Juniper JSA5800 Installation instructions

Juniper Secure Analycs 5800 Hardware
Guide
Published
2021-06-03

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
Juniper Secure Analycs 5800 Hardware Guide
Copyright © 2021 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vi
1
Overview
JSA5800 System Overview | 2
JSA5800 Appliance Descripon | 2
JSA5800 Appliance Transceiver Interface | 3
Field-Replaceable Units on the JSA5800 Appliance | 4
JSA5800 Chassis | 4
JSA5800 Appliance Front Panel Descripon | 5
JSA5800 Appliance Back Panel Descripon | 9
2
Site Planning, Preparaon, and Specicaons
JSA5800 Site Guidelines and Requirements | 13
General Site Installaon Guidelines for the JSA5800 Appliance | 13
JSA5800 Appliance Physical Specicaons | 14
JSA5800 Appliance Rack Requirements | 16
Addional Hardware Requirements | 17
3
Inial Installaon and Conguraon
JSA5800 Installaon Overview | 21
Overview of Installing the JSA5800 Appliance in a Rack | 21
Tools and Parts Required for Installing the JSA5800 Appliance | 21
Installing the JSA5800 in a Rack | 22
Installing the JSA5800 Appliance | 23
Installing the JSA5800 Appliance Using Front-and-Rear-Mounng Flush to a Rack | 26
Connecng the JSA5800 to Power | 32
Connecng the JSA5800 Appliance to Ground | 32
iii

Connecng the JSA5800 Appliance to a DC Power Source | 32
Connecng the JSA5800 Appliance to a Management Device | 35
Conguring the JSA5800 | 36
Conguring Basic Sengs on the JSA5800 Appliance | 36
Accessing the JSA Interface | 39
4
Maintaining Components
Maintaining the JSA5800 RAID Array | 42
Maintaining JSA5800 Power System | 42
Maintaining the JSA5800 Power Supply | 43
Replacing an AC Power Supply on the JSA5800 Appliance | 44
Replacing AC Power Supply Cables on the JSA5800 Appliance | 44
Replacing a DC Power Supply on the JSA5800 Appliance | 45
Replacing DC Power Supply Cables on the JSA5800 Appliance | 46
5
Troubleshoong Hardware
Contacng Juniper Networks Technical Assistance Center | 49
6
Safety and Compliance Informaon
Denions of Safety Warning Levels | 52
General Safety Guidelines and Warnings | 53
Restricted Access Warning | 55
Qualied Personnel Warning | 56
Prevenon of Electrostac Discharge Damage | 57
Warning Statement for Norway and Sweden | 58
Fire Safety Requirements | 59
Installaon Instrucons Warning | 60
Chassis Liing Guidelines for the JSA5800 Appliance | 61
Ramp Warning | 61
iv

Rack-Mounng and Cabinet-Mounng Warnings | 62
Grounded Equipment Warning | 66
Laser and LED Safety Guidelines and Warnings | 67
Radiaon from Open Port Apertures Warning | 70
Maintenance and Operaonal Safety Guidelines and Warnings | 71
Acon to Take Aer an Electrical Accident | 76
General Electrical Safety Guidelines and Warnings | 77
AC Power Electrical Safety Guidelines | 78
AC Power Disconnecon Warning | 79
DC Power Electrical Safety Guidelines | 80
DC Power Disconnecon Warning | 81
DC Power Grounding Requirements and Warning | 83
DC Power Wiring Sequence Warning | 84
Mulple Power Supplies Disconnecon Warning | 86
TN Power Warning | 87
Agency Approvals for the JSA5800 Appliance | 87
Compliance Statements for EMC Requirements for the JSA5800 Appliance | 89
Compliance Statements for Acousc Noise for the JSA5800 Appliance | 92
v

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for JSA5800.
Aer compleng the installaon and basic conguraon procedures covered in this guide, refer to the
JSA soware documentaon for informaon about further soware conguraon. See Juniper Secure
Analycs.
RELATED DOCUMENTATION
Introducing JSA5800
JSA5800 Quick Start Guide
Release Notes
STRM Series to JSA Series Migraon Guide
Juniper Secure Analycs Migraon Guide
vi

1
CHAPTER
Overview
JSA5800 System Overview | 2
JSA5800 Chassis | 4

JSA5800 System Overview
IN THIS SECTION
JSA5800 Appliance Descripon | 2
JSA5800 Appliance Transceiver Interface | 3
Field-Replaceable Units on the JSA5800 Appliance | 4
JSA5800 Appliance Descripon
The Juniper Secure Analycs 5800 (JSA5800) is an enterprise and carrier-class appliance that provides a
scalable network security management soluon for medium-sized companies up to large global
organizaons.
The JSA5800 appliance is a 2-U, rack-mountable chassis with AC power supplies (or oponal DC power
supplies), eight hot-swappable hard drives, 128 GB memory, and two 10 Gigabit and four Gigabit
Ethernet interfaces.
The JSA5800 appliance:
• Responds to the right threats at the right me through eecve analysis of networks, events, and
audit log les.
•Idenes environmental anomalies in the network, an aack path, and the source of a threat.
• Provides network remediaon for threat responses across all security products.
The JSA5800 appliance provides the following features:
• Monitor ulity for power supply unit (PSU) and fans
• Add setup logs automacally
• Support high availability (HA)
• Hot-swappable hard disk supporng RAID
•Automac RAID rebuild on HDD swap
2

• Support hot-swappable dual-AC (or oponal dual-DC power supplies) with a redundant conguraon
in the chassis
The JSA5800 appliances use the following drivers for security analysis of external and internal threats:
• Security Informaon Management (SIM)—SIM provides reporng and analysis of data from host
systems, applicaons, and security devices to support security policy compliance management,
internal threat management, and regulatory compliance iniaves.
• Security Event Management (SEM)—SEM improves security incident response capabilies by
processing data from security devices and network devices. It helps network administrators to
provide eecve responses to external and internal threats.
SEE ALSO
General Site Installaon Guidelines for the JSA5800 Appliance | 0
JSA5800 Installaon Overview | 21
JSA5800 Appliance Transceiver Interface
Table 1 on page 3 lists the dierent types of transceiver interfaces available on the JSA5800
appliance.
Table 1: JSA5800 Appliance Transceiver Interface Types
Transceiver Type Card Model Descripon
SFP+ UNIV-SFPP-DUAL-SR Dual Rate 10GBASE-LR/1000BASE-LX
UNIV-SFPP-DUAL-LR Dual Rate 10GBASE-SR/1000BASE-SX
SEE ALSO
JSA5800 Appliance Descripon | 0
JSA5800 Appliance Physical Specicaons | 0
JSA5800 Appliance Back Panel Descripon | 0
3

Field-Replaceable Units on the JSA5800 Appliance
Field-replaceable units (FRUs) are hardware components that can be replaced at the customer site. Hot-
swappable FRUs are the components that you can remove and replace without powering o the device
or disrupng the funcons of the device.
FRUs supported by the JSA5800 appliance includes the power supply and RAID array.
SEE ALSO
Replacing AC Power Supply Cables on the JSA5800 Appliance | 0
Replacing an AC Power Supply on the JSA5800 Appliance | 0
Replacing a DC Power Supply on the JSA5800 Appliance | 0
Replacing DC Power Supply Cables on the JSA5800 Appliance | 0
RELATED DOCUMENTATION
JSA5800 Chassis | 4
JSA5800 Site Guidelines and Requirements | 13
JSA5800 Installaon Overview | 21
Conguring the JSA5800 | 36
JSA5800 Chassis
IN THIS SECTION
JSA5800 Appliance Front Panel Descripon | 5
JSA5800 Appliance Back Panel Descripon | 9
4

JSA5800 Appliance Front Panel Descripon
Figure 1 on page 5 shows the front panel components of the JSA5800 appliance.
Figure 1: JSA5800 Front Panel
Table 2 on page 5 lists the front panel components of the JSA5800 appliance.
Table 2: JSA5800 Front Panel Components
Callout Component Descripon
1 Front Bezel Protects the appliance.
2 Lock Locks the appliance.
3 Power buon Powers on or powers o the
appliance.
5

Table 2: JSA5800 Front Panel Components (Connued)
Callout Component Descripon
4 Hard drive Eight 900 GB hard disk drives
(Drive0 - Drive7).
5 Hard drive Empty slots (Drive8 - Drive15).
6 RESET buon Reboots the appliance.
7 Chassis LEDs Provides the colors and states, and
the status they indicate.
Figure 2 on page 6 shows the front panel LEDs of the JSA5800 appliance.
Figure 2: JSA5800 Front Panel LEDs
Table 3 on page 7 lists the front panel LEDs of the JSA5800 appliance.
6

Table 3: JSA5800 Front Panel LEDs
Callout LEDs Descripon
1 Power Solid green—Indicates that the
appliance is receiving power.
2 LAN2 When blinking, it indicates
DataShare interface acvity.
3 Alert/Power fail Red—Indicates a power supply
failure.
Amber—Indicates that the appliance
is operang normally. The LED
might glow amber if a rescue
conguraon is not set. This is not a
panic condion.
4 Hard drive Unused.
5 LAN1 When blinking, it indicates
Management interface acvity.
7

Table 3: JSA5800 Front Panel LEDs (Connued)
Callout LEDs Descripon
6Informaon • Red (blinking)—Indicates a fan
failure.
• Solid red—Indicates an overheat
condion, which might be
caused by cables obstrucng the
airow in the system or the
ambient room temperature being
too warm.
You can perform the following
checks:
• Check the roung of the
cables and ensure that all fans
are present and operang
normally.
• Ensure that the chassis covers
are installed.
• Verify that the heatsinks are
installed properly.
• Red (slowly blinking)—Indicates a
power failure.
• Solid blue —Indicates UID
funcon is acvated.
SEE ALSO
JSA5800 Appliance Descripon
JSA5800 Appliance Back Panel Descripon
8

JSA5800 Appliance Back Panel Descripon
Figure 3 on page 9 shows the back panel components of the JSA5800 appliance.
Figure 3: JSA5800 Back Panel
Table 4 on page 9 lists the back panel components of the JSA5800 appliance.
Table 4: JSA5800 Back Panel Components
Callout Components Descripon
1 Power supply Provides power to all components.
2 Dedicated IPMI LAN port 1 RJ-45 dedicated IPMI LAN port.
3 GB ports 4 RJ-45 Gigabit Ethernet LAN ports.
Top le: eth4; top right: eth5
Boom le: eth2; boom right: eth3
NOTE: You can choose any GB ports
as the management port.
9

Table 4: JSA5800 Back Panel Components (Connued)
Callout Components Descripon
4 10 GB+SFP ports 2 SFP+ 10GbE LAN ports. The top
port is eth0 and the boom port is
eth1.
5 VGA port 1 VGA port.
NOTE: This port is not supported.
6 USB ports 4 USB ports.
Top le: port 1; top right: port 3
Boom le: port 0; boom right: port
2
7 COM port 1 DB-9 COM port.
Figure 4 on page 10 shows the back panel Ethernet port LEDs of the JSA5800 appliance.
Figure 4: JSA5800 Ethernet Port LEDs
Table 5 on page 11 lists the JSA5800 Ethernet port LEDs.
10

Table 5: JSA5800 Ethernet Port LEDs
Callout LEDs Descripon
1 Link •O—Indicates no connecon or the
speed of the connecon is 10 Mbps.
• Green—Indicates that the speed of the
connecon is 100 Mbps.
• Amber—Indicates that the speed of the
connecon is 1 Gbps.
2Acvity Indicates link acvity.
SEE ALSO
JSA5800 Appliance Descripon
JSA5800 Appliance Front Panel Descripon
RELATED DOCUMENTATION
JSA5800 Installaon Overview | 21
JSA5800 System Overview | 2
11

2
CHAPTER
Site Planning, Preparaon, and
Specicaons
JSA5800 Site Guidelines and Requirements | 13

JSA5800 Site Guidelines and Requirements
IN THIS SECTION
General Site Installaon Guidelines for the JSA5800 Appliance | 13
JSA5800 Appliance Physical Specicaons | 14
JSA5800 Appliance Rack Requirements | 16
Addional Hardware Requirements | 17
General Site Installaon Guidelines for the JSA5800 Appliance
The following precauons can help you plan an acceptable operang environment for your JSA5800
appliance and avoid environmentally caused equipment failures:
• For the cooling system to funcon properly, the airow around the chassis must be unrestricted.
Allow sucient clearance between the front and back of the chassis and adjacent equipment. Ensure
that there is adequate circulaon in the installaon locaon.
• Follow the electrostac discharge (ESD) procedures to avoid damaging the equipment. Stac
discharge can cause components to fail, either completely or intermiently over me.
NOTE: Install the appliance only in restricted areas, such as dedicated equipment rooms and
equipment closets, in accordance with Arcles 110–16, 110–17, and 110–18 of the Naonal
Electrical Code, ANSI/NFPA 70.
SEE ALSO
Addional Hardware Requirements | 0
JSA5800 Appliance Rack Requirements | 0
JSA5800 Appliance Physical Specicaons | 0
13

JSA5800 Appliance Physical Specicaons
Table 6 on page 14 lists the hardware specicaons for the JSA5800 appliance.
Table 6: JSA5800 Appliance Physical Specicaons
Specicaon JSA5800
Dimensions (D x W x H) 630 mm x 437 mm x 89 mm (24.8 in. x 17.2 in. x 3.5 in.)
Weight 41.9 lb
Warranty 1 year HW, 90 days SW
Fans 3 x 8 cm 9.5K RPM, 4-pin PWM fans
Panel Display LEDs: Power, Hard Drive Acvity, Network Acvity, System Overheat, and
Power fail
Rack mountable Front-and-rear
Ports • 2 SFP+ 10GbE LAN ports
• 4 RJ-45 Gigabit Ethernet LAN ports
• 1 RJ-45 Dedicated IPMI LAN port
• 4 USB 2.0 ports total(4 rear)
• 1 VGA port
NOTE: This port is not supported.
• 1 DB-9 COM port
14