Juniper SRX5400 Reference
  1. Manuals
  2. Brands
  3. Juniper Manuals
  4. Network Hardware
  5. SRX5400
  6. Reference

Juniper SRX5400 Reference

Firewall card reference
Hide thumbs Also See for SRX5400:
Table of Contents

Advertisement

Quick Links

Download this manual
SRX5400, SRX5600, and SRX5800
Firewall Card Reference
Published
2023-10-13

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SRX5400 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Juniper SRX5400

Summary of Contents for Juniper SRX5400

  • Page 1 SRX5400, SRX5600, and SRX5800 Firewall Card Reference Published 2023-10-13...
  • Page 2 The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ("EULA") posted at https:/ /support.juniper.net/support/eula/.

  • Page 3: Table Of Contents

    SRX5400, SRX5600, and SRX5800 Firewall Cards and Modules Overview | 2 SRX5400, SRX5600, and SRX5800 Firewall Card Overview | 2 Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls | 3 Services Processing Cards | 8 Services Processing Cards Specifications | 8...
  • Page 4 Routing Engine SRX5K-RE3-128G Specifications | 94 Handling and Storing Cards Handling and Storing SRX5400, SRX5600, and SRX5800 Firewall Cards | 101 SRX5400, SRX5600, and SRX5800 Firewall Card Terminology | 101 Handling an SRX5400, SRX5600, or SRX5800 Firewall Card | 102...

  • Page 5: Srx5400, Srx5600, And Srx5800 Firewall Cards And Modules

    PART SRX5400, SRX5600, and SRX5800 Firewall Cards and Modules Overview | 2 Services Processing Cards | 8 I/O Cards | 25 Flex I/O Cards and Port Modules | 32 Modular Port Concentrators and Interface Cards | 41 Switch Control Boards | 75...

  • Page 6: Overview

    SRX5400, SRX5600, and SRX5800 Firewall Card Overview The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800 Firewall to suit the needs of your network. The following types of cards are available for the SRX5400, SRX5600, and SRX5800 Firewalls: •...

  • Page 7: Cards Supported On Srx5400, Srx5600, And Srx5800 Firewalls

    Although the following modules are not cards in the sense of having a form-factor that fits the card cage of the SRX5400, SRX5600, and SRX5800 Firewall, this guide also addresses the following modules that fit into certain SRX5400, SRX5600, and SRX5800 Firewall cards: •...
  • Page 8 (Continued) Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls Card Name and Model Earliest Supported Junos OS Release Last Supported Junos Number OS Release SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and SRX5800 Services Processing Card 18.2R1-S1 18.2R1-S1 SRX5K-SPC3 Specifications...
  • Page 9 (Continued) Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls Card Name and Model Earliest Supported Junos OS Release Last Supported Junos Number OS Release SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and SRX5800 Switch Control Board 12.1X46-D10 12.3X48 SRX5K-SCB Specifications Switch Control Board 12.1X47-D15...
  • Page 10 (Continued) Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls Card Name and Model Earliest Supported Junos OS Release Last Supported Junos Number OS Release SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and SRX5800 MIC with 2x40GE QSFP+ 12.1X46-D10 12.1X46-D10...
  • Page 11 Figure 1: Interoperability Matrix for SRX5400, SRX5600, and SRX5800 Firewalls...

  • Page 12: Services Processing Cards

    CHAPTER 2 Services Processing Cards IN THIS CHAPTER Services Processing Cards Specifications | 8 Services Processing Cards Specifications IN THIS SECTION Services Processing Card SRX5K-SPC-2-10-40 Specifications | 8 Services Processing Card SRX5K-SPC-4-15-320 Specifications | 14 Services Processing Card SRX5K-SPC3 Specifications | 19 Services Processing Card SRX5K-SPC-2-10-40 Specifications The SRX5K-SPC-2-10-40 Services Processing Card (SPC) contains two Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see...
  • Page 13 Juniper Networks. If you face a problem running a Juniper device that uses third-party optical modules or cables, JTAC may help you diagnose host-related issues if the observed issue is not, in the opinion of JTAC, related to the use of the third-party optical modules or cables.
  • Page 14 ZR or ZR+) can potentially cause thermal damage to or reduce the lifespan of the host equipment. Any damage to the host equipment due to the use of third-party optical modules or cables is the users’ responsibility. Juniper Networks will accept no liability for any damage caused due to such use.
  • Page 15 Power Requirement Maximum 265 W Weight Approximately 13 lb (5.9 kg)
  • Page 16 LEDs OK/FAIL LED, one bicolor: • Steady green–The SPC is operating normally. • Red–The SPC has failed and is not operating normally. • Off–The SPC is powered down. STATUS LED, one tricolor for each of the two SPUs SPU 0 and SPU 1: •...
  • Page 17 • The loss of chassis cluster links which causes an interface monitoring failure. • An error in an SPU or NPU. • Failure of the spu-monitoring or cold-sync-monitoring processes. • A chassis cluster IP monitoring failure. LINK/ACT LED, one for each of the two ports CHASSIS CLUSTER CONTROL 0 and CHASSIS CLUSTER CONTROL 1: •...

  • Page 18: Services Processing Card Srx5K-Spc-4-15-320 Specifications

    Services Processing Card SRX5K-SPC-4-15-320 Specifications The SRX5K-SPC-4-15-320 Services Processing Card (SPC) contains four Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 4 on page 15). All traffic traversing the firewall is passed to an SPU to have services processing applied to it.
  • Page 19 Juniper Networks. If you face a problem running a Juniper device that uses third-party optical modules or cables, JTAC may help you diagnose host-related issues if the observed issue is not, in the opinion of JTAC, related to the use of the third-party optical modules or cables.
  • Page 20 ZR or ZR+) can potentially cause thermal damage to or reduce the lifespan of the host equipment. Any damage to the host equipment due to the use of third-party optical modules or cables is the users’ responsibility. Juniper Networks will accept no liability for any damage caused due to such use.
  • Page 21 Supported Slots • SRX5400–Any slot, except the bottom slot 0 which is reserved for SCB/RE. • SRX5600–Any slot, except the bottom slots 0 or 1 which are reserved for SCB/RE. • SRX5800–Any slot, except the slots 0 or 1 which are reserved for SCB/RE.
  • Page 22 LEDs OK/FAIL LED, one bicolor: • Steady green–The SPC is operating normally. • Red–The SPC has failed and is not operating normally. • Off–The SPC is powered down. STATUS LED, one tricolor for each of the four SPUs SPU 0 through SPU 3: •...

  • Page 23: Services Processing Card Srx5K-Spc3 Specifications

    • A chassis cluster IP monitoring failure. • Off–The node is not configured for clustering or it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure. LINK/ACT LED, one for each of the two ports CHASSIS CLUSTER CONTROL 0 and CHASSIS CLUSTER CONTROL 1: •...
  • Page 24 Juniper Networks. If you face a problem running a Juniper device that uses third-party optical modules or cables, JTAC may help you diagnose host-related issues if the observed issue is not, in the opinion of JTAC, related to the use of the third-party optical modules or cables.
  • Page 25 ZR or ZR+) can potentially cause thermal damage to or reduce the lifespan of the host equipment. Any damage to the host equipment due to the use of third-party optical modules or cables is the users’ responsibility. Juniper Networks will accept no liability for any damage caused due to such use.
  • Page 26 Power 650 W maximum Requirement NOTE: • In the SRX5600 and SRX5800 Firewalls, you must have high-capacity power supplies (either AC or DC) and high-capacity fan trays installed in the firewall in order to install and use SRX5K-SPC3 SPCs. If you do not have high-capacity power supplies and fan trays installed, the firewall will log an alarm condition when it recognizes the SRX5K- SPC3 SPCs.
  • Page 27 LEDs OK/FAIL LED, one bicolor: • Steady green–The SPC is operating normally. • Red–The SPC has failed and is not operating normally. • Off–The SPC is powered down. STATUS LED, one tricolor for each SPU SPU 0 and SPU 1: •...
  • Page 28 • An error in an SPU or NPU. • Failure of the spu-monitoring or cold-sync-monitoring processes. • A chassis cluster IP monitoring failure. • Off–The node is not configured for clustering or it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure.

  • Page 29: I/O Cards

    CHAPTER 3 I/O Cards IN THIS CHAPTER I/O Cards Specifications | 25 I/O Cards Specifications IN THIS SECTION I/O Card SRX5K-40GE-SFP Specifications | 25 I/O Card SRX5K-4XGE-XFP Specifications | 28 I/O Card SRX5K-40GE-SFP Specifications The SRX5K-40GE-SFP I/O card (IOC) is optimized for Ethernet density and supports 40 Gigabit Ethernet ports (see Figure 7 on page 26).
  • Page 30 Figure 7: IOC SRX5K-40GE-SFP Description • I/O card with 40 Gigabit Ethernet SFP ports • Maximum configurable MTU: 9192 bytes • Maximum throughput: 40 Gbps Software release • Junos OS Release 9.2 and later...
  • Page 31 Cables and 40 Gigabit Ethernet SFP ports connectors Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) Controls None Supported Slots • SRX5600–Any slot except bottom slots 0 or 1 •...

  • Page 32: I/O Card Srx5K-4Xge-Xfp Specifications

    Serial Number The serial number label is located as shown in Figure 8 on page Location Figure 8: Serial Number Label (IOC Shown, Other Cards Similar) I/O Card SRX5K-4XGE-XFP Specifications The SRX5K-4XGE-XFP I/O card (IOC) supports four 10-Gigabit Ethernet ports (see Figure 9 on page 29).
  • Page 33 Figure 9: IOC SRX5K-4XGE-XFP Description • I/O card with four 10-Gigabit Ethernet XFP ports • Maximum configurable MTU: 9192 bytes • Maximum throughput: 40 Gbps Software release • Junos OS Release 9.2 and later...
  • Page 34 Cables and connectors Four 10-Gbps XFP ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET 10GBASE-SR (model numbers SRX-XFP-10GE-SR and SRX-XFP-10GE-SR-ET ) Controls None Supported Slots • SRX5600–Any slot except bottom slots 0 or 1 •...
  • Page 35 Serial Number The serial number label is located as shown in Figure 10 on page Location Figure 10: SRX5K-4XGE-XFP Serial Number Label...

  • Page 36: Flex I/O Cards And Port Modules

    CHAPTER 4 Flex I/O Cards and Port Modules IN THIS CHAPTER Flex I/O Cards and Port Modules Specifications | 32 Flex I/O Cards and Port Modules Specifications IN THIS SECTION Flex I/O Card (SRX5K-FPC-IOC) Specifications | 32 Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications | 34 Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications | 36 Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications | 38 Flex I/O Card (SRX5K-FPC-IOC) Specifications...
  • Page 37 Figure 11: Flex IOC with Typical Port Modules Description • Flex IOC with slots for two port modules • Maximum throughput: 10 Gbps (per PFE) Software release • Junos OS Release 9.5R1 and later Cables and connectors Slots for two port modules Controls None Supported Slots...

  • Page 38: Flex I/O Card Port Module Srx-Ioc-16Ge-Sfp Specifications

    Weight Approximately 10 lb (4.5 kg) LEDs OK/FAIL LED, one bicolor: • Steady green–The Flex IOC is operating normally. • Red–The Flex IOC has failed and is not operating normally. • Off–The Flex IOC is powered down. Serial Number Location The serial number label is located as shown in Figure 12 on page Figure 12: Serial Number Label (IOC Shown, Other Cards Similar)
  • Page 39 Figure 13: Flex IOC Port Module SRX-IOC-16GE-SFP Description • Port module with 16 Gigabit Ethernet SFP ports • Maximum throughput: 10 Gbps • Oversubscription ratio: 1.6:1 • Maximum configurable MTU: 9192 bytes Software release • Junos OS Release 9.5R1 and later Cables and 16 Gigabit Ethernet SFP ports connectors...

  • Page 40: Flex I/O Card Port Module Srx-Ioc-16Ge-Tx Specifications

    LEDs OK/FAIL LED, one bicolor: • Steady green–The port module is operating normally. • Red–The port module has failed and is not operating normally. • Off–The port module is powered down. LINK LED, single color, one per port: • Steady green–The link is active. •...
  • Page 41 Figure 15: Flex IOC Port Module SRX-IOC-16GE-TX Description • Port module with sixteen 10/100/1000 Ethernet RJ45 ports • Maximum throughput: 10 Gbps • Oversubscription ratio: 1.6:1 • Maximum configurable MTU: 9192 bytes Software release • Junos OS Release 9.5R1 and later Cables and Sixteen RJ-45 1-Gbps ports connectors...

  • Page 42: Flex I/O Card Port Module Srx-Ioc-4Xge-Xfp Specifications

    LEDs OK/FAIL LED, one bicolor: • Steady green–The port module is operating normally. • Red–The port module has failed and is not operating normally. • Off–The port module is powered down. LINK LED, single color, one per port: • Steady green–The link is active. •...
  • Page 43 Figure 17: Flex IOC Port Module SRX-IOC-4XGE-XFP Description • Port module with four 10-Gigabit Ethernet XFP ports • Maximum throughput: 10 Gbps • Oversubscription ratio: 4:1 • Maximum configurable MTU: 9192 bytes Software release • Junos OS Release 9.5R1 and later Cables and 4 XFP Ethernet ports connectors...
  • Page 44 LEDs OK/FAIL LED, one bicolor: • Steady green–The port module is operating normally. • Red–The port module has failed and is not operating normally. • Off–The port module is powered down. LINK LED, single color, one per port: • Steady green–The link is active. •...

  • Page 45: Modular Port Concentrators And Interface Cards

    CHAPTER 5 Modular Port Concentrators and Interface Cards IN THIS CHAPTER Modular Port Concentrators and Interface Cards Specifications | 41 Modular Port Concentrators and Interface Cards Specifications IN THIS SECTION Modular Port Concentrator (SRX5K-MPC) Specifications | 41 MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 44 MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 50 MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 54 MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 56...
  • Page 46 You can install MPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot in the SRX5400, SRX5600, or SRX5800 Firewall card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the firewall.
  • Page 47 CLI command: user@host set security forwarding-process application-services session-distribution-mode hash-based When installing an SRX5K-MPC in an SRX5400 Firewall, the session-distribution-mode will only function when hash-based mode is configured or set as the default. The normal mode is not supported.

  • Page 48: Mic With 20X1Ge Sfp Interfaces (Srx-Mic-20Ge-Sfp)

    SRX5K-MPCs. • On SRX5400 and SRX5600 Firewalls with AC power supplies, we recommend that you use high-line (220 V) input power to ensure that the devices have adequate power to support SRX5K-MPCs.
  • Page 49 Figure 20: SRX-MIC-20GE-SFP Description • MIC with twenty 1-Gigabit Ethernet SFP Ethernet ports • Fits into either of the two slots of SRX-5K-MPC • Supports up to 20 Gbps of full-duplex traffic • Maximum configurable MTU: 9192 bytes • Maximum throughput: 20 Gbps Software release Junos OS Release 12.1X47-D10 Cables and connectors...
  • Page 50 LEDs OK/FAIL LED, one bicolor: • Green–MIC is operating normally. • Red–MIC has failed. • Off–MIC is powered down. LINK LED, single color, one per SFP port: • Green–Link is active. • Off–Link is inactive.
  • Page 51 For a complete list of media types, see Interface Naming Overview. • fpc —Slot in which the MPC is installed in an SRX5400, SRX5600, or SRX5800 Firewall. • pic —Two Logical PICs on the MIC , numbered 0 or 1 when installed in the first slot, and 2 or 3 when installed in the second slot.
  • Page 52 Figure 21: SRX-MIC-20GE-SFP Interface Port Mapping The SRX-MIC-20GE-SFP MIC contains two logical PICs, numbered PIC 0 PIC 1 through in the CLI. Each logical PIC contains 10 ports numbered 0 through 9. show chassis fpc pic-status The sample output of the command output displays two 20-port Gigabit Ethernet MICs with SFP —...
  • Page 53 user@host> show interfaces terse Interface Admin Link Proto Local Remote gr-0/0/0 ip-0/0/0 lt-0/0/0 ge-2/0/0 ge-2/0/1 down ge-2/0/2 down ge-2/0/3 down ge-2/0/4 down ge-2/0/5 ge-2/0/6 down ge-2/0/7 down ge-2/0/8 ge-2/0/9 ge-2/1/0 down ge-2/1/1 ge-2/1/2 down ge-2/1/3 down ge-2/1/4 ge-2/1/5 down ge-2/1/6 down ge-2/1/7 down...

  • Page 54: Mic With 10X10Ge Sfp+ Interfaces (Srx-Mic-10Xg-Sfpp)

    ge-2/3/8 down ge-2/3/9 down Serial number location The serial number label is yellow and is located as shown in Figure 22 on page Figure 22: SRX-MIC-20GE-SFP Serial Number Label NOTE: The serial number for the mezzanine card is shown only for reference and is never used for any purpose.
  • Page 55 Figure 23: SRX-MIC-10XG SFPP Description • MIC with ten SFP+ 10-Gigabit Ethernet ports • Fits into MPC • Supports up to 100 Gbps of full-duplex traffic • Maximum configurable MTU: 9192 bytes • Maximum throughput: 100 Gbps Software release Junos OS Release 12.1X46-D10 Cables and Sockets for ten 10-Gbps SFP+ transceivers connectors...
  • Page 56 Interface Naming Overview. • fpc —Slot in which the MPC is installed in an SRX5400, SRX5600, or SRX5800 Firewall. • pic —Logical PIC on the MIC , numbered 0 when installed in the first slot or 2 when installed in the second slot.
  • Page 57 show chassis fpc pic-status The sample output of the command displays two 10-port 10- Gigabit Ethernet MICs with SFP+ — inserted into the slots of an MPC in slot 10x 10GE SFP+ PIC 0 PIC 2 The logical PICs of the two MICs— —...

  • Page 58: Mic With 1X100Ge Cfp Interface (Srx-Mic-1X100G-Cfp)

    xe-2/2/3 down xe-2/2/4 down xe-2/2/5 down xe-2/2/6 down xe-2/2/7 down xe-2/2/8 down xe-2/2/9 down Serial number The serial number label is yellow and located as shown in Figure 25 on page location Figure 25: SRX-MIC-10XG-SFPP Serial Number Label MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) You use MICs and MPCs to add different combinations of Ethernet interfaces to your firewall to suit the specific needs of your network.
  • Page 59 Figure 26: SRX-MIC-1X100G-CFP Description • MIC with one CFP 100-Gigabit Ethernet port • Fits into MPC • Supports up to 100 Gbps of full-duplex traffic • Maximum configurable MTU: 9192 bytes • Maximum throughput: 100 Gbps Software release Junos OS Release 12.1X46-D10 Cables and One socket for a 100-Gigabit CFP transceiver.

  • Page 60: Mic With 2X40Ge Qsfp+ Interfaces (Srx-Mic-2X40G-Qsfp)

    LEDs OK/FAIL LED, one bicolor: • Green–The MIC is operating normally. • Red–The MIC has failed and is not operating normally. • Off–The MIC is powered down. LINK LED, single color: • Green–The link is active. • Off–No link. Serial number The serial number label is yellow and located as shown in Figure 27 on page location...
  • Page 61 Figure 28: SRX-MIC-2X40G QSFP Description • MIC with two QSFP+ Ethernet ports • Fits into MPC • Supports up to 80 Gbps of full-duplex traffic • Maximum configurable MTU: 9192 bytes • Maximum throughput: 80 Gbps Software release Junos OS Release 12.1X46-D10 Cables and connectors Sockets for two QSFP+ 40-Gigabit Ethernet fiber-optic transceivers.

  • Page 62: Srx5K-Mpc3-40G10G Specifications

    The SRX5K-MPC3-40G10G (IOC3) is an interface card that provides 10 Gigabit Ethernet and 40 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Firewalls. See Figure 30 on page...
  • Page 63 Figure 30: SRX5K-MPC3-40G10G If a slot in the SRX5400, SRX5600, or SRX5800 Firewall card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the firewall.
  • Page 64 Cables and Sockets for 40-Gbps and 10-Gbps SFP+ transceivers connectors Hardware Compatibility Tool for the transceivers supported. Power Typical: 9.68 A @ 48 V (460 W) requirements At different temperatures: • 55° C: 607 W • 40° C: 541 W •...
  • Page 65 Software features • Optical diagnostics and related alarms • Two packet-forwarding engines, PFE0 and PFE1. PFE0 hosts PIC0 and PIC2. PFE1 hosts PIC1 and PIC3. • Configurable LAN-PHY mode options per 10-Gigabit Ethernet port • Intelligent oversubscription services NOTE: At any one time you can have only one of the following PIC combinations powered •...

  • Page 66: Srx5K-Mpc3-100G10G Specifications

    The SRX5K-MPC3-100G10G (IOC3) is an interface card that provides 100 Gigabit Ethernet and 10 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Firewalls. See Figure 32 on page...
  • Page 67 Figure 32: SRX5K-MPC3-100G10G If a slot in the SRX5400, SRX5600, or SRX5800 Firewall card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the firewall.
  • Page 68 Power • Typical: 10.52 A @ 48 V (505 W) requirements At different temperatures: • 55° C: 607 W • 40° C: 541 W • 25° C: 511 W Weight 21 lb (9.52 kg) Hardware features • Line-rate throughput of up to 240 Gbps •...
  • Page 69 LEDs OK/FAIL LED, one bicolor: • Solid green—MPC is functioning normally. • Blinking green—MPC is transitioning online or offline. • Red—MPC has failed. 10-Gigabit Ethernet LINK LED, one bicolor per port: • Green—Link is up. • Amber—Link is disabled. • Off—Link is down or disabled.

  • Page 70: Srx5K-Ioc4-10G Specifications

    Figure 33: SRX5K-MPC3-100G10G Serial Number Label SRX5K-IOC4-10G Specifications SRX5K-IOC4-10G is a fixed-configuration interface card with a Packet Forwarding Engine that provides 400-Gbps line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600 and SRX5800 Firewalls. See Figure 34 on page...
  • Page 71 Figure 34: SRX5K-IOC4-10G If a slot in the SRX5400, SRX5600, or SRX5800 Firewall card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the firewall.
  • Page 72 Cables and connectors Hardware Compatibility Tool for the transceivers supported. Power requirements • Typical: 405 W At different temperatures: • 131° F (55° C): 500 W • 104° F (40° C): 465 W • 75° F (25° C): 430 W Weight 17 lb (7.7 kg) Hardware features...
  • Page 73 Software features • Application security • Application Layer Gateway (ALG) • Attack detection and prevention • Class of service (CoS) • Equal-cost multipath (ECMP) load balancing • GPRS Tunneling Protocol (GTP) • High availability (chassis cluster) • Intrusion detection and prevention (IDP) •...

  • Page 74: Srx5K-Ioc4-Mrat Specifications

    Figure 36: SRX5K-IOC4-MRAT If a slot in the SRX5400, SRX5600, or SRX5800 Firewall card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the...
  • Page 75 Junos OS Release 19.3R1 and later Supported Slots • SRX5400—Any slot, except the bottom slots 0 and 1/0, which are reserved for SCB/RE. NOTE: Slot 1/0 is a dual purpose slot. You can install SRX5K-IOC4-MRAT in slot 1/0 if an SCB is not already installed in it.
  • Page 76 Hardware features • Junos Trio chipsets for increased scaling for bandwidth, subscribers, and services • Twelve Gigabit Ethernet ports that can be configured as 40-Gigabit Ethernet port or as 4X10- Gigabit Ethernet port using a breakout cable. The ports support quad small-form factor pluggable plus (QSFP+) transceivers.
  • Page 77 Software features • Application security • Application Layer Gateway (ALG) • Attack detection and prevention • Class of service (CoS) • Equal-cost multipath (ECMP) load balancing • GPRS Tunneling Protocol (GTP) • High availability (chassis cluster) • Intrusion detection and prevention (IDP) •...
  • Page 78 Serial Number Location The serial number label is located as shown in Figure 37 on page Figure 37: SRX5K-IOC4-MRAT Serial Number Label...

  • Page 79: Switch Control Boards

    • Provides interconnections to all the IOCs within the chassis through the switch fabrics integrated into the SCB SRX5400 and SRX5600 Firewalls have one SCB each installed and you can install a second SCB for redundancy. The SRX5800 Firewall has two SCBs installed and you can install a third SCB for switch...
  • Page 80 The host subsystem is composed of a Routing Engine installed directly into a slot on the faceplate of the SCB. When there is no Routing Engine is a SCB, its slot must be covered with a blank panel. Figure 38: Switch Control Board SRX5K-SCB Each SCB consists of the following components: •...
  • Page 81 Junos OS Release 9.2 and later Cables and connectors Slot for Routing Engine Controls None Supported Slots • SRX5400–Only bottom slots 0 and 1/0 • SRX5600–Only bottom slots 0 and 1 • SRX5800–Only center slots 0, 1, and 2/6 Power Requirement 150 W Weight Approximately 10 lb (4.5 kg)

  • Page 82: Switch Control Board Srx5K-Scbe Specifications

    Serial Number Location The serial number label is located as shown in Figure 39 on page Figure 39: SCB Serial Number Label Switch Control Board SRX5K-SCBE Specifications IN THIS SECTION SRX5K-SCBE LEDs | 80...
  • Page 83 Junos OS Release 12.1X47-D15 and later Cables and connectors Slot for Routing Engine Controls None Supported slots • SRX5400–Only bottom slots 0 and 1/0 • SRX5600–Only bottom slots 0 and 1 • SRX5800–Only center slots 0, 1, and 2/6 Power requirement •...
  • Page 84 Serial number location The serial number label is located as shown in Figure 40 on page Figure 40: SRX5K-SCBE Serial Number Label SRX5K-SCBE LEDs Table 2 on page 81 describes the SRX5K-SCBE LEDs and their states.

  • Page 85: Switch Control Board Srx5K-Scb3 Specifications

    Table 2: SRX5K-SCBE LEDs Label Color State Description FABRIC Green On steadily Fabric is in active mode. ACTIVE FABRIC Green On steadily SRX5K-SCBE operates in ONLY fabric-only mode. None SRX5K-SCBE operates in fabric/control board mode. OK/FAIL Green On steadily SRX5K-SCBE is online. On steadily SRX5K-SCBE has failed.
  • Page 86 Junos OS Release 15.1X49-D10 and later Cables and connectors Slot for Routing Engine Controls None Supported slots • SRX5400–Only bottom slots 0 and 1/0 • SRX5600–Only bottom slots 0 and 1 • SRX5800–Only center slots 0, 1, and 2/6 Power requirement 300 W Weight 9.6 lb (4.4 kg) with Routing Engine...
  • Page 87 Serial number location The serial number label is located as shown in Figure 41 on page Figure 41: SRX5K-SCB3 Serial Number Label SRX5K-SCB3 LEDs Table 3 on page 83 describes the SCB3 LEDs and their states. Table 3: SRX5K-SCB3 LEDs Label Color State...

  • Page 88: Switch Control Board Srx5K-Scb4 Specifications

    Junos OS Release 19.3R1 and later Cables and connectors Slot for Routing Engine Controls None Supported slots • SRX5400–Not supported • SRX5600–Only bottom slots 0 and 1 • SRX5800–Only center slots 0, 1, and 2/6 Power requirement At different temperatures: •...
  • Page 89 Weight and Dimensions • Weight: 13.6 lb (6.2 kg) • Width: 15.7 in (39.87 cm) • Depth: 21.2 in (53.85 cm) • Height: 1.2 in (3.05 cm) Serial number location The serial number label is located as shown in Figure 42 on page Figure 42: SRX5K-SCB4 Serial Number Label SRX5K-SCB4 LEDs Table 4 on page 86...
  • Page 90 Table 4: SRX5K-SCB4 LEDs Label Color State Description OK/FAIL Green On steadily SCB4 is online. On steadily SCB4 has failed. – SCB4 is offline. FABRIC ACTIVE Green On steadily The switch fabric on this board is in Active mode. ONLY Green On steadily The switch is in Fabric-Only mode.

  • Page 91: Routing Engines

    CHAPTER 7 Routing Engines IN THIS CHAPTER Routing Engine Specifications | 87 Routing Engine Specifications IN THIS SECTION Routing Engine SRX5K-RE-13-20 Specifications | 87 Routing Engine SRX5K-RE-1800X4 Specifications | 91 Routing Engine SRX5K-RE3-128G Specifications | 94 Routing Engine SRX5K-RE-13-20 Specifications The SRX5K-RE-13-20 Routing Engine (Figure 43 on page 88) is an Intel-based PC platform that runs...
  • Page 92 Figure 43: Routing Engine You must install at least one Routing Engine in the firewall. You can install a second Routing Engine if both Routing Engines are running Junos OS Release 10.0 or later. A second Routing Engine is required if you are using the dual chassis cluster control link feature available in Junos OS Release 10.0 and later.
  • Page 93 LAN. NOTE: For specific information about Routing Engine components (for example, the amount of DRAM), issue the show chassis routing-engine command. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls Software release • Junos OS Release 9.2 and later •...
  • Page 94 Blinking green–The Routing Engine hard disk is functioning normally. MASTER LED: • Blue–The Routing Engine is Primary. NOTE: The SRX5400, SRX5600, and SRX5800 Firewalls do not support a secondary or backup Routing Engine, so the MASTER LED should always be lit. OK/FAIL LED, one bicolor: •...

  • Page 95: Routing Engine Srx5K-Re-1800X4 Specifications

    Serial Number The serial number label is located on the right side of the top of the Routing Engine as Location shown in Figure 44 on page 91 Figure 44: SRX5K-RE-13-20 Serial Number Label Routing Engine SRX5K-RE-1800X4 Specifications IN THIS SECTION SRX5K-RE-1800X4 LEDs | 93 Each Routing Engine consists of the following components: •...
  • Page 96 • Online/Offline button—Takes the Routing Engine online or offline when pressed. • Extractor clips—Inserts and extracts the Routing Engine. • Captive screws—Secures the Routing Engine in place. Description Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls Software release Junos OS Release 12.1X47-D15 and later Cables and...
  • Page 97 Power requirement 90 W Weight 2.4 lb (1.1 kg) Serial number The serial number label is located as shown in Figure 45 on page location Figure 45: SRX5K-RE-1800X4 Serial Number Label SRX5K-RE-1800X4 LEDs Each Routing Engine has four LEDs that indicate its status. The LEDs, labeled MASTER, STORAGE, ONLINE, and OK/FAIL, are located directly on the faceplate of the Routing Engine.

  • Page 98: Routing Engine Srx5K-Re3-128G Specifications

    Table 5: SRX5K-RE-1800X4 LEDs Label Color State Description MASTER Blue On steadily Routing Engine is the primary. STORAGE Green Blinking Indicates activity on the SSD or CompactFlash card. ONLINE Green Blinking Routing Engine is transitioning online. None On steadily Routing Engine is functioning normally.
  • Page 99 FAIL, and MASTER Description Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls, based on Intel’s Haswell-EP CPU with 6 cores, and 128GB of DDR4 memory. It provides increased control plane performance and scalability along with virtualization features in the SRX Series 5000 line of chassis.
  • Page 100 Supported slots Front panel slot in an SCB installed in: • SRX5400: Bottom slot 0 • SRX5600: Bottom slots 0 or 1 • SRX5800: Center slots 0 or 1 NOTE: The firewall host subsystem Routing Engine must be installed in the SCB in slot 0. A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations.
  • Page 101 Serial number The serial number label is located as shown in Figure 47 on page location Figure 47: SRX5K-RE3-128G Serial Number Label SRX5K-RE3-128G Routing Engine Components Each Routing Engine consists of the following components: • CPU—Runs Junos OS to maintain the routing tables and routing protocols. •...
  • Page 102 network, and two asynchronous serial ports—one for connecting to a console and one for connecting to a modem or other auxiliary device. NOTE: The control interface names differ based on the routing engine: • For RE2, the control interfaces are displayed as em0 and em1. •...
  • Page 103 (Continued) Table 6: SRX5K-RE3-128G Routing Engine LEDs Label Color State Description Blinking rapidly Routing Engine is in the process of booting Junos OS. Routing Engine is not online or not functioning normally. OK/FAIL Green On steadily Routing Engine is powering up. Yellow On steadily Routing Engine is not powering up, which indicates failure.

  • Page 104: Handling And Storing Cards

    PART Handling and Storing Cards Handling and Storing SRX5400, SRX5600, and SRX5800 Firewall Cards | 101...

  • Page 105: Handling And Storing Srx5400, Srx5600, And Srx5800 Firewall Cards

    SRX5800 Firewall Cards IN THIS CHAPTER SRX5400, SRX5600, and SRX5800 Firewall Card Terminology | 101 Handling an SRX5400, SRX5600, or SRX5800 Firewall Card | 102 Storing an SRX5600, SRX5600, or SRX5800 Firewall Card | 104 SRX5400, SRX5600, and SRX5800 Firewall Card Terminology...

  • Page 106: Handling An Srx5400, Srx5600, Or Srx5800 Firewall Card

    Figure 48: Card Edges RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls Handling an SRX5400, SRX5600, or SRX5800 Firewall Card When carrying a card, you can hold it either vertically or horizontally. NOTE: A card weighs up to 18.3 lb (8.3 kg). Be prepared to accept the full weight of the card as you lift it.
  • Page 107 To hold a card horizontally: 1. Orient the card so that the faceplate faces you. 2. Grasp the top edge with your left hand and the bottom edge with your right hand. You can rest the faceplate of the card against your body as you carry it. As you carry the card, do not bump it against anything.

  • Page 108: Storing An Srx5600, Srx5600, Or Srx5800 Firewall Card

    If you must rest the card temporarily on an edge while changing its orientation between vertical and horizontal, use your hand as a cushion between the edge and the surface. RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls Storing an SRX5600, SRX5600, or SRX5800 Firewall Card You must store a card as follows:...
  • Page 109 Orient the card with the faceplate facing you. Carefully insert the card connector edge into the opening of the bag, and pull the bag toward you to cover the card. Never stack a card under or on top of any other component. RELATED DOCUMENTATION Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls...

This manual is also suitable for:

Srx5600Srx5800

Table of Contents