Page 1
SRX1600 Firewall Hardware Guide Published 2024-03-15...
Page 2
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ("EULA") posted at https:/ /support.juniper.net/support/eula/.
Chassis Status LEDs | 15 Management Port LEDs | 16 Network Port LEDs | 17 Cooling System and Airflow in the SRX1600 | 20 SRX1600 Power System | 23 Site Planning, Preparation, and Specifications Site Preparation Checklist for SRX1600 | 32...
Page 4
Cable Specifications and Pinouts for SRX1600 | 39 Transceiver Support for SRX1600 | 39 RJ-45 Connector Pinouts for the SRX1600 Firewall Management Port | 39 RJ-45 Connector Pinouts for the SRX1600 Firewall Console Port | 40 Initial Installation and Configuration...
Page 5
Troubleshoot the SRX1600 | 80 Troubleshooting Resources for the SRX1600 Firewall | 80 Troubleshooting Chassis and Interface Alarm Messages on the SRX1600 Firewall | 80 Troubleshooting the Power System on the SRX1600 | 82 Contact Customer Support and Returning the Chassis or Components...
Page 6
Safety and Compliance Information Safety Information | 90 SRX1600 Agency Approvals | 90...
Use this guide to install the hardware and perform initial software configuration, routine maintenance, and troubleshooting for the Juniper Networks® SRX1600 Firewall. After completing the installation and basic configuration procedures covered in this guide, you can refer to the Junos® OS documentation for...
45 Install the SRX1600 in a Rack You can install the SRX1600 Firewall in a four-post rack or cabinet. We’ll walk you through the steps to install an AC-powered firewall in a square-hole four-post rack. Before you install, review the following: •...
Page 10
4. Align the guide blocks of the rear-mounting rail with the rear-post holes. Pull the rear-mounting rail toward the front of the rack to lock the rail in place. You'll hear a distinct click when the latch locks into the rack holes. 5.
Slide the device into the channels of the mounting rails. 8. Tighten the two thumbscrews to secure the device. Connect to Power IN THIS SECTION Ground the SRX1600 Firewall | 5 Connect the Power Cord and Power On the Firewall | 5...
Page 12
To connect the SRX1600 Firewall to AC power, you must do the following: Ground the SRX1600 Firewall To ground the SRX1600 Firewall, do the following: 1. Wrap and fasten one end of the electrostatic discharge (ESD) cable grounding strap around your bare wrist, and connect the other end to a site ESD point.
Security Director, or configure SRX1600 firewalls using J-Web or Junos OS CLI. If you have a Juniper® Security Director license, you can follow a few simple steps to get an SRX1600 up and running on the Juniper® Security Director Cloud portal. See...
Page 14
Juniper Licensing licenses to unlock additional features for your SRX Guide firewall You can also configure the SRX1600 using the Junos OS CLI. See Table 3 on page 7 for more information. Table 3: Configure SRX1600 Using Junos OS CLI...
SRX1600 Firewall Overview The SRX1600 Firewall is an entry-level firewall that consolidates firewall and security features. The SRX1600 is ideal for small to medium enterprise edge, campus edge, data center edge, and secure VPN router deployments for distributed enterprise use cases.
Page 17
Field-Replaceable Units in SRX1600 Field-replaceable units (FRUs) are components that you can replace at your site. The SRX1600 supports the following FRUs: • Fan modules • Power supply units (PSUs) • Transceivers You can remove and replace the power supply units, fan modules, and transceivers without powering off the device or disrupting the device functions.
The SRX1600 firewall chassis is a rigid sheet metal structure that houses all the other hardware components. Chassis Physical Specifications for SRX1600 The SRX1600 firewall has a 1-U form factor and you can be install it in a standard 19 in. rack. Table 4 on page 11 summarizes the physical specifications of the SRX1600.
Figure 1: Front Panel Components of the SRX1600 Table 5 on page 12 lists and describes the front panel components of the firewall. Table 5: Components on the Front Panel of the SRX1600 Callout Component (Label on the Chassis) Description...
Claim code You can use the QR code to claim and onboard your device to Juniper Security Director. Rear Panel of the SRX1600 Figure 2 on page 14 shows the rear panel of the AC variant of an SRX1600 firewall.
Page 21
The SRX1600 has a blank slot to install an additional PSU (1+1 redundancy). NOTE: We ship the SRX1600 with only one PSU. You can order the second PSU separately, if required. You must not mix AC and DC power supplies in the same chassis.
Chassis Status LEDs Figure 3 on page 15 shows the LEDs on the front panel. Figure 3: SRX1600 Front Panel Status LEDs Table 7: SRX1600 Front Panel LEDs Callout Description • Solid green—The device is powered on. • Blinking green—The device is powered on. The device is in the bootup phase before OS initialization.
(Continued) Table 7: SRX1600 Front Panel LEDs Callout Description • Solid green—The redundant power supply (RPS) is operating normally. • Solid red—The RPS is not operating normally. • Off—The RPS is not present on the device. • Blinking green—The device is transferring data to or from the SSD storage device.
Figure 4: SRX1600 Management Port LEDs Table 8: Management Port LEDs Callout Description Link (LED on the left) • Solid green—A link is established. • Off—No link established. Activity (LED on the right) • Blinking green—There is activity on the link.
Page 25
Figure 5: LEDs on the Network Ports Table 9: LEDs on the Network Ports Callout 1 Callout 2 Description (for RJ-45 Description (for SFP, SFP ports) +, and SFP28 ports) Link and Activity LED Status LED (Left LED) (Right LED) Default (power on with or Default (power on with or without Transceiver)
Page 26
(Continued) Table 9: LEDs on the Network Ports Callout 1 Callout 2 Description (for RJ-45 Description (for SFP, SFP ports) +, and SFP28 ports) Link and Activity LED Status LED (Left LED) (Right LED) 10 Mbps link is up and 1 Gbps link is up and there is traffic on the there is traffic on the...
IN THIS SECTION Fans | 20 SRX1600 Fan Module LEDs | 22 The cooling system in the SRX1600 consists of three fans. In addition to the fans, an internal fan in each power supply unit (PSU) also cools the device components. Fans The fans in the SRX1600 are hot-insertable and hot-removable field-replaceable units (FRUs).
Page 28
1.61 in. (4.1 cm) 4.41 in. (11.2 cm) 0.16 lb (74 g) The SRX1600 firewalls provide front-to-back airflow. The fans modules pull the air toward them from the front of the chassis, and exhaust it through the back of the chassis.
Page 29
Figure 8: Airflow Through the SRX1600 Chassis SRX1600 Fan Module LEDs You can examine the LEDs next to each fan module to check the status of the fans. Figure 9: Fan Module LEDs...
PSU LEDs on SRX1600 Firewalls | 28 The SRX1600 is powered by two power supplies for 1 + 1 redundancy. The SRX1600 has hot-removable and hot-insertable power supply units (PSUs). If one PSU fails, you can replace it without powering off or disrupting the device function.
Page 31
Table 13: AC Power Supply Unit for SRX1600 Callout Name Power cord retainer PSU handle AC power inlet PSU latch Table 14: Physical Specifications of the SRX1600 AC PSU Height Width Depth Weight 1.61 in. (4.1 cm) 2.17 in. (5.5 cm) 14.17 in.
Page 32
Table 15: AC Power Specifications for SRX1600 Item Specification AC input voltage Operating range: 100–127 VAC / 200–240 VAC AC input line frequency 50–60 Hz AC input current rating 5.5 A at 100–127 VAC 3 A at 200–240 VAC Maximum power consumption...
Page 33
BS 1363A Figure 11: AC Plug Types NOTE: Power cords and cables must not block access to firewall components or drape where people might trip on the cables. DC Power Supply for SRX1600 Firewalls The following figure shows the DC PSU.
Page 34
Figure 12: DC Power Supply Unit for SRX1600 Table 17: DC Power Supply Unit for SRX1600 Callout Name PSU handle DC power terminals PSU latch Table 18: Physical Specifications of the SRX1600 DC PSU Height Width Depth Weight 1.61 in. (4.1 cm) 2.17 in. (5.5 cm) 14.17 in.
Page 35
(Continued) Table 19: DC Power Specifications for SRX1600 Item Specification Average power consumption 143 W at –40 VDC PSU LEDs on SRX1600 Firewalls The AC PSU has a single bicolor LED that indicates the status.Figure 13 on page 28 shows the location...
Page 36
(Continued) Table 20: LEDs on the AC PSU Callout Color State Description The system has detected an error in the PSU. Replace the PSU immediately. To maintain proper airflow thorugh the chassis, leave the PSU installed in the chassis until you are ready to replace it. Figure 14 on page 29 shows the location of the LEDs on the DC PSU and Table 21 on page 29...
Page 37
(Continued) Table 21: LEDs on the DC PSU Callout Name Color State Description The system has detected an Fault Amber error in the PSU. Replace the PSU immediately. To maintain proper airflow thorugh the chassis, leave the PSU installed in the chassis until you are ready to replace it.
C HAPTER Site Planning, Preparation, and Specifications Site Preparation Checklist for SRX1600 | 32 SRX1600 Site Guidelines and Requirements | 33 Cable Specifications and Pinouts for SRX1600 | 39...
The checklist in Table 22 on page 32 summarizes the tasks you need to perform when preparing a site to install the SRX1600 . Table 22: Site Preparation Checklist to install the SRX1600 Item or Task Additional Information Environment Verify that environmental "Environmental Requirements and Specifications for SRX1600"...
Plan the cable routing and management. SRX1600 Site Guidelines and Requirements IN THIS SECTION General Site Installation Guidelines | 34 Site Electrical Wiring Guidelines | 34 Environmental Requirements and Specifications for SRX1600 | 35 Clearance Requirements for Hardware Maintenance of the SRX1600 | 36...
Rack Requirements for the SRX1600 | 37 General Site Installation Guidelines Take the following precautions to plan an acceptable operating environment for your SRX1600 and prevent equipment failures caused due to environment: • Keep the area around the chassis free from dust.
Equipment damage due to power surge in electrical lines Environmental Requirements and Specifications for SRX1600 The SRX1600 must be housed in dry, clean, well-ventilated, and temperature-controlled environment. Follow these environmental guidelines: • Ensure that the site is dust free because dust can clog air intake vent. This reduces the efficiency of...
When planning the site for installing the SRX1600, ensure that there is sufficient space around the installed chassis. • For the operating temperature of the SRX1600 to be optimal, the airflow around the chassis must be unrestricted. • For service personnel to remove and to install hardware components, and to accommodate the interface and power cable bend radius, there must be adequate space at the front and rear of the appliance.
Figure 15: Clearance Requirements for Hardware Maintenance of SRX1600 Rack Requirements for the SRX1600 You can mount the SRX1600 on four-post racks. The rack mounting kit is shipped with the device. Table 25 on page 37 provides the rack requirements and specifications for SRX1600.
Page 45
• Ensure that the rack is strong enough to support the weight of the device. A fully-configured SRX1600 with 2 PSUs weighs about 17.86 lb (8.1 kg). • Ensure that the spacing of rails and adjacent racks allows for proper clearance around the device and rack.
You can search for transceivers by product, and the tool displays all the transceivers supported on that device. You can also search by category, interface speed, or type. The list of supported transceivers for the SRX1600 is located at https:/ / apps.juniper.net/hct/product/.
The port on the front panel labeled CON is an asynchronous serial interface that accepts an RJ-45 connector. Table 27 on page 40 describes the RJ-45 connector pinouts for the console port. Table 27: RJ-45 Connector Pinouts for the SRX1600 Firewall Console Port Signal Description Request to Send...
Page 48
(Continued) Table 27: RJ-45 Connector Pinouts for the SRX1600 Firewall Console Port Signal Description Transmit Data Ground Signal Ground Ground Signal Ground Receive Data DSR/DCD Data Set Ready Clear to Send...
Initial Installation and Configuration SRX1600 Installation Overview | 43 Unpack the SRX1600 | 43 Install the SRX1600 in a Rack | 45 Connect the SRX1600 to Power | 55 Connect the SRX1600 to External Devices | 62 Configure Junos OS on the SRX1600 | 64...
1. Follow instructions in "Unpack the SRX1600" on page 43 2. Install the firewall as described in "Install the SRX1600 in a Rack" on page 45 3. Connect cables to external devices as described in "Connect the SRX1600 to External Devices" on page 62 4.
We ship the parts as per the configuration that you order. If any part on the packing list is missing, contact your customer service representative or contact Juniper customer care from within the U.S. or Canada by telephone at 1-888-314-5822. For international-dial or direct-dial options in countries without toll-free numbers, see https:/ /www.juniper.net/support/...
1 (only for AC models) geographical location Rack mount kit Documentation Roadmap NOTE: We ship the SRX1600 with only one power supply unit (PSU). You can order the second PSU separately, if required. Install the SRX1600 in a Rack IN THIS SECTION...
TL-1RU-RMK Rack Mount Kit on a Threaded- Hole 4-Post Rack | 49 You can mount the SRX1600 on a four-post rack or in a cabinet. Use the toolless rack mount kit shipped with the device. Complete the following prerequisites before you mount the device: •...
Page 54
• A pair of front and rear mounting rails that attach to the rack posts—provided with the rack mount kit. To mount the device on a four-post rack: 1. Review the General Safety Guidelines and Warnings. 2. Wrap and fasten one end of the electrostatic discharge (ESD) cable grounding strap around your bare wrist, and connect the other end to a site ESD point.
Page 55
Figure 18: Install the Rear Mounting Rails b. Align the guide blocks of the front mounting rails with the front-post holes. Push the front mounting rails toward the rear of the rack to lock the rails in place. You will hear a distinct click sound when the latch locks into the corresponding rack holes.
Figure 20: Slide the Device into the Rack 7. Tighten the two thumbscrews to secure the device. Figure 21: Tighten the Thumbscrews Mount your Device by Using the JNP-4P-TL-1RU-RMK Rack Mount Kit on a Threaded-Hole 4-Post Rack Ensure that you have the following tools and parts available: •...
Page 57
• A pair of side mounting brackets that attach to the chassis—provided with the rack mount kit. • A pair of mounting front and rear rails that attach to the rack posts—provided with the rack mount kit. To mount the device on a four-post rack with threaded holes: 1.
Page 58
Figure 23: Removing the Guide Blocks from the Front Mounting Rail b. Remove the guide blocks from the rear mounting rail by loosening the screws and washers. Preserve the guide blocks, screws, and washers for later use. Figure 24: Removing the Guide Blocks from the Rear Mounting Rail c.
Page 59
a. Insert the guide pin of the rear mounting rails into the rear-post holes. Pull the rear mounting rails toward the front of the rack to lock the rails in place. You will hear a distinct click sound when the latch locks into place.
Page 60
Figure 28: Secure the Rear Mounting Brackets d. Visually ensure that the front and rear latches are locked into place on the mounting rails. The mounting rails should be securely installed on the rack. Figure 29: Mounting Rails Installed and Secured 6.
Page 61
Figure 30: Slide the Device into the Rack 7. Tighten the two thumbscrews to secure the device. Figure 31: Tighten the Thumbscrews...
Power Off the SRX1600 | 61 NOTE: To meet the safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must connect the SRX1600 to an earth ground before you connect it to power. Connect Earth Ground to the SRX1600...
Page 63
To ground the SRX1600, connect a grounding cable to earth ground. Attach the grounding cable to the chassis grounding point located on the rear of the device. Under all circumstances, use this grounding connection to ground the chassis.
NOTE: Ensure that the device is permanently connected to ground during operation. Connect AC Power to the SRX1600 The AC power supply units (PSUs) in an SRX1600 are hot-removable and hot-insertable field- replaceable units (FRUs). You can remove and replace the PSUs without powering off the device or disrupting its functions.
Page 65
ESD point on the device. 2. Ensure that you fully insert the power supplies into the chassis. 3. Locate the AC power cords shipped with the SRX1600; the cords have plugs appropriate for your geographical location. See Table 16 on page 26 4.
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the chassis before connecting power. See "Connect Earth Ground to the SRX1600" on page 55 for instructions. WARNING: Before performing the following procedure, ensure that you remove the power from the DC circuit.
Page 67
b. Shrink the tubing with a heat gun. Ensure that you heat all sides of the tubing evenly so that it shrinks around the cable tightly. NOTE: Make sure that you do not overheat the tubing. Figure 35 on page 60 shows how to install heat-shrink tubing.
10. Connect the power cables to the external DC power source. If the external DC power source has a switch, set it to the ON (|) position. Power Off the SRX1600 You can power off the firewall in any of the following two ways: •...
NOTE: The fans in the power supply continue to rotate even after you power off the SRX1600. To stop the fans, remove the power cord from the power supply. The fans will stop in a few seconds.
Connect Your Device to a Network for Out-of-Band Management Ensure that you have an Ethernet cable that has an RJ-45 connector at each end. You can monitor and manage your device by using a dedicated management channel. Use the management port to connect your device to the management device. The management port accepts an Ethernet cable that has an RJ-45 connector.
Configure Junos OS on the SRX1600 IN THIS SECTION Configure the SRX1600 Using J-Web | 65 Configure the SRX1600 using Juniper Security Director Cloud | 66 Access the CLI on the SRX1600 | 66 Configure Root Authentication and Management Interface from the CLI | 67...
We ship the SRX1600 with preinstalled Junos OS, which is ready to be configured when you power on the device. You can use the J-Web GUI, Juniper® Security Director on Premise, Juniper® Security Director Cloud, or the CLI to perform the initial configuration.
Configure the SRX1600 using Juniper Security Director Cloud Juniper® Security Director Cloud is a cloud-based software as a solution (SaaS) portal that helps you securely migrate your network to a Secure Access Service Edge (SASE) architecture. Follow the instructions in the...
• Data bits—8 • Stop bits—1 • Flow control—none 4. Power on the device. You can start performing initial software configuration on the device after the device is up. NOTE: After you complete the initial configuration, you can connect your device to a network for out-of-band management as described in "Connect Your Device to a Network for Out-of- Band Management"...
8. Commit the configuration changes. [edit] root@# commit Factory-Default Configuration of the SRX1600 Your firewall comes configured with a factory-default configuration. The default configuration includes the following security configuration: • Two security zones are created: trust and untrust.
View the SRX1600 Factory-Default Configuration To view the factory-default configuration of the firewall using the CLI: 1. Log in as the root user and provide your credentials. 2. View the list of default configuration files: root@srx1600>file list /etc/config 3. View the required default configuration file.
C HAPTER Maintaining Components Routine Maintenance Procedures for the SRX1600 | 71 SRX1600 Cooling System Maintenance | 71 SRX1600 Power Supply Maintenance | 73...
Install the Fan Module in the SRX1600 | 72 The SRX1600 has three independent, field-replaceable fans at the rear of the chassis. Each fan module is a hot-removable and hot-insertable field-replaceable unit (FRU). You can remove and replace the fan module without turning off power to the appliance or disrupting its functions.
4. Grasp the handle on the fan module and pull it firmly to slide the fan out of the chassis. Figure 40: Remove the Fan Module from the SRX1600 5. Place the fan module in the antistatic bag or on the antistatic mat.
Place the fan module in the fan module slot on the rear panel of the switch and slide the module in until it is fully seated. Figure 41: Install the Fan Module on the SRX1600 4. Tighten the captive screws on the faceplate of the fan module by using your fingers. If you can't tighten the captive screws by using your fingers, use the screwdriver.
Install the AC PSU in the SRX1600 | 75 The SRX1600 rear panel has two AC PSUs which are hot-removable and hot-insertable field-replaceable units (FRUs). You can remove and replace the PSUs without powering off the SRX1600 or disrupting the firewall functions.
4. Using both hands, place the PSU in the PSU slot on the rear panel of the SRX1600. Slide the PSU straight into the chassis until the PSU is fully seated in the chassis slot. Ensure that the PSU faceplate is flush with the adjacent PSU faceplate.
Install the DC PSU in the SRX1600 | 77 The rear panel of the SRX1600 has two DC PSUs, which are hot-removable and hot-insertable field- replaceable units (FRUs).You can remove and replace the PSUs without powering off the SRX1600 or disrupting the firewall functions.
PSU from the bag. 5. Using both hands, place the PSU in the PSU slot on the rear panel of the SRX1600. Slide the PSU straight into the chassis until the PSU is fully seated in the chassis slot. Ensure that the PSU faceplate...
Page 85
Figure 45: Install an SRX1600 DC PSU 6. Tighten the captive screws on the lower edge of the PSU faceplate. 7. Connect the power cables (see "Connect the SRX1600 to Power" on page 55...
Troubleshoot the SRX1600 IN THIS SECTION Troubleshooting Resources for the SRX1600 Firewall | 80 Troubleshooting Chassis and Interface Alarm Messages on the SRX1600 Firewall | 80 Troubleshooting the Power System on the SRX1600 | 82 Troubleshooting Resources for the SRX1600 Firewall To troubleshoot a device, you use the Junos OS CLI and the LEDs on the components: •...
Page 88
Specifications for SRX1600" on page 35 • Check the airflow. See "Clearance Requirements for Hardware Maintenance of the SRX1600" on page The firewall fan has Place your hand near the Red (major) failed. exhaust vents at the rear of the...
NOTE: For more information about alarms, see the Junos OS Monitoring and Troubleshooting for Security Devices Guide. Troubleshooting the Power System on the SRX1600 The LEDs on the firewall enable you to determine the performance and operation of the power system.
Page 90
(Continued) Table 30: PWR LED Description LED Status LED State Meaning Possible Cause and Corrective Action The firewall is not show chassis alarms Issue the command receiving power. to determine the source of the problem. • Verify that the AC power cord or DC power supply cable is not damaged.
How to Return a Hardware Component to Juniper Networks If a hardware component fails, contact Juniper Networks to obtain an RMA number. We use this number to track the returned material at the factory and to return the repaired or new components to you, as needed.
• From all other locations: 1-408-745-9500 NOTE: If you're contacting JTAC by telephone: • To report a new incident, press the star (*) key to be routed to the next available support engineer. • To enquire about an existing case, enter your 12-digit service request number followed by the pound (#) key.
Figure 46: Location of the Serial Number Label Contact Customer Support to Obtain Return Material Authorization If you are returning a device or hardware component to Juniper Networks for repair or replacement, obtain an RMA number from JTAC. After locating the serial number of the device or component you want to return, open a service request with JTAC.
NOTE: For international or direct-dial options in countries without toll-free numbers, see https:/ / support.juniper.net/support/. If you contact JTAC by telephone: • To report a new incident, press the star (*) key to be routed to the next available support engineer.
Page 96
C HAPTER Safety and Compliance Information Safety Information | 90 SRX1600 Agency Approvals | 90...
Page 97
Juniper Networks Safety Guide , you must read and Along with the information provided in the understand the SRX1600-specific safety information provided in this hardware guide. SRX1600 Agency Approvals IN THIS SECTION...
Page 98
• IEC 62368-1 2018 (3rd Edition) Audio/Video, Information and Communication Technology Equipment • EN 62368-1:2014+A11:2017 Audio/Video, Information and Communication Technology Equipment • UL/CSA 62368-1 :2019 (3rd Edition) Audio/Video, Information and Communication Technology Equipment • EMC • FCC 47 CFR Part 15 •...
Page 99
• The battery return connection is to be treated as an isolated DC return (i.e.DC-I), as defined in GR-1089-CORE. • For Juniper Networks systems with AC power supplies, an external surge protective device (SPD) must be used at the AC power source.
Need help?
Do you have a question about the SRX1600 and is the answer not in the manual?
Questions and answers