background image

NetScreen-5000 Series

„

9

Chapter 1

Overview

This chapter provides detailed descriptions of the NetScreen-5000 Series devices, 
modules, power supplies, and fan assemblies. It includes the following sections:

„

“NetScreen-5000 Series” on page 9

„

“NetScreen-5200” on page 9

„

“NetScreen-5400” on page 10

„

“Power Supplies” on page 11

„

“NetScreen-5200 Power Recommendations” on page 11

„

“NetScreen-5400 Power Recommendations” on page 11

„

“DC Power Supply” on page 11

„

“AC Power Supply” on page 12

„

“Fan Modules” on page 13

„

“NetScreen-5000 Modules” on page 13

„

“Management Modules” on page 14

„

“Secure Port Modules” on page 15

NetScreen-5000 Series

This section describes NetScreen-5000 Series devices, which include the 
NetScreen-5200 and the NetScreen-5400.

NetScreen-5200

The NetScreen-5200 is a chassis-based, two-slot network security device with a 2U 
(rack unit) chassis. Slot 1 is for the management module and Slot 2 is for the Secure 
Port Module (SPM). The device has two hot-swappable power supplies for power 
redundancy and a removable fan module.

Содержание NetScreen-5000 Series

Страница 1: ...works Inc 1194 North Mathilda Avenue Sunnyvale CA 94089 USA 408 745 2000 www juniper net Part Number 093 1698 000 Revision E Security Products NetScreen 5000 Series Hardware Installation and Configura...

Страница 2: ...ense The following information is for FCC compliance of Class B devices The equipment described in this manual generates and may radiate radio frequency energy If it is not installed in accordance wit...

Страница 3: ...and 5000 8G2 G4 SPMs 15 5000 2XGE and 5000 2XGE G4 SPMs 16 5000 2G24FE SPM 17 Chapter 2 Installing the Device 19 General Installation Guidelines 19 Equipment Rack Installation Guidelines 20 Mounting t...

Страница 4: ...regate Interfaces 41 Using CLI Commands to Reset the Device 42 Chapter 4 Servicing the Device 45 Removing and Reseating Modules 45 Replacing a DC Power Supply 47 Replacing an AC Power Supply 48 Replac...

Страница 5: ...port configurations Together these modules provide a wide range of performance and security gateway configurations Because the modules can work in many combinations you can customize the NetScreen 500...

Страница 6: ...s and LED Status provides descriptions of port and LED behavior Web User Interface Conventions In the Web user interface WebUI the set of instructions for each task is divided into navigational path a...

Страница 7: ...ace type Variables are in italic type Technical Documentation and Support To obtain technical documentation for any Juniper Networks product visit www juniper net techpubs For technical support open a...

Страница 8: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 8 Technical Documentation and Support...

Страница 9: ...ge 11 DC Power Supply on page 11 AC Power Supply on page 12 Fan Modules on page 13 NetScreen 5000 Modules on page 13 Management Modules on page 14 Secure Port Modules on page 15 NetScreen 5000 Series...

Страница 10: ...top slot slot 1 holds the management module and the bottom slots slots 2 4 hold up to three Secure Port Modules SPMs for flexible high density port configurations The device has three hot swappable p...

Страница 11: ...e operational then the Alarm LED is off For more information on power supply LEDs see Port Descriptions and LED Status on page 61 NetScreen 5400 Power Recommendations When the NetScreen 5400 contains...

Страница 12: ...AC Power Supply The AC power supply weighs about three pounds The faceplate contains a power LED a power switch a male power outlet and a cooling fan vent Figure 4 shows the NetScreen 5200 AC power su...

Страница 13: ...s NetScreen 5000 management modules NetScreen 5000 Secure Port Modules SPMs Table 1 shows the modules supported by each slot Table 2 shows the configurations for each management module and SPM and sho...

Страница 14: ...dule include A management port for WebUI management or CLI sessions An RJ 45 console port for connecting serial terminal emulation programs such as HyperTerminal Two HA ports A modem port The manageme...

Страница 15: ...5000 8G 5000 8G2 and 5000 8G2 G4 SPMs provide eight 1 Gigabit Small Form factor Pluggable SFP sockets These SPMs are supplied with SX gigabit fiber SFP transceivers The 5000 2XGE and 5000 2XGE G4 SPM...

Страница 16: ...d disconnecting Gigabit Ethernet cables see Servicing the Device on page 45 The 5000 2XGE SPM provides port Link and Activity LEDs in addition to Power and Status LEDs Table 4 Capacities and Managemen...

Страница 17: ...0 2G24FE SPM is only supported by the 5000 M and 5000 M2 management modules Also you cannot mix this SPM with the 5000 8G2 or 5000 2XGE SPMs The 5000 2G24FE provides port Link and Activity LEDs in add...

Страница 18: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 18 NetScreen 5000 Modules...

Страница 19: ...Power Supply on page 26 Establishing a High Availability Connection on page 27 Connecting the NetScreen 5000 Series to a Router or Switch on page 28 General Installation Guidelines Observing the foll...

Страница 20: ...op equipment higher in the rack can draw heat from the lower devices Always provide adequate ventilation for equipment at the bottom of the rack Baffles can isolate exhaust air from intake air The bes...

Страница 21: ...e 23 NetScreen 5400 Front Mount on page 24 NetScreen 5200 Front and Rear Mount To mount the NetScreen 5200 with support from the front and rear you need four fitted screws a phillips screwdriver the r...

Страница 22: ...ach the rear mount bracket to the rear rack posts 3 Slip the slides into the rear mount brackets then push the NetScreen 5200 forward until the left and right brackets contact the front rack posts as...

Страница 23: ...river and brackets To center mount the device 1 Use the screws to attach the left and right brackets to the middle of each side of the chassis as shown in Figure 11 Figure 11 Installing NetScreen 5200...

Страница 24: ...s NetScreen 5400 Front Mount To front mount the NetScreen 5400 you need four fitted screws a phillips screwdriver and brackets To front mount the device 1 Use the screws to attach the front mount brac...

Страница 25: ...back of the system On the NetScreen 5400 slide the power supply into one of the power compartments on the front of the system 2 Fasten the power supply to the system by tightening the corner screws i...

Страница 26: ...tall two power supplies in the NetScreen 5200 or three power supplies in the NetScreen 5400 then repeat steps 1 and 2 for the remaining power supplies The DC power supply power switch grounding screw...

Страница 27: ...he backup Should the master fail the backup is promoted to master and takes over the traffic processing To physically connect the master and backup devices the management modules provide a pair of hig...

Страница 28: ...lish a high speed connection to a router or switch and provide firewall and general security for your network by connecting a Secure Port Module SPM to a fiber optic or copper wire backbone There are...

Страница 29: ...00 Interfaces on page 31 NetScreen 5400 Interfaces on page 32 Configurable Interfaces on page 33 Performing Initial Connection and Configuration on page 33 Establishing a Terminal Emulator Connection...

Страница 30: ...curity policies Route Mode In Route mode a NetScreen 5000 Series system operates at Layer 3 Because you can configure each interface using an IP address and subnet mask you can configure individual in...

Страница 31: ...logical interfaces NetScreen 5200 Interfaces A NetScreen 5200 contains one management module in slot 1 and one SPM In Figure 15 the device contains one 5000 8G SPM Figure 15 NetScreen 5200 Interfaces...

Страница 32: ...In Figure 16 the device contains three 5000 8G SPMs Figure 16 NetScreen 5400 Interfaces NOTE Not all SPMs are supported by every management module See Table 3 Netscreen 5000 series Management Modules...

Страница 33: ...port of the NetScreen 5000 Series system Be sure that the RJ 45 clip snaps into the port and is seated properly Table 7 NetScreen 5000 Series Configurable Interfaces Interface Type Description Ethern...

Страница 34: ...ws Baud Rate to 9600 Parity to No Data Bits to 8 Stop Bit to 1 Flow Control to none 4 At the HyperTerminal window press Enter to display the login prompt 5 At the login prompt enter netscreen 6 At the...

Страница 35: ...ch as HyperTerminal See Establishing a Terminal Emulator Connection on page 33 Log in as the root admin or an admin with read write privileges 5 Power on or reboot the NetScreen 5000 Series system 6 K...

Страница 36: ...he configuration process it is advisable to view existing port settings with the following command get interface This command displays current port names IP addresses MAC addresses and other useful in...

Страница 37: ...ubnet mask For example to set the IP address and subnet mask of the ethernet2 2 interface to 10 250 2 1 16 set interface ethernet2 2 ip 10 250 2 1 16 4 Optional To confirm the new port settings use th...

Страница 38: ...nsole sessions with a NetScreen 5000 Series system You can also start management sessions using the ScreenOS WebUI a web based GUI management application Starting a Console Session Using Telnet To est...

Страница 39: ...shing a GUI Management Session To access a NetScreen 5000 Series system with the WebUI management application 1 Connect your computer or your LAN hub to the MGT interface using a Category 5 Ethernet c...

Страница 40: ...the following command set chassis audible alarm string where string can be any of the following keywords 2 After configuring the alarm it is advisable to view alarm environment information with the fo...

Страница 41: ...1 Optional To see what physical ports are available on your NetScreen 5000 Series system get interface 2 To create an aggregate interface name set interface string zone zonename where string is a leg...

Страница 42: ...he login prompt enter the serial number of the NetScreen 5000 Series system 2 At the password prompt enter the serial number again The following message appears Lost Password Reset You have initiated...

Страница 43: ...ion a permanent counter will be incremented to signify that this device has been reset This is your last chance to cancel this command If you proceed the device will return to factory default configur...

Страница 44: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 44 Using CLI Commands to Reset the Device...

Страница 45: ...s on page 54 Removing and Installing SFP and XFP Transceivers on page 55 Removing and Reseating Modules Although NetScreen 5000 Series modules are preinstalled before shipping you may find it necessar...

Страница 46: ...f the chassis To install a module in a NetScreen 5000 Series system 1 Be sure the module is right side up and the ejector injector levers are extended 2 Slide the module into the appropriate slot of t...

Страница 47: ...terclockwise to release the power supply 5 Lift and grip the lever and then gently pull the power supply straight out 6 Insert the new power supply into the bay 7 Secure the power supply in place by t...

Страница 48: ...ng the Fan Module The front panel of each device includes an air vent for cooling purposes The NetScreen 5000 Series fan modules differ according to the device model The NetScreen 5200 fan module has...

Страница 49: ...he assembly straight out NOTE During the one year warranty period you can obtain a replacement fan module by contacting Juniper Networks Technical support After the warranty period contact the Juniper...

Страница 50: ...er flat against the front panel NetScreen 5200 Fan Tray Filter Before you replace the fan tray filter make sure you have the following tools Flashlight or other light source 18 inch wooden ruler To re...

Страница 51: ...Filter 6 Carefully insert a new filter into the chassis Use the wooden ruler as an aid to guide the back edge of the filter to reach the end of the Velcro wall 7 Once the filter is fully inserted pus...

Страница 52: ...n a NetScreen 5400 1 Loosen the top and bottom thumbscrews with a phillips screwdriver turning them counterclockwise 2 Grip the screws and then gently slide the fan module out Figure 25 Removing a Net...

Страница 53: ...an module in place by tightening the thumbscrews clockwise NetScreen 5400 Fan Tray Filter To replace the fan tray filter 1 Remove the fan tray see NetScreen 5400 Fan Module on page 52 2 Lay the fan tr...

Страница 54: ...er the clip Do not depress the clip ejector on top of the clip 2 Slide the clip into the transceiver port until it clicks into place Because the fit is close you may have to apply some force to seat t...

Страница 55: ...cks into place disengaging the transceiver 2 Grasp the transceiver at both sides and then pull the transceiver toward you to remove it from the module To install an SFP or XFP transceiver into a modul...

Страница 56: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 56 Removing and Installing SFP and XFP Transceivers...

Страница 57: ...n page 58 Connectors on page 59 Physical Table 9 lists the physical specifications for NetScreen 5000 Series devices Table 9 NetScreen 5200 Physical Specifications Specification NetScreen 5200 NetScre...

Страница 58: ...C 10 AC Watts 150 DC Watts 150 Fuse Rating AC 3 15 Amps 240 Volts DC 6 Amps 250 Volts NetScreen 5200 and 12 Amps 250 Volts NetScreen 5400 Table 11 NetScreen 5000 Series Environmental Specifications En...

Страница 59: ...es for the different types of connectors used with the NetScreen 5000 Series systems Table 13 One Gigabit Media Types and Distances for NetScreen 5000 Series Connectors Standard Media Type Mhz Km Rati...

Страница 60: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 60 Connectors...

Страница 61: ...erial connection to establish terminal sessions with the system Used for launching CLI sessions RJ 45 9600 Bps RS 232 Modem Enables a serial modem connection for establishing dial up sessions RJ 45 96...

Страница 62: ...t of 4Gbps SFP 1 Gbps Gigabit Ethernet 5000 8G2 Network ports 1 through 8 Eight 2 Gigabit ports with an aggregate throughput of 8 Gbps SFP 2 Gbps Gigabit Ethernet 5000 8G2 G4 Network ports 1 through 8...

Страница 63: ...in a redundancy cluster Off No HA activity has been defined ALARM Red An alarm that could mean a system failure Blinking red A self test failure occurred during startup Off The system has not detected...

Страница 64: ...epends upon whether the NetScreen 5400 contains a single Secure Port Module SPM or multiple SPMs Single SPM Installed Table 21 describes the LED behaviors for different combinations of functioning pow...

Страница 65: ...lies NetScreen 5400 Power Supply 1 Present Power Supply 2 Present Power Supply 3 Present Power LED Alarm LED Yes No No Green Off Yes Yes not functioning or turned off No Green Red Yes Yes No Green Off...

Страница 66: ...NetScreen 5000 Series Hardware Installation and Configuration Guide 66 Fan LED...

Страница 67: ...50 fan modules installing 13 replacing 48 G guide organization 6 H high availability establishing an HA connection 27 I installation guidelines 19 center mount rack 23 front and rear rack 21 L LED sta...

Страница 68: ...ower supplies AC description 12 replacing 48 power supplies DC ground posts 27 replacing 47 terminal blocks 27 wiring 26 power supplies replacing AC 48 power supplies replacing DC 47 R racks installat...

Отзывы: