IBM J58S User manual

IBM Ethernet Appliance J58S
Getting Started Guide
April 2010
Part Number:
This document describes how to install the IBM Ethernet Appliance J58S.
Contents About This Guide .............................................................................................3
Step 1: Prepare the Site ...................................................................................4
Rack-Mounting Requirements ...................................................................4
Required Tools ..........................................................................................5
Step 2: Install the Mounting Hardware ............................................................6
Install the Mounting Hardware in a Four-Post Rack or Cabinet .................6
Install the Mounting Hardware in an Open-Frame Rack ............................7
Step 3: Install the Device .................................................................................8
Install the Device Using a Lift ....................................................................9
Install the Device Without a Mechanical Lift ...........................................10
Remove Components .......................................................................11
Lift the Chassis into the Rack ............................................................12
Reinstall Components ......................................................................13
Step 4: Connect External Devices and IOC Cables .........................................13
Connect to a Network for Out-of-Band Management ...............................14
Connect a Management Console .............................................................14
Connect the IOC Cables ..........................................................................14
Step 5: Connect Ground and Power Cables ...................................................15
Connect the Grounding Cable .................................................................15
Connect Power to an AC-Powered Ethernet Appliance ............................16
Connect Power to a DC-Powered Ethernet Appliance .............................17
Step 6: Perform Initial Software Configuration ..............................................19
Safety Warnings ............................................................................................24
Compliance Statements for NEBS ..................................................................25
■1

Compliance Statements for EMC Requirements ............................................25
Canada ...................................................................................................25
European Union ......................................................................................26
Hardware and Software Documentation for IBM Ethernet Appliances
J58S ........................................................................................................27
Requesting Technical Support .......................................................................28
Revision History ............................................................................................28
2■
IBM Ethernet Appliance J58S Getting Started Guide

About This Guide
This guide contains information you need to install and configure the IBM Ethernet
Appliance J58S quickly. For complete installation instructions, see the IBM Ethernet
Appliance J58S Hardware Guide at http://www.ibm.com/systems/support/networking .
WARNING: This guide contains a summary of safety warnings in “Safety Warnings”
on page 24. For a complete list of warnings for this device, including translations,
see the IBM Ethernet Appliance J58S Hardware Guide at
http://www.ibm.com/systems/support/networking .
The IBM Ethernet Appliance J58S is a high-performance, highly-scalable, carrier-class
security device with multi-processor architecture. The Ethernet appliance has a
capacity of up to 120 gigabits per second (Gbps), full duplex. The device is 16 rack
units (U) tall. Three devices can be stacked in a single floor-to-ceiling rack, for
increased port density per unit of floor space. The device provides 14 slots that can
be populated with up to 12 Services Processing Cards (SPCs) and I/O cards (IOCs)
and 2 Switch Control Boards (SCBs) in nonredundant fabric configurations.
By installing different combinations of IOCs and SPCs, you can tailor both the number
of gigabit ports and the maximum security processing capacity to suit your network.
Table 1 on page 3 describes the minimum system configuration for the IBM Ethernet
Appliance J58S.
Table 1: Minimum System Configuration for the IBM Ethernet Appliance J58S
MinimumComponent
1SPC
1IOC
2SCB
1Routing Engine
Fully populated, the device provides up to 440 Gigabit Ethernet or up to 44 10-Gigabit
Ethernet ports. Two types of IOC interface cards are available, each of which consists
of four Packet Forwarding Engines and enables a throughput of 10 Gbps. You can
install any combination of IOC types in the Ethernet appliance.
The IBM Ethernet Appliance J58S provides redundancy and resiliency. The hardware
system is fully redundant, including power supplies and SCBs.
The Ethernet appliance is shipped in a cardboard box strapped securely to a wooden
pallet. Plastic straps secure the top and bottom in place. The device chassis is bolted
to this pallet. A printed copy of this document and a cardboard accessory box are
also included in the shipping container.
About This Guide ■3
About This Guide

Step 1: Prepare the Site
Figure 1: Rack Clearance and Chassis Dimensions for the IBM Ethernet Appliance
J58S
Rack-Mounting Requirements
■You can install the device in a four-post rack or cabinet or an open-frame rack.
■The rack rails must be spaced widely enough to accommodate the device chassis's
external dimensions: 27.75 in. (70.49 cm) high, 23.0 in. (58.42 cm) deep, and
17.37 in. (44.11 cm) wide. The outer edges of the mounting brackets extend the
width to 19 in. (48.3 cm).
■The rack must be strong enough to support the weight of the fully configured
device, up to 350 lb (158.76 kg). If you stack three fully configured devices in
one rack, it must be capable of supporting about 1,050 lb (476.3 kg).
■For service personnel to service the device, there must be adequate space at the
front and back of the device. Allow at least 30 in. (76.2 cm) in front of the device
and 24 in. (61 cm) behind the device.
■The rack or cabinet must have an adequate supply of cooling air.
4■Step 1: Prepare the Site
IBM Ethernet Appliance J58S Getting Started Guide

■Ensure that the cabinet allows the chassis hot exhaust air to exit the cabinet
without recirculating into the device.
■The device must be installed into a rack that is secured to the building structure.
■The device should be mounted at the bottom of the rack if it is the only unit in
the rack.
■When mounting the device in a partially filled rack, load the rack from the bottom
to the top with the heaviest component at the bottom of the rack.
Required Tools
To unpack the Ethernet appliance and prepare for installation, you need the following
tools:
■A mechanical lift
■Phillips (+) screwdrivers, numbers 1 and 2
■2.5-mm flat-blade (–) screwdriver
■3/8-in. nut driver
■1/2-in. or 13-mm open-end or socket wrench to remove bracket bolts from the
shipping pallet
■Electrostatic discharge (ESD) wrist strap (provided)
■Antistatic mat
Step 1: Prepare the Site ■5
Step 1: Prepare the Site

Step 2: Install the Mounting Hardware
To install the mounting hardware in a four-post rack or cabinet or an open-frame
rack, perform one of the following procedures:
■Install the Mounting Hardware in a Four-Post Rack or Cabinet on page 6
■Install the Mounting Hardware in an Open-Frame Rack on page 7
Install the Mounting Hardware in a Four-Post Rack or Cabinet
To install the mounting shelf:
1. On the front rack rails, install cage nuts in the holes specified for the large shelf
in Table 2 on page 6.
2. On the front of each front rack rail, partially insert a mounting screw into the
hole containing the lowest cage nut.
3. Install the large shelf on the front rack rails. Rest the bottom slot of each ear on
a mounting screw.
4. Partially insert a mounting screw into the top hole in each ear of the large shelf.
5. Tighten all the screws completely.
6. On the rear rack rails, install cage nuts in the holes specified for the small shelf
in Table 2 on page 6.
7. On the back of each rear rack rail, partially insert a mounting screw into the hole
containing the lowest cage nut.
8. Install the small shelf on the back rack rails. Rest the bottom slot of each ear on
a mounting screw. The small shelf installs on the back of the rear rails, extending
toward the center of the rack. The bottom of the small shelf should align with
the bottom of the large shelf.
9. Partially insert screws into the open holes in the ears of the small shelf.
10. Tighten all the screws completely.
Table 2: Four-Post Rack or Cabinet Mounting Hole Locations
Small
Shelf
Large
ShelfDistance Above “U”DivisionHole
X
0.86 U1.51 in. (3.8 cm)3
XX
0.50 U0.88 in. (2.2 cm)2
X
0.14 U0.25 in. (0.6 cm)1
6■Step 2: Install the Mounting Hardware
IBM Ethernet Appliance J58S Getting Started Guide

Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet
Four-post open rack
Small mounting shelf
Large mounting shelf
Install the Mounting Hardware in an Open-Frame Rack
1. On the rear of each rack rail, partially insert a mounting screw into the highest
hole specified in Table 3 on page 7.
2. Install the large shelf on the rack. Hang the shelf over the mounting screws using
the keyhole slots located near the top of the large shelf flanges.
3. Partially insert screws into the open holes in the ears of the large shelf.
4. Tighten all the screws completely.
Table 3: Open-Frame Rack Mounting Hole Locations
Distance Above “U”DivisionHole
9.86 U17.26 in. (43.8 cm)30
8.86 U15.51 in. (39.4 cm)27
7.86 U13.76 in. (34.9 cm)24
6.86 U12.01 in. (30.5 cm)21
Step 2: Install the Mounting Hardware ■7
Step 2: Install the Mounting Hardware

Table 3: Open-Frame Rack Mounting Hole Locations (continued)
Distance Above “U”DivisionHole
5.86 U10.26 in. (26.0 cm)18
4.86 U8.51 in. (21.6 cm)15
3.86 U6.76 in. (17.1 cm)12
2.86 U5.01 in. (12.7 cm)9
1.86 U3.26 in. (8.3 cm)6
0.86 U1.51 in. (3.8 cm)3
0.50 U0.88 in. (2.2 cm)2
Figure 3: Mounting Hardware for an Open-Frame Rack
Step 3: Install the Device
Because of the device's size and weight, you must install the device using a mechanical
lift. The procedure for installing the device depends on whether you use a mechanical
lift:
■Install the Device Using a Lift on page 9
■Install the Device Without a Mechanical Lift on page 10
8■Step 3: Install the Device
IBM Ethernet Appliance J58S Getting Started Guide

Install the Device Using a Lift
1. Ensure the rack is in its permanent location and is secured to the building. Ensure
that the installation site allows adequate clearance for both airflow and
maintenance. For details, see the IBM Ethernet Appliance J58S Hardware Guide.
2. Load the device onto the lift, making sure it rests securely on the lift platform
(see Figure 4 on page 9).
Figure 4: Load the Device onto the Lift
g004081
3. Using the lift, position the device in front of the rack or cabinet, centering it in
front of the mounting shelf.
4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf
and position it as close as possible to the shelf.
5. Carefully slide the device onto the mounting shelf so that the bottom of the
chassis and the mounting shelf overlap by approximately two inches.
Step 3: Install the Device ■9
Step 3: Install the Device

6. Slide the chassis onto the mounting shelves until the mounting brackets or
front-mounting flanges contact the rack rails. The shelves ensure that the holes
in the mounting brackets and the front-mounting flanges of the chassis align
with the holes in the rack rails.
7. Move the lift away from the rack.
8. Install a mounting screw into each of the open mounting holes aligned with the
rack, starting from the bottom.
9. Visually inspect the alignment of the device. If the device is installed properly in
the rack, all the mounting screws on one side of the rack should be aligned with
the mounting screws on the opposite side and the device should be level.
Install the Device Without a Mechanical Lift
To install the device without a mechanical lift:
■Remove Components on page 11
■Lift the Chassis into the Rack on page 12
■Reinstall Components on page 13
Figure 5: Components to Remove from the Front of the Device
10 ■Step 3: Install the Device
IBM Ethernet Appliance J58S Getting Started Guide

Figure 6: Components to Remove from the Rear of the Device
Remove Components
Before lifting the device, you must remove the following components:
■Power supplies
■Switch Control Boards (SCBs)
■I/O Cards (IOCs)
■Services Processing Cards (SPCs)
■Fan tray
To remove the components from the device:
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J58S Hardware Guide.
2. Slide each component out of the chassis evenly so that it does not become stuck
or damaged.
3. Label each component as you remove it so you can reinstall it in the correct
location.
4. Immediately store each removed component in an electrostatic bag.
5. Do not stack removed components. Lay each one on a flat surface.
NOTE: For complete instructions on removing device components, see “Install the
Ethernet Appliance Without a Mechanical Lift”in the IBM Ethernet Appliance J58S
Hardware Guide.
Step 3: Install the Device ■11
Step 3: Install the Device

Lift the Chassis into the Rack
Lifting the chassis and mounting it in a rack is a three person lift process. The empty
chassis weighs approximately 150 lb (68.0 kg).
1. Ensure the rack is in its permanent location and is secured to the building.
2. Position the chassis in front of the rack or cabinet, centering it in front of the
mounting shelf. Use a pallet jack if one is available.
3. With one person on each side and one person in the front, hold onto the bottom
of the chassis and carefully lift it onto the large and small (if installed) mounting
shelves.
4. Slide the chassis onto the mounting shelves until the mounting brackets or
front-mounting flanges contact the rack rails. The shelves ensure that the holes
in the mounting brackets and the front-mounting flanges of the chassis align
with the holes in the rack rails.
5. To install the chassis in an open-frame rack, install a mounting screw into each
of the open mounting holes aligned with the rack, starting from the bottom.
6. Visually inspect the alignment of the chassis. If the chassis is installed properly
in the rack, all the mounting screws on one side of the rack should be aligned
with the mounting screws on the opposite side and the chassis should be level.
Figure 7: Lift the Chassis into the Rack
12 ■Step 3: Install the Device
IBM Ethernet Appliance J58S Getting Started Guide

Reinstall Components
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J58S Hardware Guide.
2. Slide each component into the chassis evenly so that it does not become stuck
or damaged.
3. Tighten the captive screws or lock any levers for each component installed.
NOTE: Make sure that all empty slots are covered with blank panels before operating
the device.
Step 4: Connect External Devices and IOC Cables
To connect external devices and IOC cables, perform the following procedures:
■Connect to a Network for Out-of-Band Management on page 14
■Connect a Management Console on page 14
■Connect the IOC Cables on page 14
Figure 8: Connect External Devices and IOC Cables
Step 4: Connect External Devices and IOC Cables ■13
Step 4: Connect External Devices and IOC Cables

Connect to a Network for Out-of-Band Management
1. Turn off the power to the management device.
2. Plug one end of the RJ-45 Ethernet cable into the appropriate ETHERNET port on
the Routing Engine.
3. Plug the other end of the cable into the network device.
Connect a Management Console
1. Turn off the power to the management device.
2. Plug the RJ-45 end of the serial cable into the appropriate CONSOLE or AUX port
on the Routing Engine.
3. Plug the female DB-9 end into the device's serial port.
Connect the IOC Cables
1. Have ready a length of the type of cable used by the IOC. For cable specifications,
see the IBM Ethernet Appliance J58S Hardware Guide.
2. If the IOC cable connector port is covered by a rubber safety plug, remove the
plug.
WARNING: Class 1 laser product.
WARNING: Do not look directly into a fiber-optic transceiver or into the ends of
fiber-optic cables. Fiber-optic transceivers and fiber-optic cable connected to a
transceiver emit laser light that can damage your eyes.
CAUTION: Do not leave a fiber-optic transceiver uncovered except when inserting
or removing cable. The safety cap keeps the port clean and prevents accidental
exposure to laser light.
3. Insert the cable connector into the cable connector port on the IOC faceplate.
4. Arrange the cable in the cable management system to prevent it from dislodging
or developing stress points. Secure the cable so that it is not supporting its own
weight as it hangs to the floor. Place excess cable out of the way in a neatly
coiled loop in the cable management system. Placing fasteners on the loop helps
to maintain its shape.
14 ■Step 4: Connect External Devices and IOC Cables
IBM Ethernet Appliance J58S Getting Started Guide

CAUTION: Avoid bending fiber-optic cable beyond its minimum bend radius. An arc
smaller than a few inches in diameter can damage the cable and cause problems
that are difficult to diagnose.
CAUTION: Do not let fiber-optic cable hang free from the connector. Do not allow
fastened loops of cable to dangle, which stresses the cable at the fastening point.
Step 5: Connect Ground and Power Cables
Depending on your configuration, your device uses either AC or DC power supplies.
Perform the appropriate procedures for each power supply in your device:
■Connect the Grounding Cable on page 15
■Connect Power to an AC-Powered Ethernet Appliance on page 16
■Connect Power to a DC-Powered Ethernet Appliance on page 17
Connect the Grounding Cable
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and
connect the strap to an approved site ESD grounding point. See the instructions
for your site.
2. Connect the grounding cable to a proper earth ground.
3. Verify that a licensed electrician has attached the cable lug provided with the
Ethernet appliance to the grounding cable.
4. Make sure that grounding surfaces are clean and brought to a bright finish before
grounding connections are made.
5. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J58S Hardware Guide.
6. Place the grounding cable lug over the grounding point. The left pair is sized for
M6 screws, and the right pair is sized for UNC 1/4-20 screws.
7. Secure the grounding cable lug to the grounding point, first with the washers,
then with the screws.
8. Verify that the grounding cabling is correct, that the grounding cable does not
touch or block access to device components, and that it does not drape where
people could trip on it.
Step 5: Connect Ground and Power Cables ■15
Step 5: Connect Ground and Power Cables

Connect Power to an AC-Powered Ethernet Appliance
WARNING: The device must be properly grounded before you connect the AC power
cords.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J58S Hardware Guide.
2. Locate the power cord or cords you will use to connect the device to AC power.
See the IBM Ethernet Appliance J58S Hardware Guide for specifications.
3. For each power supply:
a. Move the power switch above the power supply to the OFF (O) position.
b. Insert the appliance coupler end of the power cord into the appliance inlet
above the power supply.
c. Insert the power cord plug into an external AC power source receptacle.
NOTE: Each power supply must be connected to a dedicated AC power feed and a
dedicated external circuit breaker. We recommend that you use a 15 A (250 VAC)
minimum, or as permitted by local code.
d. Dress the power cord appropriately. Verify that the power cord does not
block the air exhaust and access to device components, or drape where
people could trip on it.
16 ■Step 5: Connect Ground and Power Cables
IBM Ethernet Appliance J58S Getting Started Guide

Figure 9: Connecting AC Power to the Ethernet Appliance
4. Switch the AC switch on each power supply to the ON position (—) and observe
the status LEDs on each power supply faceplate. If an AC power supply is correctly
installed and functioning normally, the AC OK and DC OK LEDs light steadily, and
the PS FAIL LED does not light.
If any of the status LEDs indicates that the power supply is not functioning
normally, repeat the installation and cabling procedures.
Connect Power to a DC-Powered Ethernet Appliance
WARNING: The device must be properly grounded before you connect the DC power
cables.
Step 5: Connect Ground and Power Cables ■17
Step 5: Connect Ground and Power Cables

Table 4: DC Power System Input Voltage
SpecificationItem
Operating range: –40 to –72 VDCDC input voltage
Figure 10: Connect DC Power Cables
CAUTION: You must ensure that power connections maintain the proper polarity.
The power source cables might be labeled (+) and (–)to indicate their polarity. There
is no standard color coding for DC power cables. The color coding used by the external
DC power source at your site determines the color coding for the leads on the power
cables that attach to the terminal studs on each power supply.
1. Ensure that the voltage across the DC power source cable leads is 0 V and that
there is no chance that the cable leads might become active during installation.
2. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and
connect the strap to one of the ESD points on the chassis. For more information
about ESD, see the IBM Ethernet Appliance J58S Hardware Guide.
3. For each power supply:
a. Switch the circuit breaker on the power supply faceplate to the OFF (O)
position.
b. Remove the clear plastic cover protecting the terminal studs on the faceplate.
18 ■Step 5: Connect Ground and Power Cables
IBM Ethernet Appliance J58S Getting Started Guide

c. Attach the positive (+) DC source power cable lug to the RTN (return)
terminal.
d. Secure the power cable lugs to the terminal studs on the power supply, first
with the split washer, then with the nut. Apply between 23 lb-in. (2.6 Nm)
and 25 lb-in. (2.8 Nm) of torque.
e. Attach the negative (–) DC source power cable lug to the –48V (input)
terminal.
f. Secure the power cable lugs to the terminal studs on the power supply, first
with the split washer, then with the nut. Apply between 23 lb-in. (2.6 Nm)
and 25 lb-in. (2.8 Nm) of torque.
g. Replace the clear plastic cover over the terminal studs on the faceplate.
4. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and
connect the strap to an approved site ESD grounding point. See the instructions
for your site.
5. Connect each DC power cable to the appropriate external DC power source.
NOTE: For information about connecting to external DC power sources, see the
instructions for your site.
6. Switch on the external circuit breakers to provide voltage to the DC power source
cable leads.
7. Switch the circuit breakers on each power supply to the ON position (|). Observe
the status LEDs on each power supply faceplate. If a DC power supply is correctly
installed and functioning normally, the PWR OK, BRKR ON, and INPUT OK LEDs
light green steadily.
Step 6: Perform Initial Software Configuration
This procedure connects the device to the network but does not enable it to forward
traffic. For complete information about enabling the device to forward traffic, including
examples, see the appropriate JUNOS Software configuration guides.
To configure the software:
1. Verify that the device is powered on.
2. Log in as the root user. There is no password.
3. Start the CLI.
root# cli
root@>
4. Enter configuration mode.
configure
[edit]
Step 6: Perform Initial Software Configuration ■19
Step 6: Perform Initial Software Configuration

root@#
5. Set the root authentication password by entering a cleartext password, an
encrypted password, or an SSH public key string (DSA or RSA).
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
6. Configure an administrator account on the device. When prompted, enter the
password for the administrator account.
[edit]
root@# set system login user admin class super-user authentication
plain-text-password
New password: password
Retype new password: password
7. Commit the configuration to activate it on the device.
[edit]
root@# commit
8. Log in as the administrative user you configured in step 6.
9. Configure the name of the device. If the name includes spaces, enclose the name
in quotation marks (“”).
configure
[edit]
admin@# set system host-name host-name
10. Configure the IP address and prefix length for the device’s Ethernet interface.
[edit]
admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin@# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin@# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
12. Configure the default route.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin@# set security zones security-zone trust interfaces ge-0/0/0
admin@# set security zones security-zone untrust interfaces ge-0/0/1
14. Configure basic security policies.
20 ■Step 6: Perform Initial Software Configuration
IBM Ethernet Appliance J58S Getting Started Guide