background image

Copyright © 2016, Juniper Networks, Inc.

56

SRX340 Services Gateway Hardware Guide

Summary of Contents for SRX340

Page 1: ...SRX340 Services Gateway Hardware Guide Modified 2016 05 23 Copyright 2016 Juniper Networks Inc ...

Page 2: ...his publication without notice SRX340 Services Gateway Hardware Guide Copyright 2016 Juniper Networks Inc All rights reserved The information in this document is current as of the date on the title page YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant Junos OS has no known time related limitations through the year 2038 However the NTP application is known to...

Page 3: ...Chapter 4 Cooling System Description 13 Understanding the SRX340 Services Gateway Cooling System 13 Chapter 5 Power System Description 15 Understanding the SRX340 Services Gateway Power Supply 15 Part 2 Site Planning and Specifications Chapter 6 Planning and Preparing the Site 19 SRX340 Services Gateway Physical Specifications 19 SRX340 Services Gateway Environmental Specifications 19 Site Prepara...

Page 4: ...cking the SRX340 Services Gateway 45 Verifying Parts Received with the SRX340 Services Gateway 46 Chapter 13 Installing the Rack Mounting Hardware 49 Preparing the SRX340 Services Gateway for Rack Mount Installation 49 Connecting the SRX340 Services Gateway to the Building Structure 49 Chapter 14 Installing the SRX340 Services Gateway in a Rack 51 Installing the SRX340 Services Gateway in a Rack 5...

Page 5: ...rvices Gateway Power Supply 78 Chapter 20 Troubleshooting Components 79 Troubleshooting Resources for the SRX340 Services Gateway Overview 79 Troubleshooting Chassis and Interface Alarm Messages on the SRX340 Services Gateway 80 Troubleshooting the Power System on the SRX340 Services Gateway 81 Using the RESET CONFIG Button on the SRX340 Services Gateway 82 Changing the RESET CONFIG Button Behavio...

Page 6: ... Fire Suppression Equipment 109 Chapter 26 Laser and LED Safety Guidelines and Warnings 111 General Laser Safety Guidelines 111 Class 1 Laser Warning 112 Class 1 LED Product Warning 112 Laser Beam Warning 113 Radiation from Open Port Apertures Warning 114 Chapter 27 Maintenance and Operational Safety Guidelines and Warnings 115 Battery Handling Warning 115 Lightning Activity Warning 116 Jewelry Re...

Page 7: ...Part 7 Index Index 131 vii Copyright 2016 Juniper Networks Inc Table of Contents ...

Page 8: ...Copyright 2016 Juniper Networks Inc viii SRX340 Services Gateway Hardware Guide ...

Page 9: ...g the Rack Mount Brackets Center Mount Position 52 Figure 8 Installing the Services Gateway in the Rack Front Mount Shown Center Mount Similar 52 Chapter 15 Connecting the SRX340 Services Gateway to Ground 53 Figure 9 Connecting the Grounding Cable to the SRX340 Services Gateway 55 Chapter 17 Providing Power to the SRX340 Services Gateway 59 Figure 10 Connecting the SRX340 Services Gateway to an A...

Page 10: ...Copyright 2016 Juniper Networks Inc x SRX340 Services Gateway Hardware Guide ...

Page 11: ...te Electrical Wiring Guidelines for the SRX340 Services Gateway 33 Table 10 Power System Electrical Specifications for the SRX340 Services Gateway 34 Table 11 AC Power Cord Specifications 35 Chapter 10 Cable Specifications and Pinouts 37 Table 12 RJ 45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port 37 Table 13 RJ 45 Connector Pinouts for the SRX340 Services Gateway Console Port 38...

Page 12: ...apter 20 Troubleshooting Components 79 Table 18 SRX340 Services Gateway Chassis Alarm Conditions and Corrective Actions 80 Table 19 SRX340 Services Gateway Power LED Status 81 Copyright 2016 Juniper Networks Inc xii SRX340 Services Gateway Hardware Guide ...

Page 13: ...nformation in the latest release notes differs from the information in the documentation follow the product Release Notes Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts These books go beyond the technical documentation to explore the nuances of network architecture deployment and administration The current list can be viewed at http www juniper net ...

Page 14: ...mode type the configure command user host configure Represents text that you type Bold text like this user host show chassis alarms No alarms currently active Represents output that appears on the terminal screen Fixed width text like this A policy term is a named structure that defines match conditions and actions Junos OS CLI User Guide RFC 1997 BGP Communities Attribute Introduces or emphasizes...

Page 15: ...re brackets edit routing options static route default nexthop address retain Identifies a level in the configuration hierarchy Indention and braces Identifies a leaf statement at a configuration hierarchy level semicolon GUI Conventions In the Logical Interfaces box select All Interfaces To cancel the configuration click Cancel Represents graphical user interface GUI items you click or select Bold...

Page 16: ...online self service portal called the Customer Support Center CSC that provides you with the following features Find CSC offerings http www juniper net customers support Search for known bugs http www2 juniper net kb Find product documentation http www juniper net techpubs Find solutions and answer questions using our Knowledge Base http kb juniper net Download the latest versions of software and ...

Page 17: ...For international or direct dial options in countries without toll free numbers see http www juniper net support requesting support html xvii Copyright 2016 Juniper Networks Inc About the Documentation ...

Page 18: ...Copyright 2016 Juniper Networks Inc xviii SRX340 Services Gateway Hardware Guide ...

Page 19: ...view System Overview on page 3 Chassis Description on page 5 Interface Module Descriptions on page 11 Cooling System Description on page 13 Power System Description on page 15 1 Copyright 2016 Juniper Networks Inc ...

Page 20: ...Copyright 2016 Juniper Networks Inc 2 SRX340 Services Gateway Hardware Guide ...

Page 21: ...rts one management port 4 GB of DRAM memory 8 GB of flash memory and four Mini Physical Interface Module Mini PIM slots The SRX340 Services Gateway runs the Junos operating system Junos OS and supports the following features Firewall support with key features such as IPsec and VPN Intrusion Detection and Prevention IDP High availability QoS MPLS Related Documentation SRX340 Services Gateway Chassi...

Page 22: ...erface On a single line you type commands that are executed when you press the Enter key The CLI provides command help and command completion In addition you can also use Junos Space Security Director to define and manage security policies on the services gateway Related Documentation Accessing J Web on the SRX340 Services Gateway on page 66 Accessing the CLI on the SRX340 Services Gateway on page...

Page 23: ... telecommunications open frame racks CAUTION Beforeremovingorinstallingcomponentsofafunctioningservices gateway attach an electrostatic discharge ESD strap to an ESD point and place the other end of the strap around your bare wrist Failure to use an ESD strap could result in damage to the device The services gateway must be connected to earth ground during normal operation The protective earthing ...

Page 24: ... and Type A USB plugs is supplied with the services gateway To use the USB console port you must download a USB driver to the management device from http www juniper net support downloads group f junos Console ports 2 8 Use the management MGMT port to connect to the device over the network Management port 3 Four slots for Mini PIMs The Mini PIM slots can be used to provide LAN and WAN functionalit...

Page 25: ... outgoing data packets from the services gateway 1 G Ethernet ports 7 The services gateway has one USB port that accepts a USB storage device USB port 9 Indicate component and system status and troubleshooting information at a glance LEDs 10 Use the Power button to shut down the services gateway Power button 11 Figure 2 on page 7 shows the LEDs on the front panel Figure 2 SRX340 Services Gateway F...

Page 26: ...hassis Overview on page 5 Understanding the SRX340 Services Gateway Back Panel on page 8 Understanding the SRX340 Services Gateway Back Panel Figure 3 on page 8 shows the back panel of the SRX340 Services Gateway and Table 5 on page 8 lists the components on the back panel Figure 3 SRX340 Services Gateway Back Panel g000961 2 1 3 Table 5 SRX340 Services Gateway Back Panel Components Description Co...

Page 27: ...elated Documentation SRX340 Services Gateway Chassis Overview on page 5 Understanding the SRX340 Services Gateway Front Panel on page 5 9 Copyright 2016 Juniper Networks Inc Chapter 2 Chassis Description ...

Page 28: ...Copyright 2016 Juniper Networks Inc 10 SRX340 Services Gateway Hardware Guide ...

Page 29: ...signaling for the medium type CAUTION The Mini PIMs are not hot swappable You must power off the services gateway before removing or installing Mini PIMs The following Mini PIMs are supported on the SRX340 Services Gateway 1 Port Serial Mini Physical Interface Module SRX MP 1SERIAL R 1 Port T1 E1 Mini Physical Interface Module SRX MP 1T1E1 R 1 Port VDSL2 Annex A Mini Physical Interface Module SRX ...

Page 30: ...Copyright 2016 Juniper Networks Inc 12 SRX340 Services Gateway Hardware Guide ...

Page 31: ... air through the back of the chassis The airflow produced by the fans keeps device components within the acceptable temperature range Figure 4 on page 13 shows the airflow through the SRX340 Services Gateway chassis Figure 4 Airflow Through the SRX340 Services Gateway Chassis Related Documentation SRX340 Services Gateway Chassis Overview on page 5 Understanding the SRX340 Services Gateway Front Pa...

Page 32: ...Copyright 2016 Juniper Networks Inc 14 SRX340 Services Gateway Hardware Guide ...

Page 33: ...ccording to their voltage requirements The power supply is fixed in the chassis and is not field replaceable The power supply has a single AC appliance inlet that requires a dedicated AC power feed Related Documentation SRX340 Services Gateway Chassis Overview on page 5 Understanding the SRX340 Services Gateway Front Panel on page 5 Understanding the SRX340 Services Gateway Back Panel on page 8 SR...

Page 34: ...Copyright 2016 Juniper Networks Inc 16 SRX340 Services Gateway Hardware Guide ...

Page 35: ...ns Planning and Preparing the Site on page 19 Rack Requirements on page 25 Cabinet Requirements on page 31 Power Requirements and Specifications on page 33 Cable Specifications and Pinouts on page 37 17 Copyright 2016 Juniper Networks Inc ...

Page 36: ...Copyright 2016 Juniper Networks Inc 18 SRX340 Services Gateway Hardware Guide ...

Page 37: ...X340 Services Gateway Value Physical Specification of Chassis 14 57 in Height 17 36 in Width 1 72 in Depth 10 80 lb Weight Related Documentation Understanding the SRX340 Services Gateway Front Panel on page 5 Understanding the SRX340 Services Gateway Back Panel on page 8 SRX340 Services Gateway Environmental Specifications on page 19 SRX340 Services Gateway Environmental Specifications Table 7 on ...

Page 38: ...le 8 on page 20 provides a checklist of tasks you need to perform when preparing a site for installing the SRX340 Services Gateway Table 8 Site Preparation Checklist for SRX340 Services Gateway Installation Notes Date Performed By Additional Information Item or Task Environment SRX340 Services Gateway Environmental Specifications on page 19 Verify that environmental factors such as temperature and...

Page 39: ...nsumption and requirements Rack Requirements SRX340 Services Gateway Rack Mounting Requirements and Warnings on page 25 Verify that your rack meets the minimum requirements Rack Installation Preparing the SRX340 Services Gateway for Rack Mount Installation on page 49 Plan the rack location including required space clearances Connecting the SRX340 Services Gateway to the Building Structure on page ...

Page 40: ...n Guidelines for the SRX340 Services Gateway on page 22 General Site Installation Guidelines for the SRX340 Services Gateway The following precautions help you plan an acceptable operating environment for your SRX340 Services Gateway and avoid environmentally caused equipment failures For the cooling system to function properly the airflow around the chassis must be unrestricted Allow sufficient c...

Page 41: ...slot to prevent any interruption or reduction in the flow of air across internal components Related Documentation Site Preparation Checklist for the SRX340 Services Gateway on page 20 23 Copyright 2016 Juniper Networks Inc Chapter 6 Planning and Preparing the Site ...

Page 42: ...Copyright 2016 Juniper Networks Inc 24 SRX340 Services Gateway Hardware Guide ...

Page 43: ...autions to ensure that the system remains stable The following directives help maintain your safety The services gateway must be installed into a rack that is secured to the building structure The services gateway should be mounted at the bottom of the rack if it is the only unit in the rack When mounting the services gateway in a partially filled rack load the rack from the bottom to the top with...

Page 44: ...siirry sitten sen yläosaan Jos telinettä varten on vakaimet asenna ne ennen laitteen asettamista telineeseen tai sen huoltamista siinä Attention Pour éviter toute blessure corporelle pendant les opérations de montage ou de réparation de cette unité en casier il convient de prendre des précautions spéciales afin de maintenir la stabilité du système Les directives ci dessous sont destinées à assurer...

Page 45: ...do questa unità viene montata in un supporto parzialmente pieno caricare il supporto dal basso all alto con il componente più pesante sistemato sul fondo del supporto Se il supporto è dotato di dispositivi stabilizzanti installare tali dispositivi prima di montare o di procedere alla manutenzione dell unità nel supporto Advarsel Unngå fysiske skader under montering eller reparasjonsarbeid på denne...

Page 46: ...mismo Cuandoesteequiposevayaainstalarenunbastidorparcialmenteocupado comenzar la instalación desde la parte inferior hacia la superior colocando el equipo más pesado en la parte inferior Si el bastidor dispone de dispositivos estabilizadores instalar éstos antes de montar o proceder al mantenimiento del equipo instalado en el bastidor Varning För att undvika kroppsskada när du installerar eller ut...

Page 47: ...elated Documentation SRX340 Services Gateway Rack Mounting Requirements and Warnings on page 25 SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29 SRX340 Services Gateway Clearance Requirements for Airflow and Hardware Maintenance on page 30 SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes The spacing of the mounting brackets and flange holes on t...

Page 48: ...Allow at least 24 in 61 cm both in front of and behind the device If you are mounting the device in a rack with other equipment or if you are placing it on the desktop near other equipment ensure that the exhaust from other equipment does not blow into the intake vents of the chassis For information on the airflow through the SRX340 Services Gateway chassis see Understanding the SRX340 Services Ga...

Page 49: ... the mounting brackets extend the width of either chassis to 19 in 48 7 cm and the front of the chassis extends approximately 0 5 in 1 27 cm beyond the mounting brackets The minimum total clearance inside the cabinet is 30 7 in 78 cm between the inside of the front door and the inside of the rear door NOTE A cabinet larger than the minimum required provides better airflow and reduces the chance of...

Page 50: ...sis close to the front of the cabinet maximizes the clearance in the rear of the cabinet for critical airflow Route and dress all cables to minimize the blockage of airflow to and from the chassis Related Documentation SRX340 Services Gateway Cabinet Size and Clearance Requirements on page 31 Copyright 2016 Juniper Networks Inc 32 SRX340 Services Gateway Hardware Guide ...

Page 51: ...Site Wiring Factor To ensure that signaling functions optimally Install wires correctly Improperly installed wires can emit radio interference Do not exceed the recommended distances or pass wires between buildings The potential for damage from lightning strikes increases if wires exceed recommended distances or if wires pass between buildings Shield all conductors The electromagnetic pulse EMP ca...

Page 52: ...ding wiring must be shielded The shielding for the wiring must be grounded at both ends Related Documentation SRX340 Services Gateway Power Specifications and Requirements on page 34 SRX340 Services Gateway Supported AC Power Cords on page 35 General Electrical Safety Guidelines and Warnings on page 121 SRX340 Services Gateway Power Specifications and Requirements The AC power system electrical sp...

Page 53: ...er cord specifications and Figure 5 on page 35 depicts the plug on the AC power cord provided for each country or region Table 11 AC Power Cord Specifications Plug Standards Electrical Specification Country AS NZ 3112 1993 250 VAC 10 A 50 Hz Australia GB2099 1 1996 and GB 1002 1996 CH1 10P 250 VAC 10 A 50 Hz China CEE 7 VII 250 VAC 10 A 50 Hz Europe except Italy and United Kingdom CEI 23 16 VII 25...

Page 54: ...tion SRX340 Services Gateway Electrical Wiring Guidelines on page 33 SRX340 Services Gateway Power Specifications and Requirements on page 34 Copyright 2016 Juniper Networks Inc 36 SRX340 Services Gateway Hardware Guide ...

Page 55: ...cribes the RJ 45 connector pinouts for the Ethernet port Table 12 RJ 45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port Signal Pin BI_DA 1 BI_DA 2 BI_DB 3 BI_DC 4 BI_DC 5 BI_DB 6 BI_DD 7 BI_DD 8 Related Documentation RJ 45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37 Mini USB Connector Pinouts for the SRX340 Services Gateway Console Port on page 38 RJ 4...

Page 56: ...r management device laptop or PC does not have a DB 9 male connector pin or an RJ 45 connector pin you can connect your management device to the Mini USB Type B console port of the services gateway by using a cable that has a standard Type A USB connector on one end and a Mini USB Type B 5 pin connector on the other end Table 14 on page 38 describes the Mini USB Type B connector pinouts for the co...

Page 57: ...ected to ground GND or used as an attached device presence indicator N C X Ground Black GND 4 Related Documentation RJ 45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port on page 37 RJ 45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37 39 Copyright 2016 Juniper Networks Inc Chapter 10 Cable Specifications and Pinouts ...

Page 58: ...Copyright 2016 Juniper Networks Inc 40 SRX340 Services Gateway Hardware Guide ...

Page 59: ...g Hardware on page 49 Installing the SRX340 Services Gateway in a Rack on page 51 Connecting the SRX340 Services Gateway to Ground on page 53 Connecting the SRX340 Services Gateway to External Devices on page 57 Providing Power to the SRX340 Services Gateway on page 59 Performing the Initial Configuration on page 63 41 Copyright 2016 Juniper Networks Inc ...

Page 60: ...Copyright 2016 Juniper Networks Inc 42 SRX340 Services Gateway Hardware Guide ...

Page 61: ...reparing the SRX340 Services Gateway for Rack Mount Installation on page 49 3 Install the services gateway as described in Installing the SRX340 Services Gateway in a Rack on page 51 4 Connect cables to external devices 5 Connect the grounding cable as described in Connecting the SRX340 Services Gateway Grounding Cable on page 54 6 Power on the services gateway as described in Powering On the SRX3...

Page 62: ...e a device for autoinstallation For the autoinstallation process to work you must store one or more host specific or default configuration files on a configuration server in the network and have a service available typicallyDynamicHostConfigurationProtocol DHCP toassignanIPaddress to the services gateway Autoinstallation takes place automatically when you connect an Ethernet port on a new services...

Page 63: ...y to begin installation To unpack the SRX340 Services Gateway 1 Move the cardboard carton to a staging area as close to the installation site as possible where you have enough room to remove the components from the chassis 2 Position the cardboard carton with the arrows pointing up 3 Carefully open the top of the cardboard carton 4 Remove the foam covering the top of the services gateway 5 Remove ...

Page 64: ...d in Table 15 on page 46 and an accessory box which contains the parts listed in Table 16 on page 46 NOTE The parts shipped with your services gateway can vary depending on the configuration you ordered Table 15 Parts List for a Fully Configured SRX340 Services Gateway Quantity Component 1 1U SRX340 Services Gateway chassis with 4 Mini PIM slots 8 1 G Ethernet ports and 8 Gigabit Ethernet SFP port...

Page 65: ...Related Documentation Preparing the SRX340 Services Gateway for Rack Mount Installation on page 49 47 Copyright 2016 Juniper Networks Inc Chapter 12 Unpacking the SRX340 Services Gateway ...

Page 66: ...Copyright 2016 Juniper Networks Inc 48 SRX340 Services Gateway Hardware Guide ...

Page 67: ... to the chassis of the services gateway Four mounting screws to attach the mounting brackets to the rack rail Verify that the racks or cabinets meet the specific requirements described in SRX340 Services Gateway Rack Size and Strength Requirements on page 29 Place the rack or cabinet in its permanent location allowing adequate clearance for airflow and maintenance and secure it to the building str...

Page 68: ...cure the rack to ceiling brackets Related Documentation Installing the SRX340 Services Gateway in a Rack on page 51 Preparing the SRX340 Services Gateway for Rack Mount Installation on page 49 Copyright 2016 Juniper Networks Inc 50 SRX340 Services Gateway Hardware Guide ...

Page 69: ... are installing multiple devices in one rack install the lowest one first and proceed upward in the rack To install the services gateway in a rack 1 Position a mounting bracket on each side of the chassis 2 Use a number 2 Phillips screwdriver to install the screws that secure the mounting brackets to the chassis Use either the front mount position as shown in Figure 6 on page 51 or the center moun...

Page 70: ... to tighten the screws 6 Install the second screw in each mounting bracket as shown in Figure 8 on page 52 Figure 8 Installing the Services Gateway in the Rack Front Mount Shown Center Mount Similar 7 Verify that the mounting screws on one side of the rack are aligned with the mounting screws on the opposite side and that the services gateway is level Related Documentation Connecting the SRX340 Se...

Page 71: ...ng Cable on page 54 SRX340 Services Gateway Grounding Specifications To meet safety and electromagnetic interference EMI requirements and to ensure proper operation the SRX340 Services Gateway must be adequately grounded before power is connected You must provide a grounding lug to connect the services gateway to earth ground WARNING Before you connect power to the services gateway a licensed elec...

Page 72: ...TION Before you connect power to the services gateway a licensed electrician must attach a cable lug to the grounding and power cables that you supply A cable with an incorrectly attached lug can damage the services gateway for example by causing a short circuit To ground the device 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to the ESD point on...

Page 73: ...d that it does not drape where people could trip on it NOTE The device should be permanently connected to ground during operation Related Documentation Required Tools and Parts for Grounding the SRX340 Services Gateway on page 53 SRX340 Services Gateway Grounding Specifications on page 53 55 Copyright 2016 Juniper Networks Inc Chapter 15 Connecting the SRX340 Services Gateway to Ground ...

Page 74: ...Copyright 2016 Juniper Networks Inc 56 SRX340 Services Gateway Hardware Guide ...

Page 75: ...cable into the RJ 45 to DB 9 serial port adapter supplied with your services gateway 5 Connect the serial port adapter to a separately purchased DB 9 female to DB 25 male adapter or other adapter appropriate for your modem 6 Plug the modem adapter into the DB 25 connector on the modem 7 Connect the modem to your telephone network 8 Turn on the power to the modem 9 Power on the services gateway by ...

Page 76: ...llowing topics Installation and Upgrade Guide for Security Devices Monitoring and Troubleshooting Guide for Security Devices An OK response verifies that the modem can communicate successfully with the COM port on the PC or laptop 6 Dial the modem that is connected to the console port on the services gateway by entering ATDT remote modem number For example if the number of the modem connected to t...

Page 77: ... terminal on the side of the chassis is provided to connect the services gateway to ground 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the other end of the ESD strap to the ESD point on the rack 2 Insert the appliance coupler end of the power cord into the appliance inlet on the power supply faceplate NOTE We strongly recommend that you use only the 3 pro...

Page 78: ... the power supply is turned on it can take up to 60 seconds for status indicators such as the STAT and PWR LEDs to show that the power supply is functioning normally Ignore error indicators that appear during the first 60 seconds NOTE When the system is completely powered off and you turn on the power supply the device starts as the power supply completes its startup sequence If the device finishe...

Page 79: ...file system NOTE To remove power completely from the device unplug the power cord or switch off the AC power source After powering off a power supply wait at least 10 seconds before turning it back on After powering on a power supply wait at least 10 seconds before turning it off The Power button on the services gateway is a standby power switch which will not turn off the input power to the servi...

Page 80: ...Copyright 2016 Juniper Networks Inc 62 SRX340 Services Gateway Hardware Guide ...

Page 81: ... be configured when the device is powered on You can perform the initial software configuration of the services gateway by using the browser based setup wizard or by using the command line interface CLI Before configuring the device gather the configuration information required to deploy the device in your network At a minimum the setup wizard requires the following information Device name Passwor...

Page 82: ...age 64 Accessing J Web on the SRX340 Services Gateway on page 66 Configuring the SRX340 Services Gateway Using the J Web Setup Wizard on page 67 Accessing the CLI on the SRX340 Services Gateway on page 69 Connecting to the SRX340 Services Gateway from the CLI Remotely on page 71 Configuring the SRX340 Services Gateway Using the CLI on page 71 Viewing SRX340 Services Gateway Factory Default Setting...

Page 83: ...ry conf srx110h va factory conf srx300 lem factory conf srx110h va wl defaults conf srx320 8xge factory conf srx110h va wl factory conf srx320 defaults conf srx110h vb defaults conf srx320 factory conf srx110h vb factory conf srx320 lem factory conf srx110h vb wl defaults conf srx320 poe 8xge factory conf srx110h vb wl factory conf srx320 poe defaults conf srx110h wl defaults conf srx320 poe facto...

Page 84: ...phical interface that allows you to operate a services gateway without commands NOTE To access the J Web interface your management device requires one of the following supported browsers Microsoft Internet Explorer version 9 0 or 10 0 Mozilla Firefox versions 24 through 38 Google Chrome versions 27 through 43 To access J Web 1 Connect the management port MGMT to the Ethernet port on the management...

Page 85: ...t the Guided Setup Mode on page 68 About the Setup Wizard The setup wizard guides you through the step by step configuration of a services gateway that can securely pass traffic To help guide you through the process the wizard Provides recommended settings based on your previous selections For example the wizard recommends security policies based on the security topology you have defined Determine...

Page 86: ...rm any additional configuration You can perform additional configuration by rerunning the wizard in the Guided Setup mode by using the J Web interface or by using the CLI See the How to Set Up Your SRX340 Services Gateway for step by step instructions on how to configure your services gateway in the Default Setup mode About the Guided Setup Mode If you choose the Guided Setup mode the wizard guide...

Page 87: ...interface You can access the setup wizard from the J Web interface and use it to reconfigure your services gateway To do so select Configuration Wizards Set Up You can either edit an existing configuration or create a new configuration NOTE If you elect to create a new configuration then all the current configuration in the services gateway will be deleted Related Documentation SRX340 Services Gat...

Page 88: ... on the SRX340 Services Gateway 4 Start your asynchronous terminal emulation application such as Microsoft Windows HyperTerminal and select the appropriate COM port to use for example COM1 5 Configure the serial port settings with the following values Baud rate 9600 Parity N Data bits 8 Stop bits 1 Flow control none 6 Power on the services gateway You can start performing initial software configur...

Page 89: ... Configuring the SRX340 Services Gateway Using the J Web Setup Wizard on page 67 Accessing the CLI on the SRX340 Services Gateway on page 69 Configuring the SRX340 Services Gateway Using the CLI on page 71 Configuring the SRX340 Services Gateway Using the CLI This sample procedure explains how you can create an initial configuration using CLI commands to connect the SRX340 Services Gateway to the ...

Page 90: ...ns static route 0 0 0 0 0 next hop gateway 13 Configure basic security zones and bind them to traffic interfaces edit admin set security zones security zone untrust interfaces ge 0 0 0 admin set security zones security zone trust interfaces ge 0 0 1 admin set security zones security zone trust interfaces ge 0 0 1 0 host inbound traffic system services all admin set security zones security zone tru...

Page 91: ...the services gateway exit configuration mode edit admin exit admin Related Documentation SRX340 Services Gateway Software Configuration Overview on page 63 Understanding SRX340 Services Gateway Factory Default Settings on page 64 Viewing SRX340 Services Gateway Factory Default Settings on page 64 Accessing J Web on the SRX340 Services Gateway on page 66 Configuring the SRX340 Services Gateway Usin...

Page 92: ...Copyright 2016 Juniper Networks Inc 74 SRX340 Services Gateway Hardware Guide ...

Page 93: ...PART 4 Maintaining and Troubleshooting Components Maintaining Components on page 77 Troubleshooting Components on page 79 75 Copyright 2016 Juniper Networks Inc ...

Page 94: ...Copyright 2016 Juniper Networks Inc 76 SRX340 Services Gateway Hardware Guide ...

Page 95: ...rist strap Flat blade screw blade screwdriver approximately 1 8 in 3 mm Phillips screwdrivers numbers 1 and 2 Related Documentation Routine Maintenance Procedures for the SRX340 Services Gateway on page 77 Maintaining the SRX340 Services Gateway Cooling System Components on page 78 Maintaining the SRX340 Services Gateway Power Supply on page 78 Routine Maintenance Procedures for the SRX340 Service...

Page 96: ...ne Maintenance Procedures for the SRX340 Services Gateway on page 77 Maintaining the SRX340 Services Gateway Power Supply on page 78 Maintaining the SRX340 Services Gateway Power Supply To maintain the power supplies of the services gateway Make sure that all power cables are arranged so that they do not obstruct access to other services gateway components Routinely check the POWER LED on the fron...

Page 97: ... and troubleshooting hardware Junos OS and network connectivity Use the CLI to display more information about alarms CLI commands display information about network connectivity derived from the ping and traceroute utilities For information about using the CLI to troubleshoot Junos OS see the appropriate Junos OS configuration guide JTAC If you need assistance during troubleshooting you can contact...

Page 98: ...rom an alternative boot device ignore this alarm condition Reformat the internal flash memory and install a bootable image See the Installation and Upgrade Guide for Security Devices and Network Monitoring and Troubleshooting Guide for Security Devices If you did not configure the services gateway to boot from an alternative boot device contact JTAC The services gateway boots from an alternate boo...

Page 99: ...ateway on page 82 Changing the RESET CONFIG Button Behavior on the SRX340 Services Gateway on page 83 Troubleshooting the Power System on the SRX340 Services Gateway The LEDs on the services gateway enable you to determine the performance and operation The PWR LED located on the front panel of the services gateway indicates the different settings with respect to the power system Table 19 on page 8...

Page 100: ...ement access to the services gateway you can use the RESET CONFIG button to restore the device to the factory default configuration or a rescue configuration For example if someone inadvertently commits a configuration that denies management access to a services gateway you can delete the invalid configuration and replace it with a rescue configuration by pressing the RESET CONFIG button NOTE TheR...

Page 101: ... CONFIG button from setting the device to the rescue configuration admin host set chassis config button no rescue You can still press and hold the button for 15 seconds or more to reset the gateway to the factory default configuration To disable the button and prevent the device from resetting to either configuration admin host set chassis config button no clear no rescue The no clear option preve...

Page 102: ...Copyright 2016 Juniper Networks Inc 84 SRX340 Services Gateway Hardware Guide ...

Page 103: ... Replacing Components Overview of Replacing Components on page 87 Replacing Interface Modules on page 89 Contacting Customer Support and Returning Components on page 91 85 Copyright 2016 Juniper Networks Inc ...

Page 104: ...Copyright 2016 Juniper Networks Inc 86 SRX340 Services Gateway Hardware Guide ...

Page 105: ...entation Required Tools and Parts for Replacing the SRX340 Services Gateway Components on page 87 Replacing Mini Physical Interface Modules in the SRX340 Services Gateway on page 89 Required Tools and Parts for Replacing the SRX340 Services Gateway Components The following tools and parts are required for replacing a Mini Physical Interface Module MPIM on the services gateway Electrostatic bag or ...

Page 106: ...Copyright 2016 Juniper Networks Inc 88 SRX340 Services Gateway Hardware Guide ...

Page 107: ...teway are not hot swappable You need to power off the device before removing or installing Mini PIMs For information on replacing Mini PIMs see the SRX300 Series and SRX550 High Memory Services Gateway Interface Modules Reference Related Documentation SRX340 Services Gateway Field Replaceable Units Overview on page 87 Required Tools and Parts for Replacing the SRX340 Services Gateway Components on...

Page 108: ...Copyright 2016 Juniper Networks Inc 90 SRX340 Services Gateway Hardware Guide ...

Page 109: ... for Shipment on page 95 Packing SRX340 Services Gateway Components for Shipment on page 96 Contacting Customer Support Once you have located the serial numbers of the device or component you can return the device or component for repair or replacement For this you need to contact Juniper Networks Technical Assistance Center JTAC You can contact JTAC 24 hours a day 7 days a week using any of the f...

Page 110: ...ny component to Juniper Networks unless you have first obtained an RMA number Juniper Networks reserves the right to refuse shipments that do not have an RMA Refused shipments are returned to the customer via collect freight 3 Pack the SRX340 Services Gateway or component for shipping For more information about return and repair policies see the customer support webpage at http www juniper net sup...

Page 111: ...eway Each Mini PIM has a unique serial number The serial number label is located on the right side of the Mini PIM when the Mini PIM is horizontally oriented as it would be when installed on the device The exact location might be slightly different on different Mini PIMs depending on the placement of components on the Mini PIM Related Documentation Contacting Customer Support on page 91 Returning ...

Page 112: ... 93 Locating the SRX340 Services Gateway Mini Physical Interface Module Serial Number Label on page 93 Information You Might Need to Supply to JTAC on page 94 Required Tools and Parts for Packing the SRX340 Services Gateway on page 95 Packing the SRX340 Services Gateway for Shipment on page 95 Packing SRX340 Services Gateway Components for Shipment on page 96 Information You Might Need to Supply t...

Page 113: ...ge 91 Returning a SRX340 Services Gateway Component to Juniper Networks on page 92 Locating the SRX340 Services Gateway Chassis Serial Number and Agency Labels on page 93 Locating the SRX340 Services Gateway Mini Physical Interface Module Serial Number Label on page 93 Listing the SRX340 Services Gateway Component Details with the CLI on page 93 Information You Might Need to Supply to JTAC on page...

Page 114: ... with an ESD bag and place the packing foam on top of and around the device 10 Replace the accessory box on top of the packing foam 11 Securely tape the box closed 12 Write the Return Materials Authorization RMA number on the exterior of the box to ensure proper tracking Related Documentation Contacting Customer Support on page 91 Returning a SRX340 Services Gateway Component to Juniper Networks o...

Page 115: ...ntation Contacting Customer Support on page 91 Returning a SRX340 Services Gateway Component to Juniper Networks on page 92 Locating the SRX340 Services Gateway Chassis Serial Number and Agency Labels on page 93 Locating the SRX340 Services Gateway Mini Physical Interface Module Serial Number Label on page 93 Listing the SRX340 Services Gateway Component Details with the CLI on page 93 Information...

Page 116: ...Copyright 2016 Juniper Networks Inc 98 SRX340 Services Gateway Hardware Guide ...

Page 117: ...y Requirements on page 109 Laser and LED Safety Guidelines and Warnings on page 111 Maintenance and Operational Safety Guidelines and Warnings on page 115 Electrical Safety Guidelines and Warnings on page 121 Agency Approvals and Regulatory Compliance Information on page 125 99 Copyright 2016 Juniper Networks Inc ...

Page 118: ...Copyright 2016 Juniper Networks Inc 100 SRX340 Services Gateway Hardware Guide ...

Page 119: ...Juniper Networks technical publications NOTE You might find this information helpful in a particular situation or might otherwise overlook it CAUTION You need to observe the specified guidelines to avoid minor injury or discomfort to you or severe damage to the services gateway WARNING This symbol is used with laser warnings Unterminated optical connectors can emit invisible laser radiation Focusi...

Page 120: ...vvertenza indica un pericolo La situazione potrebbe causare infortuni alle persone Prima di lavorare su qualsiasi apparecchiatura occorre conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti Advarsel Dette varselsymbolet betyr fare Du befinner deg i en situasjon som kan føre til personskade Før du utfører arbeid på utstyr...

Page 121: ...to your eyes Do not perform any actions that create a potential hazard to people or make the equipment unsafe Never install or manipulate wiring during electrical storms Never install electrical jacks in wet locations unless the jacks are specifically designed for wet environments Do not open or remove chassis covers or sheet metal parts unless instructions are provided in this guide Such an actio...

Page 122: ...lectrostatic Discharge Damage to the SRX340 Services Gateway on page 107 Restricted Access Area Warning WARNING The services gateway is intended for installation in restricted access areas A restricted access area is an area to which access can be gained only by service personnel through the use of a special tool lock and key or other means of security and which is controlled by the authority resp...

Page 123: ...r ansvarlig for området Aviso Esta unidade foi concebida para instalação em áreas de acesso restrito Uma área de acesso restrito é uma área à qual apenas tem acesso o pessoal de serviço autorizado que possua uma ferramenta chave e fechadura especial ou qualquer outra forma de segurança Esta área é controlada pela autoridade responsável pelo local Atención Esta unidad ha sido diseñada para instalar...

Page 124: ...rt personell med riktig opplæring bør montere eller bytte ut dette utstyret Aviso Este equipamento deverá ser instalado ou substituído apenas por pessoal devidamente treinado e qualificado Atención Estos equipos deben ser instalados y reemplazados exclusivamenteporpersonaltécnicoadecuadamentepreparadoycapacitado Varning Denna utrustning ska endast installeras och bytas ut av utbildad och kvalifice...

Page 125: ...omponent that is removed from the chassis verify that the equipment end of your ESD strap is attached to one of the ESD points on the chassis Avoid contact between the component and your clothing ESD voltages emitted from clothing can damage components When removing or installing a component always place it component side up on an antistatic surface in an antistatic card rack or in an electrostati...

Page 126: ...Copyright 2016 Juniper Networks Inc 108 SRX340 Services Gateway Hardware Guide ...

Page 127: ...al fire first turn power off to the equipment at the source Then use a Type C fire extinguisher to extinguish the fire Type C fire extinguishers which use noncorrosive fire retardants such as carbon dioxide CO 2 and Halotron are most effective for suppressing electrical fires Type C fire extinguishers displace the oxygen from the point of combustion to eliminate the fire For extinguishing fire on ...

Page 128: ...eement We recommend that you dispose of any irreparably damaged equipment in an environmentally responsible manner Related Documentation SRX340 Services Gateway Definition of Safety Warning Levels on page 101 SRX340 Services Gateway General Safety Guidelines and Warnings on page 103 SRX340 Services Gateway Safety Requirements Warnings and Guidelines on page 104 Copyright 2016 Juniper Networks Inc ...

Page 129: ...ted ports or at fibers that connect to unknown sources Do not examine unterminated optical ports with optical instruments Avoid direct exposure to the beam WARNING Unterminated optical connectors can emit invisible laser radiation The lens in the human eye focuses all the laser power on the retina so focusing the eye directly on a laser source even a low power laser could permanently damage the ey...

Page 130: ... Safety Guidelines on page 111 Class 1 LED Product Warning on page 112 Laser Beam Warning on page 113 Radiation from Open Port Apertures Warning on page 114 Class 1 LED Product Warning WARNING Class 1 LED product Waarschuwing Klasse 1 LED product Varoitus Luokan 1 valodiodituote Attention Alarme de produit LED Class I Warnung Class 1 LED Produktwarnung Avvertenza Avvertenza prodotto LED di Classe ...

Page 131: ... direkt in den Strahl blicken und ihn nicht direkt mit optischen Geräten prüfen Avvertenza Non fissare il raggio con gli occhi né usare strumenti ottici per osservarlo direttamente Advarsel Stirr eller se ikke direkte p strlen med optiske instrumenter Aviso Não olhe fixamente para o raio nem olhe para ele directamente com instrumentos ópticos Atención No mirar fijamente el haz ni observarlo direct...

Page 132: ...non sono inseriti radiazioni invisibili possono essere emesse attraverso l apertura della porta Evitate di esporvi alle radiazioni e non guardate direttamente nelle aperture Advarsel Unngå utsettelse for stråling og stirr ikke inn i åpninger som er åpne fordi usynlig stråling kan emiteres fra portens åpning når det ikke er tilkoblet en fiberkabel Aviso Dada a possibilidade de emissão de radiação i...

Page 133: ...ent type dat door de fabrikant aanbevolen is Gebruikte batterijen dienen overeenkomstig fabrieksvoorschriften weggeworpen te worden Varoitus Räjähdyksen vaara jos akku on vaihdettu väärään akkuun Käytä vaihtamiseen ainoastaan saman tai vastaavantyyppistä akkua joka on valmistajan suosittelema Hävitä käytetyt akut valmistajan ohjeiden mukaan Attention Danger d explosion si la pile n est pas remplac...

Page 134: ...ing Explosionsfara vid felaktigt batteribyte Ersätt endast batteriet med samma batterityp som rekommenderas av tillverkaren eller motsvarande Följ tillverkarens anvisningar vid kassering av använda batterier Related Documentation Lightning Activity Warning on page 116 Jewelry Removal Warning on page 117 Operating Temperature Warning on page 118 Product Disposal Warning on page 120 Lightning Activi...

Page 135: ...onden sieraden inclusief ringen kettingen en horloges verwijderen Metalen voorwerpen worden warm wanneer ze met stroom en aarde zijn verbonden en kunnen ernstige brandwonden veroorzaken of het metalen voorwerp aan de aansluitklemmen lassen Varoitus Ennen kuin työskentelet voimavirtajohtoihin kytkettyjen laitteiden parissa ota pois kaikki korut sormukset kaulakorut ja kellot mukaan lukien Metallies...

Page 136: ...graves ou ficarem soldados aos terminais Atención Antes de operar sobre equipos conectados a líneas de alimentación quitarse las joyas incluidos anillos collares y relojes Los objetos de metal se calientan cuando se conectan a la alimentación y a tierra lo que puede ocasionar quemaduras graves o que los objetos metálicos queden soldados a los bornes Varning Tag av alla smycken inklusive ringar hal...

Page 137: ...il surriscaldamento dei services gateway non adoperateli in un locale che ecceda la temperatura ambientale massima di 40 ο C Per evitare che la circolazione dell aria sia impedita lasciate uno spazio di almeno 15 2 cm di fronte alle aperture delle ventole Advarsel Unngå overoppheting av eventuelle rutere i Juniper Networks services gateway Disse skal ikke brukes på steder der den anbefalte maksima...

Page 138: ...s et réglementations en vigueur Warnung Dieses Produkt muß den geltenden Gesetzen und Vorschriften entsprechend entsorgt werden Avvertenza L eliminazione finale di questo prodotto deve essere eseguita osservando le normative italiane vigenti in materia AdvarselEndeligdisponeringavdetteproduktetmåskjeihenholdtilnasjonale lover og forskrifter Aviso A descartagem final deste produto deverá ser efectu...

Page 139: ...lectrical Safety Guidelines and Warnings on page 121 AC Power Electrical Safety Guidelines on page 122 General Electrical Safety Guidelines and Warnings Install the services gateway in compliance with the following local national or international electrical codes United States National Fire Protection Association NFPA 70 United States National Electrical Code Canada Canadian Electrical Code Part 1...

Page 140: ...ateways with AC power supplies an external surge protective device SPD must be used at the AC power source The following electrical safety guidelines apply to AC powered services gateways AC powered services gateways are shipped with a three wire electrical cord with a grounding type plug that fits only a grounding type power outlet Do not circumvent this safety feature Equipment grounding should ...

Page 141: ...ocumentation In Case of Electrical Accident on page 121 General Electrical Safety Guidelines and Warnings on page 121 123 Copyright 2016 Juniper Networks Inc Chapter 28 Electrical Safety Guidelines and Warnings ...

Page 142: ...Copyright 2016 Juniper Networks Inc 124 SRX340 Services Gateway Hardware Guide ...

Page 143: ...Information Technology Equipment Safety IEC 60950 1 2005 A1 2009 Information Technology Equipment Safety All country deviations CB Scheme report EN 60825 1 2007 Safety of Laser Products Part 1 Equipment classification and requirements EMC EN 300 386 V1 6 1 Telecom Network Equipment EMC requirements EN 55032 2012 EN55032 2012 AC 2013 Electromagnetic compatibility of multimedia equipment Emission re...

Page 144: ...logy Equipment Immunity Characteristics Environmental Reduction of Hazardous Substances ROHS 6 Telco Common Language Equipment Identifier CLEI code Related Documentation SRX340 Services Gateway Acoustic Noise Compliance Statements on page 126 SRX340 Services Gateway EMC Requirements on page 127 SRX340 Services Gateway Acoustic Noise Compliance Statements The maximum emitted sound pressure level is...

Page 145: ...t this product may cause radio interference in which case the user may be required to take adequate measures VCCI A United States The services gateway has been tested and found to comply with the limits for a Class A digital device of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This...

Page 146: ...mentation SRX340 Services Gateway Agency Approvals on page 125 SRX340 Services Gateway Acoustic Noise Compliance Statements on page 126 Copyright 2016 Juniper Networks Inc 128 SRX340 Services Gateway Hardware Guide ...

Page 147: ...PART 7 Index Index on page 131 129 Copyright 2016 Juniper Networks Inc ...

Page 148: ...Copyright 2016 Juniper Networks Inc 130 SRX340 Services Gateway Hardware Guide ...

Page 149: ...ed States 127 components packing for shipment 96 console port RJ 45 38 conventions text and syntax xiv curly braces in configuration statements xv customer support xvi contacting JTAC xvi customer support contacting 92 D damage preventing ESD 107 documentation comments on xv E electrical accident procedures 121 safety guidelines and warnings 121 AC power 122 electromagnetic compatibility 33 EMC re...

Page 150: ...horization 92 S safety guidelines laser 111 services gateway packing for shipment 95 returning 92 setup wizard default setup mode 68 description 67 guided setup mode 68 shipment packing components 96 packing services gateway 95 signaling limitations 33 standards compliance 125 support requesting from JTAC 91 94 support technical See technical support syntax conventions xiv T technical support cont...

Reviews: