manualshive.com logo in svg

Juniper SRX320, Hardware Manual

Share
Download
Juniper SRX320 Hardware Manual Download Page 87

CHAPTER 18

Performing the Initial Configuration

•

SRX320 Services Gateway Software Configuration Overview on page 71

•

Understanding SRX320 Services Gateway Factory-Default Settings on page 71

•

Viewing SRX320 Services Gateway Factory-Default Settings on page 72

•

Accessing J-Web on the SRX320 Services Gateway on page 74

•

Configuring the SRX320 Services Gateway Using the J-Web Setup Wizard on page 75

•

Accessing the CLI on the SRX320 Services Gateway on page 77

•

Connecting to the SRX320 Services Gateway from the CLI Remotely on page 78

•

Configuring the SRX320 Services Gateway Using the CLI on page 79

•

Verifying Settings for the SRX320 Services Gateway on page 81

SRX320 Services Gateway Software Configuration Overview

The services gateway is shipped with the Juniper Networks Junos operating system (Junos
OS) preinstalled and ready to be configured when the device is powered on. You can
perform the initial software configuration of the services gateway by using the
browser-based setup wizard or by using the command-line interface (CLI).

Before configuring the device, gather the configuration information required to deploy
the device in your network. At a minimum, the setup wizard requires the following
information:

•

Device name

•

Password for the root user

•

Time information for the services gateway location

Related

Documentation

Configuring the SRX320 Services Gateway Using the J-Web Setup Wizard on page 75

•

•

Configuring the SRX320 Services Gateway Using the CLI on page 79

Understanding SRX320 Services Gateway Factory-Default Settings

Your services gateway comes configured with a factory-default configuration. The default
configuration includes the following security configuration:

71

Copyright © 2016, Juniper Networks, Inc.

Summary of Contents for SRX320

Page 1: ...SRX320 Services Gateway Hardware Guide Modified 2016 09 09 Copyright 2016 Juniper Networks Inc ...

Page 2: ...his publication without notice SRX320 Services Gateway Hardware Guide Copyright 2016 Juniper Networks Inc All rights reserved The information in this document is current as of the date on the title page YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant Junos OS has no known time related limitations through the year 2038 However the NTP application is known to...

Page 3: ...pter 4 Cooling System Description 13 Understanding the SRX320 Services Gateway Cooling System 13 Chapter 5 Power System Description 15 Understanding the SRX320 Services Gateway Power Supply 15 Part 2 Site Planning and Specifications Chapter 6 Planning and Preparing the Site 19 SRX320 Services Gateway Physical Specifications 19 SRX320 Services Gateway Environmental Specifications 19 Site Preparatio...

Page 4: ...with the SRX320 Services Gateway 46 Chapter 13 Installing the Rack Mounting Hardware 49 Preparing the SRX320 Services Gateway for Rack Mount Installation 49 Preparing the SRX320 Services Gateway for Wall Mount Installation 50 Preparing the SRX320 Services Gateway for Desk Mount Installation 50 Connecting the SRX320 Services Gateway to the Building Structure 51 Chapter 14 Installing the SRX320 Serv...

Page 5: ... Maintaining the SRX320 Services Gateway Power Supply 86 Chapter 20 Troubleshooting Components 87 Troubleshooting Resources for the SRX320 Services Gateway Overview 87 Troubleshooting Chassis and Interface Alarm Messages on the SRX320 Services Gateway 88 Troubleshooting the Power System on the SRX320 Services Gateway 89 Using the RESET CONFIG Button on the SRX320 Services Gateway 90 Changing the R...

Page 6: ...irements and Fire Suppression Equipment 117 Chapter 26 Laser and LED Safety Guidelines and Warnings 119 General Laser Safety Guidelines 119 Class 1 Laser Warning 120 Class 1 LED Product Warning 120 Laser Beam Warning 121 Radiation from Open Port Apertures Warning 122 Chapter 27 Maintenance and Operational Safety Guidelines and Warnings 123 Battery Handling Warning 123 Lightning Activity Warning 12...

Page 7: ...wer Supply Adapter in a Rack 56 Figure 11 Attaching Wall Mount Brackets 57 Figure 12 Orienting the SRX320 Services Gateway on a Wall 58 Figure 13 Mounting the SRX320 Services Gateway on a Wall 58 Chapter 15 Connecting the SRX320 Services Gateway to Ground 61 Figure 14 Connecting the SRX320 Services Gateway Grounding Cable 63 Chapter 16 Connecting the SRX320 Services Gateway to External Devices 65 ...

Page 8: ...Copyright 2016 Juniper Networks Inc viii SRX320 Services Gateway Hardware Guide ...

Page 9: ...vices Gateway 33 Table 10 Power Specifications for the SRX320 Services Gateway Power Supply Adapter 34 Chapter 10 Cable Specifications and Pinouts 37 Table 11 RJ 45 Connector Pinouts for the SRX320 Services Gateway Ethernet Port 37 Table 12 RJ 45 Connector Pinouts for the SRX320 Services Gateway Console Port 38 Table 13 Mini USB Type B Connector Pinouts for the Services Gateway Console Port 38 Par...

Page 10: ...hapter 20 Troubleshooting Components 87 Table 18 SRX320 Services Gateway Chassis Alarm Conditions and Corrective Actions 88 Table 19 SRX320 Services Gateway Power LED Status 89 Copyright 2016 Juniper Networks Inc x SRX320 Services Gateway Hardware Guide ...

Page 11: ...formation in the latest release notes differs from the information in the documentation follow the product Release Notes Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts These books go beyond the technical documentation to explore the nuances of network architecture deployment and administration The current list can be viewed at http www juniper net b...

Page 12: ...mode type the configure command user host configure Represents text that you type Bold text like this user host show chassis alarms No alarms currently active Represents output that appears on the terminal screen Fixed width text like this A policy term is a named structure that defines match conditions and actions Junos OS CLI User Guide RFC 1997 BGP Communities Attribute Introduces or emphasizes...

Page 13: ...e brackets edit routing options static route default nexthop address retain Identifies a level in the configuration hierarchy Indention and braces Identifies a leaf statement at a configuration hierarchy level semicolon GUI Conventions In the Logical Interfaces box select All Interfaces To cancel the configuration click Cancel Represents graphical user interface GUI items you click or select Bold ...

Page 14: ...online self service portal called the Customer Support Center CSC that provides you with the following features Find CSC offerings http www juniper net customers support Search for known bugs http www2 juniper net kb Find product documentation http www juniper net techpubs Find solutions and answer questions using our Knowledge Base http kb juniper net Download the latest versions of software and ...

Page 15: ...For international or direct dial options in countries without toll free numbers see http www juniper net support requesting support html xv Copyright 2016 Juniper Networks Inc About the Documentation ...

Page 16: ...Copyright 2016 Juniper Networks Inc xvi SRX320 Services Gateway Hardware Guide ...

Page 17: ...view System Overview on page 3 Chassis Description on page 5 Interface Module Descriptions on page 11 Cooling System Description on page 13 Power System Description on page 15 1 Copyright 2016 Juniper Networks Inc ...

Page 18: ...Copyright 2016 Juniper Networks Inc 2 SRX320 Services Gateway Hardware Guide ...

Page 19: ... 1 G SFP ports 4 GB of DRAM memory 8 GB of flash memory and two Mini Physical Interface Module Mini PIM slots The SRX320 Services Gateway is available with or without Power over Ethernet PoE capability In the PoE model the six Ethernet ports are PoE capable The SRX320 Services Gateway runs the Junos operating system Junos OS and supports the following features Firewall support with key features su...

Page 20: ...orks command shell that runs on top of a UNIX based operating system kernel The CLI is a straightforward command interface On a single line you type commands that are executed when you press the Enter key The CLI provides command help and command completion In addition you can also use Junos Space Security Director to define and manage security policies on the services gateway Related Documentatio...

Page 21: ...h an electrostatic discharge ESD strap to an ESD point and place the other end of the strap around your bare wrist Failure to use an ESD strap could result in damage to the device The services gateway must be connected to earth ground during normal operation The protective earthing terminal on the rear of the chassis is provided to connect the services gateway to ground Related Documentation Under...

Page 22: ...ptop to the services gateway for CLI management through a USB interface The port accepts a Mini B type USB cable plug A USB cable with Mini B and Type A USB plugs is supplied with the services gateway To use the mini USB console port you must download a USB driver to the management device from the SRX320SoftwareDownloadpage or Silicon Labs page Console port 2 6 Two slots for Mini PIMs The Mini PIM...

Page 23: ...ubs switches local servers and workstations Forward incoming data packets to the services gateway Receive outgoing data packets from the services gateway 1 G Ethernet ports 5 The services gateway has one USB port that accepts a USB storage device USB port 7 Indicatecomponentandsystemstatus and troubleshooting information at a glance LEDs 8 Use the Power button to shut down the services gateway Pow...

Page 24: ...d HA Solid green Mini PIM is functioning normally Solid red Mini PIM hardware failure Off Mini PIM is not present or Mini PIM is not detected by the device mPIM0 and mPIM1 Related Documentation SRX320 Services Gateway Chassis Overview on page 5 Understanding the SRX320 Services Gateway Back Panel on page 8 Understanding the SRX320 Services Gateway Back Panel Figure 3 on page 8 shows the back panel...

Page 25: ...tion to the adapter Cable tie holder 3 Connects the services gateway to the external power supply Power supply input DC power input 4 Connects the services gateway chassis to earth ground optional NOTE We recommend connecting the services gateway to ground if required Grounding point 5 Related Documentation SRX320 Services Gateway Chassis Overview on page 5 Understanding the SRX320 Services Gatewa...

Page 26: ...Copyright 2016 Juniper Networks Inc 10 SRX320 Services Gateway Hardware Guide ...

Page 27: ...aming and line speed signaling for the medium type CAUTION The Mini PIMs are not hot swappable You must power off the services gateway before removing or installing Mini PIMs The following Mini PIMs are supported on the SRX320 Services Gateway 1 Port Serial Mini Physical Interface Module SRX MP 1SERIAL R 1 Port T1 E1 Mini Physical Interface Module SRX MP 1T1E1 R 1 Port VDSL2 Annex A Mini Physical ...

Page 28: ...Copyright 2016 Juniper Networks Inc 12 SRX320 Services Gateway Hardware Guide ...

Page 29: ... front of the chassis and exhaust the air through the back of the chassis The airflow produced by the fans keeps device components within the acceptable temperature range Figure 4 on page 13 shows the airflow through the chassis Figure 4 Airflow Through the SRX320 Services Gateway Chassis Related Documentation Understanding the SRX320 Services Gateway Front Panel on page 5 Understanding the SRX320...

Page 30: ...Copyright 2016 Juniper Networks Inc 14 SRX320 Services Gateway Hardware Guide ...

Page 31: ...2 V power supply adapter for non PoE models 280 W 54 V power supply adapter for PoE models Each PoE port delivers a maximum power of 30 W Because of line loss the powered device connected to a PoE port can use only 25 5 W of power Line loss is influenced by cable length quality and other factors and is typically less than 16 percent of the maximum power Related Documentation Understanding the SRX3...

Page 32: ...Copyright 2016 Juniper Networks Inc 16 SRX320 Services Gateway Hardware Guide ...

Page 33: ...ns Planning and Preparing the Site on page 19 Rack Requirements on page 25 Cabinet Requirements on page 31 Power Requirements and Specifications on page 33 Cable Specifications and Pinouts on page 37 17 Copyright 2016 Juniper Networks Inc ...

Page 34: ...Copyright 2016 Juniper Networks Inc 18 SRX320 Services Gateway Hardware Guide ...

Page 35: ...ations for the SRX320 Services Gateway SRX320 PoE SRX320 Physical Specification of Chassis 7 52 in 7 52 in Depth 11 81 in 11 81 in Width 1 73 in 1 73 in Height 3 4 lb 3 28 lb Weight Related Documentation SRX320 Services Gateway Environmental Specifications on page 19 SRX320 Services Gateway Chassis Overview on page 5 SRX320 Services Gateway Environmental Specifications Table 7 on page 19 provides ...

Page 36: ...A PoE model Noise level Related Documentation SRX320 Services Gateway Physical Specifications on page 19 Site Preparation Checklist for the SRX320 Services Gateway Table 8 on page 20 provides a checklist of tasks you need to perform when preparing a site for installing the SRX320 Services Gateway Table 8 Site Preparation Checklist for SRX320 Services Gateway Installation Notes Date Performed By Ad...

Page 37: ...ts Rack Requirements SRX320 Services Gateway Rack Mounting Requirements and Warnings on page 25 Verify that your rack meets the minimum requirements Rack Installation Preparing the SRX320 Services Gateway for Rack Mount Installation on page 49 Plan the rack location including required space clearances Secure the rack to the floor and building structure Cabinet Requirements SRX320 Services Gateway ...

Page 38: ...viewthemaximum distance allowed for each cable Choose the length of cable based on the distance between the hardware components being connected Plan the cable routing and management Related Documentation General Site Installation Guidelines for the SRX320 Services Gateway on page 22 General Site Installation Guidelines for the SRX320 Services Gateway The following precautions help you plan an acce...

Page 39: ...ic Discharge Damage to the SRX320 Services Gateway on page 115 Ensure that a blank Mini PIM panel is installed in the empty slot to prevent any interruption or reduction in the flow of air across internal components Related Documentation Site Preparation Checklist for the SRX320 Services Gateway on page 20 23 Copyright 2016 Juniper Networks Inc Chapter 6 Planning and Preparing the Site ...

Page 40: ...Copyright 2016 Juniper Networks Inc 24 SRX320 Services Gateway Hardware Guide ...

Page 41: ...autions to ensure that the system remains stable The following directives help maintain your safety The services gateway must be installed into a rack that is secured to the building structure The services gateway should be mounted at the bottom of the rack if it is the only unit in the rack When mounting the services gateway in a partially filled rack load the rack from the bottom to the top with...

Page 42: ...siirry sitten sen yläosaan Jos telinettä varten on vakaimet asenna ne ennen laitteen asettamista telineeseen tai sen huoltamista siinä Attention Pour éviter toute blessure corporelle pendant les opérations de montage ou de réparation de cette unité en casier il convient de prendre des précautions spéciales afin de maintenir la stabilité du système Les directives ci dessous sont destinées à assurer...

Page 43: ...do questa unità viene montata in un supporto parzialmente pieno caricare il supporto dal basso all alto con il componente più pesante sistemato sul fondo del supporto Se il supporto è dotato di dispositivi stabilizzanti installare tali dispositivi prima di montare o di procedere alla manutenzione dell unità nel supporto Advarsel Unngå fysiske skader under montering eller reparasjonsarbeid på denne...

Page 44: ...mismo Cuandoesteequiposevayaainstalarenunbastidorparcialmenteocupado comenzar la instalación desde la parte inferior hacia la superior colocando el equipo más pesado en la parte inferior Si el bastidor dispone de dispositivos estabilizadores instalar éstos antes de montar o proceder al mantenimiento del equipo instalado en el bastidor Varning För att undvika kroppsskada när du installerar eller ut...

Page 45: ...elated Documentation SRX320 Services Gateway Rack Mounting Requirements and Warnings on page 25 SRX320 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29 SRX320 Services Gateway Clearance Requirements for Airflow and Hardware Maintenance on page 30 SRX320 Services Gateway Spacing of Mounting Brackets and Flange Holes The spacing of the mounting brackets and flange holes on t...

Page 46: ... both in front of and behind the device If you are mounting the device in a rack with other equipment or if you are placing it on the desktop near other equipment ensure that the exhaust from other equipment does not blow into the intake vents of the chassis For information on the airflow through the chassis see Understanding the SRX320 Services Gateway Cooling System on page 13 Related Documentat...

Page 47: ... 1U 3 50 in or 8 89 cm and can accommodate the services gateway The outer edges of the mounting brackets extend the width of either chassis to 19 in 48 7 cm and the front of the chassis extends approximately 0 5 in 1 27 cm beyond the mounting brackets The minimum total clearance inside the cabinet is 30 7 in 78 cm between the inside of the front door and the inside of the rear door NOTE A cabinet ...

Page 48: ...ent system clears the inside of the front door Installing the chassis close to the front of the cabinet maximizes the clearance in the rear of the cabinet for critical airflow Route and dress all cables to minimize the blockage of airflow to and from the chassis Related Documentation SRX320 Services Gateway Cabinet Size and Clearance Requirements on page 31 Copyright 2016 Juniper Networks Inc 32 S...

Page 49: ...hat signaling functions optimally Install wires correctly Improperly installed wires can emit radio interference Do not exceed the recommended distances or pass wires between buildings The potential for damage from lightning strikes increases if wires exceed recommended distances or if wires pass between buildings Shield all conductors The electromagnetic pulse EMP caused by lightning can damage u...

Page 50: ...g wiring must be shielded The shielding for the wiring must be grounded at both ends Related Documentation SRX320 Services Gateway Power Specifications and Requirements on page 34 General Electrical Safety Guidelines and Warnings on page 129 SRX320 Services Gateway Power Specifications and Requirements Table 10 on page 34 lists the power specifications for the SRX320 Services Gateway power supply ...

Page 51: ...ion SRX320 Services Gateway Electrical Wiring Guidelines on page 33 Understanding the SRX320 Services Gateway Power Supply on page 15 35 Copyright 2016 Juniper Networks Inc Chapter 9 Power Requirements and Specifications ...

Page 52: ...Copyright 2016 Juniper Networks Inc 36 SRX320 Services Gateway Hardware Guide ...

Page 53: ...eway Ethernet Port Table 11 on page 37 describes the RJ 45 connector pinouts for the Ethernet port Table 11 RJ 45 Connector Pinouts for the SRX320 Services Gateway Ethernet Port Signal Pin BI_DA 1 BI_DA 2 BI_DB 3 BI_DC 4 BI_DC 5 BI_DB 6 BI_DD 7 BI_DD 8 Related Documentation RJ 45 Connector Pinouts for the SRX320 Services Gateway Console Port on page 37 RJ 45 Connector Pinouts for the SRX320 Servic...

Page 54: ... have a DB 9 male connector pin or an RJ 45 connector pin you can connect your management device to the Mini USB Type B console port of the services gateway by using a cable that has a standard Type A USB connector on one end and a Mini USB Type B 5 pin connector on the other end Table 13 on page 38 describes the Mini USB Type B connector pinouts for the console port NOTE By design the mini USB co...

Page 55: ...ected to ground GND or used as an attached device presence indicator N C X Ground Black GND 4 Related Documentation RJ 45 Connector Pinouts for the SRX320 Services Gateway Ethernet Port on page 37 RJ 45 Connector Pinouts for the SRX320 Services Gateway Console Port on page 37 39 Copyright 2016 Juniper Networks Inc Chapter 10 Cable Specifications and Pinouts ...

Page 56: ...Copyright 2016 Juniper Networks Inc 40 SRX320 Services Gateway Hardware Guide ...

Page 57: ...unting Hardware on page 49 Installing the SRX320 Services Gateway on page 53 Connecting the SRX320 Services Gateway to Ground on page 61 Connecting the SRX320 Services Gateway to External Devices on page 65 Providing Power to the SRX320 Services Gateway on page 67 Performing the Initial Configuration on page 71 41 Copyright 2016 Juniper Networks Inc ...

Page 58: ...Copyright 2016 Juniper Networks Inc 42 SRX320 Services Gateway Hardware Guide ...

Page 59: ... SRX320 Services Gateway on page 20 3 Prepare the services gateway for installation See Preparing the SRX320 Services Gateway for Rack Mount Installation on page 49 Preparing the SRX320 Services Gateway for Wall Mount Installation on page 50 Preparing the SRX320 Services Gateway for Desk Mount Installation on page 50 4 Install the services gateway See Installing the SRX320 Services Gateway in a Ra...

Page 60: ...s by loading configuration files onto new or existing devices automatically over the network You can use either the J Web interface or the CLI to configure a device for autoinstallation For the autoinstallation process to work you must store one or more host specific or default configuration files on a configuration server in the network and have a service available typicallyDynamicHostConfigurati...

Page 61: ...way is shipped in a cardboard carton and secured with foam packing material The carton also contains an accessory box and quick start instructions To unpack the SRX320 Services Gateway 1 Move the cardboard carton to a staging area as close to the installation site as possible where you have enough room to remove the components from the chassis 2 Position the cardboard carton with the arrows pointi...

Page 62: ...NOTE The parts shipped with your services gateway can vary depending on the configuration you ordered Table 14 Parts List for a Fully Configured SRX320 Services Gateway Quantity Component 1 Non PoE model SRX320 Services Gateway chassis with six Gigabit Ethernet LAN ports two 1 G SFP ports and two Mini PIM slots PoE model SRX320 Services Gateway chassis with six PoE ports two 1 G SFP ports and two ...

Page 63: ...ntinued Quantity Part 1 Safety Guide Related Documentation Required Tools and Parts for Unpacking the SRX320 Services Gateway on page 45 Unpacking the SRX320 Services Gateway on page 45 47 Copyright 2016 Juniper Networks Inc Chapter 12 Unpacking the SRX320 Services Gateway ...

Page 64: ...Copyright 2016 Juniper Networks Inc 48 SRX320 Services Gateway Hardware Guide ...

Page 65: ...the requirements described in Site Preparation Checklist for the SRX320 Services Gateway on page 20 Verify that the racks or cabinets meet the specific requirements described in SRX320 Services Gateway Rack Mounting Requirements and Warnings on page 25 Place the rack or cabinet in its permanent location allowing adequate clearance for airflow and maintenance and secure it to the building structure...

Page 66: ...aring the SRX320 Services Gateway for Rack Mount Installation on page 49 Installing the SRX320 Services Gateway on a Wall on page 57 Preparing the SRX320 Services Gateway for Desk Mount Installation You can mount an SRX320 Services Gateway on a desk or any other level surface horizontally or vertically The four rubber feet attached to the chassis provide stability Before mounting an SRX320 Service...

Page 67: ...cture of the building If your geographical area is subject to earthquakes bolt the rack to the floor For maximum stability also secure the rack to ceiling brackets Related Documentation Preparing the SRX320 Services Gateway for Rack Mount Installation on page 49 51 Copyright 2016 Juniper Networks Inc Chapter 13 Installing the Rack Mounting Hardware ...

Page 68: ...Copyright 2016 Juniper Networks Inc 52 SRX320 Services Gateway Hardware Guide ...

Page 69: ...elco racks enclosed cabinets and open frame racks For more information about the type of rack or cabinet the SRX320 Services Gateway can be installed in see SRX320 Services Gateway Rack Size and Strength Requirements on page 29 NOTE The rack mounting kit is not shipped with the device and must be ordered separately NOTE If you are installing multiple devices in one rack install the lowest one firs...

Page 70: ...e screws that secure the mounting brackets and power supply adapter tray to the chassis as shown in Figure 7 on page 54 Figure 7 Securing the Mounting Brackets 3 Place the power supply adapter in the tray as shown in Figure 8 on page 55 NOTE The 280 W power adapter for the PoE model is more than 1 RU tall When installing the PoE model in a rack note that you will not be able to install devices in ...

Page 71: ...m hole in each mounting bracket with a hole in each rack rail as shown in Figure 9 on page 55 and Figure 10 on page 56 making sure the chassis is level Figure 9 Positioning the SRX320 Services Gateway PoE Model with 280 W Power Supply Adapter in a Rack g000951 55 Copyright 2016 Juniper Networks Inc Chapter 14 Installing the SRX320 Services Gateway ...

Page 72: ...ni Physical Interface Modules Mini PIMs see the SRX300 Series and SRX550 High Memory Services Gateway Interface Modules Reference Related Documentation Installing the SRX320 Services Gateway on a Desk on page 56 Installing the SRX320 Services Gateway on a Wall on page 57 Installing the SRX320 Services Gateway on a Desk Follow these guidelines when installing the SRX320 Services Gateway on a desk Y...

Page 73: ...ateway on a wall NOTE The wall mounting kit is not shipped with the device and must be ordered separately To install the device on a wall 1 Place the device on a flat level surface with the Juniper Networks logo which is embossed on the top cover facing up Ensure that the rubber feet are attached to the bottom of the chassis 2 Position a mounting bracket on each side of the chassis as shown in Fig...

Page 74: ...ervices Gateway on a Wall 7 Verify that the mounting screws on one side are aligned with the mounting screws on the opposite side and that the device is level see Figure 13 on page 58 Figure 13 Mounting the SRX320 Services Gateway on a Wall NOTE For information on installing Mini Physical Interface Modules Mini PIMs see the SRX300 Series and SRX550 High Memory Services Gateway Interface Modules Re...

Page 75: ...ntation Installing the SRX320 Services Gateway in a Rack on page 53 Installing the SRX320 Services Gateway on a Wall on page 57 59 Copyright 2016 Juniper Networks Inc Chapter 14 Installing the SRX320 Services Gateway ...

Page 76: ...Copyright 2016 Juniper Networks Inc 60 SRX320 Services Gateway Hardware Guide ...

Page 77: ...Grounding Cable on page 62 SRX320 Services Gateway Grounding Specifications To meet safety and electromagnetic interference EMI requirements and to ensure proper operation the SRX320 Services Gateway must be adequately grounded before power is connected You must provide a grounding lug to connect the services gateway to earth ground WARNING Before you connect power to the services gateway a licens...

Page 78: ...mple Panduit LCC6 10A L CAUTION Before you connect power to the services gateway a licensed electrician must attach a cable lug to the grounding and power cables that you supply A cable with an incorrectly attached lug can damage the services gateway for example by causing a short circuit To ground the device 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect th...

Page 79: ...drape where people could trip on it Figure 14 Connecting the SRX320 Services Gateway Grounding Cable NOTE The device should be permanently connected to ground during operation Related Documentation Required Tools and Parts for Grounding the SRX320 Services Gateway on page 61 SRX320 Services Gateway Grounding Specifications on page 61 63 Copyright 2016 Juniper Networks Inc Chapter 15 Connecting the...

Page 80: ...Copyright 2016 Juniper Networks Inc 64 SRX320 Services Gateway Hardware Guide ...

Page 81: ...e an RJ 45 cable 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Plug the RJ 45 end of the cable into the CONSOLE port on the SRX320 Services Gateway as shown in Figure 15 on page 65 Figure 15 Connecting the SRX320 Services Gateway to a Management Console 3 Connect the other end of the Ethernet cable to the ...

Page 82: ...st download a USB driver to the management device from the SRX320 Software Download page or Silicon Labs page Related Documentation Accessing J Web on the SRX320 Services Gateway on page 74 Configuring the SRX320 Services Gateway Using the J Web Setup Wizard on page 75 Copyright 2016 Juniper Networks Inc 66 SRX320 Services Gateway Hardware Guide ...

Page 83: ...power supply attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist 1 Plug the DC connector end of the power cable into the power connector on the back of the device as shown in Figure 16 on page 67 2 Plug the AC adapter end of the power cable into an AC power outlet Figure 16 Connecting the SRX320 Services Gateway to the Power Supply Related Documentation ...

Page 84: ...If the device finishes starting and you need to power off the system again first issue the CLI request system power off command Related Documentation Understanding the SRX320 Services Gateway Power Supply on page 15 Powering Off the SRX320 Services Gateway on page 68 Powering Off the SRX320 Services Gateway You can power off the services gateway in one of the following ways Graceful shutdown Press...

Page 85: ...e power button on the services gateway is a standby power switch which will not turn off the input power to the services gateway TIP When you are powering off the device the CLI displays the following message Turning the system power off You can now safely remove the power cable to completely power off the device NOTE You can use the request system reboot CLI command to schedule a reboot Related D...

Page 86: ...Copyright 2016 Juniper Networks Inc 70 SRX320 Services Gateway Hardware Guide ...

Page 87: ...iper Networks Junos operating system Junos OS preinstalled and ready to be configured when the device is powered on You can perform the initial software configuration of the services gateway by using the browser based setup wizard or by using the command line interface CLI Before configuring the device gather the configuration information required to deploy the device in your network At a minimum ...

Page 88: ...trust ge 0 0 5 0 5 If the current active configuration fails you can use the load factory default command to revert to the factory default configuration Related Documentation SRX320 Services Gateway Software Configuration Overview on page 71 Viewing SRX320 Services Gateway Factory Default Settings on page 72 Viewing SRX320 Services Gateway Factory Default Settings To view the factory default confi...

Page 89: ...aults conf srx110h va defaults conf srx300 factory conf srx110h va factory conf srx300 lem factory conf srx110h va wl defaults conf srx320 8xge factory conf srx110h va wl factory conf srx320 defaults conf srx110h vb defaults conf srx320 factory conf srx110h vb factory conf srx320 lem factory conf srx110h vb wl defaults conf srx320 poe 8xge factory conf srx110h vb wl factory conf srx320 poe default...

Page 90: ... to the Ethernet port on the management device using an RJ 45 cable as shown in Figure 17 on page 74 Figure 17 Connecting to the Ethernet Port on the SRX320 Services Gateway 2 Ensure that the management device acquires an IP address The IP address should be on the corresponding IP subnet for the interface you connected to in Step 1 The device functions as a DHCP server and will assign an IP addres...

Page 91: ...des you through the step by step configuration of a services gateway that can securely pass traffic To help guide you through the process the wizard Provides recommended settings based on your previous selections For example the wizard recommends security policies based on the security topology you have defined Determines which configuration tasks to present to you based on your selections Flags a...

Page 92: ...tional configuration You can perform additional configuration by rerunning the wizard in the Guided Setup mode by using the J Web interface or by using the CLI See the How to Set Up Your SRX320 Services Gateway for step by step instructions on how to configure your services gateway in the Default Setup mode About the Guided Setup Mode If you choose the Guided Setup mode the wizard guides you throu...

Page 93: ...u are placed in the J Web interface You can access the setup wizard from the J Web interface and use it to reconfigure your services gateway To do so select Configuration Wizards Set Up You can either edit an existing configuration or create a new configuration NOTE If you elect to create a new configuration then all the current configuration in the services gateway will be deleted Related Documen...

Page 94: ... values Baud rate 9600 Parity N Data bits 8 Stop bits 1 Flow control none 6 Power on the services gateway You can start performing initial software configuration on the services gateway after the device is up Related Documentation Connecting to the SRX320 Services Gateway from the CLI Remotely on page 78 Configuring the SRX320 Services Gateway Using the CLI on page 79 Connecting to the SRX320 Serv...

Page 95: ...t 4 Enter configuration mode configure edit root 5 Set the root authentication password by entering a cleartext password an encrypted password or an SSH public key string DSA or RSA edit root set system root authentication plain text password New password password Retype new password password 6 Configure an administrator account on the device edit root setsystemloginuseradminclasssuper userauthent...

Page 96: ...ion any admin set security policies from zone trust to zone untrust policy policy name then permit 14 Create a Network Address Translation NAT rule for source translation of all Internet bound traffic edit admin set security nat source rule set interface nat from zone trust admin set security nat source rule set interface nat to zone untrust admin set security nat source rule set interface nat rul...

Page 97: ...ice to the SRX Series device is firmly seated Use the CLI ping command to verify that the services gateway can be accessed from the management device Check if the management device has an IP address in the 192 168 1 0 24 subnetwork Clear the browser cache on the management device After you complete these steps the device can pass traffic from any trust port to the untrust port You can connect othe...

Page 98: ...Copyright 2016 Juniper Networks Inc 82 SRX320 Services Gateway Hardware Guide ...

Page 99: ...PART 4 Maintaining and Troubleshooting Components Maintaining Components on page 85 Troubleshooting Components on page 87 83 Copyright 2016 Juniper Networks Inc ...

Page 100: ...Copyright 2016 Juniper Networks Inc 84 SRX320 Services Gateway Hardware Guide ...

Page 101: ...ew blade screwdriver approximately 1 8 in 3 mm Phillips screwdrivers numbers 1 and 2 Related Documentation Routine Maintenance Procedures for the SRX320 Services Gateway on page 85 Maintaining the SRX320 Services Gateway Cooling System Components on page 86 Maintaining the SRX320 Services Gateway Power Supply on page 86 Routine Maintenance Procedures for the SRX320 Services Gateway For optimum per...

Page 102: ...ay on page 85 Maintaining the SRX320 Services Gateway Power Supply on page 86 Maintaining the SRX320 Services Gateway Power Supply To maintain the power supply on the services gateway Make sure that the power and grounding cables are arranged so that they do not obstruct access to other device components Routinely check the PWR LED on the front panel If this LED is solid green the power supplies a...

Page 103: ...he CLI is the primary tool for controlling and troubleshooting hardware Junos OS and network connectivity Use the CLI to display more information about alarms CLI commands display information about network connectivity derived from the ping and traceroute utilities For information about using the CLI to troubleshoot Junos OS see the appropriate Junos OS configuration guide JTAC If you need assista...

Page 104: ...om an alternative boot device ignore this alarm condition Reformat the internal flash memory and install a bootable image See the Installation and Upgrade Guide for Security Devices and Network Monitoring and Troubleshooting Guide for Security Devices If you did not configure the services gateway to boot from an alternative boot device contact JTAC The services gateway boots from an alternate boot...

Page 105: ... PWR LED located on the front panel of the services gateway indicates the different settings with respect to the power system Table 19 on page 89 describes different PWR LED status settings and their corrective actions Table 19 SRX320 Services Gateway Power LED Status Possible Cause and Corrective Action Meaning LED Status Normal indication No action is required Device is receiving power Green Nor...

Page 106: ...he pinhole on the front panel By default pressing and quickly releasing the RESET CONFIG button loads and commits the rescue configuration through the J Web interface or the CLI The Status LED is solid amber during this time By default pressing and holding the RESET CONFIG button for 15 seconds or more until the Status LED is solid amber deletes all configurations on the device including the backu...

Page 107: ...he no clear option prevents the RESET CONFIG button from deleting all configurations on the services gateway The no rescue option prevents the RESET CONFIG button from loading the rescue configuration To return the function of the RESET CONFIG button to its default behavior remove the config button statement from the device configuration Related Documentation Using the RESET CONFIG Button on the S...

Page 108: ...Copyright 2016 Juniper Networks Inc 92 SRX320 Services Gateway Hardware Guide ...

Page 109: ... Replacing Components Overview of Replacing Components on page 95 Replacing Interface Modules on page 97 Contacting Customer Support and Returning Components on page 99 93 Copyright 2016 Juniper Networks Inc ...

Page 110: ...Copyright 2016 Juniper Networks Inc 94 SRX320 Services Gateway Hardware Guide ...

Page 111: ...blade screwdriver approximately 1 8 in 3 mm Phillips screwdriver number 1 Blank panels if no component will be installed Related Documentation Replacing Mini Physical Interface Modules in the SRX320 Services Gateway on page 97 SRX320 Services Gateway Field Replaceable Units Overview Field replaceable units FRUs are components that you can replace at your site The Mini Physical Interface Module MPI...

Page 112: ...Copyright 2016 Juniper Networks Inc 96 SRX320 Services Gateway Hardware Guide ...

Page 113: ...e Mini PIMs available on the SRX320 Services Gateway are not hot swappable You need to power off the device before removing or installing Mini PIMs For information on replacing Mini PIMs see the SRX300 Series and SRX550 High Memory Services Gateway Interface Modules Reference Related Documentation SRX320 Services Gateway Interface Modules Overview on page 11 97 Copyright 2016 Juniper Networks Inc ...

Page 114: ...Copyright 2016 Juniper Networks Inc 98 SRX320 Services Gateway Hardware Guide ...

Page 115: ...ay for Shipment on page 103 Packing SRX320 Services Gateway Components for Shipment on page 104 Contacting Customer Support Once you have located the serial numbers of the device or component you can return the device or component for repair or replacement For this you need to contact Juniper Networks Technical Assistance Center JTAC You can contact JTAC 24 hours a day 7 days a week using any of t...

Page 116: ...any component to Juniper Networks unless you have first obtained an RMA number Juniper Networks reserves the right to refuse shipments that do not have an RMA Refused shipments are returned to the customer via collect freight 3 Pack the SRX320 Services Gateway or component for shipping For more information about return and repair policies see the customer support webpage at http www juniper net su...

Page 117: ...teway Each Mini PIM has a unique serial number The serial number label is located on the right side of the Mini PIM when the Mini PIM is horizontally oriented as it would be when installed on the device The exact location might be slightly different on different Mini PIMs depending on the placement of components on the Mini PIM Related Documentation Contacting Customer Support on page 99 Returning...

Page 118: ...gency Labels on page 101 Locating the SRX320 Services Gateway Mini Physical Interface Module Serial Number Label on page 101 Information You Might Need to Supply to JTAC on page 102 Required Tools and Parts for Packing the SRX320 Services Gateway on page 103 Packing the SRX320 Services Gateway for Shipment on page 103 Packing SRX320 Services Gateway Components for Shipment on page 104 Information ...

Page 119: ...ipment To pack the SRX320 Services Gateway for shipment 1 Retrieve the shipping carton and packing materials in which the services gateway was originally shipped If you do not have these materials contact your Juniper Networks representative about approved packaging materials 2 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to the ESD point on the ch...

Page 120: ...i Physical Interface Module Serial Number Label on page 101 Listing the SRX320 Services Gateway Component Details with the CLI on page 101 Information You Might Need to Supply to JTAC on page 102 Required Tools and Parts for Packing the SRX320 Services Gateway on page 103 Packing SRX320 Services Gateway Components for Shipment on page 104 Packing SRX320 Services Gateway Components for Shipment Fol...

Page 121: ...ices Gateway Mini Physical Interface Module Serial Number Label on page 101 Listing the SRX320 Services Gateway Component Details with the CLI on page 101 Information You Might Need to Supply to JTAC on page 102 Required Tools and Parts for Packing the SRX320 Services Gateway on page 103 Packing the SRX320 Services Gateway for Shipment on page 103 105 Copyright 2016 Juniper Networks Inc Chapter 23...

Page 122: ...Copyright 2016 Juniper Networks Inc 106 SRX320 Services Gateway Hardware Guide ...

Page 123: ...y Requirements on page 117 Laser and LED Safety Guidelines and Warnings on page 119 Maintenance and Operational Safety Guidelines and Warnings on page 123 Electrical Safety Guidelines and Warnings on page 129 Agency Approvals and Regulatory Compliance Information on page 131 107 Copyright 2016 Juniper Networks Inc ...

Page 124: ...Copyright 2016 Juniper Networks Inc 108 SRX320 Services Gateway Hardware Guide ...

Page 125: ...n helpful in a particular situation or might otherwise overlook it CAUTION You need to observe the specified guidelines to avoid minor injury or discomfort to you or severe damage to the services gateway WARNING This symbol is used with laser warnings Unterminated optical connectors can emit invisible laser radiation Focusing your eye directly on a laser source even a low power laser could permane...

Page 126: ... relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti Advarsel Dette varselsymbolet betyr fare Du befinner deg i en situasjon som kan føre til personskade Før du utfører arbeid på utstyr må du vare oppmerksom på de faremomentene som elektriske kretser innebærer samt gjøre deg kjent med vanlig praksis når det gjelder å unngå ulykker Aviso Este...

Page 127: ...pulate wiring during electrical storms Never install electrical jacks in wet locations unless the jacks are specifically designed for wet environments Do not open or remove chassis covers or sheet metal parts unless instructions are provided in this guide Such an action could cause severe electrical shock Do not push or force any objects through any opening in the chassis frame Such an action coul...

Page 128: ...ion in restricted access areas A restricted access area is an area to which access can be gained only by service personnel through the use of a special tool lock and key or other means of security and which is controlled by the authority responsible for the location WaarschuwingDittoestelisbedoeldvoorinstallatieopplaatsenmetbeperkte toegang Een plaats met beperkte toegang is een plaats waar toegan...

Page 129: ...esso restrito é uma área à qual apenas tem acesso o pessoal de serviço autorizado que possua uma ferramenta chave e fechadura especial ou qualquer outra forma de segurança Esta área é controlada pela autoridade responsável pelo local Atención Esta unidad ha sido diseñada para instalarse en áreas de acceso restringido Área de acceso restringido significa un área a la que solamente tieneaccesoelpers...

Page 130: ...rt personell med riktig opplæring bør montere eller bytte ut dette utstyret Aviso Este equipamento deverá ser instalado ou substituído apenas por pessoal devidamente treinado e qualificado Atención Estos equipos deben ser instalados y reemplazados exclusivamenteporpersonaltécnicoadecuadamentepreparadoycapacitado Varning Denna utrustning ska endast installeras och bytas ut av utbildad och kvalifice...

Page 131: ...omponent that is removed from the chassis verify that the equipment end of your ESD strap is attached to one of the ESD points on the chassis Avoid contact between the component and your clothing ESD voltages emitted from clothing can damage components When removing or installing a component always place it component side up on an antistatic surface in an antistatic card rack or in an electrostati...

Page 132: ...Copyright 2016 Juniper Networks Inc 116 SRX320 Services Gateway Hardware Guide ...

Page 133: ...al fire first turn power off to the equipment at the source Then use a Type C fire extinguisher to extinguish the fire Type C fire extinguishers which use noncorrosive fire retardants such as carbon dioxide CO 2 and Halotron are most effective for suppressing electrical fires Type C fire extinguishers displace the oxygen from the point of combustion to eliminate the fire For extinguishing fire on ...

Page 134: ...eement We recommend that you dispose of any irreparably damaged equipment in an environmentally responsible manner Related Documentation SRX320 Services Gateway Definition of Safety Warning Levels on page 109 SRX320 Services Gateway General Safety Guidelines and Warnings on page 111 SRX320 Services Gateway Safety Requirements Warnings and Guidelines on page 112 Copyright 2016 Juniper Networks Inc ...

Page 135: ...ted ports or at fibers that connect to unknown sources Do not examine unterminated optical ports with optical instruments Avoid direct exposure to the beam WARNING Unterminated optical connectors can emit invisible laser radiation The lens in the human eye focuses all the laser power on the retina so focusing the eye directly on a laser source even a low power laser could permanently damage the ey...

Page 136: ... Safety Guidelines on page 119 Class 1 LED Product Warning on page 120 Laser Beam Warning on page 121 Radiation from Open Port Apertures Warning on page 122 Class 1 LED Product Warning WARNING Class 1 LED product Waarschuwing Klasse 1 LED product Varoitus Luokan 1 valodiodituote Attention Alarme de produit LED Class I Warnung Class 1 LED Produktwarnung Avvertenza Avvertenza prodotto LED di Classe ...

Page 137: ... direkt in den Strahl blicken und ihn nicht direkt mit optischen Geräten prüfen Avvertenza Non fissare il raggio con gli occhi né usare strumenti ottici per osservarlo direttamente Advarsel Stirr eller se ikke direkte p strlen med optiske instrumenter Aviso Não olhe fixamente para o raio nem olhe para ele directamente com instrumentos ópticos Atención No mirar fijamente el haz ni observarlo direct...

Page 138: ...non sono inseriti radiazioni invisibili possono essere emesse attraverso l apertura della porta Evitate di esporvi alle radiazioni e non guardate direttamente nelle aperture Advarsel Unngå utsettelse for stråling og stirr ikke inn i åpninger som er åpne fordi usynlig stråling kan emiteres fra portens åpning når det ikke er tilkoblet en fiberkabel Aviso Dada a possibilidade de emissão de radiação i...

Page 139: ...ent type dat door de fabrikant aanbevolen is Gebruikte batterijen dienen overeenkomstig fabrieksvoorschriften weggeworpen te worden Varoitus Räjähdyksen vaara jos akku on vaihdettu väärään akkuun Käytä vaihtamiseen ainoastaan saman tai vastaavantyyppistä akkua joka on valmistajan suosittelema Hävitä käytetyt akut valmistajan ohjeiden mukaan Attention Danger d explosion si la pile n est pas remplac...

Page 140: ...ing Explosionsfara vid felaktigt batteribyte Ersätt endast batteriet med samma batterityp som rekommenderas av tillverkaren eller motsvarande Följ tillverkarens anvisningar vid kassering av använda batterier Related Documentation Lightning Activity Warning on page 124 Jewelry Removal Warning on page 125 Operating Temperature Warning on page 126 Product Disposal Warning on page 128 Lightning Activi...

Page 141: ...onden sieraden inclusief ringen kettingen en horloges verwijderen Metalen voorwerpen worden warm wanneer ze met stroom en aarde zijn verbonden en kunnen ernstige brandwonden veroorzaken of het metalen voorwerp aan de aansluitklemmen lassen Varoitus Ennen kuin työskentelet voimavirtajohtoihin kytkettyjen laitteiden parissa ota pois kaikki korut sormukset kaulakorut ja kellot mukaan lukien Metallies...

Page 142: ...graves ou ficarem soldados aos terminais Atención Antes de operar sobre equipos conectados a líneas de alimentación quitarse las joyas incluidos anillos collares y relojes Los objetos de metal se calientan cuando se conectan a la alimentación y a tierra lo que puede ocasionar quemaduras graves o que los objetos metálicos queden soldados a los bornes Varning Tag av alla smycken inklusive ringar hal...

Page 143: ...il surriscaldamento dei services gateway non adoperateli in un locale che ecceda la temperatura ambientale massima di 40 ο C Per evitare che la circolazione dell aria sia impedita lasciate uno spazio di almeno 15 2 cm di fronte alle aperture delle ventole Advarsel Unngå overoppheting av eventuelle rutere i Juniper Networks services gateway Disse skal ikke brukes på steder der den anbefalte maksima...

Page 144: ...s et réglementations en vigueur Warnung Dieses Produkt muß den geltenden Gesetzen und Vorschriften entsprechend entsorgt werden Avvertenza L eliminazione finale di questo prodotto deve essere eseguita osservando le normative italiane vigenti in materia AdvarselEndeligdisponeringavdetteproduktetmåskjeihenholdtilnasjonale lover og forskrifter Aviso A descartagem final deste produto deverá ser efectu...

Page 145: ... General Electrical Safety Guidelines and Warnings Install the services gateway in compliance with the following local national or international electrical codes United States National Fire Protection Association NFPA 70 United States National Electrical Code Canada Canadian Electrical Code Part 1 CSA C22 1 Other countries International Electromechanical Commission IEC 60364 Part 1 through Part 7 ...

Page 146: ...l ratings and product usage instructions For the services gateway and peripheral equipment to function safely and correctly use the cables and connectors specified for the attached peripheral equipment and make certain they are in good condition Related Documentation In Case of Electrical Accident on page 129 Copyright 2016 Juniper Networks Inc 130 SRX320 Services Gateway Hardware Guide ...

Page 147: ...Information Technology Equipment Safety IEC 60950 1 2005 A1 2009 Information Technology Equipment Safety All country deviations CB Scheme report EN 60825 1 2007 Safety of Laser Products Part 1 Equipment classification and requirements EMC EN 300 386 V1 6 1 Telecom Network Equipment EMC requirements EN 55032 2012 EN55032 2012 AC 2013 Electromagnetic compatibility of multimedia equipment Emission re...

Page 148: ...logy Equipment Immunity Characteristics Environmental Reduction of Hazardous Substances ROHS 6 Telco Common Language Equipment Identifier CLEI code Related Documentation SRX320 Services Gateway Acoustic Noise Compliance Statements on page 132 SRX320 Services Gateway EMC Requirements on page 133 SRX320 Services Gateway Acoustic Noise Compliance Statements The maximum emitted sound pressure level is...

Page 149: ...t this product may cause radio interference in which case the user may be required to take adequate measures VCCI A United States The services gateway has been tested and found to comply with the limits for a Class A digital device of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This...

Page 150: ...mentation SRX320 Services Gateway Agency Approvals on page 131 SRX320 Services Gateway Acoustic Noise Compliance Statements on page 132 Copyright 2016 Juniper Networks Inc 134 SRX320 Services Gateway Hardware Guide ...

Page 151: ...PART 7 Index Index on page 137 135 Copyright 2016 Juniper Networks Inc ...

Page 152: ...Copyright 2016 Juniper Networks Inc 136 SRX320 Services Gateway Hardware Guide ...

Page 153: ... 133 components packing for shipment 104 console port RJ 45 38 conventions text and syntax xii curly braces in configuration statements xiii customer support xiv contacting JTAC xiv customer support contacting 100 D damage preventing ESD 115 documentation comments on xiii E electrical accident procedures 129 safety guidelines and warnings 129 electromagnetic compatibility 33 EMC requirements Canad...

Page 154: ...returning 100 setup wizard default setup mode 76 description 75 guided setup mode 76 shipment packing components 104 packing services gateway 103 signaling limitations 33 standards compliance 131 support requesting from JTAC 99 102 support technical See technical support syntax conventions xii T technical support contacting JTAC xiv tools required for packing 103 U unpacking services gateway 45 V ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands