Juniper SRX340 Installation instructions

SRX340 Firewall Hardware Guide
Published
2023-08-15

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX340 Firewall Hardware Guide
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
SRX340 Firewall Overview | 2
SRX340 Firewall Descripon | 2
SRX340 Firewall Field Replaceable Units Overview | 2
Benets of the SRX340 Firewall | 3
SRX340 Chassis | 3
SRX340 Firewall Chassis Overview | 4
SRX340 Firewall Front Panel | 4
SRX340 Firewall Back Panel | 9
SRX340 Firewall Interface Modules Overview | 10
SRX340 Cooling System | 11
SRX340 Power System | 12
Understanding the SRX340 Firewall Power Supply | 12
SRX340 Firewall Power Specicaons and Requirements | 12
SRX340 Firewall Supported AC Power Cords | 13
2
Site Planning, Preparaon, and Specicaons
Site Preparaon Checklist for the SRX340 Firewall | 16
SRX340 Site Guidelines and Requirements | 18
General Site Installaon Guidelines for the SRX340 Firewall | 18
SRX340 Firewall Environmental Specicaons | 19
SRX340 Firewall Electrical Wiring Guidelines | 19
SRX340 Firewall Physical Specicaons | 21
SRX340 Firewall Clearance Requirements for Airow and Hardware Maintenance | 22
iii

Rack Requirements for the SRX340 Services Gateway | 23
Cabinet Requirements for the SRX340 Firewall | 23
SRX340 Transceiver Specicaons and Pinouts | 24
SRX340 Transceiver Support | 24
RJ-45 Connector Pinouts for the SRX340 Firewall Ethernet Port | 25
RJ-45 Connector Pinouts for the SRX340 Firewall Console Port | 25
Mini-USB Connector Pinouts for the SRX340 Firewall Console Port | 26
3
Inial Installaon and Conguraon
SRX340 Installaon Overview | 29
SRX340 Firewall Installaon Overview | 29
SRX340 Firewall Autoinstallaon Overview | 29
Unpacking and Mounng the SRX340 | 30
Unpacking the SRX340 Firewall | 31
Verifying Parts Received with the SRX340 Firewall | 32
Preparing the SRX340 Firewall for Rack-Mount Installaon | 33
Installing the SRX340 Firewall in a Rack | 34
Connecng the SRX340 to Power | 35
Required Tools and Parts for Grounding the SRX340 Services Gateway | 36
Connecng the SRX340 Firewall Grounding Cable | 36
Connecng the SRX340 Firewall to an AC Power Supply | 37
Powering On the SRX340 Services Gateway | 38
Powering O the SRX340 Services Gateway | 39
Connecng the SRX340 to External Devices | 40
Connecng the Dial-Up Modem to the Console Port on the SRX340 Services Gateway | 40
Connecng to the SRX340 Firewall CLI Using a Dial-Up Modem | 41
Conguring Junos OS on the SRX340 | 42
SRX340 Firewall Factory-Default Sengs | 43
iv

Inial Conguraon Using the CLI | 45
Connect to the Serial Console Port | 45
Connect to the Mini-USB Console Port | 46
Congure the SRX340 Using the CLI | 47
Inial Conguraon Using J-Web | 48
Congure Using J-Web | 48
Customize the Conguraon for Junos OS Release 19.2 | 50
Customize the Conguraon for Junos OS Release 15.1X49-D170 | 51
Congure the Device Using ZTP with Juniper Networks Network Service Controller | 52
Installing the Oponal SATA Solid-State Drive in SRX340 and SRX345 Services
Gateways | 54
4
Maintaining Components
Maintaining the SRX340 Components | 59
Required Tools and Parts for Maintaining the SRX340 Firewall Hardware Components | 59
Roune Maintenance Procedures for the SRX340 Services Gateway | 59
Maintaining the SRX340 Firewall Cooling System Components | 60
Maintaining the SRX340 Firewall Power Supply | 60
Replacing Mini-Physical Interface Modules in the SRX340 Firewall | 60
5
Troubleshoong Hardware
Troubleshoong the SRX340 | 63
Troubleshoong Resources for the SRX340 Firewall Overview | 63
Troubleshoong Chassis and Interface Alarm Messages on the SRX340 Firewall | 63
Troubleshoong the Power System on the SRX340 Firewall | 65
Using the RESET CONFIG Buon | 65
Changing the RESET CONFIG Buon Behavior | 66
6
Contacng Customer Support and Returning the Chassis or Components
Returning the SRX340 Chassis or Components | 69
Contacng Customer Support | 69
v

Returning a SRX340 Firewall Component to Juniper Networks | 70
Locang the SRX340 Firewall Chassis Serial Number and Agency Labels | 70
Locang the SRX340 Firewall Mini-Physical Interface Module Serial Number Label | 71
Lisng the SRX340 Firewall Component Details with the CLI | 71
Required Tools and Parts for Packing the SRX340 Firewall | 71
Packing the SRX340 Firewall for Shipment | 72
Packing SRX340 Firewall Components for Shipment | 73
7
Safety and Compliance Informaon
Denions of Safety Warning Levels | 75
General Safety Guidelines and Warnings | 76
Restricted Access Warning | 78
Qualied Personnel Warning | 79
Prevenon of Electrostac Discharge Damage | 80
Fire Safety Requirements | 81
Laser and LED Safety Guidelines and Warnings | 83
Radiaon from Open Port Apertures Warning | 85
Maintenance and Operaonal Safety Guidelines and Warnings | 86
Acon to Take Aer an Electrical Accident | 92
General Electrical Safety Guidelines and Warnings | 92
AC Power Electrical Safety Guidelines | 93
SRX340 Firewall Agency Approvals | 94
SRX340 Firewall Acousc Noise Compliance Statements | 96
SRX340 Firewall EMC Requirements | 97
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for the SRX340 Firewall. Aer compleng the installaon and basic conguraon
procedures covered in this guide, refer to the Junos OS documentaon for informaon about further
soware conguraon.
RELATED DOCUMENTATION
Day One+ for SRX340 (Quick Start)
SRX300 Series and SRX550 High Memory Gateway Interface Modules Reference
Wi-Fi Mini-PIM Installaon Guide
LTE Mini-PIM and Antenna Installaon Guide
Transceivers Supported on SRX340 Services Gateways
vii

1
CHAPTER
Overview
SRX340 Firewall Overview | 2
SRX340 Chassis | 3
SRX340 Cooling System | 11
SRX340 Power System | 12

SRX340 Firewall Overview
IN THIS SECTION
SRX340 Firewall Descripon | 2
SRX340 Firewall Field Replaceable Units Overview | 2
Benets of the SRX340 Firewall | 3
SRX340 Firewall Descripon
The SRX340 Firewall consolidates security, roung, switching, and WAN interfaces for midsize
distributed enterprises. With advanced threat migaon capabilies, the services gateway provides
cost-eecve and secure connecvity across distributed enterprises.
The SRX340 Firewall has a capacity of 3 gigabits per second (Gbps) and is 1 rack unit (U) tall. The
services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports, one management port, 4 GB of
DRAM memory, 8 GB of ash memory, and four Mini-Physical Interface Module (Mini-PIM) slots.
The SRX340 Firewall runs the Junos operang system (Junos OS) and supports the following features:
• Firewall support with key features such as IPsec and VPN
• Intrusion Detecon and Prevenon (IDP)
• High availability
• QoS
• MPLS
You can manage the SRX340 Firewall by using the same interfaces that you use for managing other
devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space.
SRX340 Firewall Field Replaceable Units Overview
Field-replaceable units (FRUs) are components that you can replace at your site. The Mini-Physical
Interface Module (MPIM) is the only FRU on the SRX340 Firewall.
2

The Mini-PIMs are not hot-swappable. You must power o the services gateway before removing or
installing Mini-PIMs.
SEE ALSO
Replacing Mini-Physical Interface Modules in the SRX340 Firewall | 60
Benets of the SRX340 Firewall
•High performance—The SRX340 supports up to 3-Gbps rewall and 600-Mbps IPsec VPN, and is
suited for midsize distributed enterprise branch oce deployments.
•Simplied deployment with minimal manual intervenon—The Zero Touch Provisioning (ZTP) feature
enables you to provision and congure the SRX300 line automacally, thereby reducing operaonal
complexity and simplifying the provisioning of new sites.
•Mulple WAN connecvity opons—The SRX340 supports mulple opons such as Ethernet, serial,
T1/E1, VDSL2, and 3G/4G LTE wireless for WAN or Internet connecvity to link sites.
•Threat protecon—The SRX300 line supports IPsec VPN, Media Access Control Security (MACsec),
Juniper Juniper Advanced Threat Prevenon Cloud, and Trusted Plaorm Module (TPM) to protect
against potenal vulnerabilies.
RELATED DOCUMENTATION
SRX340 Installaon Overview | 29
SRX340 Chassis
IN THIS SECTION
SRX340 Firewall Chassis Overview | 4
SRX340 Firewall Front Panel | 4
SRX340 Firewall Back Panel | 9
3

SRX340 Firewall Interface Modules Overview | 10
SRX340 Firewall Chassis Overview
The SRX340 Firewall chassis is a rigid sheet metal structure that houses all of the other services
gateway components. The chassis measures 1.72 in. (4.36 cm) high, 17.36 in. (44.09 cm) wide, and 14.57
in. (37.01 cm) deep (from the front to the rear of the chassis). The chassis installs in standard 800–mm
(or larger) enclosed cabinets, 19 in. equipment racks, or telecommunicaons open-frame racks.
CAUTION: Before removing or installing components of a funconing services gateway,
aach an electrostac discharge (ESD) strap to an ESD point and place the other end of
the strap around your bare wrist. Failure to use an ESD strap could result in damage to
the device.
The services gateway must be connected to earth ground during normal operaon. The protecve
earthing terminal on the side of the chassis is provided to connect the services gateway to ground.
SRX340 Firewall Front Panel
IN THIS SECTION
Management Port LEDs | 8
Network Port LEDs | 8
Figure 1 on page 5 shows the front panel of the SRX340 Firewall.
4

Figure 1: SRX340 Firewall Front Panel
Table 1 on page 5 provides details about the front panel components.
Table 1: SRX340 Firewall Front Panel Components
Callout Component Descripon
1 Reset Cong buon Returns the services gateway to the rescue conguraon
or the factory-default conguraon.
2, 8 Console ports •Serial—Connects a laptop to the services gateway for
CLI management. The port uses an RJ-45 serial
connecon and supports the RS-232 (EIA-232)
standard.
•USB—Connects a laptop to the services gateway for
CLI management through a USB interface. The port
accepts a Mini-B type USB cable plug. A USB cable
with Mini-B and Type A USB plugs is supplied with the
services gateway.
To use the mini-USB console port, you must download
a USB driver to the management device from the
Downloads page at hps://www.juniper.net/support/
downloads/?p=junos-srx#sw.
To download the driver for Windows OS, select 6.5
from the Version drop-down list.
To download the driver for Mac OS, select 4.10 from
the Version drop-down list.
3 Management port Use the management (MGMT) port to connect to the
device over the network.
5

Table 1: SRX340 Firewall Front Panel Components (Connued)
Callout Component Descripon
4 Mini-PIM slots Four slots for Mini-PIMs. Mini-PIMs can be used to provide
LAN and WAN funconality along with connecvity to
various media types.
5 ESD point For personal safety, while working on the services gateway,
use the ESD outlet to plug in an ESD grounding strap to
prevent your body from sending stac charges to the
services gateway.
6 1-GbE small form-factor
pluggable (SFP) ports
Eight 1-GbE MACsec-capable SFP ports for network trac.
7 1-GbE Ethernet ports Eight LAN ports (0/0 to 0/7), which are MACsec capable.
The ports have the following characteriscs:
•Use an RJ-45 connector
•Operate in full-duplex and half-duplex modes
•Support autonegoaon
The ports can be used to:
•Funcon as front-end network ports
•Provide LAN and WAN connecvity to hubs, switches,
local servers, and workstaons
•Forward incoming data packets to the services gateway
•Receive outgoing data packets from the services
gateway
9 USB port The services gateway has one USB port that accepts a USB
storage device.
10 LEDs Indicate component and system status at a glance.
6

Table 1: SRX340 Firewall Front Panel Components (Connued)
Callout Component Descripon
11 Power buon Use the Power buon to power on or power o the
services gateway.
Figure 2 on page 7 shows the LEDs on the front panel.
Figure 2: SRX340 Firewall Front Panel LEDs
Table 2 on page 7 lists the front panel LEDs.
Table 2: SRX340 Firewall Front Panel LEDs
Component Descripon
ALARM •Solid amber (noncrical alarm)
•Solid red (crical alarm)
•O (no alarms)
STAT •Solid green (operang normally)
•Solid red (error detected)
PWR •Solid green (receiving power)
•Solid red (power failure)
•O (no power)
7

Table 2: SRX340 Firewall Front Panel LEDs (Connued)
Component Descripon
HA •Solid green (all HA links are available)
•Solid amber (some HA links are unavailable)
•Solid red (HA links are not funconal)
•O (HA is disabled)
mPIM0 , mPIM1, mPIM2, and mPIM3 •Solid green (Mini-PIM is funconing normally)
•Solid red (Mini-PIM hardware failure)
•O (Mini-PIM is not present or Mini-PIM is not
detected by the device)
Management Port LEDs
The management port has two LEDs that indicate link acvity and status of the management port.
Table 3 on page 8 describes the LEDs.
Table 3: Management Port LEDs
LED Descripon
Link (LED on the le) •Solid green—There is link acvity.
•O—There is no link established.
Acvity (LED on the
right)
•Blinking green—There is acvity on the link.
•O—There is no link acvity.
Network Port LEDs
The SFP and Ethernet ports have two status LEDs, LINK and ACT, located above the port.
8

Table 4: Network Port LEDs
LED Descripon
LINK (LED on the le) •Solid green—There is link acvity.
•O—There is no link established.
ACT (LED on the right) •Blinking green—There is acvity on the 1 G link.
•O—There is no link acvity.
SRX340 Firewall Back Panel
Figure 3 on page 9 shows the back panel of the SRX340 Firewall and Table 5 on page 9 lists the
components on the back panel.
Figure 3: SRX340 Firewall Back Panel
Table 5: SRX340 Firewall Back Panel Components
Callout Component Descripon
1 SSD slot SSD storage device slot for
oponal logging device.
2 Fans Keeps all the services gateway
components within the acceptable
temperature range.
9

Table 5: SRX340 Firewall Back Panel Components (Connued)
Callout Component Descripon
3 Power supply input Connects the services gateway to
the AC power supply.
SRX340 Firewall Interface Modules Overview
Mini-Physical Interface Modules (Mini-PIMs) are eld-replaceable network interface cards (NICs)
supported on the SRX300 line of services gateways. You can easily insert or remove Mini-PIMs from the
front slots of the services gateway chassis. The Mini-PIMs provide physical connecons to a LAN or a
WAN. The Mini-PIMs receive incoming packets from the network and transmit outgoing packets to the
network. During this process, they perform framing and line-speed signaling for the medium type.
CAUTION: The Mini-PIMs are not hot-swappable. You must power o the services
gateway before removing or installing Mini-PIMs.
The following Mini-PIMs are supported on the SRX340 Firewall:
• 1-Port Serial Mini-Physical Interface Module (SRX-MP-1SERIAL-R)
• 1-Port T1/E1 Mini-Physical Interface Module (SRX-MP-1T1E1-R)
• 1-Port VDSL2 (Annex A) Mini-Physical Interface Module (SRX-MP-1VDSL2-R)
• LTE Mini-Physical Interface Module (SRX-MP-LTE-AE and SRX-MP-LTE-AA)
• Wi-Fi Mini-Physical Interface Module (SRX-MP-WLAN-US, SRX-MP-WLAN-IL, and SRX-MP-WLAN-
WW)
NOTE: Gigabit-Backplane Physical Interface Modules (GPIMs) are not supported on the SRX340
Firewall.
For more informaon on the Mini-PIMs, see the SRX300 Series and SRX550 High Memory Gateway
Interface Modules Reference.
10

RELATED DOCUMENTATION
SRX340 Installaon Overview | 29
SRX340 Cooling System
The cooling system for the SRX340 Firewall includes four xed fans. The fans draw air through vents on
the front of the chassis and exhaust the air through the back of the chassis. The airow produced by the
fans keeps device components within the acceptable temperature range.
Figure 4 on page 11 shows the airow through the SRX340 Firewall chassis.
Figure 4: Airow Through the SRX340 Firewall Chassis
RELATED DOCUMENTATION
Maintaining the SRX340 Firewall Cooling System Components | 60
11

SRX340 Power System
IN THIS SECTION
Understanding the SRX340 Firewall Power Supply | 12
SRX340 Firewall Power Specicaons and Requirements | 12
SRX340 Firewall Supported AC Power Cords | 13
Understanding the SRX340 Firewall Power Supply
The SRX340 Firewall uses a xed, internal AC power supply. The power supply distributes the dierent
output voltages to the device components according to their voltage requirements. The power supply is
xed in the chassis and is not eld-replaceable. The power supply has a single AC appliance inlet that
requires a dedicated AC power feed.
SEE ALSO
Maintaining the SRX340 Firewall Power Supply | 60
SRX340 Firewall Power Specicaons and Requirements
The AC power system electrical specicaons for the SRX340 Firewall are listed in Table 6 on page 12.
Table 6: Power System Electrical Specicaons for the SRX340 Firewall
Power Requirement Specicaon
AC input voltage 100 to 240 VAC
AC input line frequency 50 to 60 Hz
12

Table 6: Power System Electrical Specicaons for the SRX340 Firewall (Connued)
Power Requirement Specicaon
AC system current rang 1 to 1.5 A
Maximum AC inrush current 7.3 A at 220 V/50 Hz (with four Mini-PIMs installed)
WARNING: The AC power cord for the services gateway is intended for use with the
device only and not for any other use.
SRX340 Firewall Supported AC Power Cords
WARNING: The AC power cord for the services gateway is intended for use with the
services gateway only and not for any other use.
NOTE: In North America, AC power cords must not exceed 4.5 m (approximately 14.75 ) in
length, to comply with Naonal Electrical code (NEC) Secon 400-8 (NFPA 75, 5-2.2) and
210-52, and Canadian Electrical Code (CEC) Secon 4-010(3).
Table 7 on page 13 provides power cord specicaons, and Figure 5 on page 14 depicts the plug on
the AC power cord provided for each country or region.
Table 7: AC Power Cord Specicaons
Country Electrical Specicaon Plug Standards
Australia 250 VAC, 10 A, 50 Hz AS/NZ 3112-1993
China 250 VAC, 10 A, 50 Hz GB2099.1 1996 and GB
1002 1996 (CH1-10P)
13