Juniper SRX5400 Manual
  1. Manuals
  2. Brands
  3. Juniper Manuals
  4. Gateway
  5. SRX5400
  6. Manual

Juniper SRX5400 Manual

Services gateway card reference
Hide thumbs Also See for SRX5400:
Table of Contents

Advertisement

Quick Links

Download this manual
SRX5400, SRX5600, and SRX5800 Services
Gateway Card Reference
Published
2020-02-09

Advertisement

Table of Contents
loading

Related Manuals for Juniper SRX5400

Summary of Contents for Juniper SRX5400

  • Page 1 SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference Published 2020-02-09...
  • Page 2 END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at https://support.juniper.net/support/eula/.

  • Page 3: Table Of Contents

    SRX5400, SRX5600, and SRX5800 Services Gateway Cards and Modules Overview | 3 SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 3 Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 4 Services Processing Cards | 9 Services Processing Cards Specifications | 9...
  • Page 4 Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications | 34 Modular Port Concentrators and Interface Cards | 37 Modular Port Concentrators and Interface Cards Specifications | 37 Modular Port Concentrator (SRX5K-MPC) Specifications | 37 MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 40 MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 46 MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 51 MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 53...
  • Page 5 Handling and Storing Cards Handling and Storing SRX5400, SRX5600, and SRX5800 Services Gateway Cards | 91 SRX5400, SRX5600, and SRX5800 Services Gateway Card Terminology | 91 Handling an SRX5400, SRX5600, or SRX5800 Services Gateway Card | 92 Storing an SRX5600, SRX5600, or SRX5800 Services Gateway Card | 94...

  • Page 6: About The Documentation

    If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration.

  • Page 7: Merging A Full Example

    viii Merging a Full Example To merge a full example, follow these steps: 1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the file with a name, and copy the file to a directory on your routing platform. For example, copy the following configuration to a file and name the file ex-script.conf.

  • Page 8: Documentation Conventions

    commit { file ex-script-snippet.xsl; } 2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode command: [edit] user@host# edit system scripts [edit system scripts] 3. Merge the contents of the file into your routing platform configuration by issuing the load merge relative configuration mode command: [edit system scripts] user@host# load merge relative /var/tmp/ex-script-snippet.conf...
  • Page 9 Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser.
  • Page 10 Table 2: Text and Syntax Conventions (continued) Convention Description Examples Italic text like this Represents variables (options for Configure the machine’s domain which you substitute a value) in name: commands or configuration [edit] statements. root@# set system domain-name domain-name Text like this Represents names of configuration To configure a stub area, include statements, commands, files, and...

  • Page 11: Documentation Feedback

    URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active Juniper Care or Partner Support Services support contract, or are...

  • Page 12: Self-Help Online Tools And Resources

    JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: https://www.juniper.net/customers/support/...

  • Page 13: Srx5400, Srx5600, And Srx5800 Services Gateway Cards And Modules

    PART SRX5400, SRX5600, and SRX5800 Services Gateway Cards and Modules Overview | 3 Services Processing Cards | 9 I/O Cards | 23 Flex I/O Cards and Port Modules | 29 Modular Port Concentrators and Interface Cards | 37 Switch Control Boards | 67...

  • Page 15: Overview

    SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800 Services Gateway to suit the needs of your network. The following types of cards are available for the SRX5400, SRX5600, and SRX5800 Services Gateways: I/O cards (IOCs) provide additional physical network connections to the services gateway.

  • Page 16: Cards Supported On Srx5400, Srx5600, And Srx5800 Services Gateways

    Although the following modules are not cards in the sense of having a form-factor that fits the card cage of the SRX5400, SRX5600, and SRX5800 Services Gateway, this guide also addresses the following modules that fit into certain SRX5400, SRX5600, and SRX5800 Services Gateway cards:...
  • Page 17 Table 3: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 I/O Card SRX5K-40GE-SFP Not supported 15.1X49...
  • Page 18 Table 3: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways (continued) Last Supported Junos Earliest Supported Junos OS Release OS Release Card Name and Model SRX5400, SRX5600, Number SRX5400 SRX5600 and SRX5800 and SRX5800 Other modules Flex I/O Card Port Module Not supported 10.2...
  • Page 19 Figure 1 on page 7 is an interoperability matrix that describes the compatibility between various interface cards for the SRX5400, SRX5600, and SRX5800 Services Gateways. Figure 1: Interoperability Matrix for SRX5400, SRX5600, and SRX5800 Services Gateways Model Numbers SRX5400 SRX5K-SCB...

  • Page 20: Services Processing Cards

    CHAPTER 2 Services Processing Cards IN THIS CHAPTER Services Processing Cards Specifications | 9 Services Processing Cards Specifications IN THIS SECTION Services Processing Card SRX5K-SPC-2-10-40 Specifications | 9 Services Processing Card SRX5K-SPC-4-15-320 Specifications | 13 Services Processing Card SRX5K-SPC3 Specifications | 18 Services Processing Card SRX5K-SPC-2-10-40 Specifications The SRX5K-SPC-2-10-40 Services Processing Card (SPC) contains two Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see...
  • Page 21 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces.
  • Page 22 Processor subsystem, which includes a 1.2-GHz CPU, system controller, and 1 GB of SDRAM. LEDs on the faceplate that indicate the SPC and SPU status. Description SPC with two SPUs Software release Junos OS Release 9.2 and later Cables and CHASSIS CLUSTER CONTROL 0 and CHASSIS CLUSTER CONTROL 1–SFP ports for control connectors links in chassis cluster configurations.
  • Page 23 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the two SPUs SPU 0 and SPU 1: Green–The SPU is operating normally.

  • Page 24: Services Processing Card Srx5K-Spc-4-15-320 Specifications

    Serial Number The serial number label is located as shown in Figure 3 on page Location Figure 3: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Services Processing Card SRX5K-SPC-4-15-320 Specifications The SRX5K-SPC-4-15-320 Services Processing Card (SPC) contains four Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 4 on page...
  • Page 25 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces.
  • Page 26 None Supported Slots SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE.
  • Page 27 LEDs...
  • Page 28 OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each of the four SPUs SPU 0 through SPU 3: Green–The SPU is operating normally. Amber–The SPU is initializing.

  • Page 29: Services Processing Card Srx5K-Spc3 Specifications

    Off–The chassis cluster control port is disabled. Serial Number The serial number label is located as shown in Figure 5 on page Location Figure 5: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Services Processing Card SRX5K-SPC3 Specifications The SRX5K-SPC3 Services Processing Card (SPC) contains two Services Processing Units (SPUs) with...
  • Page 30 Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device. Fabric interfaces One Gigabit Ethernet switch that provides control connectivity to the Routing Engine.
  • Page 31 None Supported Slots SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. SRX5800–Any slot, except slot 11, and the slots 0 or 1 which are reserved for SCB/RE.
  • Page 32 LEDs OK/FAIL LED, one bicolor: Steady green–The SPC is operating normally. Red–The SPC has failed and is not operating normally. Off–The SPC is powered down. STATUS LED, one tricolor for each SPU SPU 0 and SPU 1: Off–The SPU is offline. Blinking Amber–The SPU is initializing.

  • Page 33: I/O Cards

    CHAPTER 3 I/O Cards IN THIS CHAPTER I/O Cards Specifications | 23 I/O Cards Specifications IN THIS SECTION I/O Card SRX5K-40GE-SFP Specifications | 23 I/O Card SRX5K-4XGE-XFP Specifications | 25 I/O Card SRX5K-40GE-SFP Specifications The SRX5K-40GE-SFP I/O card (IOC) is optimized for Ethernet density and supports 40 Gigabit Ethernet ports (see Figure 7 on page 24).
  • Page 34 Figure 7: IOC SRX5K-40GE-SFP OK / F AIL 0/0 0/5 2/0 2/5 1/0 1/5 3/0 3/5 Description I/O card with 40 Gigabit Ethernet SFP ports Maximum configurable MTU: 9192 bytes Maximum throughput: 40 Gbps Software release Junos OS Release 9.2 and later Cables and connectors 40 Gigabit Ethernet SFP ports Supported SFP transceivers:...

  • Page 35: I/O Card Srx5K-4Xge-Xfp Specifications

    LEDs OK/FAIL LED, one bicolor: Steady green–The IOC is operating normally. Red–The IOC has failed and is not operating normally. Off–The IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 8 on page Figure 8: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number...
  • Page 36 Figure 9: IOC SRX5K-4XGE-XFP OK /FA IL Description I/O card with four 10-Gigabit Ethernet XFP ports Maximum configurable MTU: 9192 bytes Maximum throughput: 40 Gbps Software release Junos OS Release 9.2 and later Cables and connectors Four 10-Gbps XFP ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET...
  • Page 37 LEDs OK/FAIL LED, one bicolor: Steady green–The IOC is operating normally. Red–The IOC has failed and is not operating normally. Off–The IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 10 on page Figure 10: SRX5K-4XGE-XFP Serial Number Label OK /F AIL Serial number...

  • Page 38: Flex I/O Cards And Port Modules

    CHAPTER 4 Flex I/O Cards and Port Modules IN THIS CHAPTER Flex I/O Cards and Port Modules Specifications | 29 Flex I/O Cards and Port Modules Specifications IN THIS SECTION Flex I/O Card (SRX5K-FPC-IOC) Specifications | 29 Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications | 31 Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications | 33 Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications | 34 Flex I/O Card (SRX5K-FPC-IOC) Specifications...
  • Page 39 Figure 11: Flex IOC with Typical Port Modules Flex IOC 4x10GE-XFP port module in slot 0 16x1GE-TX port module in slot 1 Description Flex IOC with slots for two port modules Maximum throughput: 10 Gbps (per PFE) Software release Junos OS Release 9.5R1 and later Cables and connectors Slots for two port modules Controls...

  • Page 40: Flex I/O Card Port Module Srx-Ioc-16Ge-Sfp Specifications

    Serial Number Location The serial number label is located as shown in Figure 12 on page Figure 12: Serial Number Label (IOC Shown, Other Cards Similar) OK /F AIL Serial number ID label AA567 8 Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.
  • Page 41 Cables and connectors 16 Gigabit Ethernet SFP ports Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls ONLINE Button–The ONLINE button on the port module front panel toggles the port module online and offline Supported Slots Either slot in SRX5K-FPC-IOC Flex IOC...

  • Page 42: Flex I/O Card Port Module Srx-Ioc-16Ge-Tx Specifications

    Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network. The SRX-IOC-16GE-TX port module (Figure 15 on page installs into a Flex IOC to add sixteen 10/100/1000 Ethernet RJ-45 copper ports.

  • Page 43: Flex I/O Card Port Module Srx-Ioc-4Xge-Xfp Specifications

    Serial Number Location The serial number label is located as shown in Figure 16 on page Figure 16: Port Module SRX-IOC-16GE-TX Serial Number Label Serial number ID label JX0123 Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network.
  • Page 44 Controls ONLINE Button–The ONLINE button on the port module front panel toggles the port module online and offline Supported Slots Either slot in SRX5K-FPC-IOC Flex IOC Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Steady green–The port module is operating normally. Red–The port module has failed and is not operating normally.

  • Page 45: Modular Port Concentrators And Interface Cards

    CHAPTER 5 Modular Port Concentrators and Interface Cards IN THIS CHAPTER Modular Port Concentrators and Interface Cards Specifications | 37 Modular Port Concentrators and Interface Cards Specifications IN THIS SECTION Modular Port Concentrator (SRX5K-MPC) Specifications | 37 MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 40 MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 46 MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 51 MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 53...
  • Page 46 You can install MPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 47 CLI command: user@host set security forwarding-process application-services session-distribution-mode hash-based When installing an SRX5K-MPC in an SRX5400 Services Gateway, the session-distribution-mode will only function when hash-based mode is configured or set as the default. The normal mode is not supported.

  • Page 48: Mic With 20X1Ge Sfp Interfaces (Srx-Mic-20Ge-Sfp)

    To install and use SRX5K-MPCs in the SRX5600 and SRX5800 Services Gateways, you must have high-capacity power supplies (either AC or DC) and high-capacity fan trays installed in the services gateways. All models of SRX5400 Services Gateways already include high-capacity supplies. If you do not have high-capacity power supplies and fan trays installed, the services gateway will log an alarm condition when it recognizes the SRX5K-MPCs.
  • Page 49 Figure 20: SRX-MIC-20GE-SFP Description MIC with twenty 1-Gigabit Ethernet SFP Ethernet ports Fits into either of the two slots of SRX-5K-MPC Supports up to 20 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 20 Gbps Software release Junos OS Release 12.1X47-D10 Cables and connectors Sockets for 20 SFP Gigabit Ethernet transceivers.
  • Page 50 Port and Interface Numbering...
  • Page 51 2 or 3 when installed in the second slot. port—Port number. Figure 21 on page 43 shows the SRX-MIC-20GE-SFP MIC installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 21: SRX-MIC-20GE-SFP Interface Port Mapping SRX-MIC-20GE-SFP...
  • Page 52 The sample output of the show chassis fpc pic-status command output displays two 20-port Gigabit Ethernet MICs with SFP — inserted into the slots of an MPC in slot 2. The logical PICs of the two MICs— 10x 1GE(LAN) SFP — are shown as PIC 0, PIC 1, PIC 2, and PIC 3.
  • Page 53 user@host> show interfaces terse Interface Admin Link Proto Local Remote gr-0/0/0 ip-0/0/0 lt-0/0/0 ge-2/0/0 ge-2/0/1 down ge-2/0/2 down ge-2/0/3 down ge-2/0/4 down ge-2/0/5 ge-2/0/6 down ge-2/0/7 down ge-2/0/8 ge-2/0/9 ge-2/1/0 down ge-2/1/1 ge-2/1/2 down ge-2/1/3 down ge-2/1/4 ge-2/1/5 down ge-2/1/6 down ge-2/1/7 down...

  • Page 54: Mic With 10X10Ge Sfp+ Interfaces (Srx-Mic-10Xg-Sfpp)

    ge-2/3/9 down Serial number location The serial number label is yellow and is located as shown in Figure 22 on page Figure 22: SRX-MIC-20GE-SFP Serial Number Label NOTE: The serial number for the mezzanine card is shown only for reference and is never used for any purpose. MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
  • Page 55 Figure 23: SRX-MIC-10XG SFPP Description MIC with ten SFP+ 10-Gigabit Ethernet ports Fits into MPC Supports up to 100 Gbps of full-duplex traffic Maximum configurable MTU: 9192 bytes Maximum throughput: 100 Gbps Software Junos OS Release 12.1X46-D10 release Cables and Sockets for ten 10-Gbps SFP+ transceivers connectors Hardware Compatibility Tool...
  • Page 56 Port and Interface Numbering...
  • Page 57 Figure 24 on page 49 shows the port and interface numbering of an SRX-MIC-10XG-SFPP MIC when it is installed in slot 0 of an MPC in slot 2 of an SRX5400, SRX5600, or SRX5800 Services Gateway. Figure 24: SRX-MIC-10XG-SFPP Port and Interface Numbering...
  • Page 58 PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 2 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP+ PIC 2 Online 10x 10GE SFP+ The show interfaces terse command output displays the 10–Gigabit Ethernet interfaces that correspond to the 10 ports located on each MIC.

  • Page 59: Mic With 1X100Ge Cfp Interface (Srx-Mic-1X100G-Cfp)

    Serial number The serial number label is yellow and located as shown in Figure 25 on page location Figure 25: SRX-MIC-10XG-SFPP Serial Number Label MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
  • Page 60 Cables and connectors One socket for a 100-Gigabit CFP transceiver. Supported CFP transceivers: 100GBASE-LR4 (model number: SRX-CFP-100G-LR4) 100GBASE-SR10 (model number: SRX-CFP-100G-SR10) Supported slots Either slot in SRX5K-MPC Weight Approximately 1.6 lb (0.7 kg) LEDs OK/FAIL LED, one bicolor: Green–The MIC is operating normally. Red–The MIC has failed and is not operating normally.

  • Page 61: Mic With 2X40Ge Qsfp+ Interfaces (Srx-Mic-2X40G-Qsfp)

    MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-2X40G-QSFP (see Figure 28 on page 53) can be installed in an MPC to add two 40-Gigabit quad small form-factor pluggable (QSFP+) Ethernet ports.

  • Page 62: Srx5K-Mpc3-40G10G Specifications

    The SRX5K-MPC3-40G10G (IOC3) is an interface card that provides 10 Gigabit Ethernet and 40 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 30 on page NOTE: These cards do not support plug-in Modular Interface Cards (MICs).
  • Page 63 Figure 30: SRX5K-MPC3-40G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 64 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0 through 0/11 and 1/0 through 1/11 40-Gigabit Ethernet ports: 2/0 through 2/2 and 3/0 through 3/2 Software features Optical diagnostics and related alarms Two packet-forwarding engines, PFE0 and PFE1.

  • Page 65: Srx5K-Mpc3-100G10G Specifications

    The SRX5K-MPC3-100G10G (IOC3) is an interface card that provides 100 Gigabit Ethernet and 10 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 32 on page NOTE: These cards do not support plug-in Modular Interface Cards (MICs).
  • Page 66 Figure 32: SRX5K-MPC3-100G10G If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 67 Hardware features Line-rate throughput of up to 240 Gbps Supports up to 32,000 queues per-slot LAN-PHY mode at 10.3125 Gbps on a per-port basis The ports are labeled as: 10-Gigabit Ethernet ports: 0/0, 0/1, 2/0, and 2/1 100-Gigabit Ethernet ports: 1/0 and 3/0 Software features Configurable LAN-PHY mode options per 10-Gigabit Ethernet port Optical diagnostics and related alarms...

  • Page 68: Srx5K-Ioc4-10G Specifications

    SRX5K-IOC4-10G Specifications SRX5K-IOC4-10G is a fixed-configuration interface card with a Packet Forwarding Engine that provides 400-Gbps line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600 and SRX5800 Services Gateways. See Figure 34 on page NOTE: SRX5K-IOC4-10G cards do not support plug-in Modular Interface Cards (MICs).
  • Page 69 If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 70 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Forty 10-Gigabit Ethernet ports. The ports support SFP+ transceivers. Requires high-capacity power supplies and high-capacity fan trays. The ports are labeled as (seeFigure 34 on page 60): 0/0 through 0/9 0/10 through 0/19 1/0 through 1/9...

  • Page 71: Srx5K-Ioc4-Mrat Specifications

    SRX5K-IOC4-MRAT is a fixed-configuration interface card with a Packet Forwarding Engine that provides up to 480-Gbps (240-Gbps per PIC slot) line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 36 on page NOTE: SRX5K-IOC4-MRAT cards do not support plug-in Modular Interface Cards (MICs).
  • Page 72 If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
  • Page 73 Hardware features Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services Twelve Gigabit Ethernet ports that can be configured as 40-Gigabit Ethernet port or as 4X10-Gigabit Ethernet port using a breakout cable. The ports support quad small-form factor pluggable plus (QSFP+) transceivers. Four out of the twelve ports can be configured as 100-Gigabit Ethernet ports.
  • Page 74 Software features Application security Application Layer Gateway (ALG) Attack detection and prevention Class of service (CoS) Equal-cost multipath (ECMP) load balancing GPRS Tunneling Protocol (GTP) High availability (chassis cluster) Intrusion detection and prevention (IDP) IPsec VPN Layer 2 transparent mode Logical systems Network Address Translation (NAT) Routing protocols (BFD, BGP, IGMP, IS-IS, MLD,...

  • Page 75: Switch Control Boards

    Provides interconnections to all the IOCs within the chassis through the switch fabrics integrated into the SCB SRX5400 and SRX5600 Services Gateways have one SCB each installed and you can install a second SCB for redundancy. The SRX5800 Services Gateway has two SCBs installed and you can install a third SCB...
  • Page 76 The host subsystem is composed of a Routing Engine installed directly into a slot on the faceplate of the SCB. When there is no Routing Engine is a SCB, its slot must be covered with a blank panel. Figure 38: Switch Control Board SRX5K-SCB Each SCB consists of the following components: Chassis management Ethernet switch.
  • Page 77 Cables and connectors Slot for Routing Engine Controls None Supported Slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power Requirement 150 W Weight Approximately 10 lb (4.5 kg)

  • Page 78: Switch Control Board Srx5K-Scbe Specifications

    Serial Number Location The serial number label is located as shown in Figure 39 on page Figure 39: SCB Serial Number Label Serial number ID label Switch Control Board SRX5K-SCBE Specifications Each SRX5K-SCBE consists of the following components: I2C bus logic for low-level communication with each component Component redundancy circuitry Control Board/Routing Engine mastership mechanism Gigabit Ethernet switch that is connected to the embedded CPU complex on all components...

  • Page 79: Srx5K-Scbe Leds

    Cables and connectors Slot for Routing Engine Controls None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 160 W at 131º F (55º C) 130 W at 104º F (40º C) 120 W at 77º...

  • Page 80: Switch Control Board Srx5K-Scb3 Specifications

    Table 4: SRX5K-SCBE LEDs Label Color State Description FABRIC Green On steadily Fabric is in active mode. ACTIVE FABRIC Green On steadily SRX5K-SCBE operates in ONLY fabric-only mode. None SRX5K-SCBE operates in fabric/control board mode. OK/FAIL Green On steadily SRX5K-SCBE is online. On steadily SRX5K-SCBE has failed.

  • Page 81: Srx5K-Scb3 Leds

    Controls None Supported slots SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement 300 W Weight 9.6 lb (4.4 kg) with Routing Engine Serial number location The serial number label is located as shown in...

  • Page 82: Switch Control Board Srx5K-Scb4 Specifications

    Junos OS Release 19.3R1 and later Cables and connectors Slot for Routing Engine Controls None Supported slots SRX5400–Not supported SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6 Power requirement At different temperatures: 55° C: 425 W 40°...

  • Page 83: Srx5K-Scb4 Leds

    Serial number location The serial number label is located as shown in Figure 42 on page Figure 42: SRX5K-SCB4 Serial Number Label Serial number ID label SRX5K-SCB4 LEDs Table 6 on page 75 describes the SCB4 LEDs and their states. Table 6: SRX5K-SCB4 LEDs Label Color...
  • Page 84 Table 6: SRX5K-SCB4 LEDs (continued) Label Color State Description LINK (XGE Green On steadily SFP+ port is enabled and link is established. port) – SFP+ port is disabled or no link is established. Green On steadily Indicates the status of the GPS clocking interface, and the link is OK.

  • Page 85: Routing Engines

    CHAPTER 7 Routing Engines IN THIS CHAPTER Routing Engine Specifications | 77 Routing Engine Specifications IN THIS SECTION Routing Engine SRX5K-RE-13-20 Specifications | 77 Routing Engine SRX5K-RE-1800X4 Specifications | 80 Routing Engine SRX5K-RE3-128G Specifications | 83 Routing Engine SRX5K-RE-13-20 Specifications The SRX5K-RE-13-20 Routing Engine (Figure 43 on page 78) is an Intel-based PC platform that runs the...
  • Page 86 Figure 43: Routing Engine You must install at least one Routing Engine in the services gateway. You can install a second Routing Engine if both Routing Engines are running Junos OS Release 10.0 or later. A second Routing Engine is required if you are using the dual chassis cluster control link feature available in Junos OS Release 10.0 and later.
  • Page 87 For specific information about Routing Engine components (for example, the amount of DRAM), issue the show chassis routing-engine command. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways Software release Junos OS Release 9.2 and later Junos OS Release 10.0 and later required to install a second Routing Engine Cables and connectors AUX—Connects the Routing Engine to a laptop, a modem, or another auxiliary device through...

  • Page 88: Routing Engine Srx5K-Re-1800X4 Specifications

    MASTER LED: Blue–The Routing Engine is Primary. NOTE: The SRX5400, SRX5600, and SRX5800 Services Gateways do not support a secondary or backup Routing Engine, so the MASTER LED should always be lit. OK/FAIL LED, one bicolor: Off–The Routing Engine is operating normally.
  • Page 89 Online/Offline button—Takes the Routing Engine online or offline when pressed. Extractor clips—Inserts and extracts the Routing Engine. Captive screws—Secures the Routing Engine in place. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways Software release Junos OS Release 12.1X47-D15 and later Cables and connectors Slot for Routing Engine AUX–Connects the Routing Engine to a laptop, a modem, or another auxiliary...

  • Page 90: Srx5K-Re-1800X4 Leds

    Weight 2.4 lb (1.1 kg) Serial number location The serial number label is located as shown in Figure 45 on page Figure 45: SRX5K-RE-1800X4 Serial Number Label SRX5K-RE-1800X4 LEDs Each Routing Engine has four LEDs that indicate its status. The LEDs, labeled MASTER, STORAGE, ONLINE, and OK/FAIL, are located directly on the faceplate of the Routing Engine.

  • Page 91: Routing Engine Srx5K-Re3-128G Specifications

    MASTER Description Routing Engine for SRX5400, SRX5600, and SRX5800 Services Gateways, based on Intel’s Haswell-EP CPU with 6 cores, and 128GB of DDR4 memory. It provides increased control plane performance and scalability along with virtualization features in the SRX Series 5000 line of chassis.
  • Page 92 Controls RESET button–Reboots the Routing Engine when pressed. Supported slots Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 NOTE: The services gateway host subsystem Routing Engine must be installed in the SCB in slot 0.

  • Page 93: Srx5K-Re3-128G Routing Engine Components

    Serial number location The serial number label is located as shown in Figure 47 on page Figure 47: SRX5K-RE3-128G Serial Number Label Serial number ID label SRX5K-RE3-128G Routing Engine Components Each Routing Engine consists of the following components: CPU—Runs Junos OS to maintain the routing tables and routing protocols. EEPROM—Stores the serial number of the Routing Engine.

  • Page 94: Srx5K-Re3-128G Routing Engine Leds

    NOTE: The control interface names differ based on the routing engine: For RE2, the control interfaces are displayed as em0 and em1. For RE3, the control interfaces are displayed as ixlv0 and igb0. For more information, see show chassis cluster interfaces. Status LEDs—Table 8 on page 86 describes the functions of the ONLINE, OK/FAIL, MASTER, DISK1,...

  • Page 95: Srx5K-Re3-128G Routing Engine Boot Sequence

    Table 8: SRX5K-RE3-128G Routing Engine LEDs (continued) Label Color State Description OK/FAIL Green On steadily Routing Engine is powering up. Yellow On steadily Routing Engine is not powering up, which indicates failure. MASTER Blue On steadily This Routing Engine is the master Routing Engine. DISK1 Green Blinking...
  • Page 96 PART Handling and Storing Cards Handling and Storing SRX5400, SRX5600, and SRX5800 Services Gateway Cards | 91...
  • Page 98 IN THIS CHAPTER SRX5400, SRX5600, and SRX5800 Services Gateway Card Terminology | 91 Handling an SRX5400, SRX5600, or SRX5800 Services Gateway Card | 92 Storing an SRX5600, SRX5600, or SRX5800 Services Gateway Card | 94 SRX5400, SRX5600, and SRX5800 Services Gateway Card Terminology...
  • Page 99 Figure 48: Card Edges RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways Handling an SRX5400, SRX5600, or SRX5800 Services Gateway Card When carrying a card, you can hold it either vertically or horizontally. NOTE: A card weighs up to 18.3 lb (8.3 kg). Be prepared to accept the full weight of the card as you lift it.
  • Page 100 3. Place your other hand at the bottom edge of the card. If the card is horizontal before you grasp it, place your left hand around the faceplate and your right hand along the bottom edge. To hold a card horizontally: 1.
  • Page 101 RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways Storing an SRX5600, SRX5600, or SRX5800 Services Gateway Card You must store a card as follows:...
  • Page 102 Never stack a card under or on top of any other component. RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways...

This manual is also suitable for:

Srx5600Srx 5800

Table of Contents