Juniper SRX5400 Installation instructions

SRX5400 Firewall Hardware Guide
Published
2023-07-10

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX5400 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | xiv
1
Overview
SRX5400 Firewall System Overview | 2
SRX5400 Firewall Descripon | 2
Benets of the SRX5400 Firewall | 3
SRX5400 Firewall FRUs | 4
SRX5400 Firewall Component Redundancy | 5
SRX5400 Chassis | 6
SRX5400 Firewall Chassis | 6
SRX5400 Firewall Physical Specicaons | 9
SRX5400 Firewall Midplane Descripon | 10
SRX5400 Firewall Cra Interface Overview | 10
SRX5400 Firewall Cra Interface Alarm LEDs and Alarm Cuto/Lamp Test Buon | 12
SRX5400 Firewall Cra Interface Host Subsystem LEDs | 13
SRX5400 Firewall Cra Interface Power Supply LEDs | 14
SRX5400 Firewall Cra Interface Card OK/Fail LEDs | 14
SRX5400 Firewall Cra Interface Fan LEDs | 15
SRX5400 Firewall Cra Interface Online/Oine Buons | 15
SRX5400 Firewall Cra Interface Alarm Relay Contacts | 18
SRX5400 Cooling System | 20
SRX5400 Power System | 23
SRX5400 Firewall Power System Overview | 23
SRX5400 Firewall AC Power Supply | 25
SRX5400 Firewall AC Power Supply Specicaons | 26
iii

SRX5400 Firewall AC Power Supply LEDs | 27
AC Power Cord Specicaons for the SRX5400 Firewall | 28
AC Power Circuit Breaker Requirements for the SRX5400 Firewall | 31
SRX5400 Firewall DC Power Supply | 31
SRX5400 Firewall DC Power Supply Specicaons | 32
SRX5400 Firewall DC Power Supply LEDs | 33
DC Power Cable Specicaons for the SRX5400 Firewall | 33
DC Power Cable Lug Specicaons for the SRX5400 Firewall | 34
DC Power Circuit Breaker Requirements for the SRX5400 Firewall | 35
DC Power Source Cabling for the SRX5400 Firewall | 35
SRX5400 Firewall Chassis Grounding Point Specicaons | 36
SRX5400 Firewall Grounding-Cable Specicaon | 37
SRX5400 Firewall Grounding-Cable Lug Specicaon | 38
SRX5400 Host Subsystem | 39
SRX5400 Firewall Host Subsystem Overview | 39
Switch Control Board SRX5K-SCB Overview | 40
Switch Control Board SRX5K-SCB Specicaons | 41
Switch Control Board SRX5K-SCBE Overview | 44
Switch Control Board SRX5K-SCBE Specicaons | 46
Switch Control Board SRX5K-SCB3 Overview | 49
Switch Control Board SRX5K-SCB3 Specicaons | 50
Roung Engine SRX5K-RE-13-20 Overview | 52
Roung Engine SRX5K-RE-13-20 Specicaons | 53
Roung Engine SRX5K-RE-1800X4 Overview | 57
Roung Engine SRX5K-RE-1800X4 Specicaons | 58
Roung Engine SRX5K-RE3-128G Specicaons | 61
iv

SRX5400 Line Cards and Modules | 67
SRX5400, SRX5600, and SRX5800 Firewall Card Overview | 68
Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls | 69
SRX5400 Firewall Card Cage and Slots | 74
SRX5400 Firewall Services Processing Card Overview | 74
Services Processing Card SRX5K-SPC-2-10-40 Specicaons | 75
Services Processing Card SRX5K-SPC-4-15-320 Specicaons | 81
Services Processing Card SRX5K-SPC3 Specicaons | 87
SRX5400 Firewall MPC and MIC Overview | 91
Modular Port Concentrator (SRX5K-MPC) Specicaons | 92
SRX5K-MPC3-40G10G Specicaons | 95
SRX5K-MPC3-100G10G Specicaons | 99
MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 103
MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 110
MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 114
MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 116
I/O Card SRX5K-40GE-SFP Specicaons | 118
I/O Card SRX5K-4XGE-XFP Specicaons | 121
SRX5K-IOC4-10G Specicaons | 124
SRX5K-IOC4-MRAT Specicaons | 128
Flex I/O Card (SRX5K-FPC-IOC) Specicaons | 132
Flex I/O Card Port Module SRX-IOC-16GE-SFP Specicaons | 134
Flex I/O Card Port Module SRX-IOC-16GE-TX Specicaons | 136
Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specicaons | 139
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX5400 Firewall | 143
v

SRX5400 Site Guidelines and Requirements | 144
SRX5400 Firewall Environmental Specicaons | 144
General Site Guidelines | 145
Site Electrical Wiring Guidelines | 146
Clearance Requirements for SRX5400 Firewall Airow and Hardware Maintenance | 147
SRX5400 Rack and Cabinet Requirements | 148
SRX5400 Firewall Rack Size and Strength Requirements | 148
Spacing of Rack Mounng Bracket Holes for the SRX5400 Firewall | 149
Connecon to Building Structure for the SRX5400 Firewall Rack | 149
SRX5400 Firewall Cabinet Size and Clearance Requirements | 149
SRX5400 Firewall Cabinet Airow Requirements | 149
Calculang Power Requirements for the SRX5400 Firewall | 150
SRX5400 Network Cable and Transceiver Planning | 156
Roung Engine Interface Cable and Wire Specicaons for the SRX5400 Firewall | 156
Signal Loss in Mulmode and Single-Mode Fiber-Opc Cable for the SRX5400 Firewall | 157
Aenuaon and Dispersion in Fiber-Opc Cable for the SRX5400 Firewall | 157
Calculang Power Budget for Fiber-Opc Cable for the SRX5400 Firewall | 158
Calculang Power Margin for Fiber-Opc Cable for the SRX5400 Firewall | 159
SRX5400 Alarm and Management Cable Specicaons and Pinouts | 161
Alarm Relay Contact Wire Specicaons for the SRX5400 Firewall | 161
Console Port Cable and Wire Specicaons for the SRX5400 Firewall | 161
RJ-45 Connector Pinouts for the SRX5400 Firewall Roung Engine Ethernet Port | 162
RJ-45 Connector Pinouts for the SRX5400 Firewall Roung Engine Auxiliary and Console
Ports | 163
3
Inial Installaon and Conguraon
SRX5400 Installaon Overview | 166
Unpacking the SRX5400 | 167
vi

Tools and Parts Required to Unpack the SRX5400 Firewall | 167
Unpacking the SRX5400 Firewall | 167
Verifying the SRX5400 Firewall Parts Received | 169
Installing the SRX5400 Mounng Hardware | 172
Tools and Parts Required to Install the SRX5400 Firewall Mounng Hardware for a Rack or
Cabinet | 172
Installing the SRX5400 Firewall Mounng Hardware for a Rack or Cabinet | 172
Moving the Mounng Brackets for Center-Mounng the SRX5400 Firewall | 175
Installing the SRX5400 Using a Mechanical Li | 176
Tools Required to Install the SRX5400 Firewall with a Mechanical Li | 176
Installing the SRX5400 Firewall Using a Mechanical Li | 176
Installing the SRX5400 Without a Mechanical Li | 178
Overview of Installing the SRX5400 Firewall Without a Mechanical Li | 179
Tools Required to Install the SRX5400 Firewall Without a Mechanical Li | 179
Removing Components from the SRX5400 Chassis Before Installing It Without a Li | 179
Removing the Power Supplies Before Installing the SRX5400 Firewall Without a Li | 180
Removing the Fan Tray Before Installing an SRX5400 Firewall Without a Li | 181
Removing Cards Before Installing an SRX5400 Firewall Without a Li | 182
Installing the SRX5400 Firewall Chassis in the Rack Manually | 184
Reinstalling Components in the SRX5400 Firewall Chassis Aer Installing It Without a Li | 186
Reinstalling Power Supplies Aer Installing the SRX5400 Firewall Without a Li | 186
Reinstalling the Fan Tray Aer Installing the SRX5400 Firewall Without a Li | 187
Reinstalling Cards Aer Installing the SRX5400 Firewall Without a Li | 188
Connecng the SRX5400 to External Devices | 189
Tools and Parts Required for SRX5400 Firewall Connecons | 190
Connecng the SRX5400 Firewall to a Management Console or an Auxiliary Device | 190
Connecng the SRX5400 Firewall to a Network for Out-of-Band Management | 191
Connecng an SRX5400 Firewall to an External Alarm-Reporng Device | 192
vii

Connecng Network Cables to SRX5400 Firewall MICs | 193
Connecng the SRX5400 to Power | 194
Tools and Parts Required for SRX5400 Firewall Grounding and Power Connecons | 195
Grounding the SRX5400 Firewall | 195
Connecng Power to an AC-Powered SRX5400 Firewall | 197
Powering On an AC-Powered SRX5400 Firewall | 198
Connecng Power to a DC-Powered SRX5400 Firewall | 199
Powering On a DC-Powered SRX5400 Firewall | 202
Powering O the SRX5400 Firewall | 204
Performing the Inial Soware Conguraon for the SRX5400 | 205
SRX5400 Firewall Soware Conguraon Overview | 205
Inially Conguring the SRX5400 Firewall | 206
Performing Inial Soware Conguraon Using J-Web | 211
Conguring Root Authencaon and the Management Interface from the CLI | 211
Conguring Interfaces, Zones, and Policies with J-Web | 213
4
Maintaining Components
Maintaining the SRX5400 Chassis | 217
Roune Maintenance Procedures for the SRX5400 Firewall | 217
Replacing the SRX5400 Firewall Cra Interface | 218
Disconnecng the Alarm Relay Wires from the SRX5400 Firewall Cra Interface | 218
Removing the SRX5400 Firewall Cra Interface | 218
Installing the SRX5400 Firewall Cra Interface | 219
Connecng the Alarm Relay Wires to the SRX5400 Firewall Cra Interface | 220
Maintaining the SRX5400 Cooling System | 221
Maintaining the Fan Tray on the SRX5400 Firewall | 221
Replacing the SRX5400 Firewall Fan Tray | 222
Removing the SRX5400 Firewall Fan Tray | 222
Installing the SRX5400 Firewall Fan Tray | 223
Maintaining the Air Filter on the SRX5400 Firewall | 224
viii

Replacing the SRX5400 Firewall Air Filter | 225
Removing the SRX5400 Firewall Air Filter | 225
Installing the SRX5400 Firewall Air Filter | 226
Maintaining the SRX5400 Power System | 227
Maintaining SRX5400 Firewall Power Supplies | 228
Replacing an SRX5400 Firewall AC Power Supply | 229
Removing an SRX5400 Firewall AC Power Supply | 229
Installing an SRX5400 Firewall AC Power Supply | 231
Replacing an SRX5400 Firewall AC Power Supply Cord | 232
Disconnecng an SRX5400 Firewall AC Power Supply Cord | 232
Connecng an SRX5400 Firewall AC Power Supply Cord | 232
Replacing an SRX5400 Firewall DC Power Supply | 233
Removing an SRX5400 Firewall DC Power Supply | 233
Installing an SRX5400 Firewall DC Power Supply | 234
Replacing an SRX5400 Firewall DC Power Supply Cable | 237
Disconnecng an SRX5400 Firewall DC Power Supply Cable | 237
Connecng an SRX5400 Firewall DC Power Supply Cable | 238
Maintaining the SRX5400 Host Subsystem | 239
Maintaining the SRX5400 Firewall Host Subsystem | 240
Taking the SRX5400 Firewall Host Subsystem Oine | 242
Operang and Posioning the SRX5400 Firewall SCB Ejectors | 242
Replacing the SRX5400 Firewall SCB | 243
Removing the SRX5400 Firewall SCB | 243
Installing an SRX5400 Firewall SCB | 244
Replacing the SRX5400 Firewall Roung Engine | 246
Removing the SRX5400 Firewall Roung Engine | 247
Installing the SRX5400 Firewall Roung Engine | 247
Low Impact Hardware Upgrade for SCB3 and IOC3 | 250
In-Service Hardware Upgrade for SRX5K-RE-1800X4 and SRX5K-SCBE or SRX5K-RE-1800X4
and SRX5K-SCB3 in a Chassis Cluster | 266
ix

Maintaining the SRX5400 Line Cards and Modules | 271
Holding an SRX5400 Firewall Card | 271
Storing an SRX5400 Firewall Card | 274
Replacing SRX5400 Firewall MPCs | 275
Removing an SRX5400 Firewall MPC | 275
Installing an SRX5400 Firewall MPC | 277
Replacing SRX5400 Firewall MICs | 280
Removing an SRX5400 Firewall MIC | 281
Installing an SRX5400 Firewall MIC | 282
Installing an MPC and MICs in an Operang SRX5400 Firewall Chassis Cluster | 284
Maintaining SPCs on the SRX5400 Firewall | 287
Replacing SRX5400 Firewall SPCs | 289
Removing an SRX5400 Firewall SPC | 289
Installing an SRX5400 Firewall SPC | 291
Replacing SPCs in an Operang SRX5400, SRX5600, or SRX5800 Firewalls Chassis Cluster | 293
In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster | 296
Maintaining the SRX5400 Cables and Connectors | 299
Maintaining SRX5400 Firewall Network Cables | 299
Replacing the Management Ethernet Cable on the SRX5400 Firewall | 300
Replacing the SRX5400 Firewall Console or Auxiliary Cable | 301
Replacing an SRX5400 Firewall Network Cable | 302
Removing an SRX5400 Firewall Network Cable | 302
Installing an SRX5400 Firewall Network Cable | 303
Replacing SRX5400 Firewall Transceivers | 304
Removing an SRX5400 Firewall Transceiver | 304
Installing an SRX5400 Firewall Transceiver | 306
5
Troubleshoong Hardware
Troubleshoong the SRX5400 | 309
Troubleshoong the SRX5400 Firewall with the Junos OS CLI | 309
x

Troubleshoong the SRX5400 Firewall with Chassis and Interface Alarm Messages | 310
Chassis Component Alarm Condions on SRX5400, SRX5600, and SRX5800 Firewalls | 310
Troubleshoong the SRX5400 Firewall with Alarm Relay Contacts | 323
Troubleshoong the SRX5400 Firewall with the Cra Interface LEDs | 323
Troubleshoong the SRX5400 Firewall with the Component LEDs | 324
Troubleshoong the SRX5400 Firewall Cooling System | 324
Troubleshoong SRX5400 Firewall MPCs | 325
Troubleshoong SRX5400 Firewall MICs | 328
Troubleshoong SRX5400 Firewall SPCs | 329
Troubleshoong the SRX5400 Firewall Power System | 331
Behavior of the SRX5400, SRX5600, and SRX5800 Firewalls When the SRX5K-SCBE and
SRX5K-RE-1800X4 in a Chassis Cluster Fail | 333
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX5400 Chassis or Components | 337
Contacng Customer Support | 337
Return Procedure for the SRX5400 Firewall | 338
Lisng the SRX5400 Firewall Component Serial Numbers with the CLI | 339
Locang the SRX5400 Firewall Chassis Serial Number Label | 339
Locang the SRX5400 Firewall Power Supply Serial Number Labels | 339
Locang the SRX5400 Firewall Cra Interface Serial Number Label | 340
Informaon You Might Need to Supply to JTAC | 341
Required Tools and Parts for Packing the SRX5400 Firewall | 341
Packing the SRX5400 Firewall for Shipment | 342
Packing SRX5400 Firewall Components for Shipment | 343
7
Safety and Compliance Informaon
General Safety Guidelines and Warnings | 346
Denions of Safety Warning Levels | 347
xi

Restricted Access Area Warning | 349
Fire Safety Requirements | 350
Qualied Personnel Warning | 352
Warning Statement for Norway and Sweden | 352
Installaon Instrucons Warning | 353
Chassis and Component Liing Guidelines | 353
Ramp Warning | 354
Rack-Mounng and Cabinet-Mounng Warnings | 354
Grounded Equipment Warning | 359
Laser and LED Safety Guidelines and Warnings | 359
Radiaon from Open Port Apertures Warning | 362
Maintenance and Operaonal Safety Guidelines and Warnings | 363
General Electrical Safety Guidelines and Warnings | 369
Prevenon of Electrostac Discharge Damage | 371
AC Power Electrical Safety Guidelines | 372
AC Power Disconnecon Warning | 373
DC Power Electrical Safety Guidelines | 374
DC Power Disconnecon Warning | 381
DC Power Grounding Requirements and Warning | 382
DC Power Wiring Sequence Warning | 383
DC Power Wiring Terminaons Warning | 385
Mulple Power Supplies Disconnecon Warning | 386
TN Power Warning | 387
Acon to Take Aer an Electrical Accident | 387
SRX5400 Firewall Agency Approvals | 388
xii

SRX5400 Firewall Compliance Statements for EMC Requirements | 390
xiii

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX5400 Firewall.
Aer compleng the installaon and basic conguraon procedures covered in this guide, refer to the
Junos OS documentaon for informaon about further soware conguraon.
RELATED DOCUMENTATION
Geng Started Guide for the SRX5400 Firewall
SRX5400, SRX5600 and SRX5800 Firewall Card Reference
Safety Guide
Air Deector Kit Installaon Guide for SRX3600 and SRX5400 Firewalls
Transceivers Supported on SRX5400 Firewalls
xiv

1
CHAPTER
Overview
SRX5400 Firewall System Overview | 2
SRX5400 Chassis | 6
SRX5400 Cooling System | 20
SRX5400 Power System | 23
SRX5400 Host Subsystem | 39
SRX5400 Line Cards and Modules | 67

SRX5400 Firewall System Overview
IN THIS SECTION
SRX5400 Firewall Descripon | 2
Benets of the SRX5400 Firewall | 3
SRX5400 Firewall FRUs | 4
SRX5400 Firewall Component Redundancy | 5
SRX5400 Firewall Descripon
The SRX5400 Firewall is a high-performance, highly scalable, carrier-class security device with
mulprocessor architecture.
The SRX5400 Firewall is 5 rack units (U) tall. You can stack eight rewalls in a rack that is at least 48 U
(89.3 in. or 2.24 m) in height if it has a 1 in. cap between for increased port density per unit of oor
space.
The rewall provides four slots that you can populate with one Switch Control Board (SCB) and up to
three addional cards of the following types:
• Services Processing Cards (SPCs) provide the processing capacity to run integrated services such as
rewall, IPsec, and IDP.
NOTE: The SRX5400 Firewall supports only the SRX5K-SPC-4-15-320 (SPC2) and does not
support the SRX5K-SPC-2-10-40 (SPC1).
• Modular Port Concentrators (MPCs) provide Ethernet interfaces that connect the rewall to your
network.
NOTE: The SRX5400 Firewall only supports the SRX5K-MPC (MPC2), and does not support
older SRX5000 line I/O cards (IOCs) or Flex IOCs cards such as:
2

• SRX5K-40GE-SFP
• SRX5K-4XGE-XFP
• SRX5K-FPC-IOC
Devices congured with SRX5K-SCBE (SCB2) and SRX5K-RE-1800X4 (RE2) only support
SPC2.
Devices congured with SRX5K-SCB3 (SCB3) and RE2, or SRX5K-SCBE (SCB2) and RE2 also
support IOC3s (SRX5K-MPC3-100G10G and SRX5K-MPC3-40G10G).
NOTE: The SRX5400 rewalls congured with SRX5K-SCB (SCB1) and SRX5K-RE-13-20 (RE1)
only support Junos OS Release 12.1X46-D10 and later. Devices congured with SCB2 and RE2
only support Junos OS Release 12.1X47-D15 and later, and devices congured with SCB3 and
RE2 only support Junos OS Release 15.1X49-D10 and later.
For detailed informaon about the cards supported by the rewall, see the SRX5400, SRX5600, and
SRX5800 Firewall Card Reference at www.juniper.net/documentaon/.
Benets of the SRX5400 Firewall
• The SRX5400 Firewall is a small footprint but high-performance gateway which supports 285 Gbps
IMIX rewall throughput, 90 million concurrent sessions, and 230 Gbps IPS.
The ability to support unique security policies per zone with a compelling performance, makes the
SRX5400 an opmal soluon for the edge or data center services in large enterprise, service
provider, or mobile operator environments.
• IPS Capabilies - Juniper Networks IPS capabilies oer several unique features such as Protocol
decodes, Zero-day protecon, Acve/acve trac monitoring, and packet capture logging per rule
assure the highest level of network security.
• Content Security Content Security Capabilies - The Content Security services oered on the
SRX5000 line of rewalls include industry-leading anvirus, anspam, content ltering, and
addional content security services.
The Content Security services provide sophiscated protecon from:
•Anvirus experts against malware aacks that can lead to data breaches and lost producvity.
3

• Advanced persistent threats perpetrated through social networking aacks and the latest
phishing scams with sophiscated e-mail ltering and content blockers.
• Lost producvity and the impact of malicious URLs and extraneous or malicious content on the
network to help maintain bandwidth.
• Advanced Threat Prevenon (ATP) - Juniper ATP Cloud, a SaaS-based service, and the Juniper ATP
Appliance, an on-premises soluon:
• Protects enterprise users from a spectrum of advanced malware that exploits “zero-day”
vulnerabilies.
•Proacvely blocks malware communicaon channels.
• The Juniper ATP Appliance includes support for cloud-based e-mail services such as Oce 365
and Google Mail, and detects threats in SMB trac.
• Single pane-of-glass management with Security Director and JSA Series integraon.
SRX5400 Firewall FRUs
Field-replaceable units (FRUs) are rewall components that can be replaced at the customer site. The
rewall uses the following types of FRUs:
Table 1 on page 4 lists the FRUs of the rewall and the acon to perform to install, remove, or replace
an FRU.
Table 1: Field-Replaceable Units
Field-Replaceable Units (FRUs) Acon
Air lter You need not power o the rewall to install, remove, or replace
any of these FRUs.
Fan tray
Cra interface
AC and DC power supplies (if redundant)
Interface transceivers
4

Table 1: Field-Replaceable Units (Connued)
Field-Replaceable Units (FRUs) Acon
Roung Engine Power o the rewall to install, remove, or replace any of these
FRUs.
SCBs
SPCs
MPCs
MICs
SRX5400 Firewall Component Redundancy
The following major hardware components are redundant:
• Power supplies—The rewall is congurable with two, three, or four AC power supplies at the rear of
the chassis in slots PEM0 through PEM3 (le to right)or two DC power supplies in slots PEM0 and
PEM2.
• In the low-line (110VAC input) conguraons, two power supplies are required to support the
rewall electrical requirements. By default, the AC powered rewalls are congured with three AC
(2+1) power supplies, you can add a fourth power supply for fault tolerance. The fourth power
supply is used when one of the power supplies in the 2+1 conguraon fails.
• In the high-line (220VAC input) conguraons, two power supplies are required to support the
rewall electrical requirements. By default, the AC powered rewalls are congured with three AC
(2+1) power supplies and this conguraon supports PEM redundancy only. You can add a fourth
power supply (2+2) for both PEM and feed redundancy.
• In the DC powered rewalls two DC (1+1) power supplies are required to support the rewall
electrical requirements. The minimum power supplies requirement is one and the second power
supply provides redundancy. If one power supply fails the second power supply instantly assume
the enre electrical load without interrupon. Two power supplies provide the maximum
conguraon with full power for as long as the device is operaonal.
5

Redundant power supplies are hot-removable and hot-insertable. When you remove a power supply
from a rewall that uses a nonredundant power supply conguraon, the rewall might shut down
depending on your conguraon.
• Cooling system—The cooling system has redundant components, which are controlled by the host
subsystem. If one of the fans fails, the host subsystem increases the speed of the remaining fans to
provide sucient cooling for the rewall indenitely.
SRX5400 Chassis
IN THIS SECTION
SRX5400 Firewall Chassis | 6
SRX5400 Firewall Physical Specicaons | 9
SRX5400 Firewall Midplane Descripon | 10
SRX5400 Firewall Cra Interface Overview | 10
SRX5400 Firewall Cra Interface Alarm LEDs and Alarm Cuto/Lamp Test Buon | 12
SRX5400 Firewall Cra Interface Host Subsystem LEDs | 13
SRX5400 Firewall Cra Interface Power Supply LEDs | 14
SRX5400 Firewall Cra Interface Card OK/Fail LEDs | 14
SRX5400 Firewall Cra Interface Fan LEDs | 15
SRX5400 Firewall Cra Interface Online/Oine Buons | 15
SRX5400 Firewall Cra Interface Alarm Relay Contacts | 18
SRX5400 Firewall Chassis
The rewall chassis is a rigid sheet metal structure that houses all the other components (see Figure 1 on
page 7, Figure 2 on page 8, and Figure 3 on page 8). The chassis measures 8.71 in. (22.1 cm)
high, 17.45 in. (44.3 cm) wide, and 24.5 in. (62.2 cm) deep (from the front to the rear of the chassis). The
chassis installs in standard 800-mm (or larger) enclosed cabinets, 19-in. equipment racks, or telco open-
frame racks. Up to ve rewalls can be installed in one standard (48 U) rack if the rack can handle their
combined weight, which can be greater than 1100 lb (500 kg). See "SRX5400 Firewall Physical
Specicaons" on page 9 for physical specicaons for the SRX5400 Firewall.
6