Juniper SRX 210 страница 27 Скачать руководство пользователя

Страница: 27 / 204

Table 4: SRX 210 Services Gateway Software Features and Licenses

(continued)

SRX 210 Services Gateway Feature

Feature
Category

Ethernet:

■

Media access control (MAC) encapsulation

■

802.1p tagging

■

Point-to-Point Protocol over Ethernet (PPPoE)

■

Circuit cross-connect (CCC)

■

Translational cross-connect (TCC)

Encapsulation

Synchronous Point-to-Point Protocol (PPP)

Frame Relay

High-level Data Link Control (HDLC)

802.1Q filtering and forwarding

Multilink Frame Relay (MFR)

Multilink PPP

Common Criteria

Security

Network attack detection

Denial-of-service (DoS) and distributed denial-of-service (DDoS) protection

Generic routing encapsulation (GRE), IP-over-IP, and IP Security (IPsec) tunnels

Advanced Encryption Standard (AES) 128-bit, 192-bit, and 256-bit

56-bit Data Encryption Standard (DES) and 168-bit 3DES encryption

MD5 and Secure Hash Algorithm (SHA-1) authentication

Stateful firewall packet filters

Network Address Translation (NAT)

Unified Threat Management (UTM)

NOTE:

Separate license is required for UTM.

Intrusion Detection and Prevention (IDP)

NOTE:

■

Separate license is required for IDP.

■

IDP HA is not supported in this release.

SRX 210 Services Gateway Software Features and Licenses

■

Chapter 1: Introduction to the SRX 210 Services Gateway

Содержание SRX 210

Страница 1: ...SRX 210 Services Gateway Hardware Guide Juniper Networks Inc 1194 North Mathilda Avenue Sunnyvale California 94089 USA 408 745 2000 www juniper net Part Number 530 025856 01 Revision 01 ...

Страница 2: ...ited States and other countries JUNOSe is a trademark of Juniper Networks Inc All other trademarks service marks registered trademarks or registered service marks are the property of their respective owners Juniper Networks assumes no responsibility for any inaccuracies in this document Juniper Networks reserves the right to change modify transfer or otherwise revise this publication without notic...

Страница 3: ...ealms devices links ports or transactions or require the purchase of separate licenses to use particular features functionalities services applications operations or capabilities or provide throughput performance configuration bandwidth interface processing temporal or geographical limits In addition such limits may restrict the use of the Software to managing certain kinds of networks or require ...

Страница 4: ...in connection with such withholding taxes by promptly providing Juniper with valid tax receipts and other required documentation showing Customer s payment of any withholding taxes completing appropriate applications that would reduce the amount of withholding tax to be paid and notifying and assisting Juniper in any audit or tax proceeding related to transactions hereunder Customer shall comply w...

Страница 5: ...nted to in writing by the party to be charged If any portion of this Agreement is held invalid the Parties agree that such invalidity shall not affect the validity of the remainder of this Agreement This Agreement and associated documentation has been written in the English language and the Parties agree that the English version will govern For Canada Les parties aux présentés confirment leur volo...

Страница 6: ...vi ...

Страница 7: ...ces Gateway Features and Functions 4 SRX 210 Services Gateway Software Features and Licenses 5 Chapter 2 SRX 210 Services Gateway Hardware Components and Specifications 11 SRX 210 Services Gateway Chassis 11 SRX 210 Services Gateway Front Panel 12 SRX 210 Services Gateway Back Panel 19 SRX 210 Services Gateway Boot Devices 20 SRX 210 Services Gateway Cooling System 21 SRX 210 Services Gateway Powe...

Страница 8: ...binet Requirements 44 Cabinet Size and Clearance Requirements 44 Cabinet Airflow Requirements 45 SRX 210 Services Gateway Rack Requirements 45 Clearance Requirements for Airflow and Hardware Maintenance of the SRX 210 Services Gateway 46 SRX 210 Services Gateway Electrical and Power Requirements 47 Chapter 4 Installation Overview for the SRX 210 Services Gateway 49 Installation Overview for the SR...

Страница 9: ...teway 69 Organizing Interface Cables on the SRX 210 Services Gateway 69 Chapter 9 Grounding and Powering On the SRX 210 Services Gateway 71 Required Tools and Parts for Grounding and Powering On the SRX 210 Services Gateway 71 Grounding the SRX 210 Services Gateway 72 Powering On and Powering Off the SRX 210 Services Gateway 73 Powering On the SRX 210 Services Gateway 73 Powering Off the SRX 210 S...

Страница 10: ...cal Interface Modules 100 Chapter 11 Configuring Secure Web Access for the SRX 210 Services Gateway 103 SRX 210 Services Gateway Secure Web Access Overview 103 Generating SSL Certificates for the SRX 210 Services Gateway 104 Configuring Secure Access to the J Web Interface for the SRX 210 Services Gateway 105 Configuring Secure Access with a Configuration Editor for the SRX 210 Services Gateway 10...

Страница 11: ...etting the Configuration File When the SRX 210 Services Gateway Is Inaccessible 126 Using the Reset Config Button on the SRX 210 Services Gateway 127 Changing the Reset Config Button Behavior on the SRX 210 Services Gateway 127 Juniper Networks Technical Assistance Center 128 Part 4 Appendixes Appendix A Safety and Regulatory Compliance Information 131 SRX 210 Services Gateway Definition of Safety...

Страница 12: ...es Gateway Agency Approvals 151 SRX 210 Services Gateway Compliance Statements for EMC Requirements 152 Canada 152 European Community 152 Japan 153 United States 153 SRX 210 Services Gateway Compliance Statements for Environmental Requirements 153 Lithium Battery 153 SRX 210 Services Gateway Compliance Statements for Acoustic Noise 154 Appendix B SRX 210 Services Gateway Environmental Specificatio...

Страница 13: ... Gateway and Component Details with the CLI 170 SRX 210 Services Gateway Chassis Serial Number and Agency Labels 171 SRX 210 Services Gateway Mini Physical Interface Module Serial Number Label 172 Contacting Customer Support to Obtain Return Materials Authorization 173 Information You Might Need to Supply to Juniper Networks Technical Assistance Center 173 Contacting Customer Support 174 Packing t...

Страница 14: ...xiv Table of Contents SRX 210 Services Gateway Hardware Guide ...

Страница 15: ...ervices gateway perform initial software configuration and perform routine maintenance After completing the installation and basic configuration procedures covered in this guide see the JUNOS software configuration guides for information about further JUNOS software configuration Audience This guide is designed for network administrators who are installing and maintaining a Juniper Networks SRX 21...

Страница 16: ... term is a named structure that defines match conditions and actions JUNOS System Basics Configuration Guide RFC 1997 BGP Communities Attribute Introduces important new terms Identifies book names Identifies RFC and Internet draft titles Italic text like this Configure the machine s domain name edit root set system domain name domain name Represents variables options for which you substitute a val...

Страница 17: ... Bold text like this In the configuration editor hierarchy select Protocols Ospf Separates levels in a hierarchy of J Web selections bold right angle bracket List of Technical Publications The following sections list hardware and software guides and release notes for the SRX 210 running JUNOS software All documents are available at http www juniper net techpubs Hardware Guides SRX 210 Services Gat...

Страница 18: ...cular release of JUNOS software including JUNOS software for J series and SRX series devices The release notes also contain corrections and updates to the manuals and software upgrade and downgrade instructions for JUNOS software Obtaining Documentation To obtain the most current version of all Juniper Networks technical documentation see the products documentation page on the Juniper Networks Web...

Страница 19: ...niper net customers support Search for known bugs http www2 juniper net kb Find product documentation http www juniper net techpubs Find solutions and answer questions using our Knowledge Base http kb juniper net Download the latest versions of software and review release notes http www juniper net customers csc software Search technical bulletins for relevant hardware and software notifications h...

Страница 20: ...xx Requesting Technical Support SRX 210 Services Gateway Hardware Guide ...

Страница 21: ...rt 1 SRX 210 Services Gateway Overview Introduction to the SRX 210 Services Gateway on page 3 SRX 210 Services Gateway Hardware Components and Specifications on page 11 SRX 210 Services Gateway Overview 1 ...

Страница 22: ...2 SRX 210 Services Gateway Overview SRX 210 Services Gateway Hardware Guide ...

Страница 23: ...on The SRX 210 services gateway can be used by the following types of networks provided they are connected directly to a traditional private network such as leased lines Frame Relay or Multi Protocol Label Switching MPLS networks Branch offices Small enterprises Fixed telecommuters Small standalone business deployments The device can also be used for branch offices where the public Internet is use...

Страница 24: ...s Gateway Features and Functions on page 4 SRX 210 Services Gateway Software Features and Licenses on page 5 SRX 210 Services Gateway Features and Functions The SRX 210 services gateway provides the following features Stable reliable and efficient IP routing WAN connectivity LAN connectivity The SRX 210 services gateway is a security optimized fixed processing system that provides the following fu...

Страница 25: ...SRX 210 Services Gateway Description on page 3 Accessing the SRX 210 Services Gateway SRX 210 Services Gateway Software Features and Licenses on page 5 SRX 210 Services Gateway Chassis on page 11 SRX 210 Services Gateway Software Features and Licenses The SRX 210 services gateway provides the software features listed in Table 4 on page 6 NOTE You must purchase a separate software license to obtain...

Страница 26: ...l Switching MPLS NOTE MPLS is available only in packet based mode Layer 2 and Layer 3 virtual private networks VPNs VPN routing and forwarding VRF table labels Traffic engineering protocols such as Label Distribution Protocol LDP and Resource Reservation Protocol RSVP NOTE Security features cannot be configured when MPLS IPv6 is used Multicast Internet Group Management Protocol IGMP Protocol Indep...

Страница 27: ...detection Denial of service DoS and distributed denial of service DDoS protection Generic routing encapsulation GRE IP over IP and IP Security IPsec tunnels Advanced Encryption Standard AES 128 bit 192 bit and 256 bit 56 bit Data Encryption Standard DES and 168 bit 3DES encryption MD5 and Secure Hash Algorithm SHA 1 authentication Stateful firewall packet filters Network Address Translation NAT Un...

Страница 28: ...ent System Management JUNOScript XML application programming interface API JUNOS command line interface CLI for services gateway configuration and management through the console Telnet SSH or J Web CLI terminal Simple Network Management Protocol version 1 SNMPv1 and SNMPv2 Network and Security Manager NSM J Flow flow monitoring and accounting Traffic Analysis Packet capture PCAP Real time performa...

Страница 29: ...rescue CONFIG Confirmation of configuration changes Software upgrades Supports the following features for automating network operations and troubleshooting Commit scripts Operation scripts Event policies Related Topics SRX 210 Services Gateway Description on page 3 SRX 210 Services Gateway Chassis on page 11 SRX 210 Services Gateway Features and Functions on page 4 SRX 210 Services Gateway Softwar...

Страница 30: ...10 SRX 210 Services Gateway Software Features and Licenses SRX 210 Services Gateway Hardware Guide ...

Страница 31: ... 22 SRX 210 Services Gateway Mini Physical Interface Modules on page 22 SRX 210 Services Gateway 3G ExpressCard on page 32 SRX 210 Services Gateway PoE Overview on page 35 SRX 210 Services Gateway Chassis The SRX 210 services gateway chassis is a rigid sheet metal structure that houses all the other hardware components see Figure 1 on page 12 Table 5 on page 11 provides information on the physical...

Страница 32: ...0 Services Gateway Back Panel on page 19 Monitoring the SRX 210 Services Gateway Components using LEDs on page 122 SRX 210 Services Gateway Electrical Safety Guidelines and Warnings on page 150 SRX 210 Services Gateway Front Panel The front panel of the SRX 210 services gateway consists of the following components Fast Ethernet ports Gigabit Ethernet ports Power button Reset Config button Console ...

Страница 33: ...ription Location Component Number The Alarm LED can be used to gather information on critical or major alarms or to determine if the device is functioning normally The Alarm LED has the following indicator colors Red and steadily on indicates a critical alarm Amber and steadily on indicates a major alarm Off indicates that there are currently no alarms Left side of the front panel Alarm LED 1 SRX ...

Страница 34: ...ules Mini PIMs LED has the following indicator colors Green and steadily on indicates that the Mini PIM is functioning normally Off indicates that the Mini PIM is not present or not detected by the device Left side of the front panel Mini PIM LED 3 The Mini PIM slot can be used as follows To provide LAN and WAN functionality To provide connections to the T1 or E1 network media types To provide con...

Страница 35: ...wn Off indicates that the device is not receiving power Left side of the front panel Power LED 5 The HA LED can be used to determine if high availability is enabled on the device The HA LED has the following indicator colors Green and steadily on indicates that all HA links are available Red and steadily on indicates that the HA links are not working as expected Amber and steadily on indicates tha...

Страница 36: ... not plugged in Left side of the front panel ExpressCard LED 7 The power button has status indicators on the front panel that indicate whether the power supply is functioning normally The power button powers the device on and off Left side of the front panel Power button 8 The Reset Config button is used to remove the current configuration and reset the device to the default configuration The butt...

Страница 37: ... storage devices Contact a customer service representative for more information The USB ports have the following characteristics Consist of two ports Function in the following modes Low speed Full speed High speed Compliant with USB revision 2 0 Center of the front panel Universal Serial Bus USB ports 10 The Console port can be used as follows To provide the Console interface To function as a mana...

Страница 38: ...TE This is applicable only for PoE version of the SRX 210 services gateway Right side of the front panel Gigabit Ethernet ports 12 The Fast Ethernet ports can be used as follows To provide LAN connectivity to hubs switches local servers and workstations To forward incoming data packets to the device To receive outgoing data packets from the device The Fast Ethernet ports have the following charact...

Страница 39: ... PoE Power over Ethernet is on and the connected Power Device is receiving power Steady Green PoE Status PoE Power over Ethernet is on but the connected Power Device is not receiving power fault or not enough power Steady Yellow PoE is off Off Unlit Related Topics SRX 210 Services Gateway Chassis on page 11 SRX 210 Services Gateway Back Panel on page 19 Monitoring the SRX 210 Services Gateway Comp...

Страница 40: ...vice to the installation site Right side of back panel Lock 4 Provides the outlet for the fan to push the air out of the chassis Center of back panel Exhaust vents 5 Provides the connection to a 3G wireless ExpressCard Left side of back panel ExpressCard slot 6 Related Topics SRX 210 Services Gateway Chassis on page 11 SRX 210 Services Gateway Front Panel on page 12 SRX 210 Services Gateway Boot D...

Страница 41: ...ure 4 on page 21 The fan controller monitors the temperature of the system Under normal operating conditions the fan functions at lower than full speed Figure 4 Airflow Through the SRX 210 Services Gateway Chassis Related Topics SRX 210 Services Gateway Chassis on page 11 SRX 210 Services Gateway Front Panel on page 12 SRX 210 Services Gateway Back Panel on page 19 SRX 210 Services Gateway Power S...

Страница 42: ...Interface Modules on the SRX 210 Services Gateway A Mini Physical Interface Module Mini PIM is a network interface card that is installed on the SRX 210 services gateway to provide physical connections to a LAN or a WAN The Mini PIM receives incoming packets from the network and transmits outgoing packets to the network The SRX 210 services gateway supports the following Mini PIMs T1 E1 Mini PIM 1...

Страница 43: ...Interface Module on page 23 T1 E1 Mini Physical Interface Module The T1 E1 Mini Physical Interface Module Mini PIM provides the physical connection to T1 or E1 network media types and also performs T1 or E1 framing and line speed signaling Figure 5 on page 23 shows the T1 E1 Mini PIM front panel Figure 5 T1 E1 Mini Physical Interface Module Front Panel Supported Standards The T1 E1 Mini PIM suppor...

Страница 44: ...Description Status Color Indication LED Indicates that there is a local or remote alarm device has detected a failure On steadily Yellow Alarm Indicates that there are no alarms or failures Off Indicates that a loopback or line state is detected On steadily Yellow Loopback Indicates that the loopback is not active Off Indicates that the Mini PIM link is up On steadily Green Carrier Detector CD Ind...

Страница 45: ...ramed Transmit bit rate 1 544 Mbps Receive bit rate 1 544 Mbps Line encoding AMI B8ZS Mode Framed Clear Channel Fractional Framing Superframe D4 SF Extended Superframe ESF Network interface specifications N x 64 Kbps or N x 56 Kbps nonchannelized data rates E1 n 1 to 31 CRC 16 32 Shared Flag Idle flag fill Counters Runts Giants FCS Error Abort Error Align Error N x 64 Kbps or N x 56 Kbps nonchanne...

Страница 46: ...rvices Gateway ADSL 2 Mini Physical Interface Module on page 29 Removing a Mini Physical Interface Module from the SRX 210 Services Gateway on page 117 Installing a Mini Physical Interface Module in the SRX 210 Services Gateway on page 118 SRX 210 Services Gateway 1 Port SFP Mini Physical Interface Module This section includes the following topic 1 Port SFP Mini Physical Interface Module on page 2...

Страница 47: ... SX 100BASE LX JX SFP 1FE FX RJ 45 1000BASE T SFP JX SFP 1000BASE T Key Features The 1 Port SFP Mini PIM has the following key features Enables you to install and remove transceivers without powering down the device Provides real time visual status of connectivity and traffic flows Provides Link Up Down alarm Supports different transceiver types NOTE The 1 Port SFP Mini PIM with Gigabit Ethernet c...

Страница 48: ...SFP Mini PIM Table 13 1 Port SFP Mini PIM Physical Specifications Value Description 0 80 H x 3 75 W x 5 9 L 2 0 cm x 9 5 cm x 14 5 cm Dimensions H x W x L 0 21 lb 97 g Weight SFP Connector type Mini PIM Form factor Network Interface Specifications 1 Port SFP Specification Specification Full duplex and half duplex mode Maximum transmission units MTUs of up to 1518 bytes 802 1q virtual LANs VLANs su...

Страница 49: ... Mini Physical Interface Module This section contains the following topic ADSL 2 Mini Physical Interface Module on page 29 ADSL 2 Mini Physical Interface Module The ADSL 2 Mini PIM provides a single physical interface to asymmetric digital subscriber line ADSL network media types The ADSL Mini PIM comprises of the following operational modes Annex A Annex B Annex M Figure 7 on page 29 shows the AD...

Страница 50: ...rt and UBR traffic types Support for ten Permanent Virtual Circuits PVCS LEDs The ADSL 2 Mini PIM has two LEDs Table 14 on page 30 shows the LED states Table 14 ADSL 2 Mini PIM LED States Description Status Color Indication LED Indicates that the ADSL interface is trained On steadily Green SYNC Indicates training is in progress Blinking Indicates that the interface is idle Off Indicates that traff...

Страница 51: ... 90 noncondensing Relative humidity Network Interface Specifications Values Specifications ADSL mode for ANNEX A Auto ANSI DMT ANSI T1 413 ITU DMT G 992 1 ITU DMT BIS G 992 3 ADSL 2 G 992 5 ADSL mode for ANNEX B Auto ITU DMT G 992 1 ITU DMT BIS G 992 3 ADSL 2 G 992 5 ITU ANNEXB UR2 ITU ANNEXB NON UR2 ETSI ADSL mode for ANNEX M ITU DMT BIS G 992 3 ADSL 2 G 992 5 Supported operating modes SRX 210 Se...

Страница 52: ...on page 23 Removing a Blank Mini Physical Interface Module Faceplate from the SRX 210 Services Gateway on page 116 Removing a Mini Physical Interface Module from the SRX 210 Services Gateway on page 117 Installing a Mini Physical Interface Module in the SRX 210 Services Gateway on page 118 Site Preparation Checklist for the SRX 210 Services Gateway on page 41 SRX 210 Services Gateway 3G ExpressCar...

Страница 53: ... can be activated from the JUNOS CLI Unlocking ExpressCards GSM ExpressCards can be unlocked from the JUNOS CLI The GSM cards can be unlocked before activation NOTE Locking unlocking is supported only for GSM cards Interface support The IP over PPP interface is supported across the USB ExpressCard interface and from the network via the wireless link Dial out support The dialer interface is used to...

Страница 54: ...in number NOTE After enabling the sim lock the 3G ExpressCard continues to be in unlock state until it is reset either by power recycling the services gateway or by plugging out and reinserting the card back in to the device and rebooting the device Unlocking sim card To disable sim lock i e to remove the security on GSM sim cards use the following command request modem wireless gsm sim lock cl 0 ...

Страница 55: ... copper Ethernet LAN cable The SRX 210 services gateway provides four PoE ports which supply electric power over the same ports that are used to connect network devices PoE ports allow you to plug in devices that require both network connectivity and electric power such as VOIP phones wireless access points and IP phones You can configure the gateway to act as power sourcing equipment to supply th...

Страница 56: ...onal modes When Class based power management mode is configured on the gateway power is allocated taking into account the maximum power ratings defined for the different classes of devices Table 17 on page 36 lists the classes and their power ratings as specified by the IEEE 802 3 AF standard Table 17 PoE Classes and Power Ratings on the SRX 210 Services Gateway Maximum Power Levels Output from Po...

Страница 57: ...rvices Gateway 3G ExpressCard on page 32 Site Preparation Checklist for the SRX 210 Services Gateway on page 41 SRX 210 Services Gateway PoE Overview 37 Chapter 2 SRX 210 Services Gateway Hardware Components and Specifications ...

Страница 58: ...38 SRX 210 Services Gateway PoE Overview SRX 210 Services Gateway Hardware Guide ...

Страница 59: ...ge 51 Preparing the SRX 210 Services Gateway for Installation on page 55 Installing the SRX 210 Services Gateway on page 59 Connecting the SRX 210 Services Gateway on page 67 Grounding and Powering On the SRX 210 Services Gateway on page 71 Establishing Basic Connectivity for the SRX 210 Services Gateway on page 77 Configuring Secure Web Access for the SRX 210 Services Gateway on page 103 Setting ...

Страница 60: ...40 Setting Up the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 61: ...enance of the SRX 210 Services Gateway on page 46 SRX 210 Services Gateway Electrical and Power Requirements on page 47 Site Preparation Checklist for the SRX 210 Services Gateway The checklist in Table 18 on page 41 summarizes the tasks you need to perform when preparing a site for installing the SRX 210 services gateway Table 18 Site Preparation Checklist for the SRX 210 Services Gateway Install...

Страница 62: ...the floor and building structure Cabinet Installation SRX 210 Services Gateway Cabinet Requirements on page 44 Verify that your cabinet meets the minimum requirements Plan the cabinet location including required space clearances Wall Installation Preparing the SRX 210 Services Gateway for Wall Mount Installation on page 57 Verify that the area selected meets the minimum requirements Verify that yo...

Страница 63: ...rements on page 45 Clearance Requirements for Airflow and Hardware Maintenance of the SRX 210 Services Gateway on page 46 General Site Guidelines for Installing the SRX 210 Services Gateway Take the following precautions to help you plan an acceptable operating environment for your SRX 210 services gateway and avoid environmentally caused equipment failures For the cooling system to function prope...

Страница 64: ...anels and Associated Equipment document number EIA 310 D published by the Electronics Industry Association http www eia org You can mount the SRX 210 services gateway horizontally in the cabinet NOTE The holes for the mounting brackets chassis are spaced 1 25 in 3 2 cm apart measured from the center of the hole When selecting a cabinet ensure that it meets the following specifications The cabinet ...

Страница 65: ...SRX 210 Services Gateway on page 41 Clearance Requirements for Airflow and Hardware Maintenance of the SRX 210 Services Gateway on page 46 SRX 210 Services Gateway Rack Requirements The services gateway can be installed in a rack Many types of racks are acceptable including front mount racks and four post telco racks Following are the rack requirements for your services gateway Rack Size and Stren...

Страница 66: ...Always secure the rack in which you are installing the services gateway to the structure of the building If your geographical area is subject to earthquakes bolt the rack to the floor For maximum stability also secure the rack to ceiling brackets Related Topics General Site Guidelines for Installing the SRX 210 Services Gateway on page 43 SRX 210 Services Gateway Cabinet Requirements on page 44 Si...

Страница 67: ...rflow around the chassis 2 5 in 6 35 cm Between side of the chassis and any non heat producing surface such as a wall or cabinet side Space for the cooling system to function properly and to maintain unrestricted airflow around the chassis 2 5 in 6 35 cm Between side of the chassis and devices that have fans or blowers Related Topics SRX 210 Services Gateway Description on page 3 General Site Guid...

Страница 68: ...elines on page 157 Site Preparation Checklist for the SRX 210 Services Gateway on page 41 SRX 210 Services Gateway AC DC Power Connection and Power Cord Specifications Interface Cable and Wire Specifications for the SRX 210 Services Gateway on page 161 Installation Overview for the SRX 210 Services Gateway on page 49 48 SRX 210 Services Gateway Electrical and Power Requirements SRX 210 Services Ga...

Страница 69: ...ation Checklist for the SRX 210 Services Gateway on page 41 3 Follow the instructions in Unpacking the SRX 210 Services Gateway on page 51 to unpack the services gateway and verify that the parts are received 4 Prepare the services gateway for installation as described in Preparing the SRX 210 Services Gateway for Rack Mount Desk Mount and Wall Mount Installation on page 55 5 Install the services ...

Страница 70: ...50 Installation Overview for the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 71: ...nt Related Topics Unpacking the SRX 210 Services Gateway on page 51 Verifying Parts Received with the SRX 210 Services Gateway on page 52 Preparing the SRX 210 Services Gateway for Rack Mount Installation on page 56 Installation Overview for the SRX 210 Services Gateway on page 49 Unpacking the SRX 210 Services Gateway The SRX 210 services gateway is shipped in a cardboard carton The carton also c...

Страница 72: ...missing contact your Juniper Networks customer service representative A fully configured SRX 210 services gateway contains the chassis with installed components listed in Table 20 on page 52 and an accessory box which contains the parts listed in Table 21 on page 52 NOTE The parts shipped with your device can vary depending on the configuration you ordered Table 20 Parts List for a Fully Configure...

Страница 73: ...ion 1 Tie Wrap Related Topics Required Tools and Parts for Unpacking the SRX 210 Services Gateway on page 51 Unpacking the SRX 210 Services Gateway on page 51 Preparing the SRX 210 Services Gateway for Rack Mount Desk Mount and Wall Mount Installation on page 55 Verifying Parts Received with the SRX 210 Services Gateway 53 Chapter 5 Unpacking the SRX 210 Services Gateway ...

Страница 74: ...54 Verifying Parts Received with the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 75: ...teway for Desk Mount Installation on page 56 Preparing the SRX 210 Services Gateway for Wall Mount Installation on page 57 The separate optional mounting kits are available for rack mounting wall mounting and desk vertical mounting of the SRX 210 services gateway Contact your Juniper Networks customer service representative for more information Related Topics Site Preparation Checklist for the SRX...

Страница 76: ...rvices Gateway on page 51 Verify that you have the following parts available in your rack mounting kit for the SRX 210 services gateway Rack mounting brackets Screws NOTE The rack mounting kit is not shipped with the device Related Topics Site Preparation Checklist for the SRX 210 Services Gateway on page 41 SRX 210 Services Gateway Rack Requirements on page 45 Clearance Requirements for Airflow a...

Страница 77: ...ge 45 Clearance Requirements for Airflow and Hardware Maintenance of the SRX 210 Services Gateway on page 46 Unpacking the SRX 210 Services Gateway on page 51 Preparing the SRX 210 Services Gateway for Rack Mount Desk Mount and Wall Mount Installation on page 55 Preparing the SRX 210 Services Gateway for Rack Mount Installation on page 56 Preparing the SRX 210 Services Gateway for Wall Mount Insta...

Страница 78: ...f the SRX 210 Services Gateway on page 46 Unpacking the SRX 210 Services Gateway on page 51 Preparing the SRX 210 Services Gateway for Rack Mount Desk Mount and Wall Mount Installation on page 55 Preparing the SRX 210 Services Gateway for Rack Mount Installation on page 56 Preparing the SRX 210 Services Gateway for Desk Mount Installation on page 56 58 Preparing the SRX 210 Services Gateway for Wa...

Страница 79: ...y warnings see Related Topics However providing an exhaustive set of guidelines for working with electrical equipment is beyond the scope of this guide Related Topics SRX 210 Services Gateway General Safety Guidelines and Warnings on page 133 SRX 210 Services Gateway Electrical Safety Guidelines and Warnings on page 150 Required Tools and Parts for Installing the SRX 210 Services Gateway on page 5...

Страница 80: ...y on a Wall on page 63 Installing the SRX 210 Services Gateway in a Rack You can front mount the SRX 210 services gateway in a rack The mounting brackets are an optional accessory Many types of racks are acceptable including four post telco racks enclosed cabinets and open frame racks For more information about the type of rack or cabinet the SRX 210 services gateway can be installed into see SRX ...

Страница 81: ...tall the screws that secure the mounting brackets to the chassis 3 Have one person grasp the sides of the device lift it and position it in the rack 4 Align the bottom hole in each mounting bracket with a hole in each rack rail as shown in Figure 9 on page 62 making sure the chassis is level Installing the SRX 210 Services Gateway in a Rack 61 Chapter 7 Installing the SRX 210 Services Gateway ...

Страница 82: ...her level surface The device is shipped with the rubber feet attached The rubber feet are necessary to stabilize the device on the desk You can install the device in a horizontal or vertical position The horizontal position is the standard installation position and does not require the vertical installation kit The vertical position requires the vertical installation kit which consists of a vertic...

Страница 83: ...he rubber feet help stabilize the device on the wall and enhance airflow The mounting brackets are an optional accessory To install the device on a wall 1 Turn the chassis upside down on a desk or work surface near where you intend to operate the device 2 Attach the provided rubber feet to the bottom of the chassis 3 Position a mounting bracket on each side of the chassis as shown in Figure 11 on ...

Страница 84: ... cm apart 6 Have one person grasp the sides of the device lift it and position it on the wall 7 Have a second person install two pairs of mounting screws through the bracket holes on either side of the device to secure it to the wall 8 Verify that the mounting screws on one side are aligned with the mounting screws on the opposite side and that the device is level see Figure 12 on page 65 64 Insta...

Страница 85: ...quirements Warnings and Guidelines on page 59 Preparing the SRX 210 Services Gateway for Rack Mount Desk Mount and Wall Mount Installation on page 55 Preparing the SRX 210 Services Gateway for Rack Mount Installation on page 56 Preparing the SRX 210 Services Gateway for Desk Mount Installation on page 56 Preparing the SRX 210 Services Gateway for Wall Mount Installation on page 57 Installing the S...

Страница 86: ...i Physical Interface Module in the SRX 210 Services Gateway on page 118 Removing a Mini Physical Interface Module from the SRX 210 Services Gateway on page 117 Related Topics Required Tools and Parts for Replacing a Mini Physical Interface Module on the SRX 210 Services Gateway on page 115 SRX 210 Services Gateway Installation Safety Guidelines and Warnings on page 138 SRX 210 Services Gateway Ins...

Страница 87: ...lectrostatic discharge ESD grounding wrist strap Related Topics Removing and Installing Mini Physical Interface Modules in the SRX 210 Services Gateway on page 66 Connecting the SRX 210 Services Gateway to the Power Supply on page 67 Connecting the SRX 210 Services Gateway to the Power Supply To connect the device to the power supply 1 Attach an electrostatic discharge ESD grounding strap to your ...

Страница 88: ...ateway on page 69 Organizing Interface Cables on the SRX 210 Services Gateway on page 69 Grounding the SRX 210 Services Gateway on page 72 Required Tools and Parts for Connecting the SRX 210 Services Gateway on page 67 SRX 210 Services Gateway General Safety Guidelines and Warnings on page 133 68 Connecting the SRX 210 Services Gateway to the Power Supply SRX 210 Services Gateway Hardware Guide ...

Страница 89: ...Gateway to the Power Supply on page 67 Organizing Interface Cables on the SRX 210 Services Gateway on page 69 Interface Cable and Wire Specifications for the SRX 210 Services Gateway on page 161 Organizing Interface Cables on the SRX 210 Services Gateway Arrange network cables as follows to prevent them from dislodging or developing stress points Secure cables so that they are not supporting their...

Страница 90: ...70 Organizing Interface Cables on the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 91: ...s and Parts for Grounding and Powering On the SRX 210 Services Gateway To ground and to provide power to the device you need the following tools and parts Phillips screwdrivers numbers 1 and 2 Related Topics Grounding the SRX 210 Services Gateway on page 72 Powering On and Powering Off the SRX 210 Services Gateway on page 73 Resetting the SRX 210 Services Gateway Organizing Interface Cables on the...

Страница 92: ...g and power cables that you supply A cable with an incorrectly attached lug can damage the device for example by causing a short circuit To ground the device 1 Attach an electrostatic discharge ESD grounding strap to your bare wrist and connect the strap to the ESD point on the chassis 2 Ensure that all grounding surfaces are clean and brought to a bright finish before grounding connections are ma...

Страница 93: ...X 210 Services Gateway on page 73 Powering On the SRX 210 Services Gateway To power on the services gateway insert the DC plug into the DC jack of the device and insert the AC adapter into the power supply faceplate The device starts as the power supply completes its startup sequence The Power LED lights during startup and remains on steadily when the device is operating normally Powering Off the ...

Страница 94: ... on and cannot locate a valid configuration file in the internal flash Typically a configuration file is unavailable when a services gateway is powered on for the first time or if the configuration file is deleted from the internal flash The autoinstallation feature enables you to deploy multiple services gateways from a central location in the network If you are setting up many devices autoinstal...

Страница 95: ...For more information about configuring autoinstallation see Administration Guide for J series Services Routers and SRX series Services Gateways Related Topics Powering the SRX 210 Services Gateway On and Off SRX 210 Services Gateway Basic Connectivity Overview on page 78 SRX 210 Services Gateway Autoinstallation Overview 75 Chapter 9 Grounding and Powering On the SRX 210 Services Gateway ...

Страница 96: ...76 SRX 210 Services Gateway Autoinstallation Overview SRX 210 Services Gateway Hardware Guide ...

Страница 97: ...Basic Connectivity This section includes the following topics on connecting the SRX 210 services gateway to the network and establishing basic connectivity SRX 210 Services Gateway Basic Connectivity Overview on page 78 Device Identification for the SRX 210 Services Gateway on page 79 Root Password for the SRX 210 Services Gateway on page 79 Time Zone and System Time for the SRX 210 Services Gatew...

Страница 98: ...to set the time on the services gateway Network settings for the services gateway IP address of a DNS server List of domains that can be appended to hostnames for DNS resolution IP address of the default gateway IP address to be used for the loopback interface IP address of the built in Ethernet port that you will use for management purposes For example use the ge 0 0 0 interface Gather the inform...

Страница 99: ...e the domain name is shared among all devices in a given network Together the hostname and domain name identify the device in the network Related Topics SRX 210 Services Gateway Basic Connectivity Overview on page 78 Root Password for the SRX 210 Services Gateway on page 79 Time Zone and System Time for the SRX 210 Services Gateway on page 80 Root Password for the SRX 210 Services Gateway The root...

Страница 100: ... the continent or ocean For example America or Pacific Name of the major city or other geographic feature in the time zone For example Boston or Azores A Network Time Protocol NTP server provides accurate time across a network The device synchronizes the system time with the NTP server and periodically accesses the NTP server to maintain the correct time The time zone and system time must be accur...

Страница 101: ...an encrypted string so that users viewing the configuration cannot see it Root Password A Network Time Protocol NTP server provides accurate time across a network The device synchronizes the system time with the NTP server and periodically accesses the NTP server to maintain the correct time The time zone and system time must be accurate so that the device schedules events and operations as expect...

Страница 102: ...s reachable though any entry ingress interface In addition applications such as NTP RADIUS and TACACS can use the loopback address as the source address for outgoing packets If you use the J Web Quick Configuration Set Up page you can either set a loopback address of your choice or have the loopback address automatically set to 127 0 0 1 when you click Apply or OK to commit the configuration The l...

Страница 103: ...ress for the SRX 210 Services Gateway on page 83 Loopback Address for the SRX 210 Services Gateway The loopback address is the IP address of the SRX 210 services gateway The loopback address ensures that the device provides an IP address to management applications Because it must always be available to hosts attempting to route packets to the device the loopback address resides on an interface tha...

Страница 104: ...168 1 1 24 NOTE The services gateway becomes a DHCP server out of the ge 0 0 0 port ge 0 0 0 192 168 2 1 24 ge 0 0 1 if used 192 168 3 1 24 through 192 168 8 1 24 fe 0 0 2 through fe 0 0 7 if using Fast Ethernet ports as management ports With the device temporarily acting as a DHCP server you can manually configure it with the J Web interface Any DHCP client host for example a PC or laptop compute...

Страница 105: ... the client application runs If the SSH private key is encrypted for greater security the SSH client must be able to access the passphrase used to decrypt the key For information about obtaining SSH software see http www ssh com and http www openssh com If you are using a JUNOScript server to configure and monitor devices you can activate cleartext access on the device to allow unencrypted text to...

Страница 106: ...on page 91 Connecting to the CLI at the User End for the SRX 210 Services Gateway on page 92 Connecting an SRX 210 Services Gateway to the J Web Interface If you plan to use the J Web interface to configure the SRX 210 services gateway you must connect through one of the built in Ethernet management ports When the services gateway is powered on for the first time the system looks for a DHCP server...

Страница 107: ... Ethernet cable to the built in Ethernet port on the services gateway 5 Power on the services gateway by pressing the power button on the front panel 6 Wait until the Status LED on the front panel turns solid green 7 Turn on the power to the management device The services gateway assigns an IP address to the management device within the 192 168 1 0 24 subnetwork if the services gateway is configur...

Страница 108: ...t Related Topics Connecting an SRX 210 Services Gateway to the CLI Locally on page 88 Connecting an SRX 210 Services Gateway to the CLI Remotely on page 90 Configuring Basic Settings for the SRX 210 Services Gateway with J Web Quick Configuration on page 93 Connecting an SRX 210 Services Gateway to the CLI Locally If you plan to use the CLI to configure the SRX 210 services gateway you must connec...

Страница 109: ...es gateway see Figure 17 on page 88 4 Plug the RJ 45 to DB 9 serial port adapter into the serial port on the management device see Figure 17 on page 88 5 Connect the other end of the Ethernet cable to the console port on the services gateway see Figure 17 on page 88 6 Turn on the power to the management device 7 Start your asynchronous terminal emulation application such as Microsoft Windows Hyper...

Страница 110: ...on page 90 Connecting the Modem to the Console Port on the SRX 210 Services Gateway on page 91 Connecting to the CLI at the User End for the SRX 210 Services Gateway on page 92 Connecting the Modem at the SRX 210 Services Gateway End Before you can connect a dial up modem to the console port on the SRX 210 services gateway you must configure the modem to accept a call on the first ring and accept ...

Страница 111: ...ge 90 Connecting the Modem to the Console Port on the SRX 210 Services Gateway To connect the dial up modem to the console port on the SRX 210 services gateway 1 Turn off power to the services gateway 2 Turn off the power to the modem 3 Plug one end of the Ethernet cable supplied with your services gateway into the console port Figure 18 on page 92 shows the console cable connector on the services...

Страница 112: ...on page 90 Connecting to the CLI at the User End for the SRX 210 Services Gateway To remotely connect to the CLI through a dial up modem connected to the console port on the SRX 210 services gateway 1 Connect a modem at your remote location to a management device such as a PC or laptop computer 2 Start your asynchronous terminal emulation application such as Microsoft Windows HyperTerminal on the ...

Страница 113: ...ettings Related Topics Connecting the Modem at the SRX 210 Services Gateway End on page 90 Connecting the Modem to the Console Port on the SRX 210 Services Gateway on page 91 Connecting an SRX 210 Services Gateway to the CLI Remotely on page 90 Configuring Basic Settings for the SRX 210 Services Gateway with J Web Quick Configuration J Web Quick Configuration allows you to configure basic settings...

Страница 114: ...n either set the IP address on the management device manually or connect ge 0 0 0 to the management network and access the services gateway another way for example through the console port Table 28 Quick Configuration Set Up Summary Your Action Function Field Identification Type the hostname Defines the hostname of the services gateway Host Name required Type the domain name Defines the network or...

Страница 115: ...of the Add button then click Add To delete a domain name click on it in the box above the Add button then click Delete Adds each domain name that includes the services gateway to the configuration so that each domain is included in a DNS search Domain Search Type a 32 bit IP address in dotted decimal notation Defines a default gateway through which to direct packets addressed to networks not expli...

Страница 116: ... 32 IP address of the DNS server to which DNS requests are sent lab device net and device net Domains to which the services gateway belongs 192 168 2 12 24 IP address of a backup device to use while the services gateway is booting or if the routing protocol processes fail to start 172 16 1 24 32 Loopback IP address and prefix length for the services gateway lo0 interface To use a configuration edi...

Страница 117: ...devicea lab device net 1 In the Nested configuration section next to Root authentication click Configure or Edit 2 Next to SSH RSA click Add New Entry 3 In the Authorized key box type the RSA password for example ssh rsa AAAAB3Nza D9Y2gXF9ac root devicea lab device net 4 Click OK 5 Click OK a second time to return to the System level in the configuration editor hierarchy Define root authentication...

Страница 118: ...ses are not running 1 From the edit hierarchy level enter edit interfaces 2 Delete the existing IP address delete Io0 unit 0 family inet address 3 Set the IP address and prefix length of Io0 0 For example set Io0 unit 0 family inet address 172 16 1 24 32 1 In the configuration editor hierarchy next to Interfaces click Configure or Edit 2 In the Interface table locate the Io0 row and click Unit 3 I...

Страница 119: ...t user host show system host name devicea domain name lab device net domain search lab device net device net backup device 192 168 2 44 time zone America Los_Angeles root authentication ssh rsa ssh rsa AAAAB3Nza D9Y2gXF9ac root devicea lab device net name server 10 148 2 32 services ntp server 10 148 2 21 interfaces ge 0 0 0 unit 0 family inet address 192 168 1 1 24 lo0 unit 0 family inet address ...

Страница 120: ...tor CLI configuration editor J Web Quick configuration editor To configure Mini PIMs with J Web Quick configuration editor 1 In the J Web user interface select Configuration Quick Configuration Interfaces A list of the network interfaces present on the services gateway is displayed 2 To configure properties for a network interface select the interface name and proceed with configuration For more i...

Страница 121: ...guides JUNOS Software Interfaces and Routing Configuration Guide CLI Reference for J series Services Routers and SRX series Services Gateways Related Topics Displaying Basic Connectivity Configurations for the SRX 210 Services Gateway on page 99 Mini Physical Interface Modules on the SRX 210 Services Gateway on page 22 SRX 210 Services Gateway T1 E1 Mini Physical Interface Module on page 23 SRX 21...

Страница 122: ...102 Configuring the SRX 210 Services Gateway Mini Physical Interface Modules SRX 210 Services Gateway Hardware Guide ...

Страница 123: ... no encryption The data that is transmitted between the Web browser and the services gateway by means of HTTP is vulnerable to interception and attack To enable secure Web access a services gateway supports HTTP over Secure Sockets Layer HTTPS You can enable HTTP or HTTPS access on specific interfaces and ports as needed The services gateway uses the SSL protocol to provide secure management of se...

Страница 124: ...105 Generating SSL Certificates for the SRX 210 Services Gateway To enable secure Web access you must first generate a digital SSL certificate and then enable HTTPS access on the SRX 210 services gateway To generate an SSL certificate 1 Enter the following openssl command in your SSH CLI The openssl command generates a self signed SSL certificate in the privacy enhanced mail PEM format It writes t...

Страница 125: ...he Web interface You can also install SSL certificates and enable JUNOScript over SSL with the Secure Access page Figure 20 on page 105 shows the Secure Access Quick Configuration page Figure 20 Secure Access Quick Configuration Page To configure Web access settings in the J Web interface 1 Enter information into the Secure Access Quick Configuration page as described in Table 32 on page 106 2 Cli...

Страница 126: ... and RSA private key in the Certificate box To delete a certificate select it and click Delete Displays digital certificates required for SSL access to the services gateway Allows you to add and delete SSL certificates Certificates HTTP Web Access To enable HTTP access select the Enable HTTP access box Enables HTTP access on interfaces Enable HTTP Access To enable HTTP access on all interfaces sel...

Страница 127: ...cess To enable an SSL certificate select a certificate from the JUNOScript SSL Certificate list for example new Specifies SSL certificates to be used for encryption This field is available only after you create at least one SSL certificate JUNOScript SSL Certificate Related Topics Verifying Secure Web Access for the SRX 210 Services Gateway on page 108 Generating SSL Certificates for the SRX 210 S...

Страница 128: ...next to it 3 Next to Web management click Edit 4 Select the Https box and click Edit next to it 5 In the Local certificate box type the name of the certificate for example new 6 In the Port box type 8443 7 Click OK Enable HTTPS access and specify the SSL certificate to be used for authentication Specify the port on which HTTPS access is to be enabled for example TCP port 8443 NOTE You can enable H...

Страница 129: ...BAQQ FADCBkTELMAkGA1UEBhMCdXMx nCzAJBgNVBAgTAmNhMRIwEAYDVQQHEwlzdW5ue HB1YnMxDTALBgNVBAMTBGpucHIxJDAiBgkqhkiG n9w0BCQEWFW5iaGFyZ2F2YUB fLUYAnBYmsYWOH n END CERTIFICATE n SECRET DATA The output shows the intended SSL certificate configuration Related Topics Generating SSL Certificates for the SRX 210 Services Gateway on page 104 Displaying a Secure Access Configuration for the SRX 210 Services Gate...

Страница 130: ... Secure Access with a Configuration Editor for the SRX 210 Services Gateway on page 107 Displaying an SSL Certificate Configuration for the SRX 210 Services Gateway on page 109 110 Displaying a Secure Access Configuration for the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 131: ...ntaining SRX 210 Services Gateway Hardware Components on page 113 Replacing Mini Physical Interface Modules on the SRX 210 Services Gateway on page 115 Troubleshooting the SRX 210 Services Gateway on page 121 SRX 210 Services Gateway Hardware Maintenance Replacement and Troubleshooting Procedures 111 ...

Страница 132: ...112 SRX 210 Services Gateway Hardware Maintenance Replacement and Troubleshooting Procedures SRX 210 Services Gateway Hardware Guide ...

Страница 133: ...ed to maintain the hardware components of the SRX 210 services gateway Electrostatic bag or antistatic mat Electrostatic discharge ESD grounding wrist strap Flat blade screw blade screwdriver approximately 1 8 in 3 mm Phillips screwdrivers number 1 and number 2 Related Topics Routine Maintenance Procedures for the SRX 210 Services Gateway on page 113 Maintaining the Cooling System Components of th...

Страница 134: ... Tools and Parts for Maintaining the SRX 210 Services Gateway Hardware Components on page 113 Routine Maintenance Procedures for the SRX 210 Services Gateway on page 113 SRX 210 Services Gateway Environmental Specifications on page 155 Maintaining the SRX 210 Services Gateway Power Supply on page 114 Maintaining the SRX 210 Services Gateway Power Supply To maintain the power supply of the SRX 210 ...

Страница 135: ...ics Required Tools and Parts for Replacing a Mini Physical Interface Module on the SRX 210 Services Gateway on page 115 Removing a Blank Mini Physical Interface Module Faceplate from the SRX 210 Services Gateway on page 116 Removing a Mini Physical Interface Module from the SRX 210 Services Gateway on page 117 Installing a Mini Physical Interface Module in the SRX 210 Services Gateway on page 118 ...

Страница 136: ... remove a blank faceplate unless you are installing a Mini PIM in the empty slot NOTE The Mini PIMs available on the SRX 210 services gateway are not hot swappable You need to power off the device before removing or installing Mini PIMs To remove a blank faceplate from an SRX 210 services gateway 1 Attach an ESD grounding strap to your bare wrist and connect the strap to the ESD point on the devic...

Страница 137: ...e a Mini PIM from an SRX 210 services gateway 1 Place an electrostatic bag or antistatic mat on a flat stable surface on which you intend to place the Mini PIM 2 Attach an ESD grounding strap to your bare wrist and connect the strap to the grounding point on the back of the device 3 Unplug the power adapter from the device Verify that the Power LED is off 4 Label the cables connected to the Mini P...

Страница 138: ... 118 Installing a Mini Physical Interface Module in the SRX 210 Services Gateway NOTE The Mini Physical Interface Modules Mini PIMs available on the SRX 210 services gateway are not hot swappable You need to power off the device before removing or installing Mini PIMs To install a Mini PIM in an SRX 210 services gateway 1 Attach an ESD grounding strap to your bare wrist and connect the strap to th...

Страница 139: ...tain the shape of the cable loops 6 Reconnect the power adapter to the device Verify that the Power LED glows steadily green after you press the power button 7 Verify that the Mini PIM LED on the system dashboard glows steadily green to confirm that the Mini PIM is online Related Topics Required Tools and Parts for Replacing a Mini Physical Interface Module on the SRX 210 Services Gateway on page ...

Страница 140: ...120 Installing a Mini Physical Interface Module in the SRX 210 Services Gateway SRX 210 Services Gateway Hardware Guide ...

Страница 141: ...omponents using LEDs on page 122 Chassis and Interface Alarm Messages on the SRX 210 Services Gateway on page 123 Monitoring the SRX 210 Services Gateway Power System on page 125 CLI on the SRX 210 Services Gateway The JUNOS software command line interface CLI is the primary tool for controlling and troubleshooting services gateway hardware the JUNOS software routing protocols and network connecti...

Страница 142: ... action is required Indicates that the device is functioning normally Green Status LED Normal Condition No action is required Indicates that the device is starting up Amber Contact JTAC See Juniper Networks Technical Assistance Center on page 128 Indicates that the device has failed Red Major alarm indicates a critical situation on the services gateway that requires immediate action See the topic ...

Страница 143: ...oring the SRX 210 Services Gateway Power System on page 125 Using the Reset Config Button on the SRX 210 Services Gateway on page 127 Changing the Reset Config Button Behavior on the SRX 210 Services Gateway on page 127 Juniper Networks Technical Assistance Center on page 128 Chassis and Interface Alarm Messages on the SRX 210 Services Gateway When the services gateway detects an alarm condition i...

Страница 144: ...from the alternative boot device USB storage device If you configured your services gateway to boot from an alternative boot device ignore this alarm condition If you did not configure the services gateway to boot from an alternative boot device contact JTAC See Juniper Networks Technical Assistance Center on page 128 The services gateway boots from an alternate boot device Boot media Red major Co...

Страница 145: ...o determine whether the fan is pushing air out of the chassis Replace the failed fan Contact JTAC See Juniper Networks Technical Assistance Center on page 128 The services gateway fan has failed NOTE For more information on the alarms see the JUNOS Software Administration Guide Related Topics CLI on the SRX 210 Services Gateway on page 121 Monitoring the SRX 210 Services Gateway Components using L...

Страница 146: ...d Topics CLI on the SRX 210 Services Gateway on page 121 Monitoring the SRX 210 Services Gateway Components using LEDs on page 122 Chassis and Interface Alarm Messages on the SRX 210 Services Gateway on page 123 Using the Reset Config Button on the SRX 210 Services Gateway on page 127 Changing the Reset Config Button Behavior on the SRX 210 Services Gateway on page 127 Juniper Networks Technical A...

Страница 147: ...s and rescue configuration and loads and commits the factory configuration For details about the factory default settings see the JUNOS Software Administration Guide Related Topics Changing the Reset Config Button Behavior on the SRX 210 Services Gateway on page 127 CLI on the SRX 210 Services Gateway on page 121 Monitoring the SRX 210 Services Gateway Components using LEDs on page 122 Chassis and...

Страница 148: ...ing the Reset Config Button on the SRX 210 Services Gateway on page 127 CLI on the SRX 210 Services Gateway on page 121 Monitoring the SRX 210 Services Gateway Components using LEDs on page 122 Chassis and Interface Alarm Messages on the SRX 210 Services Gateway on page 123 Monitoring the SRX 210 Services Gateway Power System on page 125 Juniper Networks Technical Assistance Center on page 128 Jun...

Страница 149: ...al Specifications on page 155 SRX 210 Services Gateway Power Guidelines Requirements and Specifications on page 157 SRX 210 Services Gateway Interface Cable Specifications and Connector Pinouts on page 161 Contacting Customer Support and Returning the SRX 210 Services Gateway Hardware on page 169 Appendixes 129 ...

Страница 150: ...130 Appendixes SRX 210 Services Gateway Hardware Guide ...

Страница 151: ...ateway Electrical Safety Guidelines and Warnings on page 150 SRX 210 Services Gateway Agency Approvals on page 151 SRX 210 Services Gateway Compliance Statements for EMC Requirements on page 152 SRX 210 Services Gateway Compliance Statements for Environmental Requirements on page 153 SRX 210 Services Gateway Compliance Statements for Acoustic Noise on page 154 SRX 210 Services Gateway Definition o...

Страница 152: ...isen verbundenen Gefahren und der Standardpraktiken zur Vermeidung von Unfällen bewußt Avvertenza Questo simbolo di avvertenza indica un pericolo La situazione potrebbe causare infortuni alle persone Prima di lavorare su qualsiasi apparecchiatura occorre conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti Advarsel Dette ...

Страница 153: ...tem services Keep the area around the chassis clear and free from dust before during and after installation Keep tools away from areas where people could trip on them Wear safety glasses if you are working under any conditions that could be hazardous to your eyes Do not perform any actions that create a potential hazard to people or make the equipment unsafe Never install or manipulate wiring duri...

Страница 154: ...ente treinado e qualificado Atención Estos equipos deben ser instalados y reemplazados exclusivamente por personal técnico adecuadamente preparado y capacitado Varning Denna utrustning ska endast installeras och bytas ut av utbildad och kvalificerad personal Restricted Access Area Warning WARNING The services gateway is intended for installation in restricted access areas A restricted access area ...

Страница 155: ...zza ed è controllata dall autorità responsabile della zona Advarsel Denne enheten er laget for installasjon i områder med begrenset adgang Et område med begrenset adgang gir kun adgang til servicepersonale som bruker et spesielt verktøy lås og nøkkel eller en annen sikkerhetsanordning og det kontrolleres av den autoriteten som er ansvarlig for området Aviso Esta unidade foi concebida para instalaç...

Страница 156: ...y check the resistance value of the ESD strap The measurement should be in the range of 1 to 10 Mohms When handling any component that is removed from the chassis verify that the equipment end of your ESD strap is attached to one of the ESD points on the chassis Avoid contact between the component and your clothing ESD voltages emitted from clothing can still damage components When removing or ins...

Страница 157: ...e extinguishers displace the oxygen from the point of combustion to eliminate the fire For extinguishing fire on or around equipment that draws air from the environment for cooling use this type of inert oxygen displacement extinguisher instead of an extinguisher that leave residues on equipment Do not use multipurpose Type ABC chemical fire extinguishers dry chemical fire extinguishers near Junip...

Страница 158: ...ce d alimentation consulter les directives d installation Warnung Lesen Sie die Installationsanweisungen bevor Sie das System an die Stromquelle anschließen Avvertenza Consultare le istruzioni di installazione prima di collegare il sistema all alimentatore Advarsel Les installasjonsinstruksjonene før systemet kobles til strømkilden Aviso Leia as instruções de instalação antes de ligar o sistema à ...

Страница 159: ...ek is Wanneer u dit toestel in een gedeeltelijk gevuld rek monteert dient u het rek van onderen naar boven te laden met het zwaarste onderdeel onderaan in het rek Als het rek voorzien is van stabiliseringshulpmiddelen dient u de stabilisatoren te monteren voordat u het toestel in het rek monteert of het daar een servicebeurt geeft Varoitus Kun laite asetetaan telineeseen tai huolletaan sen ollessa...

Страница 160: ... Wird das Gestell mit Stabilisierungszubehör geliefert sind zuerst die Stabilisatoren zu installieren bevor Sie die Einheit im Gestell anbringen oder sie warten Avvertenza Per evitare infortuni fisici durante il montaggio o la manutenzione di questa unità in un supporto occorre osservare speciali precauzioni per garantire che il sistema rimanga stabile Le seguenti direttive vengono fornite per gar...

Страница 161: ...s de baixo para cima Se a estante possuir um dispositivo de estabilização instale o antes de montar ou reparar a unidade Atención Para evitar lesiones durante el montaje de este equipo sobre un bastidor o posteriormente durante su mantenimiento se debe poner mucho cuidado en que el sistema quede bien estable Para garantizar su seguridad proceda según las siguientes instrucciones El Juniper Network...

Страница 162: ...r transmitters which are considered a Class 1 Laser Product by the U S Food and Drug Administration and are evaluated as a Class 1 Laser Product per EN 60825 1 A11 A2 requirements Observe the following guidelines and warnings Laser and LED Safety Guidelines and Warnings on page 142 Laser and LED Safety Guidelines and Warnings General Laser Safety Guidelines When working around Mini PIMs observe th...

Страница 163: ...aserprodukt av klass 1 Class 1 LED Product Warning WARNING Class 1 LED product Waarschuwing Klasse 1 LED product Varoitus Luokan 1 valodiodituote Attention Alarme de produit LED Class I Warnung Class 1 LED Produktwarnung Avvertenza Avvertenza prodotto LED di Classe 1 Advarsel LED produkt i klasse 1 Aviso Produto de classe 1 com LED Atención Aviso sobre producto LED de Clase 1 Varning Lysdiodproduk...

Страница 164: ...ópticos Varning Rikta inte blicken in mot strålen och titta inte direkt på den genom optiska instrument Radiation from Open Port Apertures Warning WARNING Because invisible radiation may be emitted from the aperture of the port when no fiber cable is connected avoid exposure to radiation and do not stare into open apertures Waarschuwing Aangezien onzichtbare straling vanuit de opening van de poort...

Страница 165: ...ålning kan avges från en portöppning utan ansluten fiberkabel och du bör därför undvika att bli utsatt för strålning genom att inte stirra in i oskyddade öppningar Related Topics SRX 210 Services Gateway Installation Safety Guidelines and Warnings on page 138 SRX 210 Services Gateway Maintenance and Operational Safety Guidelines and Warnings on page 145 SRX 210 Services Gateway Maintenance and Ope...

Страница 166: ...quivalente recomendado pelo fabricante Destrua as baterias usadas conforme as instruções do fabricante Atención Existe peligro de explosión si la batería se reemplaza de manera incorrecta Reemplazar la batería exclusivamente con el mismo tipo o el equivalente recomendado por el fabricante Desechar las baterías gastadas según las instrucciones del fabricante Varning Explosionsfara vid felaktigt bat...

Страница 167: ...ært varme og kan forårsake alvorlige brannskader eller smelte fast til polene Aviso Antes de trabalhar em equipamento que esteja ligado a linhas de corrente retire todas as jóias que estiver a usar incluindo anéis fios e relógios Os objectos metálicos aquecerão em contacto com a corrente e em contacto com a ligação à terra podendo causar queimaduras graves ou ficarem soldados aos terminais Atenció...

Страница 168: ... services gateway dan ook oververhit raakt dient u deze niet te bedienen op een plaats waar de maximale aanbevolen omgevingstemperatuur van 40ο C wordt overschreden Om te voorkomen dat de luchtstroom wordt beperkt dient er minstens 15 2 cm speling rond de ventilatie openingen te zijn Varoitus Ettei Juniper Networks services gateway sarjan reititin ylikuumentuisi sitä ei saa käyttää tilassa jonka l...

Страница 169: ...un espacio mínimo de 15 2 cm alrededor de las aperturas para ventilación Varning Förhindra att en Juniper Networks services gateway överhettas genom att inte använda den i ett område där den maximalt rekommenderade omgivningstemperaturen på 40ο C överskrids Förhindra att luftcirkulationen inskränks genom att se till att det finns fritt utrymme på minst 15 2 cm omkring ventilationsöppningarna Produ...

Страница 170: ... accident results in an injury take the following actions in this order 1 Use caution Be aware of potentially hazardous conditions that could cause further injury 2 Disconnect power from the services gateway 3 If possible send another person to get medical aid Otherwise assess the condition of the victim then call for help General Electrical Safety Guidelines and Warnings Install the services gate...

Страница 171: ...ntenance and Operational Safety Guidelines and Warnings on page 145 SRX 210 Services Gateway Agency Approvals on page 151 Grounding the SRX 210 Services Gateway on page 72 SRX 210 Services Gateway Agency Approvals The services gateway complies with the following standards Safety CSA 60950 1 2003 Safety of Information Technology Equipment UL 60950 1 2003 Safety of Information Technology Equipment E...

Страница 172: ...quirements on page 152 SRX 210 Services Gateway Compliance Statements for Environmental Requirements on page 153 SRX 210 Services Gateway Compliance Statements for Acoustic Noise on page 154 SRX 210 Services Gateway Compliance Statements for EMC Requirements Canada on page 152 European Community on page 152 Japan on page 153 United States on page 153 Canada This Class B digital apparatus complies ...

Страница 173: ...h case the user will be required to correct the interference at his own expense Related Topics SRX 210 Services Gateway Agency Approvals on page 151 SRX 210 Services Gateway Compliance Statements for Environmental Requirements on page 153 SRX 210 Services Gateway Compliance Statements for Acoustic Noise on page 154 SRX 210 Services Gateway Compliance Statements for Environmental Requirements This ...

Страница 174: ...ed sound pressure level is 70 dB A or less per EN ISO 7779 Related Topics SRX 210 Services Gateway Compliance Statements for EMC Requirements on page 152 SRX 210 Services Gateway Compliance Statements for Environmental Requirements on page 153 SRX 210 Services Gateway Environmental Specifications on page 155 SRX 210 Services Gateway Agency Approvals on page 151 154 SRX 210 Services Gateway Complia...

Страница 175: ...scription No performance degradation to 10 000 ft 3048 m Altitude Normal operation ensured in temperature range of 32 F 0 C to 104 F 40 C Nonoperating storage temperature in shipping container 40 F 40 C to 158 F 70 C Temperature The maximum thermal values for the three types of services gateways are as follows Low Memory AC power 120 BTU hour 35 W High Memory AC power 126 BTU hour 37 W PoE AC powe...

Страница 176: ...on page 133 SRX 210 Services Gateway Maintenance and Operational Safety Guidelines and Warnings on page 145 Routine Maintenance Procedures for the SRX 210 Services Gateway on page 113 156 SRX 210 Services Gateway Environmental Specifications SRX 210 Services Gateway Hardware Guide ...

Страница 177: ...ine Site Wiring Factor To ensure that signaling functions optimally Install wires correctly Improperly installed wires can emit radio interference Do not exceed the recommended distances or pass wires between buildings The potential for damage from lightning strikes increases if wires exceed recommended distances or if wires pass between buildings Shield all conductors The electromagnetic pulse EM...

Страница 178: ...pics General Site Guidelines for Installing the SRX 210 Services Gateway on page 43 Maintaining the SRX 210 Services Gateway Power Supply on page 114 SRX 210 Services Gateway Electrical and Power Requirements on page 47 SRX 210 Services Gateway Environmental Specifications on page 155 SRX 210 Services Gateway Power Specifications and Requirements on page 158 SRX 210 Services Gateway Power Specific...

Страница 179: ...e SRX 210 Services Gateway on page 46 SRX 210 Services Gateway Site Electrical Wiring Guidelines on page 157 Site Preparation Checklist for the SRX 210 Services Gateway on page 41 SRX 210 Services Gateway Power Specifications and Requirements 159 Appendix C SRX 210 Services Gateway Power Guidelines Requirements and Specifications ...

Страница 180: ...160 SRX 210 Services Gateway Power Specifications and Requirements SRX 210 Services Gateway Hardware Guide ...

Страница 181: ... 11 Connector Pinouts for the SRX 210 Services Gateway ADSL2 Mini PIM on page 166 Interface Cable and Wire Specifications for the SRX 210 Services Gateway Table 40 on page 161 lists the specifications for the cables that connect to ports and the wires that connect to the alarm relay contacts Table 40 Cable and Wire Specifications for Ports and Alarm Interfaces Device Receptacle Maximum Length Cabl...

Страница 182: ...net Port The port on the front panel labeled ETHERNET is an autosensing 10 100 Mbps Ethernet RJ 45 receptacle that accepts an Ethernet cable for connecting the services gateway to a management LAN or other device that supports out of band management Table 41 on page 162 describes the RJ 45 connector pinouts for the Ethernet ports Table 41 RJ 45 Connector Pinouts for the Services Gateway Ethernet P...

Страница 183: ...to Send RTS 1 Data Terminal Ready DTR 2 Transmit Data TXD 3 Signal Ground Ground 4 Signal Ground Ground 5 Receive Data RXD 6 Data Set Ready DSR DCD 7 Clear to Send CTS 8 Related Topics Interface Cable and Wire Specifications for the SRX 210 Services Gateway on page 161 RJ 45 Connector Pinouts for the SRX 210 Services Gateway Ethernet Port on page 162 RJ 48 Connector Pinouts for the SRX 210 Service...

Страница 184: ...TX Ring 4 4 TX Tip 5 5 Shield Return Ground 3 3 Shield Return Ground 6 6 No connect No connect 7 No connect No connect 8 Table 44 RJ 48 Connector to RJ 48 Connector Crossover Pinouts Signal RJ 48 Pin Data Numbering Form RJ 48 Pin on T1 E1 Mini PIM Data Numbering Form RX Ring TX Ring 4 1 RX Tip TX Tip 5 2 TX Ring RX Ring 1 4 TX Tip RX Tip 2 5 Shield Return Ground 3 3 Shield Return Ground 6 6 No con...

Страница 185: ...ct 11 No connect No connect 12 No connect No connect 13 No connect No connect 14 No connect No connect 15 Table 46 RJ 48 Connector to DB 15 Connector Crossover Pinouts Signal DB 15 Pin Data Numbering Form RJ 48 Pin on T1 E1 Mini PIM Data Numbering Form RX Ring TX Ring 9 1 RX Tip TX Tip 1 2 TX Ring RX Ring 11 4 TX Tip RX Tip 3 5 Shield Return Ground 4 3 Shield Return Ground 2 6 No connect No connec...

Страница 186: ...outs for the SRX 210 Services Gateway Console Port on page 163 RJ 45 Connector Pinouts for the SRX 210 Services Gateway Ethernet Port on page 162 RJ 11 Connector Pinouts for the SRX 210 Services Gateway ADSL2 Mini PIM on page 166 RJ 11 Connector Pinouts for the SRX 210 Services Gateway ADSL2 Mini PIM The ADSL 2 Mini PIMs use an RJ 11 cable which is not supplied with the Mini PIMs Table 47 on page ...

Страница 187: ...ort on page 162 RJ 45 Connector Pinouts for the SRX 210 Services Gateway Console Port on page 163 RJ 48 Connector Pinouts for the SRX 210 Services Gateway T1 E1 Mini Physical Interface Module on page 163 RJ 11 Connector Pinouts for the SRX 210 Services Gateway ADSL2 Mini PIM 167 Appendix D SRX 210 Services Gateway Interface Cable Specifications and Connector Pinouts ...

Страница 188: ...168 RJ 11 Connector Pinouts for the SRX 210 Services Gateway ADSL2 Mini PIM SRX 210 Services Gateway Hardware Guide ...

Страница 189: ...s gateway or component to Juniper Networks for repair or replacement 1 Determine the part number and serial number of the device or component See SRX 210 Services Gateway Chassis Serial Number and Agency Labels on page 171 2 Obtain a Return Materials Authorization RMA number from JTAC See Contacting Customer Support on page 174 NOTE Do not return the device or any component to Juniper Networks unl...

Страница 190: ...l Number and Agency Labels This section includes the following topics Listing the SRX 210 Services Gateway and Component Details with the CLI on page 170 SRX 210 Services Gateway Chassis Serial Number and Agency Labels on page 171 SRX 210 Services Gateway Mini Physical Interface Module Serial Number Label on page 172 Listing the SRX 210 Services Gateway and Component Details with the CLI Before co...

Страница 191: ...0 Services Gateway Chassis Serial Number and Agency Labels on page 171 SRX 210 Services Gateway Mini Physical Interface Module Serial Number Label on page 172 Contacting Customer Support on page 174 SRX 210 Services Gateway Chassis Serial Number and Agency Labels The SRX 210 services gateway has a serial number ID and agency labels on the bottom of the chassis as shown in Figure 25 on page 172 SRX...

Страница 192: ...nterface Module Serial Number Label Mini Physical Interface Modules Mini PIMs are field replaceable on the SRX 210 services gateway Each Mini PIM has a unique serial number The serial number label is located on the right side of the Mini PIM when the Mini PIM is horizontally oriented as it would be installed on the device The exact location might be slightly different on different Mini PIMs depend...

Страница 193: ...esting support from JTAC by telephone be prepared to provide the following information Your existing case number if you have one Details of the failure or problem Type of activity being performed on the services gateway when the problem occurred Configuration data displayed by one or more show commands Your name organization name telephone number fax number and shipping address Related Topics Retu...

Страница 194: ...l Number and Agency Labels on page 171 SRX 210 Services Gateway Mini Physical Interface Module Serial Number Label on page 172 Packing the SRX 210 Services Gateway for Shipment on page 175 Packing the SRX 210 Services Gateway Components for Shipment on page 176 Packing the SRX 210 Services Gateway or Component for Shipment This section describes how to pack the services gateway or components for s...

Страница 195: ...ay enter CLI operational mode and issue the following command to shut down the services gateway software user host request system halt Wait until a message appears on the console confirming that the operating system has halted 4 Shut down power to the device by pressing the power button on the front panel of the device 5 Disconnect power from the device 6 Remove the cables that connect to all exte...

Страница 196: ...ng materials if they are available Place individual Mini Physical Interface Modules Mini PIMs in electrostatic bags Write the Return Materials Authorization RMA number on the exterior of the box to ensure proper tracking CAUTION Do not stack any of the services gateway components during packing Related Topics Required Tools and Parts for Packing the SRX 210 Services Gateway on page 174 Packing the...

Страница 197: ...Part 5 Index Index on page 179 Index 177 ...

Страница 198: ...178 Index SRX 210 Services Gateway Hardware Guide ...

Страница 199: ...statements xvii built in Ethernet ports See Gigabit Ethernet ports C cables console port cable chassis connecting 88 91 Ethernet cable connecting 87 88 91 RJ 48 pinouts 163 certificates See SSL certificates channelized E1 ports RJ 48 cable pinouts 163 channelized T1 ports RJ 48 cable pinouts 163 character classes 79 cleartext access 85 CLI configuration editor basic settings 96 initial configurati...

Страница 200: ...h HTTPS 103 through SSH 85 through SSL 103 environmental specifications 155 Ethernet cable connecting the services gateway to a management device 87 88 connecting the services gateway to a modem 91 ethernet port cable specifications 161 Ethernet ports See Gigabit Ethernet ports F fire safety specifications 137 font conventions xvi forwarding table 82 G ge 0 0 connecting through J Web 86 ge 0 0 0 f...

Страница 201: ...6 defining Quick Configuration 93 overview 83 M maintenance guidelines warnings 145 management device connecting to J Web 86 management interface address after initial configuration 84 before initial configuration 84 defining configuration editor 96 defining Quick Configuration 93 during initial configuration 84 loopback 83 management interfaces 84 manuals list of xvii modem commands at device end...

Страница 202: ...ctivity 99 for secure access 109 for SSL certificates 109 secure access generating SSL certificates 104 HTTPS access configuration editor 107 HTTPS access Quick Configuration 105 HTTPS recommended 103 installing SSL certificates configuration editor 107 installing SSL certificates Quick Configuration 105 JUNOScript SSL access 105 overview 103 requirements 103 sample configuration 109 verifying sec...

Страница 203: ...s Quick Configuration 93 management access 85 temperature acceptable range 155 thermal output 155 time zone defining 80 defining configuration editor 96 defining Quick Configuration 93 timestamps for log messages 80 tolerances 155 V verification secure access 108 W warnings electrical 150 general 133 installation 138 laser and LED 142 maintenance and operational 145 Web access secure See secure ac...

Страница 204: ...184 Index SRX 210 Services Gateway Hardware Guide ...

Результаты поиска

Содержание SRX 210

Отзывы:

Похожие инструкции для SRX 210

Бренды по названию

Популярные бренды

Juniper SRX 210, Руководство по оборудованию

Результаты поиска

Содержание SRX 210

Отзывы:

Похожие инструкции для SRX 210

Бренды по названию

Популярные бренды