Juniper SRX5400 Service manual

SRX5400, SRX5600, and SRX5800
Firewall Card Reference
Published
2023-10-13

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
SRX5400, SRX5600, and SRX5800 Firewall Card Reference
Copyright © 2023 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
1
SRX5400, SRX5600, and SRX5800 Firewall Cards and Modules
Overview | 2
SRX5400, SRX5600, and SRX5800 Firewall Card Overview | 2
Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls | 3
Services Processing Cards | 8
Services Processing Cards Specicaons | 8
Services Processing Card SRX5K-SPC-2-10-40 Specicaons | 8
Services Processing Card SRX5K-SPC-4-15-320 Specicaons | 14
Services Processing Card SRX5K-SPC3 Specicaons | 19
I/O Cards | 25
I/O Cards Specicaons | 25
I/O Card SRX5K-40GE-SFP Specicaons | 25
I/O Card SRX5K-4XGE-XFP Specicaons | 28
Flex I/O Cards and Port Modules | 32
Flex I/O Cards and Port Modules Specicaons | 32
Flex I/O Card (SRX5K-FPC-IOC) Specicaons | 32
Flex I/O Card Port Module SRX-IOC-16GE-SFP Specicaons | 34
Flex I/O Card Port Module SRX-IOC-16GE-TX Specicaons | 36
Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specicaons | 38
Modular Port Concentrators and Interface Cards | 41
Modular Port Concentrators and Interface Cards Specicaons | 41
Modular Port Concentrator (SRX5K-MPC) Specicaons | 41
MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 44
MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 50
MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 54
MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 56
SRX5K-MPC3-40G10G Specicaons | 58
SRX5K-MPC3-100G10G Specicaons | 62
SRX5K-IOC4-10G Specicaons | 66
iii

SRX5K-IOC4-MRAT Specicaons | 70
Switch Control Boards | 75
Switch Control Boards Specicaons | 75
Switch Control Board SRX5K-SCB Specicaons | 75
Switch Control Board SRX5K-SCBE Specicaons | 78
Switch Control Board SRX5K-SCB3 Specicaons | 81
Switch Control Board SRX5K-SCB4 Specicaons | 84
Roung Engines | 87
Roung Engine Specicaons | 87
Roung Engine SRX5K-RE-13-20 Specicaons | 87
Roung Engine SRX5K-RE-1800X4 Specicaons | 91
Roung Engine SRX5K-RE3-128G Specicaons | 94
2
Handling and Storing Cards
Handling and Storing SRX5400, SRX5600, and SRX5800 Firewall Cards | 101
SRX5400, SRX5600, and SRX5800 Firewall Card Terminology | 101
Handling an SRX5400, SRX5600, or SRX5800 Firewall Card | 102
Storing an SRX5600, SRX5600, or SRX5800 Firewall Card | 104
iv

1
PART
SRX5400, SRX5600, and SRX5800
Firewall Cards and Modules
Overview | 2
Services Processing Cards | 8
I/O Cards | 25
Flex I/O Cards and Port Modules | 32
Modular Port Concentrators and Interface Cards | 41
Switch Control Boards | 75
Roung Engines | 87

CHAPTER 1
Overview
IN THIS CHAPTER
SRX5400, SRX5600, and SRX5800 Firewall Card Overview | 2
Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls | 3
SRX5400, SRX5600, and SRX5800 Firewall Card Overview
The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800
Firewall to suit the needs of your network. The following types of cards are available for the SRX5400,
SRX5600, and SRX5800 Firewalls:
• I/O cards (IOCs) provide addional physical network connecons to the rewall. Their primary
funcon is to deliver data packets arriving on the physical ports to the Services Processing Cards
(SPCs) and to forward data packets out the physical ports aer services processing.
• Flex IOCs have two slots for port modules that add addional physical network connecons to the
rewall. Like IOCs, their primary funcon is to deliver data packets arriving on the physical ports to
the SPCs and to forward data packets out the physical ports aer services processing.
• Modular Port Concentrators (MPCs) have slots on the front panel that accept smaller cards called
Modular Interface Cards (MICs). Each MIC has one or more physical interfaces on it. An MPC with
MICs installed funcons in the same way as a regular I/O card (IOC), but allows greater exibility in
adding dierent types of Ethernet ports to your rewall. MPCs and MICs are similar in form and
funcon to Flex IOCs and port modules. However, the two use dierent form-factors, so you cannot
install port modules in an MPC, nor can you install MICs in a Flex IOC.
• Services Processing Cards (SPCs) provide the processing power to run integrated services such as
rewall, IPsec and IDP. All trac traversing the rewall is passed to an SPC to have services
processing applied to it.
• Switch Control Boards (SCBs) power on and power o IOCs and SPCs; control clocking and system
resets; and control boong, monitor, and system funcons. Each SCB has a slot in the front panel for
a Roung Engine.
2

Although the following modules are not cards in the sense of having a form-factor that ts the card cage
of the SRX5400, SRX5600, and SRX5800 Firewall, this guide also addresses the following modules that
t into certain SRX5400, SRX5600, and SRX5800 Firewall cards:
•Roung Engines t into slots in SCBs and maintain the roung tables, manage the roung protocols
used on the device, control the device interfaces and some chassis components, and provide the
interface for system management and user access to the device.
• Port modules t into slots in Flex IOCs and add addional physical network interface ports to the
rewall.
• Modular Interface Cards (MICs) t into slots in MPCs and add addional physical network interface
ports to the rewall. MPCs and MICs are similar in form and funcon to Flex IOCs and port modules.
However, the two use dierent form-factors, so you cannot install port modules in an MPC, nor can
you install MICs in a Flex IOC.
Cards Supported on SRX5400, SRX5600, and SRX5800 Firewalls
Table 1 on page 3 describes the cards and other modules supported on the SRX5400, SRX5600, and
SRX5800 Firewalls.
Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls
Card Name and Model
Number
Earliest Supported Junos OS Release Last Supported Junos
OS Release
SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and
SRX5800
SPCs
Services Processing Card
SRX5K-SPC-2-10-40
Specicaons
Not supported 9.2 12.3X48
Services Processing Card
SRX5K-SPC-4-15-320
Specicaons
12.1X46-D10 12.1X44-D10
3

Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls (Connued)
Card Name and Model
Number
Earliest Supported Junos OS Release Last Supported Junos
OS Release
SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and
SRX5800
Services Processing Card
SRX5K-SPC3 Specicaons
18.2R1-S1 18.2R1-S1
Interface Cards
I/O Card SRX5K-40GE-SFP
Specicaons
Not supported 9.2 12.3X48
I/O Card SRX5K-4XGE-XFP
Specicaons
Not supported 9.2 12.3X48
Flex I/O Card (SRX5K-FPC-
IOC) Specicaons
Not supported 10.2 12.3X48
Modular Port Concentrator
(SRX5K-MPC) Specicaons
12.1X46-D10 12.1X46-D10
SRX5K-MPC3-40G10G
Specicaons
15.1X49-D10 15.1X49-D10
SRX5K-MPC3-100G10G
Specicaons
15.1X49-D10 15.1X49-D10
SRX5K-IOC4-10G
Specicaons
19.3R1 19.3R1
SRX5K-IOC4-MRAT
Specicaons
19.3R1 19.3R1
SCBs
4

Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls (Connued)
Card Name and Model
Number
Earliest Supported Junos OS Release Last Supported Junos
OS Release
SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and
SRX5800
Switch Control Board
SRX5K-SCB Specicaons
12.1X46-D10 9.2 12.3X48
Switch Control Board
SRX5K-SCBE Specicaons
12.1X47-D15 12.1X47-D15
Switch Control Board
SRX5K-SCB3 Specicaons
15.1X49-D10 15.1X49-D10
Switch Control Board
SRX5K-SCB4 Specicaons
Not supported 19.3R1
Other modules
Flex I/O Card Port Module
SRX-IOC-16GE-SFP
Specicaons
Not supported 10.2
Flex I/O Card Port Module
SRX-IOC-16GE-TX
Specicaons
Not supported 10.2
Flex I/O Card Port Module
SRX-IOC-4XGE-XFP
Specicaons
Not supported 10.2
MIC with 1x100GE CFP
Interface (SRX-
MIC-1X100G-CFP)
12.1X46-D10 12.1X46-D10
5

Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Firewalls (Connued)
Card Name and Model
Number
Earliest Supported Junos OS Release Last Supported Junos
OS Release
SRX5400 SRX5600 and SRX5800 SRX5400, SRX5600, and
SRX5800
MIC with 2x40GE QSFP+
Interfaces (SRX-MIC-2X40G-
QSFP)
12.1X46-D10 12.1X46-D10
MIC with 10x10GE SFP+
Interfaces (SRX-MIC-10XG-
SFPP)
12.1X46-D10 12.1X46-D10
MIC with 20x1GE SFP
Interfaces (SRX-MIC-20GE-
SFP)
12.1X47-D10 12.1X47-D10
Roung Engine SRX5K-
RE-13-20 Specicaons
12.1X46-D10 9.2 12.3X48
Roung Engine SRX5K-
RE-1800X4 Specicaons
12.1X47-D15 12.1X47-D15
Roung Engine SRX5K-
RE3-128G Specicaons
19.3R1 19.3R1
Figure 1 on page 7 is an interoperability matrix that describes the compability between various
interface cards for the SRX5400, SRX5600, and SRX5800 Firewalls.
6