alarm Messages | 378 Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways | 378...

  • Page 375: Troubleshooting The Srx5600 Services Gateway With Chassis And Interface Alarm Messages

    Services Gateways Table 59 on page 378 lists the alarms that the chassis components can generate on SRX5400, SRX5600, and SRX5800 Services Gateways. Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways Chassis Alarm Component Alarm Condition...
  • Page 376 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Interface Cards An interface card is offline. Check the card. Remove Yellow and reinsert the card. If (MPC/IOC/Flex this fails, replace failed IOC) card.
  • Page 377 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Service Abnormal exit in the current Open a support case using flow sessions of an SPU. the Case Manager link at Processing Card https://www.juniper.net/support/...
  • Page 378 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity SRX5K-SPC3 LTC Firm Ware Version Mismatch. LEDs on the front panel of the chassis indicate major alarm.
  • Page 379 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity To manually upgrade the LTC Firmware Version: Issue the CLI show chassis alarm command to check which FPC slot is...
  • Page 380 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Re-boot the Services Gateway. Memory faults: DIMM Open a support case using failures and ECC errors. the Case Manager link at https://www.juniper.net/support/...
  • Page 381 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity From the CLI use the command restart chassis-control to reboot the services gateway. If SPC still doesn’t come online, then remove and...
  • Page 382 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Fan trays A fan tray has been Install missing fan tray. removed from the chassis. Fan tray not working or Replace fan tray.
  • Page 383 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Host subsystem A host subsystem has been Insert host subsystem into Yellow removed. empty slot. A host subsystem has failed.
  • Page 384 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Power supplies A power supply has been Insert power supply into Yellow removed from the chassis. empty slot. A power supply has a high Replace failed power temperature.
  • Page 385 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Not enough power supplies. Install an additional power supply.
  • Page 386 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Routing Engine Excessive framing errors on Replace the serial cable Yellow console port. connected to the device. An excessive framing error...
  • Page 387 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Hard disk missing in boot Replace failed Routing list. Engine. Routing Engine failed to Replace failed Routing boot. Engine.
  • Page 388 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity System Control An SCB has been removed. Insert SCB into empty slot. Yellow Board (SCB) An SCB temperature sensor Replace failed SCB.
  • Page 389 Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Temperature The chassis temperature Check room Yellow has exceeded 55 degrees C temperature. (131 degrees F), the fans Check air filter and have been turned on to full replace it.

  • Page 390: Backup Routing Engine Alarms

    Table 59: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Check environmental conditions and alarms on other devices. Ensure that environmental factors (such as hot air blowing around the equipment) are not affecting the temperature sensor.
  • Page 391 Open a support case using Yellow boots from an alternate the Case Manager link at media boot device, the hard disk. https://www.juniper.net/support/ The CompactFlash card is or call 1-888-314-5822 typically the primary boot (toll free, US & Canada) or device. The Routing Engine...

  • Page 392: Troubleshooting The Srx5600 Services Gateway With Alarm Relay Contacts

    (from outside the United States). Troubleshooting the SRX5600 Services Gateway with Alarm Relay Contacts The craft interface has two alarm relay contacts for connecting the services gateway to external alarm devices. Whenever a system condition triggers either the major or minor alarm on the craft interface, the alarm relay contacts are also activated.

  • Page 393: Troubleshooting The Srx5600 Services Gateway With The Component Leds

    Fan LEDs—Two LEDs indicate the status of the fan. Green indicates OK and red indicates FAIL. The fan LEDs are located on the upper left of the craft interface. Troubleshooting the SRX5600 Services Gateway with the Component LEDs The following LEDs are located on various services gateway components and display the status of those components: Card LED—One LED labeled OK/FAIL on each card in the card cage indicates the card’s status.

  • Page 394: Troubleshooting The Srx5600 Services Gateway Cooling System

    Troubleshooting the SRX5600 Services Gateway Cooling System Problem Description: The fans in a fan tray are not functioning normally. Solution Follow these guidelines to troubleshoot the fans: Check the fan LEDs and alarm LEDs on the craft interface. If the major alarm LED on the craft interface lights, use the CLI to get information about the source of an alarm condition: user@host>...
  • Page 395 Monitor the green LED labeled OK on the craft interface corresponding to the slot as soon as an interface card is seated in an operating services gateway. The Routing Engine downloads the interface card’s software to it under two conditions: the interface card is present when the Routing Engine boots Junos OS, and the interface card is installed and requested online through the CLI or push button on the front panel.

  • Page 396: Troubleshooting Srx5600 Services Gateway Mics And Port Modules

    1 hour, 33 minutes, 43 seconds For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting SRX5600 Services Gateway MICs and Port Modules Problem Description: The MICs or port modules are not functioning normally.

  • Page 397: Troubleshooting Srx5600 Services Gateway Spcs

    4x 10GE XFP For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting SRX5600 Services Gateway SPCs Problem Description: A Services Processing Card (SPC) is not functioning normally. Solution Make sure the SPC is properly seated in the midplane.

  • Page 398: Troubleshooting The Srx5600 Services Gateway Power System

    Max Power Consumption 570 Watts For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting the SRX5600 Services Gateway Power System Problem Description: The power system is not functioning normally. Solution Check the LEDs on each power supply faceplate.
  • Page 399 Issue the CLI show chassis environment pem command to check the status of installed power supplies. As shown in the sample output, the value Online in the rows labeled State indicates that each of the power supply is functioning normally: user@host>...
  • Page 400 NOTE: If the system temperature exceeds the threshold, Junos OS shuts down all power supplies so that no status is displayed. Junos OS also can shut down one of the power supplies for other reasons. In this case, the remaining power supplies provide power to the services gateway, and you can still view the system status through the CLI or display.
  • Page 401 NOTE: If output power is not load-balancing correctly in the same zone on a services gateway with a high-capacity AC or DC power supply module, connect two feeds and change the DIP switch to 1 to boost the voltage on the power supply module. Each High Capacity AC or DC power supply accepts two AC or DC feeds in two unique AC or DC receptacles.
  • Page 402 DC output: 893 W (zone 0, 19 A at 47 V, 56% of capacity) PEM 2: State: Present AC input: Out of range (1 feed expected, 1 feed connected) Capacity: 0 W (maximum 2050 W) PEM 3: State: Present AC input: Out of range (1 feed expected, 1 feed connected) Capacity: 1590 W (maximum 1590 W)
  • Page 403 NOTE: Changing the DIP switch position does not impact traffic. However, it is always recommended to do so in a maintenance window. 4. Issue the CLI show chassis power command and check the output to see if the number of feeds expected on PEM 1 is the same as the feeds connected.

  • Page 404: Behavior Of The Srx5400, Srx5600, And Srx5800 Services Gateways When The Srx5K-Scbe And Srx5K-Re-1800X4 In A Chassis Cluster Fail

    Behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways When the SRX5K-SCBE and SRX5K-RE-1800X4 in a Chassis Cluster Fail It is important to understand the behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways when the Switch Control Board (SRX5K-SCBE) and Routing Engine (SRX5K-RE-1800X4) in the chassis cluster fail.
  • Page 405 NOTE: In SRX5600 and SRX5800 Services Gateways, failover does not happen when the secondary Routing Engine in slot 1 fails, while the SCB in slot 1 is inactive. For detailed information about chassis cluster, see the Chassis Cluster User Guide for Security Devices www.juniper.net/documentation/.

  • Page 406: Contacting Customer Support And Returning The Chassis Or Components

    C HAPTER Contacting Customer Support and Returning the Chassis or Components Returning the SRX5600 Chassis or Components | 411...
  • Page 408 Contacting Customer Support Once you have located the serial numbers of the services gateway or component, you can return the services gateway or component for repair or replacement. For this, you need to contact Juniper Networks Technical Assistance Center (JTAC).

  • Page 409: Return Procedure For The Srx5600 Services Gateway

    Do not return any component to Juniper Networks, Inc. unless you have first obtained an RMA number. Juniper Networks, Inc. reserves the right to refuse shipments that do not have an RMA. Refused shipments will be returned to the customer via collect freight.

  • Page 410: Listing The Srx5600 Services Gateway Component Serial Numbers With The Cli

    Listing the SRX5600 Services Gateway Component Serial Numbers with the CLI Before contacting Juniper Networks, Inc. to request a Return Materials Authorization (RMA), you must find the serial number on the services gateway or component. To display all of the services gateway components and their serial numbers, enter the following command-line interface (CLI) command: user@host>...

  • Page 411: Locating The Srx5600 Services Gateway Chassis Serial Number Label

    Figure 148 on page 414) attached to the component body. Figure 148: Serial Number ID Label Locating the SRX5600 Services Gateway Chassis Serial Number Label The chassis serial number is located on the side of the chassis (see Figure 149 on page 414).

  • Page 412: Locating The Srx5600 Services Gateway Craft Interface Serial Number Label

    Figure 150: AC Power Supply Serial Number Label Figure 151: DC Power Supply Serial Number Label Locating the SRX5600 Services Gateway Craft Interface Serial Number Label The serial number is located on the back of the craft interface panel (see Figure 152 on page 416).

  • Page 413: Information You Might Need To Supply To Jtac

    Configuration data displayed by one or more show commands Your name, organization name, telephone number, fax number, and shipping address Required Tools and Parts for Packing the SRX5600 Services Gateway To remove components from the services gateway or the services gateway from a rack, you need the following tools and parts: 2.5-mm flat-blade (–) screwdriver, for detaching alarm relay terminal block...

  • Page 414: Packing The Srx5600 Services Gateway For Shipment

    To pack the services gateway for shipment: 1. Retrieve the shipping crate and packing materials in which the services gateway was originally shipped. If you do not have these materials, contact your Juniper Networks representative about approved packaging materials. 2. On the console or other management device connected to the master Routing Engine, enter CLI operational mode and issue the following command to shut down the services gateway software.

  • Page 415: Packing Srx5600 Services Gateway Components For Shipment

    12. Securely tape the box closed or place the crate cover over the services gateway. 13. Write the RMA number on the exterior of the box to ensure proper tracking. Packing SRX5600 Services Gateway Components for Shipment Follow these guidelines for packing and shipping individual components of the services gateway: When you return a component, make sure that it is adequately protected with packing materials and packed so that the pieces are prevented from moving around inside the carton.

  • Page 416: Safety And Compliance Information

    C HAPTER Safety and Compliance Information General Safety Guidelines and Warnings | 421 Definitions of Safety Warning Levels | 422 Restricted Access Area Warning | 426 Fire Safety Requirements | 428 Qualified Personnel Warning | 430 Warning Statement for Norway and Sweden | 430 Installation Instructions Warning | 431 Chassis and Component Lifting Guidelines | 431 Ramp Warning | 432...
  • Page 417 TN Power Warning | 480 Action to Take After an Electrical Accident | 480 SRX5600 Services Gateway Agency Approvals | 481 SRX5600 Services Gateway Compliance Statements for EMC Requirements | 482 Statements of Volatility for Juniper Network Devices | 484...

  • Page 418: General Safety Guidelines And Warnings

    General Safety Guidelines and Warnings The following guidelines help ensure your safety and protect the device from damage. The list of guidelines might not address all potentially hazardous situations in your working environment, so be alert and exercise good judgment at all times. Perform only the procedures explicitly described in the hardware documentation for this device.

  • Page 419: Definitions Of Safety Warning Levels

    Always ensure that all modules, power supplies, and cover panels are fully inserted and that the installation screws are fully tightened. Definitions of Safety Warning Levels The documentation uses the following levels of safety warnings (there are two Warning formats): NOTE: You might find this information helpful in a particular situation, or you might overlook this important information if it was not highlighted in a Note.
  • Page 421 WARNING: This symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Waarschuwing Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan veroorzaken.
  • Page 422 Varning! Denna varningssymbol signalerar fara. Du befinner dig i en situation som kan leda till personskada. Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och känna till vanligt förfarande för att förebygga skador.

  • Page 423: Restricted Access Area Warning

    Restricted Access Area Warning...
  • Page 424 WARNING: The services gateway is intended for installation in restricted access areas. A restricted access area is an area to which access can be gained only by service personnel through the use of a special tool, lock and key, or other means of security, and which is controlled by the authority responsible for the location.

  • Page 425: Fire Safety Requirements

    In addition, you should establish procedures to protect your equipment in the event of a fire emergency. Juniper Networks products should be installed in an environment suitable for electronic equipment. We recommend that fire suppression equipment be available in the event of a fire in the vicinity of the equipment and that all local fire, safety, and electrical codes and ordinances be observed when you install and operate your equipment.

  • Page 426: Fire Suppression Equipment

    To keep warranties effective, do not use a dry chemical fire extinguisher to control a fire at or near a Juniper Networks device. If a dry chemical fire extinguisher is used, the unit is no longer eligible for coverage under a service agreement.

  • Page 427: Qualified Personnel Warning

    Qualified Personnel Warning WARNING: Only trained and qualified personnel should install or replace the device. Waarschuwing Installatie en reparaties mogen uitsluitend door getraind en bevoegd personeel uitgevoerd worden. Varoitus Ainoastaan koulutettu ja pätevä henkilökunta saa asentaa tai vaihtaa tämän laitteen. Attention Tout installation ou remplacement de l'appareil doit être réalisé...

  • Page 428: Installation Instructions Warning

    Installation Instructions Warning WARNING: Read the installation instructions before you connect the device to a power source. Waarschuwing Raadpleeg de installatie-aanwijzingen voordat u het systeem met de voeding verbindt. Varoitus Lue asennusohjeet ennen järjestelmän yhdistämistä virtalähteeseen. Attention Avant de brancher le système sur la source d'alimentation, consulter les directives d'installation.

  • Page 429: Ramp Warning

    Up to 39.7 lb (18 kg): One person. 39.7 lb (18 kg) to 70.5 lb (32 kg): Two or more people. 70.5 lb (32 kg) to 121.2 lb (55 kg): Three or more people. Above 121.2 lbs (55 kg): Material handling systems (such as levers, slings, lifts and so on) must be used. When this is not practical, specially trained persons or systems must be used (riggers or movers).
  • Page 431 De onderstaande richtlijnen worden verstrekt om uw veiligheid te verzekeren: De Juniper Networks switch moet in een stellage worden geïnstalleerd die aan een bouwsel is verankerd. Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel het enige in het rek is.
  • Page 432 Les directives ci-dessous sont destinées à assurer la protection du personnel: Le rack sur lequel est monté le Juniper Networks switch doit être fixé à la structure du bâtiment. Si cette unité constitue la seule unité montée en casier, elle doit être placée dans le bas.
  • Page 433 Il Juniper Networks switch deve essere installato in un telaio, il quale deve essere fissato alla struttura dell'edificio. Questa unità deve venire montata sul fondo del supporto, se si tratta dell'unica unità da montare nel supporto. Quando questa unità viene montata in un supporto parzialmente pieno, caricare il supporto dal basso all'alto, con il componente più...
  • Page 434 El Juniper Networks switch debe instalarse en un bastidor fijado a la estructura del edificio. Colocar el equipo en la parte inferior del bastidor, cuando sea la única unidad en el mismo. Cuando este equipo se vaya a instalar en un bastidor parcialmente ocupado, comenzar la instalación desde la parte inferior hacia la superior colocando el equipo más pesado...

  • Page 435: Grounded Equipment Warning

    Grounded Equipment Warning WARNING: The device is intended to be grounded. During normal use, ensure that you have connected earth ground to the chassis. Waarschuwing Deze apparatuur hoort geaard te worden Zorg dat de host-computer tijdens normaal gebruik met aarde is verbonden. Varoitus Tämä...

  • Page 436: General Laser Safety Guidelines

    Class 1 LED Product Warning | 441 Laser Beam Warning | 442 Juniper Networks devices are equipped with laser transmitters, which are considered a Class 1 Laser Product by the U.S. Food and Drug Administration and are evaluated as a Class 1 Laser Product per EN 60825-1 requirements.

  • Page 437: Class 1 Laser Product Warning

    Class 1 Laser Product Warning WARNING: Class 1 laser product. Waarschuwing Klasse-1 laser produkt. Varoitus Luokan 1 lasertuote. Attention Produit laser de classe I. Warnung Laserprodukt der Klasse 1. Avvertenza Prodotto laser di Classe 1. Advarsel Laserprodukt av klasse 1. Aviso Produto laser de classe 1.

  • Page 438: Class 1 Led Product Warning

    Class 1 LED Product Warning WARNING: Class 1 LED product. Waarschuwing Klasse 1 LED-product. Varoitus Luokan 1 valodiodituote. Attention Alarme de produit LED Class I. Warnung Class 1 LED-Produktwarnung. Avvertenza Avvertenza prodotto LED di Classe 1. Advarsel LED-produkt i klasse 1. Aviso Produto de classe 1 com LED.

  • Page 439: Laser Beam Warning

    Laser Beam Warning WARNING: Do not stare into the laser beam or view it directly with optical instruments. Waarschuwing Niet in de straal staren of hem rechtstreeks bekijken met optische instrumenten. Varoitus Älä katso säteeseen äläkä tarkastele sitä suoraan optisen laitteen avulla. Attention Ne pas fixer le faisceau des yeux, ni l'observer directement à...

  • Page 440: Radiation From Open Port Apertures Warning

    Radiation from Open Port Apertures Warning WARNING: Because invisible radiation might be emitted from the aperture of the port when no fiber cable is connected, avoid exposure to radiation and do not stare into open apertures. Waarschuwing Aangezien onzichtbare straling vanuit de opening van de poort kan komen als er geen fiberkabel aangesloten is, dient blootstelling aan straling en het kijken in open openingen vermeden te worden.

  • Page 441: Maintenance And Operational Safety Guidelines And Warnings

    Maintenance and Operational Safety Guidelines and Warnings IN THIS SECTION Battery Handling Warning | 445 Jewelry Removal Warning | 446 Lightning Activity Warning | 448 Operating Temperature Warning | 449 Product Disposal Warning | 451 While performing the maintenance activities for devices, observe the following guidelines and warnings:...

  • Page 442: Battery Handling Warning

    Battery Handling Warning WARNING: Replacing a battery incorrectly might result in an explosion. Replace a battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer's instructions. Waarschuwing Er is ontploffingsgevaar als de batterij verkeerd vervangen wordt. Vervang de batterij slechts met hetzelfde of een equivalent type dat door de fabrikant aanbevolen is.

  • Page 443: Jewelry Removal Warning

    Jewelry Removal Warning...
  • Page 444 WARNING: Before working on equipment that is connected to power lines, remove jewelry, including rings, necklaces, and watches. Metal objects heat up when connected to power and ground and can cause serious burns or can be welded to the terminals. Waarschuwing Alvorens aan apparatuur te werken die met elektrische leidingen is verbonden, sieraden (inclusief ringen, kettingen en horloges) verwijderen.

  • Page 445: Lightning Activity Warning

    se conectan a la alimentación y a tierra, lo que puede ocasionar quemaduras graves o que los objetos metálicos queden soldados a los bornes. Varning! Tag av alla smycken (inklusive ringar, halsband och armbandsur) innan du arbetar på utrustning som är kopplad till kraftledningar. Metallobjekt hettas upp när de kopplas ihop med ström och jord och kan förorsaka allvarliga brännskador;...

  • Page 446: Operating Temperature Warning

    Operating Temperature Warning...
  • Page 447 40° C. Para evitar a restrição à circulação de ar, deixe pelo menos um espaço de 15,2 cm à volta das aberturas de ventilação. ¡Atención! Para impedir que un encaminador de la serie Juniper Networks switch se recaliente, no lo haga funcionar en un área en la que se supere la temperatura ambiente máxima recomendada de 40°...

  • Page 448: Product Disposal Warning

    Varning! Förhindra att en Juniper Networks switch överhettas genom att inte använda den i ett område där den maximalt rekommenderade omgivningstemperaturen på 40° C överskrids. Förhindra att luftcirkulationen inskränks genom att se till att det finns fritt utrymme på minst 15,2 cm omkring ventilationsöppningarna.

  • Page 449: General Electrical Safety Guidelines And Warnings

    General Electrical Safety Guidelines and Warnings WARNING: Certain ports on the device are designed for use as intrabuilding (within-the-building) interfaces only (Type 2 or Type 4 ports as described in GR-1089-CORE) and require isolation from the exposed outside plant (OSP) cabling. To comply with NEBS requirements and protect against lightning surges and commercial power disturbances, the intrabuilding ports must not be metallically connected to interfaces that connect to the OSP or its wiring.

  • Page 450: Prevention Of Electrostatic Discharge Damage

    Operate the device within marked electrical ratings and product usage instructions. To ensure that the device and peripheral equipment function safely and correctly, use the cables and connectors specified for the attached peripheral equipment, and make certain they are in good condition. You can remove and replace many device components without powering off or disconnecting power to the device, as detailed elsewhere in the hardware documentation for this device.

  • Page 451: Ac Power Electrical Safety Guidelines

    Figure 153: Placing a Component into an Antistatic Bag CAUTION ELECTROSTATIC SENSITIVE DEVICES DO NOT OPEN OR HANDLE EXCEPT AT A STATIC-FREE WORKSTATION CAUTION: ANSI/TIA/EIA-568 cables such as Category 5e and Category 6 can get electrostatically charged. To dissipate this charge, always ground the cables to a suitable and safe earth ground before connecting them to the system.
  • Page 452 You must provide an external certified circuit breaker (2-pole circuit breaker or 4-pole circuit breaker based on your device) rated minimum 20 A in the building installation. The power cord serves as the main disconnecting device for the AC-powered device. The socket outlet must be near the AC-powered device and be easily accessible.

  • Page 453: Ac Power Disconnection Warning

    AC Power Disconnection Warning WARNING: Before working on the device or near power supplies, unplug all the power cords from an AC-powered device. Waarschuwing Voordat u aan een frame of in de nabijheid van voedingen werkt, dient u bij wisselstroom toestellen de stekker van het netsnoer uit het stopcontact te halen. Varoitus Kytke irti vaihtovirtalaitteiden virtajohto, ennen kuin teet mitään asennuspohjalle tai työskentelet virtalähteiden läheisyydessä.

  • Page 454: Dc Power Electrical Safety Guidelines

    DC Power Electrical Safety Guidelines DC Power Electrical Safety Guidelines The following electrical safety guidelines apply to a DC-powered services gateway: A DC-powered services gateway is equipped with a DC terminal block that is rated for the power requirements of a maximally configured services gateway. To supply sufficient power, terminate the DC input wiring on a facility DC source capable of supplying at least 30 A @ -48 VDC for the system.
  • Page 455 The marked input voltage of -48 VDC for a DC-powered services gateway is the nominal voltage associated with the battery circuit, and any higher voltages are only to be associated with float voltages for the charging function. Because the services gateway is a positive ground system, you must connect the positive lead to the terminal labeled RETURN, the negative lead to the terminal labeled -48V, and the earth ground to the chassis grounding points.

  • Page 456: Dc Power Disconnection Warning

    DC Power Disconnection Warning...
  • Page 457 WARNING: Before performing any of the following procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.

  • Page 458: Dc Power Grounding Requirements And Warning

    que toda a corrente foi DESLIGADA, localize o disjuntor no painel que serve o circuito de corrente contínua e coloque-o na posição OFF (Desligado), segurando nessa posição a manivela do interruptor do disjuntor com fita isoladora. ¡Atención! Antes de proceder con los siguientes pasos, comprobar que la alimentación del circuito de corriente continua (CC) esté...
  • Page 459 WARNING: When installing the services gateway, the ground connection must always be made first and disconnected last. Waarschuwing Bij de installatie van het toestel moet de aardverbinding altijd het eerste worden gemaakt en het laatste worden losgemaakt. Varoitus Laitetta asennettaessa on maahan yhdistäminen aina tehtävä ensiksi ja maadoituksen irti kytkeminen viimeiseksi.

  • Page 460: Dc Power Wiring Sequence Warning

    DC Power Wiring Sequence Warning...
  • Page 461 WARNING: Wire the DC power supply using the appropriate lugs. When connecting power, the proper wiring sequence is ground to ground, +RTN to +RTN, then -48 V to -48 V. When disconnecting power, the proper wiring sequence is -48 V to -48 V, +RTN to +RTN, then ground to ground.
  • Page 462 moler. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. ¡Atención! Wire a fonte de alimentação de DC Usando os talões apropriados na extremidade da fiação.

  • Page 463: Dc Power Wiring Terminations Warning

    DC Power Wiring Terminations Warning...
  • Page 464 WARNING: When stranded wiring is required, use approved wiring terminations, such as closed-loop or spade-type with upturned lugs. These terminations should be the appropriate size for the wires and should clamp both the insulation and conductor. Waarschuwing Wanneer geslagen bedrading vereist is, dient u bedrading te gebruiken die voorzien is van goedgekeurde aansluitingspunten, zoals het gesloten-lus type of het grijperschop type waarbij de aansluitpunten omhoog wijzen.
  • Page 465 Varning! När flertrådiga ledningar krävs måste godkända ledningskontakter användas, t.ex. kabelsko av sluten eller öppen typ med uppåtvänd tapp. Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda. RELATED DOCUMENTATION Action to Take After an Electrical Accident | 480 General Electrical Safety Guidelines and Warnings | 452 AC Power Electrical Safety Guidelines | 454...

  • Page 466: Dc Power Disconnection Warning

    DC Power Disconnection Warning...
  • Page 467 WARNING: Before performing any of the DC power procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the device handle of the circuit breaker in the OFF position.

  • Page 468: Dc Power Grounding Requirements And Warning

    que toda a corrente foi DESLIGADA, localize o disjuntor no painel que serve o circuito de corrente contínua e coloque-o na posição OFF (Desligado), segurando nessa posição a manivela do interruptor do disjuntor com fita isoladora. ¡Atención! Antes de proceder con los siguientes pasos, comprobar que la alimentación del circuito de corriente continua (CC) esté...
  • Page 469 WARNING: When you install the device, the ground connection must always be made first and disconnected last. Waarschuwing Bij de installatie van het toestel moet de aardverbinding altijd het eerste worden gemaakt en het laatste worden losgemaakt. Varoitus Laitetta asennettaessa on maahan yhdistäminen aina tehtävä ensiksi ja maadoituksen irti kytkeminen viimeiseksi.

  • Page 470: Dc Power Wiring Sequence Warning

    DC Power Wiring Sequence Warning...
  • Page 471 WARNING: Wire the DC power supply using the appropriate lugs. When connecting power, the proper wiring sequence is ground to ground, +RTN to +RTN, then –48 V to –48 V. When disconnecting power, the proper wiring sequence is –48 V to –48 V, +RTN to +RTN, then ground to ground.
  • Page 472 para moler. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. ¡Atención! Wire a fonte de alimentação de DC Usando os talões apropriados na extremidade da fiação.

  • Page 473: Dc Power Wiring Terminations Warning

    DC Power Wiring Terminations Warning...
  • Page 474 WARNING: When stranded wiring is required, use approved wiring terminations, such as closed-loop or spade-type with upturned lugs. These terminations must be the appropriate size for the wires and must clamp both the insulation and conductor. Waarschuwing Wanneer geslagen bedrading vereist is, dient u bedrading te gebruiken die voorzien is van goedgekeurde aansluitingspunten, zoals het gesloten-lus type of het grijperschop type waarbij de aansluitpunten omhoog wijzen.
  • Page 475 conexión vueltas hacia arriba. Estos terminales deberán ser del tamaño apropiado para los cables que se utilicen, y tendrán que sujetar tanto el aislante como el conductor. Varning! När flertrådiga ledningar krävs måste godkända ledningskontakter användas, t.ex. kabelsko av sluten eller öppen typ med uppåtvänd tapp. Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda.

  • Page 476: Multiple Power Supplies Disconnection Warning

    Multiple Power Supplies Disconnection Warning WARNING: The network device has more than one power supply connection. All connections must be removed completely to remove power from the unit completely. Waarschuwing Deze eenheid heeft meer dan één stroomtoevoerverbinding; alle verbindingen moeten volledig worden verwijderd om de stroom van deze eenheid volledig te verwijderen.

  • Page 477: Tn Power Warning

    TN Power Warning WARNING: The device is designed to work with a TN power system. Waarschuwing Het apparaat is ontworpen om te functioneren met TN energiesystemen. Varoitus Koje on suunniteltu toimimaan TN-sähkövoimajärjestelmien yhteydessä. Attention Ce dispositif a été conçu pour fonctionner avec des systèmes d'alimentation Warnung Das Gerät ist für die Verwendung mit TN-Stromsystemen ausgelegt.

  • Page 478: Srx5600 Services Gateway Agency Approvals

    SRX5600 Services Gateway Agency Approvals The services gateway complies with the following standards: Safety EN 60825-1 Safety of Laser Products - Part 1: Equipment Classification, Requirements and User's Guide CSA 60950-1 Safety of Information Technology Equipment UL 60950-1 Safety of Information Technology Equipment...

  • Page 479: Srx5600 Services Gateway Compliance Statements For Emc Requirements

    RELATED DOCUMENTATION In Case of Electrical Accident General Electrical Safety Guidelines and Warnings DC Power Electrical Safety Guidelines and Warnings SRX5600 Services Gateway Compliance Statements for EMC Requirements IN THIS SECTION Canada | 482 European Community | 482 Israel | 483...

  • Page 480: Israel

    Israel The preceding translates as follows: This product is Class A. In residential environments, the product may cause radio interference, and in such a situation, the user may be required to take adequate measures. Japan The preceding translates as follows: This is a Class A product.

  • Page 481: Statements Of Volatility For Juniper Network Devices

    Statements of Volatility for Juniper Network Devices A statement of volatility—sometimes known as letter of volatility—identifies the volatile and non-volatile storage components in Juniper Networks devices, and describes how to remove non-volatile storage components from the device. NOTE: Statements of volatility are not available for all Juniper Networks devices.
  • Page 482 LN Series: LN1000–CC MX Series: M7i Compact Forwarding Engine Board (CFEB) M40e and M10i M320 MX5, MX10, MX40, and MX80 MX240, MX480, and MX960 RE-A-2000 Route Engine RE-S-X6-64G Routing Engine QFX Series: QFX3008-I QFX3100 QFX3500 QFX3600 QFX5100-24Q QFX5100-48S QFX5100-48T QFX5110-32Q QFX5110-48S QFX5200 QFX5200-32C...
  • Page 483 SRX220 SRX240H SRX240H-POE SRX300 SRX320 SRX340 and SRX345 SRX550 SRX650 SRX1400 SRX1500 SRX3400 and SRX3600 SRX5400, SRX5600, and SRX5800 SRX-MP-1SERIAL SSG-520M T Series: RE-A-2000 Route Engine...

Table of Contents