Juniper SRX5400 User manual

SRX5400 Services Gateway Getting Started
Guide
October 2017
Part Number: 530-082619
Revision 01
This document describes how to install the SRX5400 Services Gateway.
Contents About This Guide | 3
Step 1: Prepare the Site for SRX5400 Services Gateway Installation | 4
Rack-Mounting Requirements | 5
Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation | 6
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack | 6
Step 3: Install the Services Gateway | 9
Remove Components | 10
Install the Services Gateway Using a Lift | 11
Install the Services Gateway Without a Mechanical Lift | 13
Reinstall Components | 14
Step 4: Connect the Grounding Cable | 14
Step 5: Connect External Devices and Network Cables | 16
Connect to a Network for Out-of-Band Management | 16
Connect a Management Console | 16
Connect the Network Cables | 17
Step 6: Connect Power Cables | 18
Connect Power to an AC-Powered Services Gateway | 18
Connect Power to a DC-Powered Services Gateway | 20
Step 7: Perform the Initial Software Configuration | 23
Enter Configuration Mode | 23
Configure User Accounts and Passwords | 24
1

Configure System Attributes | 24
Commit the Configuration | 26
Safety Warnings | 29
SRX5400 Services Gateway Compliance Statements for EMC Requirements | 31
Canada | 31
European Community | 32
Japan | 32
United States | 32
SRX Series Documentation and Release Notes | 32
Requesting Technical Support | 33
Revision History | 34
2

About This Guide
This guide contains information that you need to install and configure the SRX5400 Services Gateway
quickly. For complete installation instructions, see the SRX5400 Services Gateway hardware documentation
at www.juniper.net/documentation/.
WARNING: This guide contains a summary of safety warnings in “Safety Warnings” on
page 29. For a complete list of warnings for this device, including translations, see the
SRX5400 Services Gateway hardware documentation at www.juniper.net/documentation/.
The SRX5400 Services Gateway is a high-performance, highly scalable, carrier-class security device with
multi-processor architecture.
The SRX5400 Services Gateway is 5 rack units (U) tall. Five of these devices can be stacked in a single
floor-to-ceiling rack, for increased port density per unit of floor space.
The services gateway provides four slots that you can populate with one Switch Control Board (SCB) and
up to three additional cards of the following types:
•Services Processing Cards (SPCs) provide the processing capacity to run integrated services such as
firewall, IPsec, and IDP.
•Modular Port Concentrators (MPCs) and the Modular Interface Cards (MICs) that install in them provide
Ethernet interfaces that connect the services gateway to your data network.
NOTE: The SRX5400 Services Gateway supports the SRX5K-SPC-4-15-320 SPC only. It does
not support the SRX5K-SPC-2-10-40 SPC.
By installing different combinations of MPCs and SPCs, you can tailor both the number of ports and the
maximum services processing capacity to suit your network. Table 1 on page 3 describes the possible
system configurations for the SRX5400 Services Gateway.
Table 1: Possible System Configurations
MaximumMinimumComponent
21SPC
21MPC
11SCB
3

Table 1: Possible System Configurations (continued)
MaximumMinimumComponent
11Routing Engine
NOTE: For SPCs and MPCs, there are three slots available allowing for the following SPC and MPC
configuration scenarios: 1 SPC and 1 MPC, 2 SPCs and 1 MPC, or 1 SPC and 2 MPCs.
NOTE: MPCs are the only interface cards supported by the SRX5400 Services Gateway. The
SRX5400 Services Gateway does not support the IOCs or Flex IOCs supported on other services
gateways in the SRX5000 line.
Four AC power supplies (PSUs) provide full power redundancy. Each AC power supply provides power to
all components in the device. When two or more power supplies are present, they share power almost
equally within a fully populated system. However, if using only two AC PSUs, you must insert them into
the first and third PSU slots. In the DC configuration, two power supplies are required to supply power to
a fully configured device.
For detailed information about the SPCs, MPCs, and other cards supported by the services gateway, see
the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/.
The services gateway is shipped in a cardboard box strapped securely to a wooden pallet. Plastic straps
secure the top and bottom in place. The services gateway chassis is bolted to this pallet. A printed copy
of this document and a cardboard accessory box are also included in the shipping container.
Step 1: Prepare the Site for SRX5400 Services
Gateway Installation
IN THIS SECTION
Rack-Mounting Requirements | 5
Tools Required to Unpack and Prepare the SRX5400 Services Gateway for Installation | 6
4

Rack-Mounting Requirements
•You can install the services gateway in a four-post rack or cabinet or an open-frame rack.
•The rack rails must be spaced widely enough to accommodate the services gateway chassis' external
dimensions: 8.71 in. (22.1 cm) high, 24.5 in. (62.2 cm) deep, and 17.45 in. (44.3 cm) wide. The mounting
brackets extend the width to 19 in. (48.3 cm). See Figure 1 on page 5.
Figure 1: Rack Clearance and Chassis Dimensions
•The rack must be strong enough to support the weight of the fully configured services gateway, up to
128 lb (58.1 kg).
•For the cooling system to function properly, the airflow around the chassis must be unrestricted. Allow
at least 6 in. (15.2 cm) of clearance between side-cooled services gateways. Allow 2.8 in. (7 cm) between
the side of the chassis and any non-heat-producing surface such as a wall.
•For service personnel to remove and install hardware components, there must be adequate space at the
front and back of the services gateway. Allow at least 30 in. (76.2 cm) in front of the services gateway
and 24 in. (61 cm) behind the services gateway.
•The rack or cabinet must have an adequate supply of cooling air.
5

•Ensure that the cabinet allows the chassis hot exhaust air to exit from the cabinet without recirculating
into the services gateway.
•The services gateway must be installed into a rack that is secured to the building structure.
•Mount the services gateway at the bottom of the rack if it is the only unit in the rack.
•When mounting the services gateway in a partially filled rack, load the rack from the bottom to the top
with the heaviest component at the bottom of the rack.
Tools Required to Unpack and Prepare the SRX5400 Services Gateway for
Installation
To unpack the services gateway and prepare for installation, you need the following tools:
•A mechanical lift—recommended
•Phillips (+) screwdrivers, numbers 1 and 2
•2.5-mm flat-blade (–) screwdriver
•7/16-in. torque-controlled driver or socket wrench
•1/2-in. or 13-mm open-end or socket wrench to remove bracket bolts from the shipping pallet
•Electrostatic discharge wrist strap
•Antistatic mat
Proceed to “Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame
Rack” on page 6.
Step 2: Install the Mounting Hardware in a Four-Post
Rack or Cabinet or an Open-Frame Rack
To install the mounting shelf on the front rails of a four-post rack or cabinet, or on the rails of an open-frame
rack:
1. If needed, install cage nuts in the holes specified in Table 2 on page 7.
2. On the back of each rack rail, partially insert a mounting screw into the lowest hole specified in
Table 2 on page 7.
6

3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of each flange on a mounting
screw.
4. Partially insert screws into the open holes in each flange of the mounting shelf (see Figure 2 on page 8
or Figure 3 on page 9).
5. Tighten all the screws completely.
Table 2: Mounting Shelf Hole Locations
Distance Above U Division
Hole (Starting from U
Division)
1.14 U2.00 in. (5.1 cm)4
0.86 U1.51 in. (3.8 cm)3
0.50 U0.88 in. (2.2 cm)2
0.14 U0.25 in. (0.6 cm)1
7

Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet
g004258
Four-post open rack
Small mounting shelf
8

Figure 3: Mounting Hardware for an Open-Frame Rack
Proceed to “Step 3: Install the Services Gateway” on page 9.
Step 3: Install the Services Gateway
IN THIS SECTION
Remove Components | 10
Install the Services Gateway Using a Lift | 11
Install the Services Gateway Without a Mechanical Lift | 13
Reinstall Components | 14
Because of the services gateway’s size and weight, you must remove all components, as shown in
Figure 4 on page 10 and Figure 5 on page 10, before you install the services gateway. We also recommend
using a mechanical lift to install the services gateway.
9

Remove Components
Figure 4: Components to Remove from the Front of the Services Gateway
g030323
SPCs
RE
SCB
MPC
Figure 5: Components to Remove from the Rear of the Services Gateway
g030324
Power
supplies
Fan tray
Air filter
Before you lift the services gateway, you must remove the following components:
•Power supplies
•SCB
•Routing Engine
•Air filter
•Fan tray
•SPCs
•MPCs
10

To remove the components from the services gateway:
1. Slide each component out of the chassis evenly so that it does not become stuck or damaged.
2. Label each component as you remove it so you can reinstall it in the correct location.
3. Immediately store each removed component in an electrostatic bag.
4. Do not stack removed components. Lay each one on a flat surface.
Install the Services Gateway Using a Lift
To install the services gateway using a lift:
1. Ensure that the rack is in its permanent location and is secured to the building. Ensure that the installation
site allows adequate clearance for both airflow and maintenance. For details, see the SRX5400 Services
Gateway hardware documentation at www.juniper.net/documentation/.
2. Load the services gateway onto the lift, making sure that it rests securely on the lift platform (see
Figure 6 on page 12).
11

Figure 6: Load the Services Gateway onto the Lift
g030322
3. Using the lift, position the services gateway in front of the rack or cabinet, centering it in front of the
mounting shelf.
4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf, and position it as close
as possible to the shelf.
5. Carefully slide the services gateway onto the mounting shelf so that the bottom of the chassis and the
mounting shelf overlap by approximately 2 in.
6. Slide the services gateway onto the mounting shelf until the mounting brackets contact the rack rails.
The shelf ensures that the holes in the mounting brackets and the front-mounting flanges of the chassis
align with the holes in the rack rails.
7. Move the lift away from the rack.
12

8. Install a mounting screw into each of the open mounting holes aligned with the rack, starting from the
bottom.
9. Visually inspect the alignment of the services gateway. If the services gateway is installed properly in
the rack, all the mounting screws on one side of the rack should be aligned with the mounting screws
on the opposite side and the services gateway should be level.
Install the Services Gateway Without a Mechanical Lift
Lifting the chassis and mounting it in a rack requires at least two people. The empty chassis weighs
approximately 65.5 lb (29.7 kg).
1. Ensure that the rack is in its permanent location and is secured to the building.
2. Position the chassis in front of the rack or cabinet, centering it in front of the mounting shelf. Use a
pallet jack if one is available.
3. With one person on each side, hold onto the bottom of the chassis and carefully lift it onto the small
mounting shelf. See Figure 7 on page 13.
Figure 7: Lift the Services Gateway into the Rack
4. Slide the chassis onto the mounting shelf until the mounting brackets contact the rack rails. The shelf
ensures that the holes in the mounting brackets and the front-mounting flanges of the chassis align
with the holes in the rack rails.
13

5. To install the chassis in an open-frame rack, install a mounting screw into each of the open mounting
holes aligned with the rack, starting from the bottom.
6. Visually inspect the alignment of the chassis. If the chassis is installed properly in the rack, all the
mounting screws on one side of the rack should be aligned with the mounting screws on the opposite
side and the chassis should be level.
Reinstall Components
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to
one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services
Gateway hardware documentation at www.juniper.net/documentation/.
2. Slide each component into the chassis evenly so that it does not become stuck or damaged.
3. Tighten the captive screws or lock any levers for each component installed.
NOTE: Make sure that all empty slots are covered with blank panels before you operate the services
gateway.
Proceed to “Step 4: Connect the Grounding Cable” on page 14.
Step 4: Connect the Grounding Cable
WARNING: To meet safety and electromagnetic interference (EMI) requirements and
to ensure proper operation, you must properly ground the services gateway chassis
before connecting power.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to
an approved site ESD grounding point. See the instructions for your site.
2. Connect the grounding cable to a proper earth ground.
14

3. Verify that a licensed electrician has attached the cable lug provided with the services gateway to the
grounding cable. The cable must be 6-AWG (13.3 mm2), minimum 60°C wire.
4. Make sure that grounding surfaces are clean and brought to a bright finish before grounding connections
are made.
5. Disconnect the ESD grounding strap from the site ESD grounding point, and connect it to one of the
ESD points on the chassis. For more information about ESD, see the SRX5400 Services Gateway
hardware documentation at www.juniper.net/documentation/.
6. Place the grounding cable lug over the grounding point. The grounding point is sized for UNC 1/4-20
screws and 1/4 in. split washers, which are provided in the accessory box.
7. Secure the grounding cable lug to the grounding point, first with the washers, and then with the screws
as shown in Figure 8 on page 15.
Figure 8: Connecting the Grounding Cable
PEM 3
PEM 2
PEM 1
PEM 0
AIR
FILTER
FAN
TRAY
g030326
ESD
8. Verify that the grounding cabling is correct, that the grounding cable does not touch or block access
to services gateway components, and that it does not drape where people could trip over it.
Proceed to “Step 5: Connect External Devices and Network Cables” on page 16.
15

Step 5: Connect External Devices and Network Cables
IN THIS SECTION
Connect to a Network for Out-of-Band Management | 16
Connect a Management Console | 16
Connect the Network Cables | 17
To connect external devices and network cables:
Connect to a Network for Out-of-Band Management
1. Turn off the power to the management device.
2. Plug one end of the RJ-45 Ethernet cable into the appropriate ETHERNET port on the services gateway
Routing Engine.
3. Plug the other end of the cable into the network device.
Connect a Management Console
1. Plug one end of the RJ-45 Ethernet cable into the CONSOLE or AUX port on the services gateway
Routing Engine.
2. Plug the female DB-9 end into the device’s serial port.
16

Connect the Network Cables
1. Have ready a length of the type of cable used by the interface. For cable specifications, see the SRX5400
Services Gateway hardware documentation at www.juniper.net/documentation/.
2. If the cable connector port is covered by a rubber safety plug, remove the plug.
WARNING: Do not look directly into a fiber-optic transceiver or into the ends of
fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a
transceiver emit laser light that can damage your eyes.
CAUTION: Do not leave a fiber-optic transceiver uncovered except when you are
inserting or removing cable. The safety cap keeps the port clean and prevents
accidental exposure to laser light.
3. Insert the cable connector into the cable connector port on the faceplate as shown in
Figure 9 on page 17.
Figure 9: Connect Network Cables
g030325
4. Arrange the cable in the cable management system to prevent it from dislodging or developing stress
points. Secure the cable so that it is not supporting its own weight as it hangs to the floor. Place excess
cable out of the way in a neatly coiled loop in the cable management system. Placing fasteners on the
loop helps to maintain its shape.
17

CAUTION: Avoid bending a fiber-optic cable beyond its minimum bend radius. An
arc smaller than a few inches in diameter can damage the cable and cause problems
that are difficult to diagnose.
CAUTION: Do not let fiber-optic cables hang free from the connector. Do not allow
the fastened loops of a cable to dangle, which stresses the cable at the fastening point.
Proceed to “Step 6: Connect Power Cables” on page 18.
Step 6: Connect Power Cables
IN THIS SECTION
Connect Power to an AC-Powered Services Gateway | 18
Connect Power to a DC-Powered Services Gateway | 20
Depending on its configuration, the services gateway uses either AC or DC power supplies. Perform the
appropriate procedures for each power supply in the services gateway.
Connect Power to an AC-Powered Services Gateway
WARNING: To meet safety and electromagnetic interference (EMI) requirements and
to ensure proper operation, you must properly ground the services gateway chassis
before connecting power. See “Step 4: Connect the Grounding Cable” on page 14 for
instructions.
18

NOTE: The device is not shipped with AC power cords. Make sure to order or obtain AC power
cords with a plug appropriate for your geographical location.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to
one of the ESD points on the chassis. For more information about ESD, see the SRX5400 Services
Gateway hardware documentation at www.juniper.net/documentation/.
2. Locate the power cords you will use to connect the device to AC power. See the SRX5400 Services
Gateway hardware documentation at www.juniper.net/documentation/ for specifications.
3. For each power supply:
a. Move the power switch on the power supply faceplate to the OFF position (O).
b. Insert the appliance coupler end of the power cord into the appliance inlet on the power supply
(Figure 10 on page 20).
c. Insert the power cord plug into an external AC power source receptacle.
NOTE: Each power supply must be connected to a dedicated AC power feed and a dedicated
customer site circuit breaker. We recommend using a 15-A (250-VAC), circuit breaker
minimum, or as permitted by local code.
d. Dress the power cord appropriately. Verify that the power cord does not block the air exhaust or
access to services gateway components, and that it does not drape where people could trip over
it.
19

Figure 10: Connecting AC Power to the Services Gateway
Connect Power to a DC-Powered Services Gateway
This procedure addresses connecting power to services gateways equipped with DC power supplies.
WARNING: To meet safety and electromagnetic interference (EMI) requirements and
to ensure proper operation, you must properly ground the services gateway chassis
before connecting power. See “Step 4: Connect the Grounding Cable” on page 14 for
instructions.
Table 3 on page 20 describes the services gateway input voltage requirements.
Table 3: DC Power System Input Voltage
SpecificationItem
Operating range: –40.5 to –72 VDCDC input voltage
20