Juniper SRX550 Installation instructions

SRX550 Services Gateway Hardware Guide
Published
2020-12-16

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks
are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
SRX550 Services Gateway Hardware Guide
Copyright © 2020 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)
Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement
(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you
agree to the terms and conditions of that EULA.
ii

Table of Contents
About the Documentation | x
Documentation and Release Notes | x
Using the Examples in This Manual | x
Merging a Full Example | xi
Merging a Snippet | xii
Documentation Conventions | xii
Documentation Feedback | xv
Requesting Technical Support | xv
Self-Help Online Tools and Resources | xvi
Creating a Service Request with JTAC | xvi
Overview
1
System Overview | 2
SRX550 Services Gateway Description | 2
SRX550 Services Gateway Hardware Features | 3
SRX550 Services Gateway Software Features and Licenses | 4
SRX550 Services Gateway Power over Ethernet | 9
Accessing the SRX550 Services Gateway | 11
Hardware Component Overview | 12
SRX550 Services Gateway Boot Devices and Dual-Root Partitioning Scheme | 12
Chassis Description | 14
SRX550 Services Gateway Chassis | 14
SRX550 Services Gateway Front Panel | 15
SRX550 Services Gateway Front Panel LEDs | 19
SRX550 Services Gateway Back Panel | 22
Interface Module Description | 24
SRX550 Services Gateway Gigabit-Backplane Physical Interface Modules | 24
SRX550 Services Gateway Mini-Physical Interface Modules | 26
iii

Cooling System Description | 27
SRX550 Services Gateway Cooling System | 27
Power System Description | 28
SRX550 Services Gateway Power Supply | 28
Site Planning and Specifications
2
Planning and Preparing the Site | 33
Site Preparation Checklist for the SRX550 Services Gateway | 33
General Site Installation Guidelines for the SRX550 Services Gateway | 35
SRX550 Services Gateway Environmental Specifications | 36
Rack Requirements | 38
Rack-Mounting Requirements and Warnings | 38
SRX550 Services Gateway Rack Size and Strength Requirements | 43
SRX550 Services Gateway Spacing of Mounting Bracket and Flange Holes | 44
Clearance Requirements for Airflow and Hardware Maintenance of the SRX550 Services
Gateway | 45
Cabinet Requirements | 47
SRX550 Services Gateway Cabinet Size and Clearance Requirements | 47
SRX550 Services Gateway Cabinet Airflow Requirements | 48
Power Requirements and Specifications | 49
SRX550 Services Gateway Electrical Wiring Guidelines | 49
SRX550 Services Gateway Supported AC Power Cords | 51
SRX550 Services Gateway AC Power Supply Electrical Specifications | 52
SRX550 Services Gateway DC Power Cable Specifications | 53
SRX550 Services Gateway DC Power Supply Electrical Specifications | 54
SRX550 Services Gateway Power Requirements | 54
Cable Specifications and Pinouts | 56
Interface Cabling and Wiring Specifications for the SRX550 Services Gateway | 56
RJ-45 Connector Pinouts for the SRX550 Services Gateway Ethernet Port | 57
RJ-45 Connector Pinouts for the SRX550 Services Gateway Console Port | 58
iv

Initial Installation and Configuration
3
Installation Overview | 60
Installation Overview for the SRX550 Services Gateway | 60
Required Tools and Parts for Installing the SRX550 Services Gateway | 61
Installation Instructions Warning | 62
SRX550 Services Gateway Autoinstallation Overview | 62
Unpacking the Services Gateway | 64
Unpacking the SRX550 Services Gateway | 64
Verifying Parts Received with the SRX550 Services Gateway | 65
Installing the Mounting Hardware | 67
Preparing the SRX550 Services Gateway for Rack-Mount Installation | 67
Connecting the SRX550 Services Gateway to the Building Structure | 68
Installing the Services Gateway | 69
Installing the SRX550 Services Gateway in a Rack | 69
Installing an AC Power Supply on the SRX550 Services Gateway | 72
Installing a DC Power Supply on the SRX550 Services Gateway | 73
Grounding the SRX550 Services Gateway | 76
SRX550 Services Gateway Grounding Specifications | 76
Grounding the SRX550 Services Gateway | 77
Connecting the SRX550 Services Gateway to External Devices | 79
Organizing Interface Cables on the SRX550 Services Gateway | 79
Connecting the Modem to the Console Port on the SRX550 Services Gateway | 80
Connecting to the SRX550 Services Gateway from the CLI with the USB Console Port | 81
Connecting the CLI at the User End for the SRX550 Services Gateway | 83
Configuring the Modem at the SRX550 Services Gateway End | 85
v

Providing Power to the SRX550 Services Gateway | 87
Connecting the SRX550 Services Gateway to the AC Power Source | 87
Connecting an AC Power Cord to the SRX550 Services Gateway | 89
Connecting the SRX550 Services Gateway to a DC Power Source | 90
Powering On the SRX550 Services Gateway | 93
Powering Off the SRX550 Services Gateway | 94
Performing Initial Configuration | 95
SRX550 Services Gateway Basic Connectivity Overview | 95
SRX550 Services Gateway Basic Connectivity Settings | 97
Connecting to the SRX550 Services Gateway from the J-Web Interface | 98
SRX550 Services Gateway Secure Web Access Overview | 101
Connecting to the SRX550 Services Gateway from the CLI Locally | 102
Connecting to the SRX550 Services Gateway from the CLI Remotely | 104
Viewing Factory-Default Settings of the SRX550 Services Gateway | 104
Configuring Basic Settings for the SRX550 Services Gateway with a Configuration Editor | 110
Displaying Basic Connectivity Configurations for the SRX550 Services Gateway | 115
Built-In Ethernet Ports for the SRX550 Services Gateway | 116
Management Access for the SRX550 Services Gateway | 119
Maintaining and Troubleshooting Components
4
Maintaining Components | 122
Required Tools and Parts for Maintaining the SRX550 Services Gateway Hardware
Components | 122
Routine Maintenance Procedures for the SRX550 Services Gateway | 123
Maintaining the SRX550 Services Gateway Cooling System Components | 123
Maintaining the SRX550 Services Gateway Power Supply | 123
Troubleshooting Components | 125
Troubleshooting with the CLI on the SRX550 Services Gateway | 125
Troubleshooting with LEDs on the SRX550 Services Gateway | 126
Troubleshooting with Chassis and Interface Alarm Messages on the SRX550 Services Gateway | 128
Troubleshooting the Power System on the SRX550 Services Gateway | 130
Using the RESET CONFIG Button on the SRX550 Services Gateway | 134
Changing the RESET CONFIG Button Behavior on the SRX550 Services Gateway | 136
vi

Resetting the SRX550 Services Gateway | 137
Juniper Networks Technical Assistance Center | 138
Replacing Components
5
Overview of Replacing Components | 140
Required Tools and Parts for Replacing Hardware Components on the SRX550 Services
Gateway | 140
Replacing Power System Components | 142
Replacing the AC Power Supply on the SRX550 Services Gateway | 142
Disconnecting an AC Power Cord from the SRX550 Services Gateway | 142
Removing an AC Power Supply from the SRX550 Services Gateway | 143
Installing an AC Power Supply on the SRX550 Services Gateway | 144
Connecting an AC Power Cord to the SRX550 Services Gateway | 145
Replacing a DC Power Supply on the SRX550 Services Gateway | 146
Removing a DC Power Supply from the SRX550 Services Gateway | 146
Installing a DC Power Supply on the SRX550 Services Gateway | 148
Contacting Customer Support and Returning Components | 152
Contacting Customer Support | 152
Return Procedure for the SRX550 Services Gateway | 153
Locating the SRX550 Services Gateway Chassis Serial Number and Agency Label | 154
Locating the SRX550 Services Gateway Mini-PIM and GPIM Serial Number Labels | 154
Listing the SRX550 Services Gateway Component Serial Numbers with the CLI | 155
Information You Might Need to Supply to JTAC | 156
Required Tools and Parts for Packing the SRX550 Services Gateway | 156
Packing the SRX550 Services Gateway for Shipment | 157
Packing SRX550 Services Gateway Components for Shipment | 158
Safety
6
General Safety Guidelines and Warnings | 161
Definitions of Safety Warning Levels | 161
General Safety Guidelines and Warnings | 164
Restricted Access Warning | 166
Qualified Personnel Warning | 168
vii

Prevention of Electrostatic Discharge Damage | 169
Fire Safety Requirements | 171
Fire Safety Requirements | 171
Fire Suppression | 171
Fire Suppression Equipment | 171
Laser and LED Safety Guidelines and Warnings | 173
Laser and LED Safety Guidelines and Warnings | 173
General Laser Safety Guidelines | 173
Class 1 Laser Product Warning | 174
Class 1 LED Product Warning | 175
Laser Beam Warning | 176
Radiation from Open Port Apertures Warning | 177
Maintenance and Operational Safety Guidelines and Warnings | 178
Maintenance and Operational Safety Guidelines and Warnings | 178
Battery Handling Warning | 179
Jewelry Removal Warning | 180
Lightning Activity Warning | 182
Operating Temperature Warning | 183
Product Disposal Warning | 185
Electrical Safety Guidelines and Warnings | 186
Action to Take After an Electrical Accident | 186
General Electrical Safety Guidelines and Warnings | 186
AC Power Electrical Safety Guidelines | 187
DC Power Electrical Safety Guidelines and Warnings | 188
Agency Approvals and Regulatory Compliance Information | 200
SRX550 Services Gateway Agency Approvals | 200
SRX550 Services Gateway Acoustic Noise Compliance Statements | 201
SRX550 Services Gateway Compliance Statements for EMC Requirements | 202
Canada | 202
European Community | 202
viii

Israel | 202
Japan | 203
United States | 203
SRX550 Services Gateway Compliance Statements for NEBS | 203
Lithium Battery | 204
ix

About the Documentation
IN THIS SECTION
Documentation and Release Notes | x
Using the Examples in This Manual | x
Documentation Conventions | xii
Documentation Feedback | xv
Requesting Technical Support | xv
Use this guide to install hardware and perform initial software configuration, routine maintenance, and
troubleshooting for the SRX550 Services Gateway. After completing the installation and basic configuration
procedures covered in this guide, refer to the Junos OS documentation for information about further
software configuration.
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product
documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the
product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.
These books go beyond the technical documentation to explore the nuances of network architecture,
deployment, and administration. The current list can be viewed at https://www.juniper.net/books.
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load merge relative
command. These commands cause the software to merge the incoming configuration into the current
candidate configuration. The example does not become active until you commit the candidate configuration.
x

If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example
isafull example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In
this case, use the load merge relative command. These procedures are described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following configuration to a file and name the file ex-script.conf. Copy the
ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
2. Merge the contents of the file into your routing platform configuration by issuing the load merge
configuration mode command:
[edit]
user@host# load merge /var/tmp/ex-script.conf
load complete
xi

Merging a Snippet
To merge a snippet, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the
ex-script-snippet.conf file to the /var/tmp directory on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode
command:
[edit]
user@host# edit system scripts
[edit system scripts]
3. Merge the contents of the file into your routing platform configuration by issuing the load merge
relative configuration mode command:
[edit system scripts]
user@host# load merge relative /var/tmp/ex-script-snippet.conf
load complete
For more information about the load command, see CLI Explorer.
Documentation Conventions
Table 1 on page xiii defines notice icons used in this guide.
xii

Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware
damage.
Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xiii defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type
the configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on
the terminal screen.
Fixed-width text like this
•A policy term is a named structure
that defines match conditions and
actions.
•Junos OS CLI User Guide
•RFC 1997, BGP Communities
Attribute
•Introduces or emphasizes important
new terms.
•Identifies guide names.
•Identifies RFC and Internet draft
titles.
Italic text like this
xiii

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
Configure the machine’s domain
name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for
which you substitute a value) in
commands or configuration
statements.
Italic text like this
•To configure a stub area, include
the stub statement at the [edit
protocols ospf area area-id]
hierarchy level.
•The console port is labeled
CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy
levels; or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or
variables.
< > (angle brackets)
broadcast | multicast
(string1 |string2 |string3)
Indicates a choice between the
mutually exclusive keywords or
variables on either side of the symbol.
The set of choices is often enclosed
in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS
only
Indicates a comment specified on the
same line as the configuration
statement to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
xiv

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
•In the Logical Interfaces box, select
All Interfaces.
•To cancel the configuration, click
Cancel.
Represents graphical user interface
(GUI) items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of
menu selections.
>(bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You can use either
of the following methods:
•Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper
Networks TechLibrary site, and do one of the following:
•Click the thumbs-up icon if the information on the page was helpful to you.
•Click the thumbs-down icon if the information on the page was not helpful to you or if you have
suggestions for improvement, and use the pop-up form to provide feedback.
•E-mail—Send your comments to [email protected]. Include the document or topic name,
URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an active Juniper Care or Partner Support Services support contract, or are
xv

covered under warranty, and need post-sales technical support, you can access our tools and resources
online or open a case with JTAC.
•JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User
Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.
•JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,
365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called
the Customer Support Center (CSC) that provides you with the following features:
•Find CSC offerings: https://www.juniper.net/customers/support/
•Search for known bugs: https://prsearch.juniper.net/
•Find product documentation: https://www.juniper.net/documentation/
•Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/
•Download the latest versions of software and review release notes:
https://www.juniper.net/customers/csc/software/
•Search technical bulletins for relevant hardware and software notifications:
https://kb.juniper.net/InfoCenter/
•Join and participate in the Juniper Networks Community Forum:
https://www.juniper.net/company/communities/
•Create a service request online: https://myjuniper.juniper.net
To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:
https://entitlementsearch.juniper.net/entitlementsearch/
Creating a Service Request with JTAC
You can create a service request with JTAC on the Web or by telephone.
•Visit https://myjuniper.juniper.net.
•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
https://support.juniper.net/support/requesting-support/.
xvi

1
PART
Overview
System Overview | 2
Hardware Component Overview | 12
Chassis Description | 14
Interface Module Description | 24
Cooling System Description | 27
Power System Description | 28

CHAPTER 1
System Overview
IN THIS CHAPTER
SRX550 Services Gateway Description | 2
SRX550 Services Gateway Hardware Features | 3
SRX550 Services Gateway Software Features and Licenses | 4
SRX550 Services Gateway Power over Ethernet | 9
Accessing the SRX550 Services Gateway | 11
SRX550 Services Gateway Description
The SRX550 Services Gateway is a mid-range dynamic services gateway that consolidates network
infrastructure and security applications for regional offices, large branch offices, and small to medium
enterprises. The services gateway provides cost-effective, scalable integration of routing, security, and
other mid-range applications for these sites.
The SRX550 Services Gateway has a modular 2U chassis that fits a 19-inch rack with a depth of
approximately 18.1 inches.
Figure 1 on page 3 shows the SRX550 Services Gateway.
2

Figure 1: SRX550 Services Gateway
g034102
RELATED DOCUMENTATION
SRX550 Services Gateway Chassis | 14
Accessing the SRX550 Services Gateway | 11
SRX550 Services Gateway Software Features and Licenses | 4
SRX550 Services Gateway Hardware Features
The SRX550 Services Gateway provides the following features:
•Symmetric Multiprocessing-based data forwarding.
•Hardware-based control and data plane separation.
•Six on-board 10/100/1000Base-T Gigabit Ethernet ports.
•Four on-board SFP Gigabit Ethernet ports.
•Support for dual AC or dual DC power supplies with a redundant configuration in the chassis. 645 W
AC and DC power supplies with or without Power over Ethernet (PoE) support. The AC and DC power
supplies are hot-swappable.
•Junos OS support for advanced security and routing services on the Services and Routing Engine (SRE).
•The services gateway supports Gigabit-Backplane Physical Interface Modules (GPIMs) and also Mini
Physical Interface Modules (Mini-PIMs). For details about the supported GPIMs and Mini-PIMs, see the
SRX Series Services Gateways for the Branch Physical Interface Modules Hardware Guide.
3

RELATED DOCUMENTATION
SRX550 Services Gateway Description | 2
Accessing the SRX550 Services Gateway | 11
SRX550 Services Gateway Software Features and Licenses | 4
SRX550 Services Gateway Chassis | 14
Physical Interface Modules
SRX550 Services Gateway Software Features and Licenses
The services gateway provides the software features listed in Table 3 on page 5.
NOTE: Some software features require the purchase of a separate license.
For information about features that require a license on this services gateway, see the Installation and
Upgrade Guide for Security Devices.
4