IBM J56S User manual

IBM Ethernet Appliance J56S
Getting Started Guide
April 2010
Part Number:
This document describes how to install the IBM Ethernet Appliance J56S.
Contents About This Guide .............................................................................................3
Step 1: Prepare the Site ...................................................................................4
Rack-Mounting Requirements ...................................................................4
Required Tools ..........................................................................................5
Step 2: Install the Mounting Hardware ............................................................6
Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-Frame Rack ..............................................................................6
Step 3: Install the Device .................................................................................8
Install the Device Using a Lift ....................................................................8
Install the Device Without a Mechanical Lift ...........................................10
Remove Components .......................................................................11
Lift the Chassis into the Rack ............................................................11
Reinstall Components ......................................................................12
Step 4: Connect External Devices and IOC Cables .........................................13
Connect to a Network for Out-of-Band Management ...............................13
Connect a Management Console .............................................................13
Connect the IOC Cables ..........................................................................13
Step 5: Connect Ground and Power Cables ...................................................14
Connect the Grounding Cable .................................................................14
Connect Power to an AC-Powered Ethernet Appliance ............................15
Connect Power to a DC-Powered Ethernet Appliance .............................16
Step 6: Perform Initial Software Configuration ..............................................18
Safety Warnings ............................................................................................23
Compliance Statements for NEBS ..................................................................25
■1

Compliance Statements for EMC Requirements ............................................25
Canada ...................................................................................................25
European Union ......................................................................................25
Hardware and Software Documentation for IBM Ethernet Appliance
J56S ........................................................................................................26
Requesting Technical Support .......................................................................27
Revision History ............................................................................................27
2■
IBM Ethernet Appliance J56S Getting Started Guide

About This Guide
This guide contains information you need to install and configure the IBM Ethernet
Appliance J56S quickly. For complete installation instructions, see the IBM Ethernet
Appliance J56S Hardware Guide at http://www.ibm.com/systems/support/networking .
WARNING: This guide contains a summary of safety warnings in “Safety Warnings”
on page 23. For a complete list of warnings for this device, including translations,
see the IBM Ethernet Appliance J56S Hardware Guide at
http://www.ibm.com/systems/support/networking .
The IBM Ethernet Appliance J56S is a high-performance, highly-scalable, carrier-class
security device with multi-processor architecture. The Ethernet appliance has a
capacity of up to 60 gigabits per second (Gbps), full duplex. The device is 8 rack units
(U) tall. Five devices can be stacked in a single floor-to-ceiling rack, for increased
port density per unit of floor space. The device provides eight slots that can be
populated with up to six Services Processing Cards (SPCs) and I/O cards (IOCs) and
two Switch Control Boards (SCBs) in nonredundant fabric configurations.
By installing different combinations of IOCs and SPCs, you can tailor both the number
of gigabit ports and the maximum security processing capacity to suit your network.
Table 1 on page 3 describes the minimum system configuration for the IBM Ethernet
Appliance J56S.
Table 1: Minimum System Configuration for the IBM Ethernet Appliance J56S
MinimumComponent
1SPC
1IOC
1SCB
1Routing Engine
Fully populated, the device provides up to 200 Gigabit Ethernet or up to 20 10-Gigabit
Ethernet ports. Two types of IOC interface cards are available, each of which consists
of four Packet Forwarding Engines and enables a throughput of 10 Gbps. You can
install any combination of IOC types in the Ethernet appliance.
The IBM Ethernet Appliance J56S provides redundancy and resiliency. The hardware
system is fully redundant, including power supplies and SCBs.
The Ethernet appliance is shipped in a cardboard box strapped securely to a wooden
pallet. Plastic straps secure the top and bottom in place. The device chassis is bolted
to this pallet. A printed copy of this document and a cardboard accessory box are
also included in the shipping container.
About This Guide ■3
About This Guide

Step 1: Prepare the Site
Figure 1: Rack Clearance and Chassis Dimensions for the IBM Ethernet Appliance
J56S
Rack-Mounting Requirements
■You can install the device in a four-post rack or cabinet or an open-frame rack.
■The rack rails must be spaced widely enough to accommodate the device chassis's
external dimensions: 14.0 in. (35.6 cm) high, 24.5 in. (62.2 cm) deep, and
17.45 in. (44.3 cm) wide. The outer edges of the mounting brackets extend the
width to 19 in. (48.3 cm).
■The rack must be strong enough to support the weight of the fully configured
device, up to 163.5 lb (74.2 kg). If you stack five fully configured devices in one
rack, it must be capable of supporting about 818 lb (371.0 kg).
■For service personnel to service the device, there must be adequate space at the
front and back of the device. Allow at least 30 in. (76.2 cm) in front of the device
and 24 in. (61 cm) behind the device.
■The rack or cabinet must have an adequate supply of cooling air.
4■Step 1: Prepare the Site
IBM Ethernet Appliance J56S Getting Started Guide

■Ensure that the cabinet allows the chassis hot exhaust air to exit the cabinet
without recirculating into the device.
■The device must be installed into a rack that is secured to the building structure.
■The device should be mounted at the bottom of the rack if it is the only unit in
the rack.
■When mounting the device in a partially filled rack, load the rack from the bottom
to the top with the heaviest component at the bottom of the rack.
Required Tools
To unpack the Ethernet appliance and prepare for installation, you need the following
tools:
■A mechanical lift—recommended
■Phillips (+) screwdrivers, numbers 1 and 2
■2.5-mm flat-blade (–) screwdriver
■3/8-in. nut driver
■1/2-in. or 13-mm open-end or socket wrench to remove bracket bolts from the
shipping pallet
■Electrostatic discharge (ESD) wrist strap (provided)
■Antistatic mat
Step 1: Prepare the Site ■5
Step 1: Prepare the Site

Step 2: Install the Mounting Hardware
To install the mounting hardware in a four-post rack or cabinet or an open-frame
rack:
■Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame
Rack on page 6
Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack
To install the mounting shelf on the front rails of a four-post rack or cabinet, or the
rails of an open-frame rack:
1. If needed, install cage nuts in the holes specified in Table 2 on page 6.
2. On the back of each rack rail, partially insert a mounting screw into the lowest
hole specified in Table 2 on page 6.
3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of
each flange on a mounting screw.
4. Partially insert screws into the open holes in each flange of the mounting shelf
(see Figure 2 on page 7 or Figure 3 on page 8).
5. Tighten all the screws completely.
Table 2: Mounting Hole Locations
Mounting ShelfDistance Above “U”DivisionHole
X
1.14 U2.00 in. (5.1 cm)4
X
0.86 U1.51 in. (3.8 cm)3
X
0.50 U0.88 in. (2.2 cm)2
X
0.14 U0.25 in. (0.6 cm)1
6■Step 2: Install the Mounting Hardware
IBM Ethernet Appliance J56S Getting Started Guide

Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet
Step 2: Install the Mounting Hardware ■7
Step 2: Install the Mounting Hardware

Figure 3: Mounting Hardware for an Open-Frame Rack
Step 3: Install the Device
Because of the device's size and weight, we recommend you install the device using
a mechanical lift. The procedure for installing the device depends on whether you
use a mechanical lift:
■Install the Device Using a Lift on page 8
■Install the Device Without a Mechanical Lift on page 10
Install the Device Using a Lift
1. Ensure the rack is in its permanent location and is secured to the building. Ensure
that the installation site allows adequate clearance for both airflow and
maintenance. For details, see the IBM Ethernet Appliance J56S Hardware Guide.
2. Load the device onto the lift, making sure it rests securely on the lift platform
(see Figure 4 on page 9).
8■Step 3: Install the Device
IBM Ethernet Appliance J56S Getting Started Guide

Figure 4: Load the Device onto the Lift
OK
MASTER
FAN
ONLINE
OFFLINE
011
0
FAIL FAIL
PEM
FAIL
FAIL
FAIL
FAIL
FAIL
FAIL
ESD
OK
OK
OK
OK
OK OK OK
2345
ACO/LT
YELLOWALARM
REDALARM
NC NO
CNC NO
C
REO RE1 0123
SCB
SCB
g004247
3. Using the lift, position the device in front of the rack or cabinet, centering it in
front of the mounting shelf.
4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf
and position it as close as possible to the shelf.
5. Carefully slide the device onto the mounting shelf so that the bottom of the
chassis and the mounting shelf overlap by approximately two inches.
6. Slide the chassis onto the mounting shelf until the mounting brackets contact
the rack rails. The shelf ensures that the holes in the mounting brackets and the
front-mounting flanges of the chassis align with the holes in the rack rails.
7. Move the lift away from the rack.
8. Install a mounting screw into each of the open mounting holes aligned with the
rack, starting from the bottom.
9. Visually inspect the alignment of the device. If the device is installed properly in
the rack, all the mounting screws on one side of the rack should be aligned with
the mounting screws on the opposite side and the device should be level.
Step 3: Install the Device ■9
Step 3: Install the Device

Install the Device Without a Mechanical Lift
To install the device without a mechanical lift:
■Remove Components on page 11
■Lift the Chassis into the Rack on page 11
■Reinstall Components on page 12
Figure 5: Components to Remove from the Front of the Device
Figure 6: Components to Remove from the Rear of the Device
10 ■Step 3: Install the Device
IBM Ethernet Appliance J56S Getting Started Guide

Remove Components
Before lifting the device, you must remove the following components:
■Power supplies
■Switch Control Boards (SCBs)
■I/O Cards (IOCs)
■Services Processing Cards (SPCs)
■Fan tray
To remove the components from the device:
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J56S Hardware Guide.
2. Slide each component out of the chassis evenly so that it does not become stuck
or damaged.
3. Label each component as you remove it so you can reinstall it in the correct
location.
4. Immediately store each removed component in an electrostatic bag.
5. Do not stack removed components. Lay each one on a flat surface.
NOTE: For complete instructions on removing device components, see “Install the
Ethernet Appliance Without a Mechanical Lift”in the IBM Ethernet Appliance J56S
Hardware Guide.
Lift the Chassis into the Rack
Lifting the chassis and mounting it in a rack is a three person lift process. The empty
chassis weighs approximately 65 lb (29.5 kg).
1. Ensure the rack is in its permanent location and is secured to the building.
2. Position the chassis in front of the rack or cabinet, centering it in front of the
mounting shelf. Use a pallet jack if one is available.
3. With one person on each side and one person in the front, hold onto the bottom
of the chassis and carefully lift it onto the large and small (if installed) mounting
shelves.
4. Slide the chassis onto the mounting shelf until the mounting brackets contact
the rack rails. The shelf ensures that the holes in the mounting brackets and the
front-mounting flanges of the chassis align with the holes in the rack rails.
Step 3: Install the Device ■11
Step 3: Install the Device

5. To install the chassis in an open-frame rack, install a mounting screw into each
of the open mounting holes aligned with the rack, starting from the bottom.
6. Visually inspect the alignment of the chassis. If the chassis is installed properly
in the rack, all the mounting screws on one side of the rack should be aligned
with the mounting screws on the opposite side and the chassis should be level.
Figure 7: Lift the Chassis into the Rack
OK
MASTE
R
FAN
ONLIN
E
OFFLIN
E
011
0
FAILFAIL
PEM
FAIL
FAIL
FAIL
FAIL
FAIL
FAIL
ESD
OK
OK
OK
OK
OKOKOK
2345
ACO/
L
T
YELL
O
WALAR
M
REDALAR
M
NCNO
CNCNO
C
RE
ORE
1
0123
5
4
3
2
1
0
1
0
g004249
Reinstall Components
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J56S Hardware Guide.
2. Slide each component into the chassis evenly so that it does not become stuck
or damaged.
3. Tighten the captive screws or lock any levers for each component installed.
NOTE: Make sure that all empty slots are covered with blank panels before operating
the device.
12 ■Step 3: Install the Device
IBM Ethernet Appliance J56S Getting Started Guide

Step 4: Connect External Devices and IOC Cables
To connect external devices and IOC cables, perform the following procedures:
■Connect to a Network for Out-of-Band Management on page 13
■Connect a Management Console on page 13
■Connect the IOC Cables on page 13
Figure 8: Connect External Devices and IOC Cables
Connect to a Network for Out-of-Band Management
1. Turn off the power to the management device.
2. Plug one end of the RJ-45 Ethernet cable into the appropriate ETHERNET port on
the Routing Engine.
3. Plug the other end of the cable into the network device.
Connect a Management Console
1. Turn off the power to the management device.
2. Plug the RJ-45 end of the serial cable into the appropriate CONSOLE or AUX port
on the Routing Engine.
3. Plug the female DB-9 end into the device's serial port.
Connect the IOC Cables
1. Have ready a length of the type of cable used by the IOC. For cable specifications,
see the IBM Ethernet Appliance J56S Hardware Guide.
2. If the IOC cable connector port is covered by a rubber safety plug, remove the
plug.
WARNING: Class 1 laser product.
Step 4: Connect External Devices and IOC Cables ■13
Step 4: Connect External Devices and IOC Cables

WARNING: Do not look directly into a fiber-optic transceiver or into the ends of
fiber-optic cables. Fiber-optic transceivers and fiber-optic cable connected to a
transceiver emit laser light that can damage your eyes.
CAUTION: Do not leave a fiber-optic transceiver uncovered except when inserting
or removing cable. The safety cap keeps the port clean and prevents accidental
exposure to laser light.
3. Insert the cable connector into the cable connector port on the IOC faceplate.
4. Arrange the cable in the cable management system to prevent it from dislodging
or developing stress points. Secure the cable so that it is not supporting its own
weight as it hangs to the floor. Place excess cable out of the way in a neatly
coiled loop in the cable management system. Placing fasteners on the loop helps
to maintain its shape.
CAUTION: Avoid bending fiber-optic cable beyond its minimum bend radius. An arc
smaller than a few inches in diameter can damage the cable and cause problems
that are difficult to diagnose.
CAUTION: Do not let fiber-optic cable hang free from the connector. Do not allow
fastened loops of cable to dangle, which stresses the cable at the fastening point.
Step 5: Connect Ground and Power Cables
Depending on your configuration, your device uses either AC or DC power supplies.
Perform the appropriate procedures for each power supply in your device.
■Connect the Grounding Cable on page 14
■Connect Power to an AC-Powered Ethernet Appliance on page 15
■Connect Power to a DC-Powered Ethernet Appliance on page 16
Connect the Grounding Cable
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and
connect the strap to an approved site ESD grounding point. See the instructions
for your site.
2. Connect the grounding cable to a proper earth ground.
3. Verify that a licensed electrician has attached the cable lug provided with the
Ethernet appliance to the grounding cable.
4. Make sure that grounding surfaces are clean and brought to a bright finish before
grounding connections are made.
14 ■Step 5: Connect Ground and Power Cables
IBM Ethernet Appliance J56S Getting Started Guide

5. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J56S Hardware Guide.
6. Place the grounding cable lug over the grounding point. The grounding point is
sized for UNC 1/4-20 nuts.
7. Secure the grounding cable lug to the grounding point, first with the washers,
then with the screws.
8. Verify that the grounding cabling is correct, that the grounding cable does not
touch or block access to device components, and that it does not drape where
people could trip on it.
Connect Power to an AC-Powered Ethernet Appliance
WARNING: The device must be properly grounded before you connect the AC power
cords.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J56S Hardware Guide.
2. Locate the power cord or cords you will use to connect the device to AC power.
See the IBM Ethernet Appliance J56S Hardware Guide for specifications.
3. For each power supply:
a. Move the power switch on the power supply faceplate to the OFF (O) position.
b. Insert the appliance coupler end of the power cord into the appliance inlet
on the power supply.
c. Insert the power cord plug into an external AC power source receptacle.
NOTE: Each power supply must be connected to a dedicated AC power feed and a
dedicated external circuit breaker. We recommend that you use a 15 A (250 VAC)
minimum, or as permitted by local code.
d. Dress the power cord appropriately. Verify that the power cord does not
block the air exhaust and access to device components, or drape where
people could trip on it.
Step 5: Connect Ground and Power Cables ■15
Step 5: Connect Ground and Power Cables

Figure 9: Connecting AC Power to the Ethernet Appliance
4. Switch the AC switch on each power supply to the ON position (—) and observe
the status LEDs on each power supply faceplate. If an AC power supply is correctly
installed and functioning normally, the AC OK and DC OK LEDs light steadily, and
the PS FAIL LED does not light.
If any of the status LEDs indicates that the power supply is not functioning
normally, repeat the installation and cabling procedures.
Connect Power to a DC-Powered Ethernet Appliance
WARNING: The device must be properly grounded before you connect the DC power
cables.
Table 3: DC Power System Input Voltage
SpecificationItem
Operating range: –40.5 to –72 VDCDC input voltage
16 ■Step 5: Connect Ground and Power Cables
IBM Ethernet Appliance J56S Getting Started Guide

Figure 10: Connect DC Power Cables
CAUTION: You must ensure that power connections maintain the proper polarity.
The power source cables might be labeled (+) and (–)to indicate their polarity. There
is no standard color coding for DC power cables. The color coding used by the external
DC power source at your site determines the color coding for the leads on the power
cables that attach to the terminal studs on each power supply.
1. Ensure that the voltage across the DC power source cable leads is 0 V and that
there is no chance that the cable leads might become active during installation.
2. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J56S Hardware Guide.
3. For each power supply:
a. Switch the circuit breaker on the power supply faceplate to the OFF (O)
position.
b. Remove the clear plastic cover protecting the terminal studs on the faceplate.
c. Attach the positive (+) DC source power cable lug to the RTN (return)
terminal.
d. Secure the power cable lugs to the terminal studs on the power supply, first
with the split washer, then with the nut. Apply between 23 lb-in. (2.6 Nm)
and 25 lb-in. (2.8 Nm) of torque.
e. Attach the negative (–) DC source power cable lug to the –48V (input)
terminal.
Step 5: Connect Ground and Power Cables ■17
Step 5: Connect Ground and Power Cables

f. Secure the power cable lugs to the terminal studs on the power supply, first
with the split washer, then with the nut. Apply between 23 lb-in. (2.6 Nm)
and 25 lb-in. (2.8 Nm) of torque.
g. Replace the clear plastic cover over the terminal studs on the faceplate.
4. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and
connect the strap to an approved site ESD grounding point. See the instructions
for your site.
5. Connect each DC power cable to the appropriate external DC power source.
NOTE: For information about connecting to external DC power sources, see the
instructions for your site.
6. Switch on the external circuit breakers to provide voltage to the DC power source
cable leads.
7. Switch the circuit breakers on each power supply to the ON position (|). Observe
the status LEDs on each power supply faceplate. If a DC power supply is correctly
installed and functioning normally, the PWR OK, BRKR ON, and INPUT OK LEDs
light green steadily.
Step 6: Perform Initial Software Configuration
This procedure connects the device to the network but does not enable it to forward
traffic. For complete information about enabling the device to forward traffic, including
examples, see the appropriate JUNOS Software configuration guides.
To configure the software:
1. Verify that the device is powered on.
2. Log in as the root user. There is no password.
3. Start the CLI.
root# cli
root@>
4. Enter configuration mode.
configure
[edit]
root@#
5. Set the root authentication password by entering a cleartext password, an
encrypted password, or an SSH public key string (DSA or RSA).
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
18 ■Step 6: Perform Initial Software Configuration
IBM Ethernet Appliance J56S Getting Started Guide

6. Configure an administrator account on the device. When prompted, enter the
password for the administrator account.
[edit]
root@# set system login user admin class super-user authentication
plain-text-password
New password: password
Retype new password: password
7. Commit the configuration to activate it on the device.
[edit]
root@# commit
8. Log in as the administrative user you configured in step 6.
9. Configure the name of the device. If the name includes spaces, enclose the name
in quotation marks (“”).
configure
[edit]
admin@# set system host-name host-name
10. Configure the IP address and prefix length for the device’s Ethernet interface.
[edit]
admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin@# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin@# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
12. Configure the default route.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin@# set security zones security-zone trust interfaces ge-0/0/0
admin@# set security zones security-zone untrust interfaces ge-0/0/1
14. Configure basic security policies.
[edit]
admin@# set security policies from-zone trust to-zone untrust policy policy-name
match source-address any destination-address any application any
root@# set security policies from-zone trust to-zone untrust policy policy-name
then permit
15. Check the configuration for validity.
[edit]
admin@# commit check
Step 6: Perform Initial Software Configuration ■19
Step 6: Perform Initial Software Configuration

configuration check succeeds
16. Commit the configuration to activate it on the device.
[edit]
admin@# commit
commit complete
17. Optionally, display the configuration to verify that it is correct.
admin@# show
## Last changed: 2009-10-20 22:43:25 UTC
version "9.6R2.11";
system {
autoinstallation;
host-name henbert;
root-authentication {
encrypted-password "$1$oTVn2KY3$uQe4xzQCxpR2j7sKuV.Pa0"; ##
SECRET-DATA
}
login {
user admin {
uid 928;
class super-user;
authentication {
encrypted-password "$1$cdOPmACd$QvreBsJkNR1EF0uurTBkE.";
## SECRET-DATA
}
}
}
services {
ssh;
web-management {
http {
interface ge-0/0/0.0;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any any;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
}
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
20 ■Step 6: Perform Initial Software Configuration
IBM Ethernet Appliance J56S Getting Started Guide