Juniper SRX5600 User manual

SRX5600 Services Gateway Getting
Started Guide
December 2013
Part Number: 530-055499
Revision 01
This document describes how to install the SRX5600 Services Gateway.
Contents AboutThisGuide....................................................3
Step 1: Prepare the Site for SRX5600 Services Gateway Installation . . . . . . . . . . . 4
Rack-MountingRequirements......................................4
Tools Required to Unpack and Prepare the SRX5600 Services Gateway for
Installation..................................................6
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-FrameRack................................................6
Step3:InstalltheServicesGateway.....................................8
RemoveComponents.............................................9
Install the Services Gateway Using a Lift . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Install the Services Gateway Without a Mechanical Lift . . . . . . . . . . . . . . . . . 12
ReinstallComponents............................................12
Step4:ConnecttheGroundingCable...................................13
Step 5: Connect External Devices and Network Cables . . . . . . . . . . . . . . . . . . . . . 14
Connect to a Network for Out-of-Band Management . . . . . . . . . . . . . . . . . . . 14
ConnectaManagementConsole...................................14
ConnecttheNetworkCables......................................15
Step6:ConnectPowerCables.........................................16
Connect Power to an AC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . 16
Connect Power to a DC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . . 17
Step 7: Perform the Initial Software Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 20
EnterConfigurationMode........................................20
Configure User Accounts and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
ConfigureSystemAttributes.......................................21
CommittheConfiguration.........................................21
SafetyWarnings....................................................24
1Copyright © 2013, Juniper Networks, Inc.

SRX5600 Services Gateway Compliance Statements for EMC
Requirements ..................................................26
Canada .......................................................26
EuropeanCommunity............................................26
Japan.........................................................26
United States ..................................................26
SRX Series Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
RequestingTechnicalSupport.........................................27
RevisionHistory....................................................28
Copyright © 2013, Juniper Networks, Inc.2
SRX5600 Services Gateway Getting Started Guide

About This Guide
This guide contains information that you need to install and configure the SRX5600
Services Gateway quickly. For complete installation instructions, see the SRX5600
Services Gateway Hardware Documentation at www.juniper.net/techpubs/.
WARNING: This guide contains a summary of safety warnings in “Safety
Warnings” on page 24. For a complete list of warnings for this device, including
translations, see the SRX5600 Services Gateway Hardware Documentation
at www.juniper.net/techpubs/.
The SRX5600 Services Gateway is a high-performance, highly scalable, carrier-class
security device with multiprocessor architecture. The services gateway is eight rack units
(RU) tall. Three services gateways can be stacked in a single floor-to-ceiling rack, for
increased port density per unit of floor space. The services gateway provides six slots
that can be populated with up to four Services Processing Cards (SPCs) and interface
cards and two Switch Control Boards (SCBs) in redundant fabric configurations. The
interface cards can be any of the following types:
•I/O cards (IOCs) have fixed ports on their front panels.
•Flex I/O cards (Flex IOCs) have two slots on their front panels for smaller cards called
port modules that add additional ports to the services gateway.
•Modular Port Concentrators (MPCs) have two slots on their front panels for smaller
cards called Modular Interface Cards (MICs) that add additional ports to the services
gateway.
The SRX5600 Services Gateway provides redundancy and resiliency. The hardware
system is fully redundant, including power supplies and SCBs.
By installing various combinations of interface cards and SPCs, you can tailor both the
number of ports and the maximum services processing capacity to suit your network.
Table 1 on page 3 describes the minimum system configuration for the SRX5600 Services
Gateway.
Table 1: Minimum System Configuraton
MinimumComponent
1SPC
1Interface card (IOC, Flex IOC, or MPC)
1SCB
1Routing Engine
3Copyright © 2013, Juniper Networks, Inc.
About This Guide

For detailed information about the cards supported by the services gateway, see the
SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at
www.juniper.net/techpubs/.
The services gateway is shipped in a cardboard box strapped securely to a wooden pallet.
Plastic straps secure the top and bottom in place. The services gateway chassis is bolted
to this pallet. A printed copy of this document and a cardboard accessory box are also
included in the shipping container.
Step 1: Prepare the Site for SRX5600 Services Gateway Installation
•Rack-Mounting Requirements on page 4
•Tools Required to Unpack and Prepare the SRX5600 Services Gateway for
Installation on page 6
Rack-Mounting Requirements
•You can install the services gateway in a four-post rack or cabinet or an open-frame
rack.
•The rack rails must be spaced widely enough to accommodate the services gateway
chassis's external dimensions: 14.0 in. (35.6 cm) high, 24.5 in. (62.2 cm) deep, and
17.45 in. (44.3 cm) wide. The outer edges of the mounting brackets extend the width
to 19 in. (48.3 cm). See Figure 1 on page 5.
Copyright © 2013, Juniper Networks, Inc.4
SRX5600 Services Gateway Getting Started Guide

Figure 1: Rack Clearance and Chassis Dimensions
•The rack must be strong enough to support the weight of the fully configured services
gateway, up to 213 lb (97 kg). If you stack five fully configured services gateways in one
rack, it must be capable of supporting about 1066 lb (485 kg).
•For service personnel to remove and install hardware components, there must be
adequate space at the front and back of the services gateway. Allow at least
30 in. (76.2 cm) in front of the services gateway and 24 in. (61 cm) behind the services
gateway.
•The rack or cabinet must have an adequate supply of cooling air.
•Ensure that the cabinet allows the chassis hot exhaust air to exit the cabinet without
recirculating into the services gateway.
•The services gateway must be installed into a rack that is secured to the building
structure.
•The services gateway should be mounted at the bottom of the rack if it is the only unit
in the rack.
•When you are mounting the services gateway in a partially filled rack, load the rack
from the bottom to the top, with the heaviest component at the bottom of the rack.
5Copyright © 2013, Juniper Networks, Inc.
Rack-Mounting Requirements

Tools Required to Unpack and Prepare the SRX5600 Services Gateway for Installation
To unpack the services gateway and prepare for installation, you need the following
tools:
•A mechanical lift—recommended
•Phillips (+) screwdrivers, numbers 1 and 2
•2.5-mm flat-blade (–) screwdriver
•7/16-in. torque-controlled driver or socket wrench
•1/2-in. or 13-mm open-end or socket wrench to remove bracket bolts from the shipping
pallet
•Electrostatic discharge wrist strap
•Antistatic mat
Proceed to “Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-Frame Rack” on page 6.
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame
Rack
To install the mounting shelf on the front rails of a four-post rack or cabinet, or on the
rails of an open-frame rack:
1. If needed, install cage nuts in the holes specified in Table 2 on page 6.
2. On the back of each rack rail, partially insert a mounting screw into the lowest hole
specified in Table 2 on page 6.
3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of each
flange on a mounting screw.
4. Partially insert screws into the open holes in each flange of the mounting shelf (see
Figure 2 on page 7 or Figure 3 on page 8).
5. Tighten all the screws completely.
Table 2: Mounting Shelf Hole Locations
Distance Above U Division
Hole (Starting from U
Division)
1.14 U2.00 in. (5.1 cm)4
0.86 U1.51 in. (3.8 cm)3
0.50 U0.88 in. (2.2 cm)2
0.14 U0.25 in. (0.6 cm)1
Copyright © 2013, Juniper Networks, Inc.6
SRX5600 Services Gateway Getting Started Guide

Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet
g004258
Four-post open rack
Small mounting shelf
7Copyright © 2013, Juniper Networks, Inc.
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack

Figure 3: Mounting Hardware for an Open-Frame Rack
Proceed to “Step 3: Install the Services Gateway” on page 8.
Step 3: Install the Services Gateway
Because of the services gateway’s size and weight, you must remove all components,
as shown in Figure 4 on page 9 and Figure 5 on page 9, before you install the services
gateway. We also recommend using a mechanical lift to install the services gateway.
•Remove Components on page 9
•Install the Services Gateway Using a Lift on page 10
•Install the Services Gateway Without a Mechanical Lift on page 12
•Reinstall Components on page 12
Copyright © 2013, Juniper Networks, Inc.8
SRX5600 Services Gateway Getting Started Guide

Remove Components
Figure 4: Components to Remove from the Front of the Services Gateway
STATUS
SPU0
SERVICE
STATUS
SPU1
SERVICE HA
OK/FAIL
CHASSISCLUSTER
CONTROL0
ENABLE
LINK/ACT
CHASSISCLUSTER
CONTROL1
ENABLE
LINK/ACT
STATUS
SPU0
SERVICE
STATUS
SPU1
SERVICE HA
OK/FAIL
CHASSISCLUSTER
CONTROL0
ENABLE
LINK/ACT
CHASSISCLUSTER
CONTROL1
ENABLE
LINK/ACT
SPCs
g030210
IOCs
SCB0
and RE
SCB1
Figure 5: Components to Remove from the Rear of the Services Gateway
Before you lift the services gateway, you must remove the following components:
•Power supplies
•Cards (SCBs, SPCs, IOCs, Flex IOCs, and MPCs)
•Air filter
•Fan tray
9Copyright © 2013, Juniper Networks, Inc.
Remove Components

To remove the components from the services gateway:
1. Slide each component out of the chassis evenly so that it does not become stuck or
damaged.
2. Label each component as you remove it so you can reinstall it in the correct location.
3. Immediately store each removed component in an electrostatic bag.
4. Do not stack removed components. Lay each one on a flat surface.
NOTE: For complete instructions on removing services gateway components,
see “Install the Services Gateway Without a Mechanical Lift” in the SRX5600
Services Gateway Hardware Guide.
Install the Services Gateway Using a Lift
To install the services gateway using a lift:
1. Ensure that the rack is in its permanent location and is secured to the building. Ensure
that the installation site allows adequate clearance for both airflow and maintenance.
For details, see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
2. Load the services gateway onto the lift, making sure that it rests securely on the lift
platform (see Figure 6 on page 11).
Copyright © 2013, Juniper Networks, Inc.10
SRX5600 Services Gateway Getting Started Guide