manualshive.com logo in svg

Juniper SRX5600, Hardware Manual

The Juniper SRX5600 is a powerful network security platform designed to provide enterprise-level protection. To understand its features and configuration options, refer to the comprehensive Hardware Manual. Download this essential manual for free from manualshive.com to harness the full potential of this advanced networking product.

Share
Download
background image

                    destination-address any;

                    application any;

                }

                then {

                    permit;

                }

            }

        }

    }

}

18. Commit the configuration to activate it on the device.

[edit]

admin@# commit

19. Optionally, configure additional properties by adding the necessary configuration statements. Then

commit the changes to activate them on the device.

[edit]

admin@# commit

20. When you have finished configuring the device, exit configuration mode.

[edit]

admin@# exit

admin@host>

Performing Initial Software Configuration Using J-Web

IN THIS SECTION

Configuring Root Authentication and the Management Interface from the CLI | 236

Configuring Interfaces, Zones, and Policies with J-Web | 237

235

Summary of Contents for SRX5600

Page 1: ...SRX5600 Services Gateway Hardware Guide Published 2020 02 14 ...

Page 2: ...are Guide Copyright 2020 Juniper Networks Inc All rights reserved The information in this document is current as of the date on the title page YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant Junos OS has no known time related limitations through the year 2038 However the NTP application is known to have some difficulty in the year 2036 END USER LICENSE AGRE...

Page 3: ... 26 SRX5600 Services Gateway Component Redundancy 27 SRX5600 Chassis 28 SRX5600 Services Gateway Chassis 29 SRX5600 Services Gateway Physical Specifications 31 SRX5600 Services Gateway Midplane Description 32 SRX5600 Services Gateway Cable Manager Description 33 SRX5600 Services Gateway Craft Interface Overview 34 SRX5600 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff Lamp Test Butto...

Page 4: ...r Cable Specifications for the SRX5600 Services Gateway 58 DC Power Cable Lug Specifications for the SRX5600 Services Gateway 59 DC Power Circuit Breaker Requirements for the SRX5600 Services Gateway 59 DC Power Source Cabling for the SRX5600 Services Gateway 60 SRX5600 Services Gateway Chassis Grounding Point Specifications 61 SRX5600 Services Gateway Grounding Cable Lug Specification 62 SRX5600 ...

Page 5: ...escription 98 Services Processing Card SRX5K SPC 2 10 40 Specifications 99 Services Processing Card SRX5K SPC 4 15 320 Specifications 103 Services Processing Card SRX5K SPC3 Specifications 108 SRX5600 Services Gateway Interface Card Description 112 Modular Port Concentrator SRX5K MPC Specifications 114 SRX5K MPC3 40G10G Specifications 117 SRX5K MPC3 100G10G Specifications 120 MIC with 20x1GE SFP I...

Page 6: ...w Requirements 166 Calculating Power Requirements for the SRX5600 Services Gateway 166 SRX5600 Network Cable and Transceiver Planning 178 Routing Engine Interface Cable and Wire Specifications for the SRX5600 Services Gateway 178 Signal Loss in Multimode and Single Mode Fiber Optic Cable for the SRX5600 Services Gateway 179 Attenuation and Dispersion in Fiber Optic Cable for the SRX5600 Services G...

Page 7: ... Without a Mechanical Lift 201 Tools Required to Install the SRX5600 Services Gateway Without a Mechanical Lift 202 Removing Components from the SRX5600 Chassis Before Installing It Without a Lift 202 Removing the Power Supplies Before Installing the SRX5600 Services Gateway Without a Lift 202 Removing the Fan Tray Before Installing an SRX5600 Services Gateway Without a Lift 203 Removing Cards Bef...

Page 8: ...3 Connecting Power to a DC Powered SRX5600 Services Gateway 224 Powering On a DC Powered SRX5600 Services Gateway 227 Powering Off the SRX5600 Services Gateway 228 Performing the Initial Software Configuration for the SRX5600 229 SRX5600 Services Gateway Software Configuration Overview 229 Initially Configuring the SRX5600 Services Gateway 230 Performing Initial Software Configuration Using J Web ...

Page 9: ...r Supplies 253 Replacing an SRX5600 Services Gateway AC Power Supply 254 Removing an SRX5600 Services Gateway AC Power Supply 255 Installing an SRX5600 Services Gateway AC Power Supply 256 Replacing an SRX5600 Services Gateway AC Power Supply Cord 257 Disconnecting an SRX5600 Services Gateway AC Power Supply Cord 258 Connecting an SRX5600 Services Gateway AC Power Supply Cord 258 Replacing an SRX5...

Page 10: ... Modules 302 Maintaining Interface Cards and SPCs on the SRX5600 Services Gateway 303 Holding an SRX5600 Services Gateway Card 305 Storing an SRX5600 Services Gateway Card 307 Replacing SRX5600 Services Gateway IOCs 308 Removing an SRX5600 Services Gateway IOC 308 Installing an SRX5600 Services Gateway IOC 310 Replacing SRX5600 Services Gateway Flex IOCs 313 Removing an SRX5600 Services Gateway Fl...

Page 11: ...RX5600 Services Gateway SFP or XFP Transceiver 350 Installing an SRX5600 Services Gateway SFP or XFP Transceiver 352 Replacing the SRX5600 Services Gateway Cable Manager 353 Removing the SRX5600 Services Gateway Cable Manager 353 Installing the SRX5600 Services Gateway Cable Manager 354 Replacing a Routing Engine in an SRX Series High End Chassis Cluster 355 Replacing a Routing Engine USB Flash Dr...

Page 12: ...Gateway 412 Listing the SRX5600 Services Gateway Component Serial Numbers with the CLI 413 Locating the SRX5600 Services Gateway Chassis Serial Number Label 414 Locating the SRX5600 Services Gateway Power Supply Serial Number Labels 414 Locating the SRX5600 Services Gateway Craft Interface Serial Number Label 415 Information You Might Need to Supply to JTAC 416 Required Tools and Parts for Packing...

Page 13: ...Removal Warning 446 Lightning Activity Warning 448 Operating Temperature Warning 449 Product Disposal Warning 451 General Electrical Safety Guidelines and Warnings 452 Prevention of Electrostatic Discharge Damage 453 AC Power Electrical Safety Guidelines 454 AC Power Disconnection Warning 456 DC Power Electrical Safety Guidelines 457 DC Power Electrical Safety Guidelines 457 DC Power Disconnection...

Page 14: ...ng 480 Action to Take After an Electrical Accident 480 SRX5600 Services Gateway Agency Approvals 481 SRX5600 Services Gateway Compliance Statements for EMC Requirements 482 Canada 482 European Community 482 Israel 483 Japan 483 United States 483 Statements of Volatility for Juniper Network Devices 484 xiv ...

Page 15: ...the product documentation page on the Juniper Networks website at https www juniper net documentation If the information in the latest release notes differs from the information in the documentation follow the product Release Notes Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts These books go beyond the technical documentation to explore the nuances...

Page 16: ...1 From the HTML or PDF version of the manual copy a configuration example into a text file save the file with a name and copy the file to a directory on your routing platform For example copy the following configuration to a file and name the file ex script conf Copy the ex script conf file to the var tmp directory on your routing platform system scripts commit file ex script xsl interfaces fxp0 d...

Page 17: ... platform commit file ex script snippet xsl 2 Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode command edit user host edit system scripts edit system scripts 3 Merge the contents of the file into your routing platform configuration by issuing the load merge relative configuration mode command edit system scripts user host load merge relative...

Page 18: ...e text and syntax conventions used in this guide Table 2 Text and Syntax Conventions Examples Description Convention To enter configuration mode type the configure command user host configure Represents text that you type Bold text like this user host show chassis alarms No alarms currently active Represents output that appears on the terminal screen Fixed width text like this A policy term is a n...

Page 19: ...b default metric metric Encloses optional keywords or variables angle brackets broadcast multicast string1 string2 string3 Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol The set of choices is often enclosed in parentheses for clarity pipe symbol rsvp Required for dynamic MPLS only Indicates a comment specified on the same line as the configurat...

Page 20: ...stem Click TechLibrary Feedback on the lower right of any page on the Juniper Networks TechLibrary site and do one of the following Click the thumbs up icon if the information on the page was helpful to you Click the thumbs down icon if the information on the page was not helpful to you or if you have suggestions for improvement and use the pop up form to provide feedback E mail Send your comments...

Page 21: ...uniper net Find product documentation https www juniper net documentation Find solutions and answer questions using our Knowledge Base https kb juniper net Download the latest versions of software and review release notes https www juniper net customers csc software Search technical bulletins for relevant hardware and software notifications https kb juniper net InfoCenter Join and participate in t...

Page 22: ...eway System Overview 25 SRX5600 Chassis 28 SRX5600 Services Gateway Cooling System Description 42 SRX3400 and SRX5600 Services Gateways Air Deflector Kits 45 SRX5600 Power System 47 SRX5600 Host Subsystem 63 SRX5600 Line Cards and Modules 91 ...

Page 23: ......

Page 24: ...provides eight slots that you can populate with two Switch Control Boards SCBs and six other cards of the following types Services Processing Cards SPCs provide the processing capacity to run integrated services such as firewall IPsec and IDP Modular PIC Concentrators MPCs provide Ethernet interfaces that connect the services gateway to your network I O cards IOCs provide Ethernet interfaces that ...

Page 25: ...ts against malware attacks that can lead to data breaches and lost productivity Advanced persistent threats perpetrated through social networking attacks and the latest phishing scams with sophisticated e mail filtering and content blockers Lost productivity and the impact of malicious URLs and extraneous or malicious content on the network to help maintain bandwidth Advanced Threat Prevention ATP...

Page 26: ...stem consists of a Routing Engine installed in an SCB The device must have one host subsystem installed You can install a second SCB for redundancy If a second SCB is installed the host subsystem SCB functions as the master and the other functions as the backup If the SCB of the host subsystem fails the other SCB takes over as the master Power supplies In the low line 110 V AC power configuration ...

Page 27: ...y half of the components in the device and the other power supply supports the remaining components The addition of two power supplies provides full power redundancy If one power supply fails or is removed the remaining power supplies instantly assume the entire electrical load without interruption Two power supplies provide the maximum configuration with full power for as long as the device is op...

Page 28: ... mm or larger enclosed cabinets 19 in equipment racks or telco open frame racks Up to five services gateways can be installed in one standard 48 U rack if the rack can handle their combined weight which can be greater than 1100 lb 500 kg See SRX5600 Services Gateway Physical Specifications on page 31 for physical specifications for the SRX5600 Services Gateway CAUTION Before removing or installing...

Page 29: ...L CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT STATUS SPU0 SERVICE STATUS SPU1 SERVICE HA OK FAIL CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT SPCs g030218 IOCs Figure 2 Rear View of a Fully Configured AC Powered Services Gateway Chassis 30 ...

Page 30: ...ations Value Description 14 0 in 35 6 cm high 17 45 in 44 3 cm wide 24 5 in 62 2 cm deep from front mounting bracket to chassis rear Total depth including cable management system 27 75 in 70 5 cm Chassis dimensions Chassis with midplane fan tray air filter and cable management system 65 5 lb 29 7 kg Maximum configuration 220 lb 100 kg Services Gateway weight SRX5K RE 13 20 2 4 lb 1 1 kg SRX5K RE 1...

Page 31: ...ith SRX5K SCB and SRX5K RE 13 20 6 2 lb 2 8 kg High capacity DC power supply weight 5 0 lb 2 3 kg Standard capacity AC power supply weight only supported on devices with SRX5K SCB and SRX5K RE 13 20 6 6 lb 3 0 kg High capacity AC power supply weight SRX5600 Services Gateway Midplane Description The midplane is located toward the rear of the chassis and forms the rear of the card cage see Figure 4 ...

Page 32: ...control of the system The enhanced midplane supports Junos OS Release15 1X49 D10 It provides greater per slot fabric performance and signal integrity along with error free high speed data transfer and it reduces cross talk The midplane supports link speeds up to 10 Gbps and is not field replaceable Figure 4 Midplane SRX5600 Services Gateway Cable Manager Description The cable management system see...

Page 33: ...t Interface Overview The craft interface shows you status and troubleshooting information at a glance and lets you perform many system control functions It is hot insertable and hot removable The craft interface is located on the front of the services gateway above the upper fan tray See Figure 7 on page 35 34 ...

Page 34: ...Two large alarm LEDs are located at the upper right of the craft interface The circular red LED lights to indicate a critical condition that can result in a system shutdown The triangular yellow LED lights to indicate a less severe condition that requires monitoring or maintenance Both LEDs can be lit simultaneously A condition that causes an LED to light also activates the corresponding alarm rel...

Page 35: ...ace to light for testing when pressed and held SRX5600 Services Gateway Craft Interface Host Subsystem LEDs The host subsystem has three LEDs located in the middle of the craft interface that indicate its status The LEDs labeled RE0 show the status of the Routing Engine and SCB in slot 0 The LEDs labeled RE1 show the status of the Routing Engine and SCB in slot 1 Table 6 on page 36 describes the f...

Page 36: ...ard OK Fail LEDs Each slot in the card cage has a pair of LEDs on the craft interface that indicates the status of the card installed in it The card LEDs are located along the bottom edge of the craft interface and are labeled 0 and 1 for the slots reserved for SCBs and 0 through 5 for the remaining slots Table 8 on page 37 describes the functions of the OK and Fail LEDs Table 8 Card OK Fail LEDs ...

Page 37: ...ne buttons are not supported for removal and replacement of SPCs or SCB CAUTION While traffic is passing through the Services Gateway particularly if the device is configured as part of a high availability HA cluster we strongly recommend that you do not push any of the Online Offline buttons To take an MPC offline using the Online Offline buttons 1 Press and hold the corresponding card s Online O...

Page 38: ... 35 7 0 1024 13 25 1 Online 46 4 0 1024 13 25 2 Offline Offlined by cli command After pushing MPC online button user host show chassis fpc Temp CPU Utilization Memory Utilization Slot State C Total Interrupt DRAM MB Heap Buffer 0 Online 34 5 0 1024 13 25 1 Online 46 3 0 1024 13 25 2 Offline Offlined by button press To bring an MPC back online using the Online Offline buttons 1 Press and hold the c...

Page 39: ...cli command 2 Online 49 37 0 1024 14 25 The command output indicates the MPC is offline Bring the MPC online for the first time by using the following CLI command user host request chassis fpc slot 1 online node0 Online initiated use show chassis fpc to verify Verify that the MPC is online user host request chassis fpc slot 1 online node 0 node0 FPC 1 already online The command output indicates th...

Page 40: ... two sets of connectors one set for each of the two alarms major and minor For each alarm color there are three connectors Table 10 on page 41 describes the functions of the connectors Table 10 Alarm Relay Contact Functions Function Contact Name Contact Label Connects the alarm relay to an external alarm reporting device that activates when the circuit between C and NC is closed Normally Closed NC...

Page 41: ... The alarm relay contacts can also be used to activate other devices such as bells or buzzers Figure 9 Example Alarm Reporting Device g030297 SRX5600 Services Gateway Cooling System Description The cooling system consists of the following components Fan tray Air filter The cooling system components work together to keep all services gateway components within the acceptable temperature range see Fi...

Page 42: ...t is exhausted out the side of the system The air intake to cool the power supplies is located in the front of the device above the craft interface The exhaust for the power supplies is located on the rear bulkhead power supplies Each fan has an LED that displays its status The fan LEDs are located on the top left of the craft interface Figure 10 Airflow Through the Chassis The host subsystem moni...

Page 43: ... 12 Air Filter RELATED DOCUMENTATION Maintaining the Fan Tray on the SRX5600 Services Gateway 247 Maintaining the Air Filter on the SRX5600 Services Gateway 250 Troubleshooting the SRX5600 Services Gateway Cooling System 397 44 ...

Page 44: ...side plenum mounted on the intake side of the device The intake air plenum directs air into the services gateway and the exhaust air plenum collects the exhaust air on the opposite side of the device The exhaust plenum directs the exhausted air into the intake exhaust boxes above and below the unit where it is expelled into the air space behind the services gateway The air deflector kit requires a...

Page 45: ...lector kit Figure 13 on page 46 and Figure 14 on page 46 show the SRX3400 and SRX5600 Services Gateways respectively installed in typical four post mounting racks with the air deflector kit parts in place Figure 13 SRX3400 Services Gateway Air Deflector Kit g036126 Figure 14 SRX5600 Services Gateway Air Deflector Kit Services Gateway Chassis Contents Omitted for Clarity g030308 RELATED DOCUMENTATI...

Page 46: ...tions for the SRX5600 Services Gateway 59 DC Power Circuit Breaker Requirements for the SRX5600 Services Gateway 59 DC Power Source Cabling for the SRX5600 Services Gateway 60 SRX5600 Services Gateway Chassis Grounding Point Specifications 61 SRX5600 Services Gateway Grounding Cable Lug Specification 62 SRX5600 Services Gateway Power System Overview The services gateway uses either AC or DC power ...

Page 47: ...t voltages the power distribution in the services gateway chassis is either shared or zoned Table 13 on page 48 summarizes the available power supply types their output capacities and their redundancy and power distribution schemes For detailed power supply specifications see SRX5600 Services Gateway AC Power Supply Specifications on page 51 or SRX5600 Services Gateway DC Power Supply Specificatio...

Page 48: ... supplies Two power supplies are required to support the services gateway electrical requirements and you can install two additional power supplies so that each zone has an extra power supply that takes over in case the first power supply fails Table 14 on page 49 Table 14 SRX5600 Services Gateway Power Distribution DC Power Supplies Provide Power To Power Supplies Zone Bottom slots 0 and 1 for SC...

Page 49: ...der to use high capacity AC power supplies WARNING The services gateway is pluggable type A equipment installed in a restricted access location It has a separate protective earthing terminal sized for UNC 1 4 20 ground lugs provided on the chassis in addition to the grounding pin of the power supply cord This separate protective earthing terminal must be permanently connected to earth 50 ...

Page 50: ... 240 VAC nominal AC input voltage 50 to 60 Hz nominal AC input line frequency Table 16 AC Power System Specifications High Capacity High Line 220V High Capacity Low Line 110V Normal Capacity High Line 220V Normal Capacity Low Line 110V Item 2 2 3 1 2 2 3 1 Redundancy 2050 W 1167 W 1590 W 1027 W Output power maximum per power supply 4100 W 3501 W 3180 W 3081 W Output power maximum per system SRX560...

Page 51: ...rame mounted power distribution panels one of which can be located at the top of the rack that houses the services gateway An AC power cord connects each power supply to the power distribution panel The services gateway is not shipped with AC power cords You must order power cords separately using the model number shown in Table 18 on page 52 The C19 appliance coupler at the female end of the cord...

Page 52: ...I 23 16 VII 230 VAC 50 Hz AC CBL M PWR RA IT Italy JIS 8303 125 VAC 50 or 60 Hz AC CBL PWR RA JP15 Japan NEMA L6 20P 220 VAC 50 or 60 Hz AC CBL M PWR RA JP NEMA 5 15P 125 VAC 60 Hz AC CBL PWR RA US15 North America NEMA L5 15P 125 VAC 60 Hz AC CBL PWR RA TWLK US15 NEMA 6 20 250 VAC 60 Hz AC CBL M PWR RA US NEMA L6 20P 250 VAC 60 Hz AC CBL M PWR RA TWLK US BS89 13 240 VAC 50 Hz AC CBL M PWR RA UK Un...

Page 53: ...chassis before connecting power See Grounding the SRX5600 Services Gateway on page 220 for instructions CAUTION Power cords and cables must not block access to device components or drape where people could trip on them NOTE In North America AC power cords must not exceed 4 5 m approximately 14 75 ft in length to comply with National Electrical Code NEC Sections 400 8 NFPA 75 5 2 2 and 210 52 and C...

Page 54: ...the power infrastructure SRX5600 Services Gateway DC Power Supply Each DC power supply consists of one DC input 48 VDC and return one 40 A 48 VDC circuit breaker a fan and LEDs to monitor the status of the power supply Two different DC power supply types are available Figure 18 on page 55 and Figure 19 on page 56 show the power supplies Each DC power supply has a single DC input 48 VDC and return ...

Page 55: ...ions Table 20 on page 57 lists the DC power system specifications Table 19 DC Power Supply Electrical Specifications Specification Item High Capacity Standard Capacity DIP 1 70 A Input DIP 0 60 A Input 2440 W 2240 W 1600 W Maximum output power Minimum 40 5 VDC Nominal 48 VDC Operating range 40 5 to 72 VDC DC input voltage 54 2 A 48 V nominal operating voltage 50 A 48 V nominal operating voltage 33...

Page 56: ...00 Services Gateway DC Power Supply LEDs Each DC power supply faceplate contains three LEDs that indicate the status of the power supply see Table 21 on page 57 In addition a power supply failure triggers the red alarm LED on the craft interface NOTE An SCB must be present for the PWR OK LED to go on Table 21 DC Power Supply LEDs Description State Color Label Power supply is not functioning normal...

Page 57: ... reverse polarity On Amber DC Power Cable Specifications for the SRX5600 Services Gateway Table 22 on page 58 summarizes the specifications for the power cables which you must supply Table 22 DC Power Cable Specifications Specification Quantity Cable Type Minimum 60 C wire or as required by the local code Four 6 AWG 13 3 mm 2 cables for each power supply Power CAUTION You must ensure that power co...

Page 58: ...rthing terminal Metric M6 and English 20 screw ground lugs provided on the chassis This separate protective earth terminal must be permanently connected to earth DC Power Circuit Breaker Requirements for the SRX5600 Services Gateway Each DC power supply has a single DC input 48 VDC and return that requires a dedicated facility circuit breaker We recommend that you use a customer site circuit break...

Page 59: ...s in slots PEM2 and PEM3 must be powered by dedicated power feeds derived from feed B This configuration provides the commonly deployed A B feed redundancy for the system CAUTION You must ensure that power connections maintain the proper polarity The power source cables might be labeled and to indicate their polarity There is no standard color coding for DC power cables The color coding used by th...

Page 60: ...damage the services gateway The services gateway chassis has one grounding point at the upper right corner of the back panel The grounding point consists of two threaded holes spaced 0 625 in 15 86 mm apart Figure 22 on page 61 The grounding point holes fit UNC 1 4 20 screws The accessory box shipped with the services gateway includes the cable lug that attaches to the grounding cable and two UNC ...

Page 61: ...page 62 and two UNC 1 4 20 screws used to secure the grounding cable to the grounding points Figure 23 Grounding Cable Lug Crimp area 6 AWG conductor All measurements in inches 0 28 diameter each hole 2 25 0 25 0 37 0 625 g001188 0 55 End view 0 08 CAUTION Before services gateway installation begins a licensed electrician must attach a cable lug to the grounding and power cables that you supply A ...

Page 62: ...K RE 1800X4 Specifications 80 Routing Engine SRX5K RE 13 20 Overview 83 Routing Engine SRX5K RE 13 20 Specifications 84 Routing Engine SRX5K RE3 128G Specifications 87 SRX5600 Services Gateway Host Subsystem Description The host subsystem is composed of a Routing Engine installed in a Switch Control Board SCB The host subsystem provides the routing and system management functions of the services g...

Page 63: ... or SRX5K SCB4 The host subsystem has three LEDs that display its status The host subsystem LEDs are located in the middle of the craft interface Switch Control Board SRX5K SCB Overview The Switch Control Board SCB provides the following functions Powers on and powers off IOCs and SPCs Controls clocking system resets and booting Monitors and controls system functions including fan speed board powe...

Page 64: ...RX5600 and SRX5800 Services Gateway Card Reference at www juniper net documentation Switch Control Board SRX5K SCB Specifications The SRX5K SCB Switch Control Board SCB Figure 25 on page 66 performs the following functions Powers on and powers off I O cards IOCs and Services Processing Cards SPCs Controls clocking system resets and booting Monitors and controls system functions including fan speed...

Page 65: ... Switch Control Board SRX5K SCB Each SCB consists of the following components Chassis management Ethernet switch I2C bus logic used for low level communication with each component Component redundancy circuitry Gigabit Ethernet switch that is connected to the embedded CPU complex on all components Switch fabric Provides the switching functions for the IOCs Control FPGA Provides the Peripheral Comp...

Page 66: ...nly bottom slots 0 and 1 0 SRX5600 Only bottom slots 0 and 1 SRX5800 Only center slots 0 1 and 2 6 Supported Slots 150 W Power Requirement Approximately 10 lb 4 5 kg Weight OK FAIL LED one bicolor Green The SCB is operating normally Red The SCB has failed and is not operating normally Off The SCB is powered down FABRIC ONLY LED Green The SCB is operating in fabric only mode Off The SCB is operatin...

Page 67: ...acity scale and improved services Some key attributes of the SRX5K SCBE are A bandwidth of 120 Gbps per slot with redundant fabric support and improved fabric performance by using the next generation fabric XF chip A centralized clocking architecture that supports clock cleanup and distribution The Stratum 3 clock module performs clock monitoring filtering and holdover in a centralized chassis loc...

Page 68: ...nication with each component Component redundancy circuitry Control Board Routing Engine mastership mechanism Gigabit Ethernet switch that is connected to the embedded CPU complex on all components Switch fabric to provide the switching functions for the MPCs 1000BASE T Ethernet controller to provide a 1 Gbps Ethernet link between the Routing Engines 69 ...

Page 69: ... per slot Description Junos OS Release 12 1X47 D15 and later Software release Slot for Routing Engine Cables and connectors None Controls SRX5400 Only bottom slots 0 and 1 0 SRX5600 Only bottom slots 0 and 1 SRX5800 Only center slots 0 1 and 2 6 Supported slots 160 W at 131º F 55º C 130 W at 104º F 40º C 120 W at 77º F 25º C Power requirement 9 6 lb 4 4 kg with Routing Engine Weight 70 ...

Page 70: ...ial number location SRX5K SCBE LEDs Table 23 on page 71 describes the SRX5K SCBE LEDs and their states Table 23 SRX5K SCBE LEDs Description State Color Label Fabric is in active mode On steadily Green FABRIC ACTIVE SRX5K SCBE operates in fabric only mode On steadily Green FABRIC ONLY SRX5K SCBE operates in fabric control board mode Off None 71 ...

Page 71: ...and fabric link speed of 8 36 Gbps supports a bandwidth of 205 Gbps per slot with redundant fabric support and 308 Gbps per slot without redundancy With the enhanced midplane and fabric link speed of 10 2 Gbps supports a bandwidth of 249 Gbps per slot with redundant fabric support and 374 Gbps per slot without redundancy with the enhanced midplane Improved fabric performance with the next generati...

Page 72: ...rol field programmable gate array FPGA to provide the Peripheral Component Interconnect PCI interface to the Routing Engine Circuits for chassis management and control Power circuits for the Routing Engine and SCB3 LEDs to provides status of the SCB3 SCB3 with slot for Routing Engine Description Junos OS Release 15 1X49 D10 and later Software release Slot for Routing Engine Cables and connectors N...

Page 73: ...Ds Table 24 on page 74 describes the SCB3 LEDs and their states Table 24 SRX5K SCB3 LEDs Description State Color Label Fabric is in active mode On steadily Green FABRIC ACTIVE SCB3 is online On steadily Green OK FAIL SCB3 has failed On steadily Red SCB3 is offline Off Port is enabled and link is established On steadily Green LINK Port is disabled or no link is established Off 74 ...

Page 74: ...ces Gateways You can change the fabric mode of SCB4 from Increased Fabric Bandwidth mode to Redundant Fabric mode using the CLI If you change the fabric mode of SCB4 to Redundant Fabric mode you must install two SCB4s in SRX5600 and you can install either two or three SCB4s in SRX5800 Services Gateways If you are upgrading from SCB3 Redundant Fabric mode is the default fabric mode in SCB2 and SCB3...

Page 75: ...ifications SRX5K SCB4 SCB4 consists of the following components LEDs to provides status of the SCB4 Circuits for chassis management and control Power circuits for the Routing Engine and SCB4 SCB4 with slot for SRX5K RE 1800X4 and SRX5K RE3 128G Routing Engines Description Junos OS Release 19 3R1 and later Software release Slot for Routing Engine Cables and connectors 76 ...

Page 76: ...reliable power and cooling you must install SRX Series high capacity power supplies and fan trays in the SRX Series chassis Cooling requirement Weight 13 6 lb 6 2 kg Width 15 7 in 39 87 cm Depth 21 2 in 53 85 cm Height 1 2 in 3 05 cm Weight and Dimensions The serial number label is located as shown in Figure 32 on page 77 Figure 32 SRX5K SCB4 Serial Number Label g100577 Serial number ID label Seri...

Page 77: ...ine Off FABRIC The switch fabric on this board is in Active mode On steadily Green ACTIVE The switch is in Fabric Only mode On steadily Green ONLY SFP port is enabled and link is established On steadily Green LINK XGE port SFP port is disabled or no link is established Off Indicates the status of the GPS clocking interface and the link is OK On steadily Green GPS Activity on the clocking interface...

Page 78: ...stem administrators can issue Junos OS CLI commands to manage the services gateway The ports function as follows AUX Connects the Routing Engine to a laptop modem or other auxiliary device through a serial cable with an RJ 45 connector CONSOLE Connects the Routing Engine to a system console through a serial cable with an RJ 45 connector ETHERNET Connects the Routing Engine through an Ethernet conn...

Page 79: ...ace through which you can install the Junos OS manually Junos OS supports USB version 1 0 and 2 0 CompactFlash card Provides primary storage for software images configuration files and microcode The CompactFlash card is fixed and is inaccessible from outside the device Solid state drive SSD Provides secondary storage for log files for generating core files and for rebooting the system if the Compa...

Page 80: ...anagement LAN or any other device that plugs into an Ethernet connection for out of band management Cables and connectors RESET button Reboots the Routing Engine when pressed Controls Front panel slot in an SCB installed in SRX5400 Bottom slot 0 SRX5600 Bottom slots 0 or 1 SRX5800 Center slots 0 or 1 NOTE The services gateway host subsystem Routing Engine must be installed in the SCB in slot 0 A R...

Page 81: ...ed directly on the faceplate of the Routing Engine Table 26 on page 82 describes the Routing Engine LEDs and their states Table 26 SRX5K RE 1800X4 LEDs Description State Color Label Routing Engine is the master On steadily Blue MASTER Indicates activity on the SSD or CompactFlash card Blinking Green STORAGE Routing Engine is transitioning online Blinking Green ONLINE Routing Engine is functioning ...

Page 82: ...s not improve resiliency or redundancy The second Routing Engine and the Switch Control Board SCB in which it is installed do not constitute a host subsystem The only function of the second Routing Engine is to enable the hardware infrastructure that enables the Chassis Cluster Control 1 port on the Services Processing Card SPC used for chassis cluster control links If you install only one Routing...

Page 83: ...a host subsystem The only function of the second Routing Engine is to enable the hardware infrastructure that enables the chassis cluster control 1 port on the Services Processing Card SPC used for chassis cluster control links If you install only one Routing Engine in the services gateway you must install it in the slot in the front panel of SCB0 If you install a second Routing Engine to use the ...

Page 84: ...00 and SRX5800 Services Gateways Description Junos OS Release 9 2 and later Junos OS Release 10 0 and later required to install a second Routing Engine Software release AUX Connects the Routing Engine to a laptop a modem or another auxiliary device through a cable with an RJ 45 connector CONSOLE Connects the Routing Engine to a system console through a cable with an RJ 45 connector ETHERNET Connec...

Page 85: ...e so the MASTER LED should always be lit OK FAIL LED one bicolor Off The Routing Engine is operating normally Red The Routing Engine has failed and is not operating normally ONLINE LED Blinking green The Routing Engine is coming online Steady green The Routing Engine is functioning normally LEDs The serial number label is located on the right side of the top of the Routing Engine as shown in Figur...

Page 86: ...ng Engine Figure 38 SRX5K RE3 128G Routing Engine Front View g100572 2 1 3 4 5 8 6 7 9 10 6 1 ONLINE OFFLINE button Extractor clips 7 2 SSD LEDs DISK1 and DISK2 Auxiliary port AUX 8 3 USB ports USB1 and USB2 Console port CONSOLE 9 4 RESET button Management port MGMT 10 5 SSD card slot cover Routing Engine status LEDs ONLINE OK FAIL and MASTER Routing Engine for SRX5400 SRX5600 and SRX5800 Services...

Page 87: ...hen pressed Controls Front panel slot in an SCB installed in SRX5400 Bottom slot 0 SRX5600 Bottom slots 0 or 1 SRX5800 Center slots 0 or 1 NOTE The services gateway host subsystem Routing Engine must be installed in the SCB in slot 0 A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations NOTE In the SRX5600 or SRX5800 Services Gateways chas...

Page 88: ...ing Engine DRAM Provides storage for the routing and forwarding tables and for other Routing Engine processes One 10 Gigabit Ethernet interface between the Routing Engine and Switch Control Board Extractor clips Control the locking system that secures the Routing Engine Interface ports The AUX CONSOLE and MGMT ports provide access to management devices Each Routing Engine has one 10 100 1000 Mbps ...

Page 89: ...hen pressed SSD1 primary and SSD2 secondary Solid state drives SSD Two 200 GB each slim solid state drives that provide storage for software images configuration files microcode log files and memory dumps The Routing Engine reboots from SSD2 when boot from primary SSD1 fails Captive screws Secures the Routing Engine SRX5K RE3 128G Routing Engine LEDs Each Routing Engine has four LEDs that indicate...

Page 90: ...a SRX5K RE3 128G Routing Engine follows this sequence the USB device SSD1 SSD2 and LAN SSD1 is the primary boot device The boot sequence is tried twice for SSD1 and SSD2 SRX5600 Line Cards and Modules IN THIS SECTION SRX5400 SRX5600 and SRX5800 Services Gateway Card Overview 92 SRX5600 Services Gateway Card Terminology 93 Cards Supported on SRX5400 SRX5600 and SRX5800 Services Gateways 94 SRX5600 ...

Page 91: ...he SRX5400 SRX5600 and SRX5800 Services Gateways I O cards IOCs provide additional physical network connections to the services gateway Their primary function is to deliver data packets arriving on the physical ports to the Services Processing Cards SPCs and to forward data packets out the physical ports after services processing Flex IOCs have two slots for port modules that add additional physic...

Page 92: ...or system management and user access to the device Port modules fit into slots in Flex IOCs and add additional physical network interface ports to the services gateway Modular Interface Cards MICs fit into slots in MPCs and add additional physical network interface ports to the services gateway MPCs and MICs are similar in form and function to Flex IOCs and port modules However the two use differe...

Page 93: ...ays Table 28 Supported Cards for SRX5400 SRX5600 and SRX5800 Services Gateways Last Supported Junos OS Release Earliest Supported Junos OS Release Card Name and Model Number SRX5400 SRX5600 and SRX5800 SRX5600 and SRX5800 SRX5400 SPCs 15 1X49 9 2 Not supported Services Processing Card SRX5K SPC 2 10 40 Specifications 12 1X44 D10 12 1X46 D10 Services Processing Card SRX5K SPC 4 15 320 Specification...

Page 94: ...rted I O Card SRX5K 4XGE XFP Specifications 15 1X49 10 2 Not supported Flex I O Card SRX5K FPC IOC Specifications 12 1X46 D10 12 1X46 D10 Modular Port Concentrator SRX5K MPC Specifications 15 1X49 D10 15 1X49 D10 SRX5K MPC3 40G10G Specifications 15 1X49 D10 15 1X49 D10 SRX5K MPC3 100G10G Specifications 19 3R1 19 3R1 SRX5K IOC4 10GSpecifications 19 3R1 19 3R1 SRX5K IOC4 MRAT Specifications SCBs 15 ...

Page 95: ...ons 10 2 Not supported Flex I O Card Port Module SRX IOC 16GE TX Specifications 10 2 Not supported Flex I O Card Port Module SRX IOC 4XGE XFP Specifications 12 1X46 D10 12 1X46 D10 MIC with 1x100GE CFP Interface SRX MIC 1X100G CFP 12 1X46 D10 12 1X46 D10 MIC with 2x40GE QSFP Interfaces SRX MIC 2X40G QSFP 12 1X46 D10 12 1X46 D10 MIC with 10x10GE SFP Interfaces SRX MIC 10XG SFPP 12 1X47 D10 12 1X47 ...

Page 96: ... SRX5K SCB3 SRX5K RE3 128G SRX5600 SRX5800 SRX5K SCB4 SRX5K RE3 128G SRX5600 SRX5800 SRX5K SCB4 SRX5K RE 1800X4 SRX5K 4XGE XFP SRX5K 40GE SFP SRX5K FPC IOC SRX5K MPC3 40G10G SRX5K MPC3 100G10G SRX5K SCB3 SRX5K RE 1800X4 SRX5K SCBE SRX5K RE 1800X4 SRX5600 SRX5800 SRX5K SCB SRX5K RE 13 20 Model Numbers SRX5K RE 1800X4 SRX5K SCBE SRX5600 SRX5800 SRX5K SCB SRX5K RE 13 20 SRX5400 SRX5K SCB SRX5K RE 13 ...

Page 97: ...as Services Processing Units SPUs which provide the processing power to run integrated services such as firewall IPsec and IDP see Figure 42 on page 99 All traffic traversing the services gateway is passed to an SPU to have services processing applied to it Traffic is intelligently distributed by interface cards to SPUs for services processing The services gateway must have one SPC installed You c...

Page 98: ... page 100 All traffic traversing the services gateway is passed to an SPU to have services processing applied to it Traffic is intelligently distributed by I O cards IOCs to SPUs for services processing The services gateway must have at least one SPC installed You can install additional SPCs to increase services processing capacity You can install SPCs in any of the slots that are not reserved for...

Page 99: ...etworks device that uses a third party optic or cable the Juniper Networks Technical Assistance Center JTAC can help you diagnose the source of the problem Your JTAC engineer might recommend that you check the third party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device Fabric interfaces Two Gigabit Ethernet interfaces th...

Page 100: ...in chassis cluster configurations Supported SFP transceivers 1000BASE LH model numbers SRX SFP 1GE LH SRX SFP 1GE LH ET 1000BASE LX model numbers SRX SFP 1GE LX SRX SFP 1GE LX ET 1000BASE SX model numbers SRX SFP 1GE SX SRX SFP 1GE SX ET Cables and connectors None Controls SRX5600 Any slot except the bottom slots 0 or 1 which are reserved for SCB RE SRX5800 Any slot except the slots 0 or 1 which a...

Page 101: ...eachable or the other node is no longer part of a cluster because it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure Amber All cluster members are present but an error condition has compromised the performance and resiliency of the cluster The reduced bandwidth could cause packets to be dropped or could result in reduced ...

Page 102: ...vices processing applied to it Traffic is intelligently distributed by I O cards IOCs to SPUs for services processing The services gateway must have at least one SPC installed You can install additional SPCs to increase services processing capacity You can install SPCs in any of the slots that are not reserved for Switch Control Boards SCBs If a slot is not occupied by a card you must install a bl...

Page 103: ...per Networks device that uses a third party optic or cable the Juniper Networks Technical Assistance Center JTAC can help you diagnose the source of the problem Your JTAC engineer might recommend that you check the third party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device Fabric interfaces Two Gigabit Ethernet interfac...

Page 104: ...s reserved for SCB RE SRX5600 Any slot except the bottom slots 0 or 1 which are reserved for SCB RE SRX5800 Any slot except the slots 0 or 1 which are reserved for SCB RE Supported Slots 475 W typical 585 W maximum NOTE In the SRX5600 and SRX5800 Services Gateways you must have high capacity power supplies either AC or DC and high capacity fan trays installed in the services gateway in order to in...

Page 105: ...LEDs 106 ...

Page 106: ...use it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure Amber All cluster members are present but an error condition has compromised the performance and resiliency of the cluster The reduced bandwidth could cause packets to be dropped or could result in reduced resiliency because a single point of failure might exist The e...

Page 107: ... processing power to run integrated services such as firewall IPsec and IDP see Figure 47 on page 109 All traffic traversing the services gateway is passed to an SPU to have services processing applied to it Traffic is intelligently distributed by I O cards IOCs to SPUs for services processing The services gateway must have at least one SPC installed You can install additional SPCs to increase ser...

Page 108: ...ssis clusters CAUTION If you face a problem running a Juniper Networks device that uses a third party optic or cable the Juniper Networks Technical Assistance Center JTAC can help you diagnose the source of the problem Your JTAC engineer might recommend that you check the third party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for ...

Page 109: ...lots 0 or 1 which are reserved for SCB RE Supported Slots 650 W maximum NOTE In the SRX5600 and SRX5800 Services Gateways you must have high capacity power supplies either AC or DC and high capacity fan trays installed in the services gateway in order to install and use SRX5K SPC3 SPCs If you do not have high capacity power supplies and fan trays installed the services gateway will log an alarm co...

Page 110: ...er is missing or unreachable or the other node is no longer part of a cluster because it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure Amber All cluster members are present but an error condition has compromised the performance and resiliency of the cluster The reduced bandwidth could cause packets to be dropped or coul...

Page 111: ...MICs Each MIC has one or more physical interface on it An MPC with MICs installed functions in the same way as a regular I O card IOC but allows greater flexibility in adding different types of Ethernet ports to your services gateway MPCs and MICs are similar in form and function to Flex IOCs and port modules However the two use different form factors so you cannot install port modules in an MPC n...

Page 112: ... 49 on page 113 shows a Flex IOC with two typical port modules installed Figure 49 Flex IOC with Port Modules g030286 Flex IOC 4x10GE XFP port module in slot 0 16x1GE TX port module in slot 1 Figure 50 on page 114 shows an MPC 113 ...

Page 113: ...rt modules However the two use different form factors so you cannot install port modules in an MPC nor can you install MICs in a Flex IOC You must install at least one interface card in the services gateway The interface card can be of any of the available IOC Flex IOC or MPC types You can add just one MIC or you can add two MICs of the same or different types You can install MPCs in any of the sl...

Page 114: ...Figure 51 SRX5K MPC g030309 MPC empty 115 ...

Page 115: ...installing an SRX5K MPC in an SRX5400 Services Gateway the session distribution mode will only function when hash based mode is configured or set as the default The normal mode is not supported A 9 drop is observed for PPS throughput when moving from session mode to hash mode for SRX5K MPC or non MPCs whereas no drop in performance is observed on CPS connection per second and session capacity numb...

Page 116: ...equirement Approximately 10 lb 4 5 kg without MICs Weight OK FAIL LED one bicolor Green The MPC is operating normally Blinking green The MPC is transitioning to online or offline Red The MPC has failed and is not operating normally Off The MPC is powered down LEDs The serial number label is yellow and is located on the opposite side of the card Serial number location SRX5K MPC3 40G10G Specificatio...

Page 117: ...ter Software release SRX5400 Any slot except the bottom slot 0 which is reserved for SCB RE SRX5600 Any slot except the bottom slots 0 or 1 which are reserved for SCB RE SRX5800 Any slot except the middle slots 0 1 and 2 6 which are reserved for SCB RE and slots 0 left most and 11 right most NOTE You can use the 2 6 slot to install an interface card if an SCB is not already installed in it Support...

Page 118: ... Ethernet port Intelligent oversubscription services NOTE At any one time you can have only one of the following PIC combinations powered on PIC0 PIC1 PIC0 PIC3 PIC2 PIC1 PIC2 PIC3 If you configure any of the following invalid PIC combinations the chassis will set PIC0 PIC1 combination online PIC0 PIC2 PIC1 PIC3 Software features OK FAIL LED one bicolor Solid green MPC is functioning normally Blin...

Page 119: ... Gigabit Ethernet and 10 Gigabit Ethernet interfaces with a Packet Forwarding Engine that provides a 240 Gbps line rate This interface card is supported on SRX5400 SRX5600 and SRX5800 Services Gateways See Figure 54 on page 121 NOTE These cards do not support plug in Modular Interface Cards MICs All ports on the interface card have dual color LEDs for reporting link status The interface card also ...

Page 120: ...Software release SRX5400 Any slot except the bottom slot 0 which is reserved for SCB RE SRX5600 Any slot except the bottom slots 0 or 1 which are reserved for SCB RE SRX5800 Any slot except the middle slots 0 1 and 2 6 which are reserved for SCB RE and slots 0 left most and 11 right most NOTE You can use the 2 6 slot to install an interface card if an SCB is not already installed in it Supported S...

Page 121: ... 10 Gigabit Ethernet port Optical diagnostics and related alarms Intelligent oversubscription services Software features OK FAIL LED one bicolor Solid green MPC is functioning normally Blinking green MPC is transitioning online or offline Red MPC has failed 10 Gigabit Ethernet LINK LED one bicolor per port Green Link is up Amber Link is disabled Off Link is down or disabled 100 Gigabit Ethernet LI...

Page 122: ... MIC 20GE SFP You use Modular Interface Cards MICs and Modular Port Concentrators MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network The SRX MIC 20GE SFP MIC see Figure 56 on page 124 can be installed in the SRX 5K MPC to add twenty 1 Gigabit Ethernet small form factor pluggable SFP Ethernet ports 123 ...

Page 123: ... Sockets for 20 SFP Gigabit Ethernet transceivers Supported SFP transceivers 1000BASE LX model numbers SRX SFP 1GE LX SRX SFP 1GE LX ET 1000BASE SX model numbers SRX SFP 1GE SX SRX SFP 1GE SX ET 1000BASE T model numbers SRX SFP 1GE T SRX SFP 1GE T ET Cables and connectors Approximately 1 2 lb 0 54 kg Weight OK FAIL LED one bicolor Green MIC is operating normally Red MIC has failed Off MIC is power...

Page 124: ...Port and Interface Numbering 125 ...

Page 125: ...SDH interface xe 10 Gigabit Ethernet interface For a complete list of media types see Interface Naming Overview fpc Slot in which the MPC is installed in an SRX5400 SRX5600 or SRX5800 Services Gateway pic Two Logical PICs on the MIC numbered 0 or 1 when installed in the first slot and 2 or 3 when installed in the second slot port Port number Figure 57 on page 126 shows the SRX MIC 20GE SFP MIC ins...

Page 126: ... 3 user host show chassis hardware node1 Slot 1 Online SRX5k SPC II PIC 0 Online SPU Cp PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 2 Online SRX5k IOC II PIC 0 Online 10x 1GE LAN SFP PIC 1 Online 10x 1GE LAN SFP PIC 2 Online 10x 1GE LAN SFP PIC 3 Online 10x 1GE LAN SFP primary node1 The show interfaces terse command output displays the Gigabit Ethernet interfaces that co...

Page 127: ... 1 0 up down ge 2 1 1 up up ge 2 1 2 up down ge 2 1 3 up down ge 2 1 4 up up ge 2 1 5 up down ge 2 1 6 up down ge 2 1 7 up down ge 2 1 8 up up ge 2 1 9 up up ge 2 2 0 up down ge 2 2 1 up down ge 2 2 2 up down ge 2 2 3 up down ge 2 2 4 up down ge 2 2 5 up down ge 2 2 6 up down ge 2 2 7 up down ge 2 2 8 up down ge 2 2 9 up down ge 2 3 0 up down ge 2 3 1 up down ge 2 3 2 up down ge 2 3 3 up down ge 2...

Page 128: ...s shown only for reference and is never used for any purpose Serial number location MIC with 10x10GE SFP Interfaces SRX MIC 10XG SFPP You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network The SRX MIC 10XG SFPP see Figure 59 on page 130 can be installed in an MPC to add ten 10 Gigabit Ethernet SFP ports 129 ...

Page 129: ...Release 12 1X46 D10 Software release Sockets for ten 10 Gbps SFP transceivers See Hardware Compatibility Tool for the transceivers supported Cables and connectors Either slot in SRX5K MPC Supported slots Approximately 1 6 lb 0 7 kg Weight OK FAIL LED one bicolor Green The MIC is operating normally Red The MIC has failed and is not operating normally Off The MIC is powered down LINK LED single colo...

Page 130: ...Port and Interface Numbering 131 ...

Page 131: ... MIC numbered 0 when installed in the first slot or 2 when installed in the second slot port Port number Figure 60 on page 132 shows the port and interface numbering of an SRX MIC 10XG SFPP MIC when it is installed in slot 0 of an MPC in slot 2 of an SRX5400 SRX5600 or SRX5800 Services Gateway Figure 60 SRX MIC 10XG SFPP Port and Interface Numbering 0 1 2 3 4 5 6 7 8 9 g100071 xe 2 0 0 xe 2 0 1 xe...

Page 132: ... 0 0 up up ip 0 0 0 up up lt 0 0 0 up up xe 2 0 0 up up xe 2 0 1 up up xe 2 0 2 up up xe 2 0 2 0 up up inet 131 131 131 2 24 inet6 1300 2 64 fe80 224 dcff fe20 b94c 64 multiservice xe 2 0 3 up up xe 2 0 4 up up xe 2 0 5 up up xe 2 0 6 up up xe 2 0 6 0 up up inet 141 141 141 1 24 inet6 1400 1 64 fe80 224 dcff fe20 b950 64 multiservice xe 2 0 7 up down xe 2 0 8 up down xe 2 0 9 up down xe 2 2 0 up d...

Page 133: ...combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network The SRX MIC 1X100G CFP see Figure 62 on page 134 can be installed in an MPC to add one 100 Gigabit Ethernet CFP port Figure 62 SRX MIC 1X100G CFP g030310 MIC with one CFP 100 Gigabit Ethernet port Fits into MPC Supports up to 100 Gbps of full duplex traffic Maximum configurable MTU 9192 bytes Ma...

Page 134: ...K MPC Supported slots Approximately 1 6 lb 0 7 kg Weight OK FAIL LED one bicolor Green The MIC is operating normally Red The MIC has failed and is not operating normally Off The MIC is powered down LINK LED single color Green The link is active Off No link LEDs The serial number label is yellow and located as shown in Figure 63 on page 135 Figure 63 SRX MIC 1X100G CFP Serial Number Label g007692 S...

Page 135: ... up to 80 Gbps of full duplex traffic Maximum configurable MTU 9192 bytes Maximum throughput 80 Gbps Description Junos OS Release 12 1X46 D10 Software release Sockets for two QSFP 40 Gigabit Ethernet fiber optic transceivers Supported QSFP transceiver 40GBASE SR4 model number SRX QSFP 40G SR4 40GBASE LR4 model number SRX QSFP 40G LR4 Cables and connectors Either slot in SRX5K MPC Supported slots A...

Page 136: ...Specifications SRX5K IOC4 10G is a fixed configuration interface card with a Packet Forwarding Engine that provides 400 Gbps line rate This interface card provides scalability in bandwidth and services to the SRX5400 SRX5600 and SRX5800 Services Gateways See Figure 66 on page 137 NOTE SRX5K IOC4 10G cards do not support plug in Modular Interface Cards MICs Figure 66 SRX5K IOC4 10G g100571 SRX5K IO...

Page 137: ... SCB RE NOTE Slot 1 0 is a dual purpose slot You can install SRX5K IOC4 10G in slot 2 6 if an SCB is not already installed in it SRX5600 Any slot except the bottom slots 0 and 1 which are reserved for SCB RE SRX5800 Any slot except the middle slots 0 1 and 2 6 which are reserved for SCB RE and slots 0 most left and 11 most right NOTE Slot 2 6 is a dual purpose slot You can install SRX5K IOC4 10G i...

Page 138: ...G Attack detection and prevention Class of service CoS Equal cost multipath ECMP load balancing GPRS Tunneling Protocol GTP High availability chassis cluster Intrusion detection and prevention IDP IPsec VPN Layer 2 transparent mode Logical systems Network Address Translation NAT Routing protocols BFD BGP IGMP IS IS MLD Multicast OSPF PIM RIP and SCTP SSL proxy Tenant systems Unified threat managem...

Page 139: ...AT is a fixed configuration interface card with a Packet Forwarding Engine that provides up to 480 Gbps 240 Gbps per PIC slot line rate This interface card provides scalability in bandwidth and services to the SRX5400 SRX5600 and SRX5800 Services Gateways See Figure 68 on page 140 NOTE SRX5K IOC4 MRAT cards do not support plug in Modular Interface Cards MICs Figure 68 SRX5K IOC4 MRAT g100570 SRX5K...

Page 140: ... 1 0 which are reserved for SCB RE NOTE Slot 1 0 is a dual purpose slot You can install SRX5K IOC4 10G in slot 2 6 if an SCB is not already installed in it SRX5600 Any slot except the bottom slots 0 and 1 which are reserved for SCB RE SRX5800 Any slot except the middle slots 0 1 and 2 6 which are reserved for SCB RE and slots 0 most left and 11 most right NOTE Slot 2 6 is a dual purpose slot You c...

Page 141: ...erent combination of port speeds as long as the aggregate capacity per group of six ports labeled 0 0 through 0 5 does not exceed 240 Gbps Similarly aggregate capacity per group of the other six ports labeled 1 0 through 1 5 should not exceed 240 Gbps Requires high capacity power supplies and high capacity fan trays The ports are labeled as see Figure 68 on page 140 10 Gigabit Ethernet or 40 Gigab...

Page 142: ...slation NAT Routing protocols BFD BGP IGMP IS IS MLD Multicast OSPF PIM RIP and SCTP SSL proxy Tenant systems Unified threat management UTM Software features OK FAIL LED one bicolor Steady green IOC is functioning normally Yellow IOC has failed LINK LED one green per port 4 per QSFP cage Steady green Link is up Off Link is down or disabled LEDs The serial number label is located as shown in Figure...

Page 143: ...d Switch Control Boards SCBs You must install at least one IOC in the services gateway The IOC can be of any of the available IOC or Flex IOC types You can install IOCs in any of the slots that are not reserved for Switch Control Boards SCBs If a slot is not occupied by a card you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the service...

Page 144: ...1000BASE T model numbers SRX SFP 1GE T SRX SFP 1GE T ET Cables and connectors None Controls SRX5600 Any slot except bottom slots 0 or 1 SRX5800 Any slot except center slots 0 1 or 2 6 Supported Slots 312 W typical 365 W maximum Power Requirement Approximately 13 lb 5 9 kg Weight OK FAIL LED one bicolor Steady green The IOC is operating normally Red The IOC has failed and is not operating normally ...

Page 145: ...Ethernet interfaces on a single board with four 10 Gbps Packet Forwarding Engines Each Packet Forwarding Engine consists of one I chip for Layer 3 processing and one Layer 2 network processor The IOCs interface with the power supplies and Switch Control Boards SCBs You must install at least one IOC in the services gateway The IOC can be of any of the available IOC or Flex IOC types You can install...

Page 146: ...release Four 10 Gbps XFP ports Supported XFP transceivers 10GBASE ER model numbers SRX XFP 10GE ER and SRX XFP 10GE ER ET 10GBASE LR model numbers SRX XFP 10GE LR and SRX XFP 10GE LR ET 10GBASE SR model numbers SRX XFP 10GE SR and SRX XFP 10GE SR ET Cables and connectors None Controls SRX5600 Any slot except bottom slots 0 or 1 SRX5800 Any slot except center slots 0 1 or 2 Supported Slots 312 W ty...

Page 147: ...s The SRX5K FPC IOC Flex I O card Flex IOC Figure 74 on page 149 is an IOC with two slots that accept port modules that add Ethernet ports to your services gateway A Flex IOC with installed port modules functions in the same way as a regular IOC but allows greater flexibility in adding different types of Ethernet ports to your services gateway Each Flex IOC has a processor subsystem which includes...

Page 148: ...slot 1 Flex IOC with slots for two port modules Maximum throughput 10 Gbps per PFE Description Junos OS Release 9 5R1 and later Software release Slots for two port modules Cables and connectors None Controls SRX5600 Any slot except bottom slots 0 or 1 SRX5800 Any slot except center slots 0 1 or 2 6 Supported Slots 312 W typical 365 W maximum includes port modules Power Requirement Approximately 10...

Page 149: ...x I O Cards Flex IOCs to add different combinations of small form factor pluggable transceiver SFP 10 gigabit SFP transceiver XFP and copper ports to your services gateway to suit the specific needs of your network The SRX IOC 16GE SFP port module Figure 76 on page 150 installs into a Flex IOC to add sixteen 10 100 1000 Ethernet SFP ports Figure 76 Flex IOC Port Module SRX IOC 16GE SFP g030271 Por...

Page 150: ...NE Button The ONLINE button on the port module front panel toggles the port module online and offline Controls Either slot in SRX5K FPC IOC Flex IOC Supported Slots Approximately 1 6 lb 0 7 kg Weight OK FAIL LED one bicolor Steady green The port module is operating normally Red The port module has failed and is not operating normally Off The port module is powered down LINK LED single color one pe...

Page 151: ...the specific needs of your network The SRX IOC 16GE TX port module Figure 78 on page 152 installs into a Flex IOC to add sixteen 10 100 1000 Ethernet RJ 45 copper ports Figure 78 Flex IOC Port Module SRX IOC 16GE TX g030285 Port module with sixteen 10 100 1000 Ethernet RJ45 ports Maximum throughput 10 Gbps Oversubscription ratio 1 6 1 Maximum configurable MTU 9192 bytes Description Junos OS Releas...

Page 152: ...rial number label is located as shown in Figure 79 on page 153 Figure 79 Port Module SRX IOC 16GE TX Serial Number Label g030305 JX0123 Serial number ID label Serial Number Location Flex I O Card Port Module SRX IOC 4XGE XFP Specifications You use port modules and Flex I O Cards Flex IOCs to add different combinations of small form factor pluggable transceiver SFP 10 gigabit SFP transceiver XFP an...

Page 153: ...bers SRX XFP 10GE LR and SRX XFP 10GE LR ET 10GBASE SR model numbers SRX XFP 10GE SR and SRX XFP 10GE SR ET Cables and connectors ONLINE Button The ONLINE button on the port module front panel toggles the port module online and offline Controls Either slot in SRX5K FPC IOC Flex IOC Supported Slots Approximately 1 6 lb 0 7 kg Weight OK FAIL LED one bicolor Steady green The port module is operating ...

Page 154: ...The serial number label is located as shown in Figure 81 on page 155 Figure 81 Port Module SRX IOC 4XGE XFP Serial Number Label g030303 JX0123 Serial number ID label Serial Number Location 155 ...

Page 155: ...600 Services Gateway 159 SRX5600 Site Guidelines and Requirements 160 SRX5600 Rack and Cabinet Requirements 164 Calculating Power Requirements for the SRX5600 Services Gateway 166 SRX5600 Network Cable and Transceiver Planning 178 SRX5600 Alarm and Management Cable Specifications and Pinouts 182 ...

Page 156: ......

Page 157: ...teway tolerances SRX5600 Services Gateway Cabinet Size and Clearance Requirements on page 165 SRX5600 Services Gateway Rack Size and Strength Requirements on page 164 Select the type of rack or cabinet Clearance Requirements for SRX5600 Services Gateway Airflow and Hardware Maintenance on page 163 Plan rack or cabinet location including required space clearances Connection to Building Structure fo...

Page 158: ...ge 181 Calculate the optical power budget and optical power margin SRX5600 Site Guidelines and Requirements IN THIS SECTION SRX5600 Services Gateway Environmental Specifications 160 General Site Guidelines 161 Site Electrical Wiring Guidelines 162 Clearance Requirements for SRX5600 Services Gateway Airflow and Hardware Maintenance 163 SRX5600 Services Gateway Environmental Specifications Table 31 ...

Page 159: ... and 110 18 of the National Electrical Code ANSI NFPA 70 General Site Guidelines Efficient device operation requires proper site planning and maintenance and proper layout of the equipment rack or cabinet if used and wiring closet To plan and create an acceptable operating environment for your device and prevent environmentally caused equipment failures Keep the area around the chassis free from d...

Page 160: ...lses EMPs caused by lightning damage unshielded conductors and electronic devices Signaling limitations To reduce or eliminate RFI from your site wiring do the following Use a twisted pair cable with a good distribution of grounding conductors If you must exceed the recommended distances use a high quality twisted pair cable with one ground conductor for each data signal when applicable Radio freq...

Page 161: ...earance must be provided behind the power supplies for airflow For service personnel to remove and install hardware components there must be adequate space at the front and back of the services gateway At least 24 in 61 cm is required both in front of and behind the device NEBS GR 63 recommends that you allow at least 30 in 76 2 cm in front of the services gateway Figure 82 Chassis Dimensions and ...

Page 162: ...0 D published by the Electronics Industry Association http www eia org The spacing of the holes between the left and right front mounting flanges and center mounting brackets is 18 31 in 465 mm apart However the inside spacing between the rack rails must allow sufficient space for the width of the chassis With the use of adapters or approved wing devices to narrow the opening between the rails the...

Page 163: ... Services Gateway Rack Always secure the rack to the structure of the building If your geographical area is subject to earthquakes bolt the rack to the floor For maximum stability also secure the rack to ceiling brackets SRX5600 Services Gateway Cabinet Size and Clearance Requirements The minimum size cabinet that can accommodate the device is 482 mm wide and 800 mm deep A cabinet larger than the ...

Page 164: ...This maximizes the clearance in the rear of the cabinet for critical airflow Route and dress all cables to minimize the blockage of airflow to and from the chassis Calculating Power Requirements for the SRX5600 Services Gateway The information in this topic helps you determine which power supplies are suitable for various configurations as well as which power supplies are not suitable because outp...

Page 165: ...erall zone Two AC power supplies are mandatory for high line power and three AC power supplies are mandatory for low line power Table 33 SRX5600 Services Gateway DC Power Zoning Components Receiving Power Power Supply PEM Zone PEM 0 or 2 Zone 0 IOC SPC slots 0 and 1 SCB slots 0 and 1 PEM 1 or 3 Zone 1 IOC SPC slots 2 through 5 Sample configuration for SRX5600 Services Gateway chassis with SRX5K SC...

Page 166: ...RX5600 AC not zoned 3720 W Total power requirement excluding cooling system 2 Evaluate the power budget In the case of a DC powered chassis evaluate the budget for each zone In this step we check the required power against the maximum output power of available power supply options NOTE The power for the cooling system comes from a different tap on the power supply reserved for the cooling system o...

Page 167: ...0 3880 220 W 4100 W 2 1 or 2 2 Redundancy 2050 W high line Table 36 Calculating Power Budget DC Powered Chassis with SCB1 and RE1 Zone 1 Unused Power 2 Zone 0 Unused Power 1 Maximum Output Power for System Maximum Output Power of Power Supply Power Supply 1600 W 2360 760 W Power exceeded 1600 1360 240 W 3200 W 1 1 Redundancy per zone 1600 W SRX5600 DC standard capacity 2240 W 2360 120 W Power exce...

Page 168: ...iciency 1 Power Supply 3880 0 85 4565 W 85 SRX5600 AC standard capacity 3880 0 89 4360 W 89 SRX5600 AC high capacity 3880 0 98 3960 W 98 SRX5600 DC standard capacity 3880 0 98 3960 W 98 SRX5600 DC high capacity 1 These values are at full load and nominal voltage 4 Calculate thermal output BTUs for the system To calculate this value multiply the total input power requirement in watts by 3 41 as sho...

Page 169: ...control boards with one Routing Engine installed in SCB slot 0 SRX5K MPC IOC2 with fully loaded optical modules and two MICs such as SRX MIC 1X100G CFP SRX MIC 2X40G QSFP SRX MIC 10XG SFPP slot 0 High capacity cooling system NOTE The high capacity cooling system satisfies cooling requirements of SPC2 and must be used for proper cooling 171 ...

Page 170: ...ot zoned 4025 W Total power requirement excluding cooling system 2 Evaluate the power budget In the case of a DC powered chassis evaluate the budget for each zone In this step we check the required power against the maximum output power of available power supply options NOTE The power for the cooling system comes from a different tap on the power supply reserved for the cooling system only The coo...

Page 171: ...W 75 W 4100 W 2 2 Redundancy 2050 W high line Table 41 Calculating Power Budget DC Powered Chassis with SCB2 and RE2 Zone 1 Unused Power 2 Zone 0 Unused Power 1 Maximum Output Power for System Maximum Output Power of Power Supply Power Supply 1600 W 2360 760 W Power exceeded 1600 W 1665 W 65 W 3200 W 1 1 Redundancy per zone 1600 W SRX5600 DC standard capacity 2240 W 2360 120 W Power exceeded 2240 ...

Page 172: ...iciency 1 Power Supply 4185 0 85 4923 W 85 SRX5600 AC standard capacity 4185 0 89 4702 W 89 SRX5600 AC high capacity 4185 0 98 4270 W 98 SRX5600 DC standard capacity 4185 0 98 4270 W 98 SRX5600 DC high capacity 1 These values are at full load and nominal voltage 4 Calculate thermal output BTUs for the system To calculate this value multiply the total input power requirement in watts by 3 41 as sho...

Page 173: ...SCB3 IOC3 and RE2 Zone 1 Power Zone 0 Power Power Requirement Part Number Chassis Component 20 W 20 W 40 W SRX5600BASE HC AC Base system 160 W SRX5600 HC FAN High capacity cooling system 607 W 607 W IOC3 IOC slot 0 585 W 585 W SPC2 SPC slot 1 2340 W 585 W 4 2340 W SPC2 SPC slots 2 through 5 390 W 300 W 90 W SCB3 with RE2 SCB 0 300 W 300 W SCB3 SCB 1 SRX5600 AC not zoned 4422 W Total power requirem...

Page 174: ...System Maximum Output Power of Power Supply Power Supply 3081 W 4262 W 1181W Power Exceeded 3081 W 3 1 Redundancy 1027 W low line SRX5600 AC standard capacity NOTE SPC2 may require HC PEMs to operate 4770 W 4262 W 508 W 4770 W 3 1 Redundancy 1590 W high line 3501 4262 W 761 W Power Exceeded 3501 W 3 1 Redundancy 1167 W low line SRX5600 AC high capacity 6150 4262 W 1888 W 6150 W 3 1 Redundancy 2050...

Page 175: ...ly as shown in Table 47 on page 177 Here we include the power drawn by the cooling system NOTE Normal capacity AC and DC power supplies are not included in the following table because their power budget was exceeded in the sample configuration Table 47 Calculating System Input Power for SRX5600 Services Gateway with SCB3 IOC3 and RE2 Input Power Requirement Power Supply Efficiency 1 Power Supply 4...

Page 176: ...e Specifications for the SRX5600 Services Gateway 178 Signal Loss in Multimode and Single Mode Fiber Optic Cable for the SRX5600 Services Gateway 179 Attenuation and Dispersion in Fiber Optic Cable for the SRX5600 Services Gateway 179 Calculating Power Budget for Fiber Optic Cable for the SRX5600 Services Gateway 180 Calculating Power Margin for Fiber Optic Cable for the SRX5600 Services Gateway 1...

Page 177: ...ng in the fiber core radiates into the fiber cladding higher order mode loss HOL results Together these factors limit the transmission distance of multimode fiber compared to single mode fiber Single mode fiber is so small in diameter that rays of light can reflect internally through one layer only Interfaces with single mode optics use lasers as light sources Lasers generate a single wavelength o...

Page 178: ...s document GR 253 CORE Section 4 3 and International Telecommunications Union ITU document G 957 When chromatic dispersion is at the maximum allowed its effect can be considered as a power penalty in the power budget The optical power budget must allow for the sum of component attenuation power penalties including those from dispersion and a safety margin for unexpected losses Calculating Power Bu...

Page 179: ...e following sample calculations For information about the actual amount of signal loss caused by equipment and other factors see your vendor documentation Table 50 Estimated Values for Factors That Cause Link Loss Estimated Link Loss Value Link Loss Factor Single mode None Multimode 0 5 dB Higher order mode losses Single mode None Multimode None if product of bandwidth and distance is less than 50...

Page 180: ...argin P M is calculated as follows P M P B LL P M 13 dB 8 km 0 5 dB km 7 0 5 dB P M 13 dB 4 dB 3 5 dB P M 5 5 dB In both examples the calculated power margin is greater than zero indicating that the link has sufficient power for transmission and does not exceed the maximum receiver input power SRX5600 Alarm and Management Cable Specifications and Pinouts IN THIS SECTION Alarm Relay Contact Wire Sp...

Page 181: ... 52 Cable and Wire Specifications for Routing Engine Management and Alarm Interfaces Receptacle Maximum Length Cable Wire Supplied Cable Specification Port RJ 45 DB 9 male 6 ft 1 83 m One 6 ft 1 83 m length with RJ 45 DB 9 connectors RS 232 EIA 232 serial cable Routing Engine console or auxiliary interface RJ 45 Connector Pinouts for the SRX5600 Services Gateway Routing Engine Ethernet Port The po...

Page 182: ...ts on the Routing Engine labeled AUX and CONSOLE are asynchronous serial interfaces that accept an RJ 45 connector The ports connect the Routing Engine to an auxiliary or console management device Table 54 on page 184 describes the RJ 45 connector pinout Table 54 RJ 45 Connector Pinout for the AUX and CONSOLE Ports Description Signal Pin Request to Send RTS 1 Data Terminal Ready DTR 2 Transmit Dat...

Page 183: ...Table 54 RJ 45 Connector Pinout for the AUX and CONSOLE Ports continued Description Signal Pin Clear to Send CTS 8 185 ...

Page 184: ...g the SRX5600 190 Installing the SRX5600 Mounting Hardware 194 Installing the SRX5600 Using a Mechanical Lift 198 Installing the SRX5600 Without a Mechanical Lift 201 Connecting the SRX5600 to External Devices 213 Connecting the SRX5600 to Power 219 Performing the Initial Software Configuration for the SRX5600 229 ...

Page 185: ......

Page 186: ...mmend that you use a mechanical lift Installing the SRX5600 Services Gateway Using a Mechanical Lift on page 199 Installing the SRX5600 Services Gateway Chassis in the Rack Manually on page 207 6 Connect cables to the network and external devices Connecting the SRX5600 Services Gateway to a Management Console or an Auxiliary Device on page 214 Connecting the SRX5600 Services Gateway to a Network f...

Page 187: ...vices Gateway 190 Verifying the SRX5600 Services Gateway Parts Received 192 Tools and Parts Required to Unpack the SRX5600 Services Gateway To unpack the services gateway and prepare for installation you need the following tools Phillips screwdriver number 2 1 2 in or 13 mm open end or socket wrench to remove bracket bolts from the shipping pallet Blank panels to cover any slots not occupied by a ...

Page 188: ...ointing up 3 Open all the latches on the shipping crate 4 Remove the front door of the shipping crate cover and set it aside 5 Slide the remainder of the shipping crate cover off the pallet 6 Remove the foam covering the top of the device 7 Remove the accessory box and the SRX5600 Services Gateway Getting Started Guide 8 Verify the parts received as described in Verifying the SRX5600 Services Gate...

Page 189: ...g contact a customer service representative A fully configured services gateway contains the chassis with installed components listed in Table 55 on page 192 and an accessory kit box which contains the parts listed in Table 56 on page 193 The parts shipped with your device can vary depending on the configuration you ordered Table 55 Parts List for a Fully Configured Services Gateway Quantity Compo...

Page 190: ...2 Screws to connect grounding cable 1 4 20 thread 1 2 in length 2 Split washers for connecting grounding cable 8 DC power terminal Lugs 6 AWG 1 RJ 45 to DB 9 cable to connect the device through the serial port 2 Cable manager brackets 2 Terminal block plug 3 pole 5 08 mm spacing 12A to connect the device alarms 2 720 029106 Assy Cbl Fiber Optic Duplex LC LC Multimode 3 m UL94V 0 2 740 011613 SFP G...

Page 191: ...D wrist strap with cable Installing the SRX5600 Mounting Hardware IN THIS SECTION Installing the SRX5600 Services Gateway Mounting Hardware for a Rack or Cabinet 194 Moving the Mounting Brackets for Center Mounting the SRX5600 Services Gateway 197 Installing the SRX5600 Services Gateway Mounting Hardware for a Rack or Cabinet The services gateway can be installed in a four post rack or cabinet or ...

Page 192: ...U divisions on the rack The bottom of all mounting shelves is at 0 02 in above a U division Table 57 Four Post Rack or Cabinet Mounting Hole Locations Distance Above U Division Hole 0 86 U 1 51 in 3 8 cm 3 0 50 U 0 88 in 2 2 cm 2 0 14 U 0 25 in 0 6 cm 1 To install the mounting shelf on the front rails of a four post rack or cabinet or the rails of an open frame rack see Figure 84 on page 196 or Fi...

Page 193: ...Figure 84 Installing the Front Mounting Hardware for a Four Post Rack or Cabinet 196 ...

Page 194: ...teway To move the mounting brackets from the front of the chassis toward the center of the chassis 1 Remove the three screws at the top and center of the bracket 2 Pull the top of the bracket slightly away from the chassis The bottom of the bracket contains a tab that inserts into a slot in the chassis 3 Pull the bracket away from the chassis so that the tab is removed from the chassis slot 4 Inse...

Page 195: ...re for the other bracket RELATED DOCUMENTATION General Safety Guidelines and Warnings 421 Site Preparation Checklist for the SRX5600 Services Gateway 159 Installing the SRX5600 Using a Mechanical Lift IN THIS SECTION Tools Required to Install the SRX5600 Services Gateway with a Mechanical Lift 198 Installing the SRX5600 Services Gateway Using a Mechanical Lift 199 Tools Required to Install the SRX...

Page 196: ...tilation environment To install the services gateway using a lift see Figure 86 on page 200 1 Ensure that the rack is in its permanent location and is secured to the building Ensure that the installation site allows adequate clearance for both airflow and maintenance 2 Load the services gateway onto the lift making sure it rests securely on the lift platform 3 Using the lift position the services ...

Page 197: ...y is installed properly in the rack all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the device should be level Figure 86 Installing the Services Gateway in the Rack NOTE This illustration depicts the services gateway being installed in an open frame rack RELATED DOCUMENTATION General Safety Guidelines and Warnings 421 200 ...

Page 198: ...l it manually Before installing the services gateway manually you must first remove components from the chassis and you must reinstall the components once the services gateway is installed in the rack At least two people are needed to safely lift the chassis into the rack or cabinet With components removed the chassis weighs approximately 65 lb 29 kg Before installing the services gateway in the r...

Page 199: ...g the Fan Tray Before Installing an SRX5600 Services Gateway Without a Lift 203 3 Removing Cards Before Installing an SRX5600 Services Gateway Without a Lift 204 Removing the Power Supplies Before Installing the SRX5600 Services Gateway Without a Lift Remove the leftmost power supply first and then work your way to the right To remove the AC or DC power supplies for each power supply see Figure 87...

Page 200: ...charge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Loosen the captive screws on the fan tray faceplate 3 Grasp the fan tray handle and pull it out approximately 1 to 3 inches 4 Press the latch located on the inside of the fan tray to release it from the chassis 5 Place one hand under the fan tray to support it and pull the fan tray complet...

Page 201: ...rd Also have ready rubber safety caps for each port using an optical interface on the card that you are removing 2 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 3 Label the cables connected to each port on the card so that you can later reconnect the cables to the correct ports 4 If a card uses fiber optic cab...

Page 202: ...uld result in damage The ejector handles have a center of rotation and need to be stored toward the center of the board Ensure the long ends of the ejectors located at both the top and the bottom of the board are vertical and pressed as far as possible toward the center of the board Once you have installed an SCB place the ejector handles in their proper position vertically and toward the center o...

Page 203: ...hey cannot support its weight Do not stack cards on top of one another after removal Place each one individually in an electrostatic bag or on its own antistatic mat on a flat stable surface Figure 89 Removing a Card IOC Shown Other Card Types Similar OK MASTER FAN ONLINE OFFLINE 0 1 1 0 FAIL FAIL PEM FAIL FAIL FAIL FAIL FAIL FAIL ESD OK OK OK OK OK OK OK 2 3 4 5 ACO LT YELLOW ALARM RED ALARM NC N...

Page 204: ...5 lb 29 kg 1 Ensure that the rack is in its permanent location and is secured to the building Ensure that the installation site allows adequate clearance for both airflow and maintenance 2 Position the services gateway in front of the rack or cabinet centering it in front of the mounting shelf Use a pallet jack if one is available 3 With one person on each side hold onto the bottom of the chassis ...

Page 205: ...teway If the services gateway is installed properly in the rack all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side and the services gateway should be level Figure 90 Installing the Services Gateway in the Rack NOTE This illustration depicts the services gateway being installed in an open frame rack 208 ...

Page 206: ...ut a Lift Reinstall the rightmost power supply first and then work your way to the left To reinstall the AC or DC power supplies follow this procedure for each power supply see Figure 91 on page 210 which shows the installation of the DC power supplies 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 On an AC...

Page 207: ...tach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Grasp the fan tray on each side and insert it straight into the chassis Note the correct orientation by the this side up label on the top surface of the fan tray 3 Tighten the captive screws on the fan tray faceplate to secure it in the chassis 210 ...

Page 208: ...rap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Carefully align the sides of the SCB with the guides inside the chassis 3 Slide the SCB into the chassis until you feel resistance carefully ensuring that it is correctly aligned 4 Grasp both ejector handles and rotate them simultaneously clockwise until the SCB is fully seated 5 Place the ejector handles in the...

Page 209: ... IOCs MPCs and SPCs follow this procedure for each card see Figure 94 on page 213 1 Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Place the card on an antistatic mat or remove it from its electrostatic bag 3 Identify the slot on the services gateway where it will be installed 4 Verify that each fiber optic has a rubber safety cap c...

Page 210: ...External Devices IN THIS SECTION Tools and Parts Required for SRX5600 Services Gateway Connections 213 Connecting the SRX5600 Services Gateway to a Management Console or an Auxiliary Device 214 Connecting the SRX5600 Services Gateway to a Network for Out of Band Management 215 Connecting an SRX5600 Services Gateway to an External Alarm Reporting Device 216 Connecting Network Cables to SRX5600 Serv...

Page 211: ...e Routing Engine Both ports accept a cable with an RJ 45 connector One serial cable with an RJ 45 connector and a DB 9 connector is provided with the services gateway To connect a device to the CONSOLE port and another device to the AUX port you must supply an additional cable To connect a management console or auxiliary device 1 Plug the RJ 45 end of the serial cable Figure 95 on page 214 shows t...

Page 212: ...ement connect an Ethernet cable with RJ 45 connectors to the ETHERNET port on the Routing Engine One Ethernet cable is provided with the services gateway To connect to the ETHERNET port on the Routing Engine 1 Plug one end of the Ethernet cable Figure 97 on page 215 shows the connector into the ETHERNET port on the Routing Engine Figure 98 on page 215 shows the port 2 Plug the other end of the cab...

Page 213: ... 2 08 mm 2 which is not provided Use the gauge of wire appropriate for the external device you are connecting To connect an external device to an alarm relay contact see Figure 99 on page 216 1 Prepare the required length of wire with gauge between 28 AWG and 14 AWG 0 08 and 2 08 mm 2 2 While the terminal block is not plugged into the relay contact use a 2 5 mm flat blade screwdriver to loosen the...

Page 214: ...e To attach a reporting device for the other kind of alarm repeat the procedure Connecting Network Cables to SRX5600 Services Gateway IOCs and Port Modules To connect the IOCs MPC or port modules to the network see Figure 101 on page 218 1 Have ready a length of the type of cable used by the component 2 Remove the rubber safety plug from the cable connector port WARNING Do not look directly into a...

Page 215: ... the cable in the cable manager to prevent it from dislodging or developing stress points Secure the cable so that it is not supporting its own weight as it hangs to the floor Place excess cable out of the way in a neatly coiled loop Placing fasteners on the loop helps to maintain its shape CAUTION Avoid bending a fiber optic cable beyond its minimum bend radius An arc smaller than a few inches in...

Page 216: ...teway 227 Powering Off the SRX5600 Services Gateway 228 Tools and Parts Required for SRX5600 Services Gateway Grounding and Power Connections To ground and provide power to the services gateway you need the following tools and parts Phillips screwdrivers numbers 1 and 2 2 5 mm flat blade screwdriver 7 16 in hexagonal head external drive socket wrench or nut driver with a torque range between 23 lb...

Page 217: ...g strap to your bare wrist and connect the strap to an approved site ESD grounding point See the instructions for your site 3 Ensure that all grounding surfaces are clean and brought to a bright finish before grounding connections are made 4 Connect the grounding cable to a proper earth ground 5 Detach the ESD grounding strap from the site ESD grounding point 6 Attach an electrostatic discharge ES...

Page 218: ...ence EMI requirements and to ensure proper operation you must properly ground the services gateway chassis before connecting power See Grounding the SRX5600 Services Gateway on page 220 for instructions CAUTION Do not mix AC and DC power supplies within the same services gateway Damage to the device might occur You connect AC power to the device by attaching power cords from the AC power sources t...

Page 219: ... position O 4 Insert the appliance coupler end of the power cord into the appliance inlet on the power supply 5 Insert the power cord plug into an external AC power source receptacle NOTE Each power supply must be connected to a dedicated AC power feed and a dedicated external circuit breaker We recommend that you use a 15 A 250 VAC minimum or as permitted by local code 6 Dress the power cord appr...

Page 220: ... and DC OK LEDs light steadily and the PS FAIL LED is not lit If any of the status LEDs indicates that the power supply is not functioning normally repeat the installation and cabling procedures NOTE After powering off a power supply wait at least 60 seconds before turning it back on After powering on a power supply wait at least 60 seconds before turning it off If the system is completely powered...

Page 221: ...om the external DC power sources to the terminal studs on the power supply faceplates You must provide the power cables the cable lugs are supplied with the device To connect the DC source power cables to the services gateway 1 Switch off the dedicated customer site circuit breakers Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable lea...

Page 222: ...o indicate their polarity There is no standard color coding for DC power cables The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply 7 Remove the nuts and washers from the terminal studs Use a 7 16 in 11 mm nut driver or socket wrench 8 Secure each power cable lug to t...

Page 223: ...t provide through the openings on the cable restraint to hold the power cables in place 10 Replace the clear plastic cover over the terminal studs on the faceplate 11 Verify that the power cables are connected correctly that they are not touching or blocking access to device components and that they do not drape where people could trip on them 12 Repeat Step 3 through Step 11 for the remaining pow...

Page 224: ...site s procedures 6 Check the INPUT OK LED is lit steadily green to verify that power is present 7 If power is not present Verify that the fuse is installed correctly and turn on the breaker at the battery distribution fuse board or fuse bay Check the voltage with a meter at the terminals of the power supply for correct voltage level and polarity 8 Attach an electrostatic discharge ESD grounding s...

Page 225: ...Engine boots as the power supply completes its startup sequence Normally the services gateway boots from the Junos OS image on the CompactFlash card After powering on a power supply wait at least 60 seconds before turning it off Powering Off the SRX5600 Services Gateway NOTE After powering off a power supply wait at least 60 seconds before turning it back on To power off the services gateway 1 On ...

Page 226: ...229 Initially Configuring the SRX5600 Services Gateway 230 Performing Initial Software Configuration Using J Web 235 SRX5600 Services Gateway Software Configuration Overview The services gateway is shipped with the Junos operating system Junos OS preinstalled and ready to be configured when the device is powered on There are three copies of the software one on a CompactFlash card if installed in t...

Page 227: ...default router IP address of a DNS server Password for the root user Initially Configuring the SRX5600 Services Gateway This procedure connects the device to the network but does not enable it to forward traffic For complete information about enabling the device to forward traffic including examples see the appropriate Junos OS configuration guides To configure the software 1 Verify that the devic...

Page 228: ...root commit 8 Log in as the administrative user you configured in Step 6 9 Configure the name of the device If the name includes spaces enclose the name in quotation marks configure edit admin set system host name host name 10 Configure the IP address and prefix length for the Ethernet management interface on the services gateway s Routing Engine edit admin set interfaces fxp0 unit 0 family inet a...

Page 229: ...ne trust to zone untrust policy policy name match source address any destination address any application any root set security policies from zone trust to zone untrust policy policy name then permit 15 Check the configuration for validity edit admin commit check configuration check succeeds 16 Commit the configuration to activate it on the device edit admin commit commit complete 17 Optionally dis...

Page 230: ...d password 1 cdOPmACd QvreBsJkNR1EF0uurTBkE SECRET DATA services ssh web management http interface ge 0 0 0 0 syslog user any emergency file messages any any authorization info file interactive commands interactive commands any license autoupdate url https ae1 juniper net junos key_retrieval interfaces ge 0 0 0 unit 0 ge 6 2 0 233 ...

Page 231: ...4 fxp0 unit 0 family inet address 192 168 10 2 24 routing options static route 0 0 0 0 0 next hop 5 1 1 2 security zones security zone trust interfaces ge 6 3 5 0 security zone untrust interfaces ge 6 2 0 0 policies from zone trust to zone untrust policy bob match source address any 234 ...

Page 232: ...iguration statements Then commit the changes to activate them on the device edit admin commit 20 When you have finished configuring the device exit configuration mode edit admin exit admin host Performing Initial Software Configuration Using J Web IN THIS SECTION Configuring Root Authentication and the Management Interface from the CLI 236 Configuring Interfaces Zones and Policies with J Web 237 2...

Page 233: ...rd by entering a cleartext password an encrypted password or an SSH public key string DSA or RSA edit root set system root authentication plain text password New password password Retype new password password 4 Commit the configuration to activate it on the device edit root commit 5 Configure the IP address and prefix length for the Ethernet management interface on the device edit root set interfa...

Page 234: ...ces zones and security policies using J Web NOTE You cannot use J Web to configure SRX5400 SRX5600 and SRX5800 Services Gateways in Junos OS Release 15 1X49 D10 Before you begin Ensure you have configured the IP address root authentication and default route See Configuring Root Authentication and the Management Interface from the CLI on page 236 Enable HTTP on the device to access J Web See Config...

Page 235: ...ter the hostname and click OK 7 Select Commit Options Commit to apply the configuration changes You have successfully configured the hostname for the system Configuring Interfaces To configure two physical interfaces 1 From the J Web Dashboard page select Configure Interfaces and select a physical interface you want to configure 2 Select Add Logical Interface The Add interface dialog box appears 3...

Page 236: ...able and move them under Selected 5 Click OK A message appears after your configuration changes are validated successfully 6 Click OK 7 Select Commit Options Commit to apply the configuration changes A message appears after your configuration changes are applied successfully 8 Click OK 9 Repeat Step 1 through Step 8 and assign another interface to an untrust zone You have successfully configured i...

Page 237: ...ed 5 Configure the application by selecting any listed under Available and moving it under Selected 6 Click OK A message appears after your configuration changes are validated successfully 7 Click OK 8 Select Commit Options Commit to apply the configuration changes A message appears after your configuration changes are applied successfully 9 Click OK You have successfully configured the security p...

Page 238: ... SRX5600 Cooling System 247 Maintaining the SRX5600 Power System 253 Maintaining the SRX5600 Host Subsystem 269 Maintaining the SRX5600 Line Cards and Modules 302 Maintaining the SRX5600 Cables and Connectors 342 Replacing a Routing Engine in an SRX Series High End Chassis Cluster 355 ...

Page 239: ......

Page 240: ...t the bottom front of the services gateway replacing it every six months for optimum cooling system performance Do not run the device for more than a few minutes without the air filter in place Replacing the SRX5600 Services Gateway Craft Interface To replace the craft interface perform the following procedures in sequence 1 Disconnecting the Alarm Relay Wires from the SRX5600 Services Gateway Cra...

Page 241: ...sing a 2 5 mm flat blade screwdriver loosen the small screws on the face of the terminal block and remove the block from the relay contact 4 Using the 2 5 mm flat blade screwdriver loosen the small screws on the side of the terminal block Remove existing wires from the slots in the front of the block Figure 106 Alarm Relay Contacts Removing the SRX5600 Services Gateway Craft Interface To remove th...

Page 242: ... 246 1 Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Grasp the craft interface with one hand and hold the bottom edge of the craft interface with the other hand to support its weight 3 Orient the ribbon cable so that it plugs into the connector socket The connector is keyed and can be inserted only one way 4 Align the bottom of the...

Page 243: ...alarm relay wires between a services gateway and an alarm reporting device see Figure 109 on page 247 1 Prepare the required length of replacement wire with gauge between 28 AWG and 14 AWG 0 08 and 2 08 mm 2 2 Insert the replacement wires into the slots in the front of the block Use a 2 5 mm flat blade screwdriver to tighten the screws and secure the wire 3 Attach an ESD grounding strap to your ba...

Page 244: ...oling verify the condition of the fans Action Monitor the status of the fans A fan tray contains multiple fans that work in unison to cool the services gateway components If one fan fails the host subsystem adjusts the speed of the remaining fans to maintain proper cooling A major alarm is triggered when a fan fails and a minor alarm and major alarm is triggered when a fan tray is removed To displ...

Page 245: ...0 on page 249 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Loosen the captive screws on the fan tray faceplate 3 Grasp the fan tray handle and pull it out approximately 1 to 3 inches WARNING To avoid injury keep tools and your fingers away from the fans as you slide the fan tray out of the chassis The fan...

Page 246: ...ic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Grasp the fan tray handle and insert it straight into the chassis Note the correct orientation by the this side up label on the top surface of the fan tray 3 Tighten the captive screws on the fan tray faceplate to secure it in the chassis 249 ...

Page 247: ...s airflow in the unit impeding the ventilation of the chassis The filter degrades over time Periodically replace the filter in use as well as spares We recommend that you replace the filter every six months Discard used filters do not attempt to clean and reuse them NOTE Air filters will not be replaced by Juniper Networks under the Juniper Networks Hardware Replacement Support Plan you need to pu...

Page 248: ...Services Gateway Air Filter To replace the air filter perform the following procedures in sequence 1 Removing the SRX5600 Services Gateway Air Filter 251 2 Installing the SRX5600 Services Gateway Air Filter 252 Removing the SRX5600 Services Gateway Air Filter CAUTION Do not run the services gateway for more than a few minutes without the air filter in place CAUTION Always keep the air filter in pl...

Page 249: ...Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Locate the up arrow and ensure that the air filter is right side up 3 Slide the air filter straight into the chassis until it stops 4 Align the captive screws of the air filter cover with the mounting holes on the chassis 5 Tighten the captive screws on the air f...

Page 250: ...n SRX5600 Services Gateway AC Power Supply Cord 257 Replacing an SRX5600 Services Gateway DC Power Supply 259 Replacing an SRX5600 Services Gateway DC Power Supply Cable 263 Upgrading an SRX5600 Services Gateway from Standard Capacity to High Capacity Power Supplies 265 Maintaining SRX5600 Services Gateway Power Supplies Purpose For optimum services gateway performance verify the condition of the ...

Page 251: ...ceplates and the craft interface to determine if the power supplies are functioning normally Check the red and yellow alarm LEDs on the craft interface Power supply failure or removal triggers an alarm that causes one or both of the LEDs to light You can display the associated error messages by issuing the following command user host show chassis alarms Periodically inspect the site to ensure that...

Page 252: ...ore turning it back on To remove an AC power supply see Figure 114 on page 256 1 Switch off the dedicated facility circuit breaker for the power supply and remove the power cord from the AC power source Follow the ESD and disconnection instructions for your site 2 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis ...

Page 253: ...3 Using both hands slide the power supply straight into the chassis until the power supply is fully seated in the chassis slot The power supply faceplate should be flush with any adjacent power supply faceplate see Figure 115 on page 257 4 Tighten both captive screws at the bottom of the power supply 5 Attach the power cord to the power supply 6 Route the power cord along the cable restraint towar...

Page 254: ... the power supply faceplate If the power supply is correctly installed and functioning normally the AC OK and DC OK LEDs light steadily and the PS FAIL LED is not lit Figure 115 Installing an AC Power Supply Replacing an SRX5600 Services Gateway AC Power Supply Cord To replace an SRX5600 Services Gateway AC power supply cord perform the following procedures 1 Disconnecting an SRX5600 Services Gate...

Page 255: ...raphical location 2 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 3 Insert the power cord plug into an external AC power source receptacle 4 Connect the power cord to the power supply 5 Route the power cord along the cable restraint toward the left or right corner of the chassis If needed to hold the power cor...

Page 256: ...before turning it back on To remove a DC power supply see Figure 116 on page 260 1 Switch off the dedicated facility circuit breaker for the power supply being removed Follow your site s procedures for ESD 2 Make sure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cables might become active during the removal process 3 Attach an electrostatic di...

Page 257: ...on 2 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 3 Switch the circuit breaker on the power supply faceplate to the OFF position O 4 For a high capacity DC power supply check the setting of the input mode switch Use a sharp nonconductive object to slide the switch to the desired position Set the input mode sw...

Page 258: ...e chassis slot The power supply faceplate should be flush with any adjacent power supply faceplate see Figure 118 on page 261 Figure 118 Installing a DC Power Supply 6 Tighten the captive screws on the lower edge of the power supply faceplate 7 Remove the clear plastic cover protecting the terminal studs on the faceplate 8 Remove the nuts and washers from the terminal studs 261 ...

Page 259: ...cables might be labeled and to indicate their polarity There is no standard color coding for DC power cables The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply NOTE The DC power supplies in PEM0 and PEM1 must be powered by dedicated power feeds derived from feed A an...

Page 260: ...If more than one power supply is being installed turn on all power supplies at the same time NOTE An SCB must be present for the PWR OK LED to go on Replacing an SRX5600 Services Gateway DC Power Supply Cable To replace an SRX5600 Services Gateway DC power supply cable perform the following procedures 1 Disconnecting an SRX5600 Services Gateway DC Power Supply Cable 263 2 Connecting an SRX5600 Ser...

Page 261: ...age 265 1 Locate a replacement power cable that meets the specifications defined in DC Power Cable Specifications for the SRX5600 Services Gateway on page 58 2 Verify that a licensed electrician has attached a cable lug to the replacement power cable 3 Verify that the INPUT OK LED is off 4 Secure the power cable lug to the terminal studs first with the flat washer then with the nut Apply between 2...

Page 262: ...e power cable is correctly installed and the power supply is functioning normally the PWR OK BRKR ON and INPUT OK LEDs light green steadily Figure 120 Connecting Power Cables to the DC Power Supply Upgrading an SRX5600 Services Gateway from Standard Capacity to High Capacity Power Supplies You can replace the standard capacity power supplies in the SRX5600 Services Gateway with either two or four ...

Page 263: ...pacity power supplies to high capacity power supplies of the same input type AC or DC without interrupting power to the services gateway components Choose the procedure that matches your services gateway configuration To upgrade a services gateway that has three or four standard capacity AC power supplies to two or four high capacity AC power supplies CAUTION Limit to five minutes or less the time...

Page 264: ...wer supply from the services gateway See Removing an SRX5600 Services Gateway AC Power Supply on page 255 for instructions on removing AC power supplies 11 If you are upgrading to four high capacity AC power supplies to achieve 2 2 redundancy install high capacity AC power supplies in the slots you vacated in Step 10 See Installing an SRX5600 Services Gateway AC Power Supply on page 256 for instru...

Page 265: ...eady done so replace the standard capacity fan tray with a high capacity fan tray For more information see Replacing the SRX5600 Services Gateway Fan Tray on page 248 3 Check the LEDs on all four power supply faceplates to ensure that they are operating properly 4 Remove the standard capacity power supply from slot PEM0 See Removing an SRX5600 Services Gateway AC Power Supply on page 255 for instr...

Page 266: ...600 Services Gateway SCB 272 Replacing the SRX5600 Services Gateway Routing Engine 276 Low Impact Hardware Upgrade for SCB3 and IOC3 280 In Service Hardware Upgrade for SRX5K RE 1800X4 and SRX5K SCBE or SRX5K RE 1800X4 and SRX5K SCB3 in a Chassis Cluster 298 Maintaining the SRX5600 Services Gateway Host Subsystem and SCBs Purpose For optimum services gateway performance verify the condition of the...

Page 267: ... S 1300 Serial ID 1000697084 Start time 2008 07 11 08 31 44 PDT Uptime 3 hours 27 minutes 27 seconds Load averages 1 minute 5 minute 15 minute 0 44 0 16 0 06 To check the status of the SCB issue the show chassis environment cb command The output is similar to the following user host show chassis environment cb CB 0 status State Online Master Temperature 40 degrees C 104 degrees F Power 1 1 2 V 120...

Page 268: ... Routing Engine you must take the host subsystem offline Taking the host subsystem offline causes the device to shut down To take the host subsystem offline 1 On the console or other management device connected to the Routing Engine that is paired with the SCB you are removing enter CLI operational mode and issue the following command The command shuts down the Routing Engine cleanly so its state ...

Page 269: ...he center of the board To insert or remove the SCB slide the ejector across the SCB horizontally rotate it and slide it again another quarter of a turn Turn the ejector again and repeat as necessary Utilize the indexing feature to maximize leverage and to avoid hitting any adjacent components Operate both ejector handles simultaneously The insertion force on an SCB is too great for one ejector Rep...

Page 270: ...ivated to avoid failures in the chassis cluster user host deactivate interfaces fab0 user host deactivate interfaces fab1 user host commit 2 Power off the services gateway using the command request system power off user host request system power off NOTE Wait until a message appears on the console confirming that the services stopped 3 Physically turn off the power and remove the power cables from...

Page 271: ...C NO C REO RE1 0 1 2 3 SCB g030247 Ejectors SCB STATUS SPU0 SERVICE STATUS SPU1 SERVICE HA OK FAIL CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT STATUS SPU0 SERVICE STATUS SPU1 SERVICE HA OK FAIL CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT Installing an SRX5600 Services Gateway SCB To install an SCB see Figure 122 on pag...

Page 272: ...teadily 9 To verify that the SCB is functioning normally check the LEDs on its faceplate The green OK FAIL LED should light steadily a few minutes after the SCB is installed If the OK FAIL LED is red remove and install the SCB again If the OK FAIL LED still lights steadily the SCB is not functioning properly Contact your customer support representative To check the status of the SCB user host show...

Page 273: ...vices Gateway Routing Engine To replace the Routing Engine perform the following procedures NOTE The procedure to replace a Routing Engine applies to both SRX5K RE 13 20 SRX5K RE 1800X4 and and SRX5K RE 128G 1 Removing the SRX5600 Services Gateway Routing Engine 276 2 Installing the SRX5600 Services Gateway Routing Engine 277 Removing the SRX5600 Services Gateway Routing Engine CAUTION Before you ...

Page 274: ...REO RE1 0 1 2 3 SCB SCB Routing Engine STATUS SPU0 SERVICE STATUS SPU1 SERVICE HA OK FAIL CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT STATUS SPU0 SERVICE STATUS SPU1 SERVICE HA OK FAIL CHASSIS CLUSTER CONTROL 0 ENABLE LINK ACT CHASSIS CLUSTER CONTROL 1 ENABLE LINK ACT g030250 Installing the SRX5600 Services Gateway Routing Engine To install a Routing Engine ...

Page 275: ... LED on the power supply faceplate should blink then light steadily The Routing Engine might require several minutes to boot After the Routing Engine boots verify that it is installed correctly by checking the RE0 and RE1 LEDs on the craft interface If the services gateway is operational and the Routing Engine is functioning properly the green ONLINE LED lights steadily If the red FAIL LED lights ...

Page 276: ...the following command ls la var db certs common key pair c If the same files exist on both nodes back up the files on the destination node to a different location For example root SRX B pwd var db certs common key pair root SRX B ls la total 8 drwx 2 root wheel 512 Jan 22 15 09 drwx 7 root wheel 512 Mar 26 2009 rw r r 1 root wheel 0 Jan 22 15 09 test root SRX B mv test test old root SRX B ls la to...

Page 277: ...RE1 to RE2 Before you begin the LICU procedure verify that both services gateways in the cluster are running the same Junos OS release NOTE You can perform the hardware upgrade using the LICU process only You must perform the hardware upgrade at the same time as the software upgrade from Junos OS Release 12 3X48 D10 to 15 1X49 D10 In the chassis cluster the primary device is depicted as node 0 and...

Page 278: ...Fabric ports must be set to any FPC number and control ports to any non IOC port Issue the following commands admin cluster delete chassis cluster control ports admin cluster set chassis cluster control ports fpc 10 port 0 non SPC port admin cluster set chassis cluster control ports fpc 22 port 0 non SPC port admin cluster delete interfaces fab0 admin cluster delete interfaces fab1 admin cluster s...

Page 279: ...3 Powering On a DC Powered SRX5600 Services Gateway on page 227 Powering On an AC Powered SRX5800 Services Gateway Powering On a DC Powered SRX5800 Services Gateway 8 Perform the hardware upgrade on the secondary node by replacing SCB2 with SCB3 IOC2 with IOC3 and the existing midplane with the enhanced midplane Following these steps while upgrading the SCB To upgrade the Routing Engine on the sec...

Page 280: ...For more information about mounting the USB drive on the device refer to KB articles KB12880 and KB12022 from the Knowledge Base Perform this step when you upgrade the MPC 283 ...

Page 281: ...b1 fabric options member interfaces xe 9 0 2 set groups global interfaces fab0 fabric options member interfaces xe 3 0 2 edit root clustert show display set grep reth0 set chassis cluster redundancy group 1 ip monitoring family inet 44 44 44 2 interface reth0 0 secondary ip address 44 44 44 3 set interfaces xe 3 0 0 gigether options redundant parent reth0 set interfaces xe 9 0 0 gigether options r...

Page 282: ...monitoring FL Fabric Connection monitoring GR GRES monitoring HW Hardware monitoring IF Interface monitoring IP IP monitoring LB Loopback monitoring MB Mbuf monitoring NH Nexthop monitoring NP NPC monitoring SP SPU monitoring SM Schedule monitoring CF Config Sync monitoring Cluster ID 1 Node Priority Status Preempt Manual Monitor failures Redundancy group 0 Failover count 1 node0 0 lost n a n a n ...

Page 283: ...admin cluster set interfaces xe 2 0 0 disable admin cluster set interfaces xe 2 1 0 disable admin cluster delete interfaces xe 5 0 0 disable admin cluster delete interfaces xe 5 1 0 disable For SRX5600 Services Gateways admin cluster set interfaces xe 2 0 0 disable admin cluster set interfaces xe 2 0 4 disable admin cluster delete interfaces xe 9 0 0 disable admin cluster delete interfaces xe 9 0 ...

Page 284: ...ry node admin cluster request system reboot See Powering On an AC Powered SRX5400 Services Gateway Powering On a DC Powered SRX5400 Services Gateway Powering On an AC Powered SRX5600 Services Gateway on page 223 Powering On a DC Powered SRX5600 Services Gateway on page 227 Powering On an AC Powered SRX5800 Services Gateway Powering On a DC Powered SRX5800 Services Gateway 16 Perform the hardware u...

Page 285: ...c Upload the configuration to RE2 from the USB device 288 ...

Page 286: ...For more information about mounting the USB drive on the device refer to KB articles KB12880 and KB12022 from the Knowledge Base Perform this step when you upgrade the MPC 289 ...

Page 287: ...ay set grep reth0 set chassis cluster redundancy group 1 ip monitoring family inet 44 44 44 2 interface reth0 0 secondary ip address 44 44 44 3 set interfaces xe 3 0 0 gigether options redundant parent reth0 set interfaces xe 9 0 0 gigether options redundant parent reth0 set interfaces reth0 vlan tagging set interfaces reth0 redundant ether options redundancy group 1 set interfaces reth0 unit 0 vl...

Page 288: ...ring NH Nexthop monitoring NP NPC monitoring SP SPU monitoring SM Schedule monitoring CF Config Sync monitoring Cluster ID 1 Node Priority Status Preempt Manual Monitor failures Redundancy group 0 Failover count 1 node0 0 lost n a n a n a node1 100 primary no no None Redundancy group 1 Failover count 3 node0 0 lost n a n a n a node1 150 primary no no None root cluster show chassis fpc pic status n...

Page 289: ...ary For SRX5400 Services Gateways admin cluster set interfaces xe 5 0 0 disable admin cluster set interfaces xe 5 1 0 disable admin cluster delete interfaces xe 2 0 0 disable admin cluster delete interfaces xe 2 1 0 disable For SRX5600 Services Gateways admin cluster set interfaces xe 9 0 0 disable admin cluster set interfaces xe 9 0 4 disable admin cluster delete interfaces xe 2 0 0 disable admin...

Page 290: ...m reboot See Powering On an AC Powered SRX5400 Services Gateway Powering On a DC Powered SRX5400 Services Gateway Powering On an AC Powered SRX5600 Services Gateway on page 223 Powering On a DC Powered SRX5600 Services Gateway on page 227 Powering On an AC Powered SRX5800 Services Gateway Powering On a DC Powered SRX5800 Services Gateway a When you power on the secondary node enable the control po...

Page 291: ...syn check admin cluster delete security flow tcp session no sequence check 27 Commit the configuration root commit 28 Verify the Redundancy Group RG states and their priority root cluster show version node0 Hostname displays the hostname Model displays the model number Junos 15 1X49 D10 JUNOS Software Release 15 1X49 D10 node1 Hostname displays the hostname Model displays the model Junos 15 1X49 D...

Page 292: ...Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 5 Online SRX5k IOC II PIC 0 Online 10x 10GE SFP PIC 2 Online 10x 10GE SFP node1 Slot 1 Online SRX5k IOC II PIC 0 Online 1x 100GE CFP PIC 2 Online 2x 40GE QSFP Slot 2 Online SRX5k SPC II PIC 0 Online SPU Cp PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 3 Online SRX5k IOC3 24XGE 6XLG PIC 0 Online 12x 10GE SFP P...

Page 293: ...r ID 1 Node Priority Status Preempt Manual Monitor failures Redundancy group 0 Failover count 0 node0 250 primary no no None node1 100 secondary no no None Redundancy group 1 Failover count 0 node0 254 primary no no None node1 150 secondary no no None root cluster show security monitoring node0 Flow session Flow session CP session CP session FPC PIC CPU Mem current maximum current maximum 2 0 0 11...

Page 294: ... interfaces terse grep reth0 xe 3 0 0 0 up up aenet reth0 0 xe 3 0 0 32767 up up aenet reth0 32767 xe 9 0 0 0 up up aenet reth0 0 xe 9 0 0 32767 up up aenet reth0 32767 reth0 up up reth0 0 up up inet 44 44 44 1 8 reth0 32767 up up multiservice root cluster show interfaces terse grep reth1 xe 3 0 4 0 up up aenet reth1 0 xe 3 0 4 32767 up up aenet reth1 32767 xe 9 0 4 0 up up aenet reth1 0 xe 9 0 4 ...

Page 295: ...hat you perform the ISHU during a maintenance window or during the lowest possible traffic as the secondary node is not available at this time Ensure to upgrade the SCB and Routing Engine at the same time as the following configurations are only supported SRX5K RE 13 20 and SRX5K SCB SRX5K RE 1800X4 and SRX5K SCBE SRX5K RE 1800X4 and SRX5K SCB3 NOTE While performing the ISHU in the SRX5800 service...

Page 296: ...ed in service software upgrade unified ISSU see Upgrading Both Devices in a Chassis Cluster Using an ISSU To perform an ISHU 1 Export the configuration information from the secondary node to a USB or an external storage device For more information about mounting the USB on the device refer to KB articles KB12880 and KB12022 from the Knowledge Base 2 Power off the secondary node See Powering Off th...

Page 297: ...ease 12 1X47 D15 or later for SRX5K RE 1800X4 SRX5K SCBE and 15 1X49 D10 or later for SRX5K RE 1800X4 SRX5K SCB3 8 After the secondary node reboots import all the configuration settings from the USB to the node For more information about mounting the USB on the device refer to KB articles KB12880 and KB12022 from the Knowledge Base 9 Power off the secondary node See Powering Off the SRX5400 Servic...

Page 298: ...ter failover redundancy group 0 node 1 For RG1 issue the following command admin cluster request chassis cluster failover redundancy group 1 node 1 Verify that all RGs are failed over by issuing the following command admin cluster show chassis cluster status 13 Verify the operations of the upgraded secondary node by performing the following To ensure all FPC s are online issue the following comman...

Page 299: ...ning the SRX5600 Line Cards and Modules IN THIS SECTION Maintaining Interface Cards and SPCs on the SRX5600 Services Gateway 303 Holding an SRX5600 Services Gateway Card 305 Storing an SRX5600 Services Gateway Card 307 Replacing SRX5600 Services Gateway IOCs 308 Replacing SRX5600 Services Gateway Flex IOCs 313 Replacing SRX5600 Services Gateway SPCs 318 Replacing SPCs in an Operating SRX5400 SRX56...

Page 300: ...ace card If the card detects a failure it sends an alarm message to the Routing Engine Issue the CLI show chassis fpc command to check the status of installed cards As shown in the sample output the value Online in the column labeled State indicates that the card is functioning normally user host show chassis fpc Temp CPU Utilization Memory Utilization Slot State C Total Interrupt DRAM MB Heap Buf...

Page 301: ...egrees C 107 degrees F Total CPU DRAM 1024 MB Total RLDRAM 256 MB Total DDR DRAM 4096 MB Start time 2007 07 10 12 28 42 PDT Uptime 1 hour 33 minutes 43 seconds Issue the CLI show chassis fpc pic status command The slots are numbered 0 through 5 bottom to top user host show chassis fpc pic status Slot 0 Online SRX5k DPC 40x 1GE PIC 0 Online 10x 1GE RichQ PIC 1 Online 10x 1GE RichQ PIC 2 Online 10x ...

Page 302: ...ou lift it To hold a card vertically 1 Orient the card so that the faceplate faces you To verify orientation confirm that the text on the card is right side up and the EMI strip is on the right hand side 2 Place one hand around the card faceplate about a quarter of the way down from the top edge To avoid deforming the EMI shielding strip do not press hard on it 3 Place your other hand at the botto...

Page 303: ...hat this topic indicates are appropriate In particular never grasp the connector edge especially at the power connector in the corner where the connector and bottom edges meet see Figure 125 on page 306 Figure 125 Do Not Grasp the Connector Edge Never carry the card by the faceplate with only one hand Do not rest any edge of a card directly against a hard surface see Figure 126 on page 307 Do not ...

Page 304: ... the shipping container always place it inside an antistatic bag Because the card is heavy and because antistatic bags are fragile inserting the card into the bag is easier with two people To do this one person holds the card in the horizontal position with the faceplate facing the body and the other person slides the opening of the bag over the card connector edge If you must insert the card into...

Page 305: ...r bare wrist and connect the other end of the strap to the ESD point on the chassis 3 Label the cables connected to each port on the IOC so that you can later reconnect the cables to the correct ports 4 Use one of the following methods to take the IOC offline Press and hold the corresponding online button on the craft interface The green OK LED next to the button begins to blink Hold the button do...

Page 306: ...ving cable The safety cap keeps the port clean and prevents accidental exposure to laser light CAUTION Avoid bending a fiber optic cable beyond its minimum bend radius An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose 8 Immediately cover each optical transceivers and the end of each fiber optic cable with a rubber safety cap 9 Arran...

Page 307: ...are not reinstalling an IOC into the empty slot within a short time install a blank panel over the slot to maintain proper airflow in the card cage CAUTION After removing an IOC from the chassis wait at least 30 seconds before reinserting it removing an IOC from a different slot or inserting an IOC into a different slot Figure 127 Removing an IOC OK MASTER FAN ONLINE OFFLINE 0 1 1 0 FAIL FAIL PEM ...

Page 308: ... optic transceiver is covered with a rubber safety cap If it does not cover the transceiver with a safety cap 7 Orient the IOC so that the faceplate faces you 8 Lift the IOC into place and carefully align the right and left edges of the IOC with the guides inside the card cage 9 Slide the IOC all the way into the card cage until you feel resistance 10 Grasp both ejector handles and rotate them clo...

Page 309: ... are difficult to diagnose 14 Connect the power cables to the chassis 15 Power on the services gateway 16 Use one of the following methods to bring the IOC online Press and hold the corresponding IOC online button on the craft interface until the green OK LED next to the button lights steadily in about 5 seconds Issue the following CLI command user host request chassis fpc slot slot number online ...

Page 310: ...Cs To replace a Flex IOC perform the following procedures 1 Removing an SRX5600 Services Gateway Flex IOC 313 2 Installing an SRX5600 Services Gateway Flex IOC 316 Removing an SRX5600 Services Gateway Flex IOC A Flex IOC weighs up to 13 1 lb 5 9 kg Be prepared to accept the full weight of the card as you remove it 313 ...

Page 311: ...mmand see Junos OS System Basics and Services Command Reference at www juniper net documentation 4 Power off the services gateway using the command request system power off user host request system power off NOTE Wait until a message appears on the console confirming that the services stopped 5 Physically turn off the power and remove the power cables from the chassis 6 If you have not already don...

Page 312: ... IOCs on top of one another after removal Place each one individually in an electrostatic bag or on its own antistatic mat on a flat stable surface 10 If you are not reinstalling a replacement card into the empty slot within a short time install a blank panel over the slot to maintain proper airflow in the card cage CAUTION After removing an IOC from the chassis wait at least 30 seconds before rei...

Page 313: ...user host request system power off NOTE Wait until a message appears on the console confirming that the services stopped 4 Physically turn off the power and remove the power cables from the chassis 5 Identify the slot on the services gateway where you will install the Flex IOC 6 If you have not already done so remove the blank panel from the slot where you are installing the Flex IOC 7 Orient the ...

Page 314: ...sponding online button on the craft interface until the green OK LED next to the button lights steadily in about 5 seconds Issue the following CLI command user host request chassis fpc slot slot number online For more information about the command see Junos OS System Basics and Services Command Reference at www juniper net documentation CAUTION After the OK LED turns green wait at least 30 seconds...

Page 315: ...the services gateway using the command request system power off user host request system power off NOTE Wait until a message appears on the console confirming that the services stopped 4 Physically turn off the power and remove the power cables from the chassis 5 Label the cables connected to each port on the SPC so that you can later reconnect the cables to the correct ports 6 Disconnect the cabl...

Page 316: ...ide the SPC straight out of the card cage halfway 9 Place one hand around the front of the SPC and the other hand under it to support it Slide the SPC completely out of the chassis and place it on the antistatic mat or in the electrostatic bag CAUTION The weight of the SPC is concentrated in the back end Be prepared to accept the full weight up to 18 3 lb 8 3 kg as you slide the SPC out of the cha...

Page 317: ...th of the devices at the same time This eliminates the network downtime you would otherwise incur while adding SPCs For more information see Replacing SPCs in an Operating SRX5400 SRX5600 or SRX5800 Services Gateways Chassis Cluster To install an SPC see Figure 133 on page 322 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points ...

Page 318: ...able WARNING Do not look directly into a fiber optic transceiver or into the ends of fiber optic cables Fiber optic transceivers and fiber optic cable connected to a transceiver emit laser light that can damage your eyes 12 Insert the appropriate cables into the cable connector ports on each SPC see Figure 134 on page 322 Secure the cables so that they are not supporting their own weight Place exc...

Page 319: ...wer supply faceplate should blink then light steadily 15 Verify that the SPC is functioning correctly by issuing the show chassis fpc and show chassis fpc pic status commands Figure 133 Installing an SPC g030216 Figure 134 Attaching a Cable to an SPC 322 ...

Page 320: ...second generation SRX5K SPC 4 15 320 SPCs both of the services gateways in the cluster must be running Junos OS Release 12 1X44 D10 or later To replace next generation SRX5K SPC3 SPCs both of the services gateways in the cluster must be running Junos OS Release 18 2R1 S1 or later You must install SPCs of the same type and in the same slots in both of the services gateways in the cluster Both servi...

Page 321: ...ring this installation procedure you must shut down both devices one at a time During the period when one device is shut down the remaining device operates without a backup If that remaining device fails for any reason you incur network downtime until you restart at least one of the devices To replace SPCs in an Services Gateway cluster without incurring downtime 1 Use the console port on the Rout...

Page 322: ...e sure that the priority for all redundancy groups is greater than zero 13 Use the console port on the device that is the primary node to establish a CLI session 14 In the CLI session for the primary node device use the request chassis cluster failover command to fail over each redundancy group that has an ID number greater than zero 15 In the CLI session for the primary node device use the reques...

Page 323: ...ou transition the cluster to active passive mode by making one node primary for all redundancy groups When you are adding a new SRX5K SPC3 to a chassis it must be installed in the higher numbered slot than any other installed SPCs in the chassis Installing SRX5K SPC3s to the chassis cluster must not change the central point CP functionality mode from Combo CP mode to Full CP mode When there are tw...

Page 324: ...teway to shut down completely and than remove the power cables from the chassis 7 Install the new SPC3 or SPC3s in the powered off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC or Installing an SRX5600 Services Gateway SPC on page 320 or Installing an SRX5800 Services Gateway SPC 8 Insert the power cables to the chassis and power on the secondary services gatew...

Page 325: ...he SRX5600 Services Gateway Purpose For optimum services gateway performance verify the condition of the MICs installed in MPCs and port modules installed in Flex IOCs Action On a regular basis Check the LEDs on MIC and port modules faceplates The meaning of the LED states differs for various port modules If the Flex IOC that houses the port modules detects a port modules failure the Flex IOC gene...

Page 326: ... a flat stable surface to receive the MIC If the MIC connects to fiber optic cable have ready a rubber safety cap for each transceiver and cable 2 Wrap and fasten one end of the ESD grounding strap around your bare wrist and connect the other end of the strap to the ESD point on the chassis 3 Power off the services gateway 4 Label the cables connected to the MIC so that you can later reconnect eac...

Page 327: ...ght 6 Arrange the cable to prevent it from dislodging or developing stress points Secure the cable so that it is not supporting its own weight as it hangs to the floor Place excess cable out of the way in a neatly coiled loop CAUTION Avoid bending a fiber optic cable beyond its minimum bend radius An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficu...

Page 328: ...ty cap is over each transceiver on the faceplate Install a cap if necessary 4 On the MPC pull the ejector knob that is adjacent to the MIC you are installing away from the MPC faceplate The ejector knob is located between the MIC and the rotational knob that retains the MPC in the services gateway card cage See Figure 136 on page 331 Figure 136 Installing a MIC g030316 1 2 5 Align the rear of the ...

Page 329: ...ncovered except when you are inserting or removing cable The safety cap keeps the port clean and prevents accidental exposure to laser light 9 Insert the appropriate cables into the cable connectors on the MIC 10 Arrange each cable to prevent the cable from dislodging or developing stress points Secure the cable so that it is not supporting its own weight as it hangs to the floor Place excess cabl...

Page 330: ...ave ready a replacement port module or blank panel and an antistatic mat for the port module Also have ready rubber safety caps for each port on the port module you are removing that uses an optical interface 2 Wrap and fasten one end of the ESD grounding strap around your bare wrist and connect the other end of the strap to the ESD point on the chassis 3 Label the cables connected to each port on...

Page 331: ...t leave a fiber optic transceiver uncovered except when you are inserting or removing cable The safety cap keeps the port clean and prevents accidental exposure to laser light CAUTION Avoid bending a fiber optic cable beyond its minimum bend radius An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose 7 Loosen the captive screws that re...

Page 332: ...port module into a Flex IOC see Figure 138 on page 336 1 Wrap and fasten one end of the ESD grounding strap around your bare wrist and connect the other end of the strap to the ESD point on the chassis 2 Power off the services gateway 3 If you have not already done so install the Flex IOC in which you are installing the port module 4 Place the port module on an antistatic mat or remove it from its...

Page 333: ...cable WARNING Do not look directly into a fiber optic transceiver or into the ends of fiber optic cables Fiber optic transceivers and fiber optic cables connected to a transceiver emit laser light that can damage your eyes 12 Insert the appropriate cables into the cable connector ports on each port module Secure the cables so that they are not supporting their own weight Place excess cable out of ...

Page 334: ...g CLI command user host request chassis fpc slot slot number pic slot slot number online For more information about the command see Junos OS System Basics and Services Command Reference at www juniper net documentation CAUTION After the OK FAIL LED turns green wait at least 30 seconds before removing the port module again removing a port module from a different slot or inserting a port module in a...

Page 335: ...f the services gateway 4 Label the cables connected to each MIC on the MPC so that you can later reconnect the cables to the correct MICs 5 Disconnect the cables from the MICs installed in the MPC WARNING Do not look directly into a fiber optic transceiver or into the ends of fiber optic cables Fiber optic transceivers and fiber optic cables connected to a transceiver emit laser light that can dam...

Page 336: ... 10 Place one hand around the front of the MPC the MIC housing and the other hand under it to support it Slide the MPC completely out of the chassis and place it on the antistatic mat or in the electrostatic bag CAUTION The weight of the MPC is concentrated in the back end Be prepared to accept the full weight up to 18 35 lb 8 3 kg as you slide the MPC out of the chassis When the MPC is out of the...

Page 337: ... 2 Place the MPC on an antistatic mat 3 If you have not already done so power off the services gateway 4 Take each MIC to be installed in the replacement MPC out of its electrostatic bag and identify the slot on the MPC where it will be connected 5 Verify that each fiber optic MIC has a rubber safety cap covering the MIC transceiver If it does not cover the transceiver with a safety cap 6 Install ...

Page 338: ...into the ends of fiber optic cables Fiber optic transceivers and fiber optic cables connected to a transceiver emit laser light that can damage your eyes 13 Insert the appropriate cable into the cable connector ports on each MIC on the MPC Secure the cables so that they are not supporting their own weight Place excess cable out of the way in a neatly coiled loop using the cable management system P...

Page 339: ...es Gateway Network Cables 342 Replacing the Management Ethernet Cable on the SRX5600 Services Gateway 344 Replacing the SRX5600 Services Gateway Console or Auxiliary Cable 345 Replacing an SRX5600 Services Gateway Network Interface Cable 346 Replacing SRX5600 Services Gateway XFP and SFP Transceivers 350 Replacing the SRX5600 Services Gateway Cable Manager 353 Maintaining SRX5600 Services Gateway ...

Page 340: ...bles to identify them The following guidelines apply specifically to fiber optic cables When you unplug a fiber optic cable always place a rubber safety plug over the transceiver on the IOC or port module faceplate and on the end of the cable Anchor fiber optic cables to avoid stress on the connectors Be sure to secure fiber optic cables so that they do not support their own weight as they hang to...

Page 341: ... Cleaner Follow the directions for the cleaning kit you use Replacing the Management Ethernet Cable on the SRX5600 Services Gateway One Ethernet cable with RJ 45 connectors is provided with the services gateway Before you begin to replace the management ethernet cable Ensure you understand how to prevent electrostatic discharge ESD damage See Prevention of Electrostatic Discharge Damage on page 45...

Page 342: ...evice to both ports you must supply another cable Before you begin to replace the console or auxiliary Cable Ensure you understand how to prevent electrostatic discharge ESD damage See Prevention of Electrostatic Discharge Damage on page 453 Ensure that you have the following available ESD grounding strap To replace a cable connected to a management console or auxiliary device 1 Wrap and fasten on...

Page 343: ...X5600 Services Gateway Network Interface Cable 346 2 Installing an SRX5600 Services Gateway Network Interface Cable 348 Removing an SRX5600 Services Gateway Network Interface Cable Removing and installing network interface cables does not affect services gateway function except that the component does not receive or transmit data while its cable is disconnected Before you begin removing the networ...

Page 344: ...unos OS System Basics and Services Command Reference at www juniper net documentation To take an interface card offline Press and hold the corresponding online button on the craft interface The green OK LED next to the button begins to blink Hold the button down until the LED goes off Issue the following CLI command user host request chassis fpc slot slot number offline For more information about ...

Page 345: ... cable used by the component 2 If the cable connector port is covered by a rubber safety plug remove the plug WARNING Do not look directly into a fiber optic transceiver or into the ends of fiber optic cables Fiber optic transceivers and fiber optic cables connected to a transceiver emit laser light that can damage your eyes CAUTION Do not leave a fiber optic transceiver uncovered except when you ...

Page 346: ...D next to the button lights steadily in about 5 seconds Issue the following CLI command user host request chassis fpc slot slot number online For more information about the command see Junos OS System Basics and Services Command Reference at www juniper net documentation To bring a port module online Press the port module online button until the PIC LED lights green Use a narrow ended tool that fi...

Page 347: ...derstand how to prevent electrostatic discharge ESD damage See Prevention of Electrostatic Discharge Damage on page 453 Ensure that you have the following available ESD grounding strap Replacement transceiver or transceiver slot plug Antistatic mat Rubber safety cap for the transceiver Needle nose pliers To remove a transceiver see Figure 145 on page 351 1 Wrap and fasten one end of the ESD ground...

Page 348: ... a fiber optic cable beyond its minimum bend radius An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose 5 Using needle nose pliers open the ejector lever on the transceiver completely to unlock the transceiver See Figure 145 on page 351 CAUTION Make sure that you open the ejector lever completely until you hear it click This prevents ...

Page 349: ...Center JTAC can help you diagnose the source of the problem Your JTAC engineer might recommend that you check the third party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device Before you begin to install a SFP or XFP transceiver Ensure you understand how to prevent electrostatic discharge ESD damage See Prevention of Elect...

Page 350: ...ng correctly Replacing the SRX5600 Services Gateway Cable Manager To replace the cable manager perform the following procedures 1 Removing the SRX5600 Services Gateway Cable Manager 353 2 Installing the SRX5600 Services Gateway Cable Manager 354 Removing the SRX5600 Services Gateway Cable Manager The cable management system is located on both sides of the card cage The cable management system weig...

Page 351: ...nstall the cable management system 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 2 Position the cable management system on the front sides of the chassis 3 Insert the tabs into the slots 4 Tighten the captive screws completely 354 ...

Page 352: ...e prerequisites and assumptions for this procedure Console and SSH access are available Firmware package is available on the USB flash drive and the firmware version matches the version of Junos OS currently installed on the device Use the show version command to identify the Junos OS version You can download the firmware from https support juniper net support downloads The chassis cluster has onl...

Page 353: ...tatus secondary node0 root node0 show chassis cluster status Monitor Failure codes CS Cold Sync monitoring FL Fabric Connection monitoring GR GRES monitoring HW Hardware monitoring IF Interface monitoring IP IP monitoring LB Loopback monitoring MB Mbuf monitoring NH Nexthop monitoring NP NPC monitoring SP SPU monitoring SM Schedule monitoring CF Config Sync monitoring RE Relinquish monitoring Clus...

Page 354: ...lled License identifier xxxxxxxxxx License version 2 Features subscriber acct Per Subscriber Radius Accounting permanent subscriber auth Per Subscriber Radius Authentication permanent subscriber addr Address Pool Assignment permanent subscriber vlan Dynamic Auto sensed Vlan permanent subscriber ip Dynamic and Static IP permanent d If licenses are installed copy the output of the show system licens...

Page 355: ...ry 5 00 Removable Direct Access SCSI 0 device da2 40 000MB s transfers da2 983MB 2013184 512 byte sectors 64H 32S T 983C d List all the directories with names starting with da in the dev folder and identify the USB drive root node0 ls dev da root node0 ls dev da dev da0 dev da0s1c dev da0s2a dev da0s3 dev da0s3e dev da0s1 dev da0s1f dev da0s2c dev da0s3c dev da2 dev da0s1a dev da0s2 dev da0s2f dev...

Page 356: ... event options policy NAT POOL UTIL events 60s set event options policy NAT POOL UTIL then event script srx nat bucket overload slax arguments utilization threshold 90 set event options policy NAT POOL UTIL then event script srx nat bucket overload slax arguments pool GLOBAL set event options event script traceoptions file escript log size 1m files 2 set event options event script traceoptions fla...

Page 357: ... root node1 show chassis cluster interfaces primary node1 root node1 show chassis cluster interfaces Control link status Down Control interfaces Index Interface Monitored Status Internal SA Security 0 em0 Down Disabled Disabled 1 em1 Down Disabled Disabled Fabric link status Down Control interfaces Name Child Interface Status Security Physical Monitored fab0 xe 11 0 3 Down Down Disable fab0 g Powe...

Page 358: ...equest system license add terminal See Adding New Licenses CLI Procedure c Load and commit the configuration root node0 configure shared root node0 load override var tmp filename root node0 commit root node0 exit 6 Check the status of all the FPCs and PICs and ensure that all the FPCs and PICs are online root node0 show chassis fpc pic status 7 Halt node 0 from the console root node0 request syste...

Page 359: ...healthy reset the cluster priorities root node1 request chassis cluster failover reset redundancy group 1 root node1 request chassis cluster failover reset redundancy group 0 Replacing a Routing Engine External SCP Server Method The following are the assumptions and prerequisites for this procedure Console access and SSH access are available The chassis cluster has only two redundancy groups RG0 a...

Page 360: ...sis cluster status secondary node0 root node0 show chassis cluster status Monitor Failure codes CS Cold Sync monitoring FL Fabric Connection monitoring GR GRES monitoring HW Hardware monitoring IF Interface monitoring IP IP monitoring LB Loopback monitoring MB Mbuf monitoring NH Nexthop monitoring NP NPC monitoring SP SPU monitoring SM Schedule monitoring CF Config Sync monitoring RE Relinquish mo...

Page 361: ...ent Licenses installed License identifier xxxxxxxxxx License version 2 Features subscriber acct Per Subscriber Radius Accounting permanent subscriber auth Per Subscriber Radius Authentication permanent subscriber addr Address Pool Assignment permanent subscriber vlan Dynamic Auto sensed Vlan permanent subscriber ip Dynamic and Static IP permanent d If licenses are installed copy the output of the ...

Page 362: ...options policy NAT POOL UTIL events 60s set event options policy NAT POOL UTIL then event script srx nat bucket overload slax arguments utilization threshold 90 set event options policy NAT POOL UTIL then event script srx nat bucket overload slax arguments pool GLOBAL set event options event script traceoptions file escript log size 1m files 2 set event options event script traceoptions flag outpu...

Page 363: ...atus Internal SA Security 0 em0 Down Disabled Disabled 1 em1 Down Disabled Disabled Fabric link status Down Control interfaces Name Child Interface Status Security Physical Monitored fab0 xe 11 0 3 Down Down Disable fab0 g Power on node 0 4 Load the configuration file and scripts on the new Routing Engine a Log in to the Routing Engine on node 0 from the console b Configure the IP address for the ...

Page 364: ...r ip junos release domestic tgz var tmp root node0 cli root node0 request system software add var tmp junos release domestic tgz reboot The device reboots and comes up with the intended Junos OS version f Copy the configuration file from the external SCP server root node0 scp root server ip node0 config yyyy mm dd var tmp node0 config yyyy mm dd g Optional If you backed up scripts then restore the...

Page 365: ...ng any key on the console 9 Check the chassis cluster status on node 1 root node1 show chassis cluster status Node 0 comes up and becomes the secondary node on both RG0 and RG1 Wait until the node 0 priority on RG1 changes to the configured value 10 Verify that sessions are showing up on node 0 and that the number of sessions on node 0 is nearly equal to the number of sessions on the primary node ...

Page 366: ...request chassis cluster failover redundancy group 1 node 1 Fail over RG0 root node0 request chassis cluster failover redundancy group 0 node 1 b Verify that both RGs are active on node 1 after the failover root node0 show chassis cluster status secondary node0 root node0 show chassis cluster status Monitor Failure codes CS Cold Sync monitoring FL Fabric Connection monitoring GR GRES monitoring HW ...

Page 367: ...er 0 1000 0 permanent scale l2tp 0 1000 0 permanent scale mobile ip 0 1000 0 permanent Licenses installed License identifier xxxxxxxxxx License version 2 Features subscriber acct Per Subscriber Radius Accounting permanent subscriber auth Per Subscriber Radius Authentication permanent subscriber addr Address Pool Assignment permanent subscriber vlan Dynamic Auto sensed Vlan permanent subscriber ip ...

Page 368: ...s flag output set event options event script file srx monitor addbook policy count slax f If any scripts are referenced in the configuration then back up these scripts root node0 scp var db scripts commit commit script slax root node1 fxp0 ip commit script slax 4 Install the replacement Routing Engine a Power off node 0 root node0 request system power off b Wait until a message appears on the cons...

Page 369: ... password and the IP address for the fxp0 interface Do not commit the configuration NOTE You need not configure a gateway as the assumption is that the fxp0 interfaces on both nodes are in the same subnet root node0 edit root node0 set system root authentication plain text password New password type password here Retype new password retype password here root node0 set interfaces fxp0 unit 0 family...

Page 370: ...ware add var tmp junos release domestic tgz reboot The device reboots and comes up with the intended Junos OS version g Optional Copy the scripts that you backed up in Step 3 from node 1 root node1 scp var db scripts op op script slax root node0 fxp0 ip var db scripts op h Optional Apply the licenses that you backed up in Step 3 root node0 request system license add terminal See Adding New License...

Page 371: ...e secondary node on both RG0 and RG1 Wait until the node 0 priority on RG1 changes to the configured value 11 Verify that sessions are showing up on node 0 and that the number of sessions on node 0 is nearly equal to the number of sessions on the primary node node 1 root node1 show security monitoring 12 If the cluster is healthy reset the cluster priorities root node1 request chassis cluster fail...

Page 372: ...5 CHAPTER Troubleshooting Hardware Troubleshooting the SRX5600 377 ...

Page 373: ......

Page 374: ...Modules 399 Troubleshooting SRX5600 Services Gateway SPCs 400 Troubleshooting the SRX5600 Services Gateway Power System 401 Behavior of the SRX5400 SRX5600 and SRX5800 Services Gateways When the SRX5K SCBE and SRX5K RE 1800X4 in a Chassis Cluster Fail 407 Troubleshooting the SRX5600 Services Gateway with the Junos OS CLI The Junos OS command line interface CLI is the primary tool for controlling a...

Page 375: ...Gateways Table 59 on page 378 lists the alarms that the chassis components can generate on SRX5400 SRX5600 and SRX5800 Services Gateways Table 59 Chassis Component Alarm Conditions on SRX5400 SRX5600 and SRX5800 Services Gateways Alarm Severity Remedy Alarm Condition Chassis Component Yellow Change air filter Change air filter Air filters Yellow Open a support case using the Case Manager link at h...

Page 376: ...ion Chassis Component Yellow Check the card Remove and reinsert the card If this fails replace failed card An interface card is offline Interface Cards MPC IOC Flex IOC Red Replace failed card An interface card has failed Red Insert card into empty slot An interface card has been removed Red Reboot the specified card Volt Sensor Fail 379 ...

Page 377: ...erature threshold Red Check the status of all fan trays FPC airflow temperature sensors in SRX5K SPC3 reach high or over or crosses fire temperature threshold Yellow If the alarm is present consistently then it indicates a hardware issue Open a support case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the Uni...

Page 378: ...m Conditions on SRX5400 SRX5600 and SRX5800 Services Gateways continued Alarm Severity Remedy Alarm Condition Chassis Component SRX5K SPC3 LTC Firm Ware Version Mismatch LEDs on the front panel of the chassis indicate major alarm 381 ...

Page 379: ...atch alarm 2 Issue the CLI show system firmware command to check the current LTC firmware version if a new verision of LTC firmware is available for the SRX5K SPC3 card and the firmware status is OK 3 If there is a new version of LTC firmware issue the CLI command request system firmware upgrade pic fpc slot x pic slot x tag x to upgrade the LTC firmware on the SRX5K SPC3 card 4 Issue the CLI comm...

Page 380: ...ttps www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States Real Time Clock battery failure Red Replace the SSD or Open a support case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States SSDs on the SRX5K SPC3 missing or read write to SSD...

Page 381: ...X5600 and SRX5800 Services Gateways continued Alarm Severity Remedy Alarm Condition Chassis Component From the CLI use the command restart chassis control to reboot the services gateway If SPC still doesn t come online then remove and insert back the SPC 384 ...

Page 382: ...n tray A higher cooling capacity fan tray is required when an MPC or high density SPCs are installed on the chassis Red Reseat the Fan Tray If problem still continues open a support case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States Fan tray under voltage Red Check and insert the appropriate ...

Page 383: ...5600 and SRX5800 Services Gateways continued Alarm Severity Remedy Alarm Condition Chassis Component Yellow Insert host subsystem into empty slot A host subsystem has been removed Host subsystem Red Replace failed host subsystem A host subsystem has failed 386 ...

Page 384: ... supply output connection A power supply output has failed Red Replace failed power supply A power supply has failed Red When two AC power supplies are installed insert one power supply into an odd numbered slot and the other power supply into an even numbered slot Invalid AC power supply configuration Red When two DC power supplies are installed insert one power supply into an odd numbered slot a...

Page 385: ...sis Component Alarm Conditions on SRX5400 SRX5600 and SRX5800 Services Gateways continued Alarm Severity Remedy Alarm Condition Chassis Component Red Install an additional power supply Not enough power supplies 388 ...

Page 386: ...faulty serial console port cable connected to the device Routing Engine Yellow Reformat hard disk and install bootable image If this fails replace failed Routing Engine Error in reading or writing hard disk Yellow Reformat CompactFlash card and install bootable image If this fails replace failed Routing Engine Error in reading or writing CompactFlash card Yellow Install bootable image on default m...

Page 387: ...uting Engine Red Replace failed Routing Engine Routing Engine failed to boot Red Check the interface cable connection Reboot the system If the alarm recurs open a support case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States The Ethernet management interface fxp0 or em0 on the Routing Engine is ...

Page 388: ...nsor alarm has failed Red Replace failed SCB An SCB has failed Yellow Check fabric plane summary if all 4 fabric planes are online This alarm could be raised before all fabric planes are brought up It will be cleared after at least 4 planes are up If all planes are up and still seeing alarms raise a case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free ...

Page 389: ... it Check airflow Check fan The chassis temperature has exceeded 65 degrees C 149 degrees F and the fans have been turned on to full speed Red Check room temperature Check air filter and replace it Check airflow Check fan The chassis temperature has exceeded 65 degrees C 149 degrees F and a fan has failed If this condition persists for more than 4 minutes the Services Gateway shuts down Red Check ...

Page 390: ... or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States Backup Routing Engine Alarms For Services Gateways with master and backup Routing Engines a master Routing Engine can generate alarms for events that occur on a backup Routing Engine Table 60 on page 394 lists chassis alarms generated for a backup Routing Engine NOTE Because the failure occurs on the backu...

Page 391: ...uting Engine Boot Device Yellow Check the interface cable connection Reboot the system If the alarm recurs open a support case using the Case Manager link at https www juniper net support or call 1 888 314 5822 toll free US Canada or 1 408 745 9500 from outside the United States The Ethernet management interface fxp0 or em0 on the backup Routing Engine is down Ethernet Yellow Open a support case u...

Page 392: ...SRX5600 Services Gateway with Alarm Relay Contacts The craft interface has two alarm relay contacts for connecting the services gateway to external alarm devices Whenever a system condition triggers either the major or minor alarm on the craft interface the alarm relay contacts are also activated The alarm relay contacts are located on the upper right of the craft interface Troubleshooting the SRX...

Page 393: ...the card cage Green indicates OK and red indicates a failure The card OK Fail LEDs are located along the bottom of the craft interface and are labeled 0 through 5 SCB LEDs Two LEDs OK and FAIL indicate the status of each SCB Green indicates OK and red indicates a failure The SCB LEDs are located in the center of the craft interface along the bottom and are labeled 0 and 1 Fan LEDs Two LEDs indicat...

Page 394: ...ace the fan tray Place your hand near the exhaust vents at the side of the chassis to determine whether the fans are pushing air out of the chassis If the fan tray is removed a minor alarm and a major alarm occur The following conditions automatically cause the fans to run at full speed and also trigger the indicated alarm A fan fails major alarm The services gateway temperature exceeds the temper...

Page 395: ...r the slot on the craft interface When the interface card is online and functioning normally the OK LED lights green steadily Issue the CLI show chassis fpc command to check the status of installed interface cards As shown in the sample output the value Online in the column labeled State indicates that the interface card is functioning normally user host show chassis fpc Temp CPU Utilization Memor...

Page 396: ...6 MB Total DDR DRAM 4096 MB Start time 2007 07 10 12 28 42 PDT Uptime 1 hour 33 minutes 43 seconds For further description of the output from the command see Junos OS System Basics and Services Command Reference at www juniper net documentation Troubleshooting SRX5600 Services Gateway MICs and Port Modules Problem Description The MICs or port modules are not functioning normally Solution Check the...

Page 397: ...Services Processing Card SPC is not functioning normally Solution Make sure the SPC is properly seated in the midplane Check that each ejector handle has been turned clockwise and is tight Issue the CLI show chassis fpc command to check the status of installed SPCs As shown in the sample output the value Online in the column labeled State indicates that the SPC is functioning normally user host sh...

Page 398: ...DRAM 6656 MB Start time 2013 12 10 02 58 07 PST Uptime 1 day 11 hours 59 minutes 24 seconds Max Power Consumption 570 Watts For further description of the output from the command see Junos OS System Basics and Services Command Reference at www juniper net documentation Troubleshooting the SRX5600 Services Gateway Power System Problem Description The power system is not functioning normally Solutio...

Page 399: ...larms command to determine the source of the problem Check that the AC input switch or DC circuit breaker is in the on position and that the power supply is receiving power Verify that the source circuit breaker has the proper current rating Each power supply must be connected to a separate source circuit breaker Verify that the AC power cord or DC power cables from the power source to the service...

Page 400: ...pt to power on the power supply if the LED is still lit and the fan is still running If you do the services gateway will not reboot 4 Turn on power to where the AC line goes into the power distribution module PDM area 5 Move the power switch on the power supply to the on position 6 Verify that the LEDs on the power supply faceplate are properly lit 7 Issue the CLI show chassis environment pem comm...

Page 401: ...Figure 147 DC Power Input Mode Switch g004725 Position 0 indicates that only one AC or DC feed is provided Position 1 indicates that two AC or DC feeds are provided The following example shows what should be the DIP switch position based on the number of AC or DC input feeds expected and connected to the PEM 1 Issue the CLI show chassis power command and check how many feeds are connected The samp...

Page 402: ...put feed is expected and one AC input feed is connected and on PEM 1 one AC input feed is expected and two AC input feeds are connected 2 Issue the show chassis alarms command to see if there are any active alarms and the position of the PEM DIP switch show chassis alarms 1 alarms currently active Alarm time Class Description 2018 06 14 05 05 17 PST Minor PEM 1 Dipswitch 0 Feed Connection 2 The ou...

Page 403: ... 1590 W maximum 1590 W DC output 893 W zone 0 19 A at 47 V 56 of capacity PEM 2 State Present AC input Out of range 1 feed expected 1 feed connected Capacity 0 W maximum 2050 W PEM 3 State Present AC input Out of range 1 feed expected 1 feed connected Capacity 1590 W maximum 1590 W DC output 0 W zone 0 0 A at 0 V 0 of capacity System Zone 0 Capacity 3640 W maximum 3640 W Allocated power 2002 W 163...

Page 404: ... a maintenance window or during the lowest possible traffic as the secondary node is not available at this time NOTE The SRX5K SCBE and SRX5K RE 1800X4 are not hot swappable NOTE Four fabric planes must be active at any time in a chassis cluster If fewer than four fabric planes are active then the Redundancy Group RG1 will fail over to the secondary node Table 61 on page 407 shows the minimum fabr...

Page 405: ...virtual 4 virtual 2 SRX5600 This device supports one SCB for two fabric planes providing a redundancy of three SCBs If the active SCB fails the device behavior does not change as the remaining two SCBs fulfill the requirement to have four fabric planes If the second SCB also fails no spare planes are available in the chassis triggering inter chassis redundancy Therefore RG1 will fail over to the s...

Page 406: ...6 CHAPTER Contacting Customer Support and Returning the Chassis or Components Returning the SRX5600 Chassis or Components 411 ...

Page 407: ......

Page 408: ... Shipment 417 Packing SRX5600 Services Gateway Components for Shipment 418 Contacting Customer Support Once you have located the serial numbers of the services gateway or component you can return the services gateway or component for repair or replacement For this you need to contact Juniper Networks Technical Assistance Center JTAC You can contact JTAC 24 hours a day 7 days a week using any of th...

Page 409: ...erial number of the services gateway or component For the serial number locations of cards and modules such as MPCs SPCs port modules and Routing Engines see the SRX5400 SRX5600 and SRX5800 Services Gateway Card Reference at www juniper net documentation 2 Obtain a Return Materials Authorization RMA number from JTAC NOTE Do not return the services gateway or any component to Juniper Networks unles...

Page 410: ...uting Engine 0 REV 06 740 015113 1000697084 RE S 1300 CB 0 REV 07 710 013385 JZ3921 SRX5k SCB FPC 0 BB P2 35 710 020305 JS4813 SRX5k SPC CPU REV 06 710 013713 KB1851 DPC PMB PIC 0 BUILTIN BUILTIN SPU Cp PIC 1 BUILTIN BUILTIN SPU Flow FPC 2 REV 03 750 020235 JS4979 SRX5k DPC 40x 1GE CPU REV 06 710 013713 KB7947 DPC PMB PIC 0 BUILTIN BUILTIN 10x 1GE RichQ Xcvr 0 REV 01 740 013111 7303444 SFP T Xcvr ...

Page 411: ...ng the SRX5600 Services Gateway Chassis Serial Number Label The chassis serial number is located on the side of the chassis see Figure 149 on page 414 Figure 149 SRX5600 Chassis Serial Number Label Locating the SRX5600 Services Gateway Power Supply Serial Number Labels The serial number label is located on the top of the AC power supply see Figure 150 on page 415 414 ...

Page 412: ...ure 151 on page 415 Figure 150 AC Power Supply Serial Number Label Figure 151 DC Power Supply Serial Number Label Locating the SRX5600 Services Gateway Craft Interface Serial Number Label The serial number is located on the back of the craft interface panel see Figure 152 on page 416 415 ...

Page 413: ...ber if you have one Details of the failure or problem Type of activity being performed on the services gateway when the problem occurred Configuration data displayed by one or more show commands Your name organization name telephone number fax number and shipping address Required Tools and Parts for Packing the SRX5600 Services Gateway To remove components from the services gateway or the services...

Page 414: ...s Command Reference at www juniper net documentation 3 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis 4 Shut down power to the services gateway by pressing the AC input switch or DC circuit breaker for all power supplies to the off O position 5 Disconnect power from the services gateway 6 Remove the cables that...

Page 415: ...ng foam 12 Securely tape the box closed or place the crate cover over the services gateway 13 Write the RMA number on the exterior of the box to ensure proper tracking Packing SRX5600 Services Gateway Components for Shipment Follow these guidelines for packing and shipping individual components of the services gateway When you return a component make sure that it is adequately protected with packi...

Page 416: ...ng Statement for Norway and Sweden 430 Installation Instructions Warning 431 Chassis and Component Lifting Guidelines 431 Ramp Warning 432 Rack Mounting and Cabinet Mounting Warnings 432 Grounded Equipment Warning 438 Laser and LED Safety Guidelines and Warnings 438 Radiation from Open Port Apertures Warning 443 Maintenance and Operational Safety Guidelines and Warnings 444 General Electrical Safe...

Page 417: ...r Grounding Requirements and Warning 471 DC Power Wiring Sequence Warning 473 DC Power Wiring Terminations Warning 476 Multiple Power Supplies Disconnection Warning 479 TN Power Warning 480 Action to Take After an Electrical Accident 480 SRX5600 Services Gateway Agency Approvals 481 SRX5600 Services Gateway Compliance Statements for EMC Requirements 482 Statements of Volatility for Juniper Network...

Page 418: ...l or manipulate wiring during electrical storms Never install electrical jacks in wet locations unless the jacks are specifically designed for wet environments Operate the device only when it is properly grounded Ensure that the separate protective earthing terminal provided on this device is permanently connected to earth Replace fuses only with fuses of the same type and rating Do not open or re...

Page 419: ...ls of safety warnings there are two Warning formats NOTE You might find this information helpful in a particular situation or you might overlook this important information if it was not highlighted in a Note CAUTION You need to observe the specified guidelines to prevent minor injury or discomfort to you or severe damage to the device WARNING This symbol alerts you to the risk of personal injury f...

Page 420: ...423 ...

Page 421: ...e befinden sich in einer Situation die zu einer Körperverletzung führen könnte Bevor Sie mit der Arbeit an irgendeinem Gerät beginnen seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur Vermeidung von Unfällen bewußt Avvertenza Questo simbolo di avvertenza indica un pericolo La situazione potrebbe causare infortuni alle persone Prima di lavorare su q...

Page 422: ... signalerar fara Du befinner dig i en situation som kan leda till personskada Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och känna till vanligt förfarande för att förebygga skador 425 ...

Page 423: ...Restricted Access Area Warning 426 ...

Page 424: ...un mécanisme de verrouillage et une clé ou tout autre moyen de sécurité L accès aux zones de sécurité est sous le contrôle de l autorité responsable de l emplacement Warnung Diese Einheit ist zur Installation in Bereichen mit beschränktem Zutritt vorgesehen Ein Bereich mit beschränktem Zutritt ist ein Bereich zu dem nur Wartungspersonal mit einem Spezialwerkzeugs Schloß und Schlüssel oder anderer ...

Page 425: ... Electrostatic Discharge Damage 453 Fire Safety Requirements In the event of a fire emergency the safety of people is the primary concern You should establish procedures for protecting people in the event of a fire emergency provide safety training and properly provision fire control equipment and fire extinguishers In addition you should establish procedures to protect your equipment in the event...

Page 426: ...ary ingredient in these fire extinguishers is monoammonium phosphate which is very sticky and difficult to clean In addition in the presence of minute amounts of moisture monoammonium phosphate can become highly corrosive and corrodes most metals Any equipment in a room in which a chemical fire extinguisher has been discharged is subject to premature failure and unreliable operation The equipment ...

Page 427: ...to e qualificato deve essere autorizzato ad installare o sostituire questo apparecchio Advarsel Kun kvalifisert personell med riktig opplæring bør montere eller bytte ut dette utstyret Aviso Este equipamento deverá ser instalado ou substituído apenas por pessoal devidamente treinado e qualificado Atención Estos equipos deben ser instalados y reemplazados exclusivamente por personal técnico adecuad...

Page 428: ...s til strømkilden Aviso Leia as instruções de instalação antes de ligar o sistema à sua fonte de energia Atención Ver las instrucciones de instalación antes de conectar el sistema a la red de alimentación Varning Läs installationsanvisningarna innan du kopplar systemet till dess strömförsörjningsenhet Chassis and Component Lifting Guidelines Before moving the device to a site ensure that the site ...

Page 429: ...ä sellaista kaltevaa pintaa jonka kaltevuus ylittää 10 astetta Attention Ne pas utiliser une rampe dont l inclinaison est supérieure à 10 degrés Warnung Keine Rampen mit einer Neigung von mehr als 10 Grad verwenden Avvertenza Non usare una rampa con pendenza superiore a 10 gradi Advarsel Bruk aldri en rampe som heller mer enn 10 grader Aviso Não utilize uma rampa com uma inclinação superior a 10 g...

Page 430: ...433 ...

Page 431: ...Networks switch moet in een stellage worden geïnstalleerd die aan een bouwsel is verankerd Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel het enige in het rek is Wanneer u dit toestel in een gedeeltelijk gevuld rek monteert dient u het rek van onderen naar boven te laden met het zwaarste onderdeel onderaan in het rek Als het rek voorzien is van stabiliseringshulpmiddele...

Page 432: ...oder Warten dieser Einheit in einem Gestell müssen Sie besondere Vorkehrungen treffen um sicherzustellen daß das System stabil bleibt Die folgenden Richtlinien sollen zur Gewährleistung Ihrer Sicherheit dienen Der Juniper Networks switch muß in einem Gestell installiert werden das in der Gebäudestruktur verankert ist Wenn diese Einheit die einzige im Gestell ist sollte sie unten im Gestell angebra...

Page 433: ...lt skal kabinettet lastes fra bunnen og opp med den tyngste komponenten nederst i kabinettet Hvis kabinettet er utstyrt med stabiliseringsutstyr skal stabilisatorene installeres før montering eller utføring av reparasjonsarbeid på enheten i kabinettet Aviso Para se prevenir contra danos corporais ao montar ou reparar esta unidade numa estante deverá tomar precauções especiais para se certificar de...

Page 434: ...g För att undvika kroppsskada när du installerar eller utför underhållsarbete på denna enhet på en ställning måste du vidta särskilda försiktighetsåtgärder för att försäkra dig om att systemet står stadigt Följande riktlinjer ges för att trygga din säkerhet Juniper Networks switch måste installeras i en ställning som är förankrad i byggnadens struktur Om denna enhet är den enda enheten på ställnin...

Page 435: ...rät während des normalen Betriebs an Erde gelegt ist Avvertenza Questa apparecchiatura deve essere collegata a massa Accertarsi che il dispositivo host sia collegato alla massa di terra durante il normale utilizzo Advarsel Dette utstyret skal jordes Forviss deg om vertsterminalen er jordet ved normalt bruk Aviso Este equipamento deverá estar ligado à terra Certifique se que o host se encontra liga...

Page 436: ... When working around ports that support optical transceivers observe the following safety guidelines to prevent eye injury Do not look into unterminated ports or at fibers that connect to unknown sources Do not examine unterminated optical ports with optical instruments Avoid direct exposure to the beam WARNING Unterminated optical connectors can emit invisible laser radiation The lens in the huma...

Page 437: ...laser produkt Varoitus Luokan 1 lasertuote Attention Produit laser de classe I Warnung Laserprodukt der Klasse 1 Avvertenza Prodotto laser di Classe 1 Advarsel Laserprodukt av klasse 1 Aviso Produto laser de classe 1 Atención Producto láser Clase I Varning Laserprodukt av klass 1 440 ...

Page 438: ...us Luokan 1 valodiodituote Attention Alarme de produit LED Class I Warnung Class 1 LED Produktwarnung Avvertenza Avvertenza prodotto LED di Classe 1 Advarsel LED produkt i klasse 1 Aviso Produto de classe 1 com LED Atención Aviso sobre producto LED de Clase 1 Varning Lysdiodprodukt av klass 1 441 ...

Page 439: ...nstruments optiques Warnung Nicht direkt in den Strahl blicken und ihn nicht direkt mit optischen Geräten prüfen Avvertenza Non fissare il raggio con gli occhi né usare strumenti ottici per osservarlo direttamente Advarsel Stirr eller se ikke direkte p strlen med optiske instrumenter Aviso Não olhe fixamente para o raio nem olhe para ele directamente com instrumentos ópticos Atención No mirar fija...

Page 440: ... Vermeiden Sie es sich den Strahlungen auszusetzen und starren Sie nicht in die Öffnungen Avvertenza Quando i cavi in fibra non sono inseriti radiazioni invisibili possono essere emesse attraverso l apertura della porta Evitate di esporvi alle radiazioni e non guardate direttamente nelle aperture Advarsel Unngå utsettelse for stråling og stirr ikke inn i åpninger som er åpne fordi usynlig stråling...

Page 441: ...S SECTION Battery Handling Warning 445 Jewelry Removal Warning 446 Lightning Activity Warning 448 Operating Temperature Warning 449 Product Disposal Warning 451 While performing the maintenance activities for devices observe the following guidelines and warnings 444 ...

Page 442: ...leichen oder vom Hersteller empfohlenen Batterietyp Entsorgen Sie die benutzten Batterien nach den Anweisungen des Herstellers Advarsel Det kan være fare for eksplosjon hvis batteriet skiftes på feil måte Skift kun med samme eller tilsvarende type som er anbefalt av produsenten Kasser brukte batterier i henhold til produsentens instruksjoner Avvertenza Pericolo di esplosione se la batteria non è i...

Page 443: ...Jewelry Removal Warning 446 ...

Page 444: ... Vor der Arbeit an Geräten die an das Netz angeschlossen sind jeglichen Schmuck einschließlich Ringe Ketten und Uhren abnehmen Metallgegenstände erhitzen sich wenn sie an das Netz und die Erde angeschlossen werden und können schwere Verbrennungen verursachen oder an die Anschlußklemmen angeschweißt werden Avvertenza Prima di intervenire su apparecchiature collegate alle linee di alimentazione togl...

Page 445: ... te sluiten of te ontkoppelen Varoitus Älä työskentele järjestelmän parissa äläkä yhdistä tai irrota kaapeleita ukkosilmalla Attention Ne pas travailler sur le système ni brancher ou débrancher les câbles pendant un orage Warnung Arbeiten Sie nicht am System und schließen Sie keine Kabel an bzw trennen Sie keine ab wenn es gewittert Avvertenza Non lavorare sul sistema o collegare oppure scollegare...

Page 446: ...Operating Temperature Warning 449 ...

Page 447: ...iner Gegend betrieben werden in der die Umgebungstemperatur das empfohlene Maximum von 40 C überschreitet Um Lüftungsverschluß zu verhindern achten Sie darauf daß mindestens 15 2 cm lichter Raum um die Lüftungsöffnungen herum frei bleibt Avvertenza Per evitare il surriscaldamento dei switch non adoperateli in un locale che ecceda la temperatura ambientale massima di 40 C Per evitare che la circola...

Page 448: ...sia lakeja ja säännöksiä noudattaen Attention La mise au rebut définitive de ce produit doit être effectuée conformément à toutes les lois et réglementations en vigueur Warnung Dieses Produkt muß den geltenden Gesetzen und Vorschriften entsprechend entsorgt werden Avvertenza L eliminazione finale di questo prodotto deve essere eseguita osservando le normative italiane vigenti in materia Advarsel E...

Page 449: ... other end of the strap around your bare wrist Failure to use an ESD grounding strap could result in damage to the device Install the device in compliance with the following local national and international electrical codes United States National Fire Protection Association NFPA 70 United States National Electrical Code Other countries International Electromechanical Commission IEC 60364 Part 1 th...

Page 450: ...st strap when you are handling components that are subject to ESD damage and make sure that it is in direct contact with your skin If a grounding strap is not available hold the component in its antistatic bag see Figure 153 on page 454 in one hand and touch the exposed bare metal of the device with the other hand immediately before inserting the component into the device WARNING For safety period...

Page 451: ...ce SPD must be used at the AC power source The following electrical safety guidelines apply to AC powered devices Note the following warnings printed on the device CAUTION THIS UNIT HAS MORE THAN ONE POWER SUPPLY CORD DISCONNECT ALL POWER SUPPLY CORDS BEFORE SERVICING TO AVOID ELECTRIC SHOCK ATTENTION CET APPAREIL COMPORTE PLUS D UN CORDON D ALIMENTATION AFIN DE PRÉVENIR LES CHOCS ÉLECTRIQUES DÉBR...

Page 452: ...utlet must be near the AC powered device and be easily accessible For devices that have more than one power supply connection you must ensure that all power connections are fully disconnected so that power to the device is completely removed to prevent electric shock To disconnect power unplug all power cords one for each power supply Power Cable Warning Japanese WARNING The attached power cable i...

Page 453: ...der in der Nähe von Netzgeräten arbeiten ziehen Sie bei Wechselstromeinheiten das Netzkabel ab bzw Avvertenza Prima di lavorare su un telaio o intorno ad alimentatori scollegare il cavo di alimentazione sulle unità CA Advarsel Før det utføres arbeid på kabinettet eller det arbeides i nærheten av strømforsyningsenheter skal strømledningen trekkes ut på vekselstrømsenheter Aviso Antes de trabalhar n...

Page 454: ...de in Canada Be sure to connect the ground wire or conduit to a solid office earth ground A closed loop ring is recommended for terminating the ground conductor at the ground stud Run two wires from the circuit breaker box to a source of 48 VDC Use appropriate gauge wire to handle up to 40 A A DC powered services gateway that is equipped with a DC terminal block is intended only for installation i...

Page 455: ...cuit and any higher voltages are only to be associated with float voltages for the charging function Because the services gateway is a positive ground system you must connect the positive lead to the terminal labeled RETURN the negative lead to the terminal labeled 48V and the earth ground to the chassis grounding points 458 ...

Page 456: ...DC Power Disconnection Warning 459 ...

Page 457: ...n être sûr localiser le disjoncteur situé sur le panneau de service du circuit en courant continu placer le disjoncteur en position fermée OFF et à l aide d un ruban adhésif bloquer la poignée du disjoncteur en position OFF Warnung Vor Ausführung der folgenden Vorgänge ist sicherzustellen daß die Gleichstromschaltung keinen Strom erhält Um sicherzustellen daß sämtlicher Strom abgestellt ist machen...

Page 458: ...FF y sujetar con cinta la palanca del interruptor automático en posición de Apagado OFF Varning Innan du utför någon av följande procedurer måste du kontrollera att strömförsörjningen till likströmskretsen är bruten Kontrollera att all strömförsörjning är BRUTEN genom att slå AV det överspänningsskydd som skyddar likströmskretsen och tejpa fast överspänningsskyddets omkopplare i FRÅN läget DC Powe...

Page 459: ...premier et déconnectée en dernier Warnung Der Erdanschluß muß bei der Installation der Einheit immer zuerst hergestellt und zuletzt abgetrennt werden Avvertenza In fase di installazione dell unità eseguire sempre per primo il collegamento a massa e disconnetterlo per ultimo Advarsel Når enheten installeres må jordledningen alltid tilkobles først og frakobles sist Aviso Ao instalar a unidade a liga...

Page 460: ...DC Power Wiring Sequence Warning 463 ...

Page 461: ...ez que le fil de masse devrait toujours être relié d abord et débranché pour la dernière fois Warnung Die Stromzufuhr ist nur mit geeigneten Ringösen an das DC Netzteil anzuschliessen Die richtige Anschlusssequenz ist Erdanschluss zu Erdanschluss RTN zu RTN und dann 48V zu 48V Die richtige Sequenz zum Abtrennen der Stromversorgung ist 48V zu 48V RTN zu RTN und dann Erdanschluss zu Erdanschluss Es ...

Page 462: ...ncia apropriada da fiação é moída para moer RTN a RTN então 48 V a 48 V Ao desconectar a potência a seqüência apropriada da fiação é 48 V a 48 V RTN a RTN moeu então para moer Anote que o fio à terra deve sempre ser conectado primeiramente e desconectado por último Anote que o fio à terra deve sempre ser conectado primeiramente e desconectado por último Varning Korrekt kopplingssekvens ar jord til...

Page 463: ...DC Power Wiring Terminations Warning 466 ...

Page 464: ...ugelassene Verdrahtungsanschlüsse z B Ringoesen oder gabelförmige Kabelschuhe mit nach oben gerichteten Enden zu verwenden Diese Abschlüsse sollten die angemessene Größe für die Drähte haben und sowohl die Isolierung als auch den Leiter festklemmen Avvertenza Quando occorre usare trecce usare connettori omologati come quelli a occhiello o a forcella con linguette rivolte verso l alto I connettori ...

Page 465: ...typ med uppåtvänd tapp Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda RELATED DOCUMENTATION Action to Take After an Electrical Accident 480 General Electrical Safety Guidelines and Warnings 452 AC Power Electrical Safety Guidelines 454 468 ...

Page 466: ...DC Power Disconnection Warning 469 ...

Page 467: ... être sûr localiser le disjoncteur situé sur le panneau de service du circuit en courant continu placer le disjoncteur en position fermée OFF et à l aide d un ruban adhésif bloquer la poignée du disjoncteur en position OFF Warnung Vor Ausführung der folgenden Vorgänge ist sicherzustellen daß die Gleichstromschaltung keinen Strom erhält Um sicherzustellen daß sämtlicher Strom abgestellt ist machen ...

Page 468: ...F y sujetar con cinta la palanca del interruptor automático en posición de Apagado OFF Varning Innan du utför någon av följande procedurer måste du kontrollera att strömförsörjningen till likströmskretsen är bruten Kontrollera att all strömförsörjning är BRUTEN genom att slå AV det överspänningsskydd som skyddar likströmskretsen och tejpa fast överspänningsskyddets omkopplare i FRÅN läget DC Power...

Page 469: ...ier et déconnectée en dernier Warnung Der Erdanschluß muß bei der Installation der Einheit immer zuerst hergestellt und zuletzt abgetrennt werden Avvertenza In fase di installazione dell unità eseguire sempre per primo il collegamento a massa e disconnetterlo per ultimo Advarsel Når enheten installeres må jordledningen alltid tilkobles først og frakobles sist Aviso Ao instalar a unidade a ligação ...

Page 470: ...DC Power Wiring Sequence Warning 473 ...

Page 471: ...tez que le fil de masse devrait toujours être relié d abord et débranché pour la dernière fois Warnung Die Stromzufuhr ist nur mit geeigneten Ringösen an das DC Netzteil anzuschliessen Die richtige Anschlusssequenz ist Erdanschluss zu Erdanschluss RTN zu RTN und dann 48V zu 48V Die richtige Sequenz zum Abtrennen der Stromversorgung ist 48V zu 48V RTN zu RTN und dann Erdanschluss zu Erdanschluss Es...

Page 472: ...üência apropriada da fiação é moída para moer RTN a RTN então 48 V a 48 V Ao desconectar a potência a seqüência apropriada da fiação é 48 V a 48 V RTN a RTN moeu então para moer Anote que o fio à terra deve sempre ser conectado primeiramente e desconectado por último Anote que o fio à terra deve sempre ser conectado primeiramente e desconectado por último Varning Korrekt kopplingssekvens ar jord t...

Page 473: ...DC Power Wiring Terminations Warning 476 ...

Page 474: ... sur le conducteur Warnung Wenn Litzenverdrahtung erforderlich ist sind zugelassene Verdrahtungsabschlüsse z B für einen geschlossenen Regelkreis oder gabelförmig mit nach oben gerichteten Kabelschuhen zu verwenden Diese Abschlüsse sollten die angemessene Größe für die Drähte haben und sowohl die Isolierung als auch den Leiter festklemmen Avvertenza Quando occorre usare trecce usare connettori omo...

Page 475: ...n que sujetar tanto el aislante como el conductor Varning När flertrådiga ledningar krävs måste godkända ledningskontakter användas t ex kabelsko av sluten eller öppen typ med uppåtvänd tapp Storleken på dessa kontakter måste vara avpassad till ledningarna och måste kunna hålla både isoleringen och ledaren fastklämda 478 ...

Page 476: ...inen Stromanschluß um Strom gänzlich von der Einheit fernzuhalten müssen alle Stromzufuhren abgetrennt sein Avvertenza Questa unità ha più di una connessione per alimentatore elettrico tutte le connessioni devono essere completamente rimosse per togliere l elettricità dall unità Advarsel Denne enheten har mer enn én strømtilkobling Alle tilkoblinger må kobles helt fra for å eliminere strøm fra enh...

Page 477: ... TN Advarsel Utstyret er utfomet til bruk med TN strømsystemer Aviso O dispositivo foi criado para operar com sistemas de corrente TN Atención El equipo está diseñado para trabajar con sistemas de alimentación tipo TN Varning Enheten är konstruerad för användning tillsammans med elkraftssystem av TN typ Action to Take After an Electrical Accident If an electrical accident results in an injury take...

Page 478: ...22 Class A European Radiated Emissions VCCI Class A Japanese Radiated Emissions ETSI EN 300386 V1 3 3 Telecom Network Equipment Electromagnetic Compatibility Requirements Immunity EN 55024 A1 A2 Information Technology Equipment Immunity Characteristics EN 61000 3 2 Power Line Harmonics EN 61000 3 3 A1 A2 A3 Power Line Voltage Fluctuations and Flicker EN 61000 4 2 A1 A2 Electrostatic Discharge EN 6...

Page 479: ... IN THIS SECTION Canada 482 European Community 482 Israel 483 Japan 483 United States 483 Canada This Class A digital apparatus complies with Canadian ICES 003 Cet appareil numérique de la classe A est conforme à la norme NMB 003 du Canada European Community This is a Class A product In a domestic environment this product may cause radio interference in which case the user might be required to tak...

Page 480: ...services gateway has been tested and found to comply with the limits for a Class A digital device of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manu...

Page 481: ...ove non volatile storage components from the device NOTE Statements of volatility are not available for all Juniper Networks devices CTP Series CTP150 CTP2000 EX Series EX2200 and EX2200 C EX2300 24P EX2300 24T and EX2300 24T DC EX2300 48P and EX2300 48T EX2300 C EX3300 EX3400 24P EX3400 24T EX3400 24T DC EX3400 48P EX3400 48T EX3400 48T AFI EX4200 EX4300 EX4300 48MP EX4500 EX4550 EX4600 EX8200 XR...

Page 482: ...MX10 MX40 and MX80 MX240 MX480 and MX960 RE A 2000 Route Engine RE S X6 64G Routing Engine QFX Series QFX3008 I QFX3100 QFX3500 QFX3600 QFX5100 24Q QFX5100 48S QFX5100 48T QFX5110 32Q QFX5110 48S QFX5200 QFX5200 32C QFX10008 and QFX10016 SRX Series SRX100 SRX110 SRX210B SRX210H POE SRX210H P MGW 485 ...

Page 483: ... SRX220 SRX240H SRX240H POE SRX300 SRX320 SRX340 and SRX345 SRX550 SRX650 SRX1400 SRX1500 SRX3400 and SRX3600 SRX5400 SRX5600 and SRX5800 SRX MP 1SERIAL SSG 520M T Series RE A 2000 Route Engine 486 ...

Reviews:

No comments

Related manuals for SRX5600

Symantec 10521148 - Network Security 7161 Implementation Manual preview
10521148 - Network Security 7161
Brand: Symantec Pages: 214
Nokia Check Point IP2450 Installation Manual preview
Check Point IP2450
Brand: Nokia Pages: 136

Brands by name

Popular brands

Load more brands