Juniper SRX5400 Installation instructions

SRX5400 Firewall Hardware Guide
Published
2023-07-10

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX5400 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | xiv
1
Overview
SRX5400 Firewall System Overview | 2
SRX5400 Firewall Descripon | 2
Benets of the SRX5400 Firewall | 3
SRX5400 Firewall FRUs | 4
SRX5400 Firewall Component Redundancy | 5
SRX5400 Chassis | 6
SRX5400 Firewall Chassis | 6
SRX5400 Firewall Physical Specicaons | 9
SRX5400 Firewall Midplane Descripon | 10
SRX5400 Firewall Cra Interface Overview | 10
SRX5400 Firewall Cra Interface Alarm LEDs and Alarm Cuto/Lamp Test Buon | 12
SRX5400 Firewall Cra Interface Host Subsystem LEDs | 13
SRX5400 Firewall Cra Interface Power Supply LEDs | 14
SRX5400 Firewall Cra Interface Card OK/Fail LEDs | 14
SRX5400 Firewall Cra Interface Fan LEDs | 15
SRX5400 Firewall Cra Interface Online/Oine Buons | 15
SRX5400 Firewall Cra Interface Alarm Relay Contacts | 18
SRX5400 Cooling System | 20
SRX5400 Power System | 23
SRX5400 Firewall Power System Overview | 23
SRX5400 Firewall AC Power Supply | 25
SRX5400 Firewall AC Power Supply Specicaons | 26
iii

SRX5400 Firewall AC Power Supply LEDs | 27
AC Power Cord Specicaons for the SRX5400 Firewall | 28
AC Power Circuit Breaker Requirements for the SRX5400 Firewall | 31
SRX5400 Firewall DC Power Supply | 31
SRX5400 Firewall DC Power Supply Specicaons | 32
SRX5400 Firewall DC Power Supply LEDs | 33
DC Power Cable Specicaons for the SRX5400 Firewall | 33
DC Power Cable Lug Specicaons for the SRX5400 Firewall | 34
DC Power Circuit Breaker Requirements for the SRX5400 Firewall | 35
DC Power Source Cabling for the SRX5400 Firewall | 35
SRX5400 Firewall Chassis Grounding Point Specicaons | 36
SRX5400 Firewall Grounding-Cable Specicaon | 37
SRX5400 Firewall Grounding-Cable Lug Specicaon | 38
SRX5400 Host Subsystem | 39
SRX5400 Firewall Host Subsystem Overview | 39
Switch Control Board SRX5K-SCB Overview | 40
Switch Control Board SRX5K-SCB Specicaons | 41
Switch Control Board SRX5K-SCBE Overview | 44
Switch Control Board SRX5K-SCBE Specicaons | 46
Switch Control Board SRX5K-SCB3 Overview | 49
Switch Control Board SRX5K-SCB3 Specicaons | 50
Roung Engine SRX5K-RE-13-20 Overview | 52
Roung Engine SRX5K-RE-13-20 Specicaons | 53
Roung Engine SRX5K-RE-1800X4 Overview | 57
Roung Engine SRX5K-RE-1800X4 Specicaons | 58
Roung Engine SRX5K-RE3-128G Specicaons | 61
iv

SRX5400 Line Cards and Modules | 67
SRX5400, SRX5600, and SRX5800 Firewall Card Overview | 68
Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls | 69
SRX5400 Firewall Card Cage and Slots | 74
SRX5400 Firewall Services Processing Card Overview | 74
Services Processing Card SRX5K-SPC-2-10-40 Specicaons | 75
Services Processing Card SRX5K-SPC-4-15-320 Specicaons | 81
Services Processing Card SRX5K-SPC3 Specicaons | 87
SRX5400 Firewall MPC and MIC Overview | 91
Modular Port Concentrator (SRX5K-MPC) Specicaons | 92
SRX5K-MPC3-40G10G Specicaons | 95
SRX5K-MPC3-100G10G Specicaons | 99
MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 103
MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 110
MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 114
MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 116
I/O Card SRX5K-40GE-SFP Specicaons | 118
I/O Card SRX5K-4XGE-XFP Specicaons | 121
SRX5K-IOC4-10G Specicaons | 124
SRX5K-IOC4-MRAT Specicaons | 128
Flex I/O Card (SRX5K-FPC-IOC) Specicaons | 132
Flex I/O Card Port Module SRX-IOC-16GE-SFP Specicaons | 134
Flex I/O Card Port Module SRX-IOC-16GE-TX Specicaons | 136
Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specicaons | 139
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX5400 Firewall | 143
v

SRX5400 Site Guidelines and Requirements | 144
SRX5400 Firewall Environmental Specicaons | 144
General Site Guidelines | 145
Site Electrical Wiring Guidelines | 146
Clearance Requirements for SRX5400 Firewall Airow and Hardware Maintenance | 147
SRX5400 Rack and Cabinet Requirements | 148
SRX5400 Firewall Rack Size and Strength Requirements | 148
Spacing of Rack Mounng Bracket Holes for the SRX5400 Firewall | 149
Connecon to Building Structure for the SRX5400 Firewall Rack | 149
SRX5400 Firewall Cabinet Size and Clearance Requirements | 149
SRX5400 Firewall Cabinet Airow Requirements | 149
Calculang Power Requirements for the SRX5400 Firewall | 150
SRX5400 Network Cable and Transceiver Planning | 156
Roung Engine Interface Cable and Wire Specicaons for the SRX5400 Firewall | 156
Signal Loss in Mulmode and Single-Mode Fiber-Opc Cable for the SRX5400 Firewall | 157
Aenuaon and Dispersion in Fiber-Opc Cable for the SRX5400 Firewall | 157
Calculang Power Budget for Fiber-Opc Cable for the SRX5400 Firewall | 158
Calculang Power Margin for Fiber-Opc Cable for the SRX5400 Firewall | 159
SRX5400 Alarm and Management Cable Specicaons and Pinouts | 161
Alarm Relay Contact Wire Specicaons for the SRX5400 Firewall | 161
Console Port Cable and Wire Specicaons for the SRX5400 Firewall | 161
RJ-45 Connector Pinouts for the SRX5400 Firewall Roung Engine Ethernet Port | 162
RJ-45 Connector Pinouts for the SRX5400 Firewall Roung Engine Auxiliary and Console
Ports | 163
3
Inial Installaon and Conguraon
SRX5400 Installaon Overview | 166
Unpacking the SRX5400 | 167
vi

Tools and Parts Required to Unpack the SRX5400 Firewall | 167
Unpacking the SRX5400 Firewall | 167
Verifying the SRX5400 Firewall Parts Received | 169
Installing the SRX5400 Mounng Hardware | 172
Tools and Parts Required to Install the SRX5400 Firewall Mounng Hardware for a Rack or
Cabinet | 172
Installing the SRX5400 Firewall Mounng Hardware for a Rack or Cabinet | 172
Moving the Mounng Brackets for Center-Mounng the SRX5400 Firewall | 175
Installing the SRX5400 Using a Mechanical Li | 176
Tools Required to Install the SRX5400 Firewall with a Mechanical Li | 176
Installing the SRX5400 Firewall Using a Mechanical Li | 176
Installing the SRX5400 Without a Mechanical Li | 178
Overview of Installing the SRX5400 Firewall Without a Mechanical Li | 179
Tools Required to Install the SRX5400 Firewall Without a Mechanical Li | 179
Removing Components from the SRX5400 Chassis Before Installing It Without a Li | 179
Removing the Power Supplies Before Installing the SRX5400 Firewall Without a Li | 180
Removing the Fan Tray Before Installing an SRX5400 Firewall Without a Li | 181
Removing Cards Before Installing an SRX5400 Firewall Without a Li | 182
Installing the SRX5400 Firewall Chassis in the Rack Manually | 184
Reinstalling Components in the SRX5400 Firewall Chassis Aer Installing It Without a Li | 186
Reinstalling Power Supplies Aer Installing the SRX5400 Firewall Without a Li | 186
Reinstalling the Fan Tray Aer Installing the SRX5400 Firewall Without a Li | 187
Reinstalling Cards Aer Installing the SRX5400 Firewall Without a Li | 188
Connecng the SRX5400 to External Devices | 189
Tools and Parts Required for SRX5400 Firewall Connecons | 190
Connecng the SRX5400 Firewall to a Management Console or an Auxiliary Device | 190
Connecng the SRX5400 Firewall to a Network for Out-of-Band Management | 191
Connecng an SRX5400 Firewall to an External Alarm-Reporng Device | 192
vii

Connecng Network Cables to SRX5400 Firewall MICs | 193
Connecng the SRX5400 to Power | 194
Tools and Parts Required for SRX5400 Firewall Grounding and Power Connecons | 195
Grounding the SRX5400 Firewall | 195
Connecng Power to an AC-Powered SRX5400 Firewall | 197
Powering On an AC-Powered SRX5400 Firewall | 198
Connecng Power to a DC-Powered SRX5400 Firewall | 199
Powering On a DC-Powered SRX5400 Firewall | 202
Powering O the SRX5400 Firewall | 204
Performing the Inial Soware Conguraon for the SRX5400 | 205
SRX5400 Firewall Soware Conguraon Overview | 205
Inially Conguring the SRX5400 Firewall | 206
Performing Inial Soware Conguraon Using J-Web | 211
Conguring Root Authencaon and the Management Interface from the CLI | 211
Conguring Interfaces, Zones, and Policies with J-Web | 213
4
Maintaining Components
Maintaining the SRX5400 Chassis | 217
Roune Maintenance Procedures for the SRX5400 Firewall | 217
Replacing the SRX5400 Firewall Cra Interface | 218
Disconnecng the Alarm Relay Wires from the SRX5400 Firewall Cra Interface | 218
Removing the SRX5400 Firewall Cra Interface | 218
Installing the SRX5400 Firewall Cra Interface | 219
Connecng the Alarm Relay Wires to the SRX5400 Firewall Cra Interface | 220
Maintaining the SRX5400 Cooling System | 221
Maintaining the Fan Tray on the SRX5400 Firewall | 221
Replacing the SRX5400 Firewall Fan Tray | 222
Removing the SRX5400 Firewall Fan Tray | 222
Installing the SRX5400 Firewall Fan Tray | 223
Maintaining the Air Filter on the SRX5400 Firewall | 224
viii

Replacing the SRX5400 Firewall Air Filter | 225
Removing the SRX5400 Firewall Air Filter | 225
Installing the SRX5400 Firewall Air Filter | 226
Maintaining the SRX5400 Power System | 227
Maintaining SRX5400 Firewall Power Supplies | 228
Replacing an SRX5400 Firewall AC Power Supply | 229
Removing an SRX5400 Firewall AC Power Supply | 229
Installing an SRX5400 Firewall AC Power Supply | 231
Replacing an SRX5400 Firewall AC Power Supply Cord | 232
Disconnecng an SRX5400 Firewall AC Power Supply Cord | 232
Connecng an SRX5400 Firewall AC Power Supply Cord | 232
Replacing an SRX5400 Firewall DC Power Supply | 233
Removing an SRX5400 Firewall DC Power Supply | 233
Installing an SRX5400 Firewall DC Power Supply | 234
Replacing an SRX5400 Firewall DC Power Supply Cable | 237
Disconnecng an SRX5400 Firewall DC Power Supply Cable | 237
Connecng an SRX5400 Firewall DC Power Supply Cable | 238
Maintaining the SRX5400 Host Subsystem | 239
Maintaining the SRX5400 Firewall Host Subsystem | 240
Taking the SRX5400 Firewall Host Subsystem Oine | 242
Operang and Posioning the SRX5400 Firewall SCB Ejectors | 242
Replacing the SRX5400 Firewall SCB | 243
Removing the SRX5400 Firewall SCB | 243
Installing an SRX5400 Firewall SCB | 244
Replacing the SRX5400 Firewall Roung Engine | 246
Removing the SRX5400 Firewall Roung Engine | 247
Installing the SRX5400 Firewall Roung Engine | 247
Low Impact Hardware Upgrade for SCB3 and IOC3 | 250
In-Service Hardware Upgrade for SRX5K-RE-1800X4 and SRX5K-SCBE or SRX5K-RE-1800X4
and SRX5K-SCB3 in a Chassis Cluster | 266
ix

Maintaining the SRX5400 Line Cards and Modules | 271
Holding an SRX5400 Firewall Card | 271
Storing an SRX5400 Firewall Card | 274
Replacing SRX5400 Firewall MPCs | 275
Removing an SRX5400 Firewall MPC | 275
Installing an SRX5400 Firewall MPC | 277
Replacing SRX5400 Firewall MICs | 280
Removing an SRX5400 Firewall MIC | 281
Installing an SRX5400 Firewall MIC | 282
Installing an MPC and MICs in an Operang SRX5400 Firewall Chassis Cluster | 284
Maintaining SPCs on the SRX5400 Firewall | 287
Replacing SRX5400 Firewall SPCs | 289
Removing an SRX5400 Firewall SPC | 289
Installing an SRX5400 Firewall SPC | 291
Replacing SPCs in an Operang SRX5400, SRX5600, or SRX5800 Firewalls Chassis Cluster | 293
In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster | 296
Maintaining the SRX5400 Cables and Connectors | 299
Maintaining SRX5400 Firewall Network Cables | 299
Replacing the Management Ethernet Cable on the SRX5400 Firewall | 300
Replacing the SRX5400 Firewall Console or Auxiliary Cable | 301
Replacing an SRX5400 Firewall Network Cable | 302
Removing an SRX5400 Firewall Network Cable | 302
Installing an SRX5400 Firewall Network Cable | 303
Replacing SRX5400 Firewall Transceivers | 304
Removing an SRX5400 Firewall Transceiver | 304
Installing an SRX5400 Firewall Transceiver | 306
5
Troubleshoong Hardware
Troubleshoong the SRX5400 | 309
Troubleshoong the SRX5400 Firewall with the Junos OS CLI | 309
x