Juniper SRX3600 User manual

SRX3600 Services Gateway Getting
Started Guide
January 2011
Part Number: 530-038205
Revision 01
Contents AboutThisGuide....................................................3
Step 1: Prepare the Site for SRX3600 Services Gateway Installation . . . . . . . . . . . 5
RackMountingRequirements......................................5
Tools Required to Unpack and Prepare the SRX3600 Services Gateway for
Installation ..................................................5
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-FrameRack................................................6
Step3:InstalltheServicesGateway.....................................7
Install the Services Gateway Using a Mechanical Lift . . . . . . . . . . . . . . . . . . . . 8
Install the Device Without Using a Mechanical Lift . . . . . . . . . . . . . . . . . . . . . 10
Remove Components ........................................10
LifttheChassisintotheRack...................................12
ReinstallComponents........................................13
Step4:ConnecttheGroundingCable...................................13
Step 5: Connect the External Devices and IOC Cables . . . . . . . . . . . . . . . . . . . . . . 14
Connect to a Network for Out-of-Band Management . . . . . . . . . . . . . . . . . . . 14
ConnectaManagementConsole...................................15
ConnecttheIOCCables..........................................16
Step6:ConnectPowerCables.........................................16
Connect Power to an AC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . 17
Connect Power to a DC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . . 18
Step 7: Perform the Initial Software Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 20
EnterConfigurationMode........................................20
Configure User Accounts and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
ConfigureSystemAttributes.......................................21
CommittheConfiguration........................................22
SafetyWarnings....................................................24
SRX3600 Services Gateway Compliance Statements for EMC Requirements . . 26
Canada .......................................................26
EuropeanCommunity............................................26
1Copyright © 2011, Juniper Networks, Inc.

Japan.........................................................26
UnitedStates...................................................27
SRX3600 Services Gateway NEBS and ETSI Compliance . . . . . . . . . . . . . . . . . . . 27
SRX3600 Services Gateway NEBS and ETSI Standards . . . . . . . . . . . . . . . . . 27
SRX3600 Services Gateway NEBS and ETSI Configuration
Requirements...............................................27
SRX Series Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
RequestingTechnicalSupport........................................29
RevisionHistory....................................................30
Copyright © 2011, Juniper Networks, Inc.2
SRX3600 Services Gateway Getting Started Guide

About This Guide
This guide contains information that you need to install and configure the SRX3600
Services Gateway quickly. For complete installation instructions and instructions on
installing additional modules such as cards and power supplies, see the SRX3600 Services
Gateway Hardware Guide at http://www.juniper.net/techpubs/ .
WARNING: This guide contains a summary of safety warnings in “Safety
Warnings” on page 24. For a complete list of warnings for this device, including
translations, see the SRX3600 Services Gateway Hardware Guide at
http://www.juniper.net/techpubs/ .
The SRX3600 Services Gateway is a high-performance, scalable, carrier-class security
device with multiprocessor architecture. The services gateway has a capacity of up to
30 gigabits per second (Gbps), full duplex. The services gateway is 5 rack units (U) tall.
Nine services gateways can be stacked in a single floor-to-ceiling rack, for increased port
density per unit of floor space. The services gateway provides 12 Common Form-factor
Module (CFM) slots that can be populated with up to seven Services Processing Cards
(SPCs), up to three Network Processing Cards (NPCs), and up to six I/O cards (IOCs).
The services gateway also has one dedicated slot for the Switch Fabric Board (SFB), one
slots for a Routing Engine, one slot for an SRX Clustering Module (SCM), four slots for
power supplies, and one slot for the fan tray and air filter.
Figure 1 on page 3 and Figure 2 on page 4 show the front and rear of the SRX3600
Services Gateway.
Figure 1: Front View of the SRX3600 Services Gateway
g036035
Cooling
air exhaust
ESD
point
IOC in
slot 1
Slot
number
guide
CFM slots
for IOCs
and SPCs
SFB
USB
ports
Console
port
Management
Ethernet port
3Copyright © 2011, Juniper Networks, Inc.
About This Guide

Figure 2: Rear View of the SRX3600 Services Gateway
g036105
ESD
point
Chassis
grounding
point
Fan tray
door
CFM
slots for
SPCs
Cooling
air inlets
Routing Engine
in slot RE0
Power
supplies
Slot
number
guide
CFM slots
for NPCs
and SPCs
Slot RE1
for SCM
By installing different combinations of IOCs and SPCs, you can tailor both the number
of network ports and the maximum security processing capacity to suit your network.
Table 1 on page 4 describes the minimum system configuration for the SRX3600 Services
Gateway.
Table 1: Minimum System Configuration
MinimumComponent
1SFB
1SPC
1NPC
1Routing Engine
2Power supply
1Fan tray
Three types of IOC interface cards are available:
•16-port copper Ethernet/Fast Ethernet/Gigabit Ethernet (10/100/1000 Mbps) card
•16-port small form-factor pluggable (SFP) Gigabit Ethernet card
•2-port 10-gigabit small form-factor pluggable (XFP) Ethernet card
You can install any combination of IOC types in the services gateway.
Copyright © 2011, Juniper Networks, Inc.4
SRX3600 Services Gateway Getting Started Guide

The services gateway is shipped in a cardboard carton. A printed copy of this document
and an accessory box are also included in the shipping container.
Step 1: Prepare the Site for SRX3600 Services Gateway Installation
•Rack Mounting Requirements on page 5
•Tools Required to Unpack and Prepare the SRX3600 Services Gateway for
Installation on page 5
Rack Mounting Requirements
•You can install the services gateway in a four-post rack or cabinet or a two-post rack.
WARNING: When you install the services gateway in a two-post rack, you
must attach the mounting brackets at the middle of each chassis side, as
shown in Figure 3 on page 6. Do not attempt to install the services gateway
in a two-post rack with the mounting brackets attached at the front of the
chassis. Such an installation might overstress either the brackets or the
rack, causing the chassis to fall and inflict injury.
•The rack rails must be spaced widely enough to accommodate the external dimensions
of the services gateway chassis: 8.75 in. (22.2 cm) high, 25.5 in. (64.8 cm) deep, and
17.5 in. (44.5 cm) wide. The outer edges of the mounting brackets extend the width to
19 in. (48.3 cm).
•The rack must be strong enough to support the weight of the fully configured services
gateway, up to 116 lb (52.6 kg). If you stack five fully configured services gateways in
one rack, it must be capable of supporting about 579 lb (263 kg).
•For service personnel to remove and install hardware components, there must be
adequate space at the front and back of the services gateway. Allow at least
30 in. (76.2 cm) in front of the services gateway and 24 in. (61 cm) behind the services
gateway.
•The rack or cabinet must have an adequate supply of cooling air.
•Ensure that the cabinet allows the chassis hot exhaust air to exit the cabinet without
recirculating into the services gateway.
•The services gateway must be installed in a rack that is secured to the building structure.
•The services gateway should be mounted at the bottom of the rack if it is the only unit
in the rack.
•When mounting the services gateway in a partially filled rack, load the rack from the
bottom to the top, with the heaviest component at the bottom of the rack.
Tools Required to Unpack and Prepare the SRX3600 Services Gateway for Installation
To unpack the services gateway and prepare for installation, you need the following
tools:
5Copyright © 2011, Juniper Networks, Inc.
Step 1: Prepare the Site for SRX3600 Services Gateway Installation

•A mechanical lift—recommended
•Phillips screwdrivers, numbers 1 and 2
•Electrostatic discharge (ESD) wrist strap
•Antistatic mat
Proceed to “Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-Frame Rack” on page 6.
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame
Rack
The specific mounting hardware required depends on the type of rack being used. Use
the appropriate procedure steps to install the mounting hardware for your type of rack.
To install the mounting hardware:
1. Locate the rack mount brackets in the accessory kit.
2. Use the screws provided to secure the rack mount brackets to the sides of the chassis:
•For a two-post rack, mount the brackets at the mid-mount holes, as shown in Figure
3 on page 6.
•For a four-post rack, mount the brackets near the front edge of the chassis, as shown
in Figure 4 on page 7.
Figure 3: Attaching Mounting Hardware for Two-Post Rack
g036042
Copyright © 2011, Juniper Networks, Inc.6
SRX3600 Services Gateway Getting Started Guide

Figure 4: Attaching Mounting Hardware for Cabinet or Four-Post Rack
g036093
3. For installation in a four-post rack or a cabinet, install the support shelf on the rear
posts as shown in Figure 5 on page 7.
Figure 5: Attaching Four-Post and Cabinet Support Shelf
Rear rack uprights
g036094
Step 3: Install the Services Gateway
Because of the services gateway’s size and weight, we recommend that you install the
services gateway using a mechanical lift. The procedure for installing the services gateway
depends on whether you use a mechanical lift:
•Install the Services Gateway Using a Mechanical Lift on page 8
•Install the Device Without Using a Mechanical Lift on page 10
7Copyright © 2011, Juniper Networks, Inc.
Step 3: Install the Services Gateway

Install the Services Gateway Using a Mechanical Lift
1. Ensure that the rack is in its permanent location and is secured to the building. Ensure
that the installation site allows adequate clearance for both airflow and maintenance.
For details, see the SRX3600 Services Gateway Hardware Guide.
2. Load the services gateway onto the lift, making sure it rests securely on the lift platform
(see Figure 6 on page 8).
Figure 6: Load the Device onto the Lift
g030262
3. Using the lift, position the device in the rack:
•For two-post rack mounting, align the bottom hole in each mounting bracket with
a hole in each rack rail.
•For four-post rack or cabinet mounting, position the device so that the bottom rear
edge of the chassis rests on the support shelf that you installed earlier, as shown
in Figure 5 on page 7.
4. Install a mounting screw into each of the two aligned holes, as shown in Figure 7 on
page 9 (two-post rack) or Figure 8 on page 9 (four-post rack). Use a number-2
Phillips screwdriver to tighten the screws.
Copyright © 2011, Juniper Networks, Inc.8
SRX3600 Services Gateway Getting Started Guide

Figure 7: Installing the Device in a Two-Post Rack
g036043
Figure 8: Installing the Device in a Four-Post Rack
g036096
5. Install the remaining screws in each mounting bracket.
6. Move the lift away from the rack.
7. Visually inspect the alignment of the services gateway. If the services gateway is
installed properly in the rack, all the mounting screws on one side of the rack should
be aligned with the mounting screws on the opposite side, and the services gateway
should be level.
Proceed to “Step 4: Connect the Grounding Cable” on page 13.
9Copyright © 2011, Juniper Networks, Inc.
Install the Services Gateway Using a Mechanical Lift

Install the Device Without Using a Mechanical Lift
To install the services gateway without a mechanical lift:
•Remove Components on page 10
•Lift the Chassis into the Rack on page 12
•Reinstall Components on page 13
Remove Components
To make the services gateway light enough to install manually, you first remove most of
the components from the chassis, as shown in Figure 9 on page 10 and Figure 10 on
page 11:
•Power supplies
•Switch Fabric Board (SFB)
•Routing Engine
•I/O Cards (IOCs)
•Network Processing Cards (NPCs)
•Services Processing Cards (SPCs)
•Fan tray
Figure 9: Components to Remove from the Front of the Services Gateway
g030265
SFB
Cards in
CFM slots
Copyright © 2011, Juniper Networks, Inc.10
SRX3600 Services Gateway Getting Started Guide