How it Works
Juniper
Loading...
R
S
Loading...
Loading...
SRX100B
Hardware Manual
172 pgs2.19 Mb0
Quick Start Manual
4 pgs294.14 Kb0

Juniper SRX100B, SRX100H, SRX100H2 Hardware Manual

Download
Page 1
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Modified: 2015-06-17
Copyright © 2015, Juniper Networks, Inc.
Page 2
Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net
Copyright © 2015, Juniper Networks, Inc. All rights reserved.
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of
that EULA.
Copyright © 2015, Juniper Networks, Inc.ii
Page 3
Table of Contents
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
Part 1 Overview
Chapter 1 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX100 Services Gateway Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
About the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX100 Services Gateway Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Accessing the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
SRX100 Services Gateway Features and Functions . . . . . . . . . . . . . . . . . . . . . . . . . 4
Chapter 2 Hardware Component Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
SRX100 Services Gateway LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
SRX100 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
SRX100 Services Gateway Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . 9
SRX100 Services Gateway Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme . . . 11
Boot Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Dual-Root Partitioning Scheme . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Chapter 3 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
SRX100 Services Gateway Front Panel and Back Panel Views . . . . . . . . . . . . . . . 13
SRX100 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
SRX100 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
SRX100 Services Gateway Built-In Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Part 2 Site Planning and Specifications
Chapter 4 Planning and Preparing the Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Site Preparation Checklist for the SRX100 Services Gateway . . . . . . . . . . . . . . . . 21
General Site Guidelines for Installing the SRX100 Services Gateway . . . . . . . . . . 24
SRX100 Services Gateway Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
SRX100 Services Gateway Cabinet Requirements . . . . . . . . . . . . . . . . . . . . . . . . . 25
SRX100 Services Gateway Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
iiiCopyright © 2015, Juniper Networks, Inc.
Page 4
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Clearance Requirements for Airflow and Hardware Maintenance of the SRX100
Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Chapter 5 Power Requirements and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
SRX100 Services Gateway Site Electrical Wiring Guidelines . . . . . . . . . . . . . . . . . 29
SRX100 Services Gateway Electrical and Power Requirements . . . . . . . . . . . . . . 30
SRX100 Services Gateway Power Specifications and Requirements . . . . . . . . . . . 31
Chapter 6 Cable Specifications and Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Interface Cable and Wire Specifications for the SRX100 Services Gateway . . . . . 33
RJ-45 Connector Pinouts for the SRX100 Services Gateway Ethernet Port . . . . . 33
RJ-45 Connector Pinouts for the SRX100 Services Gateway Console Port . . . . . . 34
Part 3 Initial Installation and Configuration
Chapter 7 Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Installation Overview for the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . 40
Required Tools and Parts for Installing and Maintaining the SRX100 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
SRX100 Services Gateway Autoinstallation Overview . . . . . . . . . . . . . . . . . . . . . . 42
Chapter 8 Unpacking the Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Unpacking the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Verifying Parts Received with the SRX100 Services Gateway . . . . . . . . . . . . . . . . 44
Chapter 9 Installing the Mounting Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Preparing the SRX100 Services Gateway for Rack-Mount Installation . . . . . . . . . 47
Preparing the SRX100 Services Gateway for Desk-Mount Installation . . . . . . . . . 48
Preparing the SRX100 Services Gateway for Wall-Mount Installation . . . . . . . . . 48
Chapter 10 Installing the Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Installing the SRX100 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . . . . . . . . 51
Installing the SRX100 Services Gateway on a Desk . . . . . . . . . . . . . . . . . . . . . . . . 52
Installing the SRX100 Services Gateway on a Wall . . . . . . . . . . . . . . . . . . . . . . . . 54
Chapter 11 Grounding the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Grounding the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Chapter 12 Connecting the SRX100 Services Gateway to External Devices . . . . . . . . . . 61
Connecting and Organizing Interface Cables to the SRX100 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Connecting the Modem at the SRX100 Services Gateway End . . . . . . . . . . . . . . . 62
Connecting the Modem to the Console Port on the SRX100 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Connecting to the CLI at the User End for the SRX100 Services Gateway . . . . . . 63
Chapter 13 Providing Power to the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . 65
Connecting the SRX100 Services Gateway to the Power Supply . . . . . . . . . . . . . 65
Powering On and Powering Off the SRX100 Services Gateway . . . . . . . . . . . . . . 66
Powering On the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Powering Off the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Copyright © 2015, Juniper Networks, Inc.iv
Page 5
Table of Contents
Chapter 14 Performing Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
SRX100 Services Gateway Software Configuration Overview . . . . . . . . . . . . . . . . 69
Preparing the SRX100 Services Gateway for Configuration . . . . . . . . . . . . . . 69
Understanding the Factory Default Configuration . . . . . . . . . . . . . . . . . . . . . . 70
Understanding Built-In Ethernet Ports and Initial Configuration . . . . . . . . . . 70
Mapping the Chassis Cluster Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Understanding Management Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Connecting to the SRX100 Services Gateway Setup Wizard . . . . . . . . . . . . . . . . . 73
SRX100 Services Gateway Secure Web Access Overview . . . . . . . . . . . . . . . . . . . 74
Connecting an SRX100 Services Gateway to the CLI Locally . . . . . . . . . . . . . . . . . 75
Connecting an SRX100 Services Gateway to the CLI Remotely . . . . . . . . . . . . . . . 76
Viewing Factory-Default Settings of the SRX100 Services Gateway . . . . . . . . . . . 77
Performing Initial Software Configuration on the SRX100 Services Gateway
Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Performing Initial Software Configuration on the SRX100 Services Gateway
Using the J-Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Establishing Basic Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Configuring Basic System Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Upgrading theSRX100 Services GatewayLowMemory Version to a HighMemory
Version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Part 4 Maintaining and Troubleshooting Components
Chapter 15 Maintaining Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Maintaining the SRX100 Services Gateway Hardware Components . . . . . . . . . . 93
Chapter 16 Troubleshooting Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Monitoring the SRX100 Services Gateway Chassis Using the CLI . . . . . . . . . . . . . 95
Monitoring the SRX100 Services Gateway Components Using LEDs . . . . . . . . . . 97
Monitoring the SRX100 Services Gateway Using Chassis Alarm Conditions . . . . 99
Monitoring the SRX100 Services Gateway Power System . . . . . . . . . . . . . . . . . . 101
Using the Reset Config Button on the SRX100 Services Gateway . . . . . . . . . . . . 102
Changing the Reset Config Button Behavior on the SRX100 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Part 5 Replacing Components
Chapter 17 Contacting Customer Support and Returning Components . . . . . . . . . . . . 107
Contacting Customer Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Return Procedure for the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . 108
InformationYou MightNeed to Supply to JuniperNetworksTechnical Assistance
Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Locating the SRX100 Services Gateway Component Serial Number and Agency
Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Packing the SRX100 Services Gateway and Components for Shipment . . . . . . . 110
vCopyright © 2015, Juniper Networks, Inc.
Page 6
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Part 6 Safety and Regulatory Compliance Information
Chapter 18 General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
SRX100 Services Gateway Definition of Safety Warning Levels . . . . . . . . . . . . . . 115
SRX100 Services Gateway General Safety Guidelines and Warnings . . . . . . . . . . 117
General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Qualified Personnel Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Restricted Access Area Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Preventing Electrostatic Discharge Damage to the Services Gateway . . . . . 120
SRX100 Services Gateway Safety Requirements, Warnings, and Guidelines . . . . 121
Chapter 19 Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
SRX100 Services Gateway Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . 123
Chapter 20 Installation Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . 125
SRX100 Services Gateway Installation Safety Guidelines and Warnings . . . . . . . 125
Chapter 21 Laser and LED Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . 131
SRX100 Services Gateway Laser and LED Safety Guidelines and Warnings . . . . 131
Laser and LED Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . 131
General Laser Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Class 1 Laser Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Class 1 LED Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Laser Beam Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Radiation from Open Port Apertures Warning . . . . . . . . . . . . . . . . . . . . 133
Chapter 22 Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . 135
SRX100 Services Gateway Maintenance and Operational Safety Guidelines and
Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Battery Handling Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Jewelry Removal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Lightning Activity Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Operating Temperature Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Product Disposal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Chapter 23 Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
SRX100 Services Gateway Electrical Safety Guidelines and Warnings . . . . . . . . . 141
Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
In Case of Electrical Accident . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
General Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . 141
Chapter 24 Agency Approvals and Regulatory Compliance Information . . . . . . . . . . . 143
SRX100 Services Gateway Agency Approvals . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
SRX100 Services Gateway Compliance Statements for EMC Requirements . . . 144
Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Japan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Korean . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
United States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
SRX100 Services Gateway Compliance Statements for Environmental
Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Copyright © 2015, Juniper Networks, Inc.vi
Page 7
Part 7 Index
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Table of Contents
viiCopyright © 2015, Juniper Networks, Inc.
Page 8
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.viii
Page 9
List of Figures
Part 1 Overview
Chapter 2 Hardware Component Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Figure 1: SRX100 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . 7
Figure 2: SRX100 Services Gateway Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . 10
Chapter 3 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Figure 3: SRX100 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Figure 4: SRX100 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Part 2 Site Planning and Specifications
Chapter 4 Planning and Preparing the Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Figure 5: SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Chapter 6 Cable Specifications and Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Figure 6: Ethernet Cable Connector (RJ-45) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Figure 7: Console Cable Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Part 3 Initial Installation and Configuration
Chapter 10 Installing the Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Figure 8: Installing the SRX100 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . 51
Figure 9: Hanging the SRX100 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . 52
Figure 10: Installing the SRX100 Services Gateway on a Desk . . . . . . . . . . . . . . . . 53
Figure 11: Installing the SRX100 Services Gateway on a Wall . . . . . . . . . . . . . . . . . 54
Figure 12: Hanging the SRX100 Services Gateway on a Wall . . . . . . . . . . . . . . . . . 55
Chapter 11 Grounding the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Figure 13: Grounding the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . 57
Chapter 13 Providing Power to the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . 65
Figure 14: Connecting the Services Gateway to the Power Supply . . . . . . . . . . . . 65
Chapter 14 Performing Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Figure 15: Connecting to the Ethernet Port on an SRX100 Services Gateway . . . . 73
Figure 16: Connecting to the Console Port on an SRX100 Services Gateway . . . . 75
Part 5 Replacing Components
Chapter 17 Contacting Customer Support and Returning Components . . . . . . . . . . . . 107
Figure 17: Location of SRX100 Services Gateway Serial Number and Agency
Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
ixCopyright © 2015, Juniper Networks, Inc.
Page 10
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Part 6 Safety and Regulatory Compliance Information
Chapter 18 General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Figure 18: Placing a Component into an Electrostatic Bag . . . . . . . . . . . . . . . . . . 120
Copyright © 2015, Juniper Networks, Inc.x
Page 11
List of Tables
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Part 1 Overview
Chapter 1 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Table 3: SRX100 Services Gateway Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Table 4: SRX100 Services Gateway Hardware Features . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2 Hardware Component Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Table 5: SRX100 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . 8
Table 6: SRX100 Services Gateway Built-In Ethernet Port LEDs . . . . . . . . . . . . . . 10
Chapter 3 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Table 7: SRX100 Services Gateway Front Panel Components . . . . . . . . . . . . . . . . 13
Table 8: SRX100 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Table 9: SRX100 Services Gateway Built-In Hardware Interfaces . . . . . . . . . . . . . 15
Part 2 Site Planning and Specifications
Chapter 4 Planning and Preparing the Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Table 10: Site Preparation Checklist for Services Gateway Installation . . . . . . . . . 21
Table 11: SRX100 Services Gateway Specifications . . . . . . . . . . . . . . . . . . . . . . . . 24
Table 12: SRX100 Services Gateway Cabinet Requirements . . . . . . . . . . . . . . . . . 26
Table 13: Rack Requirements for the Services Gateway . . . . . . . . . . . . . . . . . . . . . 27
Table 14: Clearance Requirements for the SRX100 Services Gateway . . . . . . . . . 28
Chapter 5 Power Requirements and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Table 15: Site Electrical Wiring Guidelines for the Services Gateway . . . . . . . . . . . 29
Table 16: Power System Electrical Specifications for the SRX100 Services
Chapter 6 Cable Specifications and Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Table 17: Cable and Wire Specifications for Ports . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Table 18: RJ-45 Connector Pinouts for the Services Gateway Ethernet Port . . . . . 34
Table 19: RJ-45 Connector Pinouts for the Services Gateway Console Port . . . . . 34
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Part 3 Initial Installation and Configuration
Chapter 7 Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Table 20: Installation Process Order for the SRX100 Services Gateway . . . . . . . . 40
xiCopyright © 2015, Juniper Networks, Inc.
Page 12
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 21: Required Tools and Parts for Installing and Maintaining the SRX100
Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Chapter 8 Unpacking the Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Table 22: Parts List for a Fully Configured SRX100 Services Gateway . . . . . . . . . . 44
Table 23: Accessory Parts List for the SRX100 Services Gateway . . . . . . . . . . . . . 44
Chapter 11 Grounding the SRX100 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Table 24: SRX100 Services Gateway Grounding Components . . . . . . . . . . . . . . . 58
Table 25: Grounding Cable Specifications for the Services Gateway . . . . . . . . . . 58
Chapter 12 Connecting the SRX100 Services Gateway to External Devices . . . . . . . . . . 61
Table 26: Port Settings for Configuring the Modem on the Services Gateway
End . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Table 27: Port Settings for Connecting to the CLI at User End . . . . . . . . . . . . . . . . 64
Chapter 14 Performing Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Table 28: Mapping the Chassis Cluster Ports on an SRX100 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Table 29: Console Port Settings for the SRX100 Services Gateway . . . . . . . . . . . 76
Table 30: Required Setup Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Table 31: Optional Setup Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Part 4 Maintaining and Troubleshooting Components
Chapter 15 Maintaining Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Table 32: Maintenance Procedures for the SRX100 Services Gateway Hardware
Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Chapter 16 Troubleshooting Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Table 33: Services Gateway LED Status on Startup . . . . . . . . . . . . . . . . . . . . . . . . 97
Table 34: Component LEDs on the Services Gateway . . . . . . . . . . . . . . . . . . . . . . 98
Table 35: SRX100 Services Gateway Chassis Alarm Conditions and Corrective
Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Table 36: Services Gateway Power LED Status . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Copyright © 2015, Juniper Networks, Inc.xii
Page 13
About the Documentation
•
Documentation and Release Notes on page xiii
•
Supported Platforms on page xiii
•
Documentation Conventions on page xiii
•
Documentation Feedback on page xv
•
Requesting Technical Support on page xvi
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
•
SRX100
Documentation Conventions
Table 1 on page xiv defines notice icons used in this guide.
xiiiCopyright © 2015, Juniper Networks, Inc.
Page 14
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware damage.Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Table 2 on page xiv defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
Represents text that you type.Bold text like this
Fixed-width text like this
Italic text like this
Italic text like this
Represents output that appears on the terminal screen.
•
Introduces or emphasizes important new terms.
•
Identifies guide names.
•
Identifies RFC and Internet draft titles.
Represents variables (options for which you substitute a value) in commands or configuration statements.
Alerts you to a recommended use or implementation.Best practice
ExamplesDescriptionConvention
To enter configuration mode, type the configure command:
user@host> configure
user@host> show chassis alarms
No alarms currently active
•
A policy term is a named structure that defines match conditions and actions.
•
Junos OS CLI User Guide
•
RFC 1997, BGP Communities Attribute
Configure the machine’s domain name:
[edit] root@# set system domain-name
domain-name
Copyright © 2015, Juniper Networks, Inc.xiv
Page 15
Table 2: Text and Syntax Conventions (continued)
Text like this
Represents names of configuration statements, commands, files, and directories;configuration hierarchy levels; or labels on routing platform components.
About the Documentation
ExamplesDescriptionConvention
•
To configure a stub area, include the
stub statement at the [edit protocols ospf area area-id] hierarchy level.
•
The console port islabeledCONSOLE.
stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)
| (pipe symbol)
# (pound sign)
[ ] (square brackets)
Indention and braces ( { } )
; (semicolon)
GUI Conventions
Bold text like this
Indicates a choice between the mutually exclusivekeywordsor variables on either side of the symbol. The set of choices is often enclosed in parenthesesfor clarity.
same lineasthe configuration statement to which it applies.
Encloses a variable for which you can substitute one or more values.
Identifies a level in the configuration hierarchy.
Identifies a leaf statement at a configuration hierarchy level.
Representsgraphicaluser interface(GUI) items you click or select.
broadcast | multicast
(string1 | string2 | string3)
rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the
community name members [ community-ids ]
[edit] routing-options {
static {
route default {
nexthop address; retain;
}
}
}
•
In the Logical Interfaces box, select
All Interfaces.
•
To cancel the configuration, click
Cancel.
> (bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods:
•
Online feedback rating system—On any page at the Juniper Networks Technical Documentation site at http://www.juniper.net/techpubs/index.html, simply click the stars to rate the content,and usethe pop-upform to provide uswith information about your experience. Alternately, you can use the online feedback form at
https://www.juniper.net/cgi-bin/docbugreport/.
Separates levels in a hierarchy of menu selections.
In the configuration editor hierarchy, select Protocols>Ospf.
xvCopyright © 2015, Juniper Networks, Inc.
Page 16
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
•
E-mail—Sendyourcomments to [email protected]. Includethe document or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is availablethrough the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or Partner Support Service support contract, or are covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC.
•
JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at
http://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•
Product warranties—For product warranty information, visit
http://www.juniper.net/support/warranty/.
•
JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features:
•
Find CSC offerings: http://www.juniper.net/customers/support/
•
Search for known bugs: http://www2.juniper.net/kb/
•
Find product documentation: http://www.juniper.net/techpubs/
•
Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/
•
Download the latest versions of software and review release notes:
http://www.juniper.net/customers/csc/software/
•
Search technical bulletins for relevant hardware and software notifications:
http://kb.juniper.net/InfoCenter/
•
Join and participate in the Juniper Networks Community Forum:
http://www.juniper.net/company/communities/
•
Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/
To verify service entitlement by product serialnumber, useour Serial NumberEntitlement (SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
Opening a Case with JTAC
You can open a case with JTAC on the Web or by telephone.
•
Use the Case Management tool in the CSC at http://www.juniper.net/cm/.
•
Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
Copyright © 2015, Juniper Networks, Inc.xvi
Page 17
About the Documentation
For international or direct-dial options in countries without toll-free numbers, see
http://www.juniper.net/support/requesting-support.html.
xviiCopyright © 2015, Juniper Networks, Inc.
Page 18
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.xviii
Page 19
PART 1
Overview
•
System Overview on page 3
•
Hardware Component Overview on page 7
•
Chassis Description on page 13
1Copyright © 2015, Juniper Networks, Inc.
Page 20
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.2
Page 21
CHAPTER 1
System Overview
•
SRX100 Services Gateway Description on page 3
•
SRX100 Services Gateway Features and Functions on page 4
SRX100 Services Gateway Description
This topic includes the following sections:
•
About the SRX100 Services Gateway on page 3
•
SRX100 Services Gateway Models on page 3
•
Accessing the SRX100 Services Gateway on page 4
About the SRX100 Services Gateway
The Juniper Networks SRX100 Services Gateway offers features that provide complete functionality and flexibility for delivering secure Internet and intranetaccess.The services gateway offers stable, reliable, and efficient IP routing in addition to switching support and LAN connectivity. The device provides IP Security (IPsec), virtual private network (VPN), and firewall services for small and medium-sized companies and enterprise branch and remote offices. The SRX100 Services Gateway can be connected directly to traditional private networks such as leased lines, Frame Relay, or Multi Protocol Label Switching (MPLS) or to the public Internet.
The SRX100 Services Gateway runs the Junos operating system (Junos OS).
SRX100 Services Gateway Models
The following are the two models of the SRX100 Services Gateway available with 1 GB memory.For information onthe models with2 GBmemory, see SRX100ServicesGateway
Hardware Guide for H2 Model Numbers.
Table 3: SRX100 Services Gateway Models
Model NumberDevice TypeProduct Name
SRX100BLow MemorySRX100 Services Gateway
SRX100HHigh MemorySRX100 Services Gateway
3Copyright © 2015, Juniper Networks, Inc.
Page 22
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
NOTE: You can upgrade from an SRX100 Services Gateway Low Memory
version to a High Memory version through a license key. You need not order a separate High Memory device.
NOTE: SRX100H model providesadditional security featuressuchas Unified
Threat Management (UTM), which consists of IPS antispam, antivirus, and Web filtering.
NOTE: The SRX100 Services Gateway High Memory model ships with a
license key.
All SRX100 Services Gateways run the Junos OS.
Accessing the SRX100 Services Gateway
Two user interfaces are available for monitoring, configuring, troubleshooting, and managing the SRX100 Services Gateway:
•
J-Web interface: Web-based graphical interface that allows you to operate a services gateway without commands. The J-Web interface provides access to all Junos OS functionality and features.
•
Junos OS command-line interface (CLI): Juniper Networks command shell that runs on top ofa UNIX-based operating system kernel. The CLIis astraightforward command interface. On a single line, you type commands that are executed when you press the Enter key. The CLI provides command Help and command completion.
Related
Documentation
SRX100 Services Gateway Specifications on page 24•
• SRX100 Services Gateway Features and Functions on page 4
• Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory
Version on page 90
SRX100 Services Gateway Features and Functions
The SRX100 Services Gateway is a security optimized, fixed processing system that provides the following features for the Low Memory and High Memory models listed in
Table 4 on page5. Forinformation on the models with2 GBmemory,see SRX100Services
Gateway Hardware Guide for H2 Model Numbers.
Copyright © 2015, Juniper Networks, Inc.4
Page 23
Table 4: SRX100 Services Gateway Hardware Features
Chapter 1: System Overview
SRX100 Services Gateway Low MemoryFeatures
DDR Memory
High Memory through a license key)
SRX100 Services Gateway High Memory
1 GB512 MB (software upgradable to
30 watts30 wattsPower supply adapter
100 to 240 VAC100 to 240 VACAC input voltage
88Fast Ethernet ports
11Console port
11USB port
44LEDs
1 GB1 GBNAND flash
For more details on Junos OS features and licenses for the SRX100 Services Gateway, see the Junos OS Administration Guide for Security Devices.
For more information on upgrading an SRX100 Services Gateway Low Memory to High Memory, see “Upgrading the SRX100 Services Gateway Low Memory Version to a High
Memory Version” on page 90.
Related
Documentation
• SRX100 Services Gateway Description on page 3
• SRX100 Services Gateway Specifications on page 24
• Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory
Version on page 90
5Copyright © 2015, Juniper Networks, Inc.
Page 24
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.6
Page 25
CHAPTER 2
Hardware Component Overview
•
SRX100 Services Gateway LEDs on page 7
•
SRX100 Services Gateway Power Supply on page 10
•
SRX100 Services Gateway BootDevicesand Dual-Root Partitioning Scheme onpage11
SRX100 Services Gateway LEDs
This topic includes the following sections:
•
SRX100 Services Gateway Front Panel LEDs on page 7
•
SRX100 Services Gateway Ethernet Port LEDs on page 9
SRX100 Services Gateway Front Panel LEDs
Figure 1 on page 7 illustrates the front panel LEDs of the SRX100 Services Gateway.
NOTE: The numbers in Figure 1 on page 7 correspond to the numbers in
Table 5 on page 8.
Figure 1: SRX100 Services Gateway Front Panel LEDs
Table 5 on page 8 lists the LED indicators on the SRX100 Services Gateway front panel.
7Copyright © 2015, Juniper Networks, Inc.
Page 26
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 5: SRX100 Services Gateway Front Panel LEDs
UsageDescriptionComponentNumber
Alarm LED1
The Alarm LED has the following indicator colors:
The Alarm LEDcan be used to gather information on major or minor alarms or to
•
Solid red indicates a major alarm.
•
Solid amber
determine if the device is functioning normally.
indicates a minor alarm.
•
Off indicates that there are currently no alarms.
Power LED2
The Power LED has the following indicator colors:
The PowerLED can be used to determine if the device is receiving power.
•
Solid green indicates that the device is functioning normally.
•
Solid amber indicates that the power button has been pressed and quickly released. The device is gracefully shutting down.
•
Off indicates that the device is not receiving power.
Copyright © 2015, Juniper Networks, Inc.8
Page 27
Chapter 2: Hardware Component Overview
Table 5: SRX100 Services Gateway Front Panel LEDs (continued)
UsageDescriptionComponentNumber
HA LED3
The HA LED has the following indicator colors:
The HA LED can be used to determine if chassis clustering is enabled on thedevice.
•
Solid green indicates that all chassis clustering links are available.
•
Solid red indicates that the chassis clustering links are not working as expected.
•
Solid amber indicatesthatsome chassis clustering links are not working as expected.
•
Off indicates that chassis clustering is not enabled.
Status LED4
The Status LED has the following indicator colors:
The Status LED can be used to determine whether the device is starting up, is
•
Solid green indicates that the
functioning normally, or has failed.
device is functioning normally.
•
Solid amber indicates that the device is starting up.
•
Solid red indicates that an error is detected in the device.
SRX100 Services Gateway Ethernet Port LEDs
On the SRX100 Services Gateway, each Fast Ethernet port has one functional LED on the left side that indicates Link and Activity. In Figure 2 on page 10, this LED is marked as
1.
9Copyright © 2015, Juniper Networks, Inc.
Page 28
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Figure 2: SRX100 Services Gateway Ethernet Port LEDs
The Table 6 on page 10 applies only to the TX/RX/LINK LEDmarked 1. Table 6on page 10 describes the states of this LED.
Table 6: SRX100 Services Gateway Built-In Ethernet Port LEDs
DescriptionStateColorFunction
Related
Documentation
BlinkingGreenTX/RX/LINK
Steady
Link is active. Data communication is taking place.
Link is active. No data communication is taking place.
Link is inactive.OffUnlit
NOTE: The LED marked as 2 in Figure 2 on page 10 is not functional in this
release.
SRX100 Services Gateway Specifications on page 24•
• SRX100 Services Gateway Front Panel and Back Panel Views on page 13
• SRX100 Services Gateway Built-In Interfaces on page 15
• SRX100 Services GatewayBoot Devices and Dual-Root Partitioning Scheme onpage11
• SRX100 Services Gateway Power Supply on page 10
SRX100 Services Gateway Power Supply
The power supply for the SRX100 Services Gateway is external. You must use the power supply adapter provided by Juniper Networks to provide power to the services gateway.
Related
Documentation
SRX100 Services Gateway Specifications on page 24•
• SRX100 Services Gateway Front Panel and Back Panel Views on page 13
• SRX100 Services Gateway LEDs on page 7
• SRX100 Services Gateway Built-In Interfaces on page 15
• SRX100 Services GatewayBoot Devices and Dual-Root Partitioning Scheme onpage11
Copyright © 2015, Juniper Networks, Inc.10
Page 29
Chapter 2: Hardware Component Overview
• Monitoring the SRX100 Services Gateway Power System on page 101
• SRX100 Services Gateway Electrical and Power Requirements on page 30
SRX100 Services Gateway Boot Devices and Dual-Root Partitioning Scheme
This topic includes the following sections:
•
Boot Devices on page 11
•
Dual-Root Partitioning Scheme on page 11
Boot Devices
The SRX100 Services Gateway can boot from the following storage media (in the order of priority):
•
Internal NAND Flash (default; always present)
•
USB storage key (alternate)
Dual-Root Partitioning Scheme
Dual-root partitions allow the SRX100 Services Gateways to remain functional if there is file system corruption and facilitate easy recovery of the corrupted file system.
The dual-root partitioning scheme keeps the primary and backup Junos OS images in two independently bootable root partitions. If the primary root partition becomes corrupted, the system will be able to boot from the backup Junos OS image located in the other root partition and remain fully functional.
When the SRX100 Services Gateway powers up, it tries to boot the Junos OS from the default storage media. If the device fails to boot from the default storage media, it tries to boot from the alternate storage media. With the dual-root partitioning scheme, the SRX100 Services Gateway first tries to boot the Junos OS from the primary root partition and then from the backup root partition on the default storage media. If both primary and backup root partitions of a media fail to boot, then the device tries to boot from the next available type of storage media. The SRX100 Services Gateway remains fully functional even if it boots the Junos OS from the backup root partition of storage media.
The SRX100 Services Gateways that are running Junos OS Release 9.6 or earlier use the single-root partitioning scheme.Whileupgrading these devicesto Junos OSRelease 10.0, you can choose to format the storage media with dual-root partitions (strongly recommended) or retain the existing single-root partitioning.
NOTE: SRX Series devices that ship from the factory with Junos OS Release
10.0 are formatted with the dual-root partitioning scheme.
For instructions on upgrading to Junos OS Release 10.0, see the following topics:
•
Initial Configuration for Security Devices
11Copyright © 2015, Juniper Networks, Inc.
Page 30
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
•
Monitoring and Troubleshooting for Security Devices
Related
Documentation
• Installation Overview for the SRX100 Services Gateway on page 40
• SRX100 Services Gateway Software Configuration Overview on page 69
Copyright © 2015, Juniper Networks, Inc.12
Page 31
CHAPTER 3
g031001
Chassis Description
•
SRX100 Services Gateway Front Panel and Back Panel Views on page 13
•
SRX100 Services Gateway Built-In Interfaces on page 15
SRX100 Services Gateway Front Panel and Back Panel Views
This topic contains views of the front and back panels of the SRX100 Services Gateway. This topic includes the following sections:
•
SRX100 Services Gateway Front Panel on page 13
•
SRX100 Services Gateway Back Panel on page 14
SRX100 Services Gateway Front Panel
Figure 3 on page 13 shows the front panel of the SRX100 Services Gateway.
Figure 3: SRX100 Services Gateway Front Panel
Table 7 on page 13 lists the front panel components of the services gateway.
Table 7: SRX100 Services Gateway Front Panel Components
ComponentNumber
Power button1
LEDs: Alarm, Status, Power, HA2
Reset Config button3
13Copyright © 2015, Juniper Networks, Inc.
Page 32
g031002
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 7: SRX100 Services Gateway Front Panel Components (continued)
ComponentNumber
Universal serial bus (USB) port4
Console port5
Fast Ethernet ports6
For more information on the front panel components, see the following topics:
•
SRX100 Services Gateway Built-In Interfaces on page 15
•
SRX100 Services Gateway LEDs on page 7
•
SRX100 Services Gateway BootDevicesand Dual-Root Partitioning Scheme onpage11
SRX100 Services Gateway Back Panel
Figure 4 on page 14 illustrates the back panel of the SRX100 Services Gateway.
Figure 4: SRX100 Services Gateway Back Panel
Table 8 on page 14 lists the components available on the back panel of the SRX100
Services Gateway.
Table 8: SRX100 Services Gateway Back Panel
ComponentNumber
Lock1
Grounding point2
Cable tie holder3
Power supply point4
Copyright © 2015, Juniper Networks, Inc.14
Page 33
Chapter 3: Chassis Description
NOTE: The cable tie holder provides support for holding the power cord on
the power supply point.
The lock provides the option to lock and securethe device to the installation site.
Related
Documentation
SRX100 Services Gateway Specifications on page 24•
• SRX100 Services Gateway Built-In Interfaces on page 15
• SRX100 Services Gateway LEDs on page 7
• SRX100 Services GatewayBoot Devices and Dual-Root Partitioning Scheme onpage11
• SRX100 Services Gateway Power Supply on page 10
SRX100 Services Gateway Built-In Interfaces
Table 9 on page 15 summarizes the interface ports supported on the SRX100 Services
Gateway.
Table 9: SRX100 Services Gateway Built-In Hardware Interfaces
Fast Ethernet
The Fast Ethernet ports:
•
•
•
•
•
•
•
Consist of eight fixed ports
Are labeled as port 0/0 to port 0/7 on the front panel
Provide link speeds of 10/100 Mbps
Operate in full-duplex and half-duplex modes
Support flow control
Support autonegotiation
Support autosensing
DescriptionSpecificationsInterface Type
The Fast Ethernet ports can be used:
•
To provide LANconnectivity to hubs, switches, local servers, and workstations.
•
To forward incoming data packets to the device.
•
To receive outgoing data packets from the device.
15Copyright © 2015, Juniper Networks, Inc.
Page 34
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 9: SRX100 Services Gateway Built-In Hardware Interfaces (continued)
DescriptionSpecificationsInterface Type
Universal Serial Bus (USB)
Console
The USB port:
•
Consists of one port
•
Supports the following modes:
•
Full speed
•
High speed
•
Complies with USB revision
2.0
The console port:
•
Consists of one port
•
Uses an RJ-45 serial cable connector
•
Supports the RS-232 (EIA-232) standard
The USB port can be used:
•
To support a USB storage device that functions as a secondary boot device in case of internal flash failure on startup, if the USB storage device is installed and configured
NOTE: You mustinstalland
configure the USB storage device on the USB port to use it as secondary boot device. Additionally, the USB device must have Junos installed.
•
To provide the USB interfaces that are used to communicate with many types of Juniper-supported USB storage devices
The console port can be used:
•
To provide the console interface.
•
To function as a management port to log into a device directly.
•
To configure the device using the CLI.
Related
Documentation
• SRX100 Services Gateway Specifications on page 24
• SRX100 Services Gateway Front Panel and Back Panel Views on page 13
NOTE: The Reset Config button is used to remove the current configuration
and reset the device to the default configuration.
The button is recessed in the front panel to prevent it from being pressed accidentally.
CAUTION: Pressing and holding the Reset Config button for 15 seconds or
more deletes all configurations on the device and loads and commits the factory configuration.
Copyright © 2015, Juniper Networks, Inc.16
Page 35
Chapter 3: Chassis Description
• SRX100 Services Gateway LEDs on page 7
• SRX100 Services GatewayBoot Devices and Dual-Root Partitioning Scheme onpage11
• SRX100 Services Gateway Power Supply on page 10
17Copyright © 2015, Juniper Networks, Inc.
Page 36
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.18
Page 37
PART 2
Site Planning and Specifications
•
Planning and Preparing the Site on page 21
•
Power Requirements and Specifications on page 29
•
Cable Specifications and Pinouts on page 33
19Copyright © 2015, Juniper Networks, Inc.
Page 38
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.20
Page 39
CHAPTER 4
Planning and Preparing the Site
•
Site Preparation Checklist for the SRX100 Services Gateway on page 21
•
General Site Guidelines for Installing the SRX100 Services Gateway on page 24
•
SRX100 Services Gateway Specifications on page 24
•
SRX100 Services Gateway Cabinet Requirements on page 25
•
SRX100 Services Gateway Rack Requirements on page 26
•
Clearance Requirements for Airflow and Hardware Maintenance ofthe SRX100Services Gateway on page 27
Site Preparation Checklist for the SRX100 Services Gateway
The checklist in Table 10 on page 21 summarizes the tasks you need to perform when preparing a site for installing the SRX100 Services Gateway.
Table 10: Site Preparation Checklist for Services Gateway Installation
Additional InformationItem or Task
NotesDatePerformed By
Environment
Verify that environmental factors such as temperature and humidity do not exceed device tolerances.
Power
“SRX100 Services Gateway Specifications” on page 24
21Copyright © 2015, Juniper Networks, Inc.
Page 40
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 10: Site Preparation Checklist for Services Gateway Installation (continued)
Additional InformationItem or Task
NotesDatePerformed By
•
Measure the distance between the external power sources and the device installation site.
•
Locate sites for connection of system grounding.
•
Calculate the power consumption and requirements.
Rack Requirements
Verify that your rack meets the minimum requirements.
Rack Installation
•
Plan therack location, including required space clearances.
•
Secure the rack tothe floor and building structure.
“SRX100 Services Gateway Site ElectricalWiring Guidelines” on page 29
“SRX100 Services Gateway Power Specifications and Requirements” on page 31
“SRX100 Services Gateway Rack Requirements” on page 26
“Preparing the SRX100 Services Gateway for Rack-Mount Installation” on page 47
Cabinet Requirements
•
Verify that your cabinet meets the minimum requirements.
•
Plan the cabinet location, including required space clearances.
Wall Installation
“SRX100 Services Gateway Cabinet Requirements” on page 25
Copyright © 2015, Juniper Networks, Inc.22
Page 41
Chapter 4: Planning and Preparing the Site
Table 10: Site Preparation Checklist for Services Gateway Installation (continued)
Additional InformationItem or Task
NotesDatePerformed By
•
Verify that the area selected meets the minimum requirements.
•
Verify that you have the required hardware to proceed with the installation.
Desktop Installation
•
Verify that the area selected meets the minimum requirements.
•
Plan the installation location, including required space clearances and airflow requirements.
Cables
•
Acquire cables and connectors.
•
Reviewthe maximum distance allowed for each cable. Choose the length of cable based on thedistance between the hardware components being connected.
•
Plan thecable routing and management.
“Preparing the SRX100 Services Gateway for Wall-Mount Installation” on page 48
“Preparing the SRX100 Services Gateway for Desk-Mount Installation” on page 48
“InterfaceCable and Wire Specifications for the SRX100 Services Gateway” on page 33
Related
Documentation
SRX100 Services Gateway Specifications on page 24•
• SRX100 Services GatewaySafetyRequirements, Warnings, and Guidelines on page 121
• Installation Overview for the SRX100 Services Gateway on page 40
• General Site Guidelines for Installing the SRX100 Services Gateway on page 24
• SRX100 Services Gateway Cabinet Requirements on page 25
• SRX100 Services Gateway Rack Requirements on page 26
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
23Copyright © 2015, Juniper Networks, Inc.
Page 42
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
General Site Guidelines for Installing the SRX100 Services Gateway
Keep the following precautions in mind to help you plan an acceptable operating environment for your SRX100 Services Gateway and avoid environmentally caused equipment failures:
•
For theoperating temperatureof theservices gateway to beoptimal, theairflow around the chassis must be unrestricted. Allow sufficient clearance between the front and back of the chassis and adjacent equipment. Ensure that there is adequate circulation in the installation location.
•
Follow the ESD procedures to avoid damaging equipment. Static discharge can cause components to fail completely or intermittently over time.
NOTE: The SRX100 Services Gateway does not include a fan and does not
generate any acoustic noise.
Related
Documentation
SRX100 Services Gateway Safety Requirements, Warnings, and Guidelines onpage 121•
• SRX100 Services Gateway Cabinet Requirements on page 25
• SRX100 Services Gateway Rack Requirements on page 26
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
SRX100 Services Gateway Specifications
The SRX100 Services Gateway chassis is a rigid sheet metal structure that houses all the other hardware components (see Figure 5 on page 25).
Table 11 on page 24 provides information on the physical specifications of the device.
Table 11: SRX100 Services Gateway Specifications
ValueSpecification
1.38 in. (35 mm)Chassis height
8.5 in. (216 mm)Chassis width
5.79 in. (147 mm)Chassis depth
Average power consumption
1.86 lb (844 g)Chassis weight
•
SRX100 Services Gateway Low Memory model: 10 watts
•
SRX100 Services Gateway High Memory model: 10 watts
Copyright © 2015, Juniper Networks, Inc.24
Page 43
Chapter 4: Planning and Preparing the Site
Table 11: SRX100 Services Gateway Specifications (continued)
ValueSpecification
Temperature
Maximum thermal output
Normal operation ensured in temperature range of 32°F (0°C) to 104°F (+40°C)
Nonoperating storage temperature in shipping container: –40°F (–40°C) to 158°F (70°C)
NOTE: The SRX100 Services Gateway operating
temperature is 35°C when installed in a rack.
The maximum thermalvaluesfor the two modelsof services gateways are as follows:
•
Low Memory — AC power: 80 BTU/hour (21.5 W)
•
High Memory — AC power: 80 BTU/hour (21.5 W)
NOTE: These specifications are estimates and subject to
change.
Figure 5: SRX100 Services Gateway
CAUTION: Beforeremovingor installing components of a functioning services
gateway, attach an electrostatic discharge (ESD) strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap could result in damage to the services gateway.
Related
Documentation
SRX100 Services Gateway Description on page 3•
• SRX100 Services Gateway Front Panel and Back Panel Views on page 13
• Monitoring the SRX100 Services Gateway Components Using LEDs on page 97
• SRX100 Services Gateway Electrical Safety Guidelines and Warnings on page 141
SRX100 Services Gateway Cabinet Requirements
The SRX100 Services Gateway can be installed in a standard 31.5 in. (800 mm) or larger enclosed cabinet. Table 12 on page 26 provides the details on cabinet size, clearance, and airflow requirements.
25Copyright © 2015, Juniper Networks, Inc.
Page 44
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 12: SRX100 Services Gateway Cabinet Requirements
Cabinet Requirements
Specifications
Cabinet size
Clearance requirements
Cabinet airflow requirements
19 in. (48.3 cm) as defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310–D) published by the Electronics Industry Association (http://www.eia.org).
You can mount the gateway horizontally in the cabinet.
•
The cabinet is at least 1 U (1.75 in. or 4.5 cm) high.
•
The outer edges ofthe mountingbrackets extend thewidth ofeither chassis to 19 in. (48.3 cm), and the front of the chassis extends approximately 0.5 in. (1.27 cm) beyond the mounting brackets.
•
The minimumtotalclearance insidethe cabinet is30.7in. (78cm) between the inside of the front door and the inside of the rear door.
NOTE: The holes for the mounting brackets chassis are spaced 1.25 in. (3.2
cm) apart, measured from the center of the hole.
•
Ensure sufficient ventilation through the cabinet is sufficient to prevent overheating.
•
Ensure adequate cool air supply to dissipate the thermal output of the device.
•
Install the device as close as possible to the front of the cabinet so that the cable management system clears the insideof the frontdoor. Installing the chassis close to the front of the cabinet maximizes the clearance in the rear of the cabinet for critical airflow.
•
Route anddress all cables tominimize the blockage of airflow to and from the chassis.
NOTE: A cabinet larger than the minimum required provides better airflow
and reduces the chance of overheating.
Related
Documentation
General Site Guidelines for Installing the SRX100 Services Gateway on page 24•
• SRX100 Services Gateway Rack Requirements on page 26
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
SRX100 Services Gateway Rack Requirements
The services gateway can be installed in a rack. Many types of racks are acceptable, including front-mount racks and four-post (telco) racks.
NOTE: The services gateway cannot be center mounted in a rack.
Table 13 on page 27 provides the details of requirements for rack size, clearance, airflow,
spacing of mounting brackets and flange holes, and connecting to the building structure.
Copyright © 2015, Juniper Networks, Inc.26
Page 45
Chapter 4: Planning and Preparing the Site
Table 13: Rack Requirements for the Services Gateway
SpecificationsRack Requirement
Related
Documentation
Size
Clearance
Spacing of Mounting Bracket and Flange Holes
Connecting to the Building Structure
A 19in. (48.3 cm)rackas defined inCabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D) published by the Electronics Industry Association (http://www.eia.org).
•
The outer edges of the mounting brackets extend the width of either chassis to 19 in. (48.3 cm).
•
The frontof thechassis extends approximately 0.5 in. (1.27 cm) beyond the mounting ears.
•
Maximum permissible ambient temperature when two devices are placed side by side in a 19 in. rack is 40° C.
•
The holes within each rack set are spaced at 1 U [1.75 in. (4.5 cm)]. The device can be mounted in any rack that provides holes or hole patterns spaced at 1-U [1.75 in. (4.5 cm)] increments.
•
The mounting brackets and front-mount flanges used to attach the chassis to a rack are designed to fasten to holes spaced at rack distances of 1 U (1.75 in.).
•
The mounting holes in the mounting brackets provided with the device are spaced 1.25 in. (3.2 cm) apart (top and bottom mounting hole).
Always secure the rack in which you are installing the services gateway to the structure of the building. If your geographical area is subject to earthquakes, bolt the rack to the floor. For maximum stability, also secure the rack to ceiling brackets.
General Site Guidelines for Installing the SRX100 Services Gateway on page 24•
• SRX100 Services Gateway Cabinet Requirements on page 25
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
Clearance Requirements for Airflow and HardwareMaintenance of the SRX100 Services Gateway
When planning the installation site for the SRX100 Services Gateway, you need to allow sufficient clearance around the device.
When planning the installation site for the services gateway, consider the following:
•
For theoperating temperatureof theservices gateway to beoptimal, theairflow around the chassis must be unrestricted.
•
For service personnel to remove and install hardware components, there must be adequate space at the front and back of the device. Allow at least 24 in. (61 cm) both in front of and behind the device.
•
If you are mounting the device in a rack with other equipment, or if you are placing it on the desktop near other equipment, ensure that the exhaust from other equipment does not blow into the intake vents of the chassis.
27Copyright © 2015, Juniper Networks, Inc.
Page 46
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 14 on page28 provides information onthe clearancerequirementsfor maintaining
the optimum airflow and the distances for facilitating easy maintenance of the device.
Table 14: Clearance Requirements for the SRX100 Services Gateway
Recommended ClearanceLocation
Requirement for Clearance
and rack or cabinet edge
any non-heat-producing surface such as a wall or cabinet side
devices that have fans or blowers
NOTE: The air vents are provided on the sides of the chassis for the SRX100
Services Gateway.
2.5 in. (6.35 cm)Front of the chassis
2.5 in. (6.35 cm)Rear of the chassis
2.5 in. (6.35 cm)Betweenfront-mounting flange
2.5 in. (6.35 cm)Betweenside ofthe chassis and
0.4 in. (1 cm)Between sideof the chassisand
Space for service personnel to remove and install hardware components
Space for service personnel to remove and install hardware components
Space for cable management and organization
Space for the cooling system to function properly and to maintain unrestricted airflow around the chassis
Space for the cooling system to function properly and to maintain unrestricted airflow around the chassis
Related
Documentation
• General Site Guidelines for Installing the SRX100 Services Gateway on page 24
• SRX100 Services Gateway Cabinet Requirements on page 25
• SRX100 Services Gateway Rack Requirements on page 26
Copyright © 2015, Juniper Networks, Inc.28
Page 47
CHAPTER 5
Power Requirements and Specifications
•
SRX100 Services Gateway Site Electrical Wiring Guidelines on page 29
•
SRX100 Services Gateway Electrical and Power Requirements on page 30
•
SRX100 Services Gateway Power Specifications and Requirements on page 31
SRX100 Services Gateway Site Electrical Wiring Guidelines
Table 15 on page 29 describes the factors you must consider while planning the electrical
wiring for the services gateway at your site.
CAUTION: It is particularly important to provide a properly grounded and
shielded environment and to use electrical surge-suppression devices.
CAUTION: For devices with AC power supplies, an external surge protective
device (SPD) must be used at the AC power source.
Table 15: Site Electrical Wiring Guidelines for the Services Gateway
GuidelineSite Wiring Factor
Signaling Limitations
To ensure that signaling functions optimally:
•
Install wires correctly.
Improperly installed wires can emit radio interference.
•
Do not exceed the recommended distances or pass wires between buildings.
The potentialfor damage from lightning strikes increases if wires exceed recommended distances or if wires pass between buildings.
•
Shield all conductors.
The electromagnetic pulse (EMP) caused by lightning can damage unshielded conductors and destroy electronic devices.
29Copyright © 2015, Juniper Networks, Inc.
Page 48
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 15: Site Electrical Wiring Guidelines for the Services Gateway (continued)
GuidelineSite Wiring Factor
Radio Frequency Interference (RFI)
Electromagnetic Compatibility (EMC)
CAUTION: To comply with intrabuilding lightning/surge requirements, the
intrabuilding wiring must be shielded. The shielding for the wiring must be grounded at both ends.
To reduce or eliminate the emission of RFI from your site wiring:
•
Use twisted-pair cable with a good distribution of grounding conductors.
•
Use a high-quality twisted-paircable with one ground conductor for each data signal when applicable, if you must exceed the recommended distances.
Provide a properly grounded and shielded environment and use electrical surge-suppression devices.
Strong sources of electromagnetic interference (EMI) can cause the following damage:
•
Destroy the signal drivers and receivers in the device
•
Conduct power surges over thelines into theequipment, resulting in an electrical hazard
NOTE: If your site is susceptible to problems with EMC, particularly
from lightning or radio transmitters, you may want to seek expert advice.
Related
Documentation
General Site Guidelines for Installing the SRX100 Services Gateway on page 24•
• Monitoring the SRX100 Services Gateway Power System on page 101
• SRX100 Services Gateway Electrical and Power Requirements on page 30
• SRX100 Services Gateway Power Specifications and Requirements on page 31
SRX100 Services Gateway Electrical and Power Requirements
This topic provides information on the factors you must consider while planning the electricalwiring andpower availability at your site. These requirements cover the following areas:
•
Power specifications and requirements for the device
•
Electrical wiring guidelines for the device installation site
•
Power, connection, and power cord specifications for the device
•
Grounding guidelines and specifications for the device
Copyright © 2015, Juniper Networks, Inc.30
Page 49
Chapter 5: Power Requirements and Specifications
Related
Documentation
SRX100 Services Gateway Site Electrical Wiring Guidelines on page 29•
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• Installation Overview for the SRX100 Services Gateway on page 40
• Interface Cable and Wire Specifications for the SRX100 Services Gateway on page 33
SRX100 Services Gateway Power Specifications and Requirements
The AC power system electrical specifications for the SRX100 Services Gateway are listed in Table 16 on page 31.
Table 16: Power System Electrical Specifications for the SRX100 Services Gateway
SpecificationPower Requirement
100 to 240 VACAC input voltage
50 to 60 HzAC input line frequency
1 A maximumAC system current rating
Related
Documentation
WARNING: The AC power cord for the services gateway is intended for use
with the device only and not for any other use.
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• SRX100 Services Gateway Site Electrical Wiring Guidelines on page 29
• Monitoring the SRX100 Services Gateway Power System on page 101
• Maintaining the SRX100 Services Gateway Hardware Components on page 93
31Copyright © 2015, Juniper Networks, Inc.
Page 50
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.32
Page 51
CHAPTER 6
Cable Specifications and Pinouts
•
Interface Cable and Wire Specifications for the SRX100 Services Gateway on page 33
•
RJ-45 Connector Pinouts for the SRX100 Services Gateway Ethernet Port on page 33
•
RJ-45 Connector Pinouts for the SRX100 Services Gateway Console Port on page 34
Interface Cable and Wire Specifications for the SRX100 Services Gateway
Table 17 on page 33 lists the specifications for the cables that connect to ports.
Table 17: Cable and Wire Specifications for Ports
Maximum LengthCable/Wire RequiredCable SpecificationPort
RS-232 (EIA-232)serial cable
CAT-5e (Category 5) cable or equivalent suitable for 100BASE-T operation
with DB-9/RJ-45 connectors
One 15-ft (4.57-m) length with RJ-45/RJ-45 connectors
(100 m)
Related
Documentation
Console port
Ethernet port
RJ-45 Connector Pinouts for the SRX100 Services Gateway Ethernet Port on page 33•
• RJ-45 Connector Pinouts for the SRX100 Services Gateway Console Port on page 34
RJ-45 Connector Pinouts for the SRX100 Services Gateway Ethernet Port
Figure 6 on page 33 shows the RJ-45 cable connector pinouts for Ethernet ports.
Figure 6: Ethernet Cable Connector (RJ-45)
Device Receptacle
RJ-456 ft (1.83 m)One 6-ft(1.83-m) length
RJ-45328 ft
Table 18 on page 34 describes the RJ-45 connector pinouts for the Ethernet port.
33Copyright © 2015, Juniper Networks, Inc.
Page 52
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 18: RJ-45 Connector Pinouts for the Services Gateway Ethernet Port
SignalPin
TX+1
TX -2
RX+3
Termination network4
Termination network5
RX-6
Termination network7
Termination network8
Related
Documentation
Interface Cable and Wire Specifications for the SRX100 Services Gateway on page 33•
• RJ-45 Connector Pinouts for the SRX100 Services Gateway Console Port on page 34
RJ-45 Connector Pinouts for the SRX100 Services Gateway Console Port
Figure 7 on page 34 shows the RJ-45 connector pinouts for the console port.
Figure 7: Console Cable Connector
Table 19 on page 34 describes the RJ-45 connector pinouts for the console port.
Table 19: RJ-45 Connector Pinouts for the Services Gateway Console Port
DescriptionSignalPin
Request to SendRTS1
Data Terminal ReadyDTR2
Transmit DataTXD3
Signal GroundGround4
Copyright © 2015, Juniper Networks, Inc.34
Page 53
Chapter 6: Cable Specifications and Pinouts
Table 19: RJ-45 Connector Pinouts for the Services Gateway Console Port (continued)
DescriptionSignalPin
Signal GroundGround5
Receive DataRXD6
Data Set ReadyDSR/DCD7
Clear to SendCTS8
Related
Documentation
• Interface Cable and Wire Specifications for the SRX100 Services Gateway on page 33
• RJ-45 Connector Pinouts for the SRX100 Services Gateway Ethernet Port on page 33
35Copyright © 2015, Juniper Networks, Inc.
Page 54
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.36
Page 55
PART 3
Initial Installation and Configuration
•
Installation Overview on page 39
•
Unpacking the Services Gateway on page 43
•
Installing the Mounting Hardware on page 47
•
Installing the Services Gateway on page 51
•
Grounding the SRX100 Services Gateway on page 57
•
Connecting the SRX100 Services Gateway to External Devices on page 61
•
Providing Power to the SRX100 Services Gateway on page 65
•
Performing Initial Configuration on page 69
37Copyright © 2015, Juniper Networks, Inc.
Page 56
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.38
Page 57
CHAPTER 7
Installation Overview
•
Installation Overview for the SRX100 Services Gateway on page 40
•
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway on page 41
•
SRX100 Services Gateway Autoinstallation Overview on page 42
39Copyright © 2015, Juniper Networks, Inc.
Page 58
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Installation Overview for the SRX100 Services Gateway
After you have prepared your installation site, you are ready to unpack and install the services gateway. It is important to proceed through the installation process in the order shown in Table 20 on page 40.
Table 20: Installation Process Order for the SRX100 Services Gateway
For More Information, SeeProcessSteps
Review the safety guidelines.1
2
3
4
Verify that you have prepared your site forthe installation of the services gateway using the checklist.
Follow the instructions for unpacking the services gateway and verify that the parts are received.
Prepare the services gateway for installation.
Install the services gateway.5
“SRX100 Services Gateway Safety Requirements, Warnings, and Guidelines” on page 121
“Site Preparation Checklist for the SRX100 Services Gateway” on page 21
“Unpacking the SRX100 Services Gateway” on page 43
“Preparing the SRX100 Services Gateway forRack-Mount Installation” on page 47
“Preparing the SRX100 Services Gateway forDesk-Mount Installation” on page 48
“Preparing the SRX100 Services Gateway for Wall-Mount Installation” on page 48
“Installing the SRX100 Services Gateway in a Rack” on page 51
“Installing the SRX100 Services Gateway on a Desk” on page 52
Related • Unpacking the SRX100 Services Gateway on page 43
“Installing the SRX100 Services Gateway on a Wall” on page 54
Connect cables to external devices.6
Connect the grounding cable.7
Power on the services gateway.8
“Connecting and Organizing Interface Cables to the SRX100 Services Gateway” on page 61
“Grounding the SRX100 Services Gateway” on page 57
“Powering On and Powering Off the SRX100 Services Gateway” on page 66
Copyright © 2015, Juniper Networks, Inc.40
Page 59
Chapter 7: Installation Overview
Documentation General Site Guidelines for Installing the SRX100 Services Gateway on page 24
•
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
• Installing the SRX100 Services Gateway in a Rack on page 51
• Installing the SRX100 Services Gateway on a Desk on page 52
• Installing the SRX100 Services Gateway on a Wall on page 54
• Connecting and Organizing Interface Cables to the SRX100 Services Gateway on
page 61
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
Table 21 on page 41 lists the tools and parts required to install and maintain the SRX100
Services Gateway.
Table 21: Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
Related TopicTools and PartsTask
Related
Documentation
Installing theSRX100 Services Gateway
•
Phillips (+) screwdriver, numbers 1 and 3
•
Tie wrap
“Installing the SRX100 Services Gateway in a Rack” on page 51
“Installing the SRX100 Services Gateway on a Desk” on page 52
“Installing the SRX100 Services Gateway on a Wall” on page 54
Connecting the SRX100 Services Gateway
Electrostatic discharge (ESD) grounding wrist strap
“Connecting the SRX100 Services Gateway to the Power Supply” on page 65
Grounding the SRX100 Services Gateway
Packing the SRX100 Services Gateway
Phillips (+) screwdriver, number 1
•
Electrostatic bag or antistatic mat, for each component
•
Electrostatic discharge
“Grounding the SRX100 Services Gateway” on page 57
“Packing the SRX100 Services Gateway and Components for Shipment” on page 110
(ESD) grounding wrist strap
Unpacking the SRX100 Services Gateway on page 43•
• Installing the SRX100 Services Gateway in a Rack on page 51
41Copyright © 2015, Juniper Networks, Inc.
Page 60
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
• Installing the SRX100 Services Gateway on a Desk on page 52
• Installing the SRX100 Services Gateway on a Wall on page 54
• Grounding the SRX100 Services Gateway on page 57
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
• Packing the SRX100 Services Gateway and Components for Shipment on page 110
SRX100 Services Gateway Autoinstallation Overview
The autoinstallation process begins any time a services gateway is powered on and cannot locate a valid configuration file in the internal flash. Typically, a configuration file is unavailable when a services gateway is powered on for the first time or if the configuration file is deleted from the internal flash. The autoinstallation feature enables you to deploy multiple services gateways from a central location in the network.
If you are setting up many devices, autoinstallation can help automate the configuration process by loading configuration files onto new or existing devices automatically over the network. You can use either the J-Web interface or the CLI to configure a device for autoinstallation.
Related
Documentation
For the autoinstallation process to work, you must store one or more host-specific or default configuration files on a configuration server in the network and have a service available—typicallyDynamic HostConfiguration Protocol(DHCP)—to assign anIP address to the services gateway.
Autoinstallation takes place automatically when you connect an Ethernet port on a new services gateway to the network and power on the device. To simplify the process, you can explicitly enable autoinstallation on a device and specify a configuration server, an autoinstallation interface, and a protocol for IP address acquisition.
For more information about configuring autoinstallation, see the following topics:
•
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
• Grounding the SRX100 Services Gateway on page 57
• Powering On and Powering Off the SRX100 Services Gateway on page 66
Copyright © 2015, Juniper Networks, Inc.42
Page 61
CHAPTER 8
Unpacking the Services Gateway
•
Unpacking the SRX100 Services Gateway on page 43
•
Verifying Parts Received with the SRX100 Services Gateway on page 44
Unpacking the SRX100 Services Gateway
The SRX100 ServicesGateway isshipped ina cardboard carton. The carton also contains an accessory box and the SRX100 Services Gateway Quick Start.
NOTE: The device is maximally protected inside the shipping carton. Do not
unpack it until you are ready to begin installation.
To unpack the SRX100 Services Gateway:
1. Open the box in which the device is shipped.
2. Verify the parts received against the lists in “Verifying Parts Received with the SRX100
Services Gateway” on page 44.
Related
Documentation
3. Store the shipping box and packing material in case you need to return or move the
device at a later time.
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
•
on page 41
• Verifying Parts Received with the SRX100 Services Gateway on page 44
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
• Installation Overview for the SRX100 Services Gateway on page 40
43Copyright © 2015, Juniper Networks, Inc.
Page 62
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Verifying Parts Received with the SRX100 Services Gateway
The SRX100 Services Gatewayshipment packagecontains a packinglist. Check the parts in the shipment against the items on the packing list. The packing list specifies the part numbers and descriptions of each part in your order.
If any part is missing, contact your Juniper Networks customer service representative.
A fully configured SRX100 Services Gateway contains the chassis with installed components, listed in Table 22 on page 44, and an accessory box, which contains the parts listed in Table 23 on page 44.
NOTE: The parts shipped with your device can vary depending on the
configuration you ordered.
Table 22: Parts List for a Fully Configured SRX100 Services Gateway
QuantityComponent
1Chassis, with 8xFE ports
1Power supply adapter (30 W)
12-prong power cord
1DB-9 to RJ-45 adapter, straight through, 7 ft
Table 23: Accessory Parts List for the SRX100 Services Gateway
QuantityPart
1Juniper Networks Product Warranty
1End User License Agreement
1Quick Start
1Security Products Safety Guide
1Juniper Compliance Form Letter
1Product Registration
NOTE: The mounting kits available for rack, desk, and wall installation of the
SRX100 Services Gateway must be ordered separately. Contact your Juniper Networks customer service representative for more information.
Copyright © 2015, Juniper Networks, Inc.44
Page 63
Chapter 8: Unpacking the Services Gateway
Related
Documentation
• Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
on page 41
• Unpacking the SRX100 Services Gateway on page 43
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
45Copyright © 2015, Juniper Networks, Inc.
Page 64
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.46
Page 65
CHAPTER 9
Installing the Mounting Hardware
•
Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
•
Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
•
Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
Preparing the SRX100 Services Gateway for Rack-Mount Installation
You can mountan SRX100ServicesGateway infour-post(telco) racks, enclosed cabinets, and open-frame racks.
NOTE: The SRX100 Services Gateway cannot be center-mounted in racks.
Before mounting the SRX100 Services Gateway in a rack:
•
Verifythat the installation sitemeets the requirementsdescribed in the site preparation checklist.
•
Verify that the racks or cabinets meet the specific requirements described in “SRX100
Services Gateway Rack Requirements” on page 26.
•
Place the rack or cabinet in its permanent location, allowing adequate clearance for airflow and maintenance, and secure it to the building structure. For more information, see “Clearance Requirements for Airflow and Hardware Maintenance of the SRX100
Services Gateway” on page 27.
•
Remove the services gateway chassis from the shipping carton. For unpacking instructions, see “Unpacking the SRX100 Services Gateway” on page 43.
•
Verify that you have the following parts available in your rack-mounting kit for the SRX100 Services Gateway:
•
Rack-mount tray
•
Screws
NOTE: The rack-mounting kit is not shipped with the device and must be
ordered separately.
47Copyright © 2015, Juniper Networks, Inc.
Page 66
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Related
Documentation
Unpacking the SRX100 Services Gateway on page 43•
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• SRX100 Services Gateway Rack Requirements on page 26
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
Preparing the SRX100 Services Gateway for Desk-Mount Installation
You can mount an SRX100 Services Gateway on a desk or other level surface horizontally or vertically. The four rubber feet attached to the chassis provide stability.
Before mounting an SRX100 Services Gateway on a desk or other level surface:
•
Verify that the site meets the requirements described in the site preparation checklist.
•
Place the desk in its permanent location, allowing adequate clearance for airflow and maintenance, and secure it to the building structure.
•
Remove the services gateway chassis from the shipping carton. For unpacking instructions, see “Unpacking the SRX100 Services Gateway” on page 43.
•
If you aremounting thedevice vertically on the desk, makesure that the following parts are available in your vertical desk-mounting kit for the SRX100 Services Gateway:
•
Vertical stand
•
Screws
NOTE: The vertical desk-mounting kit is not shipped with the device and
must be ordered separately.
Related
Documentation
Unpacking the SRX100 Services Gateway on page 43•
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
Preparing the SRX100 Services Gateway for Wall-Mount Installation
You can mount an SRX100 Services Gateway on a wall. The four rubber feet attached to the chassis provide stability.
Copyright © 2015, Juniper Networks, Inc.48
Page 67
Chapter 9: Installing the Mounting Hardware
Before mounting an SRX100 Services Gateway on a wall:
•
Verify that the site meets the requirements described in “Site Preparation Checklist
for the SRX100 Services Gateway” on page 21.
•
Remove the services gateway chassis from the shipping carton. For unpacking instructions, see “Unpacking the SRX100 Services Gateway” on page 43.
•
Verify that you have the following parts available in your wall-mounting kit for the SRX100 Services Gateway:
•
Wall-mounting brackets
•
Screws
NOTE: The wall-mounting kit is not shipped with the device and must be
ordered separately.
Related
Documentation
• Site Preparation Checklist for the SRX100 Services Gateway on page 21
• Unpacking the SRX100 Services Gateway on page 43
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
49Copyright © 2015, Juniper Networks, Inc.
Page 68
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.50
Page 69
CHAPTER 10
g031038
Installing the Services Gateway
•
Installing the SRX100 Services Gateway in a Rack on page 51
•
Installing the SRX100 Services Gateway on a Desk on page 52
•
Installing the SRX100 Services Gateway on a Wall on page 54
Installing the SRX100 Services Gateway in a Rack
You can front-mount two SRX100 Services Gateways in a rack. Many types of racks are acceptable, including four-post (telco) racks, enclosed cabinets, and open-frame racks. For more information about the type of rack or cabinet the SRX100 Services Gateway can be installed into, see “SRX100 Services Gateway Rack Requirements” on page 26.
NOTE: If you are installing multipledevices in one rack, install the lowest one
first and proceed upward in the rack.
To install the device in a rack:
1. Position the two devices in the rack-mount tray as shown in Figure 8 on page 51.
Figure 8: Installing the SRX100 Services Gateway in a Rack
2. Use a number-1 Phillips screwdriver to install the screws that secure the device to the
rack-mount tray.
3. Have one person grasp the sides of the rack-mount tray, lift it, and position it in the
rack.
4. Align the bottom hole in each side of the rack-mount tray with a hole in each rack rail
as shown in Figure 9 on page 52, making sure the rack-mount tray is level.
51Copyright © 2015, Juniper Networks, Inc.
Page 70
g0310 39
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Figure 9: Hanging the SRX100 Services Gateway in a Rack
5. Have a second person install a mounting screw into each of the two aligned holes.
Use a number-3 Phillips screwdriver to install the mounting screws.
6. Install the second screw in each side of the rack-mount tray.
7. Verify that the mounting screws on one side of the rack-mount tray are aligned with
the mounting screws on the opposite side and that the tray is level.
NOTE: The rack-mounting kit is not shipped with the device and must be
ordered separately.
Related
Documentation
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
•
on page 41
• Preparing the SRX100 Services Gateway for Rack-Mount Installation on page 47
• SRX100 Services Gateway Rack Requirements on page 26
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
• Clearance Requirementsfor Airflow and HardwareMaintenanceof theSRX100 Services
Gateway on page 27
• SRX100 Services GatewaySafetyRequirements, Warnings, and Guidelines on page 121
• Installing the SRX100 Services Gateway on a Desk on page 52
• Installing the SRX100 Services Gateway on a Wall on page 54
Installing the SRX100 Services Gateway on a Desk
You can install the SRX100 Services Gateway on a desk, table, or other level surface. The device is shipped with the rubberfeet attached.The rubberfeet are necessary to stabilize the device on the desk.
You can install the device in a horizontal or vertical position.
Copyright © 2015, Juniper Networks, Inc.52
Page 71
Chapter 10: Installing the Services Gateway
NOTE: The desk-mounting kit is not shipped with the device and must be
ordered separately.
Horizontal Desk Mounting
The horizontal position is the standard installation position and does not require the vertical installation kit.
To install the device in a horizontal position:
1. Make sure that the rubber feet are attached to the chassis.
2. Place the device on a desk with the Juniper Networks logo embossed on the top cover
facing up.
Vertical Desk Mounting
The vertical position requires the vertical installation kit, which consists of a vertical installation stand.
To install the device in a vertical position:
1. Place the device on a flat and level surface with the Juniper Networks logo on the
front panel facing up, as shown in Figure 10 on page 53.
Figure 10: Installing the SRX100 Services Gateway on a Desk
2. Attach the vertical stand to the right side of the chassis as shown in
Figure 10 on page 53.
3. Place the chassis vertically on the desk with the stand resting on the desk.
Related
Documentation
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
•
on page 41
• Preparing the SRX100 Services Gateway for Desk-Mount Installation on page 48
• SRX100 Services GatewaySafetyRequirements, Warnings, and Guidelines on page 121
53Copyright © 2015, Juniper Networks, Inc.
Page 72
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
• Installing the SRX100 Services Gateway in a Rack on page 51
• Installing the SRX100 Services Gateway on a Wall on page 54
Installing the SRX100 Services Gateway on a Wall
You can install the SRX100 Services Gateway on a wall. The device is shipped with the rubber feet attached. The rubber feet help stabilize the device on the wall and enhance airflow.
NOTE: The wall-mounting kit is not shipped with the device and must be
ordered separately.
To install the device on a wall:
1. Place the device on a flat and level surface with the Juniper Networks logo embossed
on the top cover facing up.
2. Position a mounting bracket on each side of the chassis as shown in
Figure 11 on page 54.
Figure 11: Installing the SRX100 Services Gateway on a Wall
3. Use a number–1 Phillips screwdriver to install the screws that secure the mounting
brackets to the chassis.
4. If you are using wall anchors to support the chassis, install two pairs of anchors on
the wall with mounting brackets attached.
5. Have one person grasp the sides of the device, lift it, and position it on the wall.
6. Have a second person install two pairs of mounting screws through the bracket holes
on either side of the device to secure it to the wall.
7. Verify that the mounting screws on one side are aligned with the mounting screws on
the opposite side and that the device is level (see Figure 12 on page 55).
Copyright © 2015, Juniper Networks, Inc.54
Page 73
Chapter 10: Installing the Services Gateway
Figure 12: Hanging the SRX100 Services Gateway on a Wall
Related
Documentation
• Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
on page 41
• Preparing the SRX100 Services Gateway for Wall-Mount Installation on page 48
• SRX100 Services GatewaySafetyRequirements, Warnings, and Guidelines on page 121
• Installing the SRX100 Services Gateway on a Desk on page 52
• Installing the SRX100 Services Gateway in a Rack on page 51
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
55Copyright © 2015, Juniper Networks, Inc.
Page 74
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.56
Page 75
CHAPTER 11
Grounding the SRX100 Services Gateway
•
Grounding the SRX100 Services Gateway on page 57
Grounding the SRX100 Services Gateway
To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, the SRX100 Services Gateway must be adequately grounded before power is connected.
Figure 13 on page 57 illustrates how a grounding cable connects to the services gateway.
Figure 13: Grounding the SRX100 Services Gateway
You ground thedevice by connecting agrounding cable to earth groundand thenattaching it to the chassis grounding points using one M3 screw.
Table 24 on page 58 lists the grounding components of the SRX100 Services Gateway.
CAUTION: Before device installation begins, a licensed electrician must
attach a cable lug to the grounding and power cables that you use. A cable with an incorrectly attached lug can damage the device (for example, by causing a short circuit).
57Copyright © 2015, Juniper Networks, Inc.
Page 76
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Table 24: SRX100 Services Gateway Grounding Components
ComponentNumber
Grounding point on the chassis1
Grounding lug2
Grounding screw (M3 screw)3
Table 25 on page 58 lists the specifications of the grounding cable used with the device.
Table 25: Grounding Cable Specifications for the Services Gateway
SpecificationGrounding Requirement
14 AWG single-strand wire cableGrounding cable
Up to 4 AAmperage of grounding cable
Related
Documentation
Grounding lug
Ring-type, vinyl-insulated TV14-6R lug or equivalent
To ground the device:
1. Connect the grounding cable to a proper earth ground.
2. Verify that a licensed electrician has attached the cable lug to the grounding cable.
3. Place the grounding cable lug over the grounding point on the middle rear of the
chassis.
4. Secure the grounding cable lug to the grounding point with the screw as shown in
Figure 13 on page 57.
5. Dress the grounding cable and verify that it does not touch or block access to the
services gateway components and that it does not drape where people could trip on it.
NOTE: The device should be permanently connected to ground during
operation.
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
• Connecting and Organizing Interface Cables to the SRX100 Services Gateway on
page 61
• SRX100 Services Gateway General Safety Guidelines and Warnings on page 117
• Powering On and Powering Off the SRX100 Services Gateway on page 66
• Using the Reset Config Button on the SRX100 Services Gateway on page 102
Copyright © 2015, Juniper Networks, Inc.58
Page 77
Chapter 11: Grounding the SRX100 Services Gateway
• Changing the Reset Config Button Behavior on the SRX100 Services Gateway on
page 103
59Copyright © 2015, Juniper Networks, Inc.
Page 78
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Copyright © 2015, Juniper Networks, Inc.60
Page 79
CHAPTER 12
Connecting the SRX100 Services Gateway to External Devices
•
Connecting and Organizing Interface Cables to the SRX100 Services Gateway on page 61
•
Connecting the Modem at the SRX100 Services Gateway End on page 62
•
Connecting the Modemto the Console Port onthe SRX100ServicesGateway on page63
•
Connecting to the CLI at the User End for the SRX100 Services Gateway on page 63
Connecting and Organizing Interface Cables to the SRX100 Services Gateway
You can connect the interfaces installed in the services gateway to various network media. Each type of interface on the services gateway uses a particular medium to transmit data. You must configure each network interface before it can operate on the device.
To connect and organize an interface cable for the device:
Related
Documentation
1. Have ready a length of the type of cable used by the interface.
2. Insert the cable connector into the cable connector port on the interface faceplate.
3. Arrange network cables as follows to prevent them from dislodging or developing
stress points:
•
Secure cables so that they are not supporting their own weight as they hang to the floor.
•
Place excess cable out of the way in neatly coiled loops.
•
Use fasteners to maintain the shape of cable loops.
Connecting the SRX100 Services Gateway to the Power Supply on page 65•
• Grounding the SRX100 Services Gateway on page 57
• Interface Cable and Wire Specifications for the SRX100 Services Gateway on page 33
• SRX100 Services Gateway Installation Safety Guidelines and Warnings on page 125
61Copyright © 2015, Juniper Networks, Inc.
Page 80
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
Connecting the Modem at the SRX100 Services Gateway End
NOTE: These instructions use Hayes-compatible modem commands to
configure the modem. If your modem is not Hayes-compatible, refer to the documentationforyour modem and enter the equivalent modem commands.
To configure the modem on the services gateway end:
1. Connect the modem to a PC or laptop computer.
2. Power on the modem.
3. From the PC or laptop computer, start your asynchronous terminal emulation
application (such as Microsoft Windows HyperTerminal), and select the COM port to which the modem is connected (for example, COM1).
4. Configure the port settings as shown in Table 26 on page 62.
Table 26: Port Settings for Configuring the Modem on the Services Gateway End
ValuePort Setting
9600Bits per second
8Data bits
NoneParity
1Stop bits
NoneFlow control
5. In the HyperTerminal window, enter AT.
For more information on the AT commands, see the following topics:
•
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
An OKresponse verifies that themodem cancommunicate successfullywith theCOM port on the PC or laptop.
6. Configure the modem to answer a call on the first ring by entering ATS0=1.
7. Configure the modem to accept modem control DTR signals by entering AT&D1.
8. Disable flow control by entering AT&K0.
9. Save modem settings by entering AT&W.
Copyright © 2015, Juniper Networks, Inc.62
Page 81
Chapter 12: Connecting the SRX100 Services Gateway to External Devices
Related
Documentation
Connecting the Modem to the Console Port on the SRX100 Services Gateway on
•
page 63
• Connecting to the CLI at the User End for the SRX100 Services Gateway on page 63
Connecting the Modem to the Console Port on the SRX100 Services Gateway
To connect the dial-up modem to the console port on the services gateway:
1. Turn off power to the services gateway.
2. Turn off power to the modem.
3. Plug one end of the Ethernet cable supplied with your services gateway into the
console port on the services gateway.
4. Plug the other end of the CAT-5e cable (Ethernet cable) into the RJ-45 to DB-9 serial
port adapter supplied with your services gateway.
5. Connect the serial port adapter to a separately purchased DB-9 female to DB-25
male adapter or other adapter appropriate for your modem.
6. Plug the modem adapter into the DB-25 connector on the modem.
7. Connect the modem to your telephone network.
8. Turn on the power to the modem.
9. Power on the services gateway bypressing the Power button on the front panel. Verify
that the Power LED on the front panel turns green.
NOTE: Most modems have an RS-232 DB-25 connector. You must
separately purchase an adapter to connect your modem to the RJ-45 to DB-9 adapter and the Ethernet cable supplied with the services gateway.
Related
Documentation
Connecting the Modem at the SRX100 Services Gateway End on page 62•
• Connecting to the CLI at the User End for the SRX100 Services Gateway on page 63
Connecting to the CLI at the User End for the SRX100 Services Gateway
To remotely connect to the CLI through a dial-up modem connected to the console port on the services gateway:
1. Connect a modem at your remote location to a management device such as a PC or
laptop computer.
2. Start your asynchronous terminal emulation application (such as Microsoft Windows
HyperTerminal) on the PC or laptop computer.
3. Select the COM port to which the modem is connected (for example, COM1).
63Copyright © 2015, Juniper Networks, Inc.
Page 82
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
4. Configure the port settings shown in Table 27 on page 64.
Table 27: Port Settings for Connecting to the CLI at User End
5. In the HyperTerminal window, enter AT.
For more information on the AT commands, see the following topics:
ValuePort Setting
9600Bits per second
8Data bits
NoneParity
1Stop bits
NoneFlow control
Related
Documentation
•
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
An OKresponse verifies that themodem cancommunicate successfullywith theCOM port on the PC or laptop.
6. Dial the modem that is connected to the console port on the services gateway by
entering ATDT remote-modem-number. For example, if the number of the modem connectedto the console porton the servicesgateway is 0013033033030, enter ATDT
0013033033030.
The services gateway login prompt appears.
7. Log in as the user root. No password is required at initial connection, but you must
assign a root password before committing any configuration settings.
• Connecting the Modem at the SRX100 Services Gateway End on page 62
• Connecting the Modem to the Console Port on the SRX100 Services Gateway on
page 63
Copyright © 2015, Juniper Networks, Inc.64
Page 83
CHAPTER 13
Providing Power to the SRX100 Services Gateway
•
Connecting the SRX100 Services Gateway to the Power Supply on page 65
•
Powering On and Powering Off the SRX100 Services Gateway on page 66
Connecting the SRX100 Services Gateway to the Power Supply
To connect the device to the power supply:
CAUTION: Before connecting the device to the power supply, attach an ESD
strap to an ESD point and place the other end of the strap around your bare wrist.
1. Plug the DC connector end of the power cable into the power connector on the back
of the device (see Figure 14 on page 65).
2. Plug the AC adapter end of the power cable into an AC power outlet.
Figure 14: Connecting the Services Gateway to the Power Supply
NOTE: The device must be connected to earth ground during normal
operation. The protective earthing terminal on the rear of the chassis is provided to connect the device to ground.
65Copyright © 2015, Juniper Networks, Inc.
Page 84
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
CAUTION: Werecommend using a surge protector for the power connection.
NOTE: Use the cable tie holder to secure the power cord on to the power
supply point.
NOTE: We strongly recommend that you use only the 3-prong power cord
supplied with your services gateway. If you are using a 2-prong power cord, then ensure that your device is adequately grounded using the grounding point available on the back panel of the chassis.
Related
Documentation
Required Tools and Parts for Installing and Maintaining the SRX100 Services Gateway
•
on page 41
• Grounding the SRX100 Services Gateway on page 57
• Connecting and Organizing Interface Cables to the SRX100 Services Gateway on
page 61
• SRX100 Services Gateway General Safety Guidelines and Warnings on page 117
Powering On and Powering Off the SRX100 Services Gateway
This topic describes the following procedures:
•
Powering On the SRX100 Services Gateway on page 66
•
Powering Off the SRX100 Services Gateway on page 67
Powering On the SRX100 Services Gateway
To power on the services gateway:
1. Ensure that you have connected the power supply to the device.
2. Insert the plug of the power supply adapter into an AC power source receptacle.
3. Turn on the power to the AC power receptacle.
The device starts automatically as the power supply completes its startup sequence. The Power LED lightsduring startupand remains onwhen thedevice is operating normally.
NOTE: After the power supply is turned on, it can take up to 60 seconds for
status indicators—such as the Status and Power LEDs—to show that the power supply is functioning normally. Ignore error indicators that appear during the first 60 seconds.
Copyright © 2015, Juniper Networks, Inc.66
Page 85
NOTE: If the system is completely powered off when you turn on the power
supply, the devicestarts as the power supply completes its startup sequence. If the device finishes starting and you need to power off the system again, first issue the CLI request system power-off command.
Powering Off the SRX100 Services Gateway
You can power off the services gateway in one of the following ways:
•
Graceful shutdown—Press and immediately release the Power button. The device begins gracefully shutting down the operating system and then powers itself off.
WARNING: Use the graceful shutdown method to power off or reboot the
services gateway.
•
Forced shutdown—Press the Power button and hold it for ten seconds. The device immediately powers itself off without shutting down the operating system.
Chapter 13: Providing Power to the SRX100 Services Gateway
WARNING: Use the forced shutdown method as a last resort to recover
the services gateway if the services gateway operating system is not responding to the graceful shutdown method.
For more information on power button, see “SRX100 Services Gateway LEDs” on page 7.
WARNING: Do not press the Powerbutton while the deviceis shutting down.
CAUTION: Forced shutdown can result in data loss and corruption of the file
system.
NOTE: To remove power completely from the device, unplug the power cord
or switch off the AC power source.
After powering off a power supply, wait at least 10 seconds before turning it back on. After powering on a power supply, wait at least 10 seconds before turning it off.
The power button on the services gateway is a standby power switch, which will not turn off the input power to the services gateway.
67Copyright © 2015, Juniper Networks, Inc.
Page 86
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
TIP: When you are powering off the device, the CLI displays the following
message:Turning the system power off. Youcan now safely remove the power cable to completely power off the device.
NOTE: You can use the request system reboot CLI command to schedule a
reboot to the services gateway using request system reboot.
For more information about halting, powering off, orrebooting the services gateway using the CLI, see the following topics:
•
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
Related
Documentation
• Connecting the SRX100 Services Gateway to the Power Supply on page 65
• Grounding the SRX100 Services Gateway on page 57
• Using the Reset Config Button on the SRX100 Services Gateway on page 102
• Changing the Reset Config Button Behavior on the SRX100 Services Gateway on
page 103
Copyright © 2015, Juniper Networks, Inc.68
Page 87
CHAPTER 14
Performing Initial Configuration
•
SRX100 Services Gateway Software Configuration Overview on page 69
•
Connecting to the SRX100 Services Gateway Setup Wizard on page 73
•
SRX100 Services Gateway Secure Web Access Overview on page 74
•
Connecting an SRX100 Services Gateway to the CLI Locally on page 75
•
Connecting an SRX100 Services Gateway to the CLI Remotely on page 76
•
Viewing Factory-Default Settings of the SRX100 Services Gateway on page 77
•
Performing Initial Software Configuration on the SRX100 Services Gateway Using the CLI on page 83
•
Performing Initial Software Configuration on the SRX100 Services Gateway Using the J-Web Interface on page 86
•
Upgrading the SRX100 Services Gateway Low Memory Version to a High Memory Version on page 90
SRX100 Services Gateway Software Configuration Overview
This topic includes the following sections:
•
Preparing the SRX100 Services Gateway for Configuration on page 69
•
Understanding the Factory Default Configuration on page 70
•
Understanding Built-In Ethernet Ports and Initial Configuration on page 70
•
Mapping the Chassis Cluster Ports on page 71
•
Understanding Management Access on page 72
Preparing the SRX100 Services Gateway for Configuration
The Juniper Networks Junos operating system (Junos OS) is preinstalled on the SRX100 Services Gateway. When the services gateway is powered on, it is ready to be configured.
You canperform the initial software configuration of the services gateway by using either the browser-based setup wizard or the command-line interface (CLI).
Before configuring the device, gather the configuration information required to deploy the device in your network. At minimum, the setup wizard requires the following information:
69Copyright © 2015, Juniper Networks, Inc.
Page 88
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
•
Device name to be used on the network
•
Password for the root user
•
Time information for the services gateway location:
•
Local time zone
•
Name or IP address of a Network Time Protocol (NTP) server, if NTP is used to set the time on the services gateway
•
Local date and time if an NTP server is not used to set the time
Understanding the Factory Default Configuration
Your services gateway comes configured with a default factory configuration. This configuration sets up the following network topology:
•
Interface fe-0/0/0 (port 0/0) is configured for Internet access. A DHCP client running on the interface enables the interface to receive its network settings—IP address, default gateway, and DNS servers—from an Internet service provider (ISP).
•
Interfaces fe-0/0/1 through fe-0/0/7 (port 0/1 through port 0/7) are configured as switched interfaces in a common VLAN on which the IP address 192.168.1.1/24 is configured.
•
A DHCP server is active on interfaces fe-0/0/1 through fe-0/0/7. The DHCP server assigns IP addresses in the 192.168.1.0/24 network to connected devices.
The default configuration also includes the following security configuration:
•
Two security zones are created: trust and untrust.
•
Interface fe-0/0/0 is in the untrust zone, while interfaces fe-0/01 through fe-0/0/7 are in the trust zone.
•
A security policy is created that permits outbound traffic from the trust zone to the untrust zone. Inbound traffic originating in the untrust zone is blocked.
•
Source Network Address Translation (NAT) is configured on the trust zone.
Understanding Built-In Ethernet Ports and Initial Configuration
During the initial configuration of the services gateway, how you use the built-in Ethernet ports (ports 0/0 through 0/7) depends on the initial configuration you are performing:
•
Configuration using autoinstallation—Use built-in Ethernet port 0/0 to connect to the DHCP server.A DHCPclient isconfiguredon thisinterface,allowingthe services gateway to receive its IP address from the DHCP server.
•
Configuration using the setup wizard—Use the following built-in Ethernet ports:
•
Port 0/1—Connect your management device to this port. A DHCP server running on this interface automatically assigns your management device an IP address in the same subnetwork as the interface, allowing your management device to communicate with the services gateway through this interface.
Copyright © 2015, Juniper Networks, Inc.70
Page 89
Chapter 14: Performing Initial Configuration
•
Port 0/0—Connect your services gateway to the Internet on this port if you plan to download purchased software licenses through the setup wizard. A DHCP client running on this interface allows it to receive its network settings from the ISP.
NOTE: Downloading of purchased licenses from the setup wizard is
available only in Junos OS Release 11.2R3 or later.
•
Configuration of a chassis cluster—Perform the initial configuration of the chassis cluster using a console connection. Before you performthe initialconfiguration, connect the built-in Ethernet ports as follows:
•
Port 0/6—Connect to the out-of-band management network for management of the device. When you enable chassis clustering as part of configuring the chassis cluster, the management interface (fxp0) is automatically created on this port.
•
Port 0/7—Connectto the other device inthe chassis cluster.When you enablechassis clustering, the control interface between the two devices (fxp1) is automatically created on this port.
You must also make another connection between the two devices for the fabric link. You can use any available Fast Ethernet port for this connection. You must configure the interface you choose as the fabric link. For more information on configuring chassis clusters, see the Security Basics.
Mapping the Chassis Cluster Ports
On theSRX100 Services Gateway, the fxp1 port is notuser configurablewhen theservices gateway is operating in chassis cluster mode.
The fxp0 port is dedicated as the out-of-band management interface for each of the devices in the chassis cluster setup and the fxp1 port is dedicated as the chassis-cluster control port.
Table 28 on page 71 shows the mapping of the chassis cluster ports.
Table 28: Mapping the Chassis Cluster Ports on an SRX100 Services Gateway
Management InterfaceFE Ports on SRX100 Services Gateway
fxp0 (management port)fe-0/0/6
fxp1 (control port)fe-0/0/7
The Junos OS automatically creates the fxp0 and fxp1 interfaces on these ports when the SRX100 Services Gateway is operating in chassis cluster mode.
For more information, see the following guides:
•
Interfaces for Security Devices
71Copyright © 2015, Juniper Networks, Inc.
Page 90
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
•
Security Basics
Understanding Management Access
Telnet allows you to connect to the services gateway and access the CLI to execute commands from a remote system. The Telnet CLI connections are not encrypted and therefore can be intercepted.
NOTE: Telnetaccess to the root user is prohibited.You must use more secure
methods, such as SSH, to log in as root.
SSH provides the following features:
•
Allows you to connect to the device and access the CLI to execute commands from a remote system
•
Encrypts traffic so that it cannot be intercepted (unlike Telnet)
•
Can be configured so that connections are authenticated by a digital certificate
Related
Documentation
•
Uses public–private key technology for both connection and authentication
The SSH client software must be installed on the machine where the client application runs. If the SSH private key is encrypted (for greater security), the SSH client must be able to access the passphrase used to decrypt the key.
For information about obtaining SSH software, see http://www.ssh.com and
http://www.openssh.com.
If you are using a Junos XML management protocol server to configure and monitor devices, you can activate cleartext access on the device to allow unencrypted text to be sent directly over a Transmission Line Protocol (TCP) connection without using any additional protocol (such as SSH, SSL, or Telnet). For more information about the Junos XML management protocol application programming interface (API), see the NETCONF
XML Management Protocol Guide.
NOTE: Information sent in cleartext is not encrypted and therefore can be
intercepted.
If the device is operating in a Common Criteria environment, see the Configuration Guides
for Junos OS Public Sector Certifications.
Connecting to the SRX100 Services Gateway Setup Wizard on page 73•
• Connecting the SRX100 Services Gateway to the CLI
• Performing Initial Software Configuration on the SRX100 Services Gateway Using the
CLI on page 83
• SRX100 Services Gateway Secure Web Access Overview on page 74
Copyright © 2015, Juniper Networks, Inc.72
Page 91
Connecting to the SRX100 Services Gateway Setup Wizard
g031007
If you plan to use the setup wizard to perform the initial configuration of the services gateway, you must connect your management device (such as a laptop or desktop computer) to one of the built-in Ethernet ports 0/1 through 0/7 on the services gateway as shown in Figure 15 on page 73. Do not use built-in Ethernet port 0/0.
Figure 15: Connecting to the Ethernet Port on an SRX100 Services Gateway
Chapter 14: Performing Initial Configuration
To enable communication between the management device and the services gateway, ports 0/1 through 0/7 are preconfigured with the IP address 192.168.1.1 and use DHCP to assign an IP address in the 192.168.1.0/24 network to any connected device.
To connect a management device to the built-in Ethernet ports:
1. Ensure that the IP address for the Ethernet port on the management device is
configured in one of the following ways:
•
The IP address is assigned by DHCP.
•
The IP address is on the 192.168.1.0/24 subnetwork (but is not 192.168.1.1).
2. Turn off the management device.
3. Plug oneend ofthe CAT-5e (Ethernet cable) into theEthernet port on the management
device.
4. Connect the other end of the Ethernet cable to a built-in Fast Ethernet port (any of
ports 0/1 through 0/7) onthe services gateway.If the servicesgateway has not already been powered on, power it on now.
5.
Wait until the Status LED on the front panel of the services gateway turns solid green.
73Copyright © 2015, Juniper Networks, Inc.
Page 92
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
6. Turn on the power to the management device. The services gateway assigns an IP
address to the management device within the 192.168.1.0/24 subnetwork if the management device is configured to use DHCP.
7. To access the setup wizard, open a Web browser on the management device and
enter the IP address 192.168.1.1 in the address field.
Related
Documentation
Connecting the SRX100 Services Gateway to the CLI•
• SRX100 Services Gateway Software Configuration Overview on page 69
• SRX100 Services Gateway Secure Web Access Overview on page 74
SRX100 Services Gateway Secure Web Access Overview
You can manage a services gateway remotely through the J-Web interface. To communicate with the services gateway, the J-Web interface uses Hypertext Transfer Protocol (HTTP). HTTP allows easy Web access but no encryption. The data that is transmitted between the Web browser and the services gateway by means of HTTP is vulnerableto interception and attack. To enable secure Web access,the services gateway supports HTTP over Secure Sockets Layer (HTTPS). You can enable HTTP or HTTPS access on specific interfaces and ports as needed.
The services gateway uses the SSL protocol to provide secure management of services gateways through the J-Web. SSL uses public-private key technology that requires a paired private key and an authentication certificate for providing the SSL service. SSL encrypts communication between your device and the Web browser with a session key negotiated by the SSL server certificate.
An SSL certificate includes identifying information such as a public key and a signature made by a certificate authority (CA). When you access the services gateway through HTTPS, an SSL handshake authenticates the server and the client and begins a secure session. If the information does not match or if the certificate has expired, your access to the services gateway through HTTPS is restricted.
Without SSL encryption, communication between your services gateway andthe browser is sentin theopen andcan be intercepted.Werecommend that you enable HTTPS access on your WAN interfaces.
For more information about configuring secure Web access, see the following topics:
•
Initial Configuration for Security Devices
•
Monitoring and Troubleshooting for Security Devices
Related
Documentation
SRX100 Services Gateway Software Configuration Overview on page 69•
• Performing Initial Software Configuration on the SRX100 Services Gateway Using the
CLI on page 83
• Performing Initial Software Configuration on the SRX100 Services Gateway Using the
J-Web Interface on page 86
Copyright © 2015, Juniper Networks, Inc.74
Page 93
Connecting an SRX100 Services Gateway to the CLI Locally
If you plan to use the CLI to configure the SRX100 Services Gateway, you must connect through the console port, as shown in Figure 16 on page 75.
Figure 16: Connecting to the Console Port on an SRX100 Services Gateway
Chapter 14: Performing Initial Configuration
NOTE: Figure 16 on page 75 shows a connection to a local management
device. A remote connection to the services gateway through a modem requires the cable and connector shown (provided in the services gateway accessorybox), plus a DB-9 male to DB-25 male (or similar) adapter for your modem, which you must purchase separately.
To connect to the CLI using a local management device through the console port on the services gateway:
1. Turn off power to the services gateway.
2. Turn off power to the management device, such as a PC or laptop computer, that you
are using to access the CLI.
3. Plug one end of the Ethernet cablesupplied with your services gateway intothe RJ-45
to DB-9 serial port adapter supplied with your services gateway (see
Figure 16 on page 75).
4. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management
device (see Figure 16 on page 75).
5. Connect the other end of the Ethernet cable to the console port on the services
gateway (see Figure 16 on page 75).
6. Turn on the power to the management device.
75Copyright © 2015, Juniper Networks, Inc.
Page 94
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
7. Start your asynchronous terminal emulation application (such as Microsoft Windows
HyperTerminal) and select the appropriate COM port to use (for example, COM1).
8. Configure the port settings shown in Table 29 on page 76.
Table 29: Console Port Settings for the SRX100 Services Gateway
9. Power on the services gateway bypressing the Power button on the front panel. Verify
that the Power LED on the front panel turns green.
ValuePort Settings
9600Bits per second
8Data bits
NoneParity
1Stop bits
NoneFlow control
The terminal emulation screen on your management device displays the startup sequence. When theservices gatewayhas finished startingup, a loginprompt appears.
10. Log in as the user root. No password is required at initial connection, but you must
assign a root password before committing any configuration settings.
Related
Documentation
SRX100 Services Gateway Basic Connectivity Overview•
• Connecting to the SRX100 Services Gateway Setup Wizard on page 73
• Connecting an SRX100 Services Gateway to the CLI Remotely on page 76
• Displaying Basic Connectivity Configurations for the SRX100 Services Gateway
• Connecting the Modem at the SRX100 Services Gateway End on page 62
Connecting an SRX100 Services Gateway to the CLI Remotely
You can connect an SRX100 Services Gateway to the CLI froma remotelocation through two dial-up modems:
•
A modem that is connected to the console port on the services gateway
•
A second modem connected to a remote management device
The modem connection allows you to remotely perform the same console operations you can perform locally.
Related
Documentation
SRX100 Services Gateway Basic Connectivity Overview•
• Connecting to the SRX100 Services Gateway Setup Wizard on page 73
• Connecting an SRX100 Services Gateway to the CLI Locally on page 75
Copyright © 2015, Juniper Networks, Inc.76
Page 95
Chapter 14: Performing Initial Configuration
• Displaying Basic Connectivity Configurations for the SRX100 Services Gateway
• Connecting the Modem at the SRX100 Services Gateway End on page 62
Viewing Factory-Default Settings of the SRX100 Services Gateway
To view the factory-default configuration of the services gateway using the CLI:
1. Verify that the services gateway is powered on.
2. Log in as the root user and provide your credentials.
3. In shell mode, navigate to the /etc/config folder.
% cd /etc/config
4. View the list of default config files.
% ls
The following sample output displays the list of factory-default configuration files:
j-series-defaults.conf srx210h-defaults.conf jsrxsme-series-defaults.conf srx210h-factory.conf jsrxsme-series-factory.conf srx210h-poe-defaults.conf junos-defaults.conf srx210h-poe-factory.conf junos-factory.conf srx210he-defaults.conf junos-fips-defaults.conf srx210he-factory.conf ptx-series-defaults.conf srx210he-poe-defaults.conf srx100-8xfe-factory.conf srx210he-poe-factory.conf srx100b-defaults.conf srx210he2-defaults.conf srx100b-factory.conf srx210he2-factory.conf srx100h-defaults.conf srx210he2-poe-defaults.conf srx100h-factory.conf srx210he2-poe-factory.conf srx100h2-defaults.conf srx220-8xge-factory.conf srx100h2-factory.conf srx220-poe-8xge-factory.conf srx110-8xfe-vdsl-factory.conf srx220h-defaults.conf srx110-8xfe-vdsl-wl-factory.conf srx220h-factory.conf srx110-8xfe-wl-factory.conf srx220h-poe-defaults.conf srx110b-defaults.conf srx220h-poe-factory.conf srx110b-va-defaults.conf srx220h2-defaults.conf srx110b-va-factory.conf srx220h2-factory.conf srx110b-vb-defaults.conf srx220h2-poe-defaults.conf srx110b-vb-factory.conf srx220h2-poe-factory.conf srx110b-wl-defaults.conf srx240-16xge-factory.conf srx110b-wl-factory.conf srx240-poe-16xge-factory.conf srx110h-defaults.conf srx240b-factory.conf srx110h-va-defaults.conf srx240b2-factory.conf srx110h-va-factory.conf srx240h-dc-defaults.conf srx110h-va-wl-defaults.conf srx240h-dc-factory.conf srx110h-va-wl-factory.conf srx240h-defaults.conf srx110h-vb-defaults.conf srx240h-factory.conf srx110h-vb-factory.conf srx240h-poe-defaults.conf srx110h-vb-wl-defaults.conf srx240h-poe-factory.conf srx110h-vb-wl-factory.conf srx240h2-dc-defaults.conf srx110h-wl-defaults.conf srx240h2-dc-factory.conf srx110h-wl-factory.conf srx240h2-defaults.conf srx110h2-va-defaults.conf srx240h2-factory.conf srx110h2-va-factory.conf srx240h2-poe-defaults.conf srx110h2-vb-defaults.conf srx240h2-poe-factory.conf
77Copyright © 2015, Juniper Networks, Inc.
Page 96
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
srx110h2-vb-factory.conf srx550-6xge-factory.conf srx210-2xge-6xfe-factory.conf srx550-defaults.conf srx210-poe-2xge-6xfe-factory.conf srx550-factory.conf srx210b-defaults.conf srx650-4xge-factory.conf srx210b-factory.conf srx650-defaults.conf srx210be-defaults.conf srx650-factory.conf srx210be-factory.conf
5. View the required default config file.
% vi config file name
For example, enter the following command to view the default configuration file for the SRX240 Services Gateway.
% vi srx240-poe-16xge-factory.conf
The followingsample output displays the factory-default configurationon anSRX240 Services Gateway:
## ## $Id: $ ## ## Copyright (c) 2009, Juniper Networks, Inc. ## All rights reserved. ## system { autoinstallation { delete-upon-commit; traceoptions { level verbose; flag { all; } } interfaces { ge-0/0/0 { bootp; } } } services { ssh; telnet; dhcp { router {
192.168.1.1; } pool 192.168.1.0/24 { address-range low 192.168.1.2 high 192.168.1.254; } propagate-settings ge-0/0/0.0; } web-management { http { interface [ vlan.0 ]; } https { system-generated-certificate; interface [ vlan.0 ]; } }
Copyright © 2015, Juniper Networks, Inc.78
Page 97
xnm-clear-text; } name-server {
208.67.222.222;
208.67.220.220; } syslog { archive size 100k files 3; } }
interfaces { ge-0/0/0 { unit 0; } ge-0/0/1 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
Chapter 14: Performing Initial Configuration
} }
ge-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/5 { unit 0 { family ethernet-switching { vlan { members vlan-trust;
79Copyright © 2015, Juniper Networks, Inc.
Page 98
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
} }
} } ge-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/7 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/8 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/9 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/10 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/11 { unit 0 { family ethernet-switching { vlan { members vlan-trust; }
Copyright © 2015, Juniper Networks, Inc.80
Page 99
}
} } ge-0/0/12 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/13 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } ge-0/0/14 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
Chapter 14: Performing Initial Configuration
} } ge-0/0/15 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } }
} } vlan { unit 0 { family inet { address 192.168.1.1/24; } } } }
poe { interface all; }
security { nat { source { rule-set trust-to-untrust {
81Copyright © 2015, Juniper Networks, Inc.
Page 100
SRX100 Services Gateway Hardware Guide for B and H Model Numbers
from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.0; } } security-zone untrust { interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } }
Copyright © 2015, Juniper Networks, Inc.82
Loading...
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use