Juniper SRX300 Series Installation instructions

SRX300 Firewall Hardware Guide
Published
2023-08-15

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX300 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
SRX300 Firewall Overview | 2
SRX300 Firewall Descripon | 2
Benets of the SRX300 Firewall | 2
SRX300 Chassis | 3
SRX300 Firewall Chassis Overview | 3
Understanding the SRX300 Firewall Front Panel | 4
Understanding the SRX300 Firewall Back Panel | 8
SRX300 Power System | 9
Understanding the SRX300 Firewall Power Supply | 9
SRX300 Firewall Power Specicaons and Requirements | 10
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX300 Firewall | 12
SRX300 Site Guidelines and Requirements | 15
General Site Installaon Guidelines for the SRX300 Firewall | 15
SRX300 Firewall Environmental Specicaons | 16
SRX300 Firewall Electrical Wiring Guidelines | 16
SRX300 Firewall Grounding Specicaons | 18
SRX300 Firewall Physical Specicaons | 19
SRX300 Firewall Clearance Requirements for Airow and Hardware Maintenance | 20
Rack Requirements | 20
Cabinet Requirements | 21
SRX300 Transceiver Specicaons and Pinouts | 22
iii

SRX300 Transceiver Support | 22
RJ-45 Connector Pinouts for the SRX300 Firewall Ethernet Port | 22
RJ-45 Connector Pinouts for the SRX300 Firewall Console Port | 23
Mini-USB Connector Pinouts for the SRX300 Firewall Console Port | 24
3
Inial Installaon and Conguraon
SRX300 Installaon Overview | 27
SRX300 Firewall Installaon Overview | 27
SRX300 Firewall Autoinstallaon Overview | 28
Unpacking and Mounng the SRX300 | 29
Unpacking the SRX300 Firewall | 29
Verifying Parts Received with the SRX300 Firewall | 30
Installing the SRX300 Firewall on a Desk | 31
Installing the SRX300 Firewall on a Wall | 31
Installing the SRX300 Firewall in a Rack | 33
Connecng the SRX300 to Power | 37
Required Tools and Parts for Grounding the SRX300 Services Gateway | 37
Connecng the SRX300 Firewall Grounding Cable | 37
Connecng the SRX300 Firewall to the Power Supply | 39
Powering On the SRX300 Services Gateway | 39
Powering O the SRX300 Services Gateway | 40
Connecng the SRX300 to External Devices | 41
Connecng the Dial-Up Modem to the Console Port on the SRX300 Services Gateway | 41
Connecng to the SRX300 Firewall CLI Using a Dial-Up Modem | 42
Conguring Junos OS on the SRX300 | 43
SRX300 Firewall Factory-Default Sengs | 44
Inial Conguraon Using the CLI | 45
Connect to the Serial Console Port | 46
iv

Connect to the Mini-USB Console Port | 47
Congure the SRX300 Using the CLI | 48
Inial Conguraon Using J-Web | 49
Congure Using J-Web | 49
Customize the Conguraon for Junos OS Release 19.2 | 51
Customize the Conguraon for Junos OS Release 15.1X49-D170 | 52
Congure the Device Using ZTP with Juniper Networks Network Service Controller | 53
4
Maintaining Components
Maintaining the SRX300 Components | 56
Roune Maintenance Procedures for the SRX300 Services Gateway | 56
Maintaining the SRX300 Firewall Power Supply | 56
5
Troubleshoong Hardware
Troubleshoong the SRX300 | 58
Troubleshoong Resources for the SRX300 Firewall Overview | 58
Troubleshoong Chassis and Interface Alarm Messages on the SRX300 Firewall | 59
Troubleshoong the Power System on the SRX300 Services Gateway | 60
Using the RESET CONFIG Buon | 61
Changing the RESET CONFIG Buon Behavior | 62
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX300 Chassis or Components | 64
Contacng Customer Support | 64
Returning a SRX300 Firewall Component to Juniper Networks | 65
Locang the SRX300 Firewall Chassis Serial Number and Agency Labels | 65
Lisng the SRX300 Firewall Component Details with the CLI | 66
Required Tools and Parts for Packing the SRX300 Firewall | 66
Packing the SRX300 Firewall for Shipment | 66
Packing SRX300 Firewall Components for Shipment | 67
v

7
Safety and Compliance Informaon
Denions of Safety Warning Levels | 69
General Safety Guidelines and Warnings | 70
Restricted Access Warning | 72
Qualied Personnel Warning | 73
Prevenon of Electrostac Discharge Damage | 74
Fire Safety Requirements | 75
Laser and LED Safety Guidelines and Warnings | 77
Radiaon from Open Port Apertures Warning | 79
Baery-Handling Warning | 80
Lightning Acvity Warning | 82
Jewelry Removal Warning | 83
Operang Temperature Warning | 84
Product Disposal Warning | 86
Acon to Take Aer an Electrical Accident | 87
General Electrical Safety Guidelines and Warnings | 87
SRX300 Agency Approvals and Compliance Statements | 88
SRX300 Firewall Agency Approvals | 88
SRX300 Firewall EMC Requirements | 90
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX300 Firewall. Aer compleng the installaon and basic conguraon
procedures covered in this guide, refer to the Junos OS documentaon for informaon about further
soware conguraon.
RELATED DOCUMENTATION
Day One+ for SRX300 (Quick Start)
SRX300 Series and SRX550 High Memory Gateway Interface Modules Reference
vii

1
CHAPTER
Overview
SRX300 Firewall Overview | 2
SRX300 Chassis | 3
SRX300 Power System | 9

SRX300 Firewall Overview
IN THIS SECTION
SRX300 Firewall Descripon | 2
Benets of the SRX300 Firewall | 2
SRX300 Firewall Descripon
The SRX300 Firewall consolidates networking and security capabilies for small retail oces. The
services gateway provides cost-eecve, scalable integraon of roung, security, and switching in a
single device. The SRX300 Firewall provides rewall support with key features such as IP security (IPsec)
VPN and Content Security .
With a desktop form-factor chassis, the SRX300 Firewall has eight 1 G Ethernet ports, two 1 G SFP
ports, 4 GB of DRAM memory, and 8 GB of ash memory.
The SRX300 Firewall runs the Junos operang system (Junos OS) and supports the following features:
• Firewall support with key features such as IPsec and VPN
• Intrusion Detecon and Prevenon (IDP)
• High availability
• QoS
• MPLS
You can manage the SRX300 Firewall by using the same interfaces that you use for managing other
devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space.
Benets of the SRX300 Firewall
•High performance—The SRX300 supports up to 1-Gbps rewall and 300-Mbps IPsec VPN, and is
suited for small branch and retail oce deployments.
2

•Simplied deployment with minimal manual intervenon—The Zero Touch Provisioning (ZTP) feature
enables you to provision and congure the SRX300 line automacally, thereby reducing operaonal
complexity and simplifying the provisioning of new sites.
•Threat protecon—The SRX300 line supports IPsec VPN, Media Access Control Security (MACsec),
Juniper Juniper Advanced Threat Prevenon Cloud, and Trusted Plaorm Module (TPM) to protect
against potenal vulnerabilies.
SRX300 Chassis
IN THIS SECTION
SRX300 Firewall Chassis Overview | 3
Understanding the SRX300 Firewall Front Panel | 4
Understanding the SRX300 Firewall Back Panel | 8
SRX300 Firewall Chassis Overview
The SRX300 Firewall chassis weighs 4.38 lb. and measures 1.37 in. high, 12.63 in. wide, and 7.52 in.
deep.
CAUTION: Before removing or installing components of a funconing services gateway,
aach an electrostac discharge (ESD) strap to an ESD point and place the other end of
the strap around your bare wrist. Failure to use an ESD strap could result in damage to
the device.
The services gateway must be connected to earth ground during normal operaon. The protecve
earthing terminal on the rear of the chassis is provided to connect the services gateway to ground.
3