Page 1 SRX5800 Services Gateway Hardware Guide Published 2020-02-10...
Page 2 END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at https://support.juniper.net/support/eula/.
Page 3: Table Of Contents
SRX5800 Services Gateway Cable Manager Description | 35 SRX5800 Services Gateway Craft Interface Overview | 36 SRX5800 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button | 37 SRX5800 Services Gateway Craft Interface Host Subsystem LEDs | 37...
Page 4 SRX5800 Services Gateway AC Power Supply Specifications | 54 AC Power Cord Specifications for the SRX5800 Services Gateway | 55 AC Power Circuit Breaker Requirements for the SRX5800 Services Gateway | 57 SRX5800 Services Gateway Standard-Capacity DC Power Supply | 57...
Page 5 SRX5800 Line Cards and Modules | 97 SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 98 Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 99 SRX5800 Services Gateway Card Cage and Slots | 103 SRX5800 Services Gateway SPC Description | 105...
Page 6 Calculating Power Requirements for the SRX5800 Services Gateway | 178 SRX5800 Network Cable and Transceiver Planning | 198 Routing Engine Interface Cable and Wire Specifications for the SRX5800 Services Gateway | 198 Signal Loss in Multimode and Single-Mode Fiber-Optic Cable for the SRX5800 Services...
Page 7 Alarm Relay Contact Wire Specifications for the SRX5800 Services Gateway | 202 Console Port Cable and Wire Specifications for the SRX5800 Services Gateway | 202 RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Ethernet Port | 203 RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Auxiliary and...
Page 8 Connecting the SRX5800 Services Gateway to a Management Console or an Auxiliary Device | 233 Connecting the SRX5800 Services Gateway to a Network for Out-of-Band Management | 234 Connecting an SRX5800 Services Gateway to an External Alarm-Reporting Device | 235...
Page 9 Connecting the Alarm Relay Wires to the SRX5800 Services Gateway Craft Interface | 266 Maintaining the SRX5800 Cooling System | 267 Maintaining the Fan Trays on the SRX5800 Services Gateway | 268 Replacing an SRX5800 Services Gateway Fan Tray | 268...
Page 10 SRX5K-SCB3 in a Chassis Cluster | 335 Maintaining the SRX5800 Line Cards and Modules | 339 Maintaining Interface Cards and SPCs on the SRX5800 Services Gateway | 340 Replacing SRX5800 Services Gateway IOCs | 342 Removing an SRX5800 Services Gateway IOC | 342...
Page 11 Maintaining the SRX5800 Cables and Connectors | 388 Maintaining SRX5800 Services Gateway Network Cables | 389 Replacing the Management Ethernet Cable on an SRX5800 Services Gateway | 391 Replacing the SRX5800 Services Gateway Console or Auxiliary Cable | 392 Replacing an SRX5800 Services Gateway Network Interface Cable | 393...
Page 12 Troubleshooting SRX5800 Services Gateway SPCs | 448 Troubleshooting the SRX5800 Services Gateway Power System | 449 Behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways When the SRX5K-SCBE and SRX5K-RE-1800X4 in a Chassis Cluster Fail | 455 Contacting Customer Support and Returning the Chassis or Components...
Page 13 xiii Rack-Mounting and Cabinet-Mounting Warnings | 484 Grounded Equipment Warning | 490 Laser and LED Safety Guidelines and Warnings | 490 General Laser Safety Guidelines | 491 Class 1 Laser Product Warning | 492 Class 1 LED Product Warning | 493 Laser Beam Warning | 494 Radiation from Open Port Apertures Warning | 495 Maintenance and Operational Safety Guidelines and Warnings | 496...
Page 14 TN Power Warning | 532 Action to Take After an Electrical Accident | 532 SRX5800 Services Gateway Agency Approvals | 533 SRX5800 Services Gateway Compliance Statements for EMC Requirements | 534 Canada | 534 European Community | 534 Israel | 535...
Page 15: About The Documentation
If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration.
Page 16: Merging A Full Example
If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example is a full example. In this case, use the load merge command. If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In this case, use the load merge relative command.
Page 17: Merging A Snippet
xvii Merging a Snippet To merge a snippet, follow these steps: 1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the file with a name, and copy the file to a directory on your routing platform. For example, copy the following snippet to a file and name the file ex-script-snippet.conf.
Page 18 xviii Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser.
Page 19 Table 2: Text and Syntax Conventions (continued) Convention Description Examples Italic text like this Represents variables (options for Configure the machine’s domain which you substitute a value) in name: commands or configuration [edit] statements. root@# set system domain-name domain-name Text like this Represents names of configuration To configure a stub area, include statements, commands, files, and...
Page 20: Documentation Feedback
URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active Juniper Care or Partner Support Services support contract, or are...
Page 21: Self-Help Online Tools And Resources
JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: https://www.juniper.net/customers/support/...
Page 22: Overview
C HAPTER Overview SRX5800 Services Gateway System Overview | 25 SRX5800 Chassis | 28 SRX5800 Services Gateway Cooling System | 44 SRX5800 Power System | 46 SRX5800 Host Subsystem | 69 SRX5800 Line Cards and Modules | 97...
Page 24: Srx5800 Services Gateway System Overview
SRX5800 Services Gateway Component Redundancy | 27 SRX5800 Services Gateway Description The SRX5800 Services Gateway is a high-performance, highly scalable, carrier-class security device with multi-processor architecture. The services gateway provides 12 slots that you can populate with 2 or 3 Switch Control Boards (SCBs)
Page 25: Benefits Of The Srx5800 Services Gateway
Benefits of the SRX5800 Services Gateway The SRX5800 Services Gateway is the market-leading security solution supporting up to 1.2 Tbps firewall throughput and latency as low as 32 microseconds for stateful firewall, 395 million concurrent sessions, and 1 Tbps IPS.
Page 26: Srx5800 Services Gateway Component Redundancy
SRX5800 Services Gateway Component Redundancy The following major hardware components are redundant: Switch Control Boards (SCBs)—The SRX5800 Services Gateway has two SCBs installed and you can install a third SCB for switch fabric redundancy. The SCB of the host subsystem functions as the master and the others function as backup.
Page 27: Srx5800 Chassis
The SRX5800 Services Gateway does not support a redundant SCB (third SCB) card if SRX5K-SPC-4-15-320 (SPC2) is installed with SCB1 (SRX5K-SCB). If you have installed a SPC2 on a SRX5800 Services Gateway with a redundant SCB1 card, make sure to remove the redundant SCB1 card.
Page 28: Srx5800 Services Gateway Chassis
SRX5800 Services Gateway Craft Interface Fan LEDs | 39 SRX5800 Services Gateway Craft Interface Online Buttons | 39 SRX5800 Services Gateway Craft Interface Alarm Relay Contacts | 42 SRX5800 Services Gateway Chassis The services gateway chassis is a rigid sheet metal structure that houses all the other services gateway...
Page 29 Figure 1: Front View of a Fully Configured Services Gateway Chassis Craft interface ESD point Front-mounting Center-mounting flange bracket Upper fan tray Card slots 0-5 SCB0 SCB1 SCB2 or Card slot 6 Routing engine SPCs IOCs Card slots 7-11 filter tray Lower fan tray Air intake...
Page 30 Figure 2: Rear View of a Fully Configured AC-Powered Services Gateway Chassis...
Page 31: Srx5800 Services Gateway Physical Specifications
Figure 3: Rear View of a Fully Configured DC-Powered Services Gateway Chassis SRX5800 Services Gateway Physical Specifications Table 4 on page 33 summarizes the physical specifications for the services gateway chassis.
Page 32 Table 4: Physical Specifications Description Value Chassis dimensions Height 27.75 in. (70.5 cm) high Width 17.37 in. (44.1 cm) wide Depth, with standard-capacity 23.0 in. (58.4 cm) deep from front-mounting bracket power supplies to chassis rear 27.8 in. (70.6 cm) total depth including cable management system Depth, with high-capacity AC 25.5 in.
Page 33: Srx5800 Services Gateway Midplane Description
NOTE: For the weights of specific cards, Routing Engines, or port modules, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Guide at www.juniper.net/documentation/. SRX5800 Services Gateway Midplane Description The midplane is located toward the rear of the chassis and forms the rear of the card cage (see Figure 4 on page 35).
Page 34: Srx5800 Services Gateway Cable Manager Description
The midplane supports link speeds up to 10 Gbps and is not field replaceable. Figure 4: Midplane SRX5800 Services Gateway Cable Manager Description The cable management system (see Figure 5 on page 36) is a tray located below the card cage that has a row of fourteen dividers for securing the cables for each card.
Page 35: Srx5800 Services Gateway Craft Interface Overview
Figure 5: Cable Management System Maintenance linkage Release handles SRX5800 Services Gateway Craft Interface Overview The craft interface shows you status and troubleshooting information at a glance and lets you perform many system control functions (see Figure 6 on page 36).
Page 36: Srx5800 Services Gateway Craft Interface Alarm Leds And Alarm Cutoff/Lamp Test Button
SRX5800 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button Two large alarm LEDs are located at the upper right of the craft interface. The circular red LED lights to indicate a critical condition that can result in a system shutdown. The triangular yellow LED lights to indicate a less severe condition that requires monitoring or maintenance.
Page 37: Srx5800 Services Gateway Craft Interface Power Supply Leds
Host is installed but the Routing Engine is offline. Host is not installed. SRX5800 Services Gateway Craft Interface Power Supply LEDs Each power supply has two LEDs on the craft interface that indicate its status. The LEDs, labeled 0 through 3, are located near the middle of the craft interface next to the PEM label.
Page 38: Srx5800 Services Gateway Craft Interface Fan Leds
You can install MPCs into slots: SRX5400–Any slot except bottom slot 0 SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0 or 1 NOTE: The Online/Offline buttons are not supported for removal and replacement of SPCs or...
Page 39 CAUTION: While traffic is passing through the Services Gateway, particularly if the device is configured as part of a high availability (HA) cluster, we strongly recommend that you do not push any of the Online/Offline buttons. To take an MPC offline using the Online/Offline buttons: 1.
Page 40 user@host> show chassis fpc Temp CPU Utilization (%) Memory Utilization (%) Slot State Total Interrupt DRAM (MB) Heap Buffer Online 1024 Online 1024 Offline ---Offlined by button press--- To bring an MPC back online using the Online/Offline buttons: 1. Press and hold the corresponding card’s Online/Offline button on slot 1 on the craft interface. The green OK/FAIL LED next to the button and the MPC’s LED begins to blink.
Page 41: Srx5800 Services Gateway Craft Interface Alarm Relay Contacts
1024 Online 1024 SRX5800 Services Gateway Craft Interface Alarm Relay Contacts The craft interface has two alarm relay contacts for connecting the device to external alarm devices (see Figure 7 on page 42). Whenever a system condition triggers either the major or minor alarm on the craft interface, the alarm relay contacts are also activated.
Page 42 Table 10: Alarm Relay Contact Functions Contact Label Contact Name Function Normally Closed Connects the alarm relay to an external alarm-reporting device that activates when the circuit between C and NC is closed. Current In Connects the alarm relay to the current source for the external alarm-reporting device.
Page 43: Srx5800 Services Gateway Cooling System
SRX5800 Services Gateway Cooling System The cooling system consists of the following components: Upper fan tray Lower fan tray Air filter tray and air filter The cooling system components work together to keep all services gateway components within the acceptable temperature range (see...
Page 44 There is a single air intake in the front of the services gateway. Air is pushed up through an air filter, through the card cage, and then through the upper fan tray where it combines in a common exhaust plenum and is exhausted out the upper rear of the system.
Page 45: Srx5800 Power System
SRX5800 Services Gateway AC Power Supply Specifications | 54 AC Power Cord Specifications for the SRX5800 Services Gateway | 55 AC Power Circuit Breaker Requirements for the SRX5800 Services Gateway | 57 SRX5800 Services Gateway Standard-Capacity DC Power Supply | 57...
Page 46: Srx5800 Services Gateway Power System Overview
SRX5800 Services Gateway Power System Overview The SRX5800 Services Gateway uses either AC or DC power supplies. The services gateway is configurable with two to four AC power supplies or two or four DC power supplies. The power supplies connect to the midplane, which distributes the different output voltages produced by the power supplies to the services gateway components, depending on their voltage requirements.
Page 47 IOC or SPC slots 0 through 5 SCB slot 0 Figure 15 on page 49 shows the distribution of power from the power supplies to the chassis components in an SRX5800 Services Gateway chassis powered by DC power supplies or high-capacity AC power supplies.
Page 48: Srx5800 Services Gateway Standard-Capacity Ac Power Supply
Figure 15: Power Distribution from DC and High-Capacity AC Power Supplies in the SRX5800 Services Gateway Chassis PEM0 PEM1 PEM2 PEM3 Zone 1 Zone 0 NOTE: The craft interface draws its power from the SCBs installed in the SCB slots 0, 1, and 2 at the center of the card cage.
Page 49: Srx5800 Services Gateway Standard-Capacity Ac Power Supply Leds
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, the services gateway chassis must be adequately grounded before power is connected. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions. Figure 16: Standard-Capacity AC Power Supply...
Page 50: Srx5800 Services Gateway High-Capacity Ac Power Supply
Power supply is not functioning normally. Check AC OK and DC OK LEDs for more information. SRX5800 Services Gateway High-Capacity AC Power Supply High-capacity AC power supplies provide a maximum of 4100 W of power each. Two high-capacity power supplies are required, and you can install four high-capacity power supplies for redundancy. Each high-capacity AC power supply has two corresponding AC appliance inlets: one located in the chassis directly above the power supply and one located near the top edge of the power supply itself.
Page 51 NOTE: The high-capacity power supply will operate with only one of its two AC inlets connected to an AC power feed. However, its DC output will be limited to a maximum of 1700 W. We recommend that you connect two AC power feeds to each high-capacity AC power supply. NOTE: The services gateway must be running Junos OS Release 10.4 or later in order to use high-capacity AC power supplies.
Page 52: Srx5800 Services Gateway High-Capacity Ac Power Supply Leds
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, the services gateway chassis must be adequately grounded before power is connected. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions. Figure 17: High-Capacity AC Power Supply...
Page 53: Srx5800 Services Gateway Ac Power Supply Specifications
Power supply is not functioning normally. Check the AC-1 OK, AC-2 OK, and DC OK LEDs for more information. SRX5800 Services Gateway AC Power Supply Specifications Table 17 on page 54 lists the AC power supply electrical specifications for both the standard-capacity and high-capacity AC power supply.
Page 54: Ac Power Cord Specifications For The Srx5800 Services Gateway
3400 W system AC Power Cord Specifications for the SRX5800 Services Gateway Each AC power supply has a single AC appliance inlet located in the chassis directly above the power supply that requires a dedicated AC power feed. Most sites distribute power through a main conduit that leads to frame-mounted power distribution panels, one of which can be located at the top of the rack that houses the services gateway.
Page 55 Electrotechnical Commission (IEC) standard 60320. The plug at the male end of the power cord fits into the power source receptacle that is standard for your geographical location. Table 19 on page 56 provides specifications and Figure 18 on page 56 depicts the plug on the AC power cord provided for each country or region.
Page 56: Ac Power Circuit Breaker Requirements For The Srx5800 Services Gateway
Table 19 on page 56 are in compliance. AC Power Circuit Breaker Requirements for the SRX5800 Services Gateway Each AC power supply has a single AC appliance inlet located in the chassis directly above the power supply that requires a dedicated AC power feed. We recommend that you use a dedicated customer site circuit breaker rated for 15 A (250 VAC) minimum for each AC power supply, or as required by local code.
Page 57: Srx5800 Services Gateway Standard-Capacity Dc Power Supply Leds
Each DC power supply has a single DC input (–48 VDC and return) that requires a dedicated 80 A (–48 VDC) circuit breaker for the maximum hardware configuration. Figure 19: Standard-Capacity DC Power Supply SRX5800 Services Gateway Standard-Capacity DC Power Supply LEDs Each standard-capacity DC power supply faceplate contains three LEDs that indicate the status of the power supply (see Table 20 on page 59).
Page 58: Srx5800 Services Gateway High-Capacity Dc Power Supply
Amber DC input is present, but connected in reverse polarity. SRX5800 Services Gateway High-Capacity DC Power Supply High-capacity DC power supplies provide a maximum of 4100 W of power each. Two high-capacity DC power supplies are required, and you can install four high-capacity DC power supplies for redundancy.
Page 59 DC power supply. WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, the services gateway chassis must be adequately grounded before power is connected. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions.
Page 60: Srx5800 Services Gateway High-Capacity Dc Power Supply Leds
Figure 20: High-Capacity DC Power Supply SRX5800 Services Gateway High-Capacity DC Power Supply LEDs Each high-capacity DC power supply faceplate contains four LEDs that indicate the status of the power supply (see Table 22 on page 62). The power supply status is also reflected in two LEDs on the craft...
Page 61: Srx5800 Services Gateway Dc Power Supply Specifications
Power supply is functioning normally. Power supply is not functioning normally. Check the INP0 OK, INP1 OK, and DC OK LEDs for more information. SRX5800 Services Gateway DC Power Supply Specifications Table 23 on page 62 lists the DC power supply electrical specifications.
Page 62: Dc Power Cable Specifications For The Srx5800 Services Gateway
5600 W 8200 W 3400 W system DC Power Cable Specifications for the SRX5800 Services Gateway Table 25 on page 63 summarizes the specifications for the power cables, which you must supply. Table 25: DC Power Cable Specifications Cable Type...
Page 63: Dc Power Cable Lug Specifications For The Srx5800 Services Gateway
DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply. DC Power Cable Lug Specifications for the SRX5800 Services Gateway The accessory box shipped with the services gateway includes the cable lugs that attach to the terminal...
Page 64: Dc Power Circuit Breaker Requirements For The Srx5800 Services Gateway
DC Power Circuit Breaker Requirements for the SRX5800 Services Gateway If you plan to operate a maximally configured DC-powered services gateway with standard-capacity power supplies, we recommend that you provision at least 116 A (58 A per feed) @ –48 VDC (nominal) for the system.
Page 65: Srx5800 Services Gateway Chassis Grounding Point Specifications
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions. CAUTION: Before services gateway installation begins, a licensed electrician must attach cable lugs to the grounding and power cables that you supply.
Page 66: Srx5800 Services Gateway Grounding Cable Specifications
UNC 1/4–20 screws used to secure the grounding cable to the right-side grounding point on the services gateway. Figure 23: SRX5800 Services Gateway Chassis Grounding Points M6 (Metric) Grounding Point...
Page 67: Srx5800 Services Gateway Grounding-Cable Lug Specification
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions. SRX5800 Services Gateway Grounding-Cable Lug Specification...
Page 68: Srx5800 Host Subsystem
SRX5800 Host Subsystem IN THIS SECTION SRX5800 Services Gateway Host Subsystem Description | 69 Switch Control Board SRX5K-SCB Overview | 70 Switch Control Board SRX5K-SCB Specifications | 72 Switch Control Board SRX5K-SCBE Overview | 75 Switch Control Board SRX5K-SCBE Specifications | 76...
Page 69: Switch Control Board Srx5K-Scb Overview
NOTE: SRX5K-SCB4 is not supported on SRX5400 Services Gateways. Routing Engine SRX5K-RE-13-20–from Junos OS Release 9.2 to 12.3X48 SRX5K-RE-1800X4–from Junos OS Release 12.1X47-D15 and later SRX5K-RE3-128G–from Junos OS Release 19.3R1 and later NOTE: You can only configure the following combination of Routing Engine and SCB within a host subsystem: SRX5K-RE-13-20 and SRX5K-SCB SRX5K-RE-1800X4 and SRX5K-SCBE...
Page 70 Figure 25: SRX5K-SCB The SRX5800 Services Gateway has two SCBs installed and you can install a third SCB for switch fabric redundancy. NOTE: The SRX5800 Services Gateway supports a redundant SCB, provided the SCB is a SRX5K-SCBE (SCB2) running Junos OS Release 12.1X47-D15 and later, SRX5K-SCB3 (SCB3) running Junos OS Release 15.1X49-D10 and later, or a SRX5K-SCB4 (SCB4) running Junos OS...
Page 71: Switch Control Board Srx5K-Scb Specifications
SCB SRX5400 and SRX5600 Services Gateways have one SCB each installed and you can install a second SCB for redundancy. The SRX5800 Services Gateway has two SCBs installed and you can install a third SCB for switch fabric redundancy.
Page 72 Figure 26: Switch Control Board SRX5K-SCB Each SCB consists of the following components: Chassis management Ethernet switch. I2C bus logic, used for low-level communication with each component. Component redundancy circuitry. Gigabit Ethernet switch that is connected to the embedded CPU complex on all components. Switch fabric—Provides the switching functions for the IOCs.
Page 73 Supported Slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power Requirement 150 W Weight Approximately 10 lb (4.5 kg) LEDs OK/FAIL LED, one bicolor: Green–The SCB is operating normally.
Page 74: Switch Control Board Srx5K-Scbe Overview
Switch Control Board SRX5K-SCBE Overview The SRX5000 line enhanced Switch Control Board (SRX5K-SCBE) caters to high-end security markets requiring support for higher capacity traffic. The SRX5K-SCBE provides greater interface density (slot and capacity scale) and improved services. Some key attributes of the SRX5K-SCBE are: A bandwidth of 120 Gbps per slot with redundant fabric support and improved fabric performance by using the next-generation fabric (XF) chip.
Page 75: Switch Control Board Srx5K-Scbe Specifications
None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 160 W at 131º F (55º C) 130 W at 104º F (40º C) 120 W at 77º F (25º C) Weight 9.6 lb (4.4 kg) with Routing Engine...
Page 76: Srx5K-Scbe Leds
Serial number location The serial number label is located as shown in Figure 29 on page Figure 29: SRX5K-SCBE Serial Number Label Serial number ID label SRX5K-SCBE LEDs Table 28 on page 77 describes the SRX5K-SCBE LEDs and their states. Table 28: SRX5K-SCBE LEDs Label Color...
Page 77: Switch Control Board Srx5K-Scb3 Overview
The SRX5K-SCB3 (SCB3) caters to high-end security markets requiring support for higher capacity traffic, greater interface density (slot and capacity scale), and improved services. The SCB3 is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. The SCB3 supports the standard midplane and the enhanced midplane.
Page 78: Switch Control Board Srx5K-Scb3 Specifications
Cables and connectors Slot for Routing Engine Controls None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 300 W Weight 9.6 lb (4.4 kg) with Routing Engine...
Page 79: Srx5K-Scb3 Leds
Serial number location The serial number label is located as shown in Figure 31 on page Figure 31: SRX5K-SCB3 Serial Number Label SRX5K-SCB3 LEDs Table 29 on page 80 describes the SCB3 LEDs and their states. Table 29: SRX5K-SCB3 LEDs Label Color State...
Page 80: Switch Control Board Srx5K-Scb4 Overview
CLI. If you change the fabric mode of SCB4 to Redundant Fabric mode you must install two SCB4s in SRX5600 and you can install either two or three SCB4s in SRX5800 Services Gateways. If you are upgrading from SCB3 (Redundant Fabric mode is the default fabric mode in SCB2 and SCB3) to SCB4 and installing only two SCB4s, you must have Junos OS 19.3R1 or later and change the default fabric...
Page 81: Switch Control Board Srx5K-Scb4 Specifications
The Routing Engine installs directly into a slot on the SCB4, as shown in Figure 32 on page Figure 32: SRX5K-SCB4 SRX5K-SCB4 Switch Control Board SRX5K-SCB4 Specifications SRX5K-SCB4 (SCB4) consists of the following components: LEDs to provides status of the SCB4. Circuits for chassis management and control.
Page 82 Controls None Supported slots SRX5400–Not supported SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement At different temperatures: 55° C: 425 W 40° C: 400 W 25° C: 385 W Cooling requirement For efficient and reliable power and cooling, you must install SRX Series high-capacity power supplies and fan trays in the SRX Series chassis.
Page 83: Srx5K-Scb4 Leds
SRX5K-SCB4 LEDs Table 30 on page 84 describes the SCB4 LEDs and their states. Table 30: SRX5K-SCB4 LEDs Label Color State Description OK/FAIL Green On steadily SCB4 is online. On steadily SCB4 has failed. – SCB4 is offline. FABRIC ACTIVE Green On steadily The switch fabric on this board is in Active mode.
Page 84: Routing Engine Srx5K-Re-13-20 Specifications
A USB port on the Routing Engine accepts a USB memory card that allows you to load Junos OS. Figure 34: SRX5K-RE-13-20 Routing Engine For detailed information about the Routing Engines supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/. Routing Engine SRX5K-RE-13-20 Specifications The SRX5K-RE-13-20 Routing Engine...
Page 85 Figure 35: Routing Engine You must install at least one Routing Engine in the services gateway. You can install a second Routing Engine if both Routing Engines are running Junos OS Release 10.0 or later. A second Routing Engine is required if you are using the dual chassis cluster control link feature available in Junos OS Release 10.0 and later.
Page 86 For specific information about Routing Engine components (for example, the amount of DRAM), issue the show chassis routing-engine command. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways Software release Junos OS Release 9.2 and later Junos OS Release 10.0 and later required to install a second Routing Engine Cables and connectors AUX—Connects the Routing Engine to a laptop, a modem, or another auxiliary device through...
Page 87 MASTER LED: Blue–The Routing Engine is Primary. NOTE: The SRX5400, SRX5600, and SRX5800 Services Gateways do not support a secondary or backup Routing Engine, so the MASTER LED should always be lit. OK/FAIL LED, one bicolor: Off–The Routing Engine is operating normally.
Page 88: Routing Engine Srx5K-Re-1800X4 Overview
Routing Engine SRX5K-RE-1800X4 Overview The enhanced Routing Engine is an Intel-based PC platform that runs Junos OS. Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device.The Routing Engine must be installed directly into the SRX5K-SCBE.
Page 89: Srx5K-Re-1800X4 Routing Engine Boot Sequence
Reset button—Reboots the Routing Engine when pressed. Online/Offline button—Takes the Routing Engine online or offline when pressed. Extractor clips—Inserts and extracts the Routing Engine. Captive screws—Secures the Routing Engine in place. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways...
Page 90 Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 NOTE: The services gateway host subsystem Routing Engine must be installed in the SCB in slot 0. A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations.
Page 91: Srx5K-Re-1800X4 Leds
Serial number location The serial number label is located as shown in Figure 38 on page Figure 38: SRX5K-RE-1800X4 Serial Number Label SRX5K-RE-1800X4 LEDs Each Routing Engine has four LEDs that indicate its status. The LEDs, labeled MASTER, STORAGE, ONLINE, and OK/FAIL, are located directly on the faceplate of the Routing Engine.
Page 92: Routing Engine Srx5K-Re3-128G Specifications
MASTER Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways, based on Intel’s Haswell-EP CPU with 6 cores, and 128GB of DDR4 memory. It provides increased control plane performance and scalability along with virtualization features in the SRX Series 5000 line of chassis.
Page 93 NOTE: In the SRX5600 or SRX5800 Services Gateways chassis cluster configurations, dual control links functionality is not supported if you mix SRX5K-RE-1800X4 and SRX5K-RE3-128G Routing Engines. To support dual control links you have to install two SRX5K-RE3-128Gs.
Page 94: Srx5K-Re3-128G Routing Engine Components
Serial number location The serial number label is located as shown in Figure 40 on page Figure 40: SRX5K-RE3-128G Serial Number Label Serial number ID label SRX5K-RE3-128G Routing Engine Components Each Routing Engine consists of the following components: CPU—Runs Junos OS to maintain the routing tables and routing protocols. EEPROM—Stores the serial number of the Routing Engine.
Page 95: Srx5K-Re3-128G Routing Engine Leds
NOTE: The control interface names differ based on the routing engine: For RE2, the control interfaces are displayed as em0 and em1. For RE3, the control interfaces are displayed as ixlv0 and igb0. For more information, see show chassis cluster interfaces. Status LEDs—Table 32 on page 96 describes the functions of the ONLINE, OK/FAIL, MASTER, DISK1,...
Page 96: Srx5K-Re3-128G Routing Engine Boot Sequence
IN THIS SECTION SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 98 Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 99 SRX5800 Services Gateway Card Cage and Slots | 103 SRX5800 Services Gateway SPC Description | 105...
Page 97: Srx5400, Srx5600, And Srx5800 Services Gateway Card Overview
SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800 Services Gateway to suit the needs of your network. The following types of cards are available for the SRX5400, SRX5600, and SRX5800 Services Gateways: I/O cards (IOCs) provide additional physical network connections to the services gateway.
Page 98: Cards Supported On Srx5400, Srx5600, And Srx5800 Services Gateways
Although the following modules are not cards in the sense of having a form-factor that fits the card cage of the SRX5400, SRX5600, and SRX5800 Services Gateway, this guide also addresses the following modules that fit into certain SRX5400, SRX5600, and SRX5800 Services Gateway cards:...
Page 99 Table 33: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 “Services Processing Card 12.1X46-D10 12.1X44-D10 SRX5K-SPC-4-15-320 Specifications”...
Page 100 Table 33: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 “Switch Control Board 12.1X46-D10 15.1X49 SRX5K-SCB Specifications”...
Page 101 Table 33: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 “MIC with 2x40GE QSFP+ 12.1X46-D10 12.1X46-D10...
Page 102: Srx5800 Services Gateway Card Cage And Slots
Figure 41: Interoperability Matrix for SRX5400, SRX5600, and SRX5800 Services Gateways Model Numbers SRX5400 SRX5K-SCB SRX5K-RE-13-20 SRX5600/SRX5800 SRX5K-SCB SRX5K-RE-13-20 SRX5K-SCBE SRX5K-RE-1800X4 SRX5K-SCB3 SRX5K-RE-1800X4 SRX5K-SPC-2-10-40 SRX5K-SPC-4-15-320 SRX5K-SPC3 SRX5K-4XGE-XFP SRX5K-40GE-SFP SRX5K-FPC-IOC SRX5K-MPC (SRX-MIC-20GE-SFP) (SRX-MIC-10XG-SFPP) (SRX-MIC-1X100G-CFP) (SRX-MIC-2X40G-QSFP) SRX5K-MPC3-40G10G SRX5K-MPC3-100G10G SRX5K-IOC4-10G SRX5K-IOC4-MRAT SRX5600/SRX5800 SRX5K-SCB4...
Page 103 Table 34: SRX5800 Services Gateway Card Cage Slots Eligible Cards IOC, Flex IOC, or Card Cage Slot SPC3 IOC3 & IOC4 0 (leftmost) 11 (rightmost) NOTE: For operational and cooling efficiency in SRX5800 Services Gateways, we recommend that slot 0 and 11 be filled last.
Page 104: Srx5800 Services Gateway Spc Description
SRX5800 Services Gateway SPC Description The Services Processing Card (SPC) has Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 42 on page 105). All traffic traversing the services gateway is passed to an SPU to have services processing applied to it. Traffic is intelligently distributed by interface cards to SPUs for services processing.
Page 105 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.
Page 106 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) Controls None Supported Slots SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE. Power Maximum 351 W Requirement Weight...
Page 107 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the two SPUs SPU 0 and SPU 1: Green–The SPU is operating normally.
Page 108: Services Processing Card Srx5K-Spc-4-15-320 Specifications
Serial Number The serial number label is located as shown in Figure 44 on page 109. Location Figure 44: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Services Processing Card SRX5K-SPC-4-15-320 Specifications The SRX5K-SPC-4-15-320 Services Processing Card (SPC) contains four Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 45 on page...
Page 109 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces.
Page 110 SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE. Power...
Page 111 LEDs...
Page 112 OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the four SPUs SPU 0 through SPU 3: Green–The SPU is operating normally. Amber–The SPU is initializing.
Page 113: Services Processing Card Srx5K-Spc3 Specifications
SPCs cannot be installed in slots that are reserved for Switch Control Boards (SCBs) or in slot 11 on the SRX5800. If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to...
Page 114 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces One Gigabit Ethernet switch that provides control connectivity to the Routing Engine.
Page 115 SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except slot 11, and the slots 0 or 1 which are reserved for SCB/RE. Power...
Page 116 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each SPU SPU 0 and SPU 1: Off–The SPU is offline. Blinking Amber–The SPU is initializing.
Page 117: Modular Port Concentrator (Srx5K-Mpc) Specifications
You can install MPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Page 118 NOTE: When installing an SRX5K-MPC in an SRX5600 or SRX5800 Services Gateway: If the session-distribution-mode has not been explicitly configured using the CLI command: user@host set security forwarding-process application-services session-distribution-mode The SRX5K-MPC defaults to hash-based mode automatically even if existing SRX5K-MPC or non-MPCs are installed.
Page 119: Mic With 20X1Ge Sfp Interfaces (Srx-Mic-20Ge-Sfp)
Maximum of 570 W for the MPC with two MICs, including applicable transceivers. NOTE: To install and use SRX5K-MPCs in the SRX5600 and SRX5800 Services Gateways, you must have high-capacity power supplies (either AC or DC) and high-capacity fan trays installed in the services gateways.
Page 120 Figure 49: SRX-MIC-20GE-SFP Description MIC with twenty 1-Gigabit Ethernet SFP Ethernet ports Fits into either of the two slots of SRX-5K-MPC Supports up to 20 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 20 Gbps Software release Junos OS Release 12.1X47-D10 Cables and connectors Sockets for 20 SFP Gigabit Ethernet transceivers.
Page 121 Port and Interface Numbering...
Page 122 2 or 3 when installed in the second slot. port—Port number. Figure 50 on page 123 shows the SRX-MIC-20GE-SFP MIC installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 50: SRX-MIC-20GE-SFP Interface Port Mapping SRX-MIC-20GE-SFP...
Page 123 The sample output of the show chassis fpc pic-status command output displays two 20-port Gigabit Ethernet MICs with SFP — inserted into the slots of an MPC in slot 2. The logical PICs of the two MICs— 10x 1GE(LAN) SFP — are shown as PIC 0, PIC 1, PIC 2, and PIC 3.
Page 124 user@host> show interfaces terse Interface Admin Link Proto Local Remote gr-0/0/0 ip-0/0/0 lt-0/0/0 ge-2/0/0 ge-2/0/1 down ge-2/0/2 down ge-2/0/3 down ge-2/0/4 down ge-2/0/5 ge-2/0/6 down ge-2/0/7 down ge-2/0/8 ge-2/0/9 ge-2/1/0 down ge-2/1/1 ge-2/1/2 down ge-2/1/3 down ge-2/1/4 ge-2/1/5 down ge-2/1/6 down ge-2/1/7 down...
Page 125: Mic With 10X10Ge Sfp+ Interfaces (Srx-Mic-10Xg-Sfpp)
ge-2/3/9 down Serial number location The serial number label is yellow and is located as shown in Figure 51 on page 126. Figure 51: SRX-MIC-20GE-SFP Serial Number Label NOTE: The serial number for the mezzanine card is shown only for reference and is never used for any purpose.
Page 126 Figure 52: SRX-MIC-10XG SFPP Description MIC with ten SFP+ 10-Gigabit Ethernet ports Fits into MPC Supports up to 100 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 100 Gbps Software Junos OS Release 12.1X46-D10 release Cables and Sockets for ten 10-Gbps SFP+ transceivers connectors Hardware Compatibility Tool...
Page 127 Port and Interface Numbering...
Page 128 Figure 53 on page 129 shows the port and interface numbering of an SRX-MIC-10XG-SFPP MIC when it is installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 53: SRX-MIC-10XG-SFPP Port and Interface Numbering...
Page 129 PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 2 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP+ PIC 2 Online 10x 10GE SFP+ The show interfaces terse command output displays the 10–Gigabit Ethernet interfaces that correspond to the 10 ports located on each MIC.
Page 130: Mic With 1X100Ge Cfp Interface (Srx-Mic-1X100G-Cfp)
Serial number The serial number label is yellow and located as shown in Figure 54 on page 131. location Figure 54: SRX-MIC-10XG-SFPP Serial Number Label MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
Page 131 Software release Junos OS Release 12.1X46-D10 Cables and connectors One socket for a 100-Gigabit CFP transceiver. Supported CFP transceivers: 100GBASE-LR4 (model number: SRX-CFP-100G-LR4) 100GBASE-SR10 (model number: SRX-CFP-100G-SR10) Supported slots Either slot in SRX5K-MPC Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Green–The MIC is operating normally.
Page 132: Mic With 2X40Ge Qsfp+ Interfaces (Srx-Mic-2X40G-Qsfp)
MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-2X40G-QSFP (see Figure 57 on page 133) can be installed in an MPC to add two 40-Gigabit quad small form-factor pluggable (QSFP+) Ethernet ports.
Page 133: Srx5K-Mpc3-40G10G Specifications
The SRX5K-MPC3-40G10G (IOC3) is an interface card that provides 10 Gigabit Ethernet and 40 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 59 on page 135.
Page 134 Figure 59: SRX5K-MPC3-40G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Page 135 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0 through 0/11 and 1/0 through 1/11 40-Gigabit Ethernet ports: 2/0 through 2/2 and 3/0 through 3/2 Software features Optical diagnostics and related alarms Two packet-forwarding engines, PFE0 and PFE1.
Page 136: Srx5K-Mpc3-100G10G Specifications
The SRX5K-MPC3-100G10G (IOC3) is an interface card that provides 100 Gigabit Ethernet and 10 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 61 on page 138.
Page 137 Figure 61: SRX5K-MPC3-100G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Page 138 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0, 0/1, 2/0, and 2/1 100-Gigabit Ethernet ports: 1/0 and 3/0 Software features Configurable LAN-PHY mode options per 10-Gigabit Ethernet port Optical diagnostics and related alarms...
Page 139: Srx5K-Ioc4-10G Specifications
SRX5K-IOC4-10G Specifications SRX5K-IOC4-10G is a fixed-configuration interface card with a Packet Forwarding Engine that provides 400-Gbps line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600 and SRX5800 Services Gateways. See Figure 63 on page 141.
Page 140 SRX5K-IOC4-10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Page 141 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Forty 10-Gigabit Ethernet ports. The ports support SFP+ transceivers. Requires high-capacity power supplies and high-capacity fan trays. The ports are labeled as (seeFigure 63 on page 141): 0/0 through 0/9 0/10 through 0/19 1/0 through 1/9...
Page 142: Srx5K-Ioc4-Mrat Specifications
SRX5K-IOC4-MRAT is a fixed-configuration interface card with a Packet Forwarding Engine that provides up to 480-Gbps (240-Gbps per PIC slot) line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 65 on page 143.
Page 143 If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Page 144 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Twelve Gigabit Ethernet ports that can be configured as 40-Gigabit Ethernet port or as 4X10-Gigabit Ethernet port using a breakout cable. The ports support quad small-form factor pluggable plus (QSFP+) transceivers. Four out of the twelve ports can be configured as 100-Gigabit Ethernet ports.
Page 145 Software features Application security Application Layer Gateway (ALG) Attack detection and prevention Class of service (CoS) Equal-cost multipath (ECMP) load balancing GPRS Tunneling Protocol (GTP) High availability (chassis cluster) Intrusion detection and prevention (IDP) IPsec VPN Layer 2 transparent mode Logical systems Network Address Translation (NAT) Routing protocols (BFD, BGP, IGMP, IS-IS, MLD,...
Page 146: Srx5800 Services Gateway Interface Card Description
SRX5800 Services Gateway Interface Card Description Interface cards are cards that support physical interfaces that you use to connect the services gateway to your data network. Three different types of interface cards are available: I/O Cards (IOCs) have fixed interface ports on the front panel of the card.
Page 147 Figure 67: Typical IOCs Figure 68 on page 148 shows a Flex IOC with two typical port modules installed. Figure 68: Flex IOC with Port Modules Flex IOC 4x10GE-XFP port module in slot 0 16x1GE-TX port module in slot 1 Figure 69 on page 149 shows an MPC.
Page 148: I/O Card Srx5K-40Ge-Sfp Specifications
MPC (empty) For detailed information about the interface cards, port modules, and MICs supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference www.juniper.net/documentation/. I/O Card SRX5K-40GE-SFP Specifications The SRX5K-40GE-SFP I/O card (IOC) is optimized for Ethernet density and supports 40 Gigabit Ethernet...
Page 149 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2/6 Power Requirement 312 W typical, 365 W maximum Weight Approximately 13 lb (5.9 kg)
Page 150: I/O Card Srx5K-4Xge-Xfp Specifications
LEDs OK/FAIL LED, one bicolor: Steady green–The IOC is operating normally. Red–The IOC has failed and is not operating normally. Off–The IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 71 on page 151.
Page 151 10GBASE-SR (model numbers SRX-XFP-10GE-SR and SRX-XFP-10GE-SR-ET ) Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2 Power Requirement 312 W typical, 365 W maximum Weight Approximately 13 lb (5.9 kg)
Page 152: Flex I/O Card (Srx5K-Fpc-Ioc) Specifications
LEDs OK/FAIL LED, one bicolor: Steady green–The IOC is operating normally. Red–The IOC has failed and is not operating normally. Off–The IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 73 on page 153.
Page 153 Slots for two port modules Controls None Supported Slots SRX5600–Any slot except bottom slots 0 or 1 SRX5800–Any slot except center slots 0, 1, or 2/6 Power Requirement 312 W typical, 365 W maximum (includes port modules) Weight Approximately 10 lb (4.5 kg)
Page 154: Flex I/O Card Port Module Srx-Ioc-16Ge-Sfp Specifications
Serial Number Location The serial number label is located as shown in Figure 75 on page 155. Figure 75: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.
Page 155 Software release Junos OS Release 9.5R1 and later Cables and connectors 16 Gigabit Ethernet SFP ports Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls ONLINE Button–The ONLINE button on the port module front panel toggles the port module online and offline Supported Slots...
Page 156: Flex I/O Card Port Module Srx-Ioc-16Ge-Tx Specifications
Serial Number Location The serial number label is located as shown in Figure 77 on page 157. Figure 77: Port Module SRX-IOC-16GE-SFP Serial Number Label Serial number ID label JX0123 Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.
Page 157: Flex I/O Card Port Module Srx-Ioc-4Xge-Xfp Specifications
Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Steady green–The port module is operating normally. Red–The port module has failed and is not operating normally. Off–The port module is powered down. LINK LED, single color, one per port: Steady green–The link is active.
Page 158 Figure 80: Flex IOC Port Module SRX-IOC-4XGE-XFP Description Port module with four 10-Gigabit Ethernet XFP ports Maximum throughput: 10 Gbps Oversubscription ratio: 4:1 Maximum configurable MTU: 9192 bytes Software release Junos OS Release 9.5R1 and later Cables and connectors 4 XFP Ethernet ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET...
Page 159 Serial Number Location The serial number label is located as shown in Figure 81 on page 160. Figure 81: Port Module SRX-IOC-4XGE-XFP Serial Number Label Serial number ID label JX0123...
Page 160: Site Planning, Preparation, And Specifications
C HAPTER Site Planning, Preparation, and Specifications Site Preparation Checklist for the SRX5800 Services Gateway | 163 SRX5800 Site Guidelines and Requirements | 164 SRX5800 Rack and Cabinet Requirements | 168 Configuring Ambient Temperature on SRX5800 Services Gateway | 171...
Page 162: Site Preparation Checklist For The Srx5800 Services Gateway
Site Preparation Checklist for the SRX5800 Services Gateway The checklist in Table 35 on page 163 summarizes the tasks you need to perform when preparing a site for services gateway installation. Table 35: Site Preparation Checklist Performed Item or Task For More Information ...
Page 163: Srx5800 Site Guidelines And Requirements
SRX5800 Services Gateway Environmental Specifications | 164 General Site Guidelines | 165 Site Electrical Wiring Guidelines | 166 Clearance Requirements for SRX5800 Services Gateway Airflow and Hardware Maintenance | 166 SRX5800 Services Gateway Environmental Specifications Table 36 on page 164 specifies the environmental specifications required for normal services gateway operation.
Page 164: General Site Guidelines
Table 36: Services Gateway Environmental Specifications (continued) Description Value Maximum thermal output Standard-Capacity AC and DC power supplies AC power: 20,160, BTU/hour (5912 W) DC power: 17,057 BTU/hour (5002 W) NOTE: These specifications are estimates and subject to change. High-Capacity AC and DC power supplies AC power: 32,780 BTU/hour (9608 W) DC power: 33,482 BTU/hour (9813 W) NOTE:...
Page 165: Site Electrical Wiring Guidelines
Destruction of the signal drivers and receivers in the device Electrical hazards as a result of power surges conducted over the lines into the equipment Clearance Requirements for SRX5800 Services Gateway Airflow and Hardware Maintenance When planning the installation site, you need to allow sufficient clearance around the rack (see...
Page 166 RELATED DOCUMENTATION SRX5800 Services Gateway Agency Approvals | 533 SRX5800 Services Gateway General Safety Guidelines and Warnings SRX5800 Services Gateway Fire Safety Requirements and Fire Suppression Equipment SRX5800 Services Gateway Definition of Safety Warning Levels General Electrical Safety Guidelines and Warnings...
Page 167: Srx5800 Rack And Cabinet Requirements
SRX5800 Services Gateway Rack-Mounting Hardware | 168 SRX5800 Services Gateway Rack Size and Strength Requirements | 168 Spacing of Rack-Mounting Bracket Holes for the SRX5800 Services Gateway | 169 Connection to Building Structure for the SRX5800 Services Gateway Rack | 169...
Page 168: Spacing Of Rack-Mounting Bracket Holes For The Srx5800 Services Gateway
400 lb (182 kg). If you stack three fully configured services gateways, it must be capable of supporting up to 1,200 lb (545 kg). Spacing of Rack-Mounting Bracket Holes for the SRX5800 Services Gateway The services gateway can be mounted in any rack that provides holes or hole patterns spaced at 1 U (1.75 in.) increments.
Page 169: Srx5800 Services Gateway Cabinet Size And Clearance Requirements
If high-capacity AC or DC power supplies are installed, the services gateway must be installed in a cabinet that is at least 600 mm wide by 1000 mm deep. “Clearance Requirements for SRX5800 Services Gateway Airflow and Hardware Maintenance” on page 166 for chassis width and depth dimensions.
Page 170: Configuring Ambient Temperature On Srx5800 Services Gateway
IN THIS SECTION Understanding How Configuring Ambient Temperature Helps Optimize Power Utilization | 171 Monitoring the Power Consumption of SRX5800 Services Gateways Cards by Configuring the Ambient Temperature | 172 Calculating Power Requirements to Support Eight SRX5K-SPC3s with Three IOC3s or Three IOC4s on an...
Page 171: Monitoring The Power Consumption Of Srx5800 Services Gateways Cards By Configuring The Ambient Temperature
Configuring the Ambient Temperature You can configure the ambient temperature of the SRX5800 chassis to manage power allocated to the cards. You can set the ambient temperature of the chassis at 25° C, 40° C, or 55° C. On system initialization, the power manager reads the ambient temperature and allocates power to the cards according to the power budget policy at that temperature.
Page 172: Calculating Power Requirements To Support Eight Srx5K-Spc3S With Three Ioc3S Or Three Ioc4S On An Srx5800 Services Gateway
SRX5800 Services Gateway, you can optimize power provisioned for SPC3, IOC3 and IOC4 on SRX5800. After you set the ambient temperature of SRX5800 to 25° C, SRX5800 can support eight SRX5K-SPC3s with three IOC3s or three IOC4s. The SRX5800 Services Gateway chassis with normal-capacity AC power supplies has one overall zone.
Page 173 Gateway Chassis PEM0 PEM1 PEM2 PEM3 Zone 1 Zone 0 After setting the ambient temperature of SRX5800 to 25° C, you can have two different configurations: 1. SRX5800 with eight SRX5K-SPC3s and three IOC3s, See Table 39 on page 175...
Page 174 In chassis cluster if you configured dual control links, then each power zone must have one control link. You must power-cycle the SRX5800 Services Gateway after the configuration. Table 39: SRX5800 Services Gateway Power Requirement with 8xSPC3 and 3xIOC3 Power Budget at Power budget...
Page 175 Table 39: SRX5800 Services Gateway Power Requirement with 8xSPC3 and 3xIOC3 (continued) Power Budget at Power budget Ambient Power Budget (with 25° C Temperature Zone Chassis Component Part Number (default) config) (25° C) Zone SCB 1 SCB3 with RE2 275 W...
Page 176 Table 40: SRX5800 Services Gateway Power Requirement with 8xSPC3 and 3xIOC4 Power Budget at Power budget Ambient Power Budget (with 25° C Temperature Zone Chassis Component Part Number (default) config) (25° C) Zone High-capacity cooling SRX5800-HC-FAN 320 W 320 W...
Page 177: Calculating Power Requirements For The Srx5800 Services Gateway
We recommend that you provision power according to the maximum input current listed in the power supply electrical specifications (see “SRX5800 Services Gateway AC Power Supply Specifications” on page 54 “SRX5800 Services Gateway DC Power Supply Specifications” on page 62). Use the following procedures to calculate the power requirement: 1. Calculate the power requirement.
Page 178 PEM 1 or 3 Upper fan tray IOC/SPC slots 0 through 5 SCB slot 0 Figure 84: Power Distribution from DC and High-Capacity AC Power Supplies in the SRX5800 Services Gateway Chassis PEM0 PEM1 PEM2 PEM3 Zone 1 Zone 0...
Page 179 One SRX5K-MPC (IOC2) Modular Port Concentrator, with two Modular Interface Cards (MICs)
Page 180 One SRX5K-40GE-SFP I/O card (IOC)
Page 181 SRX5K-SPC-4-15-320 (SPC2) Services Processing Card NOTE: You must have high-capacity power supplies (either AC or DC) and high-capacity fan trays installed in the services gateway in order to install and use SPC2. If you do not have high-capacity power supplies and fan trays installed, the services gateway will log an alarm condition when it recognizes the SPC.
Page 182 1. Calculate the power requirements (usage) as shown in Table 42 on page 183 Table 46 on page 188. Table 42: Sample Power Requirements for an SRX5800 Services Gateway with SCB1 and RE1 Chassis Power Component Part Number Requirement Zone 0 Power...
Page 183 For the power consumption specifications of specific SRX5800 services gateway cards, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Guide at www.juniper.net/documentation/. 2. Evaluate the power budget, including the budget for each zone, if applicable. In this step, we check the required power against the maximum output power of available power supply options.
Page 184 NOTE: Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration.
Page 185 Table 44: Calculating Input Power for SRX5800 Services Gateway with SCB1 and RE1 Power Supply Efficiency Power Supply Input Power Requirement SRX5800 AC high-capacity ~88 % Zone 0: 3990/0.88= 4534 W Zone 1: 4080/0.88= 4636 W SRX5800 DC high-capacity 86 % Zone 0: 3990/0.86= 4639 W...
Page 186 Sample configuration for SRX5800 Services Gateway chassis with SRX5K-SCBE (SCB2) and SRX5K-RE-1800X4 (RE2): Four high-capacity AC power supplies (using two feeds for each power supply); two supplies are active, two are redundant. Two Switch Control Boards (SCBs) with one Routing Engine installed in SCB 0...
Page 187 1. Calculate the power requirements (usage) as shown in Table 46 on page 188. Table 46: Sample Power Requirements for an SRX5800 Services Gateway SCB2 and RE2 Chassis Power Component Part Number Requirement Zone 0 Power Zone 1 Power Base system...
Page 188 Table 47: Calculating Power Budget for SRX5800 Services Gateway with SCB2 and RE2 Maximum Output Power Maximum Nonzoned Zone 0 Unused Zone 1 Unused of Power Output Power Unused Power Power Power Supply Supply for System Power SRX5800 AC 1700 W...
Page 189 NOTE: Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration. Table 48: Calculating Input Power for SRX5800 Services Gateway with SCB2 and RE2 Power Supply Efficiency...
Page 190 Sample configuration for SRX5800 Services Gateway chassis with SRX5K-SCB3 (SCB3) and SRX5K-RE-1800X4 (RE2): Four high-capacity AC power supplies (using two feeds for each power supply); two supplies are active, two are redundant. Two Switch Control Boards (SCBs) with one Routing Engine installed in SCB 0...
Page 191 1. Calculate the power requirements (usage) as shown in Table 50 on page 192. Table 50: Sample Power Requirements for an SRX5800 Services Gateway SCB3, IOC3, and RE2 Chassis Power Component Part Number Requirement Zone 0 Power Zone 1 Power...
Page 192 Table 51: Calculating Power Budget for SRX5800 Services Gateway with SCB3, IOC3,and RE2 Maximum Output Power Maximum Nonzoned Zone 0 Unused Zone 1 Unused of Power Output Power Unused Power Power Power Supply Supply for System Power SRX5800 AC 1700 W...
Page 193 Normal-capacity AC and DC power supplies are not included in the following table, because their power budget was exceeded in the sample configuration. Table 52: Calculating Input Power for SRX5800 Services Gateway with SCB3, IOC3, and RE2 Power Supply Efficiency...
Page 194 Sample configuration for SRX5800 Services Gateway chassis with six SRX5K-SPC-2-10-40 (SPC2) and one SRX5K-SPC3 (SPC3): Four high-capacity AC power supplies (using two feeds for each power supply); two supplies are active, two are redundant. Two SRX5K-SCB4s (SCB4) with two SRX5K-RE3-128Gs (RE3) installed in slot number SCB 0 and SCB 1 of the chassis.
Page 195 1. Calculate the power requirements (usage) as shown in Table 54 on page 196. Table 54: Sample Power Requirements for an SRX5800 Services Gateway with Six SPC2s and One SPC3 Chassis Power Component Part Number Requirement Zone 0 Power Zone 1 Power...
Page 196 Table 55: Calculating Power Budget for SRX5800 Services Gateway with Six SPC2s and One SPC3 Maximum Power Maximum Power Zone 0 Unused Zone 1 Unused Output of a Power Output of a Power Power Power Supply Supply System SRX5800 AC...
Page 197: Srx5800 Network Cable And Transceiver Planning
Routing Engine Interface Cable and Wire Specifications for the SRX5800 Services Gateway | 198 Signal Loss in Multimode and Single-Mode Fiber-Optic Cable for the SRX5800 Services Gateway | 198 Attenuation and Dispersion in Fiber-Optic Cable for the SRX5800 Services Gateway | 199...
Page 198: Attenuation And Dispersion In Fiber-Optic Cable For The Srx5800 Services Gateway
Compared with multimode fiber, single-mode fiber has higher bandwidth and can carry signals for longer distances. It is consequently more expensive. Attenuation and Dispersion in Fiber-Optic Cable for the SRX5800 Services Gateway Correct functioning of an optical data link depends on modulated light reaching the receiver with enough power to be demodulated correctly.
Page 199: Calculating Power Budget For Fiber-Optic Cable For The Srx5800 Services Gateway
Calculating Power Budget for Fiber-Optic Cable for the SRX5800 Services Gateway To ensure that fiber-optic connections have sufficient power for correct operation, you need to calculate the link's power budget, which is the maximum amount of power it can transmit. When you calculate the power budget, you use a worst-case analysis to provide a margin of error, even though all the parts of an actual system do not operate at the worst-case levels.
Page 200 Table 59: Estimated Values for Factors That Cause Link Loss (continued) Link-Loss Factor Estimated Link-Loss Value Modal and chromatic dispersion Single-mode—None Multimode—None, if product of bandwidth and distance is less than 500 MHz–km Connector 0.5 dB Splice 0.5 dB Fiber attenuation Single-mode—0.5 dB/km Multimode—1 dB/km The following example uses the estimated values in...
Page 201: Srx5800 Alarm And Management Cable Specifications And Pinouts
RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Ethernet Port | 203 RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Auxiliary and Console Ports | 204 Alarm Relay Contact Wire Specifications for the SRX5800 Services Gateway Table 60 on page 202 lists the specifications for the wires that connect to the alarm relay contacts.
Page 202: Connector Pinouts For The Srx5800 Services Gateway Routing Engine Ethernet Port
RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Ethernet Port The port on the Routing Engine labeled ETHERNET is an autosensing 10/100-Mbps Ethernet RJ-45 receptacle that accepts an Ethernet cable for connecting the Routing Engine to a management LAN (or other device that supports out-of-band management).
Page 203: Connector Pinouts For The Srx5800 Services Gateway Routing Engine Auxiliary And Console Ports
RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Auxiliary and Console Ports The ports on the Routing Engine labeled AUX and CONSOLE are asynchronous serial interfaces that accept an RJ-45 connector. The ports connect the Routing Engine to an auxiliary or console management device.
Page 204: Initial Installation And Configuration
Overview of Installing the SRX5800 Services Gateway | 207 Unpacking the SRX5800 | 208 Installing the SRX5800 Mounting Hardware | 212 Connecting the SRX5800 to External Devices | 232 Connecting the SRX5800 to Power | 238 Performing the Initial Software Configuration for the SRX5800 | 249...
Page 206: Overview Of Installing The Srx5800 Services Gateway
233 Connecting the SRX5800 Services Gateway to a Network for Out-of-Band Management on page 234 Connecting the Alarm Relay Wires to the SRX5800 Services Gateway Craft Interface on page 266 9. Connect the grounding cable as described in “Grounding the SRX5800 Services Gateway” on page...
Page 207: Unpacking The Srx5800
250. Unpacking the SRX5800 IN THIS SECTION Tools and Parts Required to Unpack the SRX5800 Services Gateway | 208 Unpacking the SRX5800 Services Gateway | 209 Verifying the SRX5800 Services Gateway Parts Received | 210 Tools and Parts Required to Unpack the SRX5800 Services Gateway...
Page 208: Unpacking The Srx5800 Services Gateway
5. Slide the remainder of the shipping crate cover off the pallet. 6. Remove the foam covering the top of the services gateway. 7. Remove the accessory box and the SRX5800 Services Gateway Getting Started Guide. 8. Verify the parts received as described in “Verifying the SRX5800 Services Gateway Parts Received”...
Page 209: Verifying The Srx5800 Services Gateway Parts Received
Figure 85: Contents of the Shipping Crate Verifying the SRX5800 Services Gateway Parts Received A packing list is included in each shipment. Check the parts in the shipment against the items on the packing list. The packing list specifies the part numbers and descriptions of each part in your order.
Page 210 Table 64: Parts List for a Fully Configured Services Gateway (continued) Component Quantity Routing Engines 1 or 2 SCBs Up to 3 Power supplies Up to 4 Fan trays Air filter Air filter tray Getting Started Guide Large mounting shelf Small mounting shelf Blank panels for slots without components installed One blank panel for each slot not occupied...
Page 211: Installing The Srx5800 Mounting Hardware
Removing Components from the SRX5800 Chassis Before Installing It in the Rack | 217 Installing the SRX5800 Services Gateway Chassis in the Rack | 224 Reinstalling Components in the SRX5800 Services Gateway Chassis After Installing It in the Rack | 225...
Page 212: Tools Required To Install The Srx5800 Services Gateway
Phillips (+) screwdrivers, number 2 Electrostatic discharge (ESD) grounding wrist strap Installing the SRX5800 Services Gateway Mounting Hardware for a Four-Post Rack or Cabinet If you are installing the services gateway in a front-mount four-post rack or cabinet, you must first install the large mounting shelf, followed by the small mounting shelf.
Page 213 5. Tighten all the screws completely. 6. On the rear rack rails, install cage nuts in the holes specified in Table 66 on page 213 for the small shelf. 7. On the back of each rear rack rail, partially insert a mounting screw into the hole containing the lowest cage nut.
Page 214: Installing The Srx5800 Services Gateway Mounting Hardware In An Open-Frame Rack
Installing the SRX5800 Services Gateway Mounting Hardware in an Open-Frame Rack Before installing the services gateway in an open-frame rack, install the large mounting shelf on the rack. The small mounting shelf is not needed. If you are front-mounting the services gateway, also remove the center-mounting brackets located on each side of the chassis.
Page 215 4. Tighten all the screws completely. Figure 87: Installing the Mounting Hardware for an Open-Frame Rack Open-frame rack Large mounting shelf After the mounting hardware is installed, proceed to “Installing the SRX5800 Services Gateway Chassis in the Rack” on page 224.
Page 216: Removing Components From The Srx5800 Chassis Before Installing It In The Rack
150 lb (68 kg). You reinstall the components into the chassis after it is installed in the rack. Removing the Power Supplies Before Installing the SRX5800 Services Gateway Chassis | 217 Removing the Cable Manager Before Installing the SRX5800 Services Gateway Chassis | 218...
Page 217: Removing The Cable Manager Before Installing The Srx5800 Services Gateway Chassis
It can contain dangerous voltages. Figure 88: Removing a Power Supply Before Installing the Services Gateway (Standard-Capacity Power Supply Shown, High-Capacity Similar) Removing the Cable Manager Before Installing the SRX5800 Services Gateway Chassis To remove the cable manager (see Figure 89 on page 219): 1.
Page 218: Removing Fan Trays Before Installing The Srx5800 Services Gateway Chassis
Figure 89: Removing the Cable Manager Removing Fan Trays Before Installing the SRX5800 Services Gateway Chassis To remove the upper or lower fan tray (see Figure 90 on page 220 Figure 91 on page 221, which illustrate the upper and lower fan trays): 1.
Page 219 Figure 90: Removing an Upper Fan Tray...
Page 220: Removing Cards Before Installing The Srx5800 Services Gateway Chassis
Figure 91: Removing a Lower Fan Tray Removing Cards Before Installing the SRX5800 Services Gateway Chassis The services gateway holds up to twelve cards (IOCs, Flex IOCs, MPCs, SCBs, and SPCs), which are installed horizontally in the front of the device. Each card weighs up to 18.3 lb (8.3 kg), be prepared to accept its full weight.
Page 221 4. If a card uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap. Arrange the disconnected cables in the cable management system, to prevent the cables from developing stress points. WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables.
Page 222 CAUTION: The weight of the card is concentrated in the back end. Be prepared to accept the full weight—up to 13.1 lb (5.9 kg)—as you slide the card out of the chassis. When the card is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors.
Page 223: Installing The Srx5800 Services Gateway Chassis In The Rack
Installing the SRX5800 Services Gateway Chassis in the Rack Because of the services gateway’s size and weight—up to 400 lb (182 kg) depending on the configuration—you must install the services gateway using a mechanical lift. CAUTION: Before front mounting the services gateway in a rack, have a qualified technician verify that the rack is strong enough to support the services gateway's weight and is adequately supported at the installation site.
Page 224: Reinstalling Components In The Srx5800 Services Gateway Chassis After Installing It In The Rack
You reinstall components first in the rear of the chassis, and then in the front: Reinstalling Power Supplies After Installing the SRX5800 Services Gateway Chassis | 226 Reinstalling Fan Trays After Installing the SRX5800 Services Gateway Chassis | 227...
Page 225: Reinstalling Power Supplies After Installing The Srx5800 Services Gateway Chassis
Reinstalling Cards After Installing the SRX5800 Services Gateway Chassis | 229 Reinstalling the Cable Manager After Installing the SRX5800 Services Gateway Chassis | 231 Reinstalling Power Supplies After Installing the SRX5800 Services Gateway Chassis Reinstall the rightmost power supply first and then work your way to the left. To reinstall the AC or DC...
Page 226: Reinstalling Fan Trays After Installing The Srx5800 Services Gateway Chassis
Figure 94: Reinstalling a Power Supply (Standard-Capacity Shown, High-Capacity Similar) Reinstalling Fan Trays After Installing the SRX5800 Services Gateway Chassis To reinstall the fan trays (see Figure 95 on page 228 Figure 96 on page 229): 1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Page 227 Figure 95: Installing an Upper Fan Tray...
Page 228: Reinstalling Cards After Installing The Srx5800 Services Gateway Chassis
Figure 96: Installing a Lower Rear Fan Tray Reinstalling Cards After Installing the SRX5800 Services Gateway Chassis To reinstall cards (IOCs, Flex IOCs, MPCs, SPCs, and SCBs (see Figure 97 on page 231): 1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Page 229 6. Lift the card into place and carefully align first the bottom, then the top of the card with the guides inside the card cage. 7. Slide the card all the way into the card cage until you feel resistance. 8.
Page 230: Reinstalling The Cable Manager After Installing The Srx5800 Services Gateway Chassis
Figure 97: Installing an IOC Reinstalling the Cable Manager After Installing the SRX5800 Services Gateway Chassis To reinstall the cable manager (see Figure 98 on page 232): 1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Page 231: Connecting The Srx5800 To External Devices
IN THIS SECTION Tools and Parts Required for SRX5800 Services Gateway Connections | 233 Connecting the SRX5800 Services Gateway to a Management Console or an Auxiliary Device | 233 Connecting the SRX5800 Services Gateway to a Network for Out-of-Band Management | 234...
Page 232: Tools And Parts Required For Srx5800 Services Gateway Connections
2.5 mm Phillips (+) screwdriver Electrostatic discharge (ESD) grounding wrist strap Connecting the SRX5800 Services Gateway to a Management Console or an Auxiliary Device To use a system console to configure and manage the Routing Engine, connect it to the appropriate CONSOLE port on the Routing Engine.
Page 233: Connecting The Srx5800 Services Gateway To A Network For Out-Of-Band Management
Data bits—8 Stop bits—1 Flow control—none Connecting the SRX5800 Services Gateway to a Network for Out-of-Band Management To connect the Services Gateway Routing Engine to a network for out-of-band management, connect an Ethernet cable with RJ-45 connectors to the ETHERNET port on the Routing Engine. One Ethernet cable is provided with the services gateway.
Page 234: Connecting An Srx5800 Services Gateway To An External Alarm-Reporting Device
Connecting an SRX5800 Services Gateway to an External Alarm-Reporting Device To connect the services gateway to external alarm-reporting devices, attach wires to the RED and YELLOW relay contacts on the craft interface. (See Figure 103 on page 235.) A system condition that triggers the red or yellow alarm LED on the craft interface also activates the corresponding alarm relay contact.
Page 235: Connecting Network Cables To Srx5800 Services Gateway Iocs And Port Modules
4. Attach the other end of the wires to the external device. To attach a reporting device for the other kind of alarm, repeat the procedure. Connecting Network Cables to SRX5800 Services Gateway IOCs and Port Modules To connect the IOCs, MPCs, and port modules to the network (see...
Page 236 3. Insert the cable connector into the cable connector port on the faceplate. NOTE: The XFP cages and optics on the components are industry standard parts that have limited tactile feedback for insertion of optics and fiber. You need to insert the optics and fiber firmly until the latch is securely in place.
Page 237: Connecting The Srx5800 To Power
Fiber-optic cable Connecting the SRX5800 to Power IN THIS SECTION Tools and Parts Required for SRX5800 Services Gateway Grounding and Power Connections | 239 Grounding the SRX5800 Services Gateway | 239 Connecting Power to an AC-Powered SRX5800 Services Gateway | 241...
Page 238: Tools And Parts Required For Srx5800 Services Gateway Grounding And Power Connections
Tools and Parts Required for SRX5800 Services Gateway Grounding and Power Connections To ground and provide power to the services gateway, you need the following tools and parts: Phillips (+) screwdrivers, numbers 1 and 2 2.5-mm flat-blade (–) screwdriver 7/16-in. hexagonal-head external drive socket wrench, or nut driver, with a torque range between 23 lb-in.
Page 239 6. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. 7. Place the grounding cable lug over one of the two grounding points. The right pair is sized for UNC 1/4-20 screws and 1/4 in.
Page 240: Connecting Power To An Ac-Powered Srx5800 Services Gateway
Connecting Power to an AC-Powered SRX5800 Services Gateway WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5800 Services Gateway” on page 239 for instructions.
Page 241 NOTE: Each power supply must be connected to a dedicated AC power feed and a dedicated customer site circuit breaker. We recommend that you use a 15 A (250 VAC) minimum, or as required by local code. 7. Dress the power cords appropriately. Verify that the power cords do not block the air exhaust and access to services gateway components, or drape where people could trip on them.
Page 242: Powering On An Ac-Powered Srx5800 Services Gateway
Figure 108: Connecting AC Power to the Services Gateway (High-Capacity Power Supplies) Powering On an AC-Powered SRX5800 Services Gateway To power on an AC-powered services gateway: 1. Verify that the power supplies are fully inserted in the chassis. 2. Verify that each AC power cord is securely inserted into its appliance inlet.
Page 243 5. Switch on the dedicated customer site circuit breakers. Follow the ESD and safety instructions for your site. 6. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. 7.
Page 244: Connecting Power To A Dc-Powered Srx5800 Services Gateway
Connecting Power to a DC-Powered SRX5800 Services Gateway WARNING: Before performing DC power procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off position, and tape the switch handle of the circuit breaker in the off position.
Page 245 The cable with very large resistance (indicating an open circuit) to chassis ground is –48V. The cable with very low resistance (indicating a closed circuit) to chassis ground is RTN. CAUTION: You must ensure that power connections maintain the proper polarity.
Page 246: Powering On A Dc-Powered Srx5800 Services Gateway
Figure 109: Connecting DC Power to the Services Gateway (Standard-Capacity SHown, High-Capacity Similar) Powering On a DC-Powered SRX5800 Services Gateway To power on a DC-powered services gateway: 1. Verify that an external management device is connected to one of the Routing Engine ports (AUX, CONSOLE, or ETHERNET).
Page 247 7. If power is not present: Verify that the fuse is installed correctly and turn on the breaker at the battery distribution fuse board or fuse bay. Check the voltage with a meter at the terminals of the power supply for correct voltage level and polarity.
Page 248: Powering Off The Srx5800 Services Gateway
(O) position. Performing the Initial Software Configuration for the SRX5800 IN THIS SECTION SRX5800 Services Gateway Software Configuration Overview | 250 Initially Configuring the SRX5800 Services Gateway | 250 Performing Initial Software Configuration Using J-Web | 256...
Page 249: Srx5800 Services Gateway Software Configuration Overview
SRX5800 Services Gateway Software Configuration Overview The services gateway is shipped with the Junos operating system (Junos OS) preinstalled and ready to be configured when the device is powered on. There are three copies of the software: one on a CompactFlash card (if installed) in the Routing Engine, one on the hard disk in the Routing Engine, and one on a USB flash drive that can be inserted into the slot in the Routing Engine faceplate.
Page 250 root@> 4. Enter configuration mode. configure [edit] root@# 5. Set the root authentication password by entering either a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA). [edit] root@# set system root-authentication plain-text-password New password: password Retype new password: password 6.
Page 251 10. Configure the IP address and prefix length for the Ethernet management interface on the services gateway’s Routing Engine. [edit] admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length 11. Configure the traffic interface. [edit] admin@# set interfaces ge-6/2/0 unit 0 family inet address address/prefix-length admin@# set interfaces ge-6/3/5 unit 0 family inet address address/prefix-length 12.
Page 252 [edit] admin@# commit commit complete 17. Optionally, display the configuration to verify that it is correct. admin@# show ## Last changed: 2008-05-07 22:43:25 UTC version "9.2I0 [builder]"; system { autoinstallation; host-name henbert; root-authentication { encrypted-password "$1$oTVn2KY3$uQe4xzQCxpR2j7sKuV.Pa0"; ## SECRET-DATA login { user admin { uid 928;...
Page 253 { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; interfaces { ge-0/0/0 { unit 0; ge-6/2/0 { unit 0 { family inet { address 5.1.1.1/24; ge-6/3/5 { unit 0 { family inet { address 192.1.1.1/24; fxp0 { unit 0 { family inet { address 192.168.10.2/24;...
Page 254 ge-6/3/5.0; security-zone untrust { interfaces { ge-6/2/0.0; policies { from-zone trust to-zone untrust { policy bob { match { source-address any; destination-address any; application any; then { permit; 18. Commit the configuration to activate it on the device. [edit] admin@# commit 19.
Page 255: Performing Initial Software Configuration Using J-Web
Performing Initial Software Configuration Using J-Web IN THIS SECTION Configuring Root Authentication and the Management Interface from the CLI | 256 Configuring Interfaces, Zones, and Policies with J-Web | 257 Configuring Root Authentication and the Management Interface from the CLI Before you can use J-Web to configure your device, you must access the CLI to perform the initial configuration.
Page 256: Configuring Interfaces, Zones, And Policies With J-Web
Configuring Zones and Assigning Interfaces | 259 Configuring Security Policies | 260 You can configure hostnames, interfaces, zones, and security policies using J-Web. NOTE: You cannot use J-Web to configure SRX5400, SRX5600, and SRX5800 Services Gateways in Junos OS Release 15.1X49-D10. Before you begin:...
Page 257 Ensure you have configured the IP address, root authentication, and default route. See “Configuring Root Authentication and the Management Interface from the CLI” on page 256 Enable HTTP on the device to access J-Web. See “Configuring Root Authentication and the Management Interface from the CLI”...
Page 258 A message appears after your configuration changes are validated successfully. 7. Click OK. 8. Select Commit Options>Commit to apply the configuration changes. A message appears after your configuration changes are applied successfully. 9. Click OK. You have successfully configured the physical interface. Repeat these steps to configure the second physical interface for the device.
Page 259 Configuring Security Policies To configure security policies: 1. From the J-Web Dashboard page, select Configure>Security>Security Policy and click Add. The Add Policy dialog box appears. 2. In the Policy tab, enter the policy name and set the policy action to permit. Then select Zone and set the From Zone to trust and the To Zone to untrust.
Page 260: Maintaining Components
Maintaining the SRX5800 Power System | 276 Maintaining the SRX5800 Host Subsystem | 304 Maintaining the SRX5800 Line Cards and Modules | 339 Maintaining the SRX5800 Cables and Connectors | 388 Replacing a Routing Engine in an SRX Series High-End Chassis Cluster | 402...
Page 262: Maintaining The Srx5800 Chassis
Replacing the SRX5800 Services Gateway Craft Interface To replace the craft interface, perform the following procedures in sequence: Disconnecting the Alarm Relay Wires from the SRX5800 Services Gateway Craft Interface | 263 Removing the SRX5800 Services Gateway Craft Interface | 264...
Page 263: Removing The Srx5800 Services Gateway Craft Interface
Remove existing wires from the slots in the front of the block. Figure 110: Alarm Relay Contacts Removing the SRX5800 Services Gateway Craft Interface Before you begin removing the craft interface from the services gateway: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 264: Installing The Srx5800 Services Gateway Craft Interface
Remove the craft interface from the chassis. Figure 111: Removing the Craft Interface Installing the SRX5800 Services Gateway Craft Interface Before you begin installing the craft interface into the services gateway: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 265: Connecting The Alarm Relay Wires To The Srx5800 Services Gateway Craft Interface
6. Reattach any external devices connected to the craft interface. Figure 112: Installing the Craft Interface Connecting the Alarm Relay Wires to the SRX5800 Services Gateway Craft Interface Before you begin connecting the alarm relay wires to the services gateway and an alarm-reporting device Ensure you understand how to prevent electrostatic discharge (ESD) damage.
Page 266: Maintaining The Srx5800 Cooling System
Figure 113: Alarm Relay Contacts Maintaining the SRX5800 Cooling System IN THIS SECTION Maintaining the Fan Trays on the SRX5800 Services Gateway | 268 Replacing an SRX5800 Services Gateway Fan Tray | 268 Maintaining the Air Filter on the SRX5800 Services Gateway | 273...
Page 267: Maintaining The Fan Trays On The Srx5800 Services Gateway
Maintaining the Fan Trays on the SRX5800 Services Gateway Purpose For optimum cooling, verify the condition of the fans. Action Monitor the status of the fans. A fan tray contains multiple fans that work in unison to cool the services gateway components.
Page 268 7. Place one hand under the fan tray to support it and pull the fan tray completely out of the chassis. 8. Proceed to “Installing an SRX5800 Services Gateway Fan Tray” on page 271 to install the replacement fan tray.
Page 269 Figure 114: Removing an Upper Fan Tray (Standard-Capacity Shown, High-Capacity Similar)
Page 270: Installing An Srx5800 Services Gateway Fan Tray
Figure 115: Removing a Lower Fan Tray (Standard-Capacity Shown, High-Capacity Similar) Installing an SRX5800 Services Gateway Fan Tray NOTE: To prevent overheating, install the replacement fan tray immediately after removing the existing fan tray. Do not operate the services gateway for more than two minutes without both fan trays installed.
Page 271 To install a fan tray (see Figure 116 on page 272 Figure 117 on page 273): 1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. 2. Grasp the fan tray on each side and insert it straight into the chassis. Note the correct orientation by the "this side up"...
Page 272: Maintaining The Air Filter On The Srx5800 Services Gateway
Discard used filters, do not attempt to clean and reuse them. NOTE: Air filters will not be replaced by Juniper Networks under the Juniper Networks Hardware Replacement Support Plan, you need to purchase them for replacement.
Page 273: Replacing The Srx5800 Services Gateway Air Filter
You should change the air filter every six months. To replace the air filter, perform the following procedures in sequence: Removing the SRX5800 Services Gateway Air Filter | 274 Installing the SRX5800 Services Gateway Air Filter | 275 Removing the SRX5800 Services Gateway Air Filter...
Page 274: Installing The Srx5800 Services Gateway Air Filter
5. Lift the air filter out of the air filter tray. Figure 118: Removing the Air Filter (Standard-Capacity Filter Tray Shown, High-Capacity Similar) Installing the SRX5800 Services Gateway Air Filter You should change the air filter every six months. Before you begin to install the air filter: Ensure you understand how to prevent electrostatic discharge (ESD) damage.
Page 275: Maintaining The Srx5800 Power System
Replacing an SRX5800 Services Gateway AC Power Supply Cord | 284 Replacing an SRX5800 Services Gateway DC Power Supply | 287 Replacing an SRX5800 Services Gateway DC Power Supply Cable | 296 Upgrading an SRX5800 Services Gateway from Standard-Capacity to High-Capacity Power Supplies | 300...
Page 276: Maintaining Srx5800 Services Gateway Power Supplies
Maintaining SRX5800 Services Gateway Power Supplies Purpose For optimum services gateway performance, verify the condition of the power supplies. Action On a regular basis: To check the status of the power supplies, issue the show chassis environment pem command. The output is similar to the following: user@host>...
Page 277: Replacing An Srx5800 Services Gateway Ac Power Supply
Replacing an SRX5800 Services Gateway AC Power Supply To replace an AC power supply, perform the following procedures: Removing an SRX5800 Services Gateway AC Power Supply | 278 Installing an SRX5800 Services Gateway AC Power Supply | 281 Removing an SRX5800 Services Gateway AC Power Supply...
Page 278 ESD grounding strap To remove an AC power supply (see Figure 120 on page 280): 1. Switch off the dedicated customer site circuit breaker for the power supply, and remove the power cord from the AC power source. If the services gateway is equipped with high-capacity AC power supplies, remove both of the power cords for the power supply.
Page 279 Figure 120: Removing an AC Power Supply (Standard-Capacity Shown, High-Capacity Similar) WARNING: Do not touch the power connector on the top of the power supply (see Figure 121 on page 281). It can contain dangerous voltages.
Page 280: Installing An Srx5800 Services Gateway Ac Power Supply
Figure 121: Top of the Power Supply Showing Midplane Connector Connector end of AC or DC power supply Installing an SRX5800 Services Gateway AC Power Supply Before you begin to install a AC power supply: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 281 Figure 122: High-Capacity AC Power Supply Input Mode Switch NOTE: Do not use a pencil to set the mode switch, because fragments can break off and cause damage to the power supply. 4. If you are installing a high-capacity power supply, move the AC input switch on the faceplate of the power supply itself to the off (O) position.
Page 282 9. If you are installing a high-capacity power supply, connect a power cord to the appliance inlet at the top edge of the power supply. For more information, see “Connecting an SRX5800 Services Gateway AC Power Supply Cord” on page 285.
Page 283: Replacing An Srx5800 Services Gateway Ac Power Supply Cord
Replacing an SRX5800 Services Gateway AC Power Supply Cord To replace an SRX5800 Services Gateway AC power supply cord, perform the following procedures: Disconnecting an SRX5800 Services Gateway AC Power Supply Cord | 284 Connecting an SRX5800 Services Gateway AC Power Supply Cord | 285...
Page 284: Connecting An Srx5800 Services Gateway Ac Power Supply Cord
3. Unplug the power cord from the power source receptacle. 4. Unplug the power cord from the appliance inlet on the chassis or power supply. Connecting an SRX5800 Services Gateway AC Power Supply Cord NOTE: Power cords are not supplied with the services gateway. You must order the power cords separately.
Page 285 3. Verify that the AC input switch nearest to the appliance inlet for the power cord you are replacing is in the off (O) position: For standard-capacity AC power supplies, there is only one AC input switch for each power supply; it is located next to the appliance inlet on the chassis above the power supply.
Page 286: Replacing An Srx5800 Services Gateway Dc Power Supply
Replacing an SRX5800 Services Gateway DC Power Supply To replace a DC power supply, perform the following procedures: Removing an SRX5800 Services Gateway DC Power Supply | 287 Installing an SRX5800 Services Gateway DC Power Supply | 290 Removing an SRX5800 Services Gateway DC Power Supply...
Page 287 To remove a DC power supply (see Figure 124 on page 289): 1. Switch off the dedicated customer site circuit breaker for the power supply being removed. Follow your site's procedures for ESD. 2. Make sure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cables might become active during the removal process.
Page 288 Figure 124: Removing a DC Power Supply from the Services Gateway (Standard-Capacity Shown, High-Capacity Similar) WARNING: Do not touch the power connector on the top of the power supply (see Figure 125 on page 290). It can contain dangerous voltages.
Page 289: Installing An Srx5800 Services Gateway Dc Power Supply
Figure 125: Top of the Power Supply Showing Midplane Connector Connector end of AC or DC power supply Installing an SRX5800 Services Gateway DC Power Supply Before you begin to install a DC power supply: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 290 4. For a high-capacity DC power supply, configure the power supply for the number of DC feeds: a. Rotate the metal cover away from the input mode switch to expose the switch. b. Move the input mode switch to position 0 for one feed or position 1 for two feeds. NOTE: The high-capacity DC power supply will operate with only one of its two DC inputs connected to a power feed.
Page 291 Figure 126: Installing a DC Power Supply (Standard Capacity Shown, High-Capacity Similar) 8. While firmly pushing the handle on the power supply faceplate with one hand, use your other hand to pull the spring-loaded locking pin in the release lever away from the chassis and turn the release lever clockwise until it stops.
Page 292 CAUTION: You must ensure that power connections maintain the proper polarity. The power source cables might be labeled (+) and (–) to indicate their polarity. There is no standard color coding for DC power cables. The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply.
Page 293 b. On INP0 attach the negative (–) DC source power cable lug to the –48V (input) terminal. Repeat this step for INP1 if using two feeds. c. Apply between 23 lb-in. (2.6 Nm) and 25 lb-in. (2.8 Nm) of torque to each nut (see Figure 128 on page 294).
Page 294 NOTE: The DC power supplies in slots PEM0 and PEM1 must be powered by dedicated power feeds derived from feed A, and the DC power supplies in PEM2 and PEM3 must be powered by dedicated power feeds derived from feed B. This configuration provides the commonly deployed A/B feed redundancy for the system.
Page 295: Replacing An Srx5800 Services Gateway Dc Power Supply Cable
Replacing an SRX5800 Services Gateway DC Power Supply Cable To replace an SRX5800 Services Gateway DC power supply cable, perform the following procedures: Disconnecting an SRX5800 Services Gateway DC Power Supply Cable | 296 Connecting an SRX5800 Services Gateway DC Power Supply Cable | 297...
Page 296: Connecting An Srx5800 Services Gateway Dc Power Supply Cable
11. Carefully move the power cable out of the way. Connecting an SRX5800 Services Gateway DC Power Supply Cable Before you begin to connect a DC power supply cable: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 297 3. Verify that the input LEDs on the power supply are not lit (INPUT OK for a standard-capacity power supply, INP0 OK and INP1 OK for a high-capacity power supply). 4. Secure the power cable lug to the terminal studs, first with the split washer, then with the nut. Apply between 23 lb-in.
Page 298 Figure 130: Connecting DC Power Cables to a High-Capacity DC Power Supply Terminal studs Cable Split washer 5. For standard-capacity DC power supplies, secure each DC power cable to its strain relief bracket as follows: a. Loosen the captive screw on the cable restraint on the lower edge of the power supply faceplate. b.
Page 299: Upgrading An Srx5800 Services Gateway From Standard-Capacity To High-Capacity Power Supplies
Upgrading an SRX5800 Services Gateway from Standard-Capacity to High-Capacity Power Supplies You can replace the standard-capacity power supplies in the SRX5800 Services Gateway with either two or four high-capacity power supplies of the same input type (AC or DC). Two high-capacity power supplies provide adequate power for a fully loaded chassis;...
Page 300 2. If you have not already done so, replace both standard-capacity fan trays with high-capacity fan trays. Also replace the standard-capacity air filter with a high-capacity air filter. For more information, see “Replacing an SRX5800 Services Gateway Fan Tray” on page 268 “Replacing the SRX5800 Services Gateway Air Filter”...
Page 301 10. Check the LEDs on both high-capacity AC power supply faceplates to ensure that they are operating properly. 11. Remove the remaining two standard-capacity AC power supply from the services gateway. See “Removing an SRX5800 Services Gateway AC Power Supply” on page 278 for instructions on removing AC power supplies.
Page 302 2. If you have not already done so, replace both standard-capacity fan trays with high-capacity fan trays. Also replace the standard-capacity air filter with a high-capacity air filter. For more information, see “Replacing an SRX5800 Services Gateway Fan Tray” on page 268 “Replacing the SRX5800 Services Gateway Air Filter”...
Page 303: Maintaining The Srx5800 Host Subsystem
Maintaining the SRX5800 Host Subsystem IN THIS SECTION Maintaining the SRX5800 Services Gateway Host Subsystem and SCBs | 304 Taking the SRX5800 Services Gateway Host Subsystem Offline | 306 Operating and Positioning the SRX5800 Services Gateway SCB Ejectors | 306...
Page 304 CPU temperature 33 degrees C / 91 degrees F DRAM 2048 MB Memory utilization 12 percent CPU utilization: User 1 percent Background 0 percent Kernel 4 percent Interrupt 0 percent Idle 94 percent Model RE-S-1300 Serial ID 1000697084 Start time 2008-07-11 08:31:44 PDT Uptime 3 hours, 27 minutes, 27 seconds...
Page 305: Taking The Srx5800 Services Gateway Host Subsystem Offline
The SCB might continue forwarding traffic for approximately 5 minutes after the request system halt command has been issued. Operating and Positioning the SRX5800 Services Gateway SCB Ejectors When removing or inserting an SCB, ensure that the SCBs or blank panels in adjacent slots are fully inserted to avoid hitting them with the ejector handles.
Page 306: Replacing An Srx5800 Services Gateway Scb
NOTE: The procedure to replace an SCB applies to the SRX5K-SCB, SRX5K-SCBE, SRX5K-SCB3, and SRX5K-SCB4. Removing an SRX5800 Services Gateway SCB | 307 Installing an SRX5800 Services Gateway SCB | 309 Removing an SRX5800 Services Gateway SCB Before you begin to remove a SCB: Ensure you understand how to prevent electrostatic discharge (ESD) damage.
Page 307 To remove an SCB (see Figure 131 on page 309): NOTE: The SCB and Routing Engine are removed as a unit. You can also remove the Routing Engine separately. CAUTION: Before removing an SCB, ensure that you know how to operate the ejector handles properly to avoid damage to the equipment.
Page 308: Installing An Srx5800 Services Gateway Scb
10. If you are not replacing the SCB now, install a blank panel over the empty slot. Figure 131: Removing an SCB Installing an SRX5800 Services Gateway SCB Before you begin to install a SCB: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 309 1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis. 2. Power off the services gateway using the command request system power-off. user@host# request system power-off NOTE: Wait until a message appears on the console confirming that the services stopped.
Page 310: Replacing The Srx5800 Services Gateway Routing Engine
NOTE: The procedure to replace a Routing Engine applies to SRX5K-RE-13-20, SRX5K-RE-1800X4, and SRX5K-RE-128G. Removing the SRX5800 Services Gateway Routing Engine | 311 Installing the SRX5800 Services Gateway Routing Engine | 313 Removing the SRX5800 Services Gateway Routing Engine Before you begin to remove a routing engine:...
Page 311 To remove the Routing Engine (see Figure 133 on page 313): 1. Take the host subsystem offline as described in “Taking the SRX5800 Services Gateway Host Subsystem Offline” on page 306. 2. Place an electrostatic bag or antistatic mat on a flat, stable surface.
Page 312: Installing The Srx5800 Services Gateway Routing Engine
Figure 133: Removing the Routing Engine Installing the SRX5800 Services Gateway Routing Engine Before you begin to install a routing engine: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505.
Page 313 If you install only one Routing Engine in the service gateway, you must install it in SCB slot 0 of service gateway chassis. 1. If you have not already done so, take the host subsystem offline. See “Taking the SRX5800 Services Gateway Host Subsystem Offline” on page 306.
Page 314 Routing Engine status: Slot 0: Current state Master ... For more information about using the CLI, see the Explorer. Figure 134: Installing the Routing Engine...
Page 315 10. If the Routing Engine was replaced on one of the nodes in a chassis cluster, then you need to copy certificates and key pairs from the other node in the cluster: a. Start the shell interface as a root user on both nodes of the cluster. b.
Page 316: Low Impact Hardware Upgrade For Scb3 And Ioc3
For SRX5600 Services Gateways admin@cluster#set interfaces xe-9/0/0 disable admin@cluster#set interfaces xe-9/0/4 disable For SRX5800 Services Gateways admin@cluster#set interfaces xe-13/0/0 disable admin@cluster#set interfaces xe-13/1/0 disable 2. Disable SYN bit and TCP sequence number checking for the secondary node to take over.
Page 317 3. Commit the configuration. root@#commit 4. Disconnect control and fabric links between the devices in the chassis cluster so that nodes running different Junos OS releases are disconnected. For this, change the control port and fabric port to erroneous values. Fabric ports must be set to any FPC number and control ports to any non-IOC port. Issue the following commands: admin@cluster#delete chassis cluster control-ports admin@cluster#set chassis cluster control-ports fpc 10 port 0 <<<<<<<...
Page 318 Powering On an AC-Powered SRX5600 Services Gateway Powering On a DC-Powered SRX5600 Services Gateway Powering On an AC-Powered SRX5800 Services Gateway on page 243 Powering On a DC-Powered SRX5800 Services Gateway on page 247 8. Perform the hardware upgrade on the secondary node by replacing SCB2 with SCB3, IOC2 with IOC3, and the existing midplane with the enhanced midplane.
Page 319 For more information about mounting the USB drive on the device, refer to KB articles KB12880 and KB12022 from the Knowledge Base. Perform this step when you upgrade the MPC.
Page 320 a. Configure the control port, fabric port, and RETH child ports on the secondary node. [edit] root@clustert# show | display set | grep delete delete groups global interfaces fab1 delete groups global interfaces fab0 delete interfaces reth0 delete interfaces reth1 delete interfaces xe-3/0/5 gigether-options redundant-parent reth0 delete interfaces xe-9/0/5 gigether-options redundant-parent reth0 delete interfaces xe-3/0/9 gigether-options redundant-parent reth...
Page 321 set interfaces reth1 vlan-tagging set interfaces reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 unit 0 vlan-id 30 set interfaces reth1 unit 0 family inet address 55.55.55.1/8 9. Verify that the secondary node is running the upgraded Junos OS release. root@cluster> show version node1 Hostname: <displays the hostname>...
Page 322 For SRX5600 Services Gateways admin@cluster#set interfaces xe-2/0/0 disable admin@cluster#set interfaces xe-2/0/4 disable admin@cluster#delete interfaces xe-9/0/0 disable admin@cluster#delete interfaces xe-9/0/4 disable For SRX5800 Services Gateways admin@cluster#set interfaces xe-1/0/0 disable admin@cluster#set interfaces xe-1/1/0 disable admin@cluster#delete interfaces xe-13/0/0 disable admin@cluster#delete interfaces xe-13/1/0 disable 11.
Page 323 Powering On an AC-Powered SRX5600 Services Gateway Powering On a DC-Powered SRX5600 Services Gateway Powering On an AC-Powered SRX5800 Services Gateway on page 243 Powering On a DC-Powered SRX5800 Services Gateway on page 247 16. Perform the hardware upgrade on the primary node by replacing SCB2 with SCB3, IOC2 with IOC3, and the existing midplane with the enhanced midplane.
Page 324 c. Upload the configuration to RE2 from the USB device.
Page 325 For more information about mounting the USB drive on the device, refer to KB articles KB12880 and KB12022 from the Knowledge Base. Perform this step when you upgrade the MPC.
Page 326 a. Configure the control port, fabric port, and RETH child ports on the primary node. [edit] root@clustert# show | display set | grep delete delete groups global interfaces fab1 delete groups global interfaces fab0 delete interfaces reth0 delete interfaces reth1 delete interfaces xe-3/0/5 gigether-options redundant-parent reth0 delete interfaces xe-9/0/5 gigether-options redundant-parent reth0 delete interfaces xe-3/0/9 gigether-options redundant-parent reth0...
Page 327 available to take over network traffic. root@cluster> show version node1 Hostname: <displays the hostname> Model: <displays the model number> Junos: 15.1X49-D10 JUNOS Software Release [15.1X49-D10] root@cluster> show chassis cluster status Monitor Failure codes: Cold Sync monitoring Fabric Connection monitoring GRES monitoring Hardware monitoring Interface monitoring IP monitoring...
Page 328 For SRX5600 Services Gateways admin@cluster#set interfaces xe-9/0/0 disable admin@cluster#set interfaces xe-9/0/4 disable admin@cluster#delete interfaces xe-2/0/0 disable admin@cluster#delete interfaces xe-2/0/4 disable For SRX5800 Services Gateways admin@cluster#set interfaces xe-13/0/0 disable admin@cluster#set interfaces xe-13/1/0 disable admin@cluster#delete interfaces xe-1/0/0 disable admin@cluster#delete interfaces xe-1/1/0 disable...
Page 329 Powering On an AC-Powered SRX5600 Services Gateway Powering On a DC-Powered SRX5600 Services Gateway Powering On an AC-Powered SRX5800 Services Gateway on page 243 Powering On a DC-Powered SRX5800 Services Gateway on page 247 a. When you power on the secondary node, enable the control ports and fabric ports on the primary node, and reconfigure them with the correct port values.
Page 330 24. Commit the configuration. root@#commit 25. After the secondary node is up, verify that it synchronizes with the primary node. admin@cluster#delete interfaces xe-4/0/5 disable admin@cluster#delete interfaces xe-10/0/5 disable 26. Enable SYN bit and TCP sequence number checking for the secondary node. admin@cluster#delete security flow tcp-session no-syn-check admin@cluster#delete security flow tcp-session no-sequence-check 27.
Page 331 node0: -------------------------------------------------------------------------- Slot 1 Online SRX5k IOC II PIC 0 Online 1x 100GE CFP PIC 2 Online 2x 40GE QSFP+ Slot 2 Online SRX5k SPC II PIC 0 Online SPU Cp PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow...
Page 332 Slot 5 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP+ PIC 2 Online 2x 40GE QSFP+ root@cluster> show chassis cluster status Cold Sync monitoring Fabric Connection monitoring GRES monitoring Hardware monitoring Interface monitoring IP monitoring Loopback monitoring Mbuf monitoring Nexthop monitoring NPC monitoring SPU monitoring...
Page 333 node1: -------------------------------------------------------------------------- Flow session Flow session CP session CP session FPC PIC CPU Mem current maximum current maximum --------------------------------------------------------------------------- 1999999 104857600 289065 4194304 289062 4194304 289060 4194304 289061 4194304 281249 4194304 281251 4194304 281251 4194304 Enable the traffic interfaces on the secondary node. root@cluster>...
Page 334: In-Service Hardware Upgrade For Srx5K-Re-1800X4 And Srx5K-Scbe Or Srx5K-Re-1800X4 And Srx5K-Scb3 In A Chassis Cluster
SRX5K-RE-1800X4 and SRX5K-SCB3 NOTE: While performing the ISHU, in the SRX5800 service gateway, the second SCB can contain a Routing Engine but the third SCB must not contain a Routing Engine. In the SRX5600 services gateway, the second SCB can contain a Routing Engine.
Page 335 12.1X47-D15 or later for SRX5K-SCBE with SRX5K-RE-1800X4 and 15.1X49-D10 or later for SRX5K-SCB3 with SRX5K-RE-1800X4. For more information on cards supported on the services gateways “Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways” on page For more information about unified in-service software upgrade (unified ISSU), see...
Page 336 Powering On an AC-Powered SRX5600 Services Gateway Powering On a DC-Powered SRX5600 Services Gateway Powering On an AC-Powered SRX5800 Services Gateway on page 243 Powering On a DC-Powered SRX5800 Services Gateway on page 247 6. After the secondary node reboots as a standalone node, configure the same cluster ID as in the primary node.
Page 337 After the node boots, it must join the cluster as a secondary node. To verify, issue the following command admin@cluster> show chassis cluster status NOTE: The command output must indicate that the node priority is set to a non-zero value, and that the cluster contains a primary node and a secondary node. 12.
Page 338: Maintaining The Srx5800 Line Cards And Modules
Replacing SRX5800 Services Gateway Port Modules | 355 Replacing SRX5800 Services Gateway SPCs | 360 Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis Cluster | 370 In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster | 373...
Page 339: Maintaining Interface Cards And Spcs On The Srx5800 Services Gateway
Maintaining Interface Cards and SPCs on the SRX5800 Services Gateway Purpose For optimum services gateway performance, verify the condition of the Services Processing Cards (SPCs) and interface cards (IOCs, Flex IOCs and MPCs). The services gateway can have up to 11 SPCs and interface cards.
Page 340 State Online Temperature 43 degrees C / 109 degrees F Total CPU DRAM 1024 MB Total RLDRAM 256 MB Total DDR DRAM 4096 MB Start time: 2007-07-10 12:28:38 PDT Uptime: 1 hour, 33 minutes, 47 seconds Slot 2 information: State Online Temperature 43 degrees C / 109 degrees F...
Page 341: Replacing Srx5800 Services Gateway Iocs
Reference at www.juniper.net/documentation/. Replacing SRX5800 Services Gateway IOCs To replace an IOC, perform the following procedures: Removing an SRX5800 Services Gateway IOC | 342 Installing an SRX5800 Services Gateway IOC | 345 Removing an SRX5800 Services Gateway IOC An IOC weighs up to 13.1 lb (5.9 kg). Be prepared to accept its full weight.
Page 342 Issue the following CLI command: user@host>request chassis fpc slot slot-number offline For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. 4. Power off the services gateway using the command request system power-off. user@host# request system power-off NOTE: Wait until a message appears on the console confirming that the services stopped.
Page 343 CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose. 7. Immediately cover each optical transceiver and the end of each fiber-optic cable with a rubber safety cap.
Page 344: Installing An Srx5800 Services Gateway Ioc
Figure 135: Removing an IOC Installing an SRX5800 Services Gateway IOC An IOC weighs up to 13.1 lb (5.9 kg). Be prepared to accept its full weight. Before you begin to install an IOC: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 345 To install an IOC (see Figure 136 on page 348): 1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end of the strap to the ESD point on the chassis. 2.
Page 346 Issue the following CLI command: user@host>request chassis fpc slot slot-number online For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. CAUTION: After the OK LED turns green, wait at least 30 seconds before removing the IOC again, removing an IOC from a different slot, or inserting an IOC in a different slot.
Page 347 Figure 136: Installing an IOC...
Page 348: Replacing Srx5800 Services Gateway Flex Iocs
Replacing SRX5800 Services Gateway Flex IOCs To replace a Flex IOC, perform the following procedures: Removing an SRX5800 Services Gateway Flex IOC | 349 Installing an SRX5800 Services Gateway Flex IOC | 352 Removing an SRX5800 Services Gateway Flex IOC A Flex IOC weighs up to 13.1 lb (5.9 kg).
Page 349 5. If you have not already done so, remove the port modules installed in the Flex IOC. See “Removing an SRX5800 Services Gateway Port Module” on page 355. 6. Simultaneously turn both of the ejector handles counterclockwise to unseat the Flex IOC.
Page 350 CAUTION: The weight of the Flex IOC is concentrated in the back end. Be prepared to accept the full weight—up to 13 lb (5.9 kg)—as you slide the Flex IOC out of the chassis. When the Flex IOC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors.
Page 351: Installing An Srx5800 Services Gateway Flex Ioc
Figure 138: Removing a Flex IOC Installing an SRX5800 Services Gateway Flex IOC Before you begin to install a Flex IOC: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505.
Page 352 NOTE: Your services gateway must be running Junos version 9.5R1 or later in order to recognize Flex IOCs and port modules. To install a Flex IOC (see Figure 139 on page 354): 1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end of the strap to the ESD point on the chassis.
Page 353 Press and hold the corresponding online button on the craft interface until the green OK LED next to the button lights steadily, in about 5 seconds. Issue the following CLI command: user@host>request chassis fpc slot slot-number online For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.
Page 354: Replacing Srx5800 Services Gateway Port Modules
Replacing SRX5800 Services Gateway Port Modules To replace a port module, perform the following procedures: Removing an SRX5800 Services Gateway Port Module | 355 Installing an SRX5800 Services Gateway Port Module | 357 Removing an SRX5800 Services Gateway Port Module Port modules are installed in Flex IOCs in the services gateway card cage.
Page 355 For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. 4. Power off the services gateway. 5. Disconnect the cables from the port module. If the port module uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap.
Page 356: Installing An Srx5800 Services Gateway Port Module
Installing an SRX5800 Services Gateway Port Module Before you begin to install a port module: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 357 ESD grounding strap Phillips (+) number 1 screwdriver Rubber safety caps for transceivers To install a port module into a Flex IOC (see Figure 141 on page 359): 1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end of the strap to the ESD point on the chassis.
Page 358 Figure 141: Installing a Port Module 10. If the port module uses fiber-optic interfaces, remove the rubber safety cap from each transceiver and cable. WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.
Page 359: Replacing Srx5800 Services Gateway Spcs
Replacing SRX5800 Services Gateway SPCs To replace an SPC, perform the following procedures: Removing an SRX5800 Services Gateway SPC | 360 Installing an SRX5800 Services Gateway SPC | 363 Removing an SRX5800 Services Gateway SPC An SPC weighs up to 18.3 lb (8.3 kg).
Page 360 Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505. Ensure that you have the following available: ESD grounding strap Replacement SPC or blank panel Antistatic mat Rubber safety caps for transceivers To remove an SPC (see Figure 142 on page 363):...
Page 361 CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose. CAUTION: Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.
Page 362: Installing An Srx5800 Services Gateway Spc
Figure 142: Removing an SPC Installing an SRX5800 Services Gateway SPC Before you begin to install a SPC: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505. Ensure that you have the following available:...
Page 363 user@host# request system power-off NOTE: Wait until a message appears on the console confirming that the services stopped. 3. Physically turn off the power and remove the power cables from the chassis. 4. Place the SPC on an antistatic mat or remove it from its electrostatic bag. 5.
Page 364 CAUTION: Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point. CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.
Page 365 Figure 143: Installing an SPC...
Page 366 Figure 144: Attaching a Cable to an SPC Fiber-optic cable...
Page 368 NOTE: To install additional SPCs in a services gateway that is part of a chassis cluster, it must meet the following conditions. Each services gateway must already have at least two SPCs installed in it. To add first-generation SRX5K-SPC-2-10-40 SPCs, both of the services gateways in the cluster must be running Junos OS Release 11.4R2S1, 12.1R2, or later.
Page 369: Replacing Spcs In An Operating Srx5400, Srx5600, Or Srx5800 Services Gateways Chassis Cluster
SRX5K-SPC3 SPCs to a services gateway, the services gateway must already be equipped with high-capacity power supplies and fan trays, and the high-capacity air filters. See “Upgrading an SRX5800 Services Gateway from Standard-Capacity to High-Capacity Power Supplies” on page 300 for more information.
Page 370 If your installation does not meet these criteria, use the procedure in Installing an SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or “Installing an SRX5800 Services Gateway SPC” on page 363 to install SPCs in your services gateway.
Page 371 7. Remove the SPC from the powered-off services gateway using the procedure in Removing an SRX5400 Services Gateway SPC, or Removing an SRX5600 Services Gateway SPC, or “Removing an SRX5800 Services Gateway SPC” on page 360. 8. Install the new SPC or SPCs in the powered-off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or “Installing an SRX5800...
Page 372: In-Service Hardware Upgrade For Srx5K-Spc3 In A Chassis Cluster
18. Use the show chassis fpc pic-status command on each node to confirm that all cards are online and both services gateways are operating correctly. 19. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero.
Page 373 NOTE: We strongly recommend that you perform the ISHU during a maintenance window, or during the lowest possible traffic as the secondary node is not available at this time. To install SRX5K-SPC3s in a services gateway that is part of a chassis cluster using the ISHU procedure, the following conditions have to be met: Each services gateway must have at least one SRX5K-SPC3 installed.
Page 374 SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or “Installing an SRX5800 Services Gateway SPC” on page 363. 8. Insert the power cables to the chassis and power on the secondary services gateway and wait for it to finish starting.
Page 375: Maintaining Mics And Port Modules On The Srx5800 Services Gateway
Maintaining MICs and Port Modules on the SRX5800 Services Gateway Purpose For optimum services gateway performance, verify the condition of the MICs installed in MPCs, and port modules installed in Flex IOCs. Action On a regular basis: Check the LEDs on MIC and port modules faceplates. The meaning of the LED states differs for various port modules.
Page 376: Removing An Srx5800 Services Gateway Mic
Removing an SRX5800 Services Gateway MIC The MICs are located in the MPCs installed in the front of the services gateway. A MIC weighs less than 2 lb (0.9 kg). Before you begin to remove a MIC: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 377 6. Arrange the cable to prevent it from dislodging or developing stress points. Secure the cable so that it is not supporting its own weight as it hangs to the floor. Place excess cable out of the way in a neatly coiled loop.
Page 378: Installing An Srx5800 Services Gateway Mic
9. If you are not reinstalling a MIC into the emptied MIC slot within a short time, install a blank MIC panel over the slot to maintain proper airflow in the MPC card cage. Installing an SRX5800 Services Gateway MIC Before you begin to install a MIC:...
Page 379 If your services gateway is part of a chassis cluster, you may be able to install MICs in the services gateways in the cluster without incurring downtime on your network. See Installing MPCs and MICs in an Operating SRX5800 Services Gateway Chassis Cluster for more information. To install a MIC: 1.
Page 380 Figure 146: Installing a MIC 5. Align the rear of the MIC with the guides located at the corners of the MIC slot. 6. Slide the MIC into the MPC until it is firmly seated in the MPC. The ejector knob will automatically move in towards the faceplate to lock the MIC in position as it seats.
Page 381 7. After the MIC is seated in its slot, verify that the ejector knob is engaged by pushing it all the way in toward the MPC faceplate. 8. If the MIC uses fiber-optic cable, remove the rubber safety cap from each transceiver and the end of each cable.
Page 382: Replacing Srx5800 Services Gateway Mpcs
Replacing SRX5800 Services Gateway MPCs To replace an MPC, perform the following procedures: Removing an SRX5800 Services Gateway MPC | 383 Installing an SRX5800 Services Gateway MPC | 386 Removing an SRX5800 Services Gateway MPC An MPC installs vertically in the front of the services gateway. A fully configured MPC can weigh up to 18.35 lb (8.3 kg).
Page 383 CAUTION: Do not leave a fiber-optic transceiver uncovered except when inserting or removing a cable. The safety cap keeps the port clean and prevents accidental exposure to laser light. CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.
Page 384 Do not stack MPCs on top of one another after removal. Place each one individually in an electrostatic bag or on its own antistatic mat on a flat, stable surface. 10. If necessary, remove each installed MIC from the MPC. See “Removing an SRX5800 Services Gateway MIC” on page 377.
Page 385: Installing An Srx5800 Services Gateway Mpc
If your services gateway is part of a chassis cluster, you may be able to install MPCs in the services gateways in the cluster without incurring downtime on your network. See Installing MPCs and MICs in an Operating SRX5800 Services Gateway Chassis Cluster for more information. Before you begin to install a MPC: Ensure you understand how to prevent electrostatic discharge (ESD) damage.
Page 386 6. Install each MIC into the appropriate slot on the MPC. See “Installing an SRX5800 Services Gateway MIC” on page 379. 7. Locate the slot in the card cage in which you plan to install the MPC. 8. Orient the MPC so that the faceplate faces you.
Page 387: Maintaining The Srx5800 Cables And Connectors
Maintaining the SRX5800 Cables and Connectors IN THIS SECTION Maintaining SRX5800 Services Gateway Network Cables | 389 Replacing the Management Ethernet Cable on an SRX5800 Services Gateway | 391 Replacing the SRX5800 Services Gateway Console or Auxiliary Cable | 392...
Page 388: Maintaining Srx5800 Services Gateway Network Cables
Replacing an SRX5800 Services Gateway Network Interface Cable | 393 Replacing SRX5800 Services Gateway XFP and SFP Transceivers | 396 Replacing the SRX5800 Services Gateway Cable Manager | 399 Maintaining SRX5800 Services Gateway Network Cables Purpose For optimum services gateway performance, verify the condition of the network cables.
Page 389 When you unplug a fiber-optic cable, always place a rubber safety plug over the transceiver on the IOC or port module faceplate and on the end of the cable. Anchor fiber-optic cables to avoid stress on the connectors. Be sure to secure fiber-optic cables so that they do not support their own weight as they hang to the floor.
Page 390: Replacing The Management Ethernet Cable On An Srx5800 Services Gateway
Replacing the Management Ethernet Cable on an SRX5800 Services Gateway One Ethernet cable with RJ-45 connectors is provided with the services gateway. Before you begin to replace the management ethernet cable: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 391: Replacing The Srx5800 Services Gateway Console Or Auxiliary Cable
Replacing the SRX5800 Services Gateway Console or Auxiliary Cable To use a system console to configure and manage the Routing Engine, connect it to the CONSOLE port on the Routing Engine. To use a laptop, modem, or other auxiliary device, connect it to the AUX port on the Routing Engine.
Page 392: Replacing An Srx5800 Services Gateway Network Interface Cable
To replace a network interface cable connected to an IOC, port module, or MIC, perform the following procedures: Removing an SRX5800 Services Gateway Network Interface Cable | 393 Installing an SRX5800 Services Gateway Network Interface Cable | 394 Removing an SRX5800 Services Gateway Network Interface Cable Removing and installing network interface cables does not affect services gateway function, except that the component does not receive or transmit data while its cable is disconnected.
Page 393: Installing An Srx5800 Services Gateway Network Interface Cable
4. Remove the cable from the cable manager and detach it from the destination port. Installing an SRX5800 Services Gateway Network Interface Cable Before you begin installing a network interface cable: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of...
Page 394 WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes. CAUTION: Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable.
Page 395: Replacing Srx5800 Services Gateway Xfp And Sfp Transceivers
Replacing SRX5800 Services Gateway XFP and SFP Transceivers To replace an XFP or SFP transceiver, perform the following procedures: Removing an SRX5800 Services Gateway SFP or XFP Transceiver | 396 Installing an SRX5800 Services Gateway SFP or XFP Transceiver | 398 Removing an SRX5800 Services Gateway SFP or XFP Transceiver Transceivers are installed in a MIC or SPC.
Page 396 Antistatic mat Rubber safety cap for the transceiver Needle-nose pliers To remove a transceiver (see Figure 153 on page 398): 1. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end of the strap to the ESD point on the chassis. 2.
Page 397: Installing An Srx5800 Services Gateway Sfp Or Xfp Transceiver
CAUTION: If you face a problem running a Juniper Networks device that uses a third-party optic or cable, the Juniper Networks Technical Assistance Center (JTAC) can help you diagnose the source of the problem. Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.
Page 398: Replacing The Srx5800 Services Gateway Cable Manager
8. Verify that the status LEDs on the component faceplate indicate that the transceiver is functioning correctly. Replacing the SRX5800 Services Gateway Cable Manager To replace the cable manager, perform the following procedures: Removing the SRX5800 Services Gateway Cable Manager | 400 Installing the SRX5800 Services Gateway Cable Manager | 401...
Page 399: Removing The Srx5800 Services Gateway Cable Manager
Removing the SRX5800 Services Gateway Cable Manager Before you begin to remove cable manager: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505. Ensure that you have the following available: ESD grounding strap 7/16 in.
Page 400: Installing The Srx5800 Services Gateway Cable Manager
Figure 154: Removing the Cable Manager Installing the SRX5800 Services Gateway Cable Manager Before you begin installing the standard cable manager: Ensure you understand how to prevent electrostatic discharge (ESD) damage. See “Prevention of Electrostatic Discharge Damage” on page 505.
Page 401: Replacing A Routing Engine In An Srx Series High-End Chassis Cluster
3. Insert the nuts on the corners in the standard cable manager onto the studs on the chassis. 4. Using a 7/16 in. (11 mm)nut driver, tighten the nuts securely. Figure 155: Installing the Cable Manager Replacing a Routing Engine in an SRX Series High-End Chassis Cluster IN THIS SECTION Replacing a Routing Engine: USB Flash-Drive Method | 403...
Page 402: Replacing A Routing Engine: Usb Flash-Drive Method
Junos OS currently installed on the device. Use the show version command to identify the Junos OS version. You can download the firmware from https://support.juniper.net/support/downloads/ The chassis cluster has only two redundancy groups (RG0 and RG1) configured. This procedure includes the steps for replacing the Routing Engine on node 0 of a chassis cluster setup.
Page 403 To replace a Routing Engine on node 0 of a chassis cluster using a USB flash drive: 1. Prepare to shut down node 0: a. Perform a manual failover of the redundancy groups (RGs) from node 0 to node 1. Fail over RG1: root@node0>...
Page 404 c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth permanent subscriber-addr permanent subscriber-vlan permanent subscriber-ip permanent scale-subscriber 1000 permanent scale-l2tp 1000 permanent...
Page 405 Password: root@node0% b. Before you mount the USB flash drive, list all the directories with names starting with da in the dev folder: root@node0% ls /dev/da* root@node0% ls /dev/da* /dev/da0 /dev/da0s1c /dev/da0s2a /dev/da0s3 /dev/da0s3e /dev/da0s1 /dev/da0s1f /dev/da0s2c /dev/da0s3c /dev/da0s1a /dev/da0s2 /dev/da0s2f /dev/da0s3d c.
Page 406 root@node0% cli show configuration | save /var/tmp/config[date] h. Copy the configuration file to the USB flash drive: root@node0% cp /var/tmp/config[date] /var/tmp/usb/config[date] i. Check whether any scripts are referenced in the configuration: root@node0> show configuration system scripts {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0>...
Page 407 3. Install the replacement Routing Engine: a. Power off node 0: root@node0> request system power-off b. Wait until a message appears on the console confirming that the services have stopped, and then physically turn off the power. c. Label and disconnect all the cables connected to node 0. d.
Page 408 root@node0% cp -r /var/tmp/usb/scripts/ /var/db/scripts/ c. Unmount the USB flash drive: root@node0% umount /var/tmp/usb d. Remove the USB flash drive. e. Exit the shell. root@node0% exit 5. Configure the Routing Engine: a. Load the firmware: root@node0>request software add /var/tmp/junos-release-domestic.tgz reboot The device reboots and comes up with the intended Junos OS version.
Page 409: Replacing A Routing Engine: External Scp Server Method
root@node1> show chassis cluster status Node 0 comes up and becomes the secondary node on both RG0 and RG1. Wait until the node 0 priority on RG1 changes to the configured value. 11. Verify that sessions are showing up on node 0, and that the number of sessions on node 0 is nearly equal to the number of sessions on the primary node, node 1: root@node1>...
Page 410 To replace a Routing Engine on node 0 of a chassis cluster using an external Secure Copy Protocol (SCP) server: 1. Prepare to shut down node 0: a. Perform a manual failover of the redundancy groups (RGs) from node 0 to node 1. Fail over RG1: root@node0>...
Page 411 c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth permanent subscriber-addr permanent subscriber-vlan permanent subscriber-ip permanent scale-subscriber 1000 permanent scale-l2tp 1000 permanent...
Page 412 root@node0> start shell user root c. Copy the configuration file to an external server with SCP enabled: root@node0% scp /var/tmp/node0-config-yyyy-mm-dd root@server-ip:/node0-config-yyyy-mm-dd d. Check whether any scripts are referenced in the configuration: root@node0> show configuration system scripts {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0>...
Page 413 b. Wait until a message appears on the console confirming that the services have stopped, and then physically turn off the power. c. Label and disconnect all the cables connected to node 0. d. Replace the Routing Engine. e. To prevent a split-brain scenario (where the control link is connected while both the nodes are in the primary state), reconnect only the console cable and the cable to the fxp0 interface.
Page 414 You can view the control port configuration from node 1: root@node1>show configuration chassis cluster control-ports | display set c. Commit the configuration: root@node0# commit NOTE: Management and basic routing configuration are complete at this point. You can verify the reachability of the external server from the node by using the ping command.
Page 415 root@node0# load override /var/tmp/node0-config-yyyy-mm-dd root@node0# commit root@node0# exit 5. Check the status of all the FPCs and PICs, and ensure that all the FPCs and PICs are online. root@node0>show chassis fpc pic-status 6. Halt node 0 from the console: root@node0> request system halt 7.
Page 416: Replacing The Routing Engine: File Transfer Method
0 is used as an example): 1. Ensure that the firmware image is available on node 1 in the /var/tmp folder. You can download the firmware from https://support.juniper.net/support/downloads/. 2. Save a local copy of the configuration in the /var/tmp folder on node 1: user@node1# show configuration | save /var/tmp/cfg-node1 3.
Page 417 Redundancy group: 1 , Failover count: 1 node0 secondary None node1 primary None c. Check whether any licenses are installed: root@node0> show system licenses {secondary:node0} root@node0> show system licenses License usage: Licenses Licenses Licenses Expiry Feature name used installed needed subscriber-acct permanent subscriber-auth...
Page 418 {secondary:node0} root@node0> show configuration system scripts set system scripts commit file interface-monitoring-check.slax set system scripts op file srx-monitor.xsl root@node0> show configuration event-options {secondary:node0} root@node0> show configuration event-options set event-options generate-event 60s time-interval 60 set event-options policy NAT-POOL-UTIL events 60s set event-options policy NAT-POOL-UTIL then event-script srx-nat-bucket-overload.slax arguments utilization-threshold 90 set event-options policy NAT-POOL-UTIL then event-script srx-nat-bucket-overload.slax arguments pool GLOBAL...
Page 419 {primary:node1} root@node1> show chassis cluster interfaces Control link status: Down Control interfaces: Index Interface Monitored-Status Internal-SA Security Down Disabled Disabled Down Disabled Disabled Fabric link status: Down Control interfaces: Name Child-Interface Status Security (Physical/Monitored) fab0 xe-11/0/3 Down / Down Disable fab0 g.
Page 420 root@node1> show configuration chassis cluster control-ports | display set c. Commit the configuration: root@node0# commit d. Exit configuration mode: root@node0# exit root@node0> e. Copy the image and configuration from node 1 to node 0 using Secure Copy Protocol (SCP). Use the IP address configured for the node 0 fxp0 interface in Step 5.
Page 421 8. Wait until a message appears on the console confirming that the services have stopped, and then connect all the disconnected cables. 9. Boot up node 0 by pressing any key on the console. 10. Check the chassis cluster status on node 1: root@node1>show chassis cluster status Node 0 comes up and becomes the secondary node on both RG0 and RG1.
Page 422: Troubleshooting Hardware
C HAPTER Troubleshooting Hardware Troubleshooting the SRX5800 | 425...
Page 424: Troubleshooting The Srx5800
IN THIS SECTION Troubleshooting the SRX5800 Services Gateway with the Junos OS CLI | 425 Troubleshooting the SRX5800 Services Gateway with Chassis and Interface Alarm Messages | 426 Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways | 426...
Page 425: Troubleshooting The Srx5800 Services Gateway With Chassis And Interface Alarm Messages
Services Gateways Table 69 on page 426 lists the alarms that the chassis components can generate on SRX5400, SRX5600, and SRX5800 Services Gateways. Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways Chassis Alarm Component Alarm Condition...
Page 426 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Interface Cards An interface card is offline. Check the card. Remove Yellow and reinsert the card. If (MPC/IOC/Flex this fails, replace failed IOC) card.
Page 427 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Service Abnormal exit in the current Open a support case using flow sessions of an SPU. the Case Manager link at Processing Card https://www.juniper.net/support/...
Page 428 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity SRX5K-SPC3 LTC Firm Ware Version Mismatch. LEDs on the front panel of the chassis indicate major alarm.
Page 429 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity To manually upgrade the LTC Firmware Version: Issue the CLI show chassis alarm command to check which FPC slot is...
Page 430 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Re-boot the Services Gateway. Memory faults: DIMM Open a support case using failures and ECC errors. the Case Manager link at https://www.juniper.net/support/...
Page 431 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity From the CLI use the command restart chassis-control to reboot the services gateway. If SPC still doesn’t come online, then remove and...
Page 432 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Fan trays A fan tray has been Install missing fan tray. removed from the chassis. Fan tray not working or Replace fan tray.
Page 433 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Host subsystem A host subsystem has been Insert host subsystem into Yellow removed. empty slot. A host subsystem has failed.
Page 434 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Power supplies A power supply has been Insert power supply into Yellow removed from the chassis. empty slot. A power supply has a high Replace failed power temperature.
Page 435 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Not enough power supplies. Install an additional power supply.
Page 436 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Routing Engine Excessive framing errors on Replace the serial cable Yellow console port. connected to the device. An excessive framing error...
Page 437 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Hard disk missing in boot Replace failed Routing list. Engine. Routing Engine failed to Replace failed Routing boot. Engine.
Page 438 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity System Control An SCB has been removed. Insert SCB into empty slot. Yellow Board (SCB) An SCB temperature sensor Replace failed SCB.
Page 439 Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Temperature The chassis temperature Check room Yellow has exceeded 55 degrees C temperature. (131 degrees F), the fans Check air filter and have been turned on to full replace it.
Page 440: Backup Routing Engine Alarms
Table 69: Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Chassis Alarm Component Alarm Condition Remedy Severity Check environmental conditions and alarms on other devices. Ensure that environmental factors (such as hot air blowing around the equipment) are not affecting the temperature sensor.
Page 441 Open a support case using Yellow boots from an alternate the Case Manager link at media boot device, the hard disk. https://www.juniper.net/support/ The CompactFlash card is or call 1-888-314-5822 typically the primary boot (toll free, US & Canada) or device. The Routing Engine...
Page 442: Troubleshooting The Srx5800 Services Gateway With Alarm Relay Contacts
(from outside the United States). Troubleshooting the SRX5800 Services Gateway with Alarm Relay Contacts The craft interface has two alarm relay contacts for connecting the services gateway to external alarm devices. Whenever a system condition triggers either the major or minor alarm on the craft interface, the alarm relay contacts are also activated.
Page 443: Troubleshooting The Srx5800 Services Gateway With The Component Leds
Fan LEDs—Two LEDs indicate the status of each fan tray. Green indicates OK and red indicates a fan failure. The fan LEDs are located on the upper left of the craft interface. Troubleshooting the SRX5800 Services Gateway with the Component LEDs The following LEDs are located on various services gateway components and display the status of those components: Card LED—One LED labeled OK/FAIL on each card in the card cage indicates the card’s status.
Page 444: Troubleshooting The Srx5800 Services Gateway Cooling System
Troubleshooting the SRX5800 Services Gateway Cooling System Problem Description: The fans in a fan tray are not functioning normally. Solution Follow these guidelines to troubleshoot the fans: Check the fan LEDs and alarm LEDs on the craft interface. If the major alarm LED on the craft interface lights, use the CLI to get information about the source of an alarm condition: user@host>...
Page 445 Monitor the green LED labeled OK on the craft interface corresponding to the slot as soon as an interface card is seated in an operating services gateway. The Routing Engine downloads the interface card’s software to it under two conditions: the interface card is present when the Routing Engine boots Junos OS, and the interface card is installed and requested online through the CLI or push button on the front panel.
Page 446: Troubleshooting Srx5800 Services Gateway Mics And Port Modules
1 hour, 33 minutes, 43 seconds For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting SRX5800 Services Gateway MICs and Port Modules Problem Description: The MICs or port modules are not functioning normally.
Page 447: Troubleshooting Srx5800 Services Gateway Spcs
4x 10GE XFP For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting SRX5800 Services Gateway SPCs Problem Description: A Services Processing Card (SPC) is not functioning normally. Solution Make sure the SPC is properly seated in the midplane.
Page 448: Troubleshooting The Srx5800 Services Gateway Power System
Max Power Consumption 570 Watts For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/. Troubleshooting the SRX5800 Services Gateway Power System Problem Description: The power system is not functioning normally. Solution Check the LEDs on each power supply faceplate.
Page 449 Issue the CLI show chassis environment pem command to check the status of installed power supplies. As shown in the sample output, the value Online in the rows labeled State indicates that each of the power supply is functioning normally: user@host>...
Page 450 NOTE: If the system temperature exceeds the threshold, Junos OS shuts down all power supplies so that no status is displayed. Junos OS also can shut down one of the power supplies for other reasons. In this case, the remaining power supplies provide power to the services gateway, and you can still view the system status through the CLI or display.
Page 451 NOTE: If output power is not load-balancing correctly in the same zone on a services gateway with a high-capacity AC or DC power supply module, connect two feeds and change the DIP switch to 1 to boost the voltage on the power supply module. Each High Capacity AC or DC power supply accepts two AC or DC feeds in two unique AC or DC receptacles.
Page 452 PEM 1: State: Online AC input: OK (1 feed expected, 2 feed connected) Capacity: 1700 W (maximum 4100 W) DC output: 741 W (zone 1, 13 A at 57 V, 43% of capacity) PEM 2: State: Empty Input: Absent PEM 3: State: Empty Input:...
Page 453 3. Change the PEM 1 DIP switch position to 1. This should clear the alarm. NOTE: Changing the DIP switch position does not impact traffic. However, it is always recommended to do so in a maintenance window. 4. Issue the CLI show chassis power command and check the output to see if the number of feeds expected on PEM 1 is the same as the feeds connected.
Page 454: Behavior Of The Srx5400, Srx5600, And Srx5800 Services Gateways When The Srx5K-Scbe And Srx5K-Re-1800X4 In A Chassis Cluster Fail
Behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways When the SRX5K-SCBE and SRX5K-RE-1800X4 in a Chassis Cluster Fail It is important to understand the behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways when the Switch Control Board (SRX5K-SCBE) and Routing Engine (SRX5K-RE-1800X4) in the chassis cluster fail.
Page 455 NOTE: In SRX5600 and SRX5800 Services Gateways, failover does not happen when the secondary Routing Engine in slot 1 fails, while the SCB in slot 1 is inactive. For detailed information about chassis cluster, see the Chassis Cluster User Guide for Security Devices www.juniper.net/documentation/.
Page 456: Contacting Customer Support And Returning The Chassis Or Components
C HAPTER Contacting Customer Support and Returning the Chassis or Components Returning the SRX5800 Chassis or Components | 459...
Page 458: Returning The Srx5800 Chassis Or Components
Contacting Customer Support Once you have located the serial numbers of the services gateway or component, you can return the services gateway or component for repair or replacement. For this, you need to contact Juniper Networks Technical Assistance Center (JTAC).
Page 459: Return Procedure For The Srx5800 Services Gateway
Do not return any component to Juniper Networks, Inc. unless you have first obtained an RMA number. Juniper Networks, Inc. reserves the right to refuse shipments that do not have an RMA. Refused shipments will be returned to the customer via collect freight.
Page 460 Listing the SRX5800 Services Gateway Component Serial Numbers with the Command-Line Interface Before contacting Juniper Networks, Inc. to request a Return Materials Authorization (RMA), you must find the serial number on the services gateway or component. To display all of the services gateway components and their serial numbers, enter the following command-line interface (CLI) command: user@host>...
Page 461: Locating The Srx5800 Services Gateway Chassis Serial Number Label
462) attached to the component body. Figure 157: Serial Number ID Label Locating the SRX5800 Services Gateway Chassis Serial Number Label The chassis serial number label is located on the side of the chassis (see Figure 158 on page 463).
Page 462: Locating The Srx5800 Services Gateway Power Supply Serial Number Label
Locating the SRX5800 Services Gateway Power Supply Serial Number Label If you are returning an AC or a DC power supply to Juniper Networks for repair or replacement, you must locate the serial number of the component. You must provide the serial number to the Juniper Networks Technical Assistance Center (JTAC) when you contact them to obtain Return Materials Authorization (RMA).
Page 463 Figure 159: Standard-Capacity AC Power Supply Serial Number Label High-Capacity AC Power Supply—The serial number label is on the top of the AC power supply. See Figure 160 on page 464. Figure 160: High-Capacity AC Power Supply Serial Number Label DC power Supplies: Standard-Capacity DC Power Supply—The serial number label is on the DC power supply faceplate under the circuit breaker switch.
Page 464 Figure 161: Standard-Capacity DC Power Supply Serial Number Label High-Capacity DC Power Supply—The serial number label is on the top of the DC power supply. See Figure 162 on page 466.
Page 465: Locating The Srx5800 Services Gateway Craft Interface Serial Number Label
Figure 162: High-Capacity DC Power Supply Serial Number Label Locating the SRX5800 Services Gateway Craft Interface Serial Number Label The serial number is located on the back of the craft interface panel (see Figure 163 on page 466). Figure 163: Craft Interface Serial Number Label...
Page 466: Information You Might Need To Supply To Jtac
Configuration data displayed by one or more show commands Your name, organization name, telephone number, fax number, and shipping address Required Tools and Parts for Packing the SRX5800 Services Gateway To remove components from the services gateway or the services gateway from a rack, you need the following tools and parts: 2.5-mm flat-blade (–) screwdriver, for detaching alarm relay terminal block...
Page 467: Packing The Srx5800 Services Gateway For Shipment
To pack the services gateway for shipment: 1. Retrieve the shipping crate and packing materials in which the services gateway was originally shipped. If you do not have these materials, contact your Juniper Networks representative about approved packaging materials. 2. On the console or other management device connected to the master Routing Engine, enter CLI operational mode and issue the following command to shut down the services gateway software.
Page 468: Packing Srx5800 Services Gateway Components For Shipment
12. Securely tape the box closed or place the crate cover over the services gateway. 13. Write the RMA number on the exterior of the box to ensure proper tracking. Packing SRX5800 Services Gateway Components for Shipment Follow these guidelines for packing and shipping individual components of the services gateway: When you return a component, make sure that it is adequately protected with packing materials and packed so that the pieces are prevented from moving around inside the carton.
Page 469: Safety And Compliance Information
C HAPTER Safety and Compliance Information General Safety Guidelines and Warnings | 473 Definitions of Safety Warning Levels | 474 Restricted Access Area Warning | 478 Fire Safety Requirements | 480 Qualified Personnel Warning | 482 Warning Statement for Norway and Sweden | 482 Installation Instructions Warning | 483 Chassis and Component Lifting Guidelines | 483 Ramp Warning | 484...
Page 470 TN Power Warning | 532 Action to Take After an Electrical Accident | 532 SRX5800 Services Gateway Agency Approvals | 533 SRX5800 Services Gateway Compliance Statements for EMC Requirements | 534 Statements of Volatility for Juniper Network Devices | 536...
Page 471 General Safety Guidelines and Warnings The following guidelines help ensure your safety and protect the device from damage. The list of guidelines might not address all potentially hazardous situations in your working environment, so be alert and exercise good judgment at all times. Perform only the procedures explicitly described in the hardware documentation for this device.
Page 472: General Safety Guidelines And Warnings
Always ensure that all modules, power supplies, and cover panels are fully inserted and that the installation screws are fully tightened. Definitions of Safety Warning Levels The documentation uses the following levels of safety warnings (there are two Warning formats): NOTE: You might find this information helpful in a particular situation, or you might overlook this important information if it was not highlighted in a Note.
Page 474 WARNING: This symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Waarschuwing Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan veroorzaken.
Page 475 Varning! Denna varningssymbol signalerar fara. Du befinner dig i en situation som kan leda till personskada. Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och känna till vanligt förfarande för att förebygga skador.
Page 476 Restricted Access Area Warning...
Page 477: Restricted Access Area Warning
WARNING: The services gateway is intended for installation in restricted access areas. A restricted access area is an area to which access can be gained only by service personnel through the use of a special tool, lock and key, or other means of security, and which is controlled by the authority responsible for the location.
Page 478: Fire Safety Requirements
In addition, you should establish procedures to protect your equipment in the event of a fire emergency. Juniper Networks products should be installed in an environment suitable for electronic equipment. We recommend that fire suppression equipment be available in the event of a fire in the vicinity of the equipment and that all local fire, safety, and electrical codes and ordinances be observed when you install and operate your equipment.
Page 479: Fire Suppression Equipment
To keep warranties effective, do not use a dry chemical fire extinguisher to control a fire at or near a Juniper Networks device. If a dry chemical fire extinguisher is used, the unit is no longer eligible for coverage under a service agreement.
Page 480: Qualified Personnel Warning
Qualified Personnel Warning WARNING: Only trained and qualified personnel should install or replace the device. Waarschuwing Installatie en reparaties mogen uitsluitend door getraind en bevoegd personeel uitgevoerd worden. Varoitus Ainoastaan koulutettu ja pätevä henkilökunta saa asentaa tai vaihtaa tämän laitteen. Attention Tout installation ou remplacement de l'appareil doit être réalisé...
Page 481: Installation Instructions Warning
Installation Instructions Warning WARNING: Read the installation instructions before you connect the device to a power source. Waarschuwing Raadpleeg de installatie-aanwijzingen voordat u het systeem met de voeding verbindt. Varoitus Lue asennusohjeet ennen järjestelmän yhdistämistä virtalähteeseen. Attention Avant de brancher le système sur la source d'alimentation, consulter les directives d'installation.
Page 482: Ramp Warning
Up to 39.7 lb (18 kg): One person. 39.7 lb (18 kg) to 70.5 lb (32 kg): Two or more people. 70.5 lb (32 kg) to 121.2 lb (55 kg): Three or more people. Above 121.2 lbs (55 kg): Material handling systems (such as levers, slings, lifts and so on) must be used. When this is not practical, specially trained persons or systems must be used (riggers or movers).
Page 484 De onderstaande richtlijnen worden verstrekt om uw veiligheid te verzekeren: De Juniper Networks switch moet in een stellage worden geïnstalleerd die aan een bouwsel is verankerd. Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel het enige in het rek is.
Page 485 Les directives ci-dessous sont destinées à assurer la protection du personnel: Le rack sur lequel est monté le Juniper Networks switch doit être fixé à la structure du bâtiment. Si cette unité constitue la seule unité montée en casier, elle doit être placée dans le bas.
Page 486 Il Juniper Networks switch deve essere installato in un telaio, il quale deve essere fissato alla struttura dell'edificio. Questa unità deve venire montata sul fondo del supporto, se si tratta dell'unica unità da montare nel supporto. Quando questa unità viene montata in un supporto parzialmente pieno, caricare il supporto dal basso all'alto, con il componente più...
Page 487 El Juniper Networks switch debe instalarse en un bastidor fijado a la estructura del edificio. Colocar el equipo en la parte inferior del bastidor, cuando sea la única unidad en el mismo. Cuando este equipo se vaya a instalar en un bastidor parcialmente ocupado, comenzar la instalación desde la parte inferior hacia la superior colocando el equipo más pesado...
Page 488: Grounded Equipment Warning
Grounded Equipment Warning WARNING: The device is intended to be grounded. During normal use, ensure that you have connected earth ground to the chassis. Waarschuwing Deze apparatuur hoort geaard te worden Zorg dat de host-computer tijdens normaal gebruik met aarde is verbonden. Varoitus Tämä...
Page 489: Laser And Led Safety Guidelines And Warnings
Class 1 LED Product Warning | 493 Laser Beam Warning | 494 Juniper Networks devices are equipped with laser transmitters, which are considered a Class 1 Laser Product by the U.S. Food and Drug Administration and are evaluated as a Class 1 Laser Product per EN 60825-1 requirements.
Page 490 Class 1 Laser Product Warning WARNING: Class 1 laser product. Waarschuwing Klasse-1 laser produkt. Varoitus Luokan 1 lasertuote. Attention Produit laser de classe I. Warnung Laserprodukt der Klasse 1. Avvertenza Prodotto laser di Classe 1. Advarsel Laserprodukt av klasse 1. Aviso Produto laser de classe 1.
Page 491: Class 1 Laser Product Warning
Class 1 LED Product Warning WARNING: Class 1 LED product. Waarschuwing Klasse 1 LED-product. Varoitus Luokan 1 valodiodituote. Attention Alarme de produit LED Class I. Warnung Class 1 LED-Produktwarnung. Avvertenza Avvertenza prodotto LED di Classe 1. Advarsel LED-produkt i klasse 1. Aviso Produto de classe 1 com LED.
Page 492: Laser Beam Warning
Laser Beam Warning WARNING: Do not stare into the laser beam or view it directly with optical instruments. Waarschuwing Niet in de straal staren of hem rechtstreeks bekijken met optische instrumenten. Varoitus Älä katso säteeseen äläkä tarkastele sitä suoraan optisen laitteen avulla. Attention Ne pas fixer le faisceau des yeux, ni l'observer directement à...
Page 493: Radiation From Open Port Apertures Warning
Radiation from Open Port Apertures Warning WARNING: Because invisible radiation might be emitted from the aperture of the port when no fiber cable is connected, avoid exposure to radiation and do not stare into open apertures. Waarschuwing Aangezien onzichtbare straling vanuit de opening van de poort kan komen als er geen fiberkabel aangesloten is, dient blootstelling aan straling en het kijken in open openingen vermeden te worden.
Page 494 Maintenance and Operational Safety Guidelines and Warnings IN THIS SECTION Battery Handling Warning | 497 Jewelry Removal Warning | 498 Lightning Activity Warning | 500 Operating Temperature Warning | 501 Product Disposal Warning | 503 While performing the maintenance activities for devices, observe the following guidelines and warnings:...
Page 495: Battery Handling Warning
Battery Handling Warning WARNING: Replacing a battery incorrectly might result in an explosion. Replace a battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer's instructions. Waarschuwing Er is ontploffingsgevaar als de batterij verkeerd vervangen wordt. Vervang de batterij slechts met hetzelfde of een equivalent type dat door de fabrikant aanbevolen is.
Page 496 Jewelry Removal Warning...
Page 497: Jewelry Removal Warning
WARNING: Before working on equipment that is connected to power lines, remove jewelry, including rings, necklaces, and watches. Metal objects heat up when connected to power and ground and can cause serious burns or can be welded to the terminals. Waarschuwing Alvorens aan apparatuur te werken die met elektrische leidingen is verbonden, sieraden (inclusief ringen, kettingen en horloges) verwijderen.
Page 498: Lightning Activity Warning
se conectan a la alimentación y a tierra, lo que puede ocasionar quemaduras graves o que los objetos metálicos queden soldados a los bornes. Varning! Tag av alla smycken (inklusive ringar, halsband och armbandsur) innan du arbetar på utrustning som är kopplad till kraftledningar. Metallobjekt hettas upp när de kopplas ihop med ström och jord och kan förorsaka allvarliga brännskador;...
Page 499 Operating Temperature Warning...
Page 500: Operating Temperature Warning
40° C. Para evitar a restrição à circulação de ar, deixe pelo menos um espaço de 15,2 cm à volta das aberturas de ventilação. ¡Atención! Para impedir que un encaminador de la serie Juniper Networks switch se recaliente, no lo haga funcionar en un área en la que se supere la temperatura ambiente máxima recomendada de 40°...
Page 501: Product Disposal Warning
Varning! Förhindra att en Juniper Networks switch överhettas genom att inte använda den i ett område där den maximalt rekommenderade omgivningstemperaturen på 40° C överskrids. Förhindra att luftcirkulationen inskränks genom att se till att det finns fritt utrymme på minst 15,2 cm omkring ventilationsöppningarna.
Page 502 General Electrical Safety Guidelines and Warnings WARNING: Certain ports on the device are designed for use as intrabuilding (within-the-building) interfaces only (Type 2 or Type 4 ports as described in GR-1089-CORE) and require isolation from the exposed outside plant (OSP) cabling. To comply with NEBS requirements and protect against lightning surges and commercial power disturbances, the intrabuilding ports must not be metallically connected to interfaces that connect to the OSP or its wiring.
Page 503: General Electrical Safety Guidelines And Warnings
Operate the device within marked electrical ratings and product usage instructions. To ensure that the device and peripheral equipment function safely and correctly, use the cables and connectors specified for the attached peripheral equipment, and make certain they are in good condition. You can remove and replace many device components without powering off or disconnecting power to the device, as detailed elsewhere in the hardware documentation for this device.
Page 504: Ac Power Electrical Safety Guidelines
Figure 164: Placing a Component into an Antistatic Bag CAUTION ELECTROSTATIC SENSITIVE DEVICES DO NOT OPEN OR HANDLE EXCEPT AT A STATIC-FREE WORKSTATION CAUTION: ANSI/TIA/EIA-568 cables such as Category 5e and Category 6 can get electrostatically charged. To dissipate this charge, always ground the cables to a suitable and safe earth ground before connecting them to the system.
Page 505 You must provide an external certified circuit breaker (2-pole circuit breaker or 4-pole circuit breaker based on your device) rated minimum 20 A in the building installation. The power cord serves as the main disconnecting device for the AC-powered device. The socket outlet must be near the AC-powered device and be easily accessible.
Page 506: Ac Power Disconnection Warning
AC Power Disconnection Warning WARNING: Before working on the device or near power supplies, unplug all the power cords from an AC-powered device. Waarschuwing Voordat u aan een frame of in de nabijheid van voedingen werkt, dient u bij wisselstroom toestellen de stekker van het netsnoer uit het stopcontact te halen. Varoitus Kytke irti vaihtovirtalaitteiden virtajohto, ennen kuin teet mitään asennuspohjalle tai työskentelet virtalähteiden läheisyydessä.
Page 507: Dc Power Electrical Safety Guidelines
DC Power Electrical Safety Guidelines DC Power Electrical Safety Guidelines The following electrical safety guidelines apply to a DC-powered services gateway: A DC-powered services gateway is equipped with a DC terminal block that is rated for the power requirements of a maximally configured services gateway. To supply sufficient power, terminate the DC input wiring on a facility DC source capable of supplying at least 30 A @ -48 VDC for the system.
Page 508 The marked input voltage of -48 VDC for a DC-powered services gateway is the nominal voltage associated with the battery circuit, and any higher voltages are only to be associated with float voltages for the charging function. Because the services gateway is a positive ground system, you must connect the positive lead to the terminal labeled RETURN, the negative lead to the terminal labeled -48V, and the earth ground to the chassis grounding points.
Page 509 DC Power Disconnection Warning...
Page 510: Dc Power Disconnection Warning
WARNING: Before performing any of the following procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.
Page 511 que toda a corrente foi DESLIGADA, localize o disjuntor no painel que serve o circuito de corrente contínua e coloque-o na posição OFF (Desligado), segurando nessa posição a manivela do interruptor do disjuntor com fita isoladora. ¡Atención! Antes de proceder con los siguientes pasos, comprobar que la alimentación del circuito de corriente continua (CC) esté...
Page 512 WARNING: When installing the services gateway, the ground connection must always be made first and disconnected last. Waarschuwing Bij de installatie van het toestel moet de aardverbinding altijd het eerste worden gemaakt en het laatste worden losgemaakt. Varoitus Laitetta asennettaessa on maahan yhdistäminen aina tehtävä ensiksi ja maadoituksen irti kytkeminen viimeiseksi.
Page 513 DC Power Wiring Sequence Warning...
Page 514: Dc Power Wiring Sequence Warning
WARNING: Wire the DC power supply using the appropriate lugs. When connecting power, the proper wiring sequence is ground to ground, +RTN to +RTN, then -48 V to -48 V. When disconnecting power, the proper wiring sequence is -48 V to -48 V, +RTN to +RTN, then ground to ground.
Page 515 moler. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. ¡Atención! Wire a fonte de alimentação de DC Usando os talões apropriados na extremidade da fiação.
Page 516 DC Power Wiring Terminations Warning...
Page 517: Dc Power Wiring Terminations Warning
WARNING: When stranded wiring is required, use approved wiring terminations, such as closed-loop or spade-type with upturned lugs. These terminations should be the appropriate size for the wires and should clamp both the insulation and conductor. Waarschuwing Wanneer geslagen bedrading vereist is, dient u bedrading te gebruiken die voorzien is van goedgekeurde aansluitingspunten, zoals het gesloten-lus type of het grijperschop type waarbij de aansluitpunten omhoog wijzen.
Page 518 Varning! När flertrådiga ledningar krävs måste godkända ledningskontakter användas, t.ex. kabelsko av sluten eller öppen typ med uppåtvänd tapp. Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda. RELATED DOCUMENTATION Action to Take After an Electrical Accident | 532 General Electrical Safety Guidelines and Warnings | 504 AC Power Electrical Safety Guidelines | 506...
Page 519 DC Power Disconnection Warning...
Page 520 WARNING: Before performing any of the DC power procedures, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the device handle of the circuit breaker in the OFF position.
Page 521: Dc Power Grounding Requirements And Warning
que toda a corrente foi DESLIGADA, localize o disjuntor no painel que serve o circuito de corrente contínua e coloque-o na posição OFF (Desligado), segurando nessa posição a manivela do interruptor do disjuntor com fita isoladora. ¡Atención! Antes de proceder con los siguientes pasos, comprobar que la alimentación del circuito de corriente continua (CC) esté...
Page 522 WARNING: When you install the device, the ground connection must always be made first and disconnected last. Waarschuwing Bij de installatie van het toestel moet de aardverbinding altijd het eerste worden gemaakt en het laatste worden losgemaakt. Varoitus Laitetta asennettaessa on maahan yhdistäminen aina tehtävä ensiksi ja maadoituksen irti kytkeminen viimeiseksi.
Page 523 DC Power Wiring Sequence Warning...
Page 524 WARNING: Wire the DC power supply using the appropriate lugs. When connecting power, the proper wiring sequence is ground to ground, +RTN to +RTN, then –48 V to –48 V. When disconnecting power, the proper wiring sequence is –48 V to –48 V, +RTN to +RTN, then ground to ground.
Page 525 para moler. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. Observe que el alambre de tierra se debe conectar siempre primero y desconectar por último. ¡Atención! Wire a fonte de alimentação de DC Usando os talões apropriados na extremidade da fiação.
Page 526 DC Power Wiring Terminations Warning...
Page 527 WARNING: When stranded wiring is required, use approved wiring terminations, such as closed-loop or spade-type with upturned lugs. These terminations must be the appropriate size for the wires and must clamp both the insulation and conductor. Waarschuwing Wanneer geslagen bedrading vereist is, dient u bedrading te gebruiken die voorzien is van goedgekeurde aansluitingspunten, zoals het gesloten-lus type of het grijperschop type waarbij de aansluitpunten omhoog wijzen.
Page 528 conexión vueltas hacia arriba. Estos terminales deberán ser del tamaño apropiado para los cables que se utilicen, y tendrán que sujetar tanto el aislante como el conductor. Varning! När flertrådiga ledningar krävs måste godkända ledningskontakter användas, t.ex. kabelsko av sluten eller öppen typ med uppåtvänd tapp. Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda.
Page 529: Multiple Power Supplies Disconnection Warning
Multiple Power Supplies Disconnection Warning WARNING: The network device has more than one power supply connection. All connections must be removed completely to remove power from the unit completely. Waarschuwing Deze eenheid heeft meer dan één stroomtoevoerverbinding; alle verbindingen moeten volledig worden verwijderd om de stroom van deze eenheid volledig te verwijderen.
Page 530: Tn Power Warning
TN Power Warning WARNING: The device is designed to work with a TN power system. Waarschuwing Het apparaat is ontworpen om te functioneren met TN energiesystemen. Varoitus Koje on suunniteltu toimimaan TN-sähkövoimajärjestelmien yhteydessä. Attention Ce dispositif a été conçu pour fonctionner avec des systèmes d'alimentation Warnung Das Gerät ist für die Verwendung mit TN-Stromsystemen ausgelegt.
Page 531 SRX5800 Services Gateway Agency Approvals The services gateway complies with the following standards: Safety EN 60825-1 Safety of Laser Products - Part 1: Equipment Classification, Requirements and User's Guide CSA 60950-1 Safety of Information Technology Equipment UL 60950-1 Safety of Information Technology Equipment...
Page 532: Srx5800 Services Gateway Agency Approvals
RELATED DOCUMENTATION In Case of Electrical Accident General Electrical Safety Guidelines and Warnings DC Power Electrical Safety Guidelines and Warnings SRX5800 Services Gateway Compliance Statements for EMC Requirements IN THIS SECTION Canada | 534 European Community | 534 Israel | 535...
Page 533: Israel
Israel The preceding translates as follows: This product is Class A. In residential environments, the product may cause radio interference, and in such a situation, the user may be required to take adequate measures. Japan The preceding translates as follows: This is a Class A product.
Page 534: Statements Of Volatility For Juniper Network Devices
Statements of Volatility for Juniper Network Devices A statement of volatility—sometimes known as letter of volatility—identifies the volatile and non-volatile storage components in Juniper Networks devices, and describes how to remove non-volatile storage components from the device. NOTE: Statements of volatility are not available for all Juniper Networks devices.
Page 535 LN Series: LN1000–CC MX Series: M7i Compact Forwarding Engine Board (CFEB) M40e and M10i M320 MX5, MX10, MX40, and MX80 MX240, MX480, and MX960 RE-A-2000 Route Engine RE-S-X6-64G Routing Engine QFX Series: QFX3008-I QFX3100 QFX3500 QFX3600 QFX5100-24Q QFX5100-48S QFX5100-48T QFX5110-32Q QFX5110-48S QFX5200 QFX5200-32C...
Page 536 SRX220 SRX240H SRX240H-POE SRX300 SRX320 SRX340 and SRX345 SRX550 SRX650 SRX1400 SRX1500 SRX3400 and SRX3600 SRX5400, SRX5600, and SRX5800 SRX-MP-1SERIAL SSG-520M T Series: RE-A-2000 Route Engine...

Juniper SRX5800 Hardware Manual

About the Documentation

1 Overview

SRX5800 Services Gateway System Overview

SRX5800 Chassis

SRX5800 Services Gateway Cooling System

SRX5800 Power System

SRX5800 Host Subsystem

SRX5800 Line Cards and Modules

2 Site Planning, Preparation, and Specifications

Site Preparation Checklist for the SRX5800 Services Gateway

SRX5800 Site Guidelines and Requirements

SRX5800 Rack and Cabinet Requirements

Configuring Ambient Temperature on SRX5800 Services Gateway

Calculating Power Requirements for the SRX5800 Services Gateway

SRX5800 Network Cable and Transceiver Planning

SRX5800 Alarm and Management Cable Specifications and Pinouts

3 Initial Installation and Configuration

Overview of Installing the SRX5800 Services Gateway

Unpacking the SRX5800

Installing the SRX5800 Mounting Hardware

Connecting the SRX5800 to External Devices

Connecting the SRX5800 to Power

Performing the Initial Software Configuration for the SRX5800

4 Maintaining Components

Maintaining the SRX5800 Chassis

Maintaining the SRX5800 Cooling System

Maintaining the SRX5800 Power System

Maintaining the SRX5800 Host Subsystem

Maintaining the SRX5800 Line Cards and Modules

Maintaining the SRX5800 Cables and Connectors

Replacing a Routing Engine in an SRX Series High-End Chassis Cluster

5 Troubleshooting Hardware

Troubleshooting the SRX5800

6 Contacting Customer Support and Returning the Chassis or Components

Returning the SRX5800 Chassis or Components

7 Safety and Compliance Information

General Safety Guidelines and Warnings

Definitions of Safety Warning Levels

Restricted Access Area Warning

Fire Safety Requirements

Qualified Personnel Warning

Warning Statement for Norway and Sweden

Rack-Mounting and Cabinet-Mounting Warnings

Grounded Equipment Warning

Laser and LED Safety Guidelines and Warnings

Radiation from Open Port Apertures Warning

General Electrical Safety Guidelines and Warnings

Prevention of Electrostatic Discharge Damage

AC Power Electrical Safety Guidelines

AC Power Disconnection Warning

DC Power Electrical Safety Guidelines

TN Power Warning

Action to Take after an Electrical Accident

SRX5800 Services Gateway Agency Approvals

SRX5800 Services Gateway Compliance Statements for EMC Requirements

Quick Links

Troubleshooting

Related Manuals for Juniper SRX5800

Summary of Contents for Juniper SRX5800