Juniper SRX5800 Hardware Guide

Download

SRX5800 Services Gateway Hardware

Published

2020-12-07

Guide

Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

SRX5800 Services Gateway Hardware Guide

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that EULA.

About the Documentation | xiv

Documentation and Release Notes | xiv

Using the Examples in This Manual | xiv

Merging a Full Example | xv

Merging a Snippet | xvi

Documentation Conventions | xvi

Documentation Feedback | xix

Requesting Technical Support | xix

Self-Help Online Tools and Resources | xx

Creating a Service Request with JTAC | xx

iii

Overview

SRX5800 Services Gateway System Overview | 22

SRX5800 Services Gateway Description | 22

Benefits of the SRX5800 Services Gateway | 23

SRX5800 Services Gateway Field-Replaceable Units | 23

SRX5800 Services Gateway Component Redundancy | 24

SRX5800 Chassis | 25

SRX5800 Services Gateway Chassis | 26

SRX5800 Services Gateway Physical Specifications | 29

SRX5800 Services Gateway Midplane Description | 31

SRX5800 Services Gateway Cable Manager Description | 32

SRX5800 Services Gateway Craft Interface Overview | 33

SRX5800 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test

Button | 34

SRX5800 Services Gateway Craft Interface Host Subsystem LEDs | 34

SRX5800 Services Gateway Craft Interface Power Supply LEDs | 35

SRX5800 Services Gateway Craft Interface Card OK/Fail LEDs | 35

SRX5800 Services Gateway Craft Interface Fan LEDs | 36

SRX5800 Services Gateway Craft Interface Online Buttons | 36

SRX5800 Services Gateway Craft Interface Alarm Relay Contacts | 39

SRX5800 Services Gateway Cooling System | 41

SRX5800 Power System | 43

SRX5800 Services Gateway Power System Overview | 44

SRX5800 Services Gateway Standard-Capacity AC Power Supply | 47

SRX5800 Services Gateway Standard-Capacity AC Power Supply LEDs | 47

SRX5800 Services Gateway High-Capacity AC Power Supply | 48

SRX5800 Services Gateway High-Capacity AC Power Supply LEDs | 50

SRX5800 Services Gateway AC Power Supply Specifications | 51

AC Power Cord Specifications for the SRX5800 Services Gateway | 52

AC Power Circuit Breaker Requirements for the SRX5800 Services Gateway | 54

SRX5800 Services Gateway Standard-Capacity DC Power Supply | 54

SRX5800 Services Gateway Standard-Capacity DC Power Supply LEDs | 55

SRX5800 Services Gateway High-Capacity DC Power Supply | 56

SRX5800 Services Gateway High-Capacity DC Power Supply LEDs | 58

SRX5800 Services Gateway DC Power Supply Specifications | 59

DC Power Cable Specifications for the SRX5800 Services Gateway | 60

DC Power Cable Lug Specifications for the SRX5800 Services Gateway | 61

DC Power Circuit Breaker Requirements for the SRX5800 Services Gateway | 62

DC Power Source Cabling for the SRX5800 Services Gateway | 62

SRX5800 Services Gateway Chassis Grounding Point Specifications | 63

SRX5800 Services Gateway Grounding Cable Specifications | 64

SRX5800 Services Gateway Grounding-Cable Lug Specification | 65

SRX5800 Host Subsystem | 66

SRX5800 Services Gateway Host Subsystem Description | 66

Switch Control Board SRX5K-SCB Overview | 67

Switch Control Board SRX5K-SCB Specifications | 69

Switch Control Board SRX5K-SCBE Overview | 72

Switch Control Board SRX5K-SCBE Specifications | 73

SRX5K-SCBE LEDs | 74

Switch Control Board SRX5K-SCB3 Overview | 75

Switch Control Board SRX5K-SCB3 Specifications | 76

SRX5K-SCB3 LEDs | 77

Switch Control Board SRX5K-SCB4 Overview | 78

Switch Control Board SRX5K-SCB4 Specifications | 79

SRX5K-SCB4 LEDs | 81

Routing Engine SRX5K-RE-13-20 Overview | 81

Routing Engine SRX5K-RE-13-20 Specifications | 82

Routing Engine SRX5K-RE-1800X4 Overview | 86

SRX5K-RE-1800X4 Routing Engine Boot Sequence | 87

Routing Engine SRX5K-RE-1800X4 Specifications | 87

SRX5K-RE-1800X4 LEDs | 89

Routing Engine SRX5K-RE3-128G Specifications | 90

SRX5K-RE3-128G Routing Engine Components | 92

SRX5K-RE3-128G Routing Engine LEDs | 93

SRX5K-RE3-128G Routing Engine Boot Sequence | 94

SRX5800 Line Cards and Modules | 94

SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview | 95

Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways | 96

SRX5800 Services Gateway Card Cage and Slots | 100

SRX5800 Services Gateway SPC Description | 102

Services Processing Card SRX5K-SPC-2-10-40 Specifications | 102

Services Processing Card SRX5K-SPC-4-15-320 Specifications | 107

Services Processing Card SRX5K-SPC3 Specifications | 112

Modular Port Concentrator (SRX5K-MPC) Specifications | 116

MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP) | 118

MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP) | 124

MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP) | 129

MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP) | 131

SRX5K-MPC3-40G10G Specifications | 132

SRX5K-MPC3-100G10G Specifications | 135

SRX5K-IOC4-10G Specifications | 138

SRX5K-IOC4-MRAT Specifications | 141

SRX5800 Services Gateway Interface Card Description | 145

I/O Card SRX5K-40GE-SFP Specifications | 147

I/O Card SRX5K-4XGE-XFP Specifications | 149

Flex I/O Card (SRX5K-FPC-IOC) Specifications | 151

Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications | 153

Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications | 155

Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications | 156

Site Planning, Preparation, and Specifications

Site Preparation Checklist for the SRX5800 Services Gateway | 160

SRX5800 Site Guidelines and Requirements | 161

SRX5800 Services Gateway Environmental Specifications | 161

General Site Guidelines | 162

Site Electrical Wiring Guidelines | 163

Clearance Requirements for SRX5800 Services Gateway Airflow and Hardware

Maintenance | 163

SRX5800 Rack and Cabinet Requirements | 165

SRX5800 Services Gateway Rack-Mounting Hardware | 165

SRX5800 Services Gateway Rack Size and Strength Requirements | 165

Spacing of Rack-Mounting Bracket Holes for the SRX5800 Services Gateway | 166

Connection to Building Structure for the SRX5800 Services Gateway Rack | 166

SRX5800 Services Gateway Cabinet Size and Clearance Requirements | 167

SRX5800 Services Gateway Cabinet Airflow Requirements | 167

Calculating Power Requirements for the SRX5800 Services Gateway | 168

SRX5800 Network Cable and Transceiver Planning | 185

Routing Engine Interface Cable and Wire Specifications for the SRX5800 Services Gateway | 185

Signal Loss in Multimode and Single-Mode Fiber-Optic Cable for the SRX5800 Services

Gateway | 186

Attenuation and Dispersion in Fiber-Optic Cable for the SRX5800 Services Gateway | 186

Calculating Power Budget for Fiber-Optic Cable for the SRX5800 Services Gateway | 187

Calculating Power Margin for Fiber-Optic Cable for the SRX5800 Services Gateway | 188

SRX5800 Alarm and Management Cable Specifications and Pinouts | 189

Alarm Relay Contact Wire Specifications for the SRX5800 Services Gateway | 190

Console Port Cable and Wire Specifications for the SRX5800 Services Gateway | 190

RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Ethernet Port | 190

RJ-45 Connector Pinouts for the SRX5800 Services Gateway Routing Engine Auxiliary and

Console Ports | 191

Initial Installation and Configuration

Overview of Installing the SRX5800 Services Gateway | 194

Unpacking the SRX5800 | 195

Tools and Parts Required to Unpack the SRX5800 Services Gateway | 195

Unpacking the SRX5800 Services Gateway | 196

Verifying the SRX5800 Services Gateway Parts Received | 197

Installing the SRX5800 Mounting Hardware | 199

Tools Required to Install the SRX5800 Services Gateway | 200

Installing the SRX5800 Services Gateway Mounting Hardware for a Four-Post Rack or

Cabinet | 200

Installing the SRX5800 Services Gateway Mounting Hardware in an Open-Frame Rack | 202

Removing Components from the SRX5800 Chassis Before Installing It in the Rack | 204

vii

Removing the Power Supplies Before Installing the SRX5800 Services Gateway Chassis | 204

Removing the Cable Manager Before Installing the SRX5800 Services Gateway Chassis | 205

Removing Fan Trays Before Installing the SRX5800 Services Gateway Chassis | 206

Removing Cards Before Installing the SRX5800 Services Gateway Chassis | 208

Installing the SRX5800 Services Gateway Chassis in the Rack | 210

Reinstalling Components in the SRX5800 Services Gateway Chassis After Installing It in the

Rack | 212

Reinstalling Power Supplies After Installing the SRX5800 Services Gateway Chassis | 213

Reinstalling Fan Trays After Installing the SRX5800 Services Gateway Chassis | 214

Reinstalling Cards After Installing the SRX5800 Services Gateway Chassis | 216

Reinstalling the Cable Manager After Installing the SRX5800 Services Gateway Chassis | 218

Connecting the SRX5800 to External Devices | 219

Tools and Parts Required for SRX5800 Services Gateway Connections | 220

Connecting the SRX5800 Services Gateway to a Management Console or an Auxiliary

Device | 220

Connecting the SRX5800 Services Gateway to a Network for Out-of-Band Management | 221

Connecting an SRX5800 Services Gateway to an External Alarm-Reporting Device | 222

Connecting Network Cables to SRX5800 Services Gateway IOCs and Port Modules | 223

Connecting the SRX5800 to Power | 225

Tools and Parts Required for SRX5800 Services Gateway Grounding and Power

Connections | 226

Grounding the SRX5800 Services Gateway | 226

Connecting Power to an AC-Powered SRX5800 Services Gateway | 228

Powering On an AC-Powered SRX5800 Services Gateway | 230

Connecting Power to a DC-Powered SRX5800 Services Gateway | 232

Powering On a DC-Powered SRX5800 Services Gateway | 234

Powering Off the SRX5800 Services Gateway | 236

Performing the Initial Software Configuration for the SRX5800 | 236

SRX5800 Services Gateway Software Configuration Overview | 237

Initially Configuring the SRX5800 Services Gateway | 237

Performing Initial Software Configuration Using J-Web | 243

viii

Configuring Root Authentication and the Management Interface from the CLI | 243

Configuring Interfaces, Zones, and Policies with J-Web | 244

Maintaining Components

Maintaining the SRX5800 Chassis | 249

Routine Maintenance Procedures for the SRX5800 Services Gateway | 249

Replacing the SRX5800 Services Gateway Craft Interface | 249

Disconnecting the Alarm Relay Wires from the SRX5800 Services Gateway Craft

Interface | 249

Removing the SRX5800 Services Gateway Craft Interface | 250

Installing the SRX5800 Services Gateway Craft Interface | 251

Connecting the Alarm Relay Wires to the SRX5800 Services Gateway Craft Interface | 252

Maintaining the SRX5800 Cooling System | 253

Maintaining the Fan Trays on the SRX5800 Services Gateway | 254

Replacing an SRX5800 Services Gateway Fan Tray | 254

Removing an SRX5800 Services Gateway Fan Tray | 255

Installing an SRX5800 Services Gateway Fan Tray | 257

Maintaining the Air Filter on the SRX5800 Services Gateway | 259

Replacing the SRX5800 Services Gateway Air Filter | 260

Removing the SRX5800 Services Gateway Air Filter | 260

Installing the SRX5800 Services Gateway Air Filter | 261

Maintaining the SRX5800 Power System | 262

Maintaining SRX5800 Services Gateway Power Supplies | 263

Replacing an SRX5800 Services Gateway AC Power Supply | 264

Removing an SRX5800 Services Gateway AC Power Supply | 264

Installing an SRX5800 Services Gateway AC Power Supply | 267

Replacing an SRX5800 Services Gateway AC Power Supply Cord | 270

Disconnecting an SRX5800 Services Gateway AC Power Supply Cord | 270

Connecting an SRX5800 Services Gateway AC Power Supply Cord | 271

Replacing an SRX5800 Services Gateway DC Power Supply | 273

Removing an SRX5800 Services Gateway DC Power Supply | 273

Installing an SRX5800 Services Gateway DC Power Supply | 276

Replacing an SRX5800 Services Gateway DC Power Supply Cable | 282

Disconnecting an SRX5800 Services Gateway DC Power Supply Cable | 282

Connecting an SRX5800 Services Gateway DC Power Supply Cable | 283

Upgrading an SRX5800 Services Gateway from Standard-Capacity to High-Capacity Power

Supplies | 286

Maintaining the SRX5800 Host Subsystem | 290

Maintaining the SRX5800 Services Gateway Host Subsystem and SCBs | 290

Taking the SRX5800 Services Gateway Host Subsystem Offline | 292

Operating and Positioning the SRX5800 Services Gateway SCB Ejectors | 292

Replacing an SRX5800 Services Gateway SCB | 293

Removing an SRX5800 Services Gateway SCB | 293

Installing an SRX5800 Services Gateway SCB | 295

Replacing the SRX5800 Services Gateway Routing Engine | 297

Removing the SRX5800 Services Gateway Routing Engine | 297

Installing the SRX5800 Services Gateway Routing Engine | 299

Low Impact Hardware Upgrade for SCB3 and IOC3 | 303

In-Service Hardware Upgrade for SRX5K-RE-1800X4 and SRX5K-SCBE or SRX5K-RE-1800X4

and SRX5K-SCB3 in a Chassis Cluster | 321

Maintaining the SRX5800 Line Cards and Modules | 325

Maintaining Interface Cards and SPCs on the SRX5800 Services Gateway | 326

Replacing SRX5800 Services Gateway IOCs | 328

Removing an SRX5800 Services Gateway IOC | 328

Installing an SRX5800 Services Gateway IOC | 331

Replacing SRX5800 Services Gateway Flex IOCs | 335

Removing an SRX5800 Services Gateway Flex IOC | 335

Installing an SRX5800 Services Gateway Flex IOC | 338

Replacing SRX5800 Services Gateway Port Modules | 341

Removing an SRX5800 Services Gateway Port Module | 341

Installing an SRX5800 Services Gateway Port Module | 343

Replacing SRX5800 Services Gateway SPCs | 346

Removing an SRX5800 Services Gateway SPC | 346

Installing an SRX5800 Services Gateway SPC | 349

Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis

Cluster | 356

In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster | 359

Maintaining MICs and Port Modules on the SRX5800 Services Gateway | 362

Replacing SRX5800 Services Gateway MICs | 363

Removing an SRX5800 Services Gateway MIC | 363

Installing an SRX5800 Services Gateway MIC | 365

Replacing SRX5800 Services Gateway MPCs | 369

Removing an SRX5800 Services Gateway MPC | 369

Installing an SRX5800 Services Gateway MPC | 372

Maintaining the SRX5800 Cables and Connectors | 374

Maintaining SRX5800 Services Gateway Network Cables | 375

Replacing the Management Ethernet Cable on an SRX5800 Services Gateway | 377

Replacing the SRX5800 Services Gateway Console or Auxiliary Cable | 378

Replacing an SRX5800 Services Gateway Network Interface Cable | 379

Removing an SRX5800 Services Gateway Network Interface Cable | 379

Installing an SRX5800 Services Gateway Network Interface Cable | 380

Replacing SRX5800 Services Gateway XFP and SFP Transceivers | 382

Removing an SRX5800 Services Gateway SFP or XFP Transceiver | 382

Installing an SRX5800 Services Gateway SFP or XFP Transceiver | 384

Replacing the SRX5800 Services Gateway Cable Manager | 385

Removing the SRX5800 Services Gateway Cable Manager | 386

Installing the SRX5800 Services Gateway Cable Manager | 387

Replacing a Routing Engine in an SRX Series High-End Chassis Cluster | 388

Replacing a Routing Engine: USB Flash-Drive Method | 389

Replacing a Routing Engine: External SCP Server Method | 396

Replacing the Routing Engine: File Transfer Method | 403

Troubleshooting Hardware

Troubleshooting the SRX5800 | 410

Troubleshooting the SRX5800 Services Gateway with the Junos OS CLI | 410

Troubleshooting the SRX5800 Services Gateway with Chassis and Interface Alarm

Messages | 411

Chassis Component Alarm Conditions on SRX5400, SRX5600, and SRX5800 Services

Gateways | 411

Backup Routing Engine Alarms | 426

Troubleshooting the SRX5800 Services Gateway with Alarm Relay Contacts | 428

Troubleshooting the SRX5800 Services Gateway with the Craft Interface LEDs | 428

Troubleshooting the SRX5800 Services Gateway with the Component LEDs | 429

Troubleshooting the SRX5800 Services Gateway Cooling System | 430

Troubleshooting SRX5800 Services Gateway Interface Cards | 430

Troubleshooting SRX5800 Services Gateway MICs and Port Modules | 432

Troubleshooting SRX5800 Services Gateway SPCs | 433

Troubleshooting the SRX5800 Services Gateway Power System | 434

Behavior of the SRX5400, SRX5600, and SRX5800 Services Gateways When the SRX5K-SCBE

and SRX5K-RE-1800X4 in a Chassis Cluster Fail | 440

Contacting Customer Support and Returning the Chassis or Components

Returning the SRX5800 Chassis or Components | 443

Contacting Customer Support | 443

Return Procedure for the SRX5800 Services Gateway | 444

Listing the SRX5800 Services Gateway Component Serial Numbers with the Command-Line

Interface | 445

Locating the SRX5800 Services Gateway Chassis Serial Number Label | 446

Locating the SRX5800 Services Gateway Power Supply Serial Number Label | 447

Locating the SRX5800 Services Gateway Craft Interface Serial Number Label | 450

Information You Might Need to Supply to JTAC | 451

Required Tools and Parts for Packing the SRX5800 Services Gateway | 451

Packing the SRX5800 Services Gateway for Shipment | 452

Packing SRX5800 Services Gateway Components for Shipment | 453

Safety and Compliance Information

General Safety Guidelines and Warnings | 456

Definitions of Safety Warning Levels | 457

Restricted Access Area Warning | 461

Fire Safety Requirements | 463

Fire Suppression | 463

Fire Suppression Equipment | 464

xii

Qualified Personnel Warning | 465

Warning Statement for Norway and Sweden | 465

Installation Instructions Warning | 466

Chassis and Component Lifting Guidelines | 466

Ramp Warning | 467

Rack-Mounting and Cabinet-Mounting Warnings | 467

Grounded Equipment Warning | 473

Laser and LED Safety Guidelines and Warnings | 474

General Laser Safety Guidelines | 474

Class 1 Laser Product Warning | 475

Class 1 LED Product Warning | 476

Laser Beam Warning | 477

Radiation from Open Port Apertures Warning | 478

Maintenance and Operational Safety Guidelines and Warnings | 479

Battery Handling Warning | 480

Jewelry Removal Warning | 481

Lightning Activity Warning | 483

Operating Temperature Warning | 484

Product Disposal Warning | 486

General Electrical Safety Guidelines and Warnings | 487

Prevention of Electrostatic Discharge Damage | 488

AC Power Electrical Safety Guidelines | 489

AC Power Disconnection Warning | 491

DC Power Electrical Safety Guidelines | 492

DC Power Disconnection Warning | 494

DC Power Grounding Requirements and Warning | 496

DC Power Wiring Sequence Warning | 498

xiii

DC Power Wiring Terminations Warning | 501

DC Power Disconnection Warning | 504

DC Power Grounding Requirements and Warning | 506

DC Power Wiring Sequence Warning | 508

DC Power Wiring Terminations Warning | 511

Multiple Power Supplies Disconnection Warning | 514

TN Power Warning | 515

Action to Take After an Electrical Accident | 515

SRX5800 Services Gateway Agency Approvals | 516

SRX5800 Services Gateway Compliance Statements for EMC Requirements | 517

Canada | 517

European Community | 517

Israel | 518

Japan | 518

United States | 518

Statements of Volatility for Juniper Network Devices | 519

About the Documentation

IN THIS SECTION

Documentation and Release Notes | xiv

Using the Examples in This Manual | xiv

Documentation Conventions | xvi

Documentation Feedback | xix

Requesting Technical Support | xix

Use this guide to install hardware and perform initial software configuration, routine maintenance, and troubleshooting for the SRX5800 Services Gateway.

xiv

After completing the installation and basic configuration procedures covered in this guide, refer to the Junos OS documentation for information about further software configuration.

Documentation and Release Notes

To obtain the most current version of all Juniper Networks®technical documentation, see the product documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.

If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes.

Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at https://www.juniper.net/books.

Using the Examples in This Manual

If you want to use the examples in this manual, you can use the load merge or the load merge relative command. These commands cause the software to merge the incoming configuration into the current candidate configuration. The example does not become active until you commit the candidate configuration.

If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example is a full example. In this case, use the load merge command.

If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In this case, use the load merge relative command. These procedures are described in the following sections.

Merging a Full Example

To merge a full example, follow these steps:

1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the file with a name, and copy the file to a directory on your routing platform.

For example, copy the following configuration to a file and name the file ex-script.conf. Copy the ex-script.conf file to the /var/tmp directory on your routing platform.

system {

scripts {

commit {

file ex-script.xsl;

}

} } interfaces {

fxp0 {

disable; unit 0 {

family inet {

address 10.0.0.1/24;

}

} }

2. Merge the contents of the file into your routing platform configuration by issuing the load merge configuration mode command:

[edit] user@host# load merge /var/tmp/ex-script.conf load complete

Merging a Snippet

To merge a snippet, follow these steps:

1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the file with a name, and copy the file to a directory on your routing platform.

For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the ex-script-snippet.conf file to the /var/tmp directory on your routing platform.

commit {

file ex-script-snippet.xsl; }

2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode command:

[edit] user@host# edit system scripts [edit system scripts]

xvi

3. Merge the contents of the file into your routing platform configuration by issuing the load merge relative configuration mode command:

[edit system scripts] user@host# load merge relative /var/tmp/ex-script-snippet.conf load complete

For more information about the load command, see CLI Explorer.

Documentation Conventions

Table 1 on page xvii defines notice icons used in this guide.

Table 1: Notice Icons

xvii

DescriptionMeaningIcon

Indicates important features or instructions.Informational note

Caution

Indicates a situation that might result in loss of data or hardware damage.

Alerts you to the risk of personal injury or death.Warning

Alerts you to the risk of personal injury from a laser.Laser warning

Indicates helpful information.Tip

Alerts you to a recommended use or implementation.Best practice

Table 2 on page xvii defines the text and syntax conventions used in this guide.

Table 2: Text and Syntax Conventions

ExamplesDescriptionConvention

Fixed-width text like this

Italic text like this

Represents text that you type.Bold text like this

Represents output that appears on the terminal screen.

Introduces or emphasizes important

•

new terms.

Identifies guide names.

•

Identifies RFC and Internet draft

•

titles.

To enter configuration mode, type the configure command:

user@host> configure

user@host> show chassis alarms

No alarms currently active

A policy term is a named structure

•

that defines match conditions and actions.

Junos OS CLI User Guide

•

RFC 1997, BGP Communities

•

Attribute

Table 2: Text and Syntax Conventions (continued)

xviii

ExamplesDescriptionConvention

Italic text like this

Text like this

< > (angle brackets)

| (pipe symbol)

Represents variables (options for which you substitute a value) in commands or configuration statements.

Represents names of configuration statements, commands, files, and directories; configuration hierarchy levels; or labels on routing platform components.

variables.

Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity.

Configure the machine’s domain name:

[edit] root@# set system domain-name

domain-name

To configure a stub area, include

•

the stub statement at the [edit protocols ospf area area-id]

hierarchy level.

The console port is labeled

•

CONSOLE.

stub <default-metric metric>;Encloses optional keywords or

broadcast | multicast

(string1 | string2 | string3)

# (pound sign)

[ ] (square brackets)

Indention and braces ( { } )

; (semicolon)

GUI Conventions

Indicates a comment specified on the same line as the configuration statement to which it applies.

Encloses a variable for which you can substitute one or more values.

Identifies a level in the configuration hierarchy.

Identifies a leaf statement at a configuration hierarchy level.

rsvp { # Required for dynamic MPLS only

community name members [ community-ids ]

[edit] routing-options {

static {

route default {

nexthop address; retain;

}

Table 2: Text and Syntax Conventions (continued)

xix

ExamplesDescriptionConvention

Bold text like this

> (bold right angle bracket)

Represents graphical user interface (GUI) items you click or select.

Separates levels in a hierarchy of menu selections.

In the Logical Interfaces box, select

•

All Interfaces.

To cancel the configuration, click

•

Cancel.

In the configuration editor hierarchy, select Protocols>Ospf.

Documentation Feedback

We encourage you to provide feedback so that we can improve our documentation. You can use either of the following methods:

Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper

•

Networks TechLibrary site, and do one of the following:

Click the thumbs-up icon if the information on the page was helpful to you.

•

Click the thumbs-down icon if the information on the page was not helpful to you or if you have

•

suggestions for improvement, and use the pop-up form to provide feedback.

E-mail—Send your comments to techpubs-comments@juniper.net. Include the document or topic name,

•

URL or page number, and software version (if applicable).

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active Juniper Care or Partner Support Services support contract, or are

covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC.

JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User

•

Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.

Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.

•

JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,

•

365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features:

Find CSC offerings: https://www.juniper.net/customers/support/

•

Search for known bugs: https://prsearch.juniper.net/

•

Find product documentation: https://www.juniper.net/documentation/

•

Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/

•

Download the latest versions of software and review release notes:

•

https://www.juniper.net/customers/csc/software/

Search technical bulletins for relevant hardware and software notifications:

•

https://kb.juniper.net/InfoCenter/

Join and participate in the Juniper Networks Community Forum:

•

https://www.juniper.net/company/communities/

Create a service request online: https://myjuniper.juniper.net

•

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:

https://entitlementsearch.juniper.net/entitlementsearch/

Creating a Service Request with JTAC

You can create a service request with JTAC on the Web or by telephone.

Visit https://myjuniper.juniper.net.

•

Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

•

For international or direct-dial options in countries without toll-free numbers, see

https://support.juniper.net/support/requesting-support/.

CHAPTER

Overview

SRX5800 Services Gateway System Overview | 22

SRX5800 Chassis | 25

SRX5800 Services Gateway Cooling System | 41

SRX5800 Power System | 43

SRX5800 Host Subsystem | 66

SRX5800 Line Cards and Modules | 94

SRX5800 Services Gateway System Overview

IN THIS SECTION

SRX5800 Services Gateway Description | 22

Benefits of the SRX5800 Services Gateway | 23

SRX5800 Services Gateway Field-Replaceable Units | 23

SRX5800 Services Gateway Component Redundancy | 24

SRX5800 Services Gateway Description

The SRX5800 Services Gateway is a high-performance, highly scalable, carrier-class security device with multi-processor architecture.

The services gateway provides 12 slots that you can populate with 2 or 3 Switch Control Boards (SCBs) and up to 12 additional cards of the following types:

Services Processing Cards (SPCs) provide the processing capacity to run integrated services such as

•

firewall, IPsec, and IDP.

Modular PIC Concentrators (MPCs) provide Ethernet interfaces that connect the services gateway to

•

your network.

I/O cards (IOCs) provide Ethernet interfaces that connect the services gateway to your network.

•

Flex IOCs are similar to IOCs, but have slots for port modules that allow you greater flexibility in adding

•

different types of Ethernet ports to your services gateway.

For detailed information about the cards supported by the services gateway, see the SRX5400, SRX5600,

and SRX5800 Services Gateway Card Reference at www.juniper.net/documentation/.

Benefits of the SRX5800 Services Gateway

The SRX5800 Services Gateway is the market-leading security solution supporting up to 1.2 Tbps firewall

•

throughput and latency as low as 32 microseconds for stateful firewall, 395 million concurrent sessions, and 1 Tbps IPS. Equipped with the full range of advanced security services, massive performance, scalability, and flexibility make the SRX5800 ideal for securing large enterprise, hosted, or colocated data centers, mobile operator environments, densely consolidated processing environments, cloud and managed service providers.

IPS Capabilities - Juniper Networks IPS capabilities offer several unique features such as Protocol decodes,

•

Zero-day protection, Active/active traffic monitoring, and packet capture logging per rule assure the highest level of network security.

Content Security UTM Capabilities - The UTM services offered on the SRX5000 line of Services Gateways

•

include industry-leading antivirus, antispam, content filtering, and additional content security services.

The UTM services provide sophisticated protection from:

Antivirus experts against malware attacks that can lead to data breaches and lost productivity.

•

Advanced persistent threats perpetrated through social networking attacks and the latest phishing

•

scams with sophisticated e-mail filtering and content blockers.

Lost productivity and the impact of malicious URLs and extraneous or malicious content on the network

•

to help maintain bandwidth.

Advanced Threat Prevention (ATP) - Juniper Sky ATP, a SaaS-based service, and the Juniper ATP

•

Appliance, an on-premises solution:

Protects enterprise users from a spectrum of advanced malware that exploits “zero-day” vulnerabilities.

•

Proactively blocks malware communication channels.

•

The Juniper ATP Appliance includes support for cloud-based e-mail services such as Office 365 and

•

Google Mail, and detects threats in SMB traffic.

Single pane-of-glass management with Security Director and JSA Series integration.

•

SRX5800 Services Gateway Field-Replaceable Units

Field-replaceable units (FRUs) are services gateway components that can be replaced at the customer site. The services gateway uses the following types of FRUs:

Table 3 on page 24 lists the FRUs of the services gateway and the action to perform to install, remove, or

replace an FRU.

Table 3: Field-Replaceable Units

ActionField-Replaceable Units (FRUs)

Air filter

Fan tray

Craft interface

AC and DC power supplies (if redundant)

SFP and XFP transceivers

IOCs

Flex IOCs

Port modules of the Flex IOCs

Routing Engine

SCBs

SPCs

You need not power off the services gateway to install, remove, or replace any of these FRUs.

Power off the services gateway to install, remove, or replace any of these FRUs.

MPCs

MICs

SRX5800 Services Gateway Component Redundancy

The following major hardware components are redundant:

Switch Control Boards (SCBs)—The SRX5800 Services Gateway has two SCBs installed and you can

•

install a third SCB for switch fabric redundancy. The SCB of the host subsystem functions as the primary and the others function as backup. If the SCB of the host subsystem fails, one of the other SCBs takes over as the primary.

NOTE: The SRX5800 Services Gateway supports a redundant SCB, provided the SCB is a

SRX5K-SCBE (SCB2) running Junos OS Release 12.1X47-D15 and later, or a SRX5K-SCB3 (SCB3) running Junos OS Release 15.1X49-D10 and later. The SRX5800 Services Gateway does not support a redundant SCB (third SCB) card if SRX5K-SPC-4-15-320 (SPC2) is installed with SCB1 (SRX5K-SCB). If you have installed a SPC2 on a SRX5800 Services Gateway with a redundant SCB1 card, make sure to remove the redundant SCB1 card.

Power supplies—When powered by standard-capacity AC power supplies, a minimum of three power

•

supplies are required to supply power to a fully configured services gateway. All AC power supplies share the load evenly. The addition of a fourth power supply provides full power redundancy. If one power supply fails in a redundant configuration, the three remaining power supplies provide full power.

When powered by DC power supplies or high-capacity AC power supplies, two power supplies are required to supply power to a fully configured services gateway. One power supply supports approximately half of the components in the services gateway, and the other power supply supports the remaining components. The installation of two additional power supplies provides full power redundancy. If one or two power supplies fail, the remaining power supplies can provide full power to the services gateway.

Cooling system—The cooling system has redundant components, which are controlled by the host

•

subsystem. If one of the fans fails, the host subsystem increases the speed of the remaining fans to provide sufficient cooling for the services gateway indefinitely.

SRX5800 Chassis

IN THIS SECTION

SRX5800 Services Gateway Chassis | 26

SRX5800 Services Gateway Physical Specifications | 29

SRX5800 Services Gateway Midplane Description | 31

SRX5800 Services Gateway Cable Manager Description | 32

SRX5800 Services Gateway Craft Interface Overview | 33

SRX5800 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button | 34

SRX5800 Services Gateway Craft Interface Host Subsystem LEDs | 34

SRX5800 Services Gateway Craft Interface Power Supply LEDs | 35

SRX5800 Services Gateway Craft Interface Card OK/Fail LEDs | 35

SRX5800 Services Gateway Craft Interface Fan LEDs | 36

SRX5800 Services Gateway Craft Interface Online Buttons | 36

SRX5800 Services Gateway Craft Interface Alarm Relay Contacts | 39

SRX5800 Services Gateway Chassis

The services gateway chassis is a rigid sheet metal structure that houses all the other services gateway components (see Figure 1 on page 27, Figure 2 on page 28, and Figure 3 on page 29). The chassis measures

27.75 in. (70.49 cm) high, 17.37 in. (44.11 cm) wide, and 23.0 in. (58.42 cm) deep (from the front-mounting

flanges to the rear of the chassis). The chassis installs in 19-in. equipment racks or telco open-frame racks.

The chassis can be installed in standard 800-mm (or deeper) enclosed cabinets when powered by standard-capacity power supplies, or in 1000-mm (or deeper) enclosed cabinets when powered by high-capacity power supplies.

Up to three services gateways can be installed in one standard (48 U) rack if the rack can handle their combined weight, which can be greater than 1,134 lb (515 kg). See “SRX5800 Services Gateway Physical

Specifications” on page 29 for physical specifications for the SRX5800 Services Gateway.

Mounting hardware includes front-mounting flanges on the front of the chassis, and two center-mounting brackets attached to the center of the chassis.

WARNING: To meet safety and electromagnetic interference (EMI) requirements and

to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See “Grounding the SRX5800 Services Gateway” on page 226 for instructions.

CAUTION: Before removing or installing components of a services gateway, attach

an ESD strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap can result in damage to the services gateway.

Figure 1: Front View of a Fully Configured Services Gateway Chassis

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

MASTER

ONLINE

OFFLINE

RE0

FAN

PEM

RE1

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

FAIL

ONLINE

ACO/LT

YELLOWALARM

REDALARM

Craft interface

Front-mounting

flange

Center-mounting bracket

Air intake

Lower fan tray

Upper fan tray

Air filter tray

SCB0

Card slots 0-5

IOCs

Card slots 7-11

Routing engine

SCB1

SCB2 or Card slot 6

g030200

ESD point

CHASSISCLUSTERCONTROL0

CHASSISCLUSTERCONTROL1

CHASSISCLUSTERCONTROL0

CHASSISCLUSTERCONTROL1

SPCs

Figure 2: Rear View of a Fully Configured AC-Powered Services Gateway Chassis

Figure 3: Rear View of a Fully Configured DC-Powered Services Gateway Chassis

SRX5800 Services Gateway Physical Specifications

Table 4 on page 30 summarizes the physical specifications for the services gateway chassis.

Table 4: Physical Specifications

ValueDescription

27.75 in. (70.5 cm) highHeightChassis dimensions

17.37 in. (44.1 cm) wideWidth

Services gateway weight

Depth, with standard-capacity power supplies

Depth, with high-capacity AC power supplies

Depth, with high-capacity DC power supplies

23.0 in. (58.4 cm) deep from front-mounting bracket to chassis rear

27.8 in. (70.6 cm) total depth including cable management system

25.5 in. (64.8 cm) deep from front-mounting bracket to chassis rear

30.3 in. (77.0 cm) total depth including cable management system

27.8 in. (70.6 cm) deep from front-mounting bracket to chassis rear

32.6 in. (82.8 cm) total depth including cable management system

Chassis with midplane, fan tray, air filter, and cable manager: 150 lb (60.4 kg)

Maximum configuration: 400 lb (182 kg)

Routing Engine weight

SCB weight

SRX5K-RE-13-20: 2.4 lb (1.1 kg)

SRX5K-RE-1800X4: 2.4 lb (1.1 kg)

SRX5K-SCB: 9.6 lb (4.4 kg)

SRX5K-SCBE: 9.6 lb (4.4 kg)

SRK5K-SCB3: 10.14 lb (4.6 kg)

13.1 lb (5.9 kg)MPC weight (with two MICs)

13.1 lb (5.9 kg)IOC weight

1.1 lb (0.5 kg)Craft interface weight

4.2 lb (1.9 kg)Fan tray weight

Table 4: Physical Specifications (continued)

devices with SRX5K-SCB and SRX5K-RE-13-20)

ValueDescription

1.0 lb (0.5 kg)Air filter weight

0.3 lb (0.14 kg)Cable management weight

3.8 lb (1.7 kg)Standard-capacity DC power supply weight (only supported on

12.0 lb (5.5 kg)High-capacity DC power supply weight

5.0 lb (2.3 kg)Standard-capacity AC power supply weight (only supported on

12.0 lb (5.5 kg)High-capacity AC power supply weight

NOTE: For the weights of specific cards, Routing Engines, or port modules, see the SRX5400,

SRX5600, and SRX5800 Services Gateway Card Guide at www.juniper.net/documentation/.

SRX5800 Services Gateway Midplane Description

The midplane is located toward the rear of the chassis and forms the rear of the card cage (see

Figure 4 on page 32). IOCs, SPCs, and SCBs install into the midplane from the front of the chassis, and the

power supplies install into the midplane from the rear of the chassis. The cooling system components also connect to the midplane.

The midplane performs the following major functions:

Data path—Data packets are transferred across the midplane between the IOCs and SPCs through the

•

fabric ASICs on the SCBs.

Power distribution—The power supplies are connected to the midplane, which distributes power to all

•

the services gateway components.

Signal path—The midplane provides the signal path to the IOCs, SCBs, SPCs, Routing Engine, and other

•

system components for monitoring and control of the system.

The enhanced midplane supports Junos OS Release15.1X49-D10. It provides greater per-slot fabric performance and signal integrity, along with error-free high speed data transfer, and it reduces cross-talk. The midplane supports link speeds up to 10 Gbps and is not field replaceable.

Figure 4: Midplane

SRX5800 Services Gateway Cable Manager Description

The cable management system (see Figure 5 on page 33) is a tray located below the card cage that has a row of fourteen dividers for securing the cables for each card. Features in the cable management tray allow you to gently secure the cables with cable strips or other ties. To secure the cables in place, loop the tie through the cable anchor and secure the tie.

You can pull the cable management system up and outward to lock it into the maintenance position. This allows you to access the lower fan tray and the air filter.

Figure 5: Cable Management System

Release handles

Maintenance linkage

OK0FAIL

ONLINE

OK1FAIL

ONLINE

OK2FAIL

ONLINE

OK3FAIL

ONLINE

OK4FAIL

ONLINE

FAN

RE 0 RE 1

ACO/LT

MASTER

ONLINE

OFFLINE

PEM

0 1 2 3

FAIL

ONLINE

OK0FAIL

ONLINE

OK1FAIL

ONLINE

2 6

FAIL

ONLINE

OK7FAIL

YELLOW ALARM RED ALARM

NC NOC NC NOC

ONLINE

OK8FAIL

ONLINE

OK9FAIL

ONLINE

OK10FAIL

ONLINE

OK11FAIL

ONLINE

Alarm relay contacts

Yellow alarm LED

Red alarm LED

Alarm cutoff button

IOC and SPC LEDs and online/offline buttons

Routing Engine LEDs

Fan LEDs

PEM LEDs

g030202

SRX5800 Services Gateway Craft Interface Overview

The craft interface shows you status and troubleshooting information at a glance and lets you perform many system control functions (see Figure 6 on page 33). It is hot-insertable and hot-removable. The craft interface is located on the front of the services gateway above the upper fan tray.

Figure 6: Front Panel of the Craft Interface

NOTE: The craft interface draws its power from the SCBs installed in the SCB slots 0, 1, and 2

at the center of the card cage. At least one SCB must be installed in the services gateway for the craft interface to obtain power.

SRX5800 Services Gateway Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button

Two large alarm LEDs are located at the upper right of the craft interface. The circular red LED lights to indicate a critical condition that can result in a system shutdown. The triangular yellow LED lights to indicate a less severe condition that requires monitoring or maintenance. Both LEDs can be lit simultaneously. A condition that causes an LED to light also activates the corresponding alarm relay contact on the craft interface.

To deactivate the red and yellow alarms, press the button labeled ACO/LT (for “alarm cutoff/lamp test”), which is located to the right of the alarm LEDs. Deactivating an alarm turns off both LEDs and deactivates the device attached to the corresponding alarm relay contact on the craft interface.

Table 5 on page 34 describes the alarm LEDs and alarm cutoff button in more detail.

Table 5: Alarm LEDs and Alarm Cutoff/Lamp Test Button

DescriptionStateColorShape

On steadilyRed

On steadilyYellow

––

Critical alarm LED—Indicates a critical condition that can cause the device to stop functioning. Possible causes include component removal, failure, or overheating.

Warning alarm LED—Indicates a serious but nonfatal error condition, such as a maintenance alert or a significant increase in component temperature.

Alarm cutoff/lamp test button—Deactivates red and yellow alarms. Causes all LEDs on the craft interface to light (for testing) when pressed and held.

SRX5800 Services Gateway Craft Interface Host Subsystem LEDs

The host subsystem has three LEDs, located in the middle of the craft interface, that indicate its status. The LEDs labeled RE0 show the status of the Routing Engine and SCB in slot 0 .

The LEDs labeled RE1 show the status of the Routing Engine and SCB in slot 1. Table 6 on page 35 describes the functions of the host subsystem LEDs.

Table 6: Host Subsystem LEDs

DescriptionStateColorLabel

Host is functioning as the master.On steadilyGreenMASTER

Host is online and is functioning normally.On steadilyGreenONLINE

Host is installed but the Routing Engine is offline.On steadilyRedOFFLINE

Host is not installed.Off

SRX5800 Services Gateway Craft Interface Power Supply LEDs

Each power supply has two LEDs on the craft interface that indicate its status. The LEDs, labeled 0 through 3, are located near the middle of the craft interface next to the PEM label. Table 7 on page 35 describes

the functions of the power supply LEDs on the craft interface.

Table 7: Power Supply LEDs on the Craft Interface

DescriptionStateColorLabel

Power supply is functioning normally.On steadilyGreenPEM

Power supply has failed or power input has failed.On steadilyRed

SRX5800 Services Gateway Craft Interface Card OK/Fail LEDs

Each slot in the card cage has a pair of LEDs on the craft interface that indicates the status of the card installed in it. The card LEDs are located along the bottom edge of the craft interface and are labeled as follows:

0 through 5 on the left

•

0 and 1 for the two center slots reserved for SCBs

•

2/6 and 7 through 11 on the right

•

Table 8 on page 36 describes the functions of the OK and Fail LEDs.

Table 8: Card OK/Fail LEDs

DescriptionStateColorLabel

The card is functioning normally.On steadilyGreenOK

The card is transitioning online or offline.Blinking

The card is not online.Off

The card has failed.On steadilyRedFAIL

SRX5800 Services Gateway Craft Interface Fan LEDs

Each fan LED is located on the top left of the craft interface. Table 9 on page 36 describes the functions of the fan LEDs.

Table 9: Fan LEDs

DescriptionStateColorLabel

Fan tray is functioning normally.On steadilyGreenOK

Fan tray has failed.On steadilyRedFAIL

SRX5800 Services Gateway Craft Interface Online Buttons

The craft interface has a row of Online/Offline buttons along its lower edge. Each button corresponds to one slot in the card cage. The Online/Offline buttons are only supported for slots containing MPC interface cards. You can install MPCs into slots:

SRX5400–Any slot except bottom slot 0

•

SRX5600–Any slot except bottom slots 0 or 1

•

SRX5800–Any slot except center slots 0 or 1

•

NOTE: The Online/Offline buttons are not supported for removal and replacement of SPCs or

SCB.

CAUTION: While traffic is passing through the Services Gateway, particularly if the

device is configured as part of a high availability (HA) cluster, we strongly recommend that you do not push any of the Online/Offline buttons.

To take an MPC offline using the Online/Offline buttons:

1. Press and hold the corresponding card’s Online/Offline button on slot 1 on the craft interface. The green OK/FAIL LED next to the button begins to blink. Hold until both the button’s LED and the MPC’s LED are off.

2. Issue the CLI show chassis fpc command to check the status of installed MPCs. As shown in the sample output, the value Offline in the column labeled State indicates that the MPC in slot 1 is now offline:

user@host> show chassis fpc

Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online 35 4 0 1024 13 25 1 Online 47 3 0 1024 13 25 2 Online 37 8 0 2048 18 14

An MPC can also be taken offline via CLI command:

user@host> request chassis fpc slot 2 offline

node0:

-------------------------------------------------------------------------Offline initiated, use "show chassis fpc" to verify

{primary:node0}

user@host> show chassis fpc

node0:

------------------------------------------------------------------------- Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online 35 7 0 1024 13 25 1 Online 46 4 0 1024 13 25 2 Offline ---Offlined by cli command---

After pushing MPC online button:

user@host> show chassis fpc

Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online 34 5 0 1024 13 25 1 Online 46 3 0 1024 13 25 2 Offline ---Offlined by button press---

To bring an MPC back online using the Online/Offline buttons:

1. Press and hold the corresponding card’s Online/Offline button on slot 1 on the craft interface. The green OK/FAIL LED next to the button and the MPC’s LED begins to blink. Hold until both the button’s LED and the MPC’s LED are green and steady.

2. Issue the CLI show chassis fpc command to check the status of installed MPCs. As shown in the sample output, the value Online in the column labeled State indicates that the MPC in slot 1 is functioning normally:

Verify if the MPC is offline:

user@host> show chassis fpc

node0:

------------------------------------------------------------------------- Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online 37 23 0 2048 19 14 1 Offline ---Offlined by cli command-- 2 Online 49 37 0 1024 14 25

The command output indicates the MPC is offline.

Bring the MPC online for the first time by using the following CLI command:

user@host> request chassis fpc slot 1 online

node0:

-------------------------------------------------------------------------Online initiated, use "show chassis fpc" to verify

Verify that the MPC is online:

user@host> request chassis fpc slot 1 online node 0

node0:

-------------------------------------------------------------------------FPC 1 already online

The command output indicates the MPC is online.

Confirm that the MPC in the chassis is online:

user@host> show chassis fpc

node0:

------------------------------------------------------------------------- Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online 37 6 0 2048 19 14 1 Online 44 11 0 1024 23 29 2 Online 49 22 0 1024 14 25

SRX5800 Services Gateway Craft Interface Alarm Relay Contacts

The craft interface has two alarm relay contacts for connecting the device to external alarm devices (see

Figure 7 on page 39). Whenever a system condition triggers either the major or minor alarm on the craft

interface, the alarm relay contacts are also activated. The alarm relay contacts are located on the upper right of the craft interface.

Figure 7: Alarm Relay Contacts

The alarm relay contacts consist of two sets of connectors, one set for each of the two alarms (major and minor). For each alarm color there are three connectors. Table 10 on page 40 describes the functions of the connectors.

Table 10: Alarm Relay Contact Functions

g030297

FunctionContact NameContact Label

Normally ClosedNC

Current InC

Normally OpenNO

Connects the alarm relay to an external alarm-reporting device that activates when the circuit between C and NC is closed.

Connects the alarm relay to the current source for the external alarm-reporting device.

Connects the alarm relay to an external alarm-reporting device that activates when the circuit between C and NC is open.

Table 11 on page 40 shows the electrical specifications for the alarm relay contacts.

Table 11: Alarm Relay Contact Electrical Specifications

Current Type

DCAC

30250Maximum Voltage

8 AMaximum Current

Figure 8 on page 40 shows an example wiring diagram for a simple alarm reporting device. In this case the

device is a 12-volt light bulb that illuminates when the device encounters a condition that activates the major alarm LED and relay contacts. The alarm relay contacts can also be used to activate other devices such as bells or buzzers.

Figure 8: Example Alarm Reporting Device

SRX5800 Services Gateway Cooling System

The cooling system consists of the following components:

Upper fan tray

•

Bottom fan tray

•

Air filter tray and air filter

•

The cooling system components work together to keep all services gateway components within the acceptable temperature range (see Figure 9 on page 42, Figure 10 on page 42, Figure 11 on page 42,

Figure 12 on page 43, and Figure 13 on page 43). The services gateway has two fan trays located in the

front of the device that install horizontally above and below the card cage.

NOTE:

In the Junos OS command-line interface (CLI):

The show chassis hardware command output displays the fan trays as Fan Tray 0 for the upper

•

fan tray and Fan Tray 1 for the bottom fan tray.

The show chassis environment command output displays the fan trays as Upper Fan Tray and

•

Bottom Fan Tray.

Two different types of fan trays are available:

The standard capacity fan tray has six fans that operate at 728 cubic feet per minute (CFM) at full speed

•

and is adequate for services gateways in which standard-capacity power supplies are installed.

The high-capacity fan tray has 12 fans that operate at 976 cubic feet per minute (CFM) at full speed and

•

is required when high-capacity power supplies are installed. When high-capacity fan trays are installed, you must also install the high-capacity air filter tray.

The fan trays are interchangeable and are hot-insertable and hot-removable.

Figure 9: Airflow Through the Chassis

g004022

g030294

The host subsystem monitors the temperature of the device components. When the device is operating normally, the fans function at lower than full speed. If a fan fails or the ambient temperature rises above a threshold, the speed of the remaining fans is automatically adjusted to keep the temperature within the acceptable range. If the ambient maximum temperature specification is exceeded and the system cannot be adequately cooled, the Routing Engine shuts down the system by disabling output power from each PEM.

There is a single air intake in the front of the services gateway. Air is pushed up through an air filter, through the card cage, and then through the upper fan tray where it combines in a common exhaust plenum and is exhausted out the upper rear of the system.

Figure 10: Standard-Capacity Fan Tray (Same Upper and Bottom)

Figure 11: High-Capacity Fan Tray (Same Upper and Bottom)

Figure 12: Air Filter

g004072

g004071

g030299

Figure 13: Standard-Capacity Air Filter Tray

Figure 14: High-Capacity Air Filter Tray

SRX5800 Power System

IN THIS SECTION

SRX5800 Services Gateway Power System Overview | 44

SRX5800 Services Gateway Standard-Capacity AC Power Supply | 47

SRX5800 Services Gateway Standard-Capacity AC Power Supply LEDs | 47

SRX5800 Services Gateway High-Capacity AC Power Supply | 48

SRX5800 Services Gateway High-Capacity AC Power Supply LEDs | 50

SRX5800 Services Gateway AC Power Supply Specifications | 51

AC Power Cord Specifications for the SRX5800 Services Gateway | 52

AC Power Circuit Breaker Requirements for the SRX5800 Services Gateway | 54

SRX5800 Services Gateway Standard-Capacity DC Power Supply | 54