Juniper SRX340 Installation instructions

SRX340 Firewall Hardware Guide
Published
2023-08-15

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX340 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
SRX340 Firewall Overview | 2
SRX340 Firewall Descripon | 2
SRX340 Firewall Field Replaceable Units Overview | 2
Benets of the SRX340 Firewall | 3
SRX340 Chassis | 3
SRX340 Firewall Chassis Overview | 4
SRX340 Firewall Front Panel | 4
SRX340 Firewall Back Panel | 9
SRX340 Firewall Interface Modules Overview | 10
SRX340 Cooling System | 11
SRX340 Power System | 12
Understanding the SRX340 Firewall Power Supply | 12
SRX340 Firewall Power Specicaons and Requirements | 12
SRX340 Firewall Supported AC Power Cords | 13
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX340 Firewall | 16
SRX340 Site Guidelines and Requirements | 18
General Site Installaon Guidelines for the SRX340 Firewall | 18
SRX340 Firewall Environmental Specicaons | 19
SRX340 Firewall Electrical Wiring Guidelines | 19
SRX340 Firewall Physical Specicaons | 21
SRX340 Firewall Clearance Requirements for Airow and Hardware Maintenance | 22
iii

Rack Requirements for the SRX340 Services Gateway | 23
Cabinet Requirements for the SRX340 Firewall | 23
SRX340 Transceiver Specicaons and Pinouts | 24
SRX340 Transceiver Support | 24
RJ-45 Connector Pinouts for the SRX340 Firewall Ethernet Port | 25
RJ-45 Connector Pinouts for the SRX340 Firewall Console Port | 25
Mini-USB Connector Pinouts for the SRX340 Firewall Console Port | 26
3
Inial Installaon and Conguraon
SRX340 Installaon Overview | 29
SRX340 Firewall Installaon Overview | 29
SRX340 Firewall Autoinstallaon Overview | 29
Unpacking and Mounng the SRX340 | 30
Unpacking the SRX340 Firewall | 31
Verifying Parts Received with the SRX340 Firewall | 32
Preparing the SRX340 Firewall for Rack-Mount Installaon | 33
Installing the SRX340 Firewall in a Rack | 34
Connecng the SRX340 to Power | 35
Required Tools and Parts for Grounding the SRX340 Services Gateway | 36
Connecng the SRX340 Firewall Grounding Cable | 36
Connecng the SRX340 Firewall to an AC Power Supply | 37
Powering On the SRX340 Services Gateway | 38
Powering O the SRX340 Services Gateway | 39
Connecng the SRX340 to External Devices | 40
Connecng the Dial-Up Modem to the Console Port on the SRX340 Services Gateway | 40
Connecng to the SRX340 Firewall CLI Using a Dial-Up Modem | 41
Conguring Junos OS on the SRX340 | 42
SRX340 Firewall Factory-Default Sengs | 43
iv

Inial Conguraon Using the CLI | 45
Connect to the Serial Console Port | 45
Connect to the Mini-USB Console Port | 46
Congure the SRX340 Using the CLI | 47
Inial Conguraon Using J-Web | 48
Congure Using J-Web | 48
Customize the Conguraon for Junos OS Release 19.2 | 50
Customize the Conguraon for Junos OS Release 15.1X49-D170 | 51
Congure the Device Using ZTP with Juniper Networks Network Service Controller | 52
Installing the Oponal SATA Solid-State Drive in SRX340 and SRX345 Services
Gateways | 54
4
Maintaining Components
Maintaining the SRX340 Components | 59
Required Tools and Parts for Maintaining the SRX340 Firewall Hardware Components | 59
Roune Maintenance Procedures for the SRX340 Services Gateway | 59
Maintaining the SRX340 Firewall Cooling System Components | 60
Maintaining the SRX340 Firewall Power Supply | 60
Replacing Mini-Physical Interface Modules in the SRX340 Firewall | 60
5
Troubleshoong Hardware
Troubleshoong the SRX340 | 63
Troubleshoong Resources for the SRX340 Firewall Overview | 63
Troubleshoong Chassis and Interface Alarm Messages on the SRX340 Firewall | 63
Troubleshoong the Power System on the SRX340 Firewall | 65
Using the RESET CONFIG Buon | 65
Changing the RESET CONFIG Buon Behavior | 66
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX340 Chassis or Components | 69
Contacng Customer Support | 69
v

Returning a SRX340 Firewall Component to Juniper Networks | 70
Locang the SRX340 Firewall Chassis Serial Number and Agency Labels | 70
Locang the SRX340 Firewall Mini-Physical Interface Module Serial Number Label | 71
Lisng the SRX340 Firewall Component Details with the CLI | 71
Required Tools and Parts for Packing the SRX340 Firewall | 71
Packing the SRX340 Firewall for Shipment | 72
Packing SRX340 Firewall Components for Shipment | 73
7
Safety and Compliance Informaon
Denions of Safety Warning Levels | 75
General Safety Guidelines and Warnings | 76
Restricted Access Warning | 78
Qualied Personnel Warning | 79
Prevenon of Electrostac Discharge Damage | 80
Fire Safety Requirements | 81
Laser and LED Safety Guidelines and Warnings | 83
Radiaon from Open Port Apertures Warning | 85
Maintenance and Operaonal Safety Guidelines and Warnings | 86
Acon to Take Aer an Electrical Accident | 92
General Electrical Safety Guidelines and Warnings | 92
AC Power Electrical Safety Guidelines | 93
SRX340 Firewall Agency Approvals | 94
SRX340 Firewall Acousc Noise Compliance Statements | 96
SRX340 Firewall EMC Requirements | 97
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX340 Firewall. Aer compleng the installaon and basic conguraon
procedures covered in this guide, refer to the Junos OS documentaon for informaon about further
soware conguraon.
RELATED DOCUMENTATION
Day One+ for SRX340 (Quick Start)
SRX300 Series and SRX550 High Memory Gateway Interface Modules Reference
Wi-Fi Mini-PIM Installaon Guide
LTE Mini-PIM and Antenna Installaon Guide
Transceivers Supported on SRX340 Services Gateways
vii

1
CHAPTER
Overview
SRX340 Firewall Overview | 2
SRX340 Chassis | 3
SRX340 Cooling System | 11
SRX340 Power System | 12

SRX340 Firewall Overview
IN THIS SECTION
SRX340 Firewall Descripon | 2
SRX340 Firewall Field Replaceable Units Overview | 2
Benets of the SRX340 Firewall | 3
SRX340 Firewall Descripon
The SRX340 Firewall consolidates security, roung, switching, and WAN interfaces for midsize
distributed enterprises. With advanced threat migaon capabilies, the services gateway provides
cost-eecve and secure connecvity across distributed enterprises.
The SRX340 Firewall has a capacity of 3 gigabits per second (Gbps) and is 1 rack unit (U) tall. The
services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports, one management port, 4 GB of
DRAM memory, 8 GB of ash memory, and four Mini-Physical Interface Module (Mini-PIM) slots.
The SRX340 Firewall runs the Junos operang system (Junos OS) and supports the following features:
• Firewall support with key features such as IPsec and VPN
• Intrusion Detecon and Prevenon (IDP)
• High availability
• QoS
• MPLS
You can manage the SRX340 Firewall by using the same interfaces that you use for managing other
devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space.
SRX340 Firewall Field Replaceable Units Overview
Field-replaceable units (FRUs) are components that you can replace at your site. The Mini-Physical
Interface Module (MPIM) is the only FRU on the SRX340 Firewall.
2

The Mini-PIMs are not hot-swappable. You must power o the services gateway before removing or
installing Mini-PIMs.
SEE ALSO
Replacing Mini-Physical Interface Modules in the SRX340 Firewall | 60
Benets of the SRX340 Firewall
•High performance—The SRX340 supports up to 3-Gbps rewall and 600-Mbps IPsec VPN, and is
suited for midsize distributed enterprise branch oce deployments.
•Simplied deployment with minimal manual intervenon—The Zero Touch Provisioning (ZTP) feature
enables you to provision and congure the SRX300 line automacally, thereby reducing operaonal
complexity and simplifying the provisioning of new sites.
•Mulple WAN connecvity opons—The SRX340 supports mulple opons such as Ethernet, serial,
T1/E1, VDSL2, and 3G/4G LTE wireless for WAN or Internet connecvity to link sites.
•Threat protecon—The SRX300 line supports IPsec VPN, Media Access Control Security (MACsec),
Juniper Juniper Advanced Threat Prevenon Cloud, and Trusted Plaorm Module (TPM) to protect
against potenal vulnerabilies.
RELATED DOCUMENTATION
SRX340 Installaon Overview | 29
SRX340 Chassis
IN THIS SECTION
SRX340 Firewall Chassis Overview | 4
SRX340 Firewall Front Panel | 4
SRX340 Firewall Back Panel | 9
3