Juniper SRX5600 User manual

SRX5600 Services Gateway Getting
Started Guide
December 2013
Part Number: 530-055499
Revision 01
This document describes how to install the SRX5600 Services Gateway.
Contents AboutThisGuide....................................................3
Step 1: Prepare the Site for SRX5600 Services Gateway Installation . . . . . . . . . . . 4
Rack-MountingRequirements......................................4
Tools Required to Unpack and Prepare the SRX5600 Services Gateway for
Installation..................................................6
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-FrameRack................................................6
Step3:InstalltheServicesGateway.....................................8
RemoveComponents.............................................9
Install the Services Gateway Using a Lift . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Install the Services Gateway Without a Mechanical Lift . . . . . . . . . . . . . . . . . 12
ReinstallComponents............................................12
Step4:ConnecttheGroundingCable...................................13
Step 5: Connect External Devices and Network Cables . . . . . . . . . . . . . . . . . . . . . 14
Connect to a Network for Out-of-Band Management . . . . . . . . . . . . . . . . . . . 14
ConnectaManagementConsole...................................14
ConnecttheNetworkCables......................................15
Step6:ConnectPowerCables.........................................16
Connect Power to an AC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . 16
Connect Power to a DC-Powered Services Gateway . . . . . . . . . . . . . . . . . . . . 17
Step 7: Perform the Initial Software Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 20
EnterConfigurationMode........................................20
Configure User Accounts and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
ConfigureSystemAttributes.......................................21
CommittheConfiguration.........................................21
SafetyWarnings....................................................24
1Copyright © 2013, Juniper Networks, Inc.

SRX5600 Services Gateway Compliance Statements for EMC
Requirements ..................................................26
Canada .......................................................26
EuropeanCommunity............................................26
Japan.........................................................26
United States ..................................................26
SRX Series Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
RequestingTechnicalSupport.........................................27
RevisionHistory....................................................28
Copyright © 2013, Juniper Networks, Inc.2
SRX5600 Services Gateway Getting Started Guide

About This Guide
This guide contains information that you need to install and configure the SRX5600
Services Gateway quickly. For complete installation instructions, see the SRX5600
Services Gateway Hardware Documentation at www.juniper.net/techpubs/.
WARNING: This guide contains a summary of safety warnings in “Safety
Warnings” on page 24. For a complete list of warnings for this device, including
translations, see the SRX5600 Services Gateway Hardware Documentation
at www.juniper.net/techpubs/.
The SRX5600 Services Gateway is a high-performance, highly scalable, carrier-class
security device with multiprocessor architecture. The services gateway is eight rack units
(RU) tall. Three services gateways can be stacked in a single floor-to-ceiling rack, for
increased port density per unit of floor space. The services gateway provides six slots
that can be populated with up to four Services Processing Cards (SPCs) and interface
cards and two Switch Control Boards (SCBs) in redundant fabric configurations. The
interface cards can be any of the following types:
•I/O cards (IOCs) have fixed ports on their front panels.
•Flex I/O cards (Flex IOCs) have two slots on their front panels for smaller cards called
port modules that add additional ports to the services gateway.
•Modular Port Concentrators (MPCs) have two slots on their front panels for smaller
cards called Modular Interface Cards (MICs) that add additional ports to the services
gateway.
The SRX5600 Services Gateway provides redundancy and resiliency. The hardware
system is fully redundant, including power supplies and SCBs.
By installing various combinations of interface cards and SPCs, you can tailor both the
number of ports and the maximum services processing capacity to suit your network.
Table 1 on page 3 describes the minimum system configuration for the SRX5600 Services
Gateway.
Table 1: Minimum System Configuraton
MinimumComponent
1SPC
1Interface card (IOC, Flex IOC, or MPC)
1SCB
1Routing Engine
3Copyright © 2013, Juniper Networks, Inc.
About This Guide

For detailed information about the cards supported by the services gateway, see the
SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference at
www.juniper.net/techpubs/.
The services gateway is shipped in a cardboard box strapped securely to a wooden pallet.
Plastic straps secure the top and bottom in place. The services gateway chassis is bolted
to this pallet. A printed copy of this document and a cardboard accessory box are also
included in the shipping container.
Step 1: Prepare the Site for SRX5600 Services Gateway Installation
•Rack-Mounting Requirements on page 4
•Tools Required to Unpack and Prepare the SRX5600 Services Gateway for
Installation on page 6
Rack-Mounting Requirements
•You can install the services gateway in a four-post rack or cabinet or an open-frame
rack.
•The rack rails must be spaced widely enough to accommodate the services gateway
chassis's external dimensions: 14.0 in. (35.6 cm) high, 24.5 in. (62.2 cm) deep, and
17.45 in. (44.3 cm) wide. The outer edges of the mounting brackets extend the width
to 19 in. (48.3 cm). See Figure 1 on page 5.
Copyright © 2013, Juniper Networks, Inc.4
SRX5600 Services Gateway Getting Started Guide

Figure 1: Rack Clearance and Chassis Dimensions
•The rack must be strong enough to support the weight of the fully configured services
gateway, up to 213 lb (97 kg). If you stack five fully configured services gateways in one
rack, it must be capable of supporting about 1066 lb (485 kg).
•For service personnel to remove and install hardware components, there must be
adequate space at the front and back of the services gateway. Allow at least
30 in. (76.2 cm) in front of the services gateway and 24 in. (61 cm) behind the services
gateway.
•The rack or cabinet must have an adequate supply of cooling air.
•Ensure that the cabinet allows the chassis hot exhaust air to exit the cabinet without
recirculating into the services gateway.
•The services gateway must be installed into a rack that is secured to the building
structure.
•The services gateway should be mounted at the bottom of the rack if it is the only unit
in the rack.
•When you are mounting the services gateway in a partially filled rack, load the rack
from the bottom to the top, with the heaviest component at the bottom of the rack.
5Copyright © 2013, Juniper Networks, Inc.
Rack-Mounting Requirements

Tools Required to Unpack and Prepare the SRX5600 Services Gateway for Installation
To unpack the services gateway and prepare for installation, you need the following
tools:
•A mechanical lift—recommended
•Phillips (+) screwdrivers, numbers 1 and 2
•2.5-mm flat-blade (–) screwdriver
•7/16-in. torque-controlled driver or socket wrench
•1/2-in. or 13-mm open-end or socket wrench to remove bracket bolts from the shipping
pallet
•Electrostatic discharge wrist strap
•Antistatic mat
Proceed to “Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an
Open-Frame Rack” on page 6.
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame
Rack
To install the mounting shelf on the front rails of a four-post rack or cabinet, or on the
rails of an open-frame rack:
1. If needed, install cage nuts in the holes specified in Table 2 on page 6.
2. On the back of each rack rail, partially insert a mounting screw into the lowest hole
specified in Table 2 on page 6.
3. Install the mounting shelf on the back of the rack rails. Rest the bottom slot of each
flange on a mounting screw.
4. Partially insert screws into the open holes in each flange of the mounting shelf (see
Figure 2 on page 7 or Figure 3 on page 8).
5. Tighten all the screws completely.
Table 2: Mounting Shelf Hole Locations
Distance Above U Division
Hole (Starting from U
Division)
1.14 U2.00 in. (5.1 cm)4
0.86 U1.51 in. (3.8 cm)3
0.50 U0.88 in. (2.2 cm)2
0.14 U0.25 in. (0.6 cm)1
Copyright © 2013, Juniper Networks, Inc.6
SRX5600 Services Gateway Getting Started Guide

Figure 2: Mounting Hardware for a Four-Post Rack or Cabinet
g004258
Four-post open rack
Small mounting shelf
7Copyright © 2013, Juniper Networks, Inc.
Step 2: Install the Mounting Hardware in a Four-Post Rack or Cabinet or an Open-Frame Rack

Figure 3: Mounting Hardware for an Open-Frame Rack
Proceed to “Step 3: Install the Services Gateway” on page 8.
Step 3: Install the Services Gateway
Because of the services gateway’s size and weight, you must remove all components,
as shown in Figure 4 on page 9 and Figure 5 on page 9, before you install the services
gateway. We also recommend using a mechanical lift to install the services gateway.
•Remove Components on page 9
•Install the Services Gateway Using a Lift on page 10
•Install the Services Gateway Without a Mechanical Lift on page 12
•Reinstall Components on page 12
Copyright © 2013, Juniper Networks, Inc.8
SRX5600 Services Gateway Getting Started Guide

Remove Components
Figure 4: Components to Remove from the Front of the Services Gateway
STATUS
SPU0
SERVICE
STATUS
SPU1
SERVICE HA
OK/FAIL
CHASSISCLUSTER
CONTROL0
ENABLE
LINK/ACT
CHASSISCLUSTER
CONTROL1
ENABLE
LINK/ACT
STATUS
SPU0
SERVICE
STATUS
SPU1
SERVICE HA
OK/FAIL
CHASSISCLUSTER
CONTROL0
ENABLE
LINK/ACT
CHASSISCLUSTER
CONTROL1
ENABLE
LINK/ACT
SPCs
g030210
IOCs
SCB0
and RE
SCB1
Figure 5: Components to Remove from the Rear of the Services Gateway
Before you lift the services gateway, you must remove the following components:
•Power supplies
•Cards (SCBs, SPCs, IOCs, Flex IOCs, and MPCs)
•Air filter
•Fan tray
9Copyright © 2013, Juniper Networks, Inc.
Remove Components

To remove the components from the services gateway:
1. Slide each component out of the chassis evenly so that it does not become stuck or
damaged.
2. Label each component as you remove it so you can reinstall it in the correct location.
3. Immediately store each removed component in an electrostatic bag.
4. Do not stack removed components. Lay each one on a flat surface.
NOTE: For complete instructions on removing services gateway components,
see “Install the Services Gateway Without a Mechanical Lift” in the SRX5600
Services Gateway Hardware Guide.
Install the Services Gateway Using a Lift
To install the services gateway using a lift:
1. Ensure that the rack is in its permanent location and is secured to the building. Ensure
that the installation site allows adequate clearance for both airflow and maintenance.
For details, see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
2. Load the services gateway onto the lift, making sure that it rests securely on the lift
platform (see Figure 6 on page 11).
Copyright © 2013, Juniper Networks, Inc.10
SRX5600 Services Gateway Getting Started Guide

Figure 6: Load the Services Gateway onto the Lift
3. Using the lift, position the services gateway in front of the rack or cabinet, centering
it in front of the mounting shelf.
4. Lift the chassis approximately 0.75 in. above the surface of the mounting shelf, and
position it as close as possible to the shelf.
5. Carefully slide the services gateway onto the mounting shelf so that the bottom of
the chassis and the mounting shelf overlap by approximately 2 in.
6. Slide the services gateway onto the mounting shelf until the mounting brackets contact
the rack rails. The shelf ensures that the holes in the mounting brackets and the
front-mounting flanges of the chassis align with the holes in the rack rails.
7. Move the lift away from the rack.
8. Install a mounting screw into each of the open mounting holes aligned with the rack,
starting from the bottom.
9. Visually inspect the alignment of the services gateway. If the services gateway is
installed properly in the rack, all the mounting screws on one side of the rack should
be aligned with the mounting screws on the opposite side and the services gateway
should be level.
11Copyright © 2013, Juniper Networks, Inc.
Install the Services Gateway Using a Lift

Install the Services Gateway Without a Mechanical Lift
Lifting the chassis and mounting it in a rack requires at least two people. The empty
chassis weighs approximately 65.5 lb (29.7 kg).
1. Ensure that the rack is in its permanent location and is secured to the building.
2. Position the chassis in front of the rack or cabinet, centering it in front of the mounting
shelf. Use a pallet jack if one is available.
3. With one person on each side, hold onto the bottom of the chassis and carefully lift
it onto the small mounting shelf. See Figure 7 on page 12.
Figure 7: Lift the Services Gateway into the Rack
OK
MASTE
R
FAN
ONLIN
E
OFFLIN
E
011
0
FAILFAIL
PEM
FAIL
FAIL
FAIL
FAIL
FAIL
FAIL
ESD
OK
OK
OK
OK
OKOKOK
2345
ACO/
L
T
YELL
O
WALAR
M
REDALAR
M
NCNO
CNCNO
C
RE
ORE
1
0123
5
4
3
2
1
0
1
0
g004249
4. Slide the chassis onto the mounting shelf until the mounting brackets contact the
rack rails. The shelf ensures that the holes in the mounting brackets and the
front-mounting flanges of the chassis align with the holes in the rack rails.
5. To install the chassis in an open-frame rack, install a mounting screw into each of the
open mounting holes aligned with the rack, starting from the bottom.
6. Visually inspect the alignment of the chassis. If the chassis is installed properly in the
rack, all the mounting screws on one side of the rack should be aligned with the
mounting screws on the opposite side and the chassis should be level.
Reinstall Components
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the strap to one of the ESD points on the chassis. For more information about ESD,
see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
Copyright © 2013, Juniper Networks, Inc.12
SRX5600 Services Gateway Getting Started Guide

2. Slide each component into the chassis evenly so that it does not become stuck or
damaged.
3. Tighten the captive screws or lock any levers for each component installed.
NOTE: Make sure that all empty slots are covered with blank panels before
you operate the services gateway.
Proceed to “Step 4: Connect the Grounding Cable” on page 13.
Step 4: Connect the Grounding Cable
WARNING: To meet safety and electromagnetic interference (EMI)
requirements and to ensure proper operation, you must properly ground the
services gateway chassis before connecting power.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the strap to an approved site ESD grounding point. See the instructions for your site.
2. Connect the grounding cable to a proper earth ground.
3. Verify that a licensed electrician has attached the cable lug provided with the services
gateway to the grounding cable. The cable must be 6-AWG (13.3 mm2), minimum
60°C wire.
4. Make sure that grounding surfaces are clean and brought to a bright finish before
grounding connections are made.
5. Disconnect the ESD grounding strap from the site ESD grounding point, and connect
it to one of the ESD points on the chassis. For more information about ESD, see the
SRX5600 Services Gateway Hardware Documentation at www.juniper.net/techpubs/.
6. Place the grounding cable lug over the grounding point. The grounding point is sized
for UNC 1/4-20 screws and 1/4 in. split washers, which are provided in the accessory
box.
7. Secure the grounding cable lug to the grounding point, first with the washers, and then
with the screws as shown in Figure 8 on page 14.
13Copyright © 2013, Juniper Networks, Inc.
Step 4: Connect the Grounding Cable

Figure 8: Connecting the Grounding Cable
g030296
8. Verify that the grounding cabling is correct, that the grounding cable does not touch
or block access to services gateway components, and that it does not drape where
people could trip over it.
Proceed to “Step 5: Connect External Devices and Network Cables” on page 14.
Step 5: Connect External Devices and Network Cables
To connect external devices and network cables:
•Connect to a Network for Out-of-Band Management on page 14
•Connect a Management Console on page 14
•Connect the Network Cables on page 15
Connect to a Network for Out-of-Band Management
1. Turn off the power to the management device.
2. Plug one end of the RJ-45 Ethernet cable into the appropriate ETHERNET port on the
services gateway Routing Engine.
3. Plug the other end of the cable into the network device.
Connect a Management Console
1. Plug one end of the RJ-45 Ethernet cable into the CONSOLE or AUX port on the services
gateway Routing Engine.
2. Plug the female DB-9 end into the device’s serial port.
Copyright © 2013, Juniper Networks, Inc.14
SRX5600 Services Gateway Getting Started Guide

Connect the Network Cables
1. Have ready a length of the type of cable used by the interface. For cable specifications,
see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
2. If the cable connector port is covered by a rubber safety plug, remove the plug.
WARNING: Do not look directly into a fiber-optic transceiver or into the
ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cable
connected to a transceiver emit laser light that can damage your eyes.
CAUTION: Do not leave a fiber-optic transceiver uncovered except when
you are inserting or removing cable. The safety cap keeps the port clean
and prevents accidental exposure to laser light.
3. Insert the cable connector into the cable connector port on the faceplate as shown
in Figure 9 on page 15.
Figure 9: Connect Network Cables
g030214
4. Arrange the cable in the cable management system to prevent it from dislodging or
developing stress points. Secure the cable so that it is not supporting its own weight
as it hangs to the floor. Place excess cable out of the way in a neatly coiled loop in
the cable management system. Placing fasteners on the loop helps to maintain its
shape.
CAUTION: Avoid bending fiber-optic cable beyond its minimum bend
radius. An arc smaller than a few inches in diameter can damage the cable
and cause problems that are difficult to diagnose.
CAUTION: Do not let fiber-optic cable hang free from the connector. Do
not allow fastened loops of cable to dangle, which stresses the cable at
the fastening point.
15Copyright © 2013, Juniper Networks, Inc.
Connect the Network Cables

Proceed to “Step 6: Connect Power Cables” on page 16.
Step 6: Connect Power Cables
Depending on its configuration, the services gateway uses either AC or DC power supplies.
Perform the appropriate procedures for each power supply in the services gateway.
•Connect Power to an AC-Powered Services Gateway on page 16
•Connect Power to a DC-Powered Services Gateway on page 17
Connect Power to an AC-Powered Services Gateway
This procedure addresses connecting power to services gateways equipped with either
standard-capacity or high-capacity AC power supplies.
WARNING: To meet safety and electromagnetic interference (EMI)
requirements and to ensure proper operation, you must properly ground the
services gateway chassis before connecting power. See “Step 4: Connect
the Grounding Cable” on page 13 for instructions.
NOTE: The services gateway must be running Junos OS Release 12.1X44-D10
or later in order to use high-capacity AC or DC power supplies.
NOTE: The device is not shipped with AC power cords. Make sure to order or
obtain AC power cords with a plug appropriate for your geographical location.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the strap to one of the ESD points on the chassis. For more information about ESD,
see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
2. Locate the power cords you will use to connect the device to AC power. See the
SRX5600 Services Gateway Hardware Documentation at www.juniper.net/techpubs/
for specifications.
3. For each power supply:
a. Move the power switch on the power supply faceplate to the OFF position (O).
b. Insert the appliance coupler end of the power cord into the appliance inlet on the
power supply (Figure 10 on page 17).
c. Insert the power cord plug into an external AC power source receptacle.
Copyright © 2013, Juniper Networks, Inc.16
SRX5600 Services Gateway Getting Started Guide

NOTE: Each power supply must be connected to a dedicated AC power
feed and a dedicated customer site circuit breaker. We recommend
using a 15-A (250-VAC), circuit breaker minimum, or as permitted by
local code.
d. Dress the power cord appropriately. Verify that the power cord does not block the
air exhaust or access to services gateway components, and that it does not drape
where people could trip over it.
Figure 10: Connecting AC Power to the Services Gateway
Connect Power to a DC-Powered Services Gateway
This procedure addresses connecting power to services gateways equipped with either
standard-capacity or high-capacity DC power supplies.
WARNING: To meet safety and electromagnetic interference (EMI)
requirements and to ensure proper operation, you must properly ground the
services gateway chassis before connecting power. See “Step 4: Connect
the Grounding Cable” on page 13 for instructions.
NOTE: The services gateway must be running Junos OS Release 12.1X44-D10
or later in order to use high-capacity AC or DC power supplies.
Table 3 on page 18 describes the services gateway input voltage requirements.
17Copyright © 2013, Juniper Networks, Inc.
Connect Power to a DC-Powered Services Gateway

Table 3: DC Power System Input Voltage
SpecificationItem
Operating range: –40.5 to –72 VDCDC input voltage
1. Ensure that the voltage across the DC power source cable leads is 0 V and that there
is no chance that the cable leads might become active during installation.
2. For high-capacity DC power supplies, check the setting of the input mode switch:
a. Move or remove the metal plate that covers the input mode switch. On some power
supply versions, the cover pivots at one end, and you can simply swing it up out of
the way. On other versions, the cover is secured with two captive screws that you
must loosen.
b. Use a sharp, nonconductive object to slide the switch to the desired position. Set
the input mode switch to position 0 for 60-A input and position 1 for 70-A input.
This setting is used by the power management software and must be set on the
power supply. See Figure 11 on page 18.
Figure 11: DC High-Capacity Power Supply Input Mode Switch
g004725
c. Restore the metal plate to its original position over the input mode switch.
3. Secure the power cable lugs to the terminal studs, first with the split washers, then
with the nuts as shown in Figure 12 on page 19. Apply between 23 lb-in. (2.6 Nm) and
25 lb-in. (2.8 Nm) of torque to each nut. Do not overtighten the nut. (Use a 7/16-in.
torque-controlled driver or socket wrench.)
a. Attach the positive (+) DC source power cable lug to the RTN (return) terminal.
b. Attach the negative (–) DC source power cable lug to the –48V (input) terminal.
Copyright © 2013, Juniper Networks, Inc.18
SRX5600 Services Gateway Getting Started Guide

Figure 12: Connect Power Cables (Standard-Capacity DC Power Supply
Shown, High-Capacity Similar)
CAUTION: Ensure that each power cable lug seats flush against the surface
of the terminal block as you are tightening the nuts. Ensure that each nut
is properly threaded onto the terminal stud. The nut should be able to spin
freely with your fingers when it is first placed onto the terminal stud.
Applying installation torque to the nut when it is improperly threaded
might result in damage to the terminal stud.
CAUTION: The maximum torque rating of the terminal studs on the DC
power supply is 36 lb-in. (4.0 Nm). The terminal studs might be damaged
if excessive torque is applied. Use only a torque-controlled driver or socket
wrench to tighten nuts on the DC power supply terminal studs.
4. Connect each DC power cable to the appropriate external DC power source.
NOTE: For information about connecting to external DC power sources,
see the SRX5600 Services Gateway Hardware Documentation at
www.juniper.net/techpubs/.
5. Switch on the power supply breakers to provide voltage to the DC power source cable
leads.
Proceed to “Step 7: Perform the Initial Software Configuration” on page 20.
19Copyright © 2013, Juniper Networks, Inc.
Connect Power to a DC-Powered Services Gateway

Step 7: Perform the Initial Software Configuration
This procedure connects the services gateway to the network but does not enable it to
forward traffic. For complete information about enabling the services gateway to forward
traffic, including examples, see the appropriate Junos operating system (Junos OS)
configuration guides at www.juniper.net/techpubs/.
To configure the software:
•Enter Configuration Mode on page 20
•Configure User Accounts and Passwords on page 20
•Configure System Attributes on page 21
•Commit the Configuration on page 21
Enter Configuration Mode
1. If you have not already done so, switch the circuit breaker or toggle switch for each
power supply to the ON position to start the device. The OK LED on the power supply
faceplate should blink, and then light steadily.
2. Log in as the root user. There is no password.
3. Start the CLI.
root# cli
root@>
4. Enter configuration mode.
configure
[edit]
root@#
Configure User Accounts and Passwords
1. Set the root authentication password by entering a cleartext password, an encrypted
password, or an SSH public key string (DSA or RSA).
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
2. Configure an administrator account on the device. When prompted, enter the password
for the administrator account.
[edit]
root@# set system login user admin class super-user authentication
plain-text-password
New password: password
Retype new password: password
Copyright © 2013, Juniper Networks, Inc.20
SRX5600 Services Gateway Getting Started Guide