Juniper SRX-4600 User manual

Quick Start
SRX4600 Quick Start
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 5
step-3-keep-going | 8
Step 1: Begin
IN THIS SECTION
Mount the SRX4600 | 2
Connect the SRX4600 to Ground | 3
Connect Power to the SRX4600 | 3
To mount, connect power to, and perform inial conguraon on the Juniper Networks® SRX4600 Firewall, you need:
•Electrostac discharge (ESD) grounding strap (not provided)
• Four-post rack-mounng kit (provided)
• Twelve screws to secure the mounng rails and mounng blades to the chassis (provided)
• Eight screws to secure the chassis to the rack (not provided)
• Screwdriver appropriate for your rack-mounng screws (not provided)

• Two AC power cords with plugs appropriate for your geographical locaon (provided)
• Management host, such as a PC or laptop, with a serial port (not provided)
• A grounding cable (minimum 14 AWG (2 mm²), minimum 90°C wire), a grounding lug (Panduit LCD10-10A-L or
equivalent) (not provided).
• RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided)
NOTE: We no longer include a DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable
as part of the device package. If you require a console cable, you can order it separately with the part number
JNP-CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).
Mount the SRX4600
You can mount an SRX4600 Firewall in a 19-inch four-post rack conguraon. An AC device weighs approximately 38
lb (17.23 kg) and a DC device weighs approximately 40 lb (18.14 kg). Two persons are required for mounng the device.
To mount the rewall:
1. Aach the ESD grounding strap to your bare wrist and to a site ESD point.
NOTE: If you are mounng mulple units in the rack, mount the heaviest unit at the boom and mount the
others from boom to top in order of decreasing weight.
2. Place the rack in its permanent locaon, allowing adequate clearance for airow and maintenance, and secure it to
the building structure.
3. Aach the front-mounng brackets to the side mounng rails by using the Phillips 4-40 at-head mounng screws.
4. Align the holes in the side mounng rails with the holes on the side of the chassis and aach the side mounng rails
to the chassis by using the mounng screws.
5. Have one person grasp both sides of the device, li it, and posion it in the rack so that the front bracket is aligned
with the rack holes and the second person secure the front of the device to the rack by using four mounng screws.
6. Have the second person use the mounng screws (and cage nuts and washers if your rack requires them) to screw
the mounng bracket to the rack.
2

7. Connue to support the device and slide the rear mounng blades into the channel of the side mounng rails and
securing the blades to the rack. Use the four mounng screws (cage nuts and washers if the rack requires) to aach
each blade to the rack.
8. Aach a grounding cable to earth ground and then aach it to the chassis grounding points.
Connect the SRX4600 to Ground
To connect the Firefall to the ground:
1. Aach an ESD grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis.
2. Connect one end of the grounding cable to a proper earth ground, such as the rack in which the services gateway is
mounted.
3. Place the grounding lug aached to the grounding cable over the protecve earthing terminal on the protecve
earthing terminal bracket.
4. Secure the grounding lug to the protecve earthing terminal with the washers and screws.
5. Dress the grounding cable and ensure that it does not touch or block access to other device components and that it
does not drape where people could trip over it.
Connect Power to the SRX4600
IN THIS SECTION
Connect Power to an AC-powered SRX4600 | 4
Connect Power to a DC-powered SRX4600 | 4
3

NOTE: Check if the power supplies AC or DC are fully inserted into the chassis.
Connect Power to an AC-powered SRX4600
To connect power to an AC-powered Firewall:
NOTE: An AC-powered device gets addional grounding when you connect the power supply in the device to a
grounded AC power outlet by using the power cord.
1. Insert the coupler end of the power cord into the AC power cord inlet on the AC power supply faceplate. Push the
power cord retainer onto the power cord.
2. Insert the power cord plug into an AC power source outlet:
a. If the AC power source outlet has a power switch, set it to on (|) posion and the Firewall will power on.
b. If there is no power switch on the AC power source outlet, the services gateway will power on instantly.
3. Verify that the OK/FAIL LED is lit green and on steadily.
Connect Power to a DC-powered SRX4600
To connect power to a DC-powered Firewall:
WARNING: Before performing the following procedure, ensure that there is no power in the DC circuit.
To ensure that all power is cut o, locate the circuit breaker on the panel board that services the DC
circuit, switch the circuit breaker to the o (0) posion, and tape the switch handle of the circuit
breaker in the o posion.
1. Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become acve
while you are connecng DC power.
2. Verify that the DC power cables are correctly labeled before connecng them to the power supply. In a typical
power distribuon scheme where the return is connected to chassis ground at the baery plant, you can use a
mulmeter to verify the resistance of the –48V and RTN DC cables to chassis ground:
a. The cable with very high resistance (indicang an open circuit) to chassis ground is negave (–) and is installed on
the –48V (input) DC power input terminal.
4

b. The cable with very low resistance (indicang a closed circuit) to chassis ground is posive (+) and is installed on
the RTN (return) DC power input terminal.
3. Remove the protecve cover from the DC power input terminal block. Save this cover for future use.
4. Remove the M5 K-nuts from each DC power input terminal.
5. Aach DC terminal rings (TYCO 2-36161-2 Terminal Ring, number 10, not provided) to the ends of the DC power
cables. Crimp ghtly.
6. Insert the DC terminal rings into the DC power input terminals and secure the DC terminal rings with M5 K-nuts. Do
not overghten.
7. Replace the protecve cover over the input terminal block.
8. Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit, and
switch the circuit breaker to the ON (|) posion.
9. Verify that the OK/FAIL LED is lit green and on steadily.
Step 2: Up and Running
IN THIS SECTION
Set Parameter Values | 5
Perform the Inial Conguraon | 6
Set Parameter Values
You must perform the inial conguraon of the device through the console port. Before you begin, set the following
parameter values in the console server or the management host:
• Baud Rate—9600
• Flow Control—None
• Data—8
5

• Parity—None
• Stop Bits—1
• DCD State—Disregard
Perform the Inial Conguraon
To connect and congure the Firewall from the console:
1. Connect the console port (CON), located on the front panel of the SRX4600 to a laptop or PC by using the
provided RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided).
2. Log in as root. There is no password. If the soware booted before you connected to the console port, you might
need to press the Enter key for the prompt to appear.
login: root
3. Start the CLI.
root# cli
root@>
4. Enter conguraon mode.
root@> configure
5. Set the root authencaon password by entering either a cleartext password, an encrypted password, or an SSH
public key string (DSA or RSA):
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
6. Congure an administrator account on the device. When prompted, enter the password for the administrator
account:
[edit]
root@# set system login user admin class super-user authentication plain-text-password
6

New password: password
Retype new password: password
7. Commit the conguraon to acvate it on the device:
[edit]
root@# commit
8. Log in as the administrave user you congured in Step 6.
9. (Oponal) Congure the name of the device. If the name includes spaces, enclose the name in quotaon marks (“ ”):
[edit]
admin@# set system host-name host-name
10. Congure the IP address and prex length for the management interface on the Firewall.
[edit]
admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Congure the default route.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
12. Check the conguraon for validity:
[edit]
admin@# commit check
13. Commit the conguraon to acvate it on the device:
[edit]
admin@# commit
7

step-3-keep-going
IN THIS SECTION
What's Next | 8
General Informaon | 9
Learn With Videos | 9
Congratulaons! You’ve completed the inial steps to get your ACX7024 up and running. Let’s keep going and learn
more about what you can do with the ACX7024.
What's Next
Now that you've done the inial conguraon, here are some things you might want to do next.
If you want to Then
Congure the ACX7024 with the Junos OS Evolved CLI Start with the Day One+ for Junos OS Evolved guide
Install and upgrade Junos OS Evolved and related soware See Junos OS Evolved Soware Installaon and Upgrade Guide
Acvate, and manage your soware licenses to unlock
addional features for your ACX7024 router
See Acvate Junos OS Licenses
Congure, monitor, and troubleshoot various interfaces on the
ACX7024
See Ethernet Interfaces User Guide for Roung Devices
Congure essenal user access and authencaon features for
your system
See User Access and Authencaon Administraon Guide for
Junos OS Evolved
8

General Informaon
If you want to Then
See all documentaon available for the SRX4600 See the SRX4600 Documentaon in the Juniper Networks
TechLibrary
Stay up-to-date about new and changed features, and known
and resolved issues
Junos OS Release Notes
Learn With Videos
Our video library connues to grow! We’ve created many, many videos that demonstrate how to do everything from
install your hardware to congure advanced Junos OS network features. Here are some great video and training
resources that will help you expand your knowledge of Junos OS.
If you want to Then
Get short and concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Juniper on Juniper Networks main YouTube
page
Learn how to install and congure your Juniper Networks
devices
Check out our free Web-based training videos at Hardware
Installaon and Conguraon Videos
View a list of the many free technical trainings we oer at
Juniper
Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
9