Juniper SRX3600 Installation instructions

SRX3600 Services Gateway Hardware
Guide
Published
2019-10-16

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks
are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
SRX3600 Services Gateway Hardware Guide
Copyright © 2019 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)
Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement
(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you
agree to the terms and conditions of that EULA.
ii

Table of Contents
About the Documentation | xiii
Documentation and Release Notes | xiii
Using the Examples in This Manual | xiii
Merging a Full Example | xiv
Merging a Snippet | xv
Documentation Conventions | xv
Documentation Feedback | xviii
Requesting Technical Support | xviii
Self-Help Online Tools and Resources | xix
Creating a Service Request with JTAC | xix
Overview
1
System Overview | 3
SRX3600 Services Gateway Description | 3
Data Flow in the SRX3600 Services Gateway | 4
Hardware Component Overview | 5
Available Components for the SRX3600 Services Gateway | 5
SRX3600 Services Gateway CFMs | 7
SRX3600 Services Gateway Switch Fabric Board | 7
SRX3600 Services Gateway NPCs | 14
SRX3600 Services Gateway SPCs | 15
SRX3600 Services Gateway IOCs | 16
SRX3600 Services Gateway NP-IOCs | 17
SRX3600 Services Gateway Routing Engine | 18
SRX3600 Services Gateway SRX Clustering Module | 19
Chassis Description | 21
SRX3600 Services Gateway Chassis | 21
Hardware Component Locations in the SRX3600 Services Gateway Chassis | 22
SRX3600 Services Gateway Midplane | 24
iii

Line Card and Module Description | 27
SRX1400, SRX3400, and SRX3600 Services Gateway Module Overview | 27
Modules Supported on SRX1400, SRX3400, and SRX3600 Services Gateways | 28
Eligible Slots for SRX1400, SRX3400, and SRX3600 Services Gateway Modules | 30
Services Processing Card SRX3K-SPC-1-10-40 | 32
Network Processing Card SRX3K-NPC | 34
I/O Card SRX3K-16GE-TX | 36
I/O Card SRX3K-16GE-SFP | 38
I/O Card SRX3K-2XGE-XFP | 40
Network Processing I/O Card SRX1K3K-NP-2XGE-SFPP | 42
Routing Engines SRX3K-RE-12-10 and SRX1K-RE-12-10 | 45
SRX Clustering Module SRX3K-CRM | 47
Cooling System Description | 51
SRX3600 Services Gateway Fan Tray | 51
Power System Description | 55
SRX3600 Services Gateway AC Power Supply Overview | 55
SRX3600 Services Gateway DC Power Supply Overview | 56
Site Planning and Specifications
2
Planning and Preparing the Site | 61
General Site Guidelines | 61
Site Electrical Wiring Guidelines | 61
SRX3600 Services Gateway Physical Specifications | 62
SRX3600 Services Gateway Environmental Specifications | 64
Site Preparation Checklist for the SRX3600 Services Gateway | 65
Rack Requirements | 67
SRX3600 Services Gateway Rack Size and Strength Requirements | 67
SRX3600 Services Gateway Spacing of Mounting Bracket Holes | 69
Connecting the SRX3600 Services Gateway to the Building Structure | 69
Clearance Requirements for Airflow and Hardware Maintenance of the SRX3600 Services
Gateway | 69
iv

Cabinet Requirements | 71
SRX3600 Services Gateway Cabinet Size and Clearance Requirements | 71
SRX3600 Services Gateway Cabinet Airflow Requirements | 72
Grounding Specifications | 73
SRX3600 Services Gateway Grounding-Cable Lug Specification | 73
SRX3600 Services Gateway Grounding Cable Specification | 74
AC Power Requirements and Specifications | 75
SRX3600 Services Gateway AC Power Supply Electrical Specifications | 75
SRX3600 Services Gateway AC Power System Electrical Specifications | 76
SRX3600 Services Gateway AC Power Cord Specifications | 76
Power Requirements for AC-Powered SRX3600 Services Gateways | 79
DC Power Requirements and Specifications | 83
SRX3600 Services Gateway DC Power Supply Electrical Specifications | 83
SRX3600 Services Gateway DC Power System Electrical Specifications | 84
SRX3600 Services Gateway DC Power Cable Specifications | 85
Power Requirements for DC-Powered SRX3600 Services Gateways | 87
Cable Specifications and Pinouts | 91
Console Port Cable and Wire Specifications for the SRX3600 Services Gateway | 91
Signal-Distance Limitations for the SRX3600 Services Gateway | 92
Radio Frequency Interference for the SRX3600 Services Gateway | 92
Electromagnetic Compatibility for the SRX3600 Services Gateway | 92
Signal Loss in Multimode and Single-Mode Fiber-Optic Cable for the SRX3600 Services
Gateway | 93
Attenuation and Dispersion in Fiber-Optic Cable for the SRX3600 Services Gateway | 94
Calculating the Power Budget for Fiber-Optic Cable for the SRX3600 Services Gateway | 95
Calculating the Power Margin for Fiber-Optic Cable for the SRX3600 Services Gateway | 95
v

Initial Installation and Configuration
3
Installation Overview | 101
Installation Overview for the SRX3600 Services Gateway | 101
Unpacking the Services Gateway | 103
Required Tools and Parts for Unpacking the SRX3600 Services Gateway | 103
Unpacking the SRX3600 Services Gateway | 103
Verifying Parts Received with the SRX3600 Services Gateway | 106
Installing the Mounting Hardware | 109
Installing the Mounting Hardware for the SRX3600 Services Gateway | 109
Installing the SRX3600 Services Gateway Using a Mechanical Lift | 113
Required Tools for Installing the SRX3600 Services Gateway | 113
Preparing the SRX3600 Services Gateway for Rack-Mount or Cabinet Installation | 114
Installing the SRX3600 Services Gateway in a Rack or Cabinet Using a Mechanical Lift | 114
Installing the SRX3600 Services Gateway Without a Mechanical Lift | 119
Required Tools for Installing the SRX3600 Services Gateway Without a Mechanical Lift | 119
Removing Components from the Chassis for Manual Lifting of the SRX3600 Services Gateway | 120
Lifting the SRX3600 Services Gateway Chassis into the Rack | 122
Reinstalling Components in the SRX3600 Services Gateway Chassis | 123
Installing Additional Hardware Components | 125
Installing CFM Cards in the SRX3600 Services Gateway | 125
Installing SPCs in an Operating SRX3600 Services Gateway Chassis Cluster | 128
Installing an SCM in the SRX3600 Services Gateway | 131
Installing an AC Power Supply in the SRX3600 Services Gateway | 132
Installing a DC Power Supply in the SRX3600 Services Gateway | 135
Grounding the SRX3600 Services Gateway | 137
Required Tools and Parts for Grounding and Providing Power to the SRX3600 Services
Gateway | 137
SRX3600 Services Gateway Chassis Grounding Point | 138
Grounding the SRX3600 Services Gateway | 139
vi

Connecting the SRX3600 Services Gateway to External Devices | 141
Required Tools and Parts for Connecting the SRX3600 Services Gateway | 141
Connecting the SRX3600 Services Gateway to a Management Console or an Auxiliary Device | 142
Connecting the SRX3600 Services Gateway to a Network for Out-of-Band Management | 143
Providing Power to the SRX3600 Services Gateway | 145
Connecting the SRX3600 Services Gateway to an AC Power Source | 145
Connecting the SRX3600 Services Gateway to a DC Power Source | 148
Powering On the SRX3600 Services Gateway | 150
Powering Off the SRX3600 Services Gateway | 151
Performing the Initial Configuration | 153
SRX3600 Services Gateway Software Configuration Overview | 153
Performing Initial Software Configuration on the SRX3600 Services Gateway | 154
Performing Initial Software Configuration Using J-Web | 160
Configuring Root Authentication and the Management Interface from the CLI | 160
Configuring Interfaces, Zones, and Policies with J-Web | 161
Configuring the Hostname | 162
Configuring Interfaces | 162
Configuring Zones and Assigning Interfaces | 163
Configuring Security Policies | 164
Maintaining and Troubleshooting Components
4
Maintaining Components | 167
Required Tools and Parts for Maintaining the SRX3600 Services Gateway Hardware
Components | 167
Routine Maintenance Procedures for the SRX3600 Services Gateway | 168
Maintaining the Air Filter on the SRX3600 Services Gateway | 168
Maintaining the Fan Tray on the SRX3600 Services Gateway | 169
Maintaining the Routing Engine on the SRX3600 Services Gateway | 170
vii

Maintaining the Power Supplies on the SRX3600 Services Gateway | 172
Troubleshooting Components | 175
Troubleshooting with the CLI on the SRX3600 Services Gateway | 175
Troubleshooting with LEDs on the SRX3600 Services Gateway | 176
Troubleshooting with Chassis and Interface Alarm Messages on the SRX3600 Services
Gateway | 177
Chassis Component Alarm Conditions on SRX3400 and SRX3600 Services Gateways | 178
Backup Routing Engine Alarms | 186
Troubleshooting the Cooling System on the SRX3600 Services Gateway | 188
Troubleshooting IOCs and NP-IOCs on the SRX3600 Services Gateway | 189
Troubleshooting NPCs on the SRX3600 Services Gateway | 192
Troubleshooting SPCs on the SRX3600 Services Gateway | 193
Troubleshooting the Power System on the SRX3600 Services Gateway | 195
Replacing Components
5
Overview of Replacing Components | 199
Field-Replaceable Units on the SRX3600 Services Gateway | 199
Required Tools and Parts for Replacing Hardware Components on the SRX3600 Services
Gateway | 200
Replacing Cables and Connectors | 203
Replacing SFP, SFP+, and XFP Transceivers on the SRX3600 Services Gateway | 203
Replacing Host Subsystem Components | 207
Replacing the SFB on the SRX3600 Services Gateway | 207
Replacing a Routing Engine on the SRX3600 Services Gateway | 210
Removing the Battery from the Routing Engine of an SRX3600 Services Gateway for Recycling | 215
Replacing a CFM Card on the SRX3600 Services Gateway | 216
Replacing an SCM on the SRX3600 Services Gateway | 220
Replacing Cooling System Components | 223
Replacing the Fan Tray on the SRX3600 Services Gateway | 223
Replacing the Air Filter on the SRX3600 Services Gateway | 226
viii

Replacing Power Supply Components | 229
Replacing an AC Power Supply on the SRX3600 Services Gateway | 230
Replacing AC Power Supply Cables on the SRX3600 Services Gateway | 232
Replacing a DC Power Supply on the SRX3600 Services Gateway | 234
Replacing DC Power Supply Cables on the SRX3600 Services Gateway | 238
Contacting Customer Support | 241
Contacting Customer Support | 241
Return Procedure for the SRX3600 Services Gateway | 242
Listing the SRX3600 Services Gateway Component Serial Numbers with the CLI | 243
Locating the SRX3600 Services Gateway Chassis Serial Number Label | 245
Locating the SRX3600 Services Gateway Routing Engine Serial Number Label | 245
Locating the SRX3600 Services Gateway SFB Serial Number Label | 246
Locating the SRX3600 Services Gateway Power Supply Serial Number Label | 247
Information You Might Need to Supply to JTAC | 247
Required Tools and Parts for Packing the SRX3600 Services Gateway | 248
Packing the SRX3600 Services Gateway for Shipment | 248
Packing SRX3600 Services Gateway Components for Shipment | 249
Safety Guidelines
6
General Safety Information | 253
General Safety Guidelines and Warnings | 253
Definitions of Safety Warning Levels | 254
Restricted Access Area Warning | 258
Fire Safety Requirements | 260
Fire Suppression | 260
Fire Suppression Equipment | 261
Qualified Personnel Warning | 262
Warning Statement for Norway and Sweden | 262
Installation and Maintenance Safety Guidelines and Warnings | 263
Installation Instructions Warning | 264
Chassis and Component Lifting Guidelines | 264
Ramp Warning | 265
ix

Rack-Mounting and Cabinet-Mounting Warnings | 265
Grounded Equipment Warning | 270
Radiation and Laser Warnings | 271
Laser and LED Safety Guidelines and Warnings | 271
General Laser Safety Guidelines | 271
Class 1 Laser Product Warning | 272
Class 1 LED Product Warning | 273
Laser Beam Warning | 274
Radiation from Open Port Apertures Warning | 275
Maintenance and Operational Safety Guidelines and Warnings | 277
Maintenance and Operational Safety Guidelines and Warnings | 277
Battery Handling Warning | 278
Jewelry Removal Warning | 279
Lightning Activity Warning | 281
Operating Temperature Warning | 282
Product Disposal Warning | 284
Electrical Safety Guidelines and Warnings | 285
General Electrical Safety Guidelines and Warnings | 285
Prevention of Electrostatic Discharge Damage | 286
AC Power Electrical Safety Guidelines | 288
AC Power Disconnection Warning | 289
DC Power Electrical Safety Guidelines | 289
DC Power Electrical Safety Guidelines | 289
DC Power Disconnection Warning | 291
DC Power Grounding Requirements and Warning | 293
DC Power Wiring Sequence Warning | 295
DC Power Wiring Terminations Warning | 298
DC Power Disconnection Warning | 301
DC Power Grounding Requirements and Warning | 303
DC Power Wiring Sequence Warning | 305
DC Power Wiring Terminations Warning | 308
Multiple Power Supplies Disconnection Warning | 311
x

TN Power Warning | 312
Action to Take After an Electrical Accident | 312
Agency Approvals and Regulatory Compliance Information | 313
SRX3600 Services Gateway Agency Approvals | 313
SRX3600 Services Gateway Compliance Statements for EMC Requirements | 314
Canada | 315
European Community | 315
Japan | 315
United States | 315
SRX3600 Services Gateway NEBS and ETSI Compliance | 316
SRX3600 Services Gateway NEBS and ETSI Standards | 316
SRX3600 Services Gateway NEBS and ETSI Configuration Requirements | 316
xi

About the Documentation
IN THIS SECTION
Documentation and Release Notes | xiii
Using the Examples in This Manual | xiii
Documentation Conventions | xv
Documentation Feedback | xviii
Requesting Technical Support | xviii
Use this guide to install hardware and perform initial software configuration, routine maintenance, and
troubleshooting for the SRX3600 Services Gateway.
After completing the installation and basic configuration procedures covered in this guide, refer to the
Junos OS documentation for information about further software configuration.
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product
documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the
product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.
These books go beyond the technical documentation to explore the nuances of network architecture,
deployment, and administration. The current list can be viewed at https://www.juniper.net/books.
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load merge relative
command. These commands cause the software to merge the incoming configuration into the current
candidate configuration. The example does not become active until you commit the candidate configuration.
xiii

If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example
isafull example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In
this case, use the load merge relative command. These procedures are described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following configuration to a file and name the file ex-script.conf. Copy the
ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
2. Merge the contents of the file into your routing platform configuration by issuing the load merge
configuration mode command:
[edit]
user@host# load merge /var/tmp/ex-script.conf
load complete
xiv

Merging a Snippet
To merge a snippet, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the
ex-script-snippet.conf file to the /var/tmp directory on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode
command:
[edit]
user@host# edit system scripts
[edit system scripts]
3. Merge the contents of the file into your routing platform configuration by issuing the load merge
relative configuration mode command:
[edit system scripts]
user@host# load merge relative /var/tmp/ex-script-snippet.conf
load complete
For more information about the load command, see CLI Explorer.
Documentation Conventions
Table 1 on page xvi defines notice icons used in this guide.
xv

Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware
damage.
Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xvi defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type
the configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on
the terminal screen.
Fixed-width text like this
•A policy term is a named structure
that defines match conditions and
actions.
•Junos OS CLI User Guide
•RFC 1997, BGP Communities
Attribute
•Introduces or emphasizes important
new terms.
•Identifies guide names.
•Identifies RFC and Internet draft
titles.
Italic text like this
xvi

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
Configure the machine’s domain
name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for
which you substitute a value) in
commands or configuration
statements.
Italic text like this
•To configure a stub area, include
the stub statement at the [edit
protocols ospf area area-id]
hierarchy level.
•The console port is labeled
CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy
levels; or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or
variables.
< > (angle brackets)
broadcast | multicast
(string1 |string2 |string3)
Indicates a choice between the
mutually exclusive keywords or
variables on either side of the symbol.
The set of choices is often enclosed
in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS
only
Indicates a comment specified on the
same line as the configuration
statement to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
xvii

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
•In the Logical Interfaces box, select
All Interfaces.
•To cancel the configuration, click
Cancel.
Represents graphical user interface
(GUI) items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of
menu selections.
>(bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You can use either
of the following methods:
•Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper
Networks TechLibrary site, and do one of the following:
•Click the thumbs-up icon if the information on the page was helpful to you.
•Click the thumbs-down icon if the information on the page was not helpful to you or if you have
suggestions for improvement, and use the pop-up form to provide feedback.
•E-mail—Send your comments to [email protected]. Include the document or topic name,
URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an active Juniper Care or Partner Support Services support contract, or are
xviii

covered under warranty, and need post-sales technical support, you can access our tools and resources
online or open a case with JTAC.
•JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User
Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.
•JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,
365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called
the Customer Support Center (CSC) that provides you with the following features:
•Find CSC offerings: https://www.juniper.net/customers/support/
•Search for known bugs: https://prsearch.juniper.net/
•Find product documentation: https://www.juniper.net/documentation/
•Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/
•Download the latest versions of software and review release notes:
https://www.juniper.net/customers/csc/software/
•Search technical bulletins for relevant hardware and software notifications:
https://kb.juniper.net/InfoCenter/
•Join and participate in the Juniper Networks Community Forum:
https://www.juniper.net/company/communities/
•Create a service request online: https://myjuniper.juniper.net
To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:
https://entitlementsearch.juniper.net/entitlementsearch/
Creating a Service Request with JTAC
You can create a service request with JTAC on the Web or by telephone.
•Visit https://myjuniper.juniper.net.
•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
https://support.juniper.net/support/requesting-support/.
xix

1
PART
Overview
System Overview | 3
Hardware Component Overview | 5
Chassis Description | 21
Line Card and Module Description | 27
Cooling System Description | 51
Power System Description | 55