Juniper JATP400 Installation instructions

JATP400 Appliance Hardware Guide
Published
2021-05-17

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
JATP400 Appliance Hardware Guide
Copyright © 2021 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
JATP400 System Overview | 2
JATP400 Appliance Descripon | 2
JATP400 Appliance Transceiver Interface | 3
JATP400 Field-Replaceable Units | 3
JATP400 Chassis | 4
JATP400 Appliance Front Panel Descripon | 4
JATP400 Appliance Back Panel Descripon | 10
2
Site Planning, Preparaon, and Specicaons
Overview of Preparing the Site for the JATP400 | 17
JATP400 Site Guidelines and Requirements | 17
General Site Installaon Guidelines for the JATP400 Appliance | 18
JATP400 Appliance Physical Specicaons | 18
JATP400 Appliance Rack and Clearance Requirements | 20
Addional Hardware Requirements | 21
3
Inial Installaon and Conguraon
JATP400 Installaon Overview | 25
Overview of Installing the JATP400 Appliance in a Rack | 25
Tools and Parts Required for Installing the JATP400 Appliance | 25
Unpacking the JATP400 | 26
Overview of Unpacking the JATP400 | 26
Unpacking the JATP400 | 27
Verifying the JATP400 Parts Received | 27
iii

Installing the JATP400 in a Rack | 29
Installing the JATP400 Appliance | 29
Connecng the JATP400 to Power | 35
Connecng the JATP400 Appliance to Earth Ground | 35
Connecng AC Power Source to the JATP400 Appliance | 35
Connecng DC Power to the JATP400 Appliance | 37
Connecng the JATP400 Appliance to a Management Device | 38
Performing the Inial Soware Conguraon for the JATP400 | 39
Selecng the Form Factor | 39
Conguring the IP Address and Domain Name Servers | 41
Conguring the Device Host Name | 41
Conguring the Alternate Exhaust Interface | 42
Conguring the Device Basic Aributes | 43
Accessing the JATP Interface | 44
Conguring IPMI | 46
4
Maintaining Components
Maintaining JATP400 Power System | 52
Maintaining the JATP400 Power Supply | 52
Replacing an AC Power Supply on the JATP400 Appliance | 52
Replacing AC Power Supply Cables on the JATP400 Appliance | 53
Replacing a DC Power Supply on the JATP400 Appliance | 54
Replacing DC Power Supply Cables on the JATP400 Appliance | 55
Maintaining the JATP400 Hard Disk Drive | 56
Maintaining the JATP400 RAID Array | 56
Replacing a Hard Drive on the JATP400 Appliance | 56
5
Troubleshoong Hardware
iv

Contacng Juniper Networks Technical Assistance Center | 61
6
Returning the Chassis or Components
Returning the JATP400 Chassis or Components | 63
Locang the Serial Number on a JATP400 Chassis | 63
Contacng Customer Support to Obtain Return Material Authorizaon | 63
Packing a JATP400 for Shipping | 64
7
Safety and Compliance Informaon
General Safety Guidelines and Warnings | 68
Denions of Safety Warning Levels | 69
Qualied Personnel Warning | 71
Warning Statement for Norway and Sweden | 71
Fire Safety Requirements | 72
Installaon Instrucons Warning | 73
Chassis Liing Guidelines for the JATP400 Appliance | 74
Restricted Access Warning | 74
Ramp Warning | 76
Rack-Mounng and Cabinet-Mounng Warnings | 76
Grounded Equipment Warning | 80
Radiaon from Open Port Apertures Warning | 81
Laser and LED Safety Guidelines and Warnings | 82
Maintenance and Operaonal Safety Guidelines and Warnings | 85
General Electrical Safety Guidelines and Warnings | 91
Acon to Take Aer an Electrical Accident | 92
Prevenon of Electrostac Discharge Damage | 93
AC Power Electrical Safety Guidelines | 94
v

AC Power Disconnecon Warning | 95
DC Power Disconnecon Warning | 96
DC Power Grounding Requirements and Warning | 98
DC Power Wiring Sequence Warning | 99
DC Power Wiring Terminaons Warning | 100
Mulple Power Supplies Disconnecon Warning | 101
TN Power Warning | 102
JATP400 Agency Approvals and Compliance Statements | 103
Agency Approvals for the JATP400 Appliance | 103
Compliance Statements for Acousc Noise for the JATP400 Appliance | 106
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the Juniper Networks Advanced Threat Prevenon 400 (JATP400) appliance. Aer
compleng the installaon and basic conguraon procedures covered in this guide, refer to the JATP
Soware documentaon for informaon about further soware conguraon.
RELATED DOCUMENTATION
How to Set Up Your JATP400 Appliance
vii

1
CHAPTER
Overview
JATP400 System Overview | 2
JATP400 Chassis | 4

JATP400 System Overview
IN THIS SECTION
JATP400 Appliance Descripon | 2
JATP400 Appliance Transceiver Interface | 3
JATP400 Field-Replaceable Units | 3
JATP400 Appliance Descripon
IN THIS SECTION
Benets of the JATP400 Appliance | 2
Juniper Networks Advanced Threat Prevenon 400 (JATP400) appliance is an advanced threat
prevenon plaorm that is designed to idenfy and prevent targeted aacks across mulple threat
vectors. The appliance can be deployed as a Core device, Trac Collector, Email Collector, Manager of
Central Managers (MCM), Secondary Core, or as an All-In-One device.
The JATP400 appliance is a 1-rack-unit (1-U), rack-mountable chassis with hot-swappable dual AC
power supplies (or oponal dual DC power supplies), four hot-swappable hard disk drives that support
RAID, 32-GB memory, two 10-Gigabit Ethernet interfaces, two 10-Gigabit Ethernet SFP+ interfaces, and
four 1-Gigabit Ethernet interfaces.
Benets of the JATP400 Appliance
•Mulvector trac inspecon—Provides connuous, mulstage detecon and analysis of Web, e-
mail, and lateral spread trac moving through the network.
•Mulstage threat detecon—Monitors network trac to idenfy threats as they progress through
the kill chain, detecng phishing, exploits, malware downloads, command and control
communicaons, and internal threats.
2

•Mulstage threat analysis—Performs stac, payload, machine learning, and behavior analyses, as well
as malware reputaon analysis, and connuously adapts to the changing threat landscape by
leveraging Juniper Networks Global Security Service, a cloud-based service that oers the latest
threat detecon and migaon informaon.
•Threat analycs—Oers a holisc view of identy and threat acvity gathered from a diverse set of
sources such as Acve Directory, endpoint anvirus, rewalls, secure Web gateways, intrusion
detecon systems, and endpoint detecon and response tools. The analycs component receives
data from these sources, idenes advanced malicious traits, and correlates the events to provide
complete visibility into a threat’s kill chain.
•Integraon with third-party devices—The JATP400 appliance supports an open API architecture,
which enables it to integrate with several third-party security devices to seamlessly and
automacally migate threats.
JATP400 Appliance Transceiver Interface
Two 10-Gigabit Ethernet SFP+ ports on the rear panel of the JATP400 appliance support SFP+
transceivers. Table 1 on page 3 lists the details of supported transceiver type.
Table 1: JATP400 Appliance Transceiver Type
Transceiver Type Card Model Descripon
SFP+ UNIV-SFPP-DUAL-SR Dual Rate 10GBASE-SR/1000BASE-SX
UNIV-SFPP-DUAL-LR Dual Rate 10GBASE-LR/1000BASE-LX
JATP400 Field-Replaceable Units
Field-replaceable units (FRUs) are hardware components that can be replaced at the customer site. Hot-
swappable FRUs are the components that you can remove and replace without powering o the device
or disrupng the funcons of the device.
JATP400 appliance supports FRUs: power supply and hard disk drive.
3

RELATED DOCUMENTATION
JATP400 Chassis | 4
Overview of Preparing the Site for the JATP400 | 17
JATP400 Installaon Overview | 25
JATP400 Chassis
IN THIS SECTION
JATP400 Appliance Front Panel Descripon | 4
JATP400 Appliance Back Panel Descripon | 10
JATP400 Appliance Front Panel Descripon
Figure 1 on page 4 shows the front panel components of the JATP400 appliance.
Figure 1: JATP400 Front Panel
Table 2 on page 5 lists the front panel components of the JATP400 appliance.
4

Table 2: JATP400 Front Panel Components
Callout Component Descripon
1 Front Bezel Protects the appliance.
2 Lock Locks the appliance.
3 Chassis LEDs Provides the colors and states, and
the status they indicate.
4 RESET buon Reboots the appliance.
5 Power buon Powers on or powers o the
appliance.
Use the main power buon to apply
or remove power from the power
supply to the server. Turning o
system power with this buon
removes the main power but
maintains standby power. To
perform many maintenance tasks,
you must also unplug system before
servicing.
6 Hard drive Four 2-TB hard disk drives.
5

Figure 2 on page 6 shows the front panel LEDs of the JATP400 appliance.
Figure 2: JATP400 Front Panel LEDs
Table 3 on page 6 lists the front panel LEDs of the JATP400 appliance.
Table 3: JATP400 Front Panel LEDs
Callout LEDs Descripon
1 UID Depressing the UID (unit idener)
buon illuminates an LED on both
the front and rear of the chassis for
easy system locaon in large stack
conguraons. The LED will remain
on unl the buon is pushed a
second me.
6

Table 3: JATP400 Front Panel LEDs (Connued)
Callout LEDs Descripon
2Informaon • Solid red—Indicates an overheat
condion, which might be
caused due to cable congeson.
TIP: Check the roung of the
cables if they are obstrucng the
airow from the system.
• Red (blinking)—Indicates a fan
failure. Check for an inoperave
fan.
• Red (slowly blinking)—Indicates a
power failure. That is, the power
is received but the power supply
is not funconing. Check for a
non-operaonal power supply.
• Solid blue —Indicates local User
ID (UID) funcon is acvated.
Use this funcon to locate the
server in a rack mount
environment.
• Blue (blinking)—Indicates Remote
UID is on. Use this funcon to
idenfy that the server is used
from a remote locaon.
3GLAN2 • Flashing—Indicates network
acvity on LAN port 2.
• Steady—Indicates link.
7

Table 3: JATP400 Front Panel LEDs (Connued)
Callout LEDs Descripon
4 GLAN1 • Flashing—Indicates network
acvity on LAN port 1.
• Steady—Indicates link.
5 Hard drive Indicates acvity on a hard drive
when flashing.
6 Power For AC power supply:
• Solid green—Indicates that the
appliance is receiving power.
• Solid amber—Indicates that the
power supply is plugged in and
turned o, or the system is o
but in an abnormal state.
For DC power supply:
• Solid green—Indicates that the
appliance is receiving power.
• Solid amber—Indicates that the
power supply is plugged in and
turned o, or the system is o
but in an abnormal state.
• Amber (blinking)—Indicates that
the system power supply
temperature has reached 63° C.
NOTE: The system powers down
automacally when the power
supply temperature reaches 70°
C and restarts when the power
supply temperature goes below
60° C.
8

Table 4 on page 9 lists the JATP400 hard disk drive port LEDs.
Table 4: JATP400 HDD Port LEDs
LEDs Descripon
Acvity (top) • Solid green—Indicates that the SAS drive is
installed.
• Green (blinking)—Indicates the I/O acvity.
Status (boom) • Solid red—Indicates failed drive for Serial Aached
SCSI (SAS), Serial Advanced Technology Aachment
(SATA), or Non-volale memory express (NVMe)
with Rapid Storage Technology enterprise (RSTe)
support.
• Red (blinking):
• At 1 Hz—Indicates rebuild drive for SAS/SATA
with RSTe support.
• Two blinks and one stop at 1 Hz—Indicates hot
spare for SAS/SATA with RSTe support.
• On for ve seconds, then o—Indicates power
on for SAS/SATA with RSTe support.
• At 4 Hz—Indicates idenfy drive for SAS/SATA
with RSTe support.
• Solid green—Indicates that it is safe to remove
NVMe device.
• Amber (blinking at 1 Hz)—Indicates aenon state.
NOTE: Do not remove NVMe device.
9

JATP400 Appliance Back Panel Descripon
Figure 3 on page 10 shows the back panel components of the JATP400 appliance.
Figure 3: JATP400 Back Panel
Table 5 on page 10 lists the back panel components of the JATP400 appliance.
Table 5: JATP400 Back Panel Components
Callout Components Descripon
1 Power supply Provides power to all components.
2 USB port Port 1 of USB 2.0.
3 Dedicated IPMI LAN port One RJ-45 dedicated Intelligent
Plaorm Management Interface
(IPMI) LAN port.
4 USB port Port 7 of USB 3.0.
5 GLAN1 10-Gigabit Ethernet LAN port (eth6).
NOTE: This port is not supported.
6 GLAN2 10-Gigabit Ethernet LAN port (eth7).
NOTE: This port is not supported.
10

Table 5: JATP400 Back Panel Components (Connued)
Callout Components Descripon
7 1-Gigabit Ethernet LAN port RJ-45 port, eth0, management
interface.
8 1-Gigabit Ethernet LAN port RJ-45 port, eth4.
eth1 when this port is used as 1-
Gigabit Ethernet copper port.
9 1-Gigabit Ethernet LAN port RJ-45 port, eth2, alternate exhaust
interface.
Use the alternate exhaust interface
for external connecvity in threat
detecon.
NOTE: You can congure alternate
exhaust interface only for Core or All-
In-One appliance.
10 1-Gigabit Ethernet LAN port RJ-45 port, eth3.
11 10-Gigabit Ethernet SFP+ port eth5.
NOTE: You can use this port as either
Fiber or Copper port based on type
of SFP used.
11

Table 5: JATP400 Back Panel Components (Connued)
Callout Components Descripon
12 10-Gigabit Ethernet SFP+ port eth1. By default, this port is a 10-
Gigabit Ethernet ber monitoring
port.
NOTE: You can change this port to 1-
Gigabit Ethernet copper port for
trac monitoring through the
following command:
# set trac-monitoring-ifc 1gb_ifc
Aer you reboot the appliance, the
eth4 interface becomes the eth1
interface and this port becomes eth4.
13 VGA port One VGA port. Use this connecon
for VGA display.
14 USB port Port 8 of USB 3.0.
15 USB port Port 2 of USB 2.0.
16 COM port One DB-9 COM port.
NOTE: This port is not supported.
Figure 4 on page 12 shows the back panel 10-Gigabit Ethernet port LEDs of the JATP400 appliance.
Figure 4: JATP400 10-Gigabit Ethernet Port LEDs
12

Table 6 on page 13 lists the JATP400 10-Gigabit Ethernet port LEDs.
Table 6: JATP400 10-Gigabit Ethernet Port LEDs
Callout LEDs Descripon
1 Link • Green—Indicates that the speed of the
connecon is 10 Gbps.
• Amber—Indicates that the speed of the
connecon is 1 Gbps.
2Acvity • Green (blinking)—Indicates that there is
acvity on this port.
•O—Indicates no trac.
Figure 5 on page 13 shows the back panel 1-Gigabit Ethernet port LEDs of the JATP400 appliance.
Figure 5: JATP400 1-Gigabit Ethernet Port LEDs
Table 7 on page 13 lists the JATP400 1-Gigabit Ethernet port LEDs.
Table 7: JATP400 1-Gigabit Ethernet Port LEDs
Callout LEDs Descripon
1Acvity • Yellow (blinking)—Indicates that there is acvity on this port.
•O—Indicates no acvity.
13