Juniper SRX300 Series Installation instructions

SRX300 Firewall Hardware Guide
Published
2023-08-15

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX300 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
SRX300 Firewall Overview | 2
SRX300 Firewall Descripon | 2
Benets of the SRX300 Firewall | 2
SRX300 Chassis | 3
SRX300 Firewall Chassis Overview | 3
Understanding the SRX300 Firewall Front Panel | 4
Understanding the SRX300 Firewall Back Panel | 8
SRX300 Power System | 9
Understanding the SRX300 Firewall Power Supply | 9
SRX300 Firewall Power Specicaons and Requirements | 10
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX300 Firewall | 12
SRX300 Site Guidelines and Requirements | 15
General Site Installaon Guidelines for the SRX300 Firewall | 15
SRX300 Firewall Environmental Specicaons | 16
SRX300 Firewall Electrical Wiring Guidelines | 16
SRX300 Firewall Grounding Specicaons | 18
SRX300 Firewall Physical Specicaons | 19
SRX300 Firewall Clearance Requirements for Airow and Hardware Maintenance | 20
Rack Requirements | 20
Cabinet Requirements | 21
SRX300 Transceiver Specicaons and Pinouts | 22
iii

SRX300 Transceiver Support | 22
RJ-45 Connector Pinouts for the SRX300 Firewall Ethernet Port | 22
RJ-45 Connector Pinouts for the SRX300 Firewall Console Port | 23
Mini-USB Connector Pinouts for the SRX300 Firewall Console Port | 24
3
Inial Installaon and Conguraon
SRX300 Installaon Overview | 27
SRX300 Firewall Installaon Overview | 27
SRX300 Firewall Autoinstallaon Overview | 28
Unpacking and Mounng the SRX300 | 29
Unpacking the SRX300 Firewall | 29
Verifying Parts Received with the SRX300 Firewall | 30
Installing the SRX300 Firewall on a Desk | 31
Installing the SRX300 Firewall on a Wall | 31
Installing the SRX300 Firewall in a Rack | 33
Connecng the SRX300 to Power | 37
Required Tools and Parts for Grounding the SRX300 Services Gateway | 37
Connecng the SRX300 Firewall Grounding Cable | 37
Connecng the SRX300 Firewall to the Power Supply | 39
Powering On the SRX300 Services Gateway | 39
Powering O the SRX300 Services Gateway | 40
Connecng the SRX300 to External Devices | 41
Connecng the Dial-Up Modem to the Console Port on the SRX300 Services Gateway | 41
Connecng to the SRX300 Firewall CLI Using a Dial-Up Modem | 42
Conguring Junos OS on the SRX300 | 43
SRX300 Firewall Factory-Default Sengs | 44
Inial Conguraon Using the CLI | 45
Connect to the Serial Console Port | 46
iv

Connect to the Mini-USB Console Port | 47
Congure the SRX300 Using the CLI | 48
Inial Conguraon Using J-Web | 49
Congure Using J-Web | 49
Customize the Conguraon for Junos OS Release 19.2 | 51
Customize the Conguraon for Junos OS Release 15.1X49-D170 | 52
Congure the Device Using ZTP with Juniper Networks Network Service Controller | 53
4
Maintaining Components
Maintaining the SRX300 Components | 56
Roune Maintenance Procedures for the SRX300 Services Gateway | 56
Maintaining the SRX300 Firewall Power Supply | 56
5
Troubleshoong Hardware
Troubleshoong the SRX300 | 58
Troubleshoong Resources for the SRX300 Firewall Overview | 58
Troubleshoong Chassis and Interface Alarm Messages on the SRX300 Firewall | 59
Troubleshoong the Power System on the SRX300 Services Gateway | 60
Using the RESET CONFIG Buon | 61
Changing the RESET CONFIG Buon Behavior | 62
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX300 Chassis or Components | 64
Contacng Customer Support | 64
Returning a SRX300 Firewall Component to Juniper Networks | 65
Locang the SRX300 Firewall Chassis Serial Number and Agency Labels | 65
Lisng the SRX300 Firewall Component Details with the CLI | 66
Required Tools and Parts for Packing the SRX300 Firewall | 66
Packing the SRX300 Firewall for Shipment | 66
Packing SRX300 Firewall Components for Shipment | 67
v

7
Safety and Compliance Informaon
Denions of Safety Warning Levels | 69
General Safety Guidelines and Warnings | 70
Restricted Access Warning | 72
Qualied Personnel Warning | 73
Prevenon of Electrostac Discharge Damage | 74
Fire Safety Requirements | 75
Laser and LED Safety Guidelines and Warnings | 77
Radiaon from Open Port Apertures Warning | 79
Baery-Handling Warning | 80
Lightning Acvity Warning | 82
Jewelry Removal Warning | 83
Operang Temperature Warning | 84
Product Disposal Warning | 86
Acon to Take Aer an Electrical Accident | 87
General Electrical Safety Guidelines and Warnings | 87
SRX300 Agency Approvals and Compliance Statements | 88
SRX300 Firewall Agency Approvals | 88
SRX300 Firewall EMC Requirements | 90
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX300 Firewall. Aer compleng the installaon and basic conguraon
procedures covered in this guide, refer to the Junos OS documentaon for informaon about further
soware conguraon.
RELATED DOCUMENTATION
Day One+ for SRX300 (Quick Start)
SRX300 Series and SRX550 High Memory Gateway Interface Modules Reference
vii

1
CHAPTER
Overview
SRX300 Firewall Overview | 2
SRX300 Chassis | 3
SRX300 Power System | 9

SRX300 Firewall Overview
IN THIS SECTION
SRX300 Firewall Descripon | 2
Benets of the SRX300 Firewall | 2
SRX300 Firewall Descripon
The SRX300 Firewall consolidates networking and security capabilies for small retail oces. The
services gateway provides cost-eecve, scalable integraon of roung, security, and switching in a
single device. The SRX300 Firewall provides rewall support with key features such as IP security (IPsec)
VPN and Content Security .
With a desktop form-factor chassis, the SRX300 Firewall has eight 1 G Ethernet ports, two 1 G SFP
ports, 4 GB of DRAM memory, and 8 GB of ash memory.
The SRX300 Firewall runs the Junos operang system (Junos OS) and supports the following features:
• Firewall support with key features such as IPsec and VPN
• Intrusion Detecon and Prevenon (IDP)
• High availability
• QoS
• MPLS
You can manage the SRX300 Firewall by using the same interfaces that you use for managing other
devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space.
Benets of the SRX300 Firewall
•High performance—The SRX300 supports up to 1-Gbps rewall and 300-Mbps IPsec VPN, and is
suited for small branch and retail oce deployments.
2

•Simplied deployment with minimal manual intervenon—The Zero Touch Provisioning (ZTP) feature
enables you to provision and congure the SRX300 line automacally, thereby reducing operaonal
complexity and simplifying the provisioning of new sites.
•Threat protecon—The SRX300 line supports IPsec VPN, Media Access Control Security (MACsec),
Juniper Juniper Advanced Threat Prevenon Cloud, and Trusted Plaorm Module (TPM) to protect
against potenal vulnerabilies.
SRX300 Chassis
IN THIS SECTION
SRX300 Firewall Chassis Overview | 3
Understanding the SRX300 Firewall Front Panel | 4
Understanding the SRX300 Firewall Back Panel | 8
SRX300 Firewall Chassis Overview
The SRX300 Firewall chassis weighs 4.38 lb. and measures 1.37 in. high, 12.63 in. wide, and 7.52 in.
deep.
CAUTION: Before removing or installing components of a funconing services gateway,
aach an electrostac discharge (ESD) strap to an ESD point and place the other end of
the strap around your bare wrist. Failure to use an ESD strap could result in damage to
the device.
The services gateway must be connected to earth ground during normal operaon. The protecve
earthing terminal on the rear of the chassis is provided to connect the services gateway to ground.
3

Understanding the SRX300 Firewall Front Panel
IN THIS SECTION
Network Port LEDs | 7
Figure 1 on page 4 shows the front panel of the SRX300 Firewall.
Figure 1: SRX300 Firewall Front Panel
Table 1 on page 4 provides details about the front panel components.
Table 1: SRX300 Firewall Front Panel Components
Number Component Descripon
1 Reset Cong buon Returns the services gateway to the rescue
conguraon or the factory-default conguraon.
2 Serial Console port Connects a laptop to the services gateway for CLI
management. The port uses an RJ-45 serial
connecon and supports the RS-232 (EIA-232)
standard.
4

Table 1: SRX300 Firewall Front Panel Components (Connued)
Number Component Descripon
3 1-GbE Ethernet ports Six LAN ports (0/0 to 0/5)
The ports have the following characteriscs:
•Use an RJ-45 connector
•Operate in full-duplex and half-duplex modes
•Support autonegoaon
The ports can be used to:
•Funcon as front-end network ports
•Provide LAN and WAN connecvity to hubs,
switches, local servers, and workstaons
•Forward incoming data packets to the services
gateway
•Receive outgoing data packets from the services
gateway
4 1-GbE small form-factor pluggable
(SFP) ports
Two 1-GbE MACsec-capable SFP ports for network
trac.
5 ESD point For personal safety, while working on the services
gateway, use the ESD outlet to plug in an ESD
grounding strap to prevent your body from sending
stac charges to the services gateway.
5

Table 1: SRX300 Firewall Front Panel Components (Connued)
Number Component Descripon
6 Mini-USB console port Connects a laptop to the services gateway for CLI
management through a USB interface. The port
accepts a Mini-B type USB cable plug. A USB cable
with Mini-B and Type A USB plugs is supplied with
the services gateway.
To use the mini-USB console port, you must
download a USB driver to the management device
from the Downloads page at hps://
www.juniper.net/support/downloads/?p=junos-
srx#sw.
To download the driver for Windows OS, select 6.5
from the Version drop-down list.
To download the driver for Mac OS, select 4.10 from
the Version drop-down list.
7 USB port The services gateway has one USB port that accepts
a USB storage device.
8 LEDs Indicates component and system status at a glance.
9 Power buon Use the Power buon to power on or power o the
services gateway.
Figure 2 on page 6 shows the LEDs on the front panel.
Figure 2: SRX300 Firewall Front Panel LEDs
6

Table 2 on page 7 lists the front panel LEDs.
Table 2: SRX300 Firewall Front Panel LEDs
Component Descripon
ALARM •Solid amber (noncrical alarm)
•Solid red (crical alarm)
•O (no alarms)
STAT •Solid green (operang normally)
•Solid amber
•Device is starng up
•Comming rescue conguraon
•Comming clear conguraon
•Solid red (error detected)
PWR •Solid green (receiving power)
•Solid red (power failure)
•O (no power)
HA •Solid green (all HA links are available)
•Solid amber (some HA links are unavailable)
•Solid red (HA links are not funconal)
•O (HA is disabled)
Network Port LEDs
The SFP and Ethernet ports have two status LEDs, LINK and ACT, located above the port.
7

Table 3: Network Port LEDs
LED Descripon
LINK (LED on the le) •Solid green—There is link acvity.
•O—There is no link established.
ACT (LED on the right) •Blinking green—There is acvity on the 1 G link.
•O—There is no link acvity.
Understanding the SRX300 Firewall Back Panel
Figure 3 on page 8 shows the back panel of the SRX300 Firewall and Table 4 on page 8 lists the
back panel components.
Figure 3: SRX300 Firewall Back Panel
Table 4: SRX300 Firewall Back Panel Components
Number Component Descripon
1 Grounding point Connects the services gateway
chassis to earth ground (oponal).
NOTE: We recommend
connecng the services gateway
to ground if required.
8

Table 4: SRX300 Firewall Back Panel Components (Connued)
Number Component Descripon
2 Lock Provides the capability to lock and
secure the device at the
installaon site.
3 Cable e holder Secures the DC power cord
connecon to the adapter.
4 Power supply input Connects the services gateway to
the external power supply.
RELATED DOCUMENTATION
SRX300 Installaon Overview | 27
SRX300 Power System
IN THIS SECTION
Understanding the SRX300 Firewall Power Supply | 9
SRX300 Firewall Power Specicaons and Requirements | 10
Understanding the SRX300 Firewall Power Supply
The power supply for the SRX300 Firewall is external. You must use the AC to DC, 60 W power supply
adapter provided by Juniper Networks to provide power to the services gateway. The adapter provides
an output of 12 VDC, 5 A.
9

SEE ALSO
Connecng the SRX300 Firewall to the Power Supply | 39
Powering On the SRX300 Services Gateway | 39
Powering O the SRX300 Services Gateway | 40
SRX300 Firewall Power Specicaons and Requirements
Table 5 on page 10 lists the power specicaons for the SRX300 Firewall power supply adapter.
Table 5: Power Specicaons for the SRX300 Firewall Power Supply Adapter
Power Supply Adapter Requirement Specicaon
AC input 100 to 240 VAC
AC input line frequency 50 to 60 Hz
AC system current rang 1 A maximum
Maximum AC inrush current 7 A at 220 V/50 Hz
WARNING: The AC power cord for the services gateway is intended for use with only
the power supply adapter provided with the device .
SEE ALSO
SRX300 Firewall Electrical Wiring Guidelines | 16
10

2
CHAPTER
Site Planning, Preparaon, and
Specicaons
Site Preparaon Checklist for the SRX300 Firewall | 12
SRX300 Site Guidelines and Requirements | 15
SRX300 Transceiver Specicaons and Pinouts | 22

Site Preparaon Checklist for the SRX300 Firewall
Table 6 on page 12 provides a checklist of tasks you need to perform when preparing a site for
installing the SRX300 Firewall.
Table 6: Site Preparaon Checklist for SRX300 Firewall Installaon
Item or Task Addional
Informaon
Performed By Date Notes
Environment
Verify that environmental
factors such as temperature
and humidity do not exceed
device tolerances.
"SRX300 Services
Gateway
Environmental
Specicaons" on
page 16
Power
•Measure the distance
between the external
power sources and the
device installaon site.
•Locate sites for
connecon of system
grounding.
•Calculate the power
consumpon and
requirements.
"SRX300 Services
Gateway Electrical
Wiring Guidelines"
on page 16
"SRX300 Services
Gateway Power
Specicaons and
Requirements" on
page 10
Rack Requirements
12

Table 6: Site Preparaon Checklist for SRX300 Firewall Installaon (Connued)
Item or Task Addional
Informaon
Performed By Date Notes
Verify that your rack meets
the minimum requirements.
SRX300 Services
Gateway Rack-
Mounng
Requirements and
Warnings
Rack Installaon
•Plan the rack locaon,
including required space
clearances.
•Secure the rack to the
oor and building
structure.
Preparing the
SRX300 Services
Gateway for Rack-
Mount Installaon
Cabinet Requirements
•Verify that your cabinet
meets the minimum
requirements.
•Plan the cabinet
locaon, including
required space
clearances.
SRX300 Services
Gateway Cabinet
Size and Clearance
Requirements
Wall Installaon
13