Juniper SRX4200 Installation instructions

SRX4200 Services Gateway Hardware
Guide
Published
2023-02-27

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX4200 Services Gateway Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
SRX4200 Services Gateway Overview | 2
SRX4200 Services Gateway Overview | 2
Field-Replaceable Units in SRX4200 Services Gateways | 3
Benets of the SRX4200 Services Gateway | 3
SRX4200 Chassis | 3
SRX4200 Services Gateway Chassis Overview | 4
SRX4200 Services Gateway Front Panel | 4
SRX4200 Services Gateway Back Panel | 9
SRX4200 Cooling System | 10
SRX4200 Power System | 11
SRX4200 Power Supply | 12
AC Power Supply Specicaons for SRX4200 Services Gateways | 16
AC Power Cord Specicaons for the SRX4200 Services Gateway | 16
DC Power Supply Specicaons for SRX4200 Services Gateways | 18
2
Site Planning, Preparaon, and Specicaons
SRX4200 Site Preparaon Checklist | 20
SRX4200 Site Guidelines and Requirements | 22
General Site Installaon Guidelines | 22
SRX4200 Services Gateway Environmental Specicaons | 22
Site Electrical Wiring Guidelines | 23
SRX4200 Services Gateway Physical Specicaons | 25
iii

Clearance Requirements for Airow and Hardware Maintenance for SRX4200 Services
Gateways | 26
SRX4200 Services Gateway Rack Requirements | 27
Cabinet Requirements for SRX4200 Services Gateways | 28
SRX4200 Transceiver Specicaons and Pinouts | 29
Pluggable Transceivers Supported on SRX4200 Services Gateways | 30
SFP+ Direct Aach Copper Cables for SRX4200 Services Gateways | 31
Management Port Connector Pinout Informaon for an SRX4200 Services Gateway | 31
Console Port Connector Pinout Informaon for an SRX4200 Services Gateway | 32
3
Inial Installaon and Conguraon
SRX4200 Installaon Overview | 35
Unpacking and Mounng the SRX4200 | 35
Unpacking the SRX4200 Services Gateway | 36
Verifying Parts Received with the SRX4200 Services Gateway | 36
Installing the SRX4200 Services Gateway in a Rack | 37
Connecng the SRX4200 to Power | 40
Connecng the SRX4200 Services Gateway Grounding Cable | 40
Connecng AC Power to an SRX4200 Services Gateway | 41
Connecng DC Power to an SRX4200 Services Gateway | 43
Connecng the SRX4200 Services Gateway to a Management Console | 46
Conguring Junos OS on the SRX4200 | 47
SRX4200 Services Gateway Soware Conguraon Overview | 47
SRX4200 Services Gateway Factory-Default Sengs | 47
Viewing Factory-Default Sengs | 48
Conguring the SRX4200 Services Gateway | 48
4
Maintaining Components
Roune Maintenance Procedures for the SRX4200 | 53
iv

Maintaining the SRX4200 Power System | 53
Replacing an AC Power Supply on the SRX4200 | 54
Removing an AC Power Supply from an SRX4200 Services Gateway | 54
Installing an AC Power Supply in an SRX4200 Services Gateway | 55
Replacing a DC Power Supply on the SRX4200 | 56
Removing a DC Power Supply from an SRX4200 Services Gateway | 57
Installing a DC Power Supply in an SRX4200 Services Gateway | 57
Maintaining the SRX4200 Cooling System | 58
Replacing the SRX4200 Services Gateway Fan Tray | 58
5
Troubleshoong Hardware
Troubleshoong the SRX4200 | 61
Troubleshoong Resources for the SRX4200 Services Gateway | 61
Monitoring Chassis Alarms on an SRX4200 Services Gateway | 61
Using the RESET Buon on the SRX4200 Services Gateway | 63
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX4200 Chassis or Components | 66
Contacng Customer Support | 66
Returning a SRX4200 Services Gateway or Component to Juniper Networks | 67
Locang the Serial Number on the SRX4200 Services Gateway or Component | 67
Lisng the SRX4200 Services Gateway Component Details with the CLI | 68
Locang the Chassis Serial Number ID Label | 69
Locang the Serial Number ID Labels on FRUs | 69
Packing a SRX4200 Services Gateway or Component for Shipping | 69
Packing the SRX4200 Services Gateway for Shipment | 70
Packing the SRX4200 Services Gateway Components for Shipment | 70
7
Safety and Compliance Informaon
General Safety Guidelines and Warnings | 73
Denions of Safety Warning Levels | 74
Restricted Access Warning | 76
v

Qualied Personnel Warning | 77
Prevenon of Electrostac Discharge Damage | 78
Fire Safety Requirements | 79
Laser and LED Safety Guidelines and Warnings | 81
Radiaon from Open Port Apertures Warning | 83
Maintenance and Operaonal Safety Guidelines and Warnings | 84
General Electrical Safety Guidelines and Warnings | 90
AC Power Electrical Safety Guidelines | 96
DC Power Electrical Safety Guidelines | 97
DC Power Disconnecon Warning | 98
DC Power Grounding Requirements and Warning | 100
DC Power Wiring Sequence Warning | 100
DC Power Wiring Terminaons Warning | 102
Acon to Take Aer an Electrical Accident | 103
Agency Approvals | 104
Acousc Noise Compliance Statements | 106
EMC Requirements | 106
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX4200 Services Gateway. Aer compleng the installaon and basic
conguraon procedures covered in this guide, refer to the Junos OS documentaon for informaon
about further soware conguraon.
RELATED DOCUMENTATION
How to Set Up Your SRX4200 Services Gateway
vii

1
CHAPTER
Overview
SRX4200 Services Gateway Overview | 2
SRX4200 Chassis | 3
SRX4200 Cooling System | 10
SRX4200 Power System | 11

SRX4200 Services Gateway Overview
IN THIS SECTION
SRX4200 Services Gateway Overview | 2
Field-Replaceable Units in SRX4200 Services Gateways | 3
Benets of the SRX4200 Services Gateway | 3
SRX4200 Services Gateway Overview
The Juniper Networks SRX4200 Services Gateway is a high-performance, scalable mid-range services
gateway, which consolidates security, next-generaon rewall, and advanced threat prevenon
capabilies to provide secure connecvity. The services gateway supports 40 Gbps IMIX throughput
and is suited for small to medium enterprises and data centers.
The SRX4200 Services Gateway supports advanced threat prevenon through Sky Advanced Threat
Prevenon (Sky ATP) and Spotlight Secure Threat Intelligence, in addion to key features such as VPN,
IPS, and UTM.
The chassis is 1 U high and is designed for rack installaon. The services gateway is shipped with dual
power supplies and is available in both AC-powered and DC-powered versions:
• SRX4200 (AC) — SRX4200 Services Gateway with dual AC power supplies
• SRX4200 (DC) — SRX4200 Services Gateway with dual DC power supplies
The SRX4200 Services Gateway comes with 64 GB of DDR4 memory and two 240-GB solid-state
drives (SSDs) in a redundant array of independent disks (RAID). Both disks are congured as a RAID-1
mirror (data is concurrently wrien to both SSDs). If one SSD becomes inoperable, the other SSD
connues to be acve.
The services gateway runs the Junos OS and can be managed using the CLI, Junos Space, and J-Web.
SEE ALSO
SRX4200 Services Gateway Physical Specicaons | 25
SRX4200 Services Gateway Environmental Specicaons | 22
2

Field-Replaceable Units in SRX4200 Services Gateways
Field-replaceable units (FRUs) are components that you can replace at your site. The FRUs on the
SRX4200 Services Gateway are hot-removable and hot-insertable. You can remove and replace them
without powering o the services gateway. The services gateway supports the following FRUs:
• AC power supplies
• DC power supplies
• Fan trays
SEE ALSO
SRX4200 Power Supply | 12
Benets of the SRX4200 Services Gateway
•High performance—The SRX4200 supports up to 80-Gbps rewall throughput (up to 40-Gbps of
IMIX rewall throughput) and is suited for enterprise campus and data center edge deployments.
•Advanced threat protecon—The SRX4000 line of services gateways supports the intrusion
prevenon system (IPS), Juniper Sky Advanced Threat Prevenon (Juniper Sky ATP), anvirus, and
anspam features, which protect against potenal vulnerabilies. Juniper Sky ATP protects against
zero-day aacks and other unknown threats.
SRX4200 Chassis
IN THIS SECTION
SRX4200 Services Gateway Chassis Overview | 4
SRX4200 Services Gateway Front Panel | 4
SRX4200 Services Gateway Back Panel | 9
3

SRX4200 Services Gateway Chassis Overview
The 4200 Services Gateway chassis is a rigid sheet metal structure that houses all the other hardware
components. The chassis measures 1.75 in. high, 17.48 in. wide, and 25 in. deep. The chassis installs in
standard 600-mm deep (or larger) enclosed cabinets or 19-in. equipment racks.
CAUTION: Before removing or installing components of a funconing services gateway,
aach an electrostac discharge (ESD) strap to an ESD point and place the other end of
the strap around your bare wrist. Failure to use an ESD strap could result in damage to
the device.
The services gateway must be connected to earth ground during normal operaon.
SRX4200 Services Gateway Front Panel
IN THIS SECTION
Chassis Status LEDs | 5
Management Port LEDs | 6
HA Port LEDs | 7
Network Port LEDs | 8
Figure 1 on page 4 shows the front panel of the SRX4200 Services Gateway.
Figure 1: SRX4200 Services Gateway Front Panel
4

Table 1 on page 5 lists the components on the front panel of the services gateway.
Table 1: SRX4200 Services Gateway Components on the Front Panel
Number Component Descripon
1 Management port Gigabit Ethernet port to connect to the device over the network.
2 USB ports Two USB 2.0 ports that accept a USB storage device.
3 HA ports Two 1-Gigabit Ethernet/10-Gigabit Ethernet ports, CTL (control port) and FAB
(fabric port), to synchronize data and maintain state informaon in a chassis
cluster setup. These ports support enhanced small form-factor pluggable
(SFP/SFP+) transceivers.
4 SFP+ ports Eight 1-Gigabit Ethernet/10-Gigabit Ethernet SFP+ ports for network trac.
NOTE: Ports 0/0 to 0/3 are part of a port group that is connected to one CPU
socket. Similarly, ports 0/4 to 0/7 form another port group and are connected to
a dierent CPU socket.
When choosing ports for network trac, ensure that you use the ports equally
from each socket so that the trac is evenly distributed, and the overall CPU load
is balanced. For example, if you plan to use two ports, then choose one port from
each socket. If the network trac passes only through the ports in one group,
you might encounter performance and load balancing issues.
5 LEDs Indicate component and system status at a glance.
6 Console port Connects a laptop to the services gateway for CLI management. The port uses an
RJ-45 serial connecon, is congured as DTE, and supports the RS-232 (EIA-232)
standard.
7 Reset buon Returns the services gateway to the factory-default conguraon.
Chassis Status LEDs
Figure 2 on page 6 shows the front panel LEDs and Table 2 on page 6 describes the LEDs.
5

Figure 2: SRX4200 Services Gateway Front Panel LEDs
Table 2: SRX4200 Services Gateway Front Panel LEDs
LED Descripon
Power •Solid green—receiving power
Status •Solid green—operang normally
•Solid red—crical alarm
•Hardware component failure
•Soware module failure
•Fan failure (atleast one)
•Blinking red—noncrical alarm
•The other HA node is in the lost, disabled, or ineligible state.
•O—the system is not receiving power
SSD •Blinking green—indicates hard disk drive (SSD) acvity
Management Port LEDs
The management port has two LEDs that indicate link acvity and status of the management port.
Table 3 on page 7 describes the LEDs.
6

Table 3: Management Port LEDs
LED Descripon
Link/Acvity (LED on
the le)
•Solid amber—A link is established, but there is no acvity on the link.
•Blinking amber—There is link acvity.
•O—There is no link established.
Speed (LED on the right) •Solid green—100-Mbps link is established.
•Solid amber—1000-Mbps link is established.
•O—There is no link established.
HA Port LEDs
Each HA port has one status LED located between the ports. Figure 3 on page 7 shows the LEDs. The
upper LED (callout 1) displays the status for the port on the right and the lower LED (callout 2) displays
the status for the port on the le. Table 4 on page 8 describes the LEDs.
Figure 3: HA Port LEDs
7

Table 4: HA Port LEDs
LED Descripon
Status LED •Solid amber—A link is established.
•Blinking amber—There is link acvity.
•O—There is no link established.
Network Port LEDs
Each SFP+ port has two status LEDs located above the port. Table 5 on page 8 describes the LEDs.
Figure 4 on page 8 shows the LEDs.
Figure 4: Network Port LEDs
Table 5: Network Port LEDs
Callout LED Descripon
1 Link (LED on the
le)
•Solid green—There is link acvity.
•O—There is no link established.
2Speed/Acvity
(LED on the right)
•Solid amber—10G/1G link is established.
•Blinking amber—There is acvity on the 10G/1G link.
•O—There is no link established.
8

SRX4200 Services Gateway Back Panel
Figure 5 on page 9 shows the back panel of the SRX4200 Services Gateway, and Table 6 on page 9
lists and describes the back panel components.
Figure 5: SRX4200 Services Gateway Back Panel
Table 6: SRX4200 Services Gateway Back Panel Components
Number Component Descripon
1 Grounding point Connects the services gateway chassis to earth ground.
2 Power switch Use the Power switch to power on or power o the services gateway.
3 Alarm O buon Use this buon to turn o an alarm triggered because of an abnormal DC output
voltage caused by any of the following:
•Only one power supply unit is plugged in.
•The AC power cord is not plugged in.
•The power supply unit is not funconal and there is no DC output.
4 ESD point For personal safety, while working on the services gateway, use the ESD outlet to
plug in an ESD grounding strap to prevent your body from sending stac charges
to the services gateway.
9

Table 6: SRX4200 Services Gateway Back Panel Components (Connued)
Number Component Descripon
5 Fan trays Four fan trays for cooling the services gateway and its components. Each fan tray
contains two fans.
Three fan trays are required for proper air ow across the chassis internal
components. The fourth fan tray provides redundancy.
6 Power supply Two power supply slots. Each power supply contains a power cord outlet. Two
650-W DC or AC power supplies are provided with the services gateway.
SRX4200 Cooling System
The cooling system for the services gateway consists of four fan trays located at the rear of the chassis.
Each fan tray contains two fans, so there are a total of eight fans. The fans draw cool air through vents
on the front of the chassis and exhaust the air through the back of the chassis. See Figure 6 on page
11. The airow produced by the fans keeps device components within the acceptable temperature
range.
If any one of the four fan trays fails, the services gateway generates a warning but keeps the system
running. If the temperature keeps rising, the services gateway lowers the power consumpon by
reducing the performance or shung down some of the chassis components. However, if the ambient
maximum temperature exceeds the warning level and the system cannot be adequately cooled, then the
services gateway shuts down the system and hardware components completely.
The fan trays are hot-swappable eld-replaceable units (FRUs). The fans are not eld-replaceable.
10

Figure 6: Airow Through the Chassis
RELATED DOCUMENTATION
Clearance Requirements for Airow and Hardware Maintenance for SRX4200 Services Gateways |
26
SRX4200 Power System
IN THIS SECTION
SRX4200 Power Supply | 12
AC Power Supply Specicaons for SRX4200 Services Gateways | 16
AC Power Cord Specicaons for the SRX4200 Services Gateway | 16
DC Power Supply Specicaons for SRX4200 Services Gateways | 18
11

SRX4200 Power Supply
IN THIS SECTION
AC Power Supply | 12
DC Power Supply | 14
The SRX4200 Services Gateway is shipped with two AC or two DC power supply units preinstalled in
the rear panel. Each power supply provides power to all components in the services gateway. If one
power supply fails or is removed, the remaining power supply redistributes the electrical load without
interrupon. Each power supply is cooled by its own internal cooling system.
AC Power Supply
Each AC power supply weighs approximately 2.3 lb and consists of one AC appliance inlet, a fan, and
LEDs for monitoring the status of the power supply. The AC power supply is a hot-insertable and hot-
removable eld-replaceable unit (FRU) when the second power supply is installed and running. You can
install the replacement power supply without powering o the services gateway. The AC power supply
gives an output of 650 W and supports both low line voltage (100–127 VAC) and high line voltage
(200–240 VAC). Figure 7 on page 12 shows the AC power supply.
Figure 7: AC Power Supply
Figure 8 on page 13 shows the locaon of the LEDs on an AC power supply. Each AC power supply
faceplate contains three LEDs that indicate the status of the power supplies.
12

Figure 8: AC Power Supply LEDs
Table 7 on page 13 describes the AC power supply LEDs.
Table 7: AC Power Supply LEDs
LED Color State Descripon
AC Unlit O Indicates one of the following:
•Power input voltage is not within the normal
operang range.
•No power input.
Green Steady Input power present and is within the normal operang
range.
DC Unlit O No DC power output or abnormal DC output.
Green On steadily DC power output is within the normal operang range.
! (Fault) Amber On steadily Power supply unit failure.
Blinking Invalid power supply unit.
Unlit O Power supply unit is funconing normally.
13