Juniper Networks SRX 210 User Manual

0 (0)

SRX210 Services Gateway

Hardware Guide

Juniper Networks, Inc.

1194 North Mathilda Avenue

Sunnyvale, California 94089

USA

408-745-2000

www.juniper.net

Revision 02

Published: 2010-05-26

This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright © 1986-1997, Epilogue Technology Corporation. All rights reserved. This program and its documentation were developed at private expense, and no part of them is in the public domain.

This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. All of the documentation and software included in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by the Regents of the University of California. Copyright © 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved.

GateD software copyright © 1995, the Regents of the University. All rights reserved. Gate Daemon was originated and developed through release 3.0 by Cornell University and its collaborators. Gated is based on Kirton’s EGP, UC Berkeley’s routing daemon (routed), and DCN’s HELLO routing protocol. Development of Gated has been supported in part by the National Science Foundation. Portions of the GateD software copyright © 1988, Regents of the University of California. All rights reserved. Portions of the GateD software copyright © 1991, D. L. S. Associates.

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785.

SRX210 Services Gateway Hardware Guide

Revision History

May 2010 —Revision 02

The information in this document is current as of the date listed in the revision history.

SOFTWARE LICENSE

The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the extent applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this software, you indicate that you understand and agree to be bound by those terms and conditions.

Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses. The software license may state conditions under which the license is automatically terminated. You should consult the license for further details.

For complete product documentation, please see the Juniper Networks Web site at www.juniper.net/techpubs.

ii ■

END USER LICENSE AGREEMENT

READ THIS END USER LICENSE AGREEMENT (“AGREEMENT”) BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE. BY DOWNLOADING, INSTALLING, OR USING THE SOFTWARE OR OTHERWISE EXPRESSING YOUR AGREEMENT TO THE TERMS CONTAINED HEREIN, YOU (AS CUSTOMER OR IF YOU ARE NOT THE CUSTOMER, AS A REPRESENTATIVE/AGENT AUTHORIZED TO BIND THE CUSTOMER) CONSENT TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED HEREIN, THEN (A) DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE, AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS.

1.The Parties. The parties to this Agreement are (i) Juniper Networks, Inc. (if the Customer’s principal office is located in the Americas) or Juniper Networks (Cayman) Limited (if the Customer’s principal office is located outside the Americas) (such applicable entity being referred to herein as “Juniper”), and (ii) the person or organization that originally purchased from Juniper or an authorized Juniper reseller the applicable license(s) for use of the Software (“Customer”) (collectively, the “Parties”).

2.The Software. In this Agreement, “Software” means the program modules and features of the Juniper or Juniper-supplied software, for which Customer has paid the applicable license or support fees to Juniper or an authorized Juniper reseller, or which was embedded by Juniper in equipment which Customer purchased from Juniper or an authorized Juniper reseller. “Software” also includes updates, upgrades and new releases of such software. “Embedded Software” means Software which Juniper has embedded in or loaded onto the Juniper equipment and any updates, upgrades, additions or replacements which are subsequently embedded in or loaded onto the equipment.

3.License Grant. Subject to payment of the applicable fees and the limitations and restrictions set forth herein, Juniper grants to Customer a non-exclusive and non-transferable license, without right to sublicense, to use the Software, in executable form only, subject to the following use restrictions:

a.Customer shall use Embedded Software solely as embedded in, and for execution on, Juniper equipment originally purchased by Customer from Juniper or an authorized Juniper reseller.

b.Customer shall use the Software on a single hardware chassis having a single processing unit, or as many chassis or processing units for which Customer has paid the applicable license fees; provided, however, with respect to the Steel-Belted Radius or Odyssey Access Client software only, Customer shall use such Software on a single computer containing a single physical random access memory space and containing any number of processors. Use of the Steel-Belted Radius or IMS AAA software on multiple computers or virtual machines (e.g., Solaris zones) requires multiple licenses, regardless of whether such computers or virtualizations are physically contained on a single chassis.

c.Product purchase documents, paper or electronic user documentation, and/or the particular licenses purchased by Customer may specify limits to Customer’s use of the Software. Such limits may restrict use to a maximum number of seats, registered endpoints, concurrent users, sessions, calls, connections, subscribers, clusters, nodes, realms, devices, links, ports or transactions, or require the purchase of separate licenses to use particular features, functionalities, services, applications, operations, or capabilities, or provide throughput, performance, configuration, bandwidth, interface, processing, temporal, or geographical limits. In addition, such limits may restrict the use of the Software to managing certain kinds of networks or require the Software to be used only in conjunction with other specific Software. Customer’s use of the Software shall be subject to all such limitations and purchase of all applicable licenses.

d.For any trial copy of the Software, Customer’s right to use the Software expires 30 days after download, installation or use of the Software. Customer may operate the Software after the 30-day trial period only if Customer pays for a license to do so. Customer may not extend or create an additional trial period by re-installing the Software after the 30-day trial period.

e.The Global Enterprise Edition of the Steel-Belted Radius software may be used by Customer only to manage access to Customer’s enterprise network. Specifically, service provider customers are expressly prohibited from using the Global Enterprise Edition of the Steel-Belted Radius software to support any commercial network access services.

The foregoing license is not transferable or assignable by Customer. No license is granted herein to any user who did not originally purchase the applicable license(s) for the Software from Juniper or an authorized Juniper reseller.

4.Use Prohibitions. Notwithstanding the foregoing, the license provided herein does not permit the Customer to, and Customer agrees not to and shall not: (a) modify, unbundle, reverse engineer, or create derivative works based on the Software; (b) make unauthorized copies of the Software (except as necessary for backup purposes); (c) rent, sell, transfer, or grant any rights in and to any copy of the Software, in any form, to any third party; (d) remove any proprietary notices, labels, or marks on or in any copy of the Software or any product in which the Software is embedded; (e) distribute any copy of the Software to any third party, including as may be embedded in Juniper equipment sold in the secondhand market; (f) use any ‘locked’ or key-restricted feature, function, service, application, operation, or capability without first purchasing the applicable license(s) and obtaining a valid key from Juniper, even if such feature, function, service, application, operation, or capability is enabled without a key; (g) distribute any key for the Software provided by Juniper to any third party; (h) use the Software in any manner that extends or is broader than the uses purchased by Customer from Juniper or an authorized Juniper reseller; (i) use Embedded Software on non-Juniper equipment; (j) use Embedded Software (or make it available for use) on Juniper equipment that the Customer did not originally purchase from Juniper or an authorized Juniper reseller; (k) disclose the results of testing or benchmarking of the Software to any third party without the prior written consent of Juniper; or (l) use the Software in any manner other than as expressly provided herein.

5.Audit. Customer shall maintain accurate records as necessary to verify compliance with this Agreement. Upon request by Juniper, Customer shall furnish such records to Juniper and certify its compliance with this Agreement.

■iii

6.Confidentiality. The Parties agree that aspects of the Software and associated documentation are the confidential property of Juniper. As such, Customer shall exercise all reasonable commercial efforts to maintain the Software and associated documentation in confidence, which at a minimum includes restricting access to the Software to Customer employees and contractors having a need to use the Software for Customer’s internal business purposes.

7.Ownership. Juniper and Juniper’s licensors, respectively, retain ownership of all right, title, and interest (including copyright) in and to the Software, associated documentation, and all copies of the Software. Nothing in this Agreement constitutes a transfer or conveyance of any right, title, or interest in the Software or associated documentation, or a sale of the Software, associated documentation, or copies of the Software.

8.Warranty, Limitation of Liability, Disclaimer of Warranty. The warranty applicable to the Software shall be as set forth in the warranty statement that accompanies the Software (the “Warranty Statement”). Nothing in this Agreement shall give rise to any obligation to support the Software. Support services may be purchased separately. Any such support shall be governed by a separate, written support services agreement. TO THE MAXIMUM EXTENT PERMITTED BY LAW, JUNIPER SHALL NOT BE LIABLE FOR ANY LOST PROFITS, LOSS OF DATA, OR COSTS OR PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, OR FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT, THE SOFTWARE, OR ANY JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. IN NO EVENT SHALL JUNIPER BE LIABLE FOR DAMAGES ARISING FROM UNAUTHORIZED OR IMPROPER USE OF ANY JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. EXCEPT AS EXPRESSLY PROVIDED IN THE WARRANTY STATEMENT TO THE EXTENT PERMITTED BY LAW, JUNIPER DISCLAIMS ANY AND ALL WARRANTIES IN AND TO THE SOFTWARE (WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE), INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT DOES JUNIPER WARRANT THAT THE SOFTWARE, OR ANY EQUIPMENT OR NETWORK RUNNING THE SOFTWARE, WILL OPERATE WITHOUT ERROR OR INTERRUPTION, OR WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK. In no event shall Juniper’s or its suppliers’ or licensors’ liability to Customer, whether in contract, tort (including negligence), breach of warranty, or otherwise, exceed the price paid by Customer for the Software that gave rise to the claim, or if the Software is embedded in another Juniper product, the price paid by Customer for such other product. Customer acknowledges and agrees that Juniper has set its prices and entered into this Agreement in reliance upon the disclaimers of warranty and the limitations of liability set forth herein, that the same reflect an allocation of risk between the Parties (including the risk that a contract remedy may fail of its essential purpose and cause consequential loss), and that the same form an essential basis of the bargain between the Parties.

9.Termination. Any breach of this Agreement or failure by Customer to pay any applicable fees due shall result in automatic termination of the license granted herein. Upon such termination, Customer shall destroy or return to Juniper all copies of the Software and related documentation in Customer’s possession or control.

10.Taxes. All license fees payable under this agreement are exclusive of tax. Customer shall be responsible for paying Taxes arising from the purchase of the license, or importation or use of the Software. If applicable, valid exemption documentation for each taxing jurisdiction shall be provided to Juniper prior to invoicing, and Customer shall promptly notify Juniper if their exemption is revoked or modified. All payments made by Customer shall be net of any applicable withholding tax. Customer will provide reasonable assistance to Juniper in connection with such withholding taxes by promptly: providing Juniper with valid tax receipts and other required documentation showing Customer’s payment of any withholding taxes; completing appropriate applications that would reduce the amount of withholding tax to be paid; and notifying and assisting Juniper in any audit or tax proceeding related to transactions hereunder. Customer shall comply with all applicable tax laws and regulations, and Customer will promptly pay or reimburse Juniper for all costs and damages related to any liability incurred by Juniper as a result of Customer’s non-compliance or delay with its responsibilities herein. Customer’s obligations under this Section shall survive termination or expiration of this Agreement.

11.Export. Customer agrees to comply with all applicable export laws and restrictions and regulations of any United States and any applicable foreign agency or authority, and not to export or re-export the Software or any direct product thereof in violation of any such restrictions, laws or regulations, or without all necessary approvals. Customer shall be liable for any such violations. The version of the Software supplied to Customer may contain encryption or other capabilities restricting Customer’s ability to export the Software without an export license.

12.Commercial Computer Software. The Software is “commercial computer software” and is provided with restricted rights. Use, duplication, or disclosure by the United States government is subject to restrictions set forth in this Agreement and as provided in DFARS 227.7201 through 227.7202-4, FAR 12.212, FAR 27.405(b)(2), FAR 52.227-19, or FAR 52.227-14(ALT III) as applicable.

13.Interface Information. To the extent required by applicable law, and at Customer's written request, Juniper shall provide Customer with the interface information needed to achieve interoperability between the Software and another independently created program, on payment of applicable fee, if any. Customer shall observe strict obligations of confidentiality with respect to such information and shall use such information in compliance with any applicable terms and conditions upon which Juniper makes such information available.

14.Third Party Software. Any licensor of Juniper whose software is embedded in the Software and any supplier of Juniper whose products or technology are embedded in (or services are accessed by) the Software shall be a third party beneficiary with respect to this Agreement, and such licensor or vendor shall have the right to enforce this Agreement in its own name as if it were Juniper. In addition, certain third party software may be provided with the Software and is subject to the accompanying license(s), if any, of its respective owner(s). To the extent portions of the Software are distributed under and subject to open source licenses obligating Juniper to make the source code for such portions publicly available (such as the GNU General Public License (“GPL”) or the GNU Library General Public License (“LGPL”)), Juniper will make such source code portions (including Juniper modifications, as appropriate) available upon request for a period of up to three years from the date of distribution. Such request can be made in writing to Juniper Networks, Inc., 1194

N. Mathilda Ave., Sunnyvale, CA 94089, ATTN: General Counsel. You may obtain a copy of the GPL at http://www.gnu.org/licenses/gpl.html, and a copy of the LGPL at http://www.gnu.org/licenses/lgpl.html .

15. Miscellaneous. This Agreement shall be governed by the laws of the State of California without reference to its conflicts of laws principles. The provisions of the U.N. Convention for the International Sale of Goods shall not apply to this Agreement. For any disputes arising under this Agreement, the Parties hereby consent to the personal and exclusive jurisdiction of, and venue in, the state and federal courts within Santa Clara County, California. This Agreement constitutes the entire and sole agreement between Juniper and the Customer with respect to the Software, and supersedes all prior and contemporaneous

iv ■

agreements relating to the Software, whether oral or written (including any inconsistent terms contained in a purchase order), except that the terms of a separate written agreement executed by an authorized Juniper representative and Customer shall govern to the extent such terms are inconsistent or conflict with terms contained herein. No modification to this Agreement nor any waiver of any rights hereunder shall be effective unless expressly assented to in writing by the party to be charged. If any portion of this Agreement is held invalid, the Parties agree that such invalidity shall not affect the validity of the remainder of this Agreement. This Agreement and associated documentation has been written in the English language, and the Parties agree that the English version will govern. (For Canada: Les parties aux présentés confirment leur volonté que cette convention de même que tous les documents y compris tout avis qui s'y rattaché, soient redigés en langue anglaise. (Translation: The parties confirm that this Agreement and all related documentation is and will be in the English language)).

■v

vi ■

Table of Contents
	About This Guide	xv
	Objectives ......................................................................................................	xv
	Audience .......................................................................................................	xv
	Documentation Conventions .........................................................................	xv
	SRX Series Documentation and Release Notes .............................................	xvii
	Obtaining Documentation ..........................................................................	xviii
	Documentation Feedback ...........................................................................	xviii
	Requesting Technical Support .....................................................................	xviii
Part 1	SRX210 Services Gateway Overview
Chapter 1	Introduction to the SRX210 Services Gateway	3
	SRX210 Services Gateway Description ............................................................	3
	About the SRX210 Services Gateway ........................................................	3
	SRX210 Services Gateway Models ............................................................	3
	Accessing the SRX210 Services Gateway ..................................................	4
	SRX210 Services Gateway Hardware Features ................................................	4
Chapter 2	SRX210 Services Gateway Hardware Components and
	Specifications	7
	SRX210 Services Gateway Specifications .........................................................	7
	SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory,
	High Memory and PoE Version) ..............................................................	10
	SRX210 Services Gateway Front Panel ...................................................	10
	SRX210 Services Gateway Back Panel ....................................................	11
	SRX210 Services Gateway with Integrated Convergence Services Front Panel
	and Back Panel Views .............................................................................	12
	SRX210 Services Gateway with Integrated Convergence Services Front
	Panel ................................................................................................	12
	SRX210 Services Gateway with Integrated Convergence Services Back
	Panel ................................................................................................	13
	SRX210 Services Gateway Built-In Interfaces ................................................	14
	SRX210 Services Gateway LEDs ....................................................................	18
	Front Panel LEDs ....................................................................................	18
	Ethernet Port LEDs .................................................................................	20
	Voice Interface Port LED .........................................................................	21

Table of Contents

■

vii

SRX210 Services Gateway Hardware Guide

	SRX210 Services Gateway Boot Devices and Dual-Root Partitioning
	Scheme ...................................................................................................	23
	Boot Devices ...........................................................................................	23
	Dual-Root Partitioning Scheme ...............................................................	23
	SRX210 Services Gateway Cooling System ....................................................	24
	SRX210 Services Gateway Power Supply .......................................................	26
Chapter 3	SRX210 Services Gateway 3G ExpressCard	29
	SRX210 Services Gateway 3G ExpressCard Overview ...................................	29
	Introduction ............................................................................................	29
	Supported Modem Types ........................................................................	29
	Using the 3G ExpressCard .......................................................................	30
	Key Features ...........................................................................................	30
	Physical Specifications ............................................................................	31
	Installing the 3G ExpressCard in the SRX210 Services Gateway ExpressCard
	Slot .........................................................................................................	32
	SRX210 Services Gateway 3G ExpressCard Basic CLI Commands .................	33
Chapter 4	SRX210 Services Gateway Power over Ethernet Support	35
	SRX210 Services Gateway PoE Overview ......................................................	35
	Introduction ............................................................................................	35
	PoE Classes and Power Ratings ..............................................................	36
	Configuring PoE Functionality on the SRX210 Services Gateway ...................	37
Chapter 5	SRX210 Services Gateway with Integrated Convergence
	Services	39
	About the SRX210 Services Gateway with Integrated Convergence
	Services ..................................................................................................	39
	Basic Functions .......................................................................................	40
	Supported Features .................................................................................	40
	Common Deployment Scenarios ............................................................	41
	Understanding the Functions of the SRX210 Services Gateway with Integrated
	Convergence Services .............................................................................	41
	SRX210 Services Gateway Integrated Convergence Services
	Interoperability .......................................................................................	42
	Configuring the SRX210 Services Gateway with Integrated Convergence
	Services ..................................................................................................	43
Chapter 6	SRX210 Services Gateway Mini-Physical Interface Modules	45
	SRX210 Services Gateway Mini-Physical Interface Modules ...........................	45

viii

■

Table of Contents

Part 2	Setting Up the SRX210 Services Gateway
Chapter 7	Preparing the Site for the SRX210 Services Gateway Installation	49
	Site Preparation Checklist for the SRX210 Services Gateway .........................	49
	General Site Guidelines for Installing the SRX210 Services Gateway ..............	51
	SRX210 Services Gateway Cabinet Requirements .........................................	51
	SRX210 Services Gateway Rack Requirements ..............................................	52
	Clearance Requirements for Airflow and Hardware Maintenance of the
	SRX210 Services Gateway ......................................................................	54
	SRX210 Services Gateway Electrical and Power Requirements .....................	55
Chapter 8	Installation Overview for the SRX210 Services Gateway	57
	Installation Overview for the SRX210 Services Gateway ................................	57
Chapter 9	Required Tools and Parts for Installing and Maintaining the SRX210
	Services Gateway	59
	Required Tools and Parts for Installing and Maintaining the SRX210 Services
	Gateway ..................................................................................................	59
Chapter 10	Unpacking the SRX210 Services Gateway	61
	Unpacking the SRX210 Services Gateway .....................................................	61
	Verifying Parts Received with the SRX210 Services Gateway ........................	61
Chapter 11	Preparing the SRX210 Services Gateway for Installation	65
	Preparing the SRX210 Services Gateway for Rack-Mount, Desk-Mount, and
	Wall-Mount Installation ...........................................................................	65
	Preparing the SRX210 Services Gateway for Rack-Mount Installation ............	66
	Preparing the SRX210 Services Gateway for Desk-Mount Installation ............	67
	Preparing the SRX210 Services Gateway for Wall-Mount Installation ............	68
Chapter 12	Installing the SRX210 Services Gateway	69
	SRX210 Services Gateway Safety Requirements, Warnings, and
	Guidelines ...............................................................................................	69
	SRX210 Services Gateway Installation ...........................................................	69
	Adjusting the Power Supply Adapter Tray for the SRX210 Services
	Gateway for Rack-Mount Installation ................................................	70
	Installing the SRX210 Services Gateway in a Rack ..................................	71
	Installing the SRX210 Services Gateway on a Desk .................................	75

Table of Contents

■

SRX210 Services Gateway Hardware Guide

	Installing the SRX210 Services Gateway on a Wall ..................................	76
	Replacing or Installing Mini-Physical Interface Modules in the SRX210 Services
	Gateway ..................................................................................................	78
Chapter 13	Connecting, Grounding, and Powering On the SRX210 Services
	Gateway	81
	Connecting the SRX210 Services Gateway to the Power Supply ....................	81
	Connecting and Organizing Interface Cables to the SRX210 Services
	Gateway ..................................................................................................	83
	Grounding the SRX210 Services Gateway ......................................................	84
	Powering On and Powering Off the SRX210 Services Gateway .....................	85
	Powering On the SRX210 Services Gateway ...........................................	85
	Powering Off the SRX210 Services Gateway ...........................................	86
	Resetting the SRX210 Services Gateway .................................................	87
Chapter 14	SRX210 Services Gateway Autoinstallation	89
	SRX210 Services Gateway Autoinstallation Overview ....................................	89
Chapter 15	Connecting the SRX210 Services Gateway to Management
	Devices	91
	Connecting an SRX210 Services Gateway to the J-Web Interface ..................	91
	Connecting an SRX210 Services Gateway to the CLI Locally ..........................	95
	Connecting an SRX210 Services Gateway to the CLI Remotely ......................	96
	Connecting the Modem at the SRX210 Services Gateway End .......................	97
	Connecting the Modem to the Console Port on the SRX210 Services
	Gateway ..................................................................................................	98
	Connecting to the CLI at the User End for the SRX210 Services Gateway ......	99
Chapter 16	Performing Initial Software Configuration on the SRX210 Services
	Gateway	101
	SRX210 Services Gateway Software Configuration Overview ......................	101
	Preparing SRX210 Services Gateway for Configuration .........................	101
	Understanding Built-In Ethernet Ports ...................................................	102
	Mapping the Chassis Cluster Ports ........................................................	102
	Understanding Management Access .....................................................	103
	Performing Initial Software Configuration on the SRX210 Services Gateway
	Using the CLI ........................................................................................	104
	Performing Initial Software Configuration on the SRX210 Services Gateway
	Using the J-Web Interface .....................................................................	107
	Establishing Basic Connectivity .............................................................	107
	Configuring Basic System Properties .....................................................	108
	SRX210 Services Gateway Secure Web Access Overview ............................	111

x■ Table of Contents

Table of Contents

Part 3	Maintaining and Monitoring the SRX210 Services Gateway
	Hardware
Chapter 17	Maintaining the SRX210 Services Gateway Hardware
	Components	115
	Maintaining the SRX210 Services Gateway Hardware Components ............	115
Chapter 18	Monitoring the SRX210 Services Gateway	117
	Monitoring Hardware Components on the SRX210 Services Gateway .........	117
	Monitoring the SRX210 Services Gateway Chassis Using the CLI ..........	117
	Monitoring the SRX210 Services Gateway Components Using LEDs .....	120
	Monitoring the SRX210 Services Gateway Using Chassis Alarm
	Conditions ......................................................................................	122
	Monitoring the SRX210 Services Gateway Power System .....................	125
	Resetting the Configuration File When the SRX210 Services Gateway Is
	Inaccessible ..........................................................................................	126
	Using the Reset Config Button on the SRX210 Services Gateway ..........	126
	Changing the Reset Config Button Behavior on the SRX210 Services
	Gateway .........................................................................................	127
	Juniper Networks Technical Assistance Center ............................................	128
Part 4	Appendixes
Appendix A	Safety and Regulatory Compliance Information	131
	SRX210 Services Gateway Definition of Safety Warning Levels ...................	131
	SRX210 Services Gateway General Safety Guidelines and Warnings ............	133
	SRX210 Services Gateway Fire Safety Requirements ...................................	137
	SRX210 Services Gateway Installation Safety Guidelines and Warnings ......	138
	SRX210 Services Gateway Laser and LED Safety Guidelines and
	Warnings ..............................................................................................	142
	Laser and LED Safety Guidelines and Warnings ....................................	142
	General Laser Safety Guidelines ......................................................	142
	Class 1 Laser Product Warning .......................................................	142
	Class 1 LED Product Warning .........................................................	143
	Laser Beam Warning ......................................................................	143
	Radiation from Open Port Apertures Warning ................................	144
	SRX210 Services Gateway Maintenance and Operational Safety Guidelines
	and Warnings .......................................................................................	145
	Safety Guidelines and Warnings ............................................................	145
	Battery Handling Warning ..............................................................	145
	Jewelry Removal Warning ..............................................................	146
	Lightning Activity Warning .............................................................	147
	Operating Temperature Warning ....................................................	148
	Product Disposal Warning ..............................................................	149

Table of Contents

■

SRX210 Services Gateway Hardware Guide

	SRX210 Services Gateway Electrical Safety Guidelines and Warnings .........	150
	SRX210 Services Gateway Agency Approvals ..............................................	151
	SRX210 Services Gateway Compliance Statements for EMC
	Requirements .......................................................................................	152
	SRX210 Services Gateway Compliance Statements for Environmental
	Requirements .......................................................................................	154
	SRX210 Services Gateway Compliance Statements for Acoustic Noise ........	154
Appendix B	SRX210 Services Gateway Power Guidelines, Requirements, and
	Specifications	157
	SRX210 Services Gateway Site Electrical Wiring Guidelines .........................	157
	SRX210 Services Gateway Power Specifications and Requirements ............	158
	SRX210 Services Gateway Grounding Specifications ...................................	159
Appendix C	SRX210 Services Gateway Interface Cable Specifications and
	Connector Pinouts	161
	Interface Cable and Wire Specifications for the SRX210 Services
	Gateway ................................................................................................	161
	RJ-45 Connector Pinouts for the SRX210 Services Gateway Ethernet Port ....	162
	RJ-45 Connector Pinouts for the SRX210 Services Gateway Console Port ....	163
	RJ-11 Connector Pinouts for the SRX210 Services Gateway with Integrated
	Convergence Services FXO and FXS Ports ............................................	164
Appendix D	Contacting Customer Support and Returning the SRX210 Services
	Gateway Hardware	167
	Return Procedure for the SRX210 Services Gateway ...................................	167
	Locating an SRX210 Services Gateway Component Serial Number and Agency
	Labels ...................................................................................................	168
	Listing the SRX210 Services Gateway and Component Details with the
	CLI ..................................................................................................	168
	SRX210 Services Gateway Chassis Serial Number and Agency
	Labels .............................................................................................	169
	SRX210 Services Gateway Mini-Physical Interface Module Serial Number
	Label ..............................................................................................	169
	Contacting Customer Support to Obtain Return Materials Authorization .....	170
	Information You Might Need to Supply to Juniper Networks Technical
	Assistance Center ...........................................................................	170
	Contacting Customer Support ...............................................................	170
	Packing the SRX210 Services Gateway and Components for Shipment .......	171
	Packing the Services Gateway ...............................................................	171
	Packing the Components for Shipment .................................................	172

xii

■

Table of Contents

Part 5	Index
	Index ...........................................................................................................	175

Table of Contents

■

xiii

SRX210 Services Gateway Hardware Guide

xiv ■ Table of Contents

About This Guide

This preface includes the following topics:

■Objectives on page xv

■Audience on page xv

■Documentation Conventions on page xv

■SRX Series Documentation and Release Notes on page xvii

■Obtaining Documentation on page xviii

■Documentation Feedback on page xviii

■Requesting Technical Support on page xviii

Objectives

This guide describes hardware components and installation, basic configuration, and basic troubleshooting procedures for the Juniper Networks SRX210 Services Gateway. It explains how to prepare your site for services gateway installation, unpack and install the hardware, power on the services gateway, perform initial software configuration, and perform routine maintenance. After completing the installation and basic configuration procedures covered in this guide, see the JUNOS software configuration guides for information about further JUNOS software configuration.

Audience

This guide is designed for network administrators who are installing and maintaining a Juniper Networks SRX210 Services Gateway or preparing a site for device installation. To use this guide, you need a broad understanding of networks in general and the Internet in particular, networking principles, and network configuration. Any detailed discussion of these concepts is beyond the scope of this guide.

Documentation Conventions

Table 1 on page xvi defines the notice icons used in this guide.

Objectives ■ xv

SRX210 Services Gateway Hardware Guide

Table 1: Notice Icons

Icon	Meaning	Description
	Informational note	Indicates important features or instructions.
	Caution	Indicates a situation that might result in loss of data or hardware damage.
	Warning	Alerts you to the risk of personal injury or death.
	Laser warning	Alerts you to the risk of personal injury from a laser.

Table 2 on page xvi defines the text and syntax conventions used in this guide.

Table 2: Text and Syntax Conventions

Convention	Description
Bold text like this	Represents text that you type.

Fixed-width text like this	Represents output that appears on the
	terminal screen.
Italic text like this	■ Introduces important new terms.
	■ Identifies book names.
	■ Identifies RFC and Internet draft
	titles.

Italic text like this	Represents variables (options for which
	you substitute a value) in commands or
	configuration statements.

Examples

To enter configuration mode, type the configure command:

user@host> configure

user@host> show chassis alarms No alarms currently active

■A policy term is a named structure that defines match conditions and actions.

■Junos System Basics Configuration Guide

■RFC 1997, BGP Communities Attribute

Configure the machine’s domain name:

[edit]

root@# set system domain-name domain-name

xvi ■ Documentation Conventions

About This Guide

Table 2: Text and Syntax Conventions (continued)

Convention	Description
Plain text like this	Represents names of configuration
	statements, commands, files, and
	directories; IP addresses; configuration
	hierarchy levels; or labels on routing
	platform components.

Examples

■To configure a stub area, include the stub statement at the [edit protocols ospf area area-id] hierarchy level.

■The console port is labeled

CONSOLE.

< > (angle brackets)	Enclose optional keywords or variables.
\| (pipe symbol)	Indicates a choice between the mutually
	exclusive keywords or variables on either
	side of the symbol. The set of choices is
	often enclosed in parentheses for clarity.
# (pound sign)	Indicates a comment specified on the
	same line as the configuration statement
	to which it applies.

stub <default-metric metric>;

broadcast | multicast

(string1 | string2 | string3)

rsvp { # Required for dynamic MPLS only

[ ] (square brackets)	Enclose a variable for which you can
	substitute one or more values.
Indention and braces ( { } )	Identify a level in the configuration
	hierarchy.
; (semicolon)	Identifies a leaf statement at a
	configuration hierarchy level.

community name members [ community-ids ]

[edit] routing-options {

static {

route default { nexthop address; retain;

}

J-Web GUI Conventions
Bold text like this	Represents J-Web graphical user	■	In the Logical Interfaces box, select
	interface (GUI) items you click or select.		All Interfaces.
		■	To cancel the configuration, click
			Cancel.
> (bold right angle bracket)	Separates levels in a hierarchy of J-Web	In the configuration editor hierarchy,
	selections.	select Protocols>Ospf.

SRX Series Documentation and Release Notes

For a list of related SRX Series documentation, see

http://www.juniper.net/techpubs/hardware/srx-series-main.html.

If the information in the latest SRX Series Release Notes differs from the information in the documentation, follow the SRX Series Release Notes.

SRX Series Documentation and Release Notes ■ xvii

SRX210 Services Gateway Hardware Guide

Obtaining Documentation

To obtain the most current version of all Juniper Networks technical documentation, see the products documentation page on the Juniper Networks web site at http://www.juniper.net/techpubs.

To order printed copies of this guide and other Juniper Networks technical documents, or to order a documentation CD, which contains this guide, contact your sales representative.

Copies of the Management Information Bases (MIBs) available in a software release are included on the documentation CDs and at http://www.juniper.net/.

Documentation Feedback

We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can send your comments to techpubs-comments@juniper.net, or fill out the documentation feedback form at http://www.juniper.net/techpubs/docbug/docbugreport.html. If you are using e-mail, be sure to include the following information with your comments:

■Document name

■Document part number

■Page number

■Software release version (not required for Network Operations Guides [NOGs])

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support contract, or are covered under warranty, and need postsales technical support, you can access our tools and resources online or open a case with JTAC.

■JTAC policiesFor a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at

http://www.juniper.net/customers/support/downloads/710059.pdf.

■Product warrantiesFor product warranty information, visit

http://www.juniper.net/support/warranty/.

■JTAC Hours of OperationThe JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features:

xviii ■ Obtaining Documentation

About This Guide

■Find CSC offerings: http://www.juniper.net/customers/support/

■Search for known bugs: http://www2.juniper.net/kb/

■Find product documentation: http://www.juniper.net/techpubs/

■Find solutions and answer questions using our Knowledge Base:

http://kb.juniper.net/

■Download the latest versions of software and review release notes:

http://www.juniper.net/customers/csc/software/

■Search technical bulletins for relevant hardware and software notifications:

https://www.juniper.net/alerts/

■Join and participate in the Juniper Networks Community Forum:

http://www.juniper.net/company/communities/

■Open a case online in the CSC Case Manager: http://www.juniper.net/cm/

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) tool located at https://tools.juniper.net/SerialNumberEntitlementSearch/.

Opening a Case with JTAC

You can open a case with JTAC on the Web or by telephone.

■Use the Case Manager tool in the CSC at http://www.juniper.net/cm/.

■Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

For international or direct-dial options in countries without toll-free numbers, visit us at http://www.juniper.net/support/requesting-support.html.

Requesting Technical Support ■ xix

SRX210 Services Gateway Hardware Guide

xx ■ Requesting Technical Support

Part 1

SRX210 Services Gateway Overview

■Introduction to the SRX210 Services Gateway on page 3

■SRX210 Services Gateway Hardware Components and Specifications on page 7

■SRX210 Services Gateway 3G ExpressCard on page 29

■SRX210 Services Gateway Power over Ethernet Support on page 35

■SRX210 Services Gateway with Integrated Convergence Services on page 39

■SRX210 Services Gateway Mini-Physical Interface Modules on page 45

SRX210 Services Gateway Overview ■ 1

SRX210 Services Gateway Hardware Guide

2■ SRX210 Services Gateway Overview

Chapter 1

Introduction to the SRX210 Services Gateway

This chapter includes the following topics:

■SRX210 Services Gateway Description on page 3

■SRX210 Services Gateway Hardware Features on page 4

SRX210 Services Gateway Description

This topic includes the following sections:

■About the SRX210 Services Gateway on page 3

■SRX210 Services Gateway Models on page 3

■Accessing the SRX210 Services Gateway on page 4

About the SRX210 Services Gateway

The Juniper Networks SRX210 Services Gateway offers complete functionality and flexibility for delivering secure, reliable data and voice services over IP, along with multiple interfaces that support WAN and LAN connectivity. Features include SIP/analog voice support, flexible data/voice T1/E1, and Power over Ethernet (PoE).

The SRX210 Services Gateway provides Internet Protocol Security (IPsec), virtual private network (VPN), and firewall services for small-sized and medium-sized companies and enterprise branch and remote offices. Additional security features also include Unified Threat Management (UTM), which consists of IPS antispam, antivirus, and Web filtering.

The SRX210 Services Gateway runs the JUNOS operating system.

SRX210 Services Gateway Models

The SRX210 Services Gateway is available in four models, which are listed in Table 3 on page 4.

SRX210 Services Gateway Description ■ 3

SRX210 Services Gateway Hardware Guide

Table 3: SRX210 Services Gateway Models

Product Name	Device Type	Model Number
SRX210 Services Gateway	Low Memory	SRX210B
SRX210 Services Gateway	High Memory	SRX210H
SRX210 Services Gateway with	Power over Ethernet (PoE)	SRX210H-POE
PoE
SRX210 Services Gateway with	Voice	SRX210H-P-MGW
integrated convergence services

All SRX210 Services Gateways run the JUNOS operating system.

Accessing the SRX210 Services Gateway

Two user interfaces are available for monitoring, configuring, troubleshooting, and managing the SRX210 Services Gateway:

■J-Web interface: Web-based graphical interface that allows you to operate a services gateway without commands. The J-Web interface provides access to all JUNOS functionality and features.

■JUNOS command-line interface (CLI): Juniper Networks command shell that runs on top of a UNIX-based operating system kernel. The CLI is a straightforward command interface. On a single line, you type commands that are executed when you press the Enter key. The CLI provides command Help and command completion.

Related Topics ■ SRX210 Services Gateway Specifications on page 7

■SRX210 Services Gateway Hardware Features on page 4

SRX210 Services Gateway Hardware Features

Table 4 on page 4 lists the hardware features supported on the SRX210 Services

Gateway.

Table 4: SRX210 Services Gateway Hardware Features

				SRX210
				Services
	SRX210	SRX210	SRX210	Gateway with
	Services	Services	Services	Integrated
	Gateway Low	Gateway High	Gateway Power	Convergence
Feature	Memory	Memory	over Ethernet	Services
DDR memory	512 MB	1 GB	1 GB	1 GB

4■ SRX210 Services Gateway Hardware Features

Chapter 1: Introduction to the SRX210 Services Gateway

Table 4: SRX210 Services Gateway Hardware Features (continued)

				SRX210
				Services
	SRX210	SRX210	SRX210	Gateway with
	Services	Services	Services	Integrated
	Gateway Low	Gateway High	Gateway Power	Convergence
Feature	Memory	Memory	over Ethernet	Services
SIP/analog voice	No	No	No	Yes
support
PoE support	No	No	Yes	Yes
Power supply	60 watts	60 watts	150 watts	150 watts
adapter
AC input voltage	100 to 240 VAC	100 to 240 VAC	100 to 240 VAC	100 to 240 VAC
Gigabit Ethernet	2	2	2	2
ports
Fast Ethernet	6	6	6	6
ports
Console port	1	1	1	1
USB ports	2	2	2	2
Foreign	None	None	None	Two FXS ports
Exchange				and two FXO
Subscriber (FXS)				ports
and Foreign
Exchange Office
(FXO) interface
Mini-PIM slots	1	1	1	1
LEDs	Status, Alarm,	Status, Alarm,	Status, Alarm,	Status, Alarm,
	HA, Power,	HA, Power,	HA, Power,	HA, Power,
	Mini-PIMs, 3G	Mini-PIMs, 3G	Mini-PIMs, 3G	Mini-PIMs, 3G
	ExpressCard,	ExpressCard,	ExpressCard,	ExpressCard,
	Port (TX/RX and	Port (TX/RX and	Port (TX/RX and	Port (TX/RX and
	PoE)	PoE)	PoE)	PoE), and Voice
				Interface
NAND flash	1 GB	1 GB	1 GB	2 GB
Fans	1	1	1	2

NOTE: The PoE LED is enabled only on the PoE model of the SRX210 Services Gateway. For non-PoE services gateways, the PoE LED remains off.

For more details on the SRX210 Services Gateway software features and licenses, see the JUNOS Software Administration Guide.

SRX210 Services Gateway Hardware Features

■ 5

SRX210 Services Gateway Hardware Guide

Related Topics ■ SRX210 Services Gateway Description on page 3

■SRX210 Services Gateway Specifications on page 7

6■ SRX210 Services Gateway Hardware Features

Chapter 2

SRX210 Services Gateway Hardware

Components and Specifications

This chapter includes the following topics:

■SRX210 Services Gateway Specifications on page 7

■SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory, High Memory and PoE Version) on page 10

■SRX210 Services Gateway with Integrated Convergence Services Front Panel and Back Panel Views on page 12

■SRX210 Services Gateway Built-In Interfaces on page 14

■SRX210 Services Gateway LEDs on page 18

■SRX210 Services Gateway Boot Devices and Dual-Root Partitioning Scheme on page 23

■SRX210 Services Gateway Cooling System on page 24

■SRX210 Services Gateway Power Supply on page 26

SRX210 Services Gateway Specifications

The SRX210 Services Gateway chassis is a rigid sheet metal structure of 1 rack Unit

(U) height that houses all the other hardware components.

Figure 1 on page 8 shows the SRX210 Services Gateway with Integrated Convergence Services chassis.

SRX210 Services Gateway Specifications ■ 7

SRX210 Services Gateway Hardware Guide

Figure 1: SRX210 Services Gateway with Integrated Convergence Services

Figure 2 on page 8 shows the SRX210 Services Gateway chassis (for low memory, high memory, and PoE models).

Figure 2: SRX210 Services Gateway

Table 5 on page 8 provides information on the physical specifications of the device.

Table 5: SRX210 Services Gateway Specifications

Specification	Value
Chassis height	1 unit (U)
Chassis width	11.02 in. (28 cm)
Chassis depth	7.04 in. (17.9 cm)

8■ SRX210 Services Gateway Specifications

Chapter 2: SRX210 Services Gateway Hardware Components and Specifications

Table 5: SRX210 Services Gateway Specifications (continued)

Specification	Value
Chassis weight	■ 3.43 lb (1.56 kg) for SRX210 Services Gateway
	Low Memory and High Memory models
	■ 3.50 lb (1.59 kg) for SRX210 Services Gateway
	with PoE
	■ 3.76 lb. (1.70 kg) for SRX210 Services Gateway
	with Integrated Convergence Services
Average power consumption	■ SRX210 Services Gateway Low Memory model:
	27 watts
	■ SRX210 Services Gateway High Memory model:
	28 watts
	■ SRX210 Services Gateway PoE model: 34 watts
	(excluding PoE load)
	■ SRX210 Services Gateway with Integrated
	Convergence Services model: 43 watts
	(excluding PoE load)
Altitude	■ No performance degradation up to 10,000 ft
	(3048 m) for SRX210 Services Gateway Low
	Memory, High Memory, and PoE models
	■ No performance degradation up to 6561 ft (2000
	m) for SRX210 Services Gateway with Integrated
	Convergence Services)
Relative humidity	5% to 90%, noncondensing
Temperature	Normal operation ensured in temperature range of
	32°F (0°C) to 104°F (+40°C)
	Nonoperating storage temperature in shipping
	container: –40°F (–40°C) to 158°F (70°C)
Maximum thermal output	NOTE: These specifications are estimates and subject
	to change.
	■ SRX210 Services Gateway Low Memory: 120
	BTU/hour
	■ SRX210 Services Gateway High Memory: 126
	BTU/hour
	■ SRX210 Services Gateway with PoE: 164
	BTU/hour (Excluding PoE load)
	■ SRX210 Services Gateway with Integrated
	Convergence Services: 232 BTU/hour (Excluding
	PoE load)
Noise level	70 dB(A) or less per EN ISO 7779

SRX210 Services Gateway Specifications ■ 9

SRX210 Services Gateway Hardware Guide

CAUTION: Before removing or installing components of a functioning services gateway, attach an electrostatic discharge (ESD) strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap could result in damage to the services gateway.

Related Topics ■ SRX210 Services Gateway Description on page 3

■SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory, High Memory and PoE Version) on page 10

■Monitoring the SRX210 Services Gateway Components Using LEDs on page 120

■SRX210 Services Gateway Electrical Safety Guidelines and Warnings on page 150

SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory, High Memory and PoE Version)

This topic contains views of the front panel and back panel of the SRX210 Services Gateway high memory, low memory, and Power over Ethernet (PoE) versions. This topic includes the following sections:

■SRX210 Services Gateway Front Panel on page 10

■SRX210 Services Gateway Back Panel on page 11

SRX210 Services Gateway Front Panel

Figure 3 on page 10 shows the front panel of the SRX210 Services Gateway.

Figure 3: SRX210 Services Gateway Front Panel

Table 6 on page 11 lists the front panel components of the services gateway.

NOTE: The numbers in Figure 3 on page 10 correspond to the numbers in Table 6 on page 11.

10 ■ SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory, High Memory and PoE Version)

+ 170 hidden pages