Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks
are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
The information in this document is current as of the date on the title page.
ii
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)
Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement
(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you
agree to the terms and conditions of that EULA.
Table of Contents
1
About the Documentation | ix
Documentation and Release Notes | ix
Using the Examples in This Manual | ix
Merging a Full Example | x
Merging a Snippet | xi
Documentation Conventions | xi
Documentation Feedback | xiv
Requesting Technical Support | xiv
Self-Help Online Tools and Resources | xv
Creating a Service Request with JTAC | xv
iii
Overview
System Overview | 2
SRX100 Services Gateway Description | 2
About the SRX100 Services Gateway | 2
SRX100 Services Gateway Models | 3
Accessing the SRX100 Services Gateway | 3
SRX100 Services Gateway Features and Functions | 4
Preparing the SRX100 Services Gateway for Configuration | 66
Understanding the Factory Default Configuration | 66
Understanding Built-In Ethernet Ports and Initial Configuration | 67
Mapping the Chassis Cluster Ports | 67
Understanding Management Access | 68
Connecting to the SRX100 Services Gateway Setup Wizard | 69
SRX100 Services Gateway Secure Web Access Overview | 70
Connecting an SRX100 Services Gateway to the CLI Locally | 71
Connecting an SRX100 Services Gateway to the CLI Remotely | 74
4
5
Viewing Factory-Default Settings of the SRX100 Services Gateway | 74
Performing Initial Software Configuration on the SRX100 Services Gateway Using the CLI | 83
Performing Initial Software Configuration on the SRX100 Services Gateway Using the J-Web
Interface | 87
Establishing Basic Connectivity | 88
Configuring Basic System Properties | 89
Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory Version | 92
Maintaining and Troubleshooting Components
Maintaining Components | 95
Maintaining the SRX100 Services Gateway Hardware Components | 95
Troubleshooting Components | 97
vi
Monitoring the SRX100 Services Gateway Chassis Using the CLI | 97
Monitoring the SRX100 Services Gateway Components Using LEDs | 100
Monitoring the SRX100 Services Gateway Using Chassis Alarm Conditions | 102
Monitoring the SRX100 Services Gateway Power System | 103
Using the Reset Config Button on the SRX100 Services Gateway | 104
Changing the Reset Config Button Behavior on the SRX100 Services Gateway | 106
Juniper Networks Technical Assistance Center | 107
Replacing Components
Contacting Customer Support and Returning Components | 109
Contacting Customer Support | 109
Return Procedure for the SRX100 Services Gateway | 110
Information You Might Need to Supply to Juniper Networks Technical Assistance Center | 111
Locating the SRX100 Services Gateway Component Serial Number and Agency Labels | 111
Packing the SRX100 Services Gateway and Components for Shipment | 113
Safety and Regulatory Compliance Information
6
General Safety Guidelines and Warnings | 116
SRX100 Services Gateway Definition of Safety Warning Levels | 116
SRX100 Services Gateway General Safety Guidelines and Warnings | 119
General Safety Guidelines and Warnings | 119
Qualified Personnel Warning | 121
Restricted Access Area Warning | 122
Preventing Electrostatic Discharge Damage to the Services Gateway | 124
SRX100 Services Gateway Safety Requirements, Warnings, and Guidelines | 125
Fire Safety Requirements | 127
SRX100 Services Gateway Fire Safety Requirements | 127
Installation Safety Guidelines and Warnings | 129
vii
SRX100 Services Gateway Installation Safety Guidelines and Warnings | 129
Laser and LED Safety Guidelines and Warnings | 136
SRX100 Services Gateway Laser and LED Safety Guidelines and Warnings | 136
Laser and LED Safety Guidelines and Warnings | 136
General Laser Safety Guidelines | 136
Class 1 Laser Product Warning | 137
Class 1 LED Product Warning | 137
Laser Beam Warning | 138
Radiation from Open Port Apertures Warning | 139
Maintenance and Operational Safety Guidelines and Warnings | 141
SRX100 Services Gateway Maintenance and Operational Safety Guidelines and Warnings | 141
Safety Guidelines and Warnings | 142
Battery Handling Warning | 142
Jewelry Removal Warning | 143
Lightning Activity Warning | 145
Operating Temperature Warning | 146
Product Disposal Warning | 148
Electrical Safety Guidelines and Warnings | 150
SRX100 Services Gateway Electrical Safety Guidelines and Warnings | 150
Electrical Safety Guidelines and Warnings | 150
In Case of Electrical Accident | 150
General Electrical Safety Guidelines and Warnings | 150
Agency Approvals and Regulatory Compliance Information | 152
SRX100 Services Gateway Agency Approvals | 152
SRX100 Services Gateway Compliance Statements for EMC Requirements | 153
Canada | 154
European Community | 154
Japan | 154
Korean | 154
United States | 154
viii
SRX100 Services Gateway Compliance Statements for Environmental Requirements | 155
About the Documentation
IN THIS SECTION
Documentation and Release Notes | ix
Using the Examples in This Manual | ix
Documentation Conventions | xi
Documentation Feedback | xiv
Requesting Technical Support | xiv
Use this guide to install hardware and perform initial software configuration, routine maintenance, and
troubleshooting for the SRX100 Services Gateway (B and H model numbers). After completing the
installation and basic configuration procedures covered in this guide, refer to the Junos OS documentation
for information about further software configuration.
ix
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product
documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the
product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.
These books go beyond the technical documentation to explore the nuances of network architecture,
deployment, and administration. The current list can be viewed at https://www.juniper.net/books.
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load merge relative
command. These commands cause the software to merge the incoming configuration into the current
candidate configuration. The example does not become active until you commit the candidate configuration.
If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example
is a full example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In
this case, use the load merge relative command. These procedures are described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following configuration to a file and name the file ex-script.conf. Copy the
ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
x
2. Merge the contents of the file into your routing platform configuration by issuing the load merge
configuration mode command:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the
ex-script-snippet.conf file to the /var/tmp directory on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode
command:
[edit]
user@host# edit system scripts
[edit system scripts]
xi
3. Merge the contents of the file into your routing platform configuration by issuing the load merge
relative configuration mode command:
[edit system scripts]
user@host# load merge relative /var/tmp/ex-script-snippet.conf
load complete
For more information about the load command, see CLI Explorer.
Documentation Conventions
Table 1 on page xii defines notice icons used in this guide.
Table 1: Notice Icons
xii
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Caution
Indicates a situation that might result in loss of data or hardware
damage.
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xii defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
Fixed-width text like this
Italic text like this
Represents text that you type.Bold text like this
Represents output that appears on
the terminal screen.
Introduces or emphasizes important
•
new terms.
Identifies guide names.
•
Identifies RFC and Internet draft
•
titles.
To enter configuration mode, type
the configure command:
user@host> configure
user@host> show chassis alarms
No alarms currently active
A policy term is a named structure
•
that defines match conditions and
actions.
Junos OS CLI User Guide
•
RFC 1997, BGP Communities
•
Attribute
Table 2: Text and Syntax Conventions (continued)
xiii
ExamplesDescriptionConvention
Italic text like this
Text like this
< > (angle brackets)
| (pipe symbol)
Represents variables (options for
which you substitute a value) in
commands or configuration
statements.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy
levels; or labels on routing platform
components.
variables.
Indicates a choice between the
mutually exclusive keywords or
variables on either side of the symbol.
The set of choices is often enclosed
in parentheses for clarity.
Configure the machine’s domain
name:
[edit]
root@# set system domain-name
domain-name
To configure a stub area, include
•
the stub statement at the [edit
protocols ospf area area-id]
hierarchy level.
The console port is labeled
•
CONSOLE.
stub <default-metric metric>;Encloses optional keywords or
broadcast | multicast
(string1 | string2 | string3)
# (pound sign)
[ ] (square brackets)
Indention and braces ( { } )
; (semicolon)
GUI Conventions
Indicates a comment specified on the
same line as the configuration
statement to which it applies.
Encloses a variable for which you can
substitute one or more values.
Identifies a level in the configuration
hierarchy.
Identifies a leaf statement at a
configuration hierarchy level.
rsvp { # Required for dynamic MPLS
only
community name members [
community-ids ]
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Table 2: Text and Syntax Conventions (continued)
xiv
ExamplesDescriptionConvention
Bold text like this
> (bold right angle bracket)
Represents graphical user interface
(GUI) items you click or select.
Separates levels in a hierarchy of
menu selections.
In the Logical Interfaces box, select
•
All Interfaces.
To cancel the configuration, click
•
Cancel.
In the configuration editor hierarchy,
select Protocols>Ospf.
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You can use either
of the following methods:
Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper
•
Networks TechLibrary site, and do one of the following:
Click the thumbs-up icon if the information on the page was helpful to you.
•
Click the thumbs-down icon if the information on the page was not helpful to you or if you have
•
suggestions for improvement, and use the pop-up form to provide feedback.
E-mail—Send your comments to techpubs-comments@juniper.net. Include the document or topic name,
•
URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an active Juniper Care or Partner Support Services support contract, or are
covered under warranty, and need post-sales technical support, you can access our tools and resources
online or open a case with JTAC.
JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User
•
Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,
•
365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called
the Customer Support Center (CSC) that provides you with the following features:
SRX100 Services Gateway Features and Functions | 4
SRX100 Services Gateway Description
2
IN THIS SECTION
About the SRX100 Services Gateway | 2
SRX100 Services Gateway Models | 3
Accessing the SRX100 Services Gateway | 3
This topic includes the following sections:
About the SRX100 Services Gateway
The Juniper Networks SRX100 Services Gateway offers features that provide complete functionality and
flexibility for delivering secure Internet and intranet access. The services gateway offers stable, reliable,
and efficient IP routing in addition to switching support and LAN connectivity. The device provides IP
Security (IPsec), virtual private network (VPN), and firewall services for small and medium-sized companies
and enterprise branch and remote offices. The SRX100 Services Gateway can be connected directly to
traditional private networks such as leased lines, Frame Relay, or Multi Protocol Label Switching (MPLS)
or to the public Internet.
The SRX100 Services Gateway runs the Junos operating system (Junos OS).
SRX100 Services Gateway Models
The following are the two models of the SRX100 Services Gateway available with 1 GB memory. For
information on the models with 2 GB memory, see SRX100 Services Gateway Hardware Guide for H2
Model Numbers.
Table 3: SRX100 Services Gateway Models
Model NumberDevice TypeProduct Name
SRX100BLow MemorySRX100 Services Gateway
SRX100HHigh MemorySRX100 Services Gateway
NOTE: You can upgrade from an SRX100 Services Gateway Low Memory version to a High
Memory version through a license key. You need not order a separate High Memory device.
3
NOTE: SRX100H model provides additional security features such as Unified Threat Management
(UTM), which consists of IPS antispam, antivirus, and Web filtering.
NOTE: The SRX100 Services Gateway High Memory model ships with a license key.
All SRX100 Services Gateways run the Junos OS.
Accessing the SRX100 Services Gateway
Two user interfaces are available for monitoring, configuring, troubleshooting, and managing the SRX100
Services Gateway:
J-Web interface: Web-based graphical interface that allows you to operate a services gateway without
•
commands. The J-Web interface provides access to all Junos OS functionality and features.
Junos OS command-line interface (CLI): Juniper Networks command shell that runs on top of a UNIX-based
•
operating system kernel. The CLI is a straightforward command interface. On a single line, you type
commands that are executed when you press the Enter key. The CLI provides command Help and
command completion.
RELATED DOCUMENTATION
SRX100 Services Gateway Specifications | 21
SRX100 Services Gateway Features and Functions | 4
Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory Version | 92
SRX100 Services Gateway Features and Functions
The SRX100 Services Gateway is a security optimized, fixed processing system that provides the following
features for the Low Memory and High Memory models listed in Table 4 on page 4. For information on
the models with 2 GB memory, see SRX100 Services Gateway Hardware Guide for H2 Model Numbers.
Table 4: SRX100 Services Gateway Hardware Features
4
SRX100 Services Gateway Low
MemoryFeatures
DDR Memory
Memory through a license key)
SRX100 Services Gateway High
Memory
1 GB512 MB (software upgradable to High
30 watts30 wattsPower supply adapter
100 to 240 VAC100 to 240 VACAC input voltage
88Fast Ethernet ports
11Console port
11USB port
44LEDs
1 GB1 GBNAND flash
For more details on Junos OS features and licenses for the SRX100 Services Gateway, see the Junos OSAdministration Guide for Security Devices.
For more information on upgrading an SRX100 Services Gateway Low Memory to High Memory, see
“Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory Version” on page 92.
RELATED DOCUMENTATION
SRX100 Services Gateway Description | 2
SRX100 Services Gateway Specifications | 21
Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory Version | 92
Figure 1 on page 7 illustrates the front panel LEDs of the SRX100 Services Gateway.
NOTE: The numbers in Figure 1 on page 7 correspond to the numbers in Table 5 on page 7.
Figure 1: SRX100 Services Gateway Front Panel LEDs
Table 5 on page 7 lists the LED indicators on the SRX100 Services Gateway front panel.
Table 5: SRX100 Services Gateway Front Panel LEDs
UsageDescriptionComponentNumber
7
Alarm LED1
Power LED2
The Alarm LED has the
following indicator colors:
Solid red indicates a
•
major alarm.
Solid amber indicates a
•
minor alarm.
Off indicates that there
•
are currently no alarms.
The Power LED has the
following indicator colors:
Solid green indicates
•
that the device is
functioning normally.
Solid amber indicates
•
that the power button
has been pressed and
quickly released. The
device is gracefully
shutting down.
Off indicates that the
•
device is not receiving
power.
The Alarm LED can be
used to gather information
on major or minor alarms
or to determine if the
device is functioning
normally.
The Power LED can be
used to determine if the
device is receiving power.
Table 5: SRX100 Services Gateway Front Panel LEDs (continued)
8
UsageDescriptionComponentNumber
HA LED3
Status LED4
The HA LED has the
following indicator colors:
Solid green indicates
•
that all chassis clustering
links are available.
Solid red indicates that
•
the chassis clustering
links are not working as
expected.
Solid amber indicates
•
that some chassis
clustering links are not
working as expected.
Off indicates that
•
chassis clustering is not
enabled.
The Status LED has the
following indicator colors:
Solid green indicates
•
that the device is
functioning normally.
The HA LED can be used
to determine if chassis
clustering is enabled on the
device.
The Status LED can be
used to determine whether
the device is starting up, is
functioning normally, or
has failed.
Solid amber indicates
•
that the device is
starting up.
Solid red indicates that
•
an error is detected in
the device.
SRX100 Services Gateway Ethernet Port LEDs
On the SRX100 Services Gateway, each Fast Ethernet port has one functional LED on the left side that
indicates Link and Activity. In Figure 2 on page 9, this LED is marked as 1.
Figure 2: SRX100 Services Gateway Ethernet Port LEDs
The Table 6 on page 9 applies only to the TX/RX/LINK LED marked 1. Table 6 on page 9 describes the
states of this LED.
Table 6: SRX100 Services Gateway Built-In Ethernet Port LEDs
DescriptionStateColorFunction
9
BlinkingGreenTX/RX/LINK
Steady
Link is active. Data communication
is taking place.
Link is active. No data
communication is taking place.
Link is inactive.OffUnlit
NOTE: The LED marked as 2 in Figure 2 on page 9 is not functional in this release.
RELATED DOCUMENTATION
SRX100 Services Gateway Specifications | 21
SRX100 Services Gateway Front Panel and Back Panel Views | 12
SRX100 Services Gateway Built-In Interfaces | 14
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme | 10
SRX100 Services Gateway Power Supply | 9
SRX100 Services Gateway Power Supply
The power supply for the SRX100 Services Gateway is external. You must use the power supply adapter
provided by Juniper Networks to provide power to the services gateway.
RELATED DOCUMENTATION
SRX100 Services Gateway Specifications | 21
SRX100 Services Gateway Front Panel and Back Panel Views | 12
Monitoring the SRX100 Services Gateway Power System | 103
SRX100 Services Gateway Electrical and Power Requirements | 29
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme
IN THIS SECTION
10
Boot Devices | 10
Dual-Root Partitioning Scheme | 10
This topic includes the following sections:
Boot Devices
The SRX100 Services Gateway can boot from the following storage media (in the order of priority):
Internal NAND Flash (default; always present)
•
USB storage key (alternate)
•
Dual-Root Partitioning Scheme
Dual-root partitions allow the SRX100 Services Gateways to remain functional if there is file system
corruption and facilitate easy recovery of the corrupted file system.
The dual-root partitioning scheme keeps the primary and backup Junos OS images in two independently
bootable root partitions. If the primary root partition becomes corrupted, the system will be able to boot
from the backup Junos OS image located in the other root partition and remain fully functional.
When the SRX100 Services Gateway powers up, it tries to boot the Junos OS from the default storage
media. If the device fails to boot from the default storage media, it tries to boot from the alternate storage
media. With the dual-root partitioning scheme, the SRX100 Services Gateway first tries to boot the Junos
OS from the primary root partition and then from the backup root partition on the default storage media.
If both primary and backup root partitions of a media fail to boot, then the device tries to boot from the
next available type of storage media. The SRX100 Services Gateway remains fully functional even if it
boots the Junos OS from the backup root partition of storage media.
NOTE: SRX Series devices that ship from the factory with Junos OS Release 10.0 are formatted
with the dual-root partitioning scheme.
The SRX100 Services Gateways that are running Junos OS Release 9.6 or earlier use the single-root
partitioning scheme. While upgrading these devices to Junos OS Release 10.0, you can choose to format
the storage media with dual-root partitions (strongly recommended) or retain the existing single-root
partitioning.
11
For instructions on upgrading to Junos OS Release 10.0, see the following topics:
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
•
RELATED DOCUMENTATION
Installation Overview for the SRX100 Services Gateway | 36
SRX100 Services Gateway Software Configuration Overview | 65
CHAPTER 3
g031001
Chassis Description
IN THIS CHAPTER
SRX100 Services Gateway Front Panel and Back Panel Views | 12
SRX100 Services Gateway Built-In Interfaces | 14
SRX100 Services Gateway Front Panel and Back Panel Views
12
IN THIS SECTION
SRX100 Services Gateway Front Panel | 12
SRX100 Services Gateway Back Panel | 13
This topic contains views of the front and back panels of the SRX100 Services Gateway. This topic includes
the following sections:
SRX100 Services Gateway Front Panel
Figure 3 on page 12 shows the front panel of the SRX100 Services Gateway.
Figure 3: SRX100 Services Gateway Front Panel
Table 7 on page 13 lists the front panel components of the services gateway.
g031002
Table 7: SRX100 Services Gateway Front Panel Components
ComponentNumber
Power button1
LEDs: Alarm, Status, Power, HA2
Reset Config button3
Universal serial bus (USB) port4
Console port5
Fast Ethernet ports6
13
For more information on the front panel components, see the following topics:
SRX100 Services Gateway Built-In Interfaces on page 14
•
SRX100 Services Gateway LEDs on page 6
•
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme on page 10
•
SRX100 Services Gateway Back Panel
Figure 4 on page 13 illustrates the back panel of the SRX100 Services Gateway.
Figure 4: SRX100 Services Gateway Back Panel
Table 8 on page 14 lists the components available on the back panel of the SRX100 Services Gateway.
Table 8: SRX100 Services Gateway Back Panel
ComponentNumber
Lock1
Grounding point2
Cable tie holder3
Power supply point4
NOTE: The cable tie holder provides support for holding the power cord on the power supply
point.
The lock provides the option to lock and secure the device to the installation site.
14
RELATED DOCUMENTATION
SRX100 Services Gateway Specifications | 21
SRX100 Services Gateway Built-In Interfaces | 14
SRX100 Services Gateway LEDs | 6
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme | 10
SRX100 Services Gateway Power Supply | 9
SRX100 Services Gateway Built-In Interfaces
Table 9 on page 15 summarizes the interface ports supported on the SRX100 Services Gateway.