Juniper SRX550 Скачать руководство пользователя

Страница: 126 / 220

}

policies {

from-zone trust to-zone untrust {

policy trust-to-untrust {

match {

source-address any;

destination-address any;

application any;

}

then {

permit;

}

vlans {

vlan-trust {

vlan-id 3;

l3-interface vlan.0;

}

protocols {

stp;

}

Содержание SRX550

Страница 1: ...SRX550 Services Gateway Hardware Guide Published 2020 12 16...

Страница 2: ...re Guide Copyright 2020 Juniper Networks Inc All rights reserved The information in this document is current as of the date on the title page YEAR 2000 NOTICE Juniper Networks hardware and software pr...

Страница 3: ...way Hardware Features 3 SRX550 Services Gateway Software Features and Licenses 4 SRX550 Services Gateway Power over Ethernet 9 Accessing the SRX550 Services Gateway 11 Hardware Component Overview 12 S...

Страница 4: ...Maintenance of the SRX550 Services Gateway 45 Cabinet Requirements 47 SRX550 Services Gateway Cabinet Size and Clearance Requirements 47 SRX550 Services Gateway Cabinet Airflow Requirements 48 Power...

Страница 5: ...g Structure 68 Installing the Services Gateway 69 Installing the SRX550 Services Gateway in a Rack 69 Installing an AC Power Supply on the SRX550 Services Gateway 72 Installing a DC Power Supply on th...

Страница 6: ...teway with a Configuration Editor 110 Displaying Basic Connectivity Configurations for the SRX550 Services Gateway 115 Built In Ethernet Ports for the SRX550 Services Gateway 116 Management Access for...

Страница 7: ...e SRX550 Services Gateway 146 Installing a DC Power Supply on the SRX550 Services Gateway 148 Contacting Customer Support and Returning Components 152 Contacting Customer Support 152 Return Procedure...

Страница 8: ...onal Safety Guidelines and Warnings 178 Battery Handling Warning 179 Jewelry Removal Warning 180 Lightning Activity Warning 182 Operating Temperature Warning 183 Product Disposal Warning 185 Electrica...

Страница 9: ...Israel 202 Japan 203 United States 203 SRX550 Services Gateway Compliance Statements for NEBS 203 Lithium Battery 204 ix...

Страница 10: ...product documentation page on the Juniper Networks website at https www juniper net documentation If the information in the latest release notes differs from the information in the documentation foll...

Страница 11: ...1 From the HTML or PDF version of the manual copy a configuration example into a text file save the file with a name and copy the file to a directory on your routing platform For example copy the foll...

Страница 12: ...platform commit file ex script snippet xsl 2 Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode command edit user host edit system scripts edit...

Страница 13: ...text and syntax conventions used in this guide Table 2 Text and Syntax Conventions Examples Description Convention To enter configuration mode type the configure command user host configure Represent...

Страница 14: ...default metric metric Encloses optional keywords or variables angle brackets broadcast multicast string1 string2 string3 Indicates a choice between the mutually exclusive keywords or variables on eit...

Страница 15: ...tem Click TechLibrary Feedback on the lower right of any page on the Juniper Networks TechLibrary site and do one of the following Click the thumbs up icon if the information on the page was helpful t...

Страница 16: ...niper net Find product documentation https www juniper net documentation Find solutions and answer questions using our Knowledge Base https kb juniper net Download the latest versions of software and...

Страница 17: ...1 PART Overview System Overview 2 Hardware Component Overview 12 Chassis Description 14 Interface Module Description 24 Cooling System Description 27 Power System Description 28...

Страница 18: ...550 Services Gateway is a mid range dynamic services gateway that consolidates network infrastructure and security applications for regional offices large branch offices and small to medium enterprise...

Страница 19: ...ports Four on board SFP Gigabit Ethernet ports Support for dual AC or dual DC power supplies with a redundant configuration in the chassis 645 W AC and DC power supplies with or without Power over Eth...

Страница 20: ...hassis 14 Physical Interface Modules SRX550 Services Gateway Software Features and Licenses The services gateway provides the software features listed in Table 3 on page 5 NOTE Some software features...

Страница 21: ...extensions BGP extensions Static routes NOTE CLNS is available only in packet based mode MPLS Layer 2 and Layer 3 virtual private networks VPNs VPN routing and forwarding VRF table labels Traffic eng...

Страница 22: ...E Circuit cross connect CCC Translational cross connect TCC Encapsulation Synchronous Point to Point Protocol PPP Frame Relay High Level Data Link Control HDLC 802 1Q filtering and forwarding Multilin...

Страница 23: ...sed on file types and types of files within HTTP and HTTPS Unified threat management UTM Network attack detection Denial of service DoS and distributed denial of service DDoS protection Generic routin...

Страница 24: ...For services gateway configuration and management through the console through Telnet or SSH Simple Network Management Protocol version 1 SNMPv1 SNMPv2 and SNMPv3 Network and Security Manager NSM J Fl...

Страница 25: ...TION SRX550 Services Gateway Description 2 SRX550 Services Gateway Hardware Features 3 SRX550 Services Gateway Power over Ethernet Power over Ethernet PoE supports the implementation of the IEEE802 3...

Страница 26: ...slots 3 4 6 8 For more information see SRX550 Services Gateway Front Panel on page 15 Supported slots The 645 W AC and 645 W DC power supplies support the following capacities 255 W PoE on a single p...

Страница 27: ...to operate a services gateway without commands The J Web interface provides access to all Junos OS functionality and features Junos OS command line interface CLI Juniper Networks command shell that r...

Страница 28: ...ere is file system corruption and facilitate easy recovery of the corrupted file system The dual root partitioning scheme keeps the primary and backup Junos OS images in two independently bootable roo...

Страница 29: ...TED DOCUMENTATION Installation Overview for the SRX550 Services Gateway 60 Required Tools and Parts for Installing the SRX550 Services Gateway 61 SRX550 Services Gateway Basic Connectivity Overview 95...

Страница 30: ...the physical specifications for the services gateway Table 5 Physical Specifications for the SRX550 Services Gateway Value Physical Specification 2 rack units U Chassis height 17 5 in 44 4 cm Chassis...

Страница 31: ...eway 77 General Electrical Safety Guidelines and Warnings SRX550 Services Gateway Front Panel Figure 2 on page 15 shows the front panel of the SRX550 Services Gateway Figure 2 SRX550 Services Gateway...

Страница 32: ...of the front chassis panel AUX Port 4 Both slots support Mini PIMs Left side of the front chassis panel 2 Mini PIM slots numbered 1 and 2 5 All slots support GPIMs Slot 3 supports 10 gigabit XPIMs Slo...

Страница 33: ...s panel USB 0 and USB 1 ports 9 Use the Power button to shut down the services gateway On a services gateway that has been previously shut down using the Power button when the power button is pressed...

Страница 34: ...de of the front chassis panel lower edge 6 fixed Gigabit Ethernet ports Port labeled 0 0 Port labeled 0 1 Port labeled 0 2 Port labeled 0 3 Port labeled 0 4 Port labeled 0 5 Provides link speeds of 10...

Страница 35: ...ELATED DOCUMENTATION SRX550 Services Gateway Front Panel LEDs 19 SRX550 Services Gateway Chassis 14 SRX550 Services Gateway Back Panel 22 SRX550 Services Gateway Front Panel LEDs Figure 4 on page 19 s...

Страница 36: ...the system is up and running if the ALARM LED is off it indicates that no alarms are active on the device Unlit Off The services gateway is functioning normally Green On Steadily STATUS The services...

Страница 37: ...MPIM 2 The Mini PIM hardware in the corresponding slot has failed or its anti counterfeit check failed Red There is no Mini PIM in the corresponding slot or that the Mini PIM is not detected by the d...

Страница 38: ...Location Component Number Power supplies are hot swappable and support single or dual redundant power supply versions If you need to power off the services gateway after it finishes booting first use...

Страница 39: ...lower edge Storage slot 4 While working on the services gateway use the ESD outlet to plug in an ESD grounding strap to prevent any damage to the services gateway Connector for an ESD wrist band Right...

Страница 40: ...AN Interface Module Terminology GPIM The Gigabit Backplane Interface Module GPIM includes standard GPIMs that can be installed in a single high single wide GPIM slot that has gigabit connectivity to t...

Страница 41: ...Modules and Compatibility For details about the supported GPIMs and XPIMs see the SRX Series Services Gateways for the Branch Physical Interface Modules Hardware Guide Figure 7 on page 25 Figure 8 on...

Страница 42: ...s a network interface card that is installed in the services gateway to provide physical connections to a LAN or WAN The Mini PIMs supported on the services gateway are field replaceable units FRUs wh...

Страница 43: ...device Under normal operating conditions the fans function at lower than full speed If any one of the four fans fails the services gateway generates a warning but keeps the system running If the temp...

Страница 44: ...plies either both AC or both DC will load share and provide power redundancy to the services gateway increasing its availability and reliability If one power supply fails or is removed the other power...

Страница 45: ...Figure 11 DC Power Supply The power supplies provide different output wattage to the services gateway components according to the voltage requirements of the components The power supply components ar...

Страница 46: ...10 W PoE using the two power supply option operating as nonredundant NOTE Using the two power supply options operating as nonredundant for up to 510 W PoE the administrator has the ability to prioriti...

Страница 47: ...d B B Feed B 48VDC connection for Feed B B RELATED DOCUMENTATION SRX550 Services Gateway Chassis 14 SRX550 Services Gateway Front Panel 15 SRX550 Services Gateway Back Panel 22 SRX550 Services Gateway...

Страница 48: ...2 PART Site Planning and Specifications Planning and Preparing the Site 33 Rack Requirements 38 Cabinet Requirements 47 Power Requirements and Specifications 49 Cable Specifications and Pinouts 56...

Страница 49: ...SRX550 Services Gateway Table 11 Site Preparation Checklist for SRX550 Services Gateway Installation Notes Date Performed By Additional Information Item or Task Power SRX550 Services Gateway Electrica...

Страница 50: ...ervices Gateway Spacing of Mounting Bracket and Flange Holes on page 44 Plan rack location including required space clearances Connecting the SRX550 Services Gateway to the Building Structure on page...

Страница 51: ...ng precautions help you plan an acceptable operating environment for your SRX550 Services Gateway and avoid environmentally caused equipment failures For the cooling system to function properly the ai...

Страница 52: ...ications Table 12 on page 36 provides the required environmental conditions for normal SRX550 Services Gateway operations In addition the site must be as dust free as possible because dust can clog ai...

Страница 53: ...ese specifications are estimates and subject to change Maximum thermal output NOTE Install the services gateway only in restricted areas such as dedicated equipment rooms and equipment closets in acco...

Страница 54: ...Spacing of Mounting Bracket and Flange Holes 44 Clearance Requirements for Airflow and Hardware Maintenance of the SRX550 Services Gateway 45 Rack Mounting Requirements and Warnings Ensure that the e...

Страница 55: ...39...

Страница 56: ...keren De Juniper Networks services gateway moet in een stellage worden ge nstalleerd die aan een bouwsel is verankerd Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel het eni...

Страница 57: ...ten dieser Einheit in einem Gestell m ssen Sie besondere Vorkehrungen treffen um sicherzustellen da das System stabil bleibt Die folgenden Richtlinien sollen zur Gew hrleistung Ihrer Sicherheit dienen...

Страница 58: ...ylt skal kabinettet lastes fra bunnen og opp med den tyngste komponenten nederst i kabinettet Hvis kabinettet er utstyrt med stabiliseringsutstyr skal stabilisatorene installeres f r montering eller u...

Страница 59: ...ices gateway m ste installeras i en st llning som r f rankrad i byggnadens struktur Om denna enhet r den enda enheten p st llningen skall den installeras l ngst ned p st llningen Om denna enhet instal...

Страница 60: ...e mounting brackets and flange holes on the rack and device mounting brackets are as follows The holes within each rack set are spaced at 2U 3 5 in or 8 89 cm The services gateway can be mounted in an...

Страница 61: ...shows the direction of airflow through the chassis Figure 12 Airflow Through the Chassis For service personnel to remove and install hardware components there must be adequate space at the front and...

Страница 62: ...front mounting flange and rack or cabinet edge Space for the cooling system to function properly and to maintain unrestricted airflow around the chassis 6 0 in 15 24 cm Between both sides of the chas...

Страница 63: ...holes in the mounting brackets chassis are spaced 1 25 in 3 2 cm apart measured from the center of the hole When selecting a cabinet ensure that the physical characteristics of the cabinet comply wit...

Страница 64: ...ply you provide through the cabinet can adequately dissipate the thermal output of the services gateway Install the services gateway as close as possible to the front of the cabinet so that the cable...

Страница 65: ...able Specifications 53 SRX550 Services Gateway DC Power Supply Electrical Specifications 54 SRX550 Services Gateway Power Requirements 54 SRX550 Services Gateway Electrical Wiring Guidelines Table 14...

Страница 66: ...electrical surge suppression devices Strong sources of electromagnetic interference EMI can cause the following damage Destroy the signal drivers and receivers in the device Conduct power surges over...

Страница 67: ...tely 14 75 ft in length to comply with National Electrical code NEC Section 400 8 NFPA 75 5 2 2 and 210 52 and Canadian Electrical Code CEC Section 4 010 3 Table 15 on page 51 provides power cord spec...

Страница 68: ...w and Hardware Maintenance of the SRX550 Services Gateway 45 SRX550 Services Gateway Electrical Wiring Guidelines 49 Site Preparation Checklist for the SRX550 Services Gateway 33 SRX550 Services Gatew...

Страница 69: ...roper polarity The power source cables might be labeled and to indicate their polarity There is no standard color coding for DC power cables The color coding used by the external DC power source at yo...

Страница 70: ...rating range 40 to 72 VDC DC input voltage 16 A at 48 VDC DC system current rating RELATED DOCUMENTATION SRX550 Services Gateway Power Supply 28 Clearance Requirements for Airflow and Hardware Mainten...

Страница 71: ...s gateway RELATED DOCUMENTATION SRX550 Services Gateway Power Supply 28 Clearance Requirements for Airflow and Hardware Maintenance of the SRX550 Services Gateway 45 Site Preparation Checklist for the...

Страница 72: ...age 56 lists the specifications for the cables that connect to ports on the services gateway Table 19 Cable and Wire Specifications for Ports and Alarm Interfaces Device Receptacle Maximum Length Cabl...

Страница 73: ...et cable for connecting the services gateway to a management LAN or other device that supports out of band management Table 20 on page 57 describes the RJ 45 connector pinouts for the Ethernet port Ta...

Страница 74: ...page 58 describes the RJ 45 connector pinouts for the console port Table 21 RJ 45 Connector Pinouts for the Services Gateway Console Port Description Signal Pin Request to Send RTS 1 Data Terminal Re...

Страница 75: ...he Services Gateway 64 Installing the Mounting Hardware 67 Installing the Services Gateway 69 Grounding the SRX550 Services Gateway 76 Connecting the SRX550 Services Gateway to External Devices 79 Pro...

Страница 76: ...stallation process in the following order 1 Review the safety guidelines explained in General Electrical Safety Guidelines and Warnings 2 Prepare the services gateway for installation as described in...

Страница 77: ...ls and Parts for Installing the SRX550 Services Gateway To install the services gateway you need the following tools and parts Phillips screwdriver number 2 Tie wrap Electrostatic discharge ESD ground...

Страница 78: ...el Les installasjonsinstruksjonene f r systemet kobles til str mkilden Aviso Leia as instru es de instala o antes de ligar o sistema sua fonte de energia Atenci n Ver las instrucciones de instalaci n...

Страница 79: ...configuration server in the network and have a service available typically Dynamic Host Configuration Protocol DHCP to assign an IP address to the services gateway Autoinstallation begins automatical...

Страница 80: ...ipped in a cardboard carton and secured with foam packing material The carton also contains an accessory box and quick start instructions NOTE The services gateway is maximally protected inside the ca...

Страница 81: ...s missing contact your customer service representative or contact Juniper customer care from within the U S or Canada by telephone at 1 888 314 5822 For international dial or direct dial options in co...

Страница 82: ...priate for your geographical location Two power supplies must be installed in the services gateway for redundancy A second power supply and additional power supplies are separately orderable and do no...

Страница 83: ...ollowing parts available in your rack mounting kit for the SRX550 Services Gateway Rack mounting brackets Eight mounting screws to attach the mounting brackets to the chassis of the services gateway F...

Страница 84: ...f your geographical area is subject to earthquakes bolt the rack to the floor For maximum stability also secure the rack to ceiling brackets RELATED DOCUMENTATION General Site Installation Guidelines...

Страница 85: ...of racks are acceptable including four post telco racks enclosed cabinets and open frame racks NOTE If you are installing multiple devices in one rack install the lowest one first and proceed upward...

Страница 86: ...e sides of the services gateway lift it and position it in the rack 4 Align the bottom hole in each mounting bracket with a hole in each rack rail making sure the chassis is level 5 Have a second pers...

Страница 87: ...n one side of the rack are aligned with the mounting screws on the opposite side and that the services gateway is level RELATED DOCUMENTATION Installation Overview for the SRX550 Services Gateway 60 S...

Страница 88: ...ith any adjacent power supply faceplate see Figure 17 on page 72 3 Attach the power cord to the power supply 4 Route the power cord along the cable restraint toward the left or right corner of the cha...

Страница 89: ...our bare wrist and connect the strap to one of the ESD points on the chassis For more information about ESD see Preventing Electrostatic Discharge Damage to the SRX550 Services Gateway 3 Orient the po...

Страница 90: ...cables might be labeled and to indicate their polarity There is no standard color coding for DC power cables The color coding used by the external DC power source at your site determines the color cod...

Страница 91: ...people could trip on them 11 Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit and switch the circuit breaker to the on position Observe th...

Страница 92: ...lectrician must attach a cable lug to the grounding and power cables that you supply A cable with an incorrectly attached lug can damage the services gateway for example by causing a short circuit To...

Страница 93: ...ple Panduit LCC6 10A L CAUTION Before services gateway installation begins a licensed electrician must attach a cable lug to the grounding and power cables that you supply A cable with an incorrectly...

Страница 94: ...verify that it does not touch or block access to the services gateway components and that it does not drape where people could trip on it RELATED DOCUMENTATION Preventing Electrostatic Discharge Damag...

Страница 95: ...ay End 85 Organizing Interface Cables on the SRX550 Services Gateway Arrange network cables as follows to prevent them from dislodging or developing stress points Secure cables so that they are not su...

Страница 96: ...RJ 45 to DB 9 serial port adapter NOTE Most modems have an RS 232 DB 25 connector You must separately purchase an adapter to connect your modem to the RJ 45 to DB 9 adapter and Ethernet cable 5 Connec...

Страница 97: ...Services Gateway from the CLI with the USB Console Port You can connect your management station to the USB console port on the services gateway and use the CLI to configure the services gateway as sh...

Страница 98: ...ware will fail to install In such a case it is recommended that you uninstall the USB console driver and then reinstall it e Click OK when the installation is complete 3 Plug the large end of the USB...

Страница 99: ...required at initial connection but you must assign a root password before committing any configuration settings RELATED DOCUMENTATION Connecting to the SRX550 Services Gateway from the J Web Interface...

Страница 100: ...connected to the console port on the services gateway type ATDT remote modem number For example if the phone number of the modem connected to the console port on the services gateway is 0019785551234...

Страница 101: ...teway end 1 Connect the modem to the management device a desktop or laptop computer 2 Power on the modem 3 From the management device start your asynchronous terminal emulation application such as Mic...

Страница 102: ...gnals type AT D1 8 To disable flow control type AT K0 9 To save modem settings type AT W RELATED DOCUMENTATION Connecting to the SRX550 Services Gateway from the CLI Remotely 104 Connecting the Modem...

Страница 103: ...h PoE support ships with the SRX550 Services Gateway You connect AC power to the services gateway by attaching the power cord from the AC power source to the AC appliance inlet located on the power su...

Страница 104: ...fy that the power cord does not block the air exhaust and access to services gateway components or drape where people could trip on it NOTE The services gateway must be connected to earth ground durin...

Страница 105: ...ing an AC Power Cord on the SRX550 Services Gateway 3 Insert the power cord plug into an external AC power source receptacle 4 Route the power cord along the cable restraint toward the left or right c...

Страница 106: ...are labeled B and B You do not need to use both feeds if you only have one DC power source or if you do not want to use feed redundancy you can connect just one feed To connect the DC source power ca...

Страница 107: ...power cables that attach to the terminals on the power supply 5 Connect DC power cables to the A and A terminals a Remove the screws and square washers from the A and A terminals Use a Phillips screw...

Страница 108: ...bles are connected correctly that they are not touching or blocking access to services gateway components and that they do not drape where people could trip on them NOTE The services gateway must be c...

Страница 109: ...r cables to the B and B terminals and the other ends to an external DC power source CAUTION You must ensure that power connections maintain the proper polarity The power source cables might be labeled...

Страница 110: ...nds before turning it off If the system is completely powered off when you turn on the power supply the services gateway starts as the power supply completes its startup sequence If the services gatew...

Страница 111: ...r the SRX550 Services Gateway 115 Built In Ethernet Ports for the SRX550 Services Gateway 116 Management Access for the SRX550 Services Gateway 119 SRX550 Services Gateway Basic Connectivity Overview...

Страница 112: ...port Ethernet cable If you are performing the initial configuration with the J Web setup wizard gather the following equipment Management device such as a desktop or laptop computer with a serial port...

Страница 113: ...unctuation marks numbers and other special characters Control characters are not recommended For more information see the Configuration Guides for Junos OS Public Sector Certifications Initially the r...

Страница 114: ...P to provide accurate timestamps for system log messages For more information see the Configuration Guides for Junos OS Public Sector Certifications You define the time zone for the location where you...

Страница 115: ...terface ge 0 0 1 on the services gateway see Figure 25 on page 99 Figure 25 Connecting to the Ethernet Port on the SRX550 Services Gateway g034115 1 From the management device such as a desktop or lap...

Страница 116: ...the Password field 10 Press Enter The J Web setup wizard appears NOTE The upper left area of the wizard page shows where you are in the setup process Click a field in the wizard page to display inform...

Страница 117: ...ed The services gateway uses the SSL protocol to provide secure management of services gateways through the J Web interface SSL uses public private key technology which requires a paired private key a...

Страница 118: ...n Editor 110 Connecting to the SRX550 Services Gateway from the CLI Locally To use the CLI to configure the SRX550 Services Gateway you must connect through the console port as shown in Figure 27 on p...

Страница 119: ...on page 102 5 Connect the other end of the Ethernet cable to the console port on the services gateway see Figure 27 on page 102 6 Turn on the power to the management device 7 Start your asynchronous...

Страница 120: ...ateway to the CLI from a remote location through two dial up modems A modem that is connected to the console port on the services gateway A second modem that is connected to a remote management device...

Страница 121: ...x220h poe factory conf srx110b va defaults conf srx220h2 defaults conf srx110b va factory conf srx220h2 factory conf srx110b vb defaults conf srx220h2 poe defaults conf srx110b vb factory conf srx220h...

Страница 122: ...g file name The following sample output displays the factory default configuration on an SRX550 Services Gateway Id Copyright c 2009 2011 Juniper Networks Inc All rights reserved system autoinstallati...

Страница 123: ...interface vlan 0 xnm clear text name server 208 67 222 222 208 67 220 220 syslog archive size 100k files 3 interfaces ge 0 0 0 unit 0 ge 0 0 1 unit 0 family ethernet switching vlan members vlan trust...

Страница 124: ...s vlan trust ge 0 0 4 unit 0 family ethernet switching vlan members vlan trust ge 0 0 5 unit 0 family ethernet switching vlan members vlan trust vlan unit 0 family inet address 192 168 1 1 24 security...

Страница 125: ...200 source threshold 1024 destination threshold 2048 timeout 20 land zones security zone trust host inbound traffic system services all protocols all interfaces vlan 0 security zone untrust interface...

Страница 126: ...interface vlan 0 protocols stp RELATED DOCUMENTATION SRX550 Services Gateway Basic Connectivity Overview 95 SRX550 Services Gateway Autoinstallation Overview 62 Configuring Basic Settings for the SRX5...

Страница 127: ...CLI as the configuration editor Table 32 on page 111 summarizes the configuration tasks for the initial setup for both required and optional settings Table 32 Configuring Basic Settings Using the CLI...

Страница 128: ...unrestricted access to the services gateway NOTE For readability the entire key is not shown Set the default gateway IP address and the next hop router address For example set interfaces ge 0 0 1 unit...

Страница 129: ...e click Add Edit or Delete to configure VLANs Optional Configure interface groups VLANs Specify an interface other than a VLAN interface For example set interfaces ge 0 0 2 unit 0 family inet address...

Страница 130: ...w the configuration on the Review Commit page Click Commit to save the configuration or click Back to make changes Required Commit the configuration NOTE After basic setup is configured the J Web setu...

Страница 131: ...ivity settings select Configure System Properties System Identity Alternatively from configuration mode in the CLI enter the show command Review the following sample output Your output displays the va...

Страница 132: ...110 Built In Ethernet Ports for the SRX550 Services Gateway You perform initial device setup through the six built in Gigabit Ethernet ports labeled 0 0 through 0 5 interfaces ge 0 0 0 through ge 0 0...

Страница 133: ...ally assigned Client Untrust RJ 45 ge 0 0 0 NOTE If chassis clustering is enabled use this port as the management port fxp0 0 0 Ports 0 1 through 0 5 are grouped into a VLAN with IP address 192 168 1...

Страница 134: ...Permit Untrust Trust Table 35 NAT Rule NAT Action Destination Zone Source Zone Source NAT to untrust zone interface Untrust Trust For example a common default firewall configuration includes the follo...

Страница 135: ...must manually configure the IP address for the management port that you are using before you save your initial configuration When you save the configuration for the first time you will lose the connec...

Страница 136: ...ccess For information about obtaining SSH software see http www ssh com and http www openssh com If you are using a Junos XML protocol server to configure and monitor devices you can activate cleartex...

Страница 137: ...4 PART Maintaining and Troubleshooting Components Maintaining Components 122 Troubleshooting Components 125...

Страница 138: ...taining the SRX550 Services Gateway Hardware Components The following tools and parts are required to maintain the hardware components of the services gateway Electrostatic bag or antistatic mat Elect...

Страница 139: ...SRX550 Services Gateway Cooling System Components The services gateway fan controller works to maintain an optimal temperature for the services gateway If the fan controller fails the services gateway...

Страница 140: ...cables connected to the services gateway are securely in place and that there is no moisture accumulating near the services gateway RELATED DOCUMENTATION Required Tools and Parts for Maintaining the...

Страница 141: ...d line interface CLI is the primary tool for controlling and troubleshooting services gateway hardware the Junos OS routing protocols and network connectivity The CLI commands display information from...

Страница 142: ...it indicates that no alarms are present on the device Left side of the front chassis panel ALARM The STATUS LED has the following indicator colors Green and steadily on indicates that the services ga...

Страница 143: ...t functional Left side of the front chassis panel ACE Green and steadily on indicates that the redundant power supply is operating normally Red and steadily on indicates that one of the following cond...

Страница 144: ...dition it lights the red or yellow alarm LED on the front panel as appropriate For a detailed description of the alarm condition issue the show chassis alarms CLI command There are two classes of alar...

Страница 145: ...vices Gateway Chassis Components Alarm Severity Action Alarm Conditions Component Yellow minor If the internal flash fails at startup the services gateway automatically boots itself from the alternati...

Страница 146: ...Center on page 138 The services gateway chassis temperature is too high Hardware components on the services gateway Red major Place your hand near the exhaust vents at the rear of the chassis to dete...

Страница 147: ...eiving power and all AC and or DC power supply units PSUs are working properly On Green If you cannot determine the cause of the problem or need additional assistance while troubleshooting a services...

Страница 148: ...er socket you are plugged into is in working condition Connect the power supply to a different power source with a new power cord or power cables If the power supply status LEDs indicate that the powe...

Страница 149: ...rance Green DC OK AC One or more of the DC output voltages produced by the power supply are outside of tolerance Red The power supply is not receiving input power Unlit Normal indication No action is...

Страница 150: ...power provided to the power supply is outside of tolerance Amber The power supply is not receiving input power Unlit RELATED DOCUMENTATION SRX550 Services Gateway Front Panel 15 Troubleshooting with...

Страница 151: ...pressing and holding the RESET CONFIG button for 15 seconds or more until the STATUS LED blinks red deletes all configurations on the services gateway including the backup configurations and rescue co...

Страница 152: ...actory defaults user host set chassis config button no rescue To disable the button and prevent the services gateway from resetting to either configuration enter the following command user host set ch...

Страница 153: ...holding the RESET CONFIG button for 15 seconds or more until the STATUS LED blinks red deletes all configurations on the services gateway including the backup configurations and rescue configuration a...

Страница 154: ...e using the Case Manager link at https www juniper net support or call 1 888 314 JTAC within the United States or 1 408 745 9500 outside the United States RELATED DOCUMENTATION Return Procedure for th...

Страница 155: ...5 PART Replacing Components Overview of Replacing Components 140 Replacing Power System Components 142 Contacting Customer Support and Returning Components 152...

Страница 156: ...ble 40 on page 140 Table 40 Tools and Parts Required for Replacing Services Gateway Hardware Components Components Tool or Part Cables and connectors 3 8 in nut driver or pliers Power supply Mini PIMs...

Страница 157: ...Mini PIM or a GPIM see Physical Interface Modules RELATED DOCUMENTATION Replacing the AC Power Supply on the SRX550 Services Gateway 142 Replacing a DC Power Supply on the SRX550 Services Gateway 146...

Страница 158: ...g and prevent thermal shutdown of the operating power supply unit each power supply slot must contain either a power supply or a blank panel If you remove a power supply you must install a replacement...

Страница 159: ...it at least 60 seconds before turning it back on To remove an AC power supply 1 Switch off the dedicated facility circuit breaker for the power supply and remove the power cord from the AC power sourc...

Страница 160: ...s fully seated in the chassis slot The power supply faceplate should be flush with any adjacent power supply faceplate see Figure 17 on page 72 3 Attach the power cord to the power supply 4 Route the...

Страница 161: ...ect the AC power cord 1 Locate a replacement power cord with the type of plug appropriate for your geographical location 2 Connect the power cord to the power supply as shown in Figure 23 on page 89 F...

Страница 162: ...supply on the SRX550 Services Gateway after disconnecting the power cord and removing the power supply already installed However redundant DC power supplies are hot swappble You need not power off th...

Страница 163: ...emoval process 3 Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis For more information about ESD see Preventing Electrostatic Discharge Da...

Страница 164: ...wer is off locate the circuit breaker on the panel board that services the DC circuit switch the circuit breaker to off position O and tape the switch handle of the circuit breaker in the off position...

Страница 165: ...a multimeter to verify the resistance of the 48V and RTN DC cables to chassis ground The cable with very large resistance indicating an open circuit to chassis ground will be 48V The cable with very l...

Страница 166: ...er cables are connected correctly that they are not touching or blocking access to services gateway components and that they do not drape where people could trip on them 11 Remove the tape from the sw...

Страница 167: ...RELATED DOCUMENTATION Preventing Electrostatic Discharge Damage to the SRX550 Services Gateway Required Tools and Parts for Replacing Hardware Components on the SRX550 Services Gateway 140 151...

Страница 168: ...Parts for Packing the SRX550 Services Gateway 156 Packing the SRX550 Services Gateway for Shipment 157 Packing SRX550 Services Gateway Components for Shipment 158 Contacting Customer Support Once you...

Страница 169: ...s for repair or replacement 1 Determine the part number and serial number of the services gateway or component 2 Obtain a Return Materials Authorization RMA number from JTAC NOTE Do not return the ser...

Страница 170: ...e SRX550 Services Gateway 153 Listing the SRX550 Services Gateway Component Serial Numbers with the CLI 155 Information You Might Need to Supply to JTAC 156 Contacting Customer Support 152 Locating th...

Страница 171: ...erface CLI command user host show chassis hardware Hardware inventory Item Version Part number Serial number Description Chassis AL1011AA0001 SRX550 Midplane REV 02 750 035027 AADB5078 Routing Engine...

Страница 172: ...n name telephone number fax number and shipping address RELATED DOCUMENTATION Return Procedure for the SRX550 Services Gateway 153 Listing the SRX550 Services Gateway Component Serial Numbers with the...

Страница 173: ...e ESD grounding strap to your bare wrist and connect the strap to the ESD point on the chassis or to an outside ESD point if the device is disconnected from earth ground For more information about ESD...

Страница 174: ...50 Services Gateway 153 Packing SRX550 Services Gateway Components for Shipment 158 Required Tools and Parts for Packing the SRX550 Services Gateway 156 Packing SRX550 Services Gateway Components for...

Страница 175: ...RELATED DOCUMENTATION Return Procedure for the SRX550 Services Gateway 153 Packing the SRX550 Services Gateway for Shipment 157 Required Tools and Parts for Packing the SRX550 Services Gateway 156 159...

Страница 176: ...s 161 Fire Safety Requirements 171 Laser and LED Safety Guidelines and Warnings 173 Maintenance and Operational Safety Guidelines and Warnings 178 Electrical Safety Guidelines and Warnings 186 Agency...

Страница 177: ...ats NOTE You might find this information helpful in a particular situation or you might overlook this important information if it was not highlighted in a Note CAUTION You need to observe the specifie...

Страница 178: ...162...

Страница 179: ...ie befinden sich in einer Situation die zu einer K rperverletzung f hren k nnte Bevor Sie mit der Arbeit an irgendeinem Ger t beginnen seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefa...

Страница 180: ...u are working under any conditions that could be hazardous to your eyes Do not perform any actions that create a potential hazard to people or make the equipment unsafe Never attempt to lift an object...

Страница 181: ...unit handles SFB card handles and fan tray handles might become hot The following label provides the warning of the hot surfaces on the chassis Always ensure that all modules power supplies and cover...

Страница 182: ...Restricted Access Warning 166...

Страница 183: ...al un m canisme de verrouillage et une cl ou tout autre moyen de s curit L acc s aux zones de s curit est sous le contr le de l autorit responsable de l emplacement Warnung Diese Einheit ist zur Insta...

Страница 184: ...nstallatie en reparaties mogen uitsluitend door getraind en bevoegd personeel uitgevoerd worden Varoitus Ainoastaan koulutettu ja p tev henkil kunta saa asentaa tai vaihtaa t m n laitteen Avertissemen...

Страница 185: ...nserting the component into the device WARNING For safety periodically check the resistance value of the ESD grounding strap The measurement must be in the range 1 through 10 Mohms Avertissement Par m...

Страница 186: ...Category 5e and Category 6 can get electrostatically charged To dissipate this charge always ground the cables to a suitable and safe earth ground before connecting them to the system Attention Les c...

Страница 187: ...install and operate your equipment Fire Suppression In the event of an electrical hazard or an electrical fire you should first turn power off to the equipment at the source Then use a Type C fire ext...

Страница 188: ...mature failure and unreliable operation The equipment is considered to be irreparably damaged NOTE To keep warranties effective do not use a dry chemical fire extinguisher to control a fire at or near...

Страница 189: ...re equipped with laser transmitters which are considered a Class 1 Laser Product by the U S Food and Drug Administration and are evaluated as a Class 1 Laser Product per EN 60825 1 requirements Observ...

Страница 190: ...il humain faisant converger toute la puissance du laser sur la r tine toute focalisation directe de l il sur une source laser m me de faible puissance peut entra ner des l sions oculaires irr versible...

Страница 191: ...Luokan 1 valodiodituote Avertissement Alarme de produit LED Class I Warnung Class 1 LED Produktwarnung Avvertenza Avvertenza prodotto LED di Classe 1 Advarsel LED produkt i klasse 1 Aviso Produto de c...

Страница 192: ...nstruments optiques Warnung Nicht direkt in den Strahl blicken und ihn nicht direkt mit optischen Ger ten pr fen Avvertenza Non fissare il raggio con gli occhi n usare strumenti ottici per osservarlo...

Страница 193: ...t Vermeiden Sie es sich den Strahlungen auszusetzen und starren Sie nicht in die ffnungen Avvertenza Quando i cavi in fibra non sono inseriti radiazioni invisibili possono essere emesse attraverso l a...

Страница 194: ...ings 178 Maintenance and Operational Safety Guidelines and Warnings IN THIS SECTION Battery Handling Warning 179 Jewelry Removal Warning 180 Lightning Activity Warning 182 Operating Temperature Warnin...

Страница 195: ...leichen oder vom Hersteller empfohlenen Batterietyp Entsorgen Sie die benutzten Batterien nach den Anweisungen des Herstellers Advarsel Det kan v re fare for eksplosjon hvis batteriet skiftes p feil m...

Страница 196: ...Jewelry Removal Warning 180...

Страница 197: ...or der Arbeit an Ger ten die an das Netz angeschlossen sind jeglichen Schmuck einschlie lich Ringe Ketten und Uhren abnehmen Metallgegenst nde erhitzen sich wenn sie an das Netz und die Erde angeschlo...

Страница 198: ...te sluiten of te ontkoppelen Varoitus l ty skentele j rjestelm n parissa l k yhdist tai irrota kaapeleita ukkosilmalla Avertissement Ne pas travailler sur le syst me ni brancher ou d brancher les c bl...

Страница 199: ...Operating Temperature Warning 183...

Страница 200: ...in einer Gegend betrieben werden in der die Umgebungstemperatur das empfohlene Maximum von 40 C berschreitet Um L ftungsverschlu zu verhindern achten Sie darauf da mindestens 15 2 cm lichter Raum um d...

Страница 201: ...ia lakeja ja s nn ksi noudattaen Avertissement La mise au rebut d finitive de ce produit doit tre effectu e conform ment toutes les lois et r glementations en vigueur Warnung Dieses Produkt mu den gel...

Страница 202: ...the device 3 If possible send another person to get medical aid Otherwise assess the condition of the victim then call for help General Electrical Safety Guidelines and Warnings Install the services g...

Страница 203: ...Safety Guidelines AC Power Electrical Safety Guidelines The following electrical safety guidelines apply to AC powered devices Note the following warnings printed on the device CAUTION THIS UNIT HAS M...

Страница 204: ...rds one for each power supply Power Cable Warning Japanese WARNING The attached power cable is only for this product Do not use the cable for another product DC Power Electrical Safety Guidelines and...

Страница 205: ...A A DC powered services gateway that is equipped with a DC terminal block is intended only for installation in a restricted access location In the United States a restricted access area is one in acco...

Страница 206: ...190...

Страница 207: ...ur en tre s r localiser le disjoncteur situ sur le panneau de service du circuit en courant continu placer le disjoncteur en position ferm e OFF et l aide d un ruban adh sif bloquer la poign e du disj...

Страница 208: ...y sujetar con cinta la palanca del interruptor autom tico en posici n de Apagado OFF Varning Innan du utf r n gon av f ljande procedurer m ste du kontrollera att str mf rs rjningen till likstr mskrets...

Страница 209: ...connect e en dernier Warnung Der Erdanschlu mu bei der Installation der Einheit immer zuerst hergestellt und zuletzt abgetrennt werden Avvertenza In fase di installazione dell unit eseguire sempre per...

Страница 210: ...194...

Страница 211: ...ue le fil de masse devrait toujours tre reli d abord et d branch pour la derni re fois Warnung Die Stromzufuhr ist nur mit geeigneten Ring sen an das DC Netzteil anzuschliessen Die richtige Anschlusss...

Страница 212: ...da da fia o mo da para moer RTN a RTN ent o 48 V a 48 V Ao desconectar a pot ncia a seq ncia apropriada da fia o 48 V a 48 V RTN a RTN moeu ent o para moer Anote que o fio terra deve sempre ser conect...

Страница 213: ...197...

Страница 214: ...ssene Verdrahtungsanschl sse z B Ringoesen oder gabelf rmige Kabelschuhe mit nach oben gerichteten Enden zu verwenden Diese Abschl sse sollten die angemessene Gr e f r die Dr hte haben und sowohl die...

Страница 215: ...till ledningarna och m ste kunna h lla b de isoleringen och ledaren fastkl mda RELATED DOCUMENTATION SRX550 Services Gateway General Safety Guidelines and Warnings General Electrical Safety Guideline...

Страница 216: ...es with the following standards Safety CSA 60950 1 2003 Safety of Information Technology Equipment UL 60950 1 2003 Safety of Information Technology Equipment EN 60950 1 2001 Safety of Information Tech...

Страница 217: ...ances EN 61000 4 11 2004 Voltage Dips and Sags RELATED DOCUMENTATION SRX550 Services Gateway General Safety Guidelines and Warnings SRX550 Services Gateway Acoustic Noise Compliance Statements 201 SRX...

Страница 218: ...appareil num rique de la classe A est conforme la norme NMB 003 du Canada European Community This is a Class A product In a domestic environment this product might cause radio interference in which c...

Страница 219: ...ual might cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correc...

Страница 220: ...attery Batteries in this product are not based on mercury lead or cadmium substances The batteries used in this product are in compliance with EU Directives 91 157 EEC 93 86 EEC and 98 101 EEC The pro...

Результаты поиска

Содержание SRX550

Отзывы:

Похожие инструкции для SRX550

Бренды по названию

Популярные бренды

Juniper SRX550, Руководство по оборудованию

Результаты поиска

Содержание SRX550

Отзывы:

Похожие инструкции для SRX550

Бренды по названию

Популярные бренды