Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks
are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
The information in this document is current as of the date on the title page.
ii
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)
Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement
(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you
agree to the terms and conditions of that EULA.
Table of Contents
1
About the Documentation | viii
Documentation and Release Notes | viii
Using the Examples in This Manual | viii
Merging a Full Example | ix
Merging a Snippet | x
Documentation Conventions | x
Documentation Feedback | xiii
Requesting Technical Support | xiii
Self-Help Online Tools and Resources | xiv
Creating a Service Request with JTAC | xiv
iii
Overview
SRX1500 Services Gateway Overview | 16
SRX1500 Services Gateway Overview | 16
SRX1500 Services Gateway Field Replaceable Units Overview | 17
Benefits of the SRX1500 Services Gateway | 17
SRX1500 Chassis | 18
SRX1500 Services Gateway Chassis Overview | 18
SRX1500 Services Gateway Front Panel | 18
Management Port LEDs | 22
Network Port LEDs | 22
HA Port LEDs | 23
SRX1500 Services Gateway Back Panel | 23
SRX1500 Cooling System | 24
SRX1500 Power System | 25
SRX1500 Services Gateway Power Supply | 25
SRX1500 Services Gateway Supported AC Power Cords | 27
SRX1500 Services Gateway AC Power Supply Electrical Specifications | 28
SRX1500 Services Gateway DC Power Supply Electrical Specifications | 28
SRX1500 Services Gateway DC Power Cable Specifications | 29
Site Planning, Preparation, and Specifications
2
3
Site Preparation Checklist for the SRX1500 Services Gateway | 31
SRX1500 Site Guidelines and Requirements | 33
SRX1500 Services Gateway General Site Installation Guidelines | 33
Use this guide to install hardware and perform initial software configuration, routine maintenance, and
troubleshooting for the SRX1500 Services Gateway. After completing the installation and basic configuration
procedures covered in this guide, refer to the Junos OS documentation for information about further
software configuration.
viii
Documentation and Release Notes
To obtain the most current version of all Juniper Networks®technical documentation, see the product
documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the documentation, follow the
product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.
These books go beyond the technical documentation to explore the nuances of network architecture,
deployment, and administration. The current list can be viewed at https://www.juniper.net/books.
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load merge relative
command. These commands cause the software to merge the incoming configuration into the current
candidate configuration. The example does not become active until you commit the candidate configuration.
If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example
is a full example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In
this case, use the load merge relative command. These procedures are described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following configuration to a file and name the file ex-script.conf. Copy the
ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
ix
2. Merge the contents of the file into your routing platform configuration by issuing the load merge
configuration mode command:
1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the
file with a name, and copy the file to a directory on your routing platform.
For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the
ex-script-snippet.conf file to the /var/tmp directory on your routing platform.
commit {
file ex-script-snippet.xsl; }
2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode
command:
[edit]
user@host# edit system scripts
[edit system scripts]
x
3. Merge the contents of the file into your routing platform configuration by issuing the load merge
relative configuration mode command:
[edit system scripts]
user@host# load merge relative /var/tmp/ex-script-snippet.conf
load complete
For more information about the load command, see CLI Explorer.
Documentation Conventions
Table 1 on page xi defines notice icons used in this guide.
Table 1: Notice Icons
xi
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Caution
Indicates a situation that might result in loss of data or hardware
damage.
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xi defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
Fixed-width text like this
Italic text like this
Represents text that you type.Bold text like this
Represents output that appears on
the terminal screen.
Introduces or emphasizes important
•
new terms.
Identifies guide names.
•
Identifies RFC and Internet draft
•
titles.
To enter configuration mode, type
the configure command:
user@host> configure
user@host> show chassis alarms
No alarms currently active
A policy term is a named structure
•
that defines match conditions and
actions.
Junos OS CLI User Guide
•
RFC 1997, BGP Communities
•
Attribute
Table 2: Text and Syntax Conventions (continued)
xii
ExamplesDescriptionConvention
Italic text like this
Text like this
< > (angle brackets)
| (pipe symbol)
Represents variables (options for
which you substitute a value) in
commands or configuration
statements.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy
levels; or labels on routing platform
components.
variables.
Indicates a choice between the
mutually exclusive keywords or
variables on either side of the symbol.
The set of choices is often enclosed
in parentheses for clarity.
Configure the machine’s domain
name:
[edit]
root@# set system domain-name
domain-name
To configure a stub area, include
•
the stub statement at the [edit
protocols ospf area area-id]
hierarchy level.
The console port is labeled
•
CONSOLE.
stub <default-metric metric>;Encloses optional keywords or
broadcast | multicast
(string1 | string2 | string3)
# (pound sign)
[ ] (square brackets)
Indention and braces ( { } )
; (semicolon)
GUI Conventions
Indicates a comment specified on the
same line as the configuration
statement to which it applies.
Encloses a variable for which you can
substitute one or more values.
Identifies a level in the configuration
hierarchy.
Identifies a leaf statement at a
configuration hierarchy level.
rsvp { # Required for dynamic MPLS
only
community name members [
community-ids ]
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Table 2: Text and Syntax Conventions (continued)
xiii
ExamplesDescriptionConvention
Bold text like this
> (bold right angle bracket)
Represents graphical user interface
(GUI) items you click or select.
Separates levels in a hierarchy of
menu selections.
In the Logical Interfaces box, select
•
All Interfaces.
To cancel the configuration, click
•
Cancel.
In the configuration editor hierarchy,
select Protocols>Ospf.
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You can use either
of the following methods:
Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper
•
Networks TechLibrary site, and do one of the following:
Click the thumbs-up icon if the information on the page was helpful to you.
•
Click the thumbs-down icon if the information on the page was not helpful to you or if you have
•
suggestions for improvement, and use the pop-up form to provide feedback.
E-mail—Send your comments to techpubs-comments@juniper.net. Include the document or topic name,
•
URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).
If you are a customer with an active Juniper Care or Partner Support Services support contract, or are
covered under warranty, and need post-sales technical support, you can access our tools and resources
online or open a case with JTAC.
JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User
•
Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,
•
365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called
the Customer Support Center (CSC) that provides you with the following features:
SRX1500 Services Gateway Field Replaceable Units Overview | 17
Benefits of the SRX1500 Services Gateway | 17
SRX1500 Services Gateway Overview
Juniper Networks SRX1500 Services Gateway expands the SRX Series family of security platforms. The
SRX1500 Services Gateway is a mid-range dynamic services gateway that consolidates security functionality
and uncompromised performance for small to medium enterprises. With advanced security and threat
mitigation capabilities, the SRX1500 Services Gateway provides campus edge Integrated Security Appliance
(ISA) support.
16
The SRX1500 Services Gateway has a modular 1U chassis with twelve 1G Ethernet ports, four 1G SFP
ports, and four 10G SFP+ ports. It contains two slots for WAN Physical Interface Modules (PIMs), one slot
for an SSD device, and two slots for power supplies.
The SRX1500 Services Gateway is available in two models:
SRX1500 (AC)–SRX1500 Services Gateway with a 120 GB SSD (with 100 GB usable space) and AC
•
power supply
SRX1500 (DC)–SRX1500 Services Gateway with a 120 GB SSD (with 100 GB usable space) and DC
•
power supply
The SRX1500 Services Gateway runs the Junos operating system (Junos OS) and supports the following
features:
Firewall support with key features such as IPsec and VPN
•
Advanced security services (IPS, AppID, UTM) and threat mitigation capabilities
The services gateway runs the Junos OS and can be managed using the CLI, Junos Space, and J-Web.
SRX1500 Services Gateway Field Replaceable Units Overview
Field-replaceable units (FRUs) are components that you can replace at your site. The power supplies are
the only FRUs on the SRX1500 Services Gateway. The power supplies (if redundant) are hot-swappable.
You can remove and replace the power supply without powering off the services gateway or disrupting
the services gateway functions.
SEE ALSO
Required Tools and Parts for Replacing the SRX1500 Services Gateway Components | 79
Replacing an AC Power Supply on the SRX1500 Services Gateway | 80
Replacing a DC Power Supply on the SRX1500 Services Gateway | 82
17
Benefits of the SRX1500 Services Gateway
High performance—The SRX1500 supports up to 9-Gbps of firewall throughput and is suited for enterprise
•
campus and data center edge deployments.
Simplified deployment with minimal manual intervention—The Zero Touch Provisioning (ZTP) feature
•
enables you to provision and configure the SRX1500 automatically, thereby reducing operational
complexity and simplifying the provisioning of new sites.
Advanced threat protection—The SRX1500 supports the intrusion prevention system (IPS), Juniper Sky
•
Advanced Threat Prevention (Juniper Sky ATP), antivirus, and antispam features, which protect against
potential vulnerabilities. Juniper Sky ATP protects against zero-day attacks and other unknown threats.
The SRX1500 Services Gateway chassis is a rigid sheet metal structure that houses all the other hardware
components. The chassis weighs 15 lb. and measures 1.75 in. high, 17.5 in. wide, and 18.2 in. deep. The
chassis installs in standard 600-mm deep (or larger) enclosed cabinets or 19-in. equipment racks.
18
CAUTION: Before removing or installing components of a functioning services
gateway, attach an electrostatic discharge (ESD) strap to an ESD point and place the
other end of the strap around your bare wrist. Failure to use an ESD strap could result
in damage to the device.
The services gateway must be connected to earth ground during normal operation. The protective earthing
terminal on the rear of the chassis is provided to connect the services gateway to ground. Additional
grounding is provided to an AC-powered services gateway when you plug its power supply into a grounded
AC power receptacle.
SRX1500 Services Gateway Front Panel
Figure 1 on page 19 shows the front panel of the SRX1500 Services Gateway. The front panel contains
LEDs, Power and Reset Config buttons, and various ports.
Figure 1: SRX1500 Services Gateway Front Panel
g000860
1234
56789101112
Table 3 on page 19 provides information about the front panel components of the services gateway.
Table 3: SRX1500 Services Gateway Front Panel Components
DescriptionComponentCallout
19
1
10/100/1000 Base-T
ports
100/1000 SFP ports2
Twelve 10/100/1000 Base-T ports.
Top: 0/0, 0/2, 0/4, 0/6, 0/8, and 0/10
Bottom: 0/1, 0/3, 0/5, 0/7, 0/9, and 0/11
The ports have the following characteristics:
Use an RJ-45 connector.
•
Operate in full-duplex and half-duplex modes.
•
Support flow control.
•
Support autonegotiation.
•
The ports can be used to:
Function as front-end network ports.
•
Provide LAN and WAN connectivity to hubs, switches, local servers, and
•
workstations.
Forward incoming data packets to the services gateway.
•
Receive outgoing data packets from the services gateway
•
Four 1-Gigabit Ethernet small form-factor pluggable (SFP) ports for network
traffic
Top: 0/12 and 0/14
Bottom: 0/13 and 0/15
1G/10G SFP+ ports3
Four 1-Gigabit Ethernet/10-Gigabit Ethernet enhanced small form-factor
pluggable (SFP+) ports for network traffic
Top: 0/16 and 0/18
Bottom: 0/17 and 0/19
Table 3: SRX1500 Services Gateway Front Panel Components (continued)
DescriptionComponentCallout
20
WAN PIM slots4
Power button5
LEDs7
Console port9
Two WAN PIM slots.
WAN PIMs are used to add WAN interfaces to the services gateway.
NOTE: The WAN PIMs are currently not available for ordering.
Use the Power button to shut down the services gateway. On a services gateway
that has been previously shut down using the Power button, when the power
button is pressed again the services gateway starts up.
Returns the services gateway to the factory-default configuration.Reset config button6
Indicate component and system status and troubleshooting information at a
glance. See Table 4 on page 21.
Use the management (MGMT) port to connect to the device over the network.Management port8
Serial—Connects a laptop to the services gateway for CLI management. The
•
port uses an RJ-45 serial connection, is configured as DTE, and supports the
RS-232 (EIA-232) standard.
USB—Connects a laptop to the services gateway for CLI management through
•
a USB interface. The port accepts a Mini-B type USB cable plug. A USB cable
with Mini-B and Type A USB plugs is supplied with the services gateway. To
use the mini-USB console port, you must download a USB driver to the
management device from the Silicon Labs page.
The services gateway has one USB port that accepts a USB storage device.USB port10
HA control port11
ESD point12
Dedicated Gigabit Ethernet SFP port to synchronize data and maintain state
information in a chassis cluster setup.
For personal safety, while working on the services gateway, use the ESD outlet
to plug in an ESD grounding strap to prevent your body from sending static
charges to the services gateway.
NOTE: For information on supported transceivers, see the Hardware Compatibility Tool. Note
that the HA control port supports only the following transceivers:
EX-SFP-1GE-LH
•
EX-SFP-1GE-LX
•
EX-SFP-1GE-SX
•
EX-SFP-1GE-SX-ET
•
QFX-SFP-1GE-LX
•
QFX-SFP-1GE-SX
•
SRX-SFP-1GE-LH
•
SRX-SFP-1GE-LX
•
SRX-SFP-1GE-LX-ET
•
SRX-SFP-1GE-SX
•
21
SRX-SFP-1GE-SX-ET
•
Figure 2 on page 21 shows the SRX1500 Services Gateway LEDs.
Figure 2: SRX1500 Services Gateway Front Panel LEDs
Table 4 on page 21 lists the SRX1500 Services Gateway LEDs.
Two power supply slots. Each power supply contains a power cord
outlet. One 400 W AC or 650 W DC power supply is provided with
the services gateway.
Four fans for cooling the services gateway and its components.Fans4
SRX1500 Cooling System
The services gateway has a single fan tray that contains four fixed fans. The fan controller constantly
monitors the temperature of the services gateway and its components. Under normal operating conditions,
the fans function at lower than full speed.
If any one of the four fans fails, the services gateway generates a warning but keeps the system running.
If the temperature keeps rising, the services gateway lowers the power consumption by reducing the
performance or shutting down some of the chassis components. However, if the ambient maximum
temperature exceeds the warning level and the system cannot be adequately cooled, then the services
gateway shuts down the system and hardware components completely.
RELATED DOCUMENTATION
SRX1500 Services Gateway Clearance Requirements for Airflow and Hardware Maintenance | 37
SRX1500 Power System
IN THIS SECTION
SRX1500 Services Gateway Power Supply | 25
SRX1500 Services Gateway Supported AC Power Cords | 27
SRX1500 Services Gateway AC Power Supply Electrical Specifications | 28
SRX1500 Services Gateway DC Power Supply Electrical Specifications | 28
SRX1500 Services Gateway DC Power Cable Specifications | 29
SRX1500 Services Gateway Power Supply
25
The power supplies are located on the rear of the chassis. The SRX1500 Services Gateway uses either one
AC or one DC power supply unit.
A second AC or DC power supply can be used with its matching type of power supply to provide redundancy.
Each power supply provides power to all components in the services gateway. When two power supplies
are present, they share power almost equally within a fully populated system. The two power supplies
provide power redundancy. If one power supply fails or is removed, the remaining power supply redistributes
the electrical load without interruption. The services gateway reassesses the power required to support
its configuration and issues errors if the available power is insufficient.
Each power supply is cooled by its own internal cooling system.
NOTE: Only redundant power supplies (AC or DC) support hot-swappable functionality.
Figure 4 on page 26 shows the AC power supply.
Figure 4: AC Power Supply for the SRX1500 Services Gateway
Figure 5 on page 26 shows the DC power supply.
Figure 5: DC Power Supply for the SRX1500 Services Gateway
26
CAUTION: Do not mix AC and DC power supplies within the same services gateway.
Damage to the device might occur.
The power supplies produce and distribute different output voltages to the services gateway components
according to their voltage requirements.
Table 9 on page 26 lists the power consumption values for the power supplies.
Table 9: Component Power Output/Consumption
Output/ConsumptionPower Supply
400 W @12 V400 W AC power supply
650 W @12 V650 W DC power supply
SEE ALSO
Powering On the SRX1500 Services Gateway | 58
Powering Off the SRX1500 Services Gateway | 59
SRX1500 Services Gateway Supported AC Power Cords
WARNING: The AC power cord for the services gateway is intended for use with the
services gateway only and not for any other use.
NOTE: In North America, AC power cords must not exceed 4.5 m (approximately 14.75 ft) in
length, to comply with National Electrical code (NEC) Section 400-8 (NFPA 75, 5-2.2) and 210-52,
and Canadian Electrical Code (CEC) Section 4-010(3).
27
Table 10 on page 27 provides power cord specifications, and Figure 6 on page 28 depicts the plug on the
AC power cord provided for each country or region.
Table 10: AC Power Cord Specifications
Plug StandardsElectrical SpecificationCountry
AS/NZ 3112-1993250 VAC, 10 A, 50 HzAustralia
250 VAC, 10 A, 50 HzChina
Japan
Hz
GB2099.1 1996 and
GB 1002 1996
(CH1-10P)
CEE (7) VII250 VAC, 10 A, 50 HzEurope (except Italy and United Kingdom)
CEI 23-16/VII250 VAC, 10 A, 50 HzItaly
JIS 8303125 VAC, 12 A, 50 or 60
NEMA 5-15125 VAC, 10 A, 60 HzNorth America
BS 1363A250 VAC, 10 A, 50 HzUnited Kingdom
Figure 6: AC Plug Types
NOTE: Power cords and cables must not block access to services gateway components or drape
where people might trip on them.
SRX1500 Services Gateway AC Power Supply Electrical Specifications
Table 11 on page 28 lists the AC power supply electrical specifications for the SRX1500 Services Gateway.
28
Table 11: AC Power Supply Electrical Specifications for the SRX1500 Services Gateway
SpecificationPower Requirement
100 to 127 V ~ 2.5 A, 200 to 240 V ~ 1.3 AAC input voltage
47 to 63 HzAC input line frequency
SRX1500 Services Gateway DC Power Supply Electrical Specifications
Table 12 on page 28 lists the DC power supply electrical specifications for the SRX1500 Services Gateway.
Table 12: DC Power Supply Electrical Specifications for the SRX1500 Services Gateway
SpecificationPower Requirement
–44 to –72 VDCDC input voltage
6.2 A maximumDC system current rating
SRX1500 Services Gateway DC Power Cable Specifications
The DC power supply in slot 0 must be powered by dedicated power feeds derived from feed A, and the
DC power supply in slot 1 must be powered by dedicated power feeds derived from feed B. This
configuration provides the commonly deployed A/B feed redundancy for the system.
CAUTION: You must ensure that power connections maintain the proper polarity.
The power source cables might be labeled (+) and (–) to indicate their polarity. There
is no standard color coding for DC power cables. The color coding used by the external
DC power source at your site determines the color coding for the leads on the power
cables that attach to the terminal studs on each power supply.
WARNING: For field-wiring connections, use copper conductors only. For other
electrical safety information, see “SRX1500 Services Gateway Electrical Wiring
Guidelines” on page 34.
29
CAUTION: Power cords and cables must not block access to services gateway
components or drape where people could trip on them.
Table 13 on page 29 summarizes the specifications for the power cable(s), which you must supply.
Table 13: SRX1500 Services Gateway DC Power Cable Specification
Quantity and SpecificationCable Type
14-16 AWG, minimum 60° C wire, or as permitted by the local codePower