Juniper JSA3800 Installation instructions

Juniper Secure Analytics 3800 Hardware Guide
Modified: 2019-01-21
Copyright © 2019, Juniper Networks, Inc.

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States
and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective
owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
Juniper Secure Analytics 3800 Hardware Guide
Copyright © 2019 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
https://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of
that EULA.
Copyright © 2019, Juniper Networks, Inc.ii

Table of Contents
AbouttheDocumentation............................................xi
DocumentationandReleaseNotes..................................xi
DocumentationConventions.......................................xi
DocumentationFeedback........................................xiii
RequestingTechnicalSupport.....................................xiv
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Creating a Service Request with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Chapter1 Overview .........................................................17
JSA3800SystemOverview...........................................17
JSA3800ApplianceDescription....................................17
JSA3800 Appliance Transceiver Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Field-Replaceable Units on the JSA3800 Appliance . . . . . . . . . . . . . . . . . . . . 18
JSA3800Chassis...................................................19
JSA3800 Appliance Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . 19
JSA3800 Appliance Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Chapter 2 Site Planning, Preparation, and Specifications . . . . . . . . . . . . . . . . . . . . . . . . 25
JSA3800 Site Guidelines and Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
General Site Installation Guidelines for the JSA3800 Appliance . . . . . . . . . . 25
JSA3800 Appliance Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . 26
JSA3800 Appliance Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Additional Hardware Requirements for JSA3800 Appliance . . . . . . . . . . . . . 28
Chapter 3 Initial Installation and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
JSA3800InstallationOverview........................................31
Overview of Installing the JSA3800 Appliance in a Rack . . . . . . . . . . . . . . . . . 31
Tools and Parts Required for Installing the JSA3800 Appliance . . . . . . . . . . . 31
InstallingtheJSA3800inaRack.......................................32
InstallingtheJSA3800Appliance..................................32
Installing the JSA3800 Appliance Using Front-and-Rear-Mounting Flush in
aFour-PostRack............................................34
Mid-Mounting the JSA3800 Appliance in a Two-Post Rack . . . . . . . . . . . . . . 37
ConnectingtheJSA3800toPower.....................................41
Connecting the JSA3800 Appliance to Ground . . . . . . . . . . . . . . . . . . . . . . . . 41
Connecting the JSA3800 Appliance to a DC Power Source . . . . . . . . . . . . . . 41
Connecting the JSA3800 Appliance to a Management Device . . . . . . . . . . . . . . . 43
ConfiguringtheJSA3800............................................44
Configuring the Basic Settings on the JSA3800 Appliance . . . . . . . . . . . . . . 44
AccessingtheJSAInterface.......................................46
iiiCopyright © 2019, Juniper Networks, Inc.

Chapter4 MaintainingComponents..........................................49
MaintainingtheJSA3800RAIDArray...................................49
MaintainingJSA3800PowerSystem...................................50
Maintaining the JSA3800 Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Replacing an AC Power Supply on the JSA3800 Appliance . . . . . . . . . . . . . . 51
Replacing AC Power Supply Cables on the JSA3800 Appliance . . . . . . . . . . . 51
Replacing a DC Power Supply on the JSA3800 Appliance . . . . . . . . . . . . . . . 52
Replacing DC Power Supply Cables on the JSA3800 Appliance . . . . . . . . . . 53
Chapter5 TroubleshootingHardware.........................................55
Contacting Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . 55
Chapter 6 Safety and Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
DefinitionsofSafetyWarningLevels....................................58
General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
RestrictedAccessWarning...........................................60
QualifiedPersonnelWarning..........................................62
Prevention of Electrostatic Discharge Damage . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Warning Statement for Norway and Sweden . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
FireSafetyRequirements............................................64
FireSuppression................................................64
FireSuppressionEquipment......................................64
InstallationInstructionsWarning......................................65
Chassis Lifting Guidelines for the JSA3800 Appliance . . . . . . . . . . . . . . . . . . . . . 65
RampWarning.....................................................66
Rack-Mounting and Cabinet-Mounting Warnings . . . . . . . . . . . . . . . . . . . . . . . . . 66
GroundedEquipmentWarning........................................70
Laser and LED Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
GeneralLaserSafetyGuidelines....................................71
Class1LaserProductWarning......................................71
Class1LEDProductWarning......................................72
LaserBeamWarning.............................................72
Radiation from Open Port Apertures Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . . . . . . . 74
BatteryHandlingWarning.........................................74
JewelryRemovalWarning.........................................75
LightningActivityWarning........................................76
OperatingTemperatureWarning...................................77
ProductDisposalWarning........................................78
Action to Take After an Electrical Accident . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
General Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . 79
AC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
DC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
ACPowerDisconnectionWarning......................................82
DCPowerDisconnectionWarning......................................83
DC Power Grounding Requirements and Warning . . . . . . . . . . . . . . . . . . . . . . . . . 84
DCPowerWiringSequenceWarning...................................85
DC Power Wiring Terminations Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Multiple Power Supplies Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Copyright © 2019, Juniper Networks, Inc.iv
Juniper Secure Analytics 3800 Hardware Guide

TNPowerWarning..................................................88
Agency Approvals for the JSA3800 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Compliance Statements for EMC Requirements for the JSA3800 Appliance . . . 90
Canada .......................................................90
European Community ...........................................90
Japan .........................................................91
Korea .........................................................91
UnitedStates...................................................91
FCCPart15Statement...........................................91
Compliance Statements for Acoustic Noise for the JSA3800 Appliance . . . . . . . 92
vCopyright © 2019, Juniper Networks, Inc.
Table of Contents

Copyright © 2019, Juniper Networks, Inc.vi
Juniper Secure Analytics 3800 Hardware Guide

List of Figures
Chapter1 Overview .........................................................17
Figure1:JSA3800FrontPanel.........................................19
Figure2:JSA3800FrontPanelLEDs....................................20
Figure3:JSA3800BackPanel.........................................21
Figure4:JSA3800EthernetPortLEDs..................................22
Chapter 3 Initial Installation and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Figure 5: Connecting the AC Power Cord . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Figure6:JSA3800FrontPanelLEDs....................................33
Figure 7: Attaching the Inner Rail Extension . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Figure 8: Installing the Outer Rails in a Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Figure 9: Aligning the Chassis in a Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Figure 10: Installing the JSA3800 Appliance Front-Rear Mounting Flush in a
Four-PostRack.................................................37
Figure 11: Securing the Brackets to the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Figure 12: Mounting the Outer Rails to the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Figure 13: Securing Brackets to the Outer Rail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Figure 14: Attaching the Inner Rail Extension . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Figure 15: Aligning and Installing the Chassis in a Two-Post Rack . . . . . . . . . . . . . 40
Figure 16: Connecting the Management Device . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Chapter 6 Safety and Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Figure 17: Placing a Component into an Antistatic Bag . . . . . . . . . . . . . . . . . . . . . 63
viiCopyright © 2019, Juniper Networks, Inc.

Copyright © 2019, Juniper Networks, Inc.viii
Juniper Secure Analytics 3800 Hardware Guide

List of Tables
AbouttheDocumentation..........................................xi
Table1:NoticeIcons.................................................xii
Table2:TextandSyntaxConventions...................................xii
Chapter1 Overview .........................................................17
Table 3: JSA3800 Appliance Transceiver Interface Types . . . . . . . . . . . . . . . . . . . 18
Table 4: JSA3800 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Table5:JSA3800FrontPanelLEDs.....................................21
Table 6: JSA3800 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Table7:JSA3800EthernetPortLEDs...................................22
Chapter 2 Site Planning, Preparation, and Specifications . . . . . . . . . . . . . . . . . . . . . . . . 25
Table 8: JSA3800 Appliance Physical Specifications . . . . . . . . . . . . . . . . . . . . . . 26
Table 9: Rack Requirements for JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Table10:RequiredJSAPorts..........................................28
Chapter 3 Initial Installation and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Table 11: Required Tools and Parts for Installing the JSA3800 Appliance . . . . . . . 32
Table 12: DB-9 Console Connector Pinouts for the JSA3800 Appliance . . . . . . . . 33
ixCopyright © 2019, Juniper Networks, Inc.

Copyright © 2019, Juniper Networks, Inc.x
Juniper Secure Analytics 3800 Hardware Guide

About the Documentation
•Documentation and Release Notes on page xi
•Documentation Conventions on page xi
•Documentation Feedback on page xiii
•Requesting Technical Support on page xiv
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation,
see the product documentation page on the Juniper Networks website at
https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at https://www.juniper.net/books.
Documentation Conventions
Table 1 on page xii defines notice icons used in this guide.
xiCopyright © 2019, Juniper Networks, Inc.

Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware damage.Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xii defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type the
configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on the
terminal screen.
Fixed-width text like this
•A policy term is a named structure
that defines match conditions and
actions.
•Junos OS CLI User Guide
•RFC 1997, BGP Communities Attribute
•Introduces or emphasizes important
new terms.
•Identifies guide names.
•Identifies RFC and Internet draft titles.
Italic text like this
Configure the machine’s domain name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for which
you substitute a value) in commands or
configuration statements.
Italic text like this
Copyright © 2019, Juniper Networks, Inc.xii
Juniper Secure Analytics 3800 Hardware Guide

Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
•To configure a stub area, include the
stub statement at the [edit protocols
ospf area area-id] hierarchy level.
•The console port is labeled CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy levels;
or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)
broadcast | multicast
(string1 |string2 |string3)
Indicates a choice between the mutually
exclusive keywords or variables on either
side of the symbol. The set of choices is
often enclosed in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the
same line as the configuration statement
to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
•In the Logical Interfaces box, select
All Interfaces.
•To cancel the configuration, click
Cancel.
Represents graphical user interface (GUI)
items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of menu
selections.
>(bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You
can use either of the following methods:
•Online feedback system—Click TechLibrary Feedback, on the lower right of any page
on the Juniper Networks TechLibrary site, and do one of the following:
xiiiCopyright © 2019, Juniper Networks, Inc.
About the Documentation

•Click the thumbs-up icon if the information on the page was helpful to you.
•Click the thumbs-down icon if the information on the page was not helpful to you
or if you have suggestions for improvement, and use the pop-up form to provide
feedback.
•E-mail—Send your comments to [e-mail]. Include the document
or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or Partner Support Service
support contract, or are covered under warranty, and need post-sales technical support,
you can access our tools and resources online or open a case with JTAC.
•JTAC policies—For a complete understanding of our JTAC procedures and policies,
review the JTAC User Guide located at
https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•Product warranties—For product warranty information, visit
https://www.juniper.net/support/warranty/.
•JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with the
following features:
•Find CSC offerings: https://www.juniper.net/customers/support/
•Search for known bugs: https://prsearch.juniper.net/
•Find product documentation: https://www.juniper.net/documentation/
•Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/
•Download the latest versions of software and review release notes:
https://www.juniper.net/customers/csc/software/
•Search technical bulletins for relevant hardware and software notifications:
https://kb.juniper.net/InfoCenter/
Copyright © 2019, Juniper Networks, Inc.xiv
Juniper Secure Analytics 3800 Hardware Guide

•Join and participate in the Juniper Networks Community Forum:
https://www.juniper.net/company/communities/
•Create a service request online: https://myjuniper.juniper.net
To verify service entitlement by product serial number, use our Serial Number Entitlement
(SNE) Tool: https://entitlementsearch.juniper.net/entitlementsearch/
Creating a Service Request with JTAC
You can create a service request with JTAC on the Web or by telephone.
•Visit https://myjuniper.juniper.net.
•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
https://support.juniper.net/support/requesting-support/.
xvCopyright © 2019, Juniper Networks, Inc.
About the Documentation

Copyright © 2019, Juniper Networks, Inc.xvi
Juniper Secure Analytics 3800 Hardware Guide

CHAPTER 1
Overview
•JSA3800 System Overview on page 17
•JSA3800 Chassis on page 19
JSA3800 System Overview
•JSA3800 Appliance Description on page 17
•JSA3800 Appliance Transceiver Interface on page 18
•Field-Replaceable Units on the JSA3800 Appliance on page 18
JSA3800 Appliance Description
The Juniper Secure Analytics 3800 (JSA3800) is an enterprise-class appliance that
provides a scalable network security management solution for medium-sized companies
up to large global organizations.
The JSA3800 appliance is a 1-U, rack-mountable chassis with AC power supplies (or
optional DC power supplies), six hot-swappable hard drives, 64 GB memory, and two 10
Gigabit and four Gigabit Ethernet interfaces.
The JSA3800 appliance:
•Responds to the right threats at the right time through effective analysis of networks,
events, and audit log files.
•Identifies environmental anomalies in the network, an attack path, and the source of
a threat.
•Provides network remediation for threat responses across all security products.
The JSA3800 appliance provides the following features:
•Monitor utility for power supply unit (PSU) and fans
•Add setup logs automatically
•Support high availability (HA)
•Hot-swappable hard disk supporting RAID
17Copyright © 2019, Juniper Networks, Inc.

•Automatic RAID rebuild on HDD swap
•Support hot-swappable dual-AC (or optional dual-DC power supplies) with a redundant
configuration in the chassis
The JSA appliances use the following drivers for security analysis of external and internal
threats:
•Security Information Management (SIM)—SIM provides reporting and analysis of data
from host systems, applications, and security devices to support security policy
compliance management, internal threat management, and regulatory compliance
initiatives.
•Security Event Management (SEM)—SEM improves security incident response
capabilities by processing data from security devices and network devices. It helps
network administrators to provide effective responses to external and internal threats.
See Also JSA3800 Appliance Front Panel Description on page 19•
•JSA3800 Appliance Back Panel Description on page 21
JSA3800 Appliance Transceiver Interface
Table 3 on page 18 lists the transceivers supported on the JSA3800 appliance.
Table 3: JSA3800 Appliance Transceiver Interface Types
DescriptionCard ModelTransceiver Type
Dual Rate 10GBASE-LR/1000BASE-LXUNIV-SFPP-DUAL-SRSFP+
Dual Rate 10GBASE-SR/1000BASE-SXUNIV-SFPP-DUAL-LR
See Also JSA3800 Appliance Description on page 17•
•JSA3800 Appliance Back Panel Description on page 21
•JSA3800 Appliance Physical Specifications on page 26
Field-Replaceable Units on the JSA3800 Appliance
Field-replaceable units (FRUs) are hardware components that can be replaced at the
customer site. Hot-swappable FRUs are the components that you can remove and replace
without powering off the device or disrupting the functions of the device.
Hot-swappable FRUs supported by the JSA3800 appliance are the raid array and power
supply.
See Also Replacing AC Power Supply Cables on the JSA3800 Appliance on page 51•
•Replacing an AC Power Supply on the JSA3800 Appliance on page 51
Copyright © 2019, Juniper Networks, Inc.18
Juniper Secure Analytics 3800 Hardware Guide

•Replacing DC Power Supply Cables on the JSA3800 Appliance on page 53
•Replacing a DC Power Supply on the JSA3800 Appliance on page 52
Related
Documentation
JSA3800 Installation Overview on page 31•
•Configuring the JSA3800 on page 44
JSA3800 Chassis
•JSA3800 Appliance Front Panel Description on page 19
•JSA3800 Appliance Back Panel Description on page 21
JSA3800 Appliance Front Panel Description
Figure 1 on page 19 shows the front panel components of the JSA3800 appliance.
Figure 1: JSA3800 Front Panel
Table 4 on page 19 provides information about the front panel components of the
JSA3800 appliance.
Table 4: JSA3800 Front Panel Components
DescriptionComponentCallout
Protects the appliance.Front bezel1
Locks the appliance.Lock2
Six 900 GB hard disk drives (Drive0 -
Drive5).
•Drive1 (top left) and Drive0 (bottom
left)
•Drive3 (top middle) and Drive2
(bottom middle)
•Drive5 (top right) and Drive4 (bottom
right)
Hard drive3
19Copyright © 2019, Juniper Networks, Inc.
Chapter 1: Overview

Table 4: JSA3800 Front Panel Components (continued)
DescriptionComponentCallout
2 USB ports that accept a USB storage
device.
USB ports4
Reboots the appliance.RESET button5
Powers on or powers off the appliance.Power button6
Provides the colors and states, and the
status they indicate.
Chassis LEDs7
Turns on or off the blue light function of
the U-LED when used with a
UID-compatible motherboard. Once the
blue light is activated, you can easily
locate the appliance in very large racks
and server banks.
UID button8
Empty hard drive slots.Empty slots9
Figure 2 on page 20 shows the front panel LEDs of the JSA3800 appliance.
Figure 2: JSA3800 Front Panel LEDs
Table 5 on page 21 lists the JSA3800 front panel LEDs.
Copyright © 2019, Juniper Networks, Inc.20
Juniper Secure Analytics 3800 Hardware Guide