Juniper SRX-4600 Installation instructions

SRX4600 Services Gateway Hardware
Guide
Published
2020-02-28

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks
are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
SRX4600 Services Gateway Hardware Guide
Copyright © 2020 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)
Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement
(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you
agree to the terms and conditions of that EULA.
ii

Table of Contents
About the Documentation | xi
Documentation and Release Notes | xi
Using the Examples in This Manual | xi
Merging a Full Example | xii
Merging a Snippet | xiii
Documentation Conventions | xiii
Documentation Feedback | xvi
Requesting Technical Support | xvi
Self-Help Online Tools and Resources | xvii
Creating a Service Request with JTAC | xvii
Overview
1
SRX4600 Services Gateway System Overview | 21
SRX4600 Services Gateway Overview | 21
Field-Replaceable Units in an SRX4600 Services Gateway | 22
Benefits of the SRX4600 Services Gateway | 23
Understanding the SRX4600 Services Gateway Chassis | 23
Chassis Physical Specifications | 24
Chassis Front Panel | 24
Chassis and Component Status LEDs | 26
Interface Ports LEDs | 27
HA Port LEDs | 27
Management Port LEDs | 28
Network Port LEDs | 29
Port and Interface Numbering | 29
Chassis Rear Panel | 31
Understanding the SRX4600 Services Gateway Cooling System and Air Flow | 32
Fan Module | 32
Fan Module LEDs | 33
iii

Airflow Through Chassis | 34
SRX4600 Power System | 35
Understanding the SRX4600 Services Gateway Power Supply | 36
AC Power Supply | 36
DC Power Supply | 38
SRX4600 Services Gateway AC Power Supply Specifications | 39
SRX4600 Services Gateway AC Power Cord Specifications | 40
SRX4600 Services Gateway DC Power Supply Specifications | 41
Site Planning, Preparation, and Specifications
2
Site Preparation Checklist for the SRX4600 Services Gateway | 45
SRX4600 Site Guidelines and Requirements | 46
SRX4600 Services Gateway Environmental Specifications | 47
General Site Guidelines | 47
Site Electrical Wiring Guidelines | 48
Clearance Requirements for Airflow and Hardware Maintenance for SRX4600 Services
Gateways | 49
SRX4600 Rack and Cabinet Requirements | 50
SRX4600 Services Gateway Rack Requirements | 50
Cabinet Requirements | 51
SRX4600 Alarm and Management Cable Specifications and Pinouts | 53
Management Cable Specifications | 53
RJ-45 Management Port Connector Pinout Information | 54
Console Port Connector Pinout Information | 54
RJ-45 to DB-9 Serial Port Adapter Pinout Information | 55
RJ-45 Port, QSFP+ Port, QSFP28 Port, SFP+ Port, and SFP Port Connector Pinout
Information | 56
iv

Initial Installation and Configuration
3
SRX4600 Services Gateway Installation Overview | 65
Unpacking the SRX4600 | 65
Unpacking the SRX4600 Services Gateway | 66
Verifying Parts Received with the SRX4600 Services Gateway | 66
Mounting an SRX4600 Services Gateway on Four Posts of a Rack or Cabinet | 67
Connecting the SRX4600 to External Devices | 71
Connecting a Device to a Management Console Using an RJ-45 Connector | 71
Connecting a Device to a Network for Out-of-Band Management | 72
Connecting the SRX4600 to Power | 73
Connecting Earth Ground to an SRX4600 Services Gateway | 74
Connecting AC Power to an SRX4600 Services Gateway | 75
Connecting DC Power to an SRX4600 Services Gateway | 77
Configuring the SRX4600 Services Gateway | 80
Maintaining Components
4
Routine Maintenance Procedures for the SRX4600 Services Gateway | 85
Maintaining the SRX4600 Cooling System | 85
Maintaining the Fan Modules on the SRX4600 Services Gateway | 85
Replacing the SRX4600 Services Gateway Fan Module | 87
Removing the SRX4600 Services Gateway Fan Module | 87
Installing the SRX4600 Services Gateway Fan Module | 88
Maintaining the SRX4600 Power System | 90
Maintaining SRX4600 Services Gateway Power Supplies | 90
Replacing an SRX4600 Services Gateway AC Power Supply | 91
Removing the SRX4600 Services Gateway AC Power Supply | 92
Installing the SRX4600 Services Gateway AC Power Supply | 93
Replacing an SRX4600 Services Gateway DC Power Supply | 95
Removing the SRX4600 Services Gateway DC Power Supply | 95
Installing the SRX4600 Services Gateway DC Power Supply | 97
v

Maintaining the SRX4600 SSD | 100
Replacing an SRX4600 Services Gateway SSD | 101
Removing an SSD from an SRX4600 Services Gateway | 101
Installing an SSD in an SRX4600 Services Gateway | 102
Creating a Bootable USB Flash Drive to Install Junos OS on an SRX4600 Services Gateway | 103
Creating a Bootable USB Flash-Drive | 103
Installing Junos OS on SRX4600 Services Gateway Using the Bootable USB
Flash-Drive | 108
Copying Files From or To an SRX4600 Services Gateway Using an USB Flash-Drive | 109
Copying Files From an SRX4600 Services Gateway Using an USB Flash-Drive | 109
Copying Files To an SRX4600 Services Gateway Using an USB Flash-Drive | 111
Maintaining the SRX4600 Cables and Connectors | 112
Maintaining SRX4600 Services Gateway Network Cables | 113
Maintaining Fiber-Optic Cables | 113
Replacing Fibre Optic Cable on an SRX4600 Services Gateway | 114
Disconnecting a Fiber-Optic Cable | 114
Connecting a Fiber-Optic Cable | 115
Replacing an SFP+ Transceiver on an SRX4600 Services Gateway | 116
Removing an SFP+ Transceiver | 117
Installing an SFP+ Transceiver | 118
Replacing a QSFP28 Transceiver on an SRX4600 Services Gateway | 119
Removing a QSFP28 Transceiver | 119
Installing a QSFP28 Transceiver | 121
Troubleshooting Hardware
5
Troubleshooting the SRX4600 | 127
SRX4600 Services Gateway Troubleshooting Resources | 127
Chassis Component Alarm Conditions on an SRX4600 Services Gateway | 127
Troubleshooting the SRX4600 Services Gateway Cooling System | 132
Troubleshooting the SRX4600 Services Gateway Power System | 133
Using the RESET Button on the SRX4600 Services Gateway | 134
vi

Contacting Customer Support and Returning the Chassis or Components
6
Returning the SRX4600 Chassis or Components | 139
Contacting Customer Support | 139
Return Procedure for the SRX4600 Services Gateway or Component to Juniper Networks | 140
Locating the Serial Number on the SRX4600 Services Gateway or Component | 141
Listing the SRX4600 Services Gateway Component Details with the CLI | 141
Locating the SRX4600 Services Gateway Chassis Serial Number ID Label | 142
Locating the Serial Number ID Labels on SRX4600 Services Gateway Power Supplies | 143
Locating the Serial Number ID Labels on SRX4600 Services Gateway Fan Modules | 143
Locating the Serial Number ID Labels on SRX4600 Services Gateway SSDs | 144
Packing an SRX4600 Services Gateway or Component for Shipping | 145
Packing the SRX4600 Services Gateway for Shipment | 145
Packing the SRX4600 Services Gateway Components for Shipment | 146
Safety and Compliance Information
7
General Safety Guidelines and Warnings | 149
Definitions of Safety Warning Levels | 150
Restricted Access Area Warning | 154
Fire Safety Requirements | 156
Fire Suppression | 156
Fire Suppression Equipment | 157
Qualified Personnel Warning | 158
Warning Statement for Norway and Sweden | 158
Installation Instructions Warning | 159
Chassis and Component Lifting Guidelines | 159
Ramp Warning | 160
Rack-Mounting and Cabinet-Mounting Warnings | 160
vii

Grounded Equipment Warning | 166
Laser and LED Safety Guidelines and Warnings | 166
General Laser Safety Guidelines | 167
Class 1 Laser Product Warning | 168
Class 1 LED Product Warning | 169
Laser Beam Warning | 170
Radiation from Open Port Apertures Warning | 171
Maintenance and Operational Safety Guidelines and Warnings | 172
Battery Handling Warning | 173
Jewelry Removal Warning | 174
Lightning Activity Warning | 176
Operating Temperature Warning | 177
Product Disposal Warning | 179
General Electrical Safety Guidelines and Warnings | 180
Prevention of Electrostatic Discharge Damage | 181
AC Power Electrical Safety Guidelines | 182
AC Power Disconnection Warning | 184
DC Power Electrical Safety Guidelines | 185
DC Power Electrical Safety Guidelines | 185
DC Power Disconnection Warning | 187
DC Power Grounding Requirements and Warning | 189
DC Power Wiring Sequence Warning | 191
DC Power Wiring Terminations Warning | 194
DC Power Disconnection Warning | 197
DC Power Grounding Requirements and Warning | 199
DC Power Wiring Sequence Warning | 201
DC Power Wiring Terminations Warning | 204
Multiple Power Supplies Disconnection Warning | 207
TN Power Warning | 208
viii

Action to Take After an Electrical Accident | 208
Agency Approvals | 209
Acoustic Noise Compliance Statements | 210
EMC Requirements | 210
Canada | 210
European Community | 210
Israel | 211
Japan | 211
United States | 211
Statements of Volatility for Juniper Network Devices | 212
ix

About the Documentation
IN THIS SECTION
Documentation and Release Notes | xi
Using the Examples in This Manual | xi
Documentation Conventions | xiii
Documentation Feedback | xvi
Requesting Technical Support | xvi
Use this guide to install hardware and perform initial software configuration, routine maintenance, and
troubleshooting for the SRX4600 Services Gateway.
After completing the installation and basic configuration procedures covered in this guide, refer to the
Junos OS documentation for information about further software configuration.
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product
documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the
product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.
These books go beyond the technical documentation to explore the nuances of network architecture,
deployment, and administration. The current list can be viewed at https://www.juniper.net/books.
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load merge relative
command. These commands cause the software to merge the incoming configuration into the current
candidate configuration. The example does not become active until you commit the candidate configuration.
xi

If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example
isafull example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In
this case, use the load merge relative command. These procedures are described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following configuration to a file and name the file ex-script.conf. Copy the
ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
2. Merge the contents of the file into your routing platform configuration by issuing the load merge
configuration mode command:
[edit]
user@host# load merge /var/tmp/ex-script.conf
load complete
xii

Merging a Snippet
To merge a snippet, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the
ex-script-snippet.conf file to the /var/tmp directory on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode
command:
[edit]
user@host# edit system scripts
[edit system scripts]
3. Merge the contents of the file into your routing platform configuration by issuing the load merge
relative configuration mode command:
[edit system scripts]
user@host# load merge relative /var/tmp/ex-script-snippet.conf
load complete
For more information about the load command, see CLI Explorer.
Documentation Conventions
Table 1 on page xiv defines notice icons used in this guide.
xiii

Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware
damage.
Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xiv defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type
the configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on
the terminal screen.
Fixed-width text like this
•A policy term is a named structure
that defines match conditions and
actions.
•Junos OS CLI User Guide
•RFC 1997, BGP Communities
Attribute
•Introduces or emphasizes important
new terms.
•Identifies guide names.
•Identifies RFC and Internet draft
titles.
Italic text like this
xiv

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
Configure the machine’s domain
name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for
which you substitute a value) in
commands or configuration
statements.
Italic text like this
•To configure a stub area, include
the stub statement at the [edit
protocols ospf area area-id]
hierarchy level.
•The console port is labeled
CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy
levels; or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or
variables.
< > (angle brackets)
broadcast | multicast
(string1 |string2 |string3)
Indicates a choice between the
mutually exclusive keywords or
variables on either side of the symbol.
The set of choices is often enclosed
in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS
only
Indicates a comment specified on the
same line as the configuration
statement to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
xv

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
•In the Logical Interfaces box, select
All Interfaces.
•To cancel the configuration, click
Cancel.
Represents graphical user interface
(GUI) items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of
menu selections.
>(bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You can use either
of the following methods:
•Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper
Networks TechLibrary site, and do one of the following:
•Click the thumbs-up icon if the information on the page was helpful to you.
•Click the thumbs-down icon if the information on the page was not helpful to you or if you have
suggestions for improvement, and use the pop-up form to provide feedback.
•E-mail—Send your comments to [email protected]. Include the document or topic name,
URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an active Juniper Care or Partner Support Services support contract, or are
xvi

covered under warranty, and need post-sales technical support, you can access our tools and resources
online or open a case with JTAC.
•JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User
Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.
•JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,
365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called
the Customer Support Center (CSC) that provides you with the following features:
•Find CSC offerings: https://www.juniper.net/customers/support/
•Search for known bugs: https://prsearch.juniper.net/
•Find product documentation: https://www.juniper.net/documentation/
•Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/
•Download the latest versions of software and review release notes:
https://www.juniper.net/customers/csc/software/
•Search technical bulletins for relevant hardware and software notifications:
https://kb.juniper.net/InfoCenter/
•Join and participate in the Juniper Networks Community Forum:
https://www.juniper.net/company/communities/
•Create a service request online: https://myjuniper.juniper.net
To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:
https://entitlementsearch.juniper.net/entitlementsearch/
Creating a Service Request with JTAC
You can create a service request with JTAC on the Web or by telephone.
•Visit https://myjuniper.juniper.net.
•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
https://support.juniper.net/support/requesting-support/.
xvii

1
CHAPTER
Overview
SRX4600 Services Gateway System Overview | 21
Understanding the SRX4600 Services Gateway Chassis | 23
Understanding the SRX4600 Services Gateway Cooling System and Air Flow | 32
SRX4600 Power System | 35

SRX4600 Services Gateway System Overview
IN THIS SECTION
SRX4600 Services Gateway Overview | 21
Field-Replaceable Units in an SRX4600 Services Gateway | 22
Benefits of the SRX4600 Services Gateway | 23
SRX4600 Services Gateway Overview
The Juniper Networks SRX4600 Services Gateway is a next-generation, high-performance, and scalable
security services device. The services gateway supports 75-Gbps Internet mix (IMIX) throughput, is suited
for large enterprises and small to medium data centers.
The SRX4600 Services Gateway provides industry-leading next-generation firewall capabilities (AppID,
UserFW, IPS, UTM, and so on) and advanced threat detection and mitigation capabilities features such as
SecIntel and SkyATP.
The Services Gateway features two high-performance Intel Xeon processors with 14 cores per processor.
Figure 1: SRX4600 Services Gateway
g009503
The chassis is a 1 U high device designed for rack installation. The services gateway is available in both
AC-powered and DC-powered models. See Figure 2 on page 22 and Figure 3 on page 22:
•SRX4600 (AC) — SRX4600 Services Gateway with dual AC power supplies
21

Figure 2: SRX4600 Services Gateway AC Model
g009504
•SRX4600 (DC) — SRX4600 Services Gateway with dual DC power supplies
Figure 3: SRX4600 Services Gateway DC Model
g009505
The SRX4600 Services Gateway is shipped with two field-replaceable 1-TB solid-state drives (SSDs). The
usable memory on the 1-TB SSD is 960 GB.
The services gateway runs the Junos Operating System (Junos OS) and can be managed using the Junos
OS CLI, Junos Space, and J-Web.
Field-Replaceable Units in an SRX4600 Services Gateway
Field-replaceable units (FRUs) are components that you can replace at your site. The FRUs in an SRX4600
Services Gateway are:
•Solid-state drives (SSDs)
•Fan modules
•Power supplies
•SFP+ transceivers
•QSFP28 transceivers
The power supplies, fan modules, and transceivers can be removed and replaced without powering off
the services gateway or disrupting services gateway functions.
22