Sie sind auf Seite 1von 204

TheJuniper Networks

new network Sales Education


is here.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 1
SRX5600 Services Gateway
Installation and Initial
Configuration

Introduction

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 3
SRX5600 Services Gatewayy Installation and Initial
Configuration

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 4
Course Objectives

On completing this course, you will be able to install or replace the following:
• SRX5800 Services Gateway
• Switch Control Board (SCB)
• Routing Engine (RE)
• I/O Cards (IOCs)
• Services Processing Cards (SPCs)
• Small form-factor pluggable transceivers (SFPs)
• 10-Gigabit small form-factor pluggable transceivers (XFPs)
• Craft interface
• Front and rear fan trays

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 5
SRX5800 Services Gateway
Installation and Initial
Configuration

SRX5800 Services Gateway


Installation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Course Objectives
In this section, you will learn to install the Juniper
N t
Networksk SRX5800 S Services
i G
Gateway.
t
More specifically, after completing this section you
will be able to:
• Describe the SRX5800 Services Gatewayy
• Identify the SRX5800’s components.
• Prepare a site for installation
• Identify the safety procedures to be followed during
i t ll ti
installation
• List the tools and parts required to install the
SRX5800
• Unpack the SRX5800
• Install the mounting hardware
• Install the SRX5800 with a mechanical lift
• Install the SRX5800 without a mechanical lift
• Connect
C t management
g t and
d network
t k cabling
bli g
• Connect AC or DC power
• Connect the console, out-of-band network, and
interface cables
• Perform initial software configuration

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 7
SRX5800 Services Gateway Description

• 12 slots that can be populated with up to 11 Services Processing Cards (SPCs) and I/O
cards (IOCs) and two Switch Control Boards (SCBs)
• Up to 440 Gigabit Ethernet or 44 10-Gigabit Ethernet ports
• Two types of I/O Card (IOC) interface cards:
• 40-port Gigabit Ethernet IOC with SFP connectors (1000 Mbit copper and fiber only)
• 4-port
4 t 10–Gigabit
10 Gi bit Eth
Ethernett IOC with
ith XFP connectors
t

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 8
SRX5800 Services Gateway Description

SRX5800 connections between IOCs and SCBs are organized in three groups:
• Fabric: Connects the interface cards and provides for packet transport between IOCs.
• Gigabit Ethernet: The control plane of the SRX5800 chassis consists of Gigabit Ethernet
links between Switch Control Boards/Routing Engines and each IOC.
• Management: This group of signals provides for low-level status diagnostic support.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 9
SRX5800 Services Gateway Description

SRX5800 chassis:
• A rigid sheet metal structure that houses all other SRX5800 components
• 27 75 iin. (70
27.75 (70.49
49 cm)) high
high, 17
17.37
37 iin. (44
(44.11
11 cm)) wide,
id and
d 23
23.0
0 iin. (58
(58.42
42 cm)) d
deep
• I/O Cards (IOCs):
• Support up to 40xgigE or 4x10gigE
• Combine packet forwarding and Ethernet interfaces on a single board
• Each PFE consists of one I-chip
I chip for Layer 3 processing and one Layer 2 network processor
• Interface with power supplies and SCBs

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 10
SRX5800 Services Gateway Description

• Services Processing Cards (SPCs):


• Provide processing power for firewall, IPsec, and IDP
• Comprised of two or more Services Processing Units (SPUs)
• Host Subsystem:
• Provides the routing and system management functions of the SRX5800
• Comprised
C off an RE and corresponding SCB
SC

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 11

05
SRX5800 Services Gateway Description

• Routing Engine:
• Intel-based PC platform
• R
Runs J
Junos I t
Internet
t software
ft
• Maintains routing tables
• Manages routing protocols
• Controls SRX5800 interfaces
• Controls some chassis components
• Provides system management and user access interface

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 12
SRX5800 Services Gateway Description

• SCB
• Powers cards on and off
• C t l clocking,
Controls l ki g resets
t anddbbooting
ti g
• Controls system functions
• Up to three SCBs can be installed

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 13
SRX5800 Services Gateway Description

• Craft Interface:
• Alarm LEDs and Alarm Cutoff/Lamp Test Button
• Host Subsystem LEDs
• SCB LEDs
• Power Supply LEDs
• Fan LEDs
• IOC and SPC LEDs
• Online Buttons
• Alarm Relay Contacts
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 14
SRX5800 Services Gateway Description

• Power Supply:
• SRX5800 is configurable with three or four AC power supplies or
two or four DC power supplies.
supplies
• All power supplies are hot-removable and hot-insertable
Mixing AC and DC power supplies is not supported.
• Cable Management System:
• Keeps cables organized and securely in place

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 15
Safety Measures

• Permit only trained and qualified personnel to install or replace device components.
• Perform only the procedures described in the Quick Start Guide or Hardware Guide
f your d
for device.
i O Other
h services
i must b
be performed
f db
by authorized
h i d service
i personnell
only.
• Before installing the SRX5800, read the guidelines about preparing for installation
in the Quick Start Guide or Hardware Guide for your device to make sure that the
site meets power, environmental, and clearance requirements.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 16
Safety Measures

• We recommend that at least two people perform the SRX5800 installation. One
person should lift the unit into position and the other person should secure the
mo nting screws.
mounting scre s To prevent
pre ent injury,
inj r the workers
orkers should
sho ld keep their backs straight
and lift with their legs—not their backs.
• Mount the SRX5800 at the bottom of the rack if it is the only unit in the rack.
• When mounting the SRX5800 in a partially filled rack, load the rack from the bottom
to the top, with the heaviest component at the bottom of the rack.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 17
Safety Measures

• If the rack is provided with stabilizing devices, install the stabilizers before
mounting or servicing the SRX5800 in the rack.
• When removing or installing an electrical component, always place it component-
side up on a flat antistatic surface or in an electrostatic bag.
• Do not work on the system or connect or disconnect cables during electrical
storms.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 18
Safety Measures

• Before working on equipment that is connected to power lines, remove jewelry (including
rings, necklaces, and watches). Metal objects heat up when connected to power and
gro nd and can cause
ground, ca se serious
serio s burns
b rns or become welded
elded to the terminals.
terminals
• Operate the SRX5800 only when it is properly grounded.
• Do not open or remove chassis covers or sheet metal parts unless instructions are
provided in the Quick Start Guide, Hardware Guide, or this course. Such an action could
cause severe electrical shock.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 19
Safety Measures

Read the installation instructions before you connect the SRX5800 to a power source.

Do not stare into the laser beam or view it directly with optical instruments. Because
invisible radiation can be emitted from the aperture of the port when no fiber cable is
connected, avoid exposure to radiation and do not stare into open apertures.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 20
Safety Measures

• High levels of electrical energy are distributed across the SRX5800 midplane. Be careful
not to contact the midplane connectors, or any component connected to the midplane, with
an metallic object while
any hile servicing
ser icing components installed in the SRX5800.
SRX5800

These safety warnings are not meant to be comprehensive. For a complete list of warnings,
consult the SRX5800 Services Gateway Hardware Guide at
http://www.juniper.net/techpubs/
Failure to observe these safety warnings can result in serious physical injury.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 21
Preparing the Site

You can install the SRX5800 Services Gateway in:


• A four-post rack
• A cabinet
• An open-frame rack
• The rack or cabinet must accommodate the SRX5800 chassis’s external dimensions:
• 27.75 in. (70.49 cm) high
• 23.0 in. (58.42 cm) deep
• 17.37 in. (44.11 cm) wide
http://www.juniper.net/techpubs/
SRX5800 Services Gateway Environmental Specifications
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 22
Tools Required

You will need:


• 1/2-in. or 13-mm open-end or socket wrench
• #1 and #2 Phillips screwdrivers
• A 3/32-in. (2.5-mm) flat-blade screwdriver
• Wire cutters
• An ESD wrist strap
• An electrostatic bag
• 3/8-in. nut driver
• Rubber safety caps
• Blank panels to cover any slots not occupied by a component
• A mechanical lift (recommended)

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 23
Unpacking the SRX5800 Services Gateway

The SRX5800 Services Gateway is shipped in a wooden crate that contains:


• The SRX5800
• QuickStart installation instructions
• A cardboard accessory box

The SRX5800 is maximallyy p protected inside the shipping


pp g container. Do not unpack
p it until
you are ready to begin installation.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 24
Unpacking the SRX5800 Services Gateway

• Move the shipping container to a staging area as close to the installation site as possible, where you have
enough room to remove the components from the chassis.
• Position the shipping crate with the arrows pointing up.
up
• Open all the latches on the shipping crate.
• Remove the front door of the shipping crate cover and set it aside.
• Slide the remainder of the shipping crate cover off the pallet.
• Remove the plastic and foam covering the top of the SRX5800.
• Remove the accessory box, which also contains the QuickStart documentation.
• Remove the mounting shelves.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 25
Unpacking the SRX5800 Services Gateway

The SRX5800 comes with a small mounting shelf for use when center-mounting the SRX5800.

For a front-mount, open-frame rack, you need to install only the large mounting shelf.
• Remove the vapor corrosion inhibitor (VCI) packs attached to the pallet, being careful not to
break the VCI packs open.
• To remove the brackets holding the chassis on the pallet, use a 1/2-in. socket wrench and a
#2 Phillips screwdriver to remove the bolts and screws from the brackets.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 26
Unpacking the SRX5800 Services Gateway

• Store the brackets and bolts inside the accessory box.


• Using the #2 Phillips screwdriver, loosen the screws holding the bracket to the SRX5800
chassis. Pull the bracket away from the chassis. Repeat for the other mounting bracket.
• Save the shipping crate cover, pallet, and packing materials in case you need to move or
ship the SRX5800 later.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 27
Installing the Mounting Hardware

http://www.juniper.net/techpubs/hardware/.
• On the rear of each rack rail, partially insert a mounting screw into the rack hole 17.26
inches above the “U” division which will align with the bottom of the SRX5800.
• Install the large shelf on the rack. Hang the shelf over the mounting screws using the
keyhole slots located near the top of the large shelf flanges.
• Partially insert screws into the open holes in the ears of the large shelf
shelf. Tighten the
screws until the mounting shelf fits tightly on the rack.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 28
Installing the SRX5800 Services Gateway Using a Mechanical Lift

Before installing the SRX5800 in a front-mount rack, have a qualified technician verify that
the rack is strong enough to support the SRX5800's weight and is adequately supported at
the installation site.
site
• Load the SRX5800 onto the lift, ensuring that it rests securely on the lift platform.
• Using the lift, position the SRX5800 in front of the rack or cabinet, centering it in front of
the mounting shelf.
• Lift the chassis approximately 0.75 in above the surface of the mounting shelf, and position
it as close as possible to the shelf.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 29
Installing the SRX5800 Services Gateway Using a Mechanical Lift

• Carefully slide the SRX5800 onto the mounting shelf so that the bottom of the chassis and
the mounting shelf overlap by approximately two inches.
• Slide
Slid theh SRX5800 onto the h mountingi shelf
h lf untilil the
h mounting
i b brackets
k contact the
h rackk
rails. The shelf ensures that the holes in the mounting brackets and the front-mounting
flanges of the chassis align with the holes in the rack rails. Move the lift away from the rack.

You might have to pull the Cable Management System (CMS) away from the SRX5800 face
and into its locked, upright position to access all of the mounting holes.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 30
Installing the SRX5800 Services Gateway Using a Mechanical Lift

• Install a mounting screw into each of the open mounting holes aligned with the rack,
starting from the bottom.
• Visually inspect the alignment of the SRX5800. If the SRX5800 is installed properly in
the rack, all the mounting screws on one side of the rack should be aligned with the
mounting screws on the opposite side, and the SRX5800 should be level.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 31
Connecting the SRX5800 Services Gateway to Management and Alarm Devices

Connecting to a Network for Out-of-Band Management


• Turn off the power to the management device.
• Plug one end of the cable into the appropriate ETHERNET port on the Routing Engine.
Engine
• Plug the other end of the cable into the network device.
Connecting to a Management Console or Auxiliary Device
• Turn off the power to the console or auxiliary device.
• Plug one end of the cable into the appropriate AUX or CONSOLE port on the Routing Engine.
• Plug the female DB-9 end into the device’s serial port.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 32
Connecting the SRX5800 Services Gateway to Management and Alarm Devices

Connecting to an External Alarm-Reporting Device


• Make sure bare wires cannot touch each other
• Prepare the required length of wire with gauge between 28-AWG and 14-AWG (0.08 and
2.09 mm2).
• While the terminal block is not plugged into the relay contact, use a 2.5 mm flat-blade
screwdriver to loosen the small screws on its side. With the small screws on its side facing
left, insert wires into the slots in the front of the block based on the wiring for the external
device. Tighten the screws to secure the wire.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 33
Connecting the SRX5800 Services Gateway to Management and Alarm Devices

Connecting to an External Alarm-Reporting Device


• Plug the terminal block into the relay contact. Use a 2.5 mm flat-blade screwdriver to
tighten the screws on the face of each block. Attach the other end of the wires to the
external device.
• To attach a reporting device for the other kind of alarm, repeat the procedure.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 34
Connecting IOC Cables

Do not look directly into fiber interface transceivers or into the ends of fiber-optic cables.
Laser light from transceivers can cause irreversible damage to your eyes.

Do not leave a fiber-optic transceiver uncovered except when inserting or removing


cables. The safety cap keeps the port clean and prevents accidental exposure to laser
light.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 35
Connecting IOC Cables

• Ensure that you have the correct cable type for your IOC.
• If the cable connector is covered by a rubber safety plug, remove the plug. Remove the
safety caps from the ends of the cable.
• Insert the appropriate cable connector into the port on the IOC faceplate.
• Arrange the cable to prevent it from dislodging or developing stress points. Secure the
cable so that it does not support its own weight while hanging to the floor
floor. Place excess
cable out of the way in a neatly coiled loop.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 36
Connecting IOC Cables

Do not bend fiber-optic cables beyond their minimum bend radius.

Do not let fiber-optic cable hang free from the connector, and do not allow fastened
loops of cable to dangle, which stresses the cable at the fastening point.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 37
Connecting Ground and Power Cables

SRX5800s configured with DC power supplies are shipped with a blank panel installed
over the power distribution modules. SRX5800s configured with AC power supplies have
no blank panel.
panel
The SRX5800 cannot be powered from AC and DC power supplies simultaneously. The first
type of power supply detected by the SRX5800 when initially powered on determines the
type of power supply allowed by the SRX5800. All installed power supplies of the other type
are disabled by the SRX5800. If you install a power supply of the other type while the
SRX5800 is operating, the SRX5800 disables the power supply and generates an alarm.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 38
Connecting Ground and Power Cables

• In the AC power configuration, the SRX5800 contains three or four AC power supplies, located at the rear
of the chassis in slots PEM0 through PEM3 (left to right).
• Each AC power supply provides power to all components in the SRX5800.
SRX5800
• F our AC power supplies provide full power redundancy. T hree power supplies provide the maximum
configuration with full power for as long as the SRX5800 is operational.
• Each AC power supply has a corresponding AC appliance inlet located in the chassis directly above the
power supply.
• Each inlet requires a dedicated AC power feed and a dedicated 15 A (250 VAC) circuit breaker.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 39
Connecting Ground and Power Cables

To connect AC power:
• Locate the AC power cords shipped with the SRX5800.
• Attach an ESD grounding strap to your bare wrist
wrist, and connect the strap to one of the ESD points
on the chassis.
The SRX5800 is pluggable type A equipment installed in a restricted-access location. It has a
separate protective earthing terminal (the left pair is sized for M6 bolts, and the right pair is
sized for UNC 1/4
1/4-20
20 ground lugs) provided on the chassis in addition to the grounding pin
of the power supply cord. This separate protective earth terminal must be permanently
connected to earth.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 40
Connecting Ground and Power Cables

• Verify that a licensed electrician has attached the cable lug provided with the SRX5800 to the
grounding cable.
• Ensure that the grounding cable is attached to a proper earth ground.
ground
• Place the grounding cable lug over the grounding points on the bottom rear of the chassis. Secure
the grounding cable lug to the grounding points—first with the washers, and then with the screws.
• Move the power switch on the chassis directly above the power supply to the off position.
• Insert the appliance
pp coupler
p end of a p power cord into the appliance
pp inlet on the p
power supply
pp y
faceplate.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 41
Connecting Ground and Power Cables

• Insert the power cord plug into an AC power source receptacle. Dress the power cord
appropriately. Verify that the power cord does not block access to SRX5800 components or drape
where people could trip on it.
Each power supply must be connected to a dedicated AC power feed and a dedicated 15 A
(250 VAC) circuit breaker.
• Repeat this procedure for each AC power supply.
• In the DC power configuration, the SRX5800 contains either two or four DC power supplies,
located at the lower rear of the chassis in slots PEM0 through PEM3 (left to right).

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 42
Connecting Ground and Power Cables

• The DC power supplies in slots PEM0 and PEM2 provide power to the lower fan tray, IOC slots
6 through 11, and SCB slots 1 and 2. The DC power supplies in slots PEM1 and PEM3 provide
power to the upper fan tray, IOC slots 0 through 5, and SCB slot 0.
• Four power supplies provide full redundancy.
• Each DC power supply has a single DC input (–48 VDC and return) that requires a dedicated
80 A (–48 VDC) circuit breaker for the maximum SRX5800 hardware configuration.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 43
Connecting Ground and Power Cables

The SRX5800 is pluggable type A equipment installed in a restricted access location. It


has a separate protective earthing terminal (M6 and UNC 1⁄4-20 ground lugs) provided
on the chassis in addition to the grounding
gro nding pin of the power
po er supply
s ppl cord.
cord This separate
protective earth terminal must be permanently connected to earth.
To connect DC power:
• 1. Ensure that the voltage
g across the DC p
power source cable leads is 0 V,, and that there is no
chance that the cable leads might become active during installation.
There is no standard color coding for DC power cables.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 44
Connecting Ground and Power Cables

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Verify that a licensed electrician has attached the cable lug provided with the SRX5800 to the
grounding cable.
• Ensure that the grounding cable is attached to a proper earth ground.
• Place the grounding cable lug over the grounding points on the bottom rear of the chassis.
Secure the ggroundingg cable lugg to the ggroundingg p
points,, first with the washers,, then with the
screws.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 45
Connecting Ground and Power Cables

• Dress the grounding cable and verify that it does not touch or block access to SRX5800
components, and that it does not drape where people could trip on it.
• Switch
S it h th
the circuit
i it b breaker
k on th
the power supply
l ffaceplate
l t tto th
the OFF position
iti (O).
(O)
• Remove the clear plastic cover protecting the terminal studs on the faceplate.
• Loosen the captive screw on the cable restraint on the lower edge of the power supply
faceplate. Remove the cable restraint.
• Remove the nuts and washers from the RETURN terminal studs.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 46
Connecting Ground and Power Cables

• Attach the lug on the positive (+) DC source power cable to the RETURN terminal studs,
making sure the cables are not touching or in the way of any SRX5800 components.
• Secure the power cable lug to the terminal studs
studs. Apply between 23 lb-in.
lb-in (2
(2.6
6 Nm) and 25 lb-
in. (2.8 Nm) of torque to each nut.
• Remove the nuts and washers from the -48V terminal studs.
• Attach the lug on the negative (–) DC source power cable to the –48V (input) terminal studs,
ensuring that the cables are not touching or in the way of any SRX5800 components.
Secure the power cable lug to the terminal studs. Apply between 23 lb-in. (2.6 Nm) and 25 lb-
in. (2.8 Nm) of torque to each nut.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 47
Connecting Ground and Power Cables

The DC power supplies in slots PEM0 and PEM1 must be powered by dedicated power
feeds derived from feed A, and the DC power supplies in slots PEM2 and PEM3 must be
po ered b
powered by dedicated power
po er feeds derived
deri ed from feed B.
B This configuration
config ration provides
pro ides the
commonly deployed A/B feed redundancy for the system.

• Place the cable restraint over the power cables and tighten the captive screw.
• Replace the clear plastic cover over the terminal studs on the faceplate.
f Repeat this
procedure for each DC power supply.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 48
Powering the Router On/Off

To power on the SRX5800:


• Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect
the strap to one of the ESD points on the chassis.
• Verify that the power supplies are fully inserted in the chassis and that each of their
release levers is locked into the chassis in the rightmost position.
• For each power supply on an AC AC-powered
powered SRX5800, verify that the source power cord is
securely inserted into the appliance inlet.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 49
Powering the Router On/Off

For each power supply on a DC-powered SRX5800, verify that the source power cables
are connected to the appropriate terminal: the positive (+) source cable to the return
terminal (labeled RETURN) and the negative
negati e (–)
( ) so
source
rce cable to the inp
inputt terminal
(labeled –48V).
• Verify that an external management device is connected to one of the Routing Engine
ports on the Craft Interface (AUX, CONSOLE, or ETHERNET).
• Turn on the power to the external management device.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 50
Powering the Router On/Off

• For an AC-powered SRX5800, switch the AC switch in the chassis above each power
supply to the on position (—) and observe the status LEDs on each power supply
faceplate If an AC po
faceplate. powerer ssupply
ppl is correctl
correctly installed and ffunctioning
nctioning normally,
normall the AC OK
and DC OK LEDs light steadily, and the PS FAIL LED is not lit.
• For a DC-powered SRX5800, switch the circuit breaker on each of the power supplies to
the ON position and observe the status LEDs on each power supply faceplate.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 51
Performing the Initial Software Configuration

• The SRX5800 Services Gateway is shipped with the Junos Internet software preinstalled
and ready to be configured when the SRX5800 is powered on.
• There are three copies of the software:
• Nonrotating flash drive in the Routing Engine
• Rotating hard disk in the Routing Engine
• USB flash drive that can be inserted into the slot in the Routing Engine faceplate

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 52
Performing the Initial Software Configuration

You configure the SRX5800 by issuing Junos command-line interface (or CLI) commands,
either on a console device attached to Routing Engine, or over a telnet connection to a
net ork connected to the ETHERNET port on the Ro
network Routing
ting Engine.
Engine
• Name the SRX5800 will use on the network
• Domain name the SRX5800 will use
• IP address and prefix length information for the Ethernet interface
• IP address of a default router
• IP address of a DNS server
• Password for the root user
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 53
Performing the Initial Software Configuration

To configure the SRX5800:


• With the management device attached to the SRX5800’s console, power on the
SRX5800 b by turning
i the
h power supplies
li on.
• Log in as the “root” user.
• Start the CLI by typing cli.
• Enter configuration mode with the configure command.
• Configure the name of the SRX5800 by using the set system host-name command.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 54
Performing the Initial Software Configuration

• Configure the SRX5800’s domain name using the set system domain-name command.
• Configure the IP address and prefix length of the SRX5800’s management Ethernet
interface using the set interfaces fxp0 unit 0 family inet address command.
• Configure the IP address of a backup router or SRX5800 using the set system backup-
router command.
• Configure the IP address of a DNS server using the set system name-server
name server command.
command

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 55
Performing the Initial Software Configuration

• Set the root authentication password by entering a clear-text password using the set
system root-authentication plain-text-password command.
• Display the configuration to verify that it is correct, using the show command.
• Commit the configuration to activate it on the SRX5800 using the commit command.
• Notice that the SRX5800’s prompt changes, reflecting the new name of the SRX5800.
• Optionally,
Optionally configure additional properties and thenthen, commit the changes to activate
them on the SRX5800 using the commit command.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 56
Performing the Initial Software Configuration

• After configuring the SRX5800, exit configuration mode using the exit command.
• Exit the JUNOS software CLI using the exit command.
• Exit the JUNOS software shell using the exit command.
http://www.juniper.net/techpubs/software/junos

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 57
Section Summary
In this section, you learned to:
• Describe the SRX5800 Services Gateway
• Identify the SRX5800’s components
• Prepare a site for installation
• Identify the safety procedures to be followed during
installation
• List the tools and parts required to install the
SRX5800
• Unpack the SRX5800
• Install the mounting hardware
• Install the SRX5800 with a mechanical lift
• Connect the console, out-of-band network, and
interface cables
• Connect AC or DC power
• Perform initial software configuration

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 58
SRX5800 Services Gateway
Installation and Initial
Configuration

Host Subsystem Operation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to operate the host
subsystem
b t i th
in the Juniper
J i Networks
N t k SRX5800
Services Gateway.
After completing this section, you will be able to:
• Describe the host subsystem of an SRX5800
Services Gateway
• Take a host subsystem offline
• Bring a host subsystem online

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 60
Taking a Host Subsystem Offline

• On the console or other management device connected to the Routing Engine that is
paired with the SCB you are removing, enter CLI operational mode and issue this
command:
command
user@host> request system halt

The SCB might continue forwarding traffic for approximately five minutes after the request
system halt command has been issued.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 61
Bringing a Host Subsystem Online

• A host subsystem automatically comes online when both its components (SCB and RE) are
installed and powered.
• You can determine the current status of a host subsystem by issuing the show chassis
routing-engine command at the Junos software’s command-line interface.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 62
Section Summary
In this section, you learned to:
• Describe the host subsystem of an SRX5800
Services Gateway
• Take a host subsystem offline
• Bring a host subsystem online

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 63
SRX5800 Services Gateway
Installation and Initial
Configuration

Switch Control Board Removal and


Installation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives

In this section,
section you will learn to remove
and install a Switch Control Board (SCB)
in the Juniper Networks SRX5800
Services Gateway.

After completing this section, you will be


able to:
Describe the Switch Control Board of an
SRX5800 Services Gateway
Identify Switch Control Board
components
Identify the tools and parts required to
remove or install a Switch Control Board
Remove a Switch Control Board
Install a Switch Control Board

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 65
j1
Switch Control Board Description

• Powers on and powers off cards


• Controls clocking, resets and booting
• Monitors and controls system functions, including fan speed, board power status, PDM
status and control, and the system front panel
Switch Control Board Components
• Chassis management Ethernet switch
• I2C bus logic, used for low-level communication with each component
• Component redundancy circuitry
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 66
Slide 66

j1 Can you combine these next three slides into a single build/animation?
juniper, 7/1/2010
Switch Control Board Description

Switch Control Board Components


• Control Board/Routing Engine mastership mechanism
• Gigabit Ethernet switch that is connected to the embedded CPU complex on all
components
• Switch fabric—Provides the switching functions for the IOCs
• Control FPGA—Provides the PCI interface to the Routing Engine
• 1000Base-T Ethernet controller—Provides a 1-Gbps Ethernet link between the Routing
Engines
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 67
Switch Control Board Description

Switch Control Board Components


• Ethernet switch—Provides 1–Gbps link speeds between the Routing Engine and the IOCs
• Circuits for chassis management and control
• Power circuits for the Routing Engine and SCB
• LEDs—Three LEDs on the SCB indicate the status of the SCB. The LEDs, labeled FABRIC
ACTIVE, FABRIC ONLY, and OK/FAIL are located directly on the SCB

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 68
Tools and Parts Required

You will need:


• An electrostatic bag or antistatic mat
• An ESD grounding wrist strap
• A #2 Phillips screwdriver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 69
Removing a Switch Control Board

Before removing or replacing an SCB, ensure that the ejector handles are stored vertically
and pressed toward the center of the SCB.

Operating and Positioning the SCB Ejectors


• When removing or inserting an SCB, ensure that the SCBs or blank panels in adjacent slots
are fully inserted to avoid hitting them with the ejector handles. The ejector handles
require that all adjacent components be completely inserted so the ejector handles do not
hit them, which could result in damage.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 70
Removing a Switch Control Board

• The ejector handles have a center of rotation and need to be stored toward the center of the
board. Ensure the long ends of the ejectors located at both the top and the bottom of the
board are vertical.
vertical For an ejector located at the top of the board
board, press the ejector down
toward the center of the board. For an ejector located on the bottom of the board, press the
ejector up toward the center of the board.
• To insert or remove the SCB card, slide the ejector across the SCB vertically, rotate it, and
slide it again another quarter of a turn.
turn Turn the ejector again and repeat as necessary.
necessary
Utilize the indexing feature to maximize leverage and to avoid hitting any adjacent
components.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 71
Removing a Switch Control Board

• Operate both ejector handles simultaneously. The insertion force on an SCB is too great for
one ejector.

The SCB and Routing Engine are removed as a unit. You can also remove the Routing
Engine separately.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 72
Removing a Switch Control Board

To remove an SCB, follow this procedure:


• Place an electrostatic bag or antistatic mat on a flat, stable surface.
• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Disconnect any cables that may be connected to ports on the RE.
• Simultaneously rotate the ejector handles counterclockwise to unseat the SCB.
SCB
• Grasp the ejector handles and slide the SCB about halfway out of the chassis.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 73
Removing a Switch Control Board

To remove an SCB, follow this procedure:


• Place one hand underneath the SCB to support it, and slide it completely out of the
chassis.
• Place the SCB in the electrostatic bag or on the antistatic mat.
• If you are not replacing the SCB now, install a blank panel over the empty slot.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 74
Installing a Switch Control Board

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Remove the SCB from its electrostatic bag or antistatic mat.
• Slide the SCB into the chassis, carefully ensuring that it is correctly aligned with the
guides inside the chassis.
• Grasp both ejector handles and rotate them simultaneously clockwise until the SCB is
fully seated.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 75
Installing a Switch Control Board

• To verify that the SCB is functioning normally, check the LEDs on its faceplate. The
green OK/FAIL LED should light steadily a few minutes after the SCB is installed. If
the OK/FAIL LED is redred, remo
removee and install the SCB again.
again If the FAIL LED still lights
steadily, it indicates that the SCB is not functioning properly. Contact your customer
support representative.
user@host> show chassis environment cb

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 76
Section Summary
In this section, you learned to:
• Describe the Switch Control Board of an
SRX5800 Services Gateway
• Identify Switch Control Board components
• Identify the tools and parts required to
remove or install a Switch Control Board
• Remove a Switch Control Board
• Install a Switch Control Board

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 77
SRX5800 Services Gateway
Installation and Initial
Configuration

Routing Engine Removal and


Installation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
• In this section, you will learn to remove and
i t ll a Routing
install R ti Engine
E i (RE) in i the
th Juniper
J i
Networks SRX5800 Services Gateway.
After completing this section, you will be able to:
• Describe the Routing Engine of an SRX5800
Services Gateway
• Identify Routing Engine components.
• Identify the tools and parts required to remove or
install a Routing Engine
• Remove a Routing Engine
• Install a Routing Engine

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 79
Routing Engine Description

• Maintain the routing tables


• Manage the routing protocols
• Control the SRX5800’s interfaces
• Control some chassis components
• Provide the interface for system management and user access
CPU: Runs Junos Internet software to maintain the SRX5800’s routingg tables and
routing protocols.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 80
Routing Engine Description

DRAM: Provides storage for the routing and forwarding tables, and for the other
Routing Engine processes.
USB port: Provides
P id a removable bl media
di iinterface
f through
h h which
hi h you can iinstallll the
h
Junos Internet software manually.
Internal flash disk: Provides primary storage for software images, configuration files,
and microcode.
Hard disk: Provides secondary storage for the log files, memory dumps, and for
rebooting the system, if the internal flash disk fails.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 81
j2
Routing Engine Description

• LEDs: Each Routing Engine has four LEDs that indicate its status. The LEDs, labeled
MASTER, HDD, ONLINE, and FAIL are located directly on the faceplate of the Routing
Engine.
Engine
Routing Engine Interface Ports and Status Indicators
• AUX—Connects the Routing Engine to a laptop, modem, or other auxiliary device
through a cable with an RJ-45 connector.
• CONSOLE—Connects the Routing Engine to a system console through a cable with an
RJ-45 connector.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 82
Slide 82

j2 Again, combine these next three into a single build/animation


juniper, 7/1/2010
Routing Engine Description

Routing Engine Interface Ports and Status Indicators


• ETHERNET—Connects the Routing Engine through an Ethernet connection to a
management LAN (or any other device that plugs into an Ethernet connection) for
out-of-band management. The port uses an autosensing RJ-45 connector to support
the 10/100- Mbps connections. Two small LEDs on the top of the port indicate the
connection in use: the LEDs light yellow or green for a 10-Mbps connection and the
LEDs light green when traffic is passing through the port.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 83
Routing Engine Description

EEPROM: Stores the serial number of the Routing Engine.


Reset button: Reboots the Routing Engine when pressed.
Offline button: Takes the Routing Engine offline when pressed.
Extractor clips: Used for inserting and extracting the Routing Engine.
Captive screws: Secure the Routing Engine in place.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 84
Routing Engine Description

• Routing Engine Boot Sequence


• USB device
• Internal flash disk
• Hard disk
• LAN

For specific information about Routing Engine components (for example, the amount
of DRAM), issue the show chassis routing-engine command.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 85
Tools and Parts Required

You will need:


• An electrostatic bag or antistatic mat
• An ESD grounding wrist strap
• A #2 Phillips screwdriver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 86
Removing a Routing Engine

• Place an electrostatic bag or antistatic mat on a flat, stable surface.


• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Verify that the Routing Engine LEDs are off.
• Remove any cables that might be attached to the RE and arrange them out of the
way in the CMS.
• Loosen the captive screws on the top and bottom of the Routing Engine.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 87
Removing a Routing Engine

• Flip the ejector handles outward to unseat the Routing Engine.


• Grasp the Routing Engine by the ejector handles, and slide it about halfway out of the
chassis.
h i
• Place one of your hands underneath the Routing Engine to support it, and slide it
completely out of the chassis.
• Place the Routing Engine in the electrostatic bag or on the antistatic mat.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 88
Removing a Routing Engine

To maintain proper airflow through the chassis, do not leave an SCB installed in the
chassis without a Routing Engine for extended periods of time. If a Routing Engine is
remo ed a replacement Routing
removed, Ro ting Engine should
sho ld be installed as soon as possible.
possible

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 89
Installing a Routing Engine

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Remove
R the
h RE from
f its
i electrostatic
l i b
bag or antistatic
i i mat.
• Ensure the ejector handles are not in the locked position. If they are locked, flip them outward
to unlock them.
• Place one hand underneath the Routing Engine to support it. With the other hand, grasp one
of the ejector handles on the faceplate.
• Carefully align the sides of the Routing Engine with the guides inside the opening on the SCB.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 90
Installing a Routing Engine

• Slide the Routing Engine into the SCB until you feel resistance, and then press the faceplate
of the Routing Engine until it engages the connectors.
• Press both the ejector handles inward to seat the Routing Engine. Once it is seated, the
Routing Engine automatically comes online.
• Tighten the captive screws on the top and bottom of the Routing Engine. The Routing Engine
might require several minutes to boot.
• Finally, power on your SRX5800.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 91
Installing a Routing Engine

• After the Routing Engine boots, verify that it is installed correctly by checking the RE0 and
RE1 STATUS LEDs on the craft interface.
• If the SRX5800 is operational and the Routing Engine is functioning properly, the green OK LED
lights steadily.
• In case the red FAIL LED lights steadily, remove and install the Routing Engine again.
• If the red FAIL LED still lights steadily, the Routing Engine is not functioning properly. Contact your
customer
t supportt representative.
t ti
user@host> show chassis routing-engine

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 92
Section Summary
In this section, you learned to:
• Describe the Routing Engine of an SRX5800
Services Gateway
• Identify Routing Engine components
• Identify the tools and parts required to remove or
install a Routing Engine
• Remove a Routing Engine
• Install a Routing Engine

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 93
SRX5800 Services Gateway
Installation and Initial
Configuration

IOC/SPC Card Removal and


Installation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to remove and
i t ll an I/O Card
install C d (IOC) or S Services
i P
Processing
i
Card (SPC) in the Juniper Networks SRX5800
Services Gateway.
After completing this section, you will be able to:
• Describe an I/O Card or Services Processing
Card
• Identify the tools and parts required to remove
and install an I/O Card or Services Processing
Card
• Remove an I/O Card or Services Processing Card
• Install an I/O Card or Services Processing Card

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 95
IOC/SPC Description

I/O Cards (IOCs)


• Optimized for Ethernet density
• Capable
C bl off supporting
ti g up tto 40 Gig
Gigabit
bit Eth
Ethernett or 4 10-Gigabit
10 Gig bit Eth
Ethernett ports
t
• Combine packet forwarding and Ethernet interfaces on a single board, with four 10-Gbps Packet
Forwarding Engines
• Interface with the power supplies and Switch Control Boards (SCBs)
• Can be installed in any of the slots numbered 0 through 5 or 7 through 11 11, left to right
• Install vertically in the front of the device, in any combination of IOC types
• Hot-removable and hot-insertable
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 96
IOC/SPC Description

IOC Components
• IOC cover, which functions as a ground plane and a stiffener
• Fabric
F b i iinterfaces
t f
• Two Gigabit Ethernet interfaces that allow control information, route information, and statistics to
be sent between the Routing Engine and the CPU on the IOCs
• Two interfaces from the SCBs that enable the boards to be powered on and controlled
• Physical IOC connectors
• Packet Forwarding Engines

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 97
IOC/SPC Description

IOC Components
• Midplane connectors and power circuitry
• Processor subsystem, which includes a 1.2-GHz CPU, system controller, and 1 GB of SDRAM
• LEDs on the 4–port 10–Gigabit Ethernet faceplate indicate the port status. LEDs are labeled top
to bottom 0/0 through 3/0
• LEDs on the 40–port Gigabit Ethernet faceplate indicate the port status. LEDs are labeled
vertically and top to bottom 0/0 through 0/4, 0/5 though 0/9 1/0 through 1/4, 1/5 through 1/9,
2/0 through 2/4, 2/5 through 2/9, 3/0 through 3/4, and 3/5 through 3/9

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 98
IOC/SPC Description

Services Processing Cards (SPCs)


• Provide processing power to run integrated services such as firewall, IPsec and IDP
• Comprise two or more Services Processing Units (SPUs)
• Install vertically in the front of the SRX5800

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 99
IOC/SPC Description

SPC Components
• SPC cover, which functions as a ground plane and a stiffener
• Two Chassis Cluster Control ports for connecting multiple devices into a redundant chassis
cluster
• Fabric interfaces
• Two Gigabit Ethernet interfaces that allow control information, route information, and
statistics to be sent between the Routing Engine and the CPU on the SPCs

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 100
IOC/SPC Description

Handling and Storing Cards


Many components on the card are fragile. Failure to handle cards as specified in this
course can cause irreparable damage.
This section discusses how to hold cards in both the vertical and horizontal positions.
Regardless of orientation, this section uses the same terms for all four edges of the card:

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 101
IOC/SPC Description

Handling and Storing Cards


• Faceplate: Edge of the card that has connectors into which you insert the SFP or XFP
t
transceivers
i
• Top edge: Edge at the top of the card when it is vertical
• Bottom edge: Edge at the bottom of the card when it is vertical
• Connector edge: Edge opposite the faceplate; this edge has the connectors that attach to the
midplane
The instructions in this section apply to both card types.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 102
IOC/SPC Description

Holding a Card
A card weighs 13.1 lb (5.9 kg). Be prepared to accept the full weight of the card as you lift it.

• Orient the card so that the faceplate faces you. To verify orientation, confirm that the text on
the card is right-side up and the EMI strip is on the right-hand side.
• Place one hand around the card faceplate about a quarter of the way down from the top
edge. To avoid deforming the electromagnetic interference (EMI) shielding strip, do not press
hard on it.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 103
IOC/SPC Description

Holding a Card
• Place your other hand at the bottom edge of the card. If the card is horizontal before you
grasp it,
i place
l your left
l f hand
h d around d the
h ffaceplate
l andd your righti h hand
h d along
l the
h bottom
b
edge.
• If the card is vertical before you grasp it (for example, if it is installed in a routing
platform), you can place either hand around the faceplate and your other hand under the
bottom edge.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 104
IOC/SPC Description

Holding a Card
• Orient the card so that the faceplate faces you.
• Grasp the faceplate with your right hand and support the card from the bottom with your
left hand. You can rest the faceplate of the card against your body as you carry it.
• As you carry the card, do not bump it against anything. Card components are fragile.
• Never hold or grasp the card anywhere except places that this course indicates. In particular,
never grasp the connector edge, especially at the power connector in the corner where the
connector and bottom edges meet.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 105
IOC/SPC Description

Holding a Card
• Never carry the card by the faceplate with only one hand.
• Do not rest any edge of a card directly against a hard surface.
• Do not stack cards.
• If you must rest the card temporarily on an edge while changing its orientation between
vertical and horizontal, use your hand as a cushion between the edge and the surface.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 106
IOC/SPC Description

Storing a Card
• In the SRX5800
• In the container in which a spare card is shipped
• Horizontally and sheet metal side down

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 107
Tools and Parts Required

You will need:


• Rubber safety caps
• An electrostatic bag or antistatic mat
• An ESD grounding wrist strap

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 108
Removing an IOC or SPC

Before removing an IOC or SPC, make sure you have:


• A replacement card or blank panel
• An antistatic mat or electrostatic bag
• Rubber safety caps
• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• To remove an SPC, make sure the SRX5800 is powered off.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 109
Removing an IOC or SPC

To remove an IOC, take it offline by pressing its online/offline button. Hold the button until
the LED goes out.
• Alternately, you can also take the IOC offline by issuing the following CLI command:
• request chassis fpc slot slot-number offline
• Disconnect the cables from the IOC or SPC. If the card uses fiber-optic cable, immediately
cover each transceiver and the end of each cable with a rubber safety cap.
cap

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 110
Removing an IOC or SPC

Do not look directly into fiber interface transceivers or into the ends of fiber-optic cables.
Laser light from transceivers can cause irreversible damage to your eyes.
Do not leave a fiber-optic transceiver uncovered, except when inserting or removing
cables. A safety cap keeps the port clean and prevents accidental exposure to laser light.
Avoid bending fiber-optic cable beyond its minimum bend radius. An arc smaller than a
few inches in diameter can damage the cable and cause problems that are difficult to
diagnose.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 111
Removing an IOC or SPC

• Carefully secure each disconnected cable to the cable management system below the
card cage to prevent the cables from developing stress points.
• Simultaneously turn both the ejector handles counterclockwise to unseat the card.
• Grasp the handles and slide the IOC or SPC straight out of the card cage halfway.
• Place one hand around the front of the card and the other hand under it to support it.
Slide the card completely out of the chassis, and place it on the antistatic mat or in the
electrostatic bag.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 112
Removing an IOC or SPC

The weight of the card is concentrated in the back end. Be prepared to accept the full
weight—up to 13.1 lb (5.9 kg)—as you slide the IOC or SPC out of the chassis.
When the IOC or SPC is out of the chassis, do not hold it by the ejector handles, bus bars,
or edge connectors. They cannot support its weight.
Do not stack IOCs or SPCs on top of one another after removal. Place each one
individuallyy in an electrostatic bagg or on its own antistatic mat on a flat,, stable surface.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 113
Removing an IOC or SPC

• If you are not reinstalling an IOC or SPC into the emptied slot within a short time, install a
blank panel over the slot to maintain proper airflow in the card cage.

After removing an IOC or SPC from the chassis, wait at least 30 seconds before reinserting
it, removing an IOC or SPC from a different slot, or inserting an IOC or SPC into a different
slot.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 114
Installing an IOC or SPC

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Place the card on an antistatic mat or remove it from its antistatic bag.
• Verify that each fiber-optic interface has a rubber safety cap covering the transceiver. If it
is not covered, cover the transceiver with a safety cap.
• Locate the slot in the card cage in which you plan to install the IOC or SPC. If necessary,
remove the blank plate.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 115
Installing an IOC or SPC

• Orient the IOC or SPC so that the faceplate faces you, the text on the card is right-side
up, and the EMI strip is on the right-hand side.
• Lift
Lif the
h IOC or SPC iinto place
l andd carefully
f ll align
li fifirst the
h bbottom and
d then
h the
h top off
the card with the guides inside the card cage.
• Slide the IOC or SPC all the way into the card cage until you feel resistance.
• Grasp both ejector handles and rotate them simultaneously clockwise until the IOC or
SPC is fully seated.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 116
Installing an IOC or SPC

• If the card uses fiber-optic cable, remove the rubber safety cap from each transceiver.
Retrieve the cable from the Cable Management System, remove the safety caps from
the cable ends,
ends and insert the appropriate cables into the transceivers
transcei ers on the card.
card

Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables.
Fiber-optic transceivers and fiber-optic cable connected to a transceiver emit laser light
that can damage your eyes.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 117
Installing an IOC or SPC

• Secure the cables so that they are not supporting their own weight. Place the excess cable out
of the way in a neatly coiled loop, using the cable management system. Placing fasteners on a
loop helps to maintain its shape.
shape

Never let cables hang free from the connector. Do not allow fastened loops of cable to dangle,
because it stresses the cable at the fastening point.
Avoid bending fiber-optic cable beyond its minimum bend radius. An arc smaller than a few
inches in diameter can damage the cable and cause problems that are difficult to diagnose.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 118
Installing an IOC or SPC

• Power on your SRX5800, following the instructions given in Section 2.13 of this course.
• To bring the IOC or SPC online, press and hold the IOC or SPC online/offline button on the
craft interface until the green OK/FAIL LED lights steadily, which takes about 5 seconds.
• request chassis fpc slot slot-number online

After the OK LED turns green, wait at least 30 seconds before removing the card again,
removing an IOC or SPC from a different slot, or inserting an IOC or SPC in a different slot.
.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 119
Section Summary
In this section, you learned to:
• Describe an I/O Card or Services Processing
Card
• Identify the tools and parts required to remove
and install an I/O
/ Card or Services Processingg Card
• Remove an I/O Card or Services Processing Card
• Install an I/O Card or Services Processing Card

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 120
SRX5800 Services Gateway
Installation and Initial
Configuration

SFP/XFP Removal and Installation

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to remove and
i t ll a Small
install S ll Form-Factor
F F t Pluggable
Pl bl (SFP),
(SFP) or
10-Gigabit Small Form-Factor Pluggable (XFP) in
the Juniper Networks SRX5800 Services
Gateway.
After completing this section, you will be able to:
• Describe an SFP or XFP
• Identify the tools and parts required to remove
and install an SFP or XFP
• Remove an SFP or XFP
• Install an SFP or XFP

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 122
SFP/XFP Description

• Optical transceivers that are installed in an IOC


• Hot-insertable and hot-removable

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 123
Tools and Parts Required

You will need:


• A rubber safety cap
• An electrostatic bag or antistatic mat
• An ESD grounding wrist strap

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 124
Removing an SFP/XFP

• Keep a replacement SFP/XFP or an SFP/XFP slot plug, an antistatic mat or electrostatic


bag, and a rubber safety cap ready.
• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Remove the cable connector plugged into the SFP/XFP and cover the ends of the cable
with safety caps.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 125
Removing an SFP/XFP

Do not look directly into a fiber-optic transceiver or into the end of a fiber-optic cable.
Fiber-optic transceivers contain laser light sources that can damage your eyes.

• Carefully secure the disconnected cable to the cable management system below the
IOC card cage to prevent the cable from developing stress points.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 126
Removing an SFP/XFP

Avoid bending fiber-optic cable beyond its minimum bend radius. An arc smaller than a
few inches in diameter can damage the cable and cause problems that are difficult to
diagnose.
diagnose

Pull the ejector handle out from the transceiver.


Make sure that you open the ejector handle completely.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 127
Removing an SFP/XFP

• Grasp the ejector handle and pull the SFP/XFP approximately 0.5 inches (1.3 cm) out of
the IOC.
• Using your fingers, grasp the body of the transceiver and pull it the rest of the way out of
the IOC.
• Close the ejector handle and place a rubber safety cap over the optical transceiver.
• Finally, place the removed transceiver on an antistatic mat or in an electrostatic bag.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 128
Installing an SFP/XFP

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Next, take the SFP or XFP to be installed out of its electrostatic bag.
• Remove the rubber safety cap from the transceiver.
• Carefully align the SFP or XFP with the slots in the IOC. The connectors should face the
IOC
IOC.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 129
Installing an SFP/XFP

• Slide the SFP or XFP until the connector is seated in the IOC slot. If you are unable to fully
insert the transceiver, make sure the connector is facing the right way. Close the ejector
handle.
handle
• Retrieve the cable from the Cable Management System. Remove the safety caps from
the ends of the cable.
• Insert the cable into the transceiver.
• Verify that the status LEDs on the IOC faceplate indicate that the SFP or XFP is
functioning correctly.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 130
Section Summary
In this section, you learned to:
• Describe an SFP or XFP
• Identify the tools and parts required to remove
and install an SFP or XFP
• Remove an SFP or XFP
• Install an SFP or XFP

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 131
SRX5800 Services Gateway
Installation and Initial
Configuration

Craft Interface Replacement

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to replace the craft
i t f
interface on th
the JJuniper
i N
Networks
t k SRX5800
Services Gateway.
After completing this section, you will be able to:
• Describe the craft interface
• Identify the tools and parts required to replace
the craft interface
• Remove the craft interface
• I t ll th
Install the craft
ft interface
i t f

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 133
Craft Interface Description

• Alarm LEDs and Alarm Cutoff/Lamp Test button


• Power Supply LEDs
• Host Subsystem LEDs
• IOC LEDs
• SCB LEDs
• Fan LEDs
• Alarm relay contacts

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 134
Craft Interface Description

At least one SCB must be installed in the SRX5800 for the craft interface to obtain power.
• Host Subsystem LEDs
• Power Supply LEDs
• IOC/SPC LEDs
• SBC LEDs
• Fan
F LEDs
LED

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 135
Tools and Parts Required

You will need:


• Electrostatic bag or mat
• ESD grounding wrist strap
• #2 Phillips screwdriver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 136
Removing the Craft Interface

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Detach any external devices connected to the craft interface.
• Loosen the captive screws at the top left and right corners of the craft interface
faceplate.
• Grasp the craft interface faceplate and carefully tilt it toward you until it is horizontal.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 137
Removing the Craft Interface

• Locate the latch on the inside of the craft interface that connects the cable to the circuit
board socket. Grasp both sides of the latch on the inside of the craft interface and with
your
o r thumb
th mb and forefinger,
forefinger gently
gentl press both sides of the latch to disengage it.
it
• Put the craft interface into an electrostatic bag.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 138
Installing the Craft Interface

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Grasp the craft interface with one hand and hold the bottom edge of the craft interface
with the other hand to support its weight.
• Align the red line along the bottom of the internal strap with the bottom of the connector
and snap gently into place.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 139
Installing the Craft Interface

• Align the bottom of the craft interface with the sheet metal above the IOC card cage and
press it into place.
• Tighten the screws at the top left and right corners of the craft interface faceplate.
• Reattach any external devices connected to the craft interface.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 140
Section Summary
In this section, you learned to:
• Describe the craft interface
• Identify the tools and parts required to replace
the craft interface
• Remove the craft interface
• Install the craft interface

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 141
SRX5800 Services Gateway
Installation and Initial
Configuration

Fan Tray Replacement

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives

In this section, you will learn to replace the fan


trays on the Juniper Networks SRX5800 Services
Gateway.
After completing this section
section, you will be able to:
• Describe the cooling system components
• Identify the tools and parts required to replace
fan trays
• Remove a fan tray
• Install a fan tray

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 143
Cooling System Description

• Two front fan trays


• A front air filter
• All fan trays and filters are hot-insertable and hot-removable.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 144
Tools and Parts Required

You will need:


• An ESD grounding wrist strap
• A #2 Phillips screwdriver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 145
Removing a Fan Tray

• Attach an ESD grounding strap to your bare wrist, and connect the strap to
one of the ESD points on the chassis.

Before removing or replacing any component, ensure you are operating the
ejector handles properly and that they are stored correctly on all SRX5800
components.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 146
Removing a Fan Tray

• Unwrap any cables on the cable management system and remove the cables from the
tray. Arrange the cables so that they do not block the front of the cable management
s stem and tra
system tray, and secure
sec re them with
ith temporary
temporar fasteners so that they
the are not
supporting their own weight as they hang from the connector.
• If you are removing the lower fan tray, simultaneously pull the two releases labeled PULL
on the cable management system. Lift it up and outwards to lock it in place to access the
lower fan tray.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 147
Removing a Fan Tray

• Loosen the captive screw on each side of the fan tray faceplate.
• Grasp the handles and pull the fan tray out approximately 1–3 inches.

To avoid injury, keep the tools and your fingers away from the fans as you slide the fan
tray out of the chassis. The fans might still be spinning.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 148
Removing a Fan Tray

• When the fans stop spinning, press on the two latches located on the inside of the fan
tray.
• Place one hand under the fan tray to support it, and pull the fan tray completely out of the
chassis.
• Put the fan tray into an electrostatic bag.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 149
Installing a Fan Tray

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Remove
R the
h ffan tray from
f its
i electrostatic
l i b
bag.
• Grasp the fan tray by its faceplate, with your other hand beneath the fan tray to support it.
Insert it straight into the chassis.
• Tighten the captive screws on each side of the fan tray faceplate to secure it in the chassis.
• If you are installing the lower fan tray, unlock the cable management system and move it to
the fully lowered position.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 150
Section Summary
In this section, you learned to:
• Describe the cooling system components
• Identify the tools and parts required to replace
the fan trays
• Remove a fan tray
• Install a fan tray

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 151
SRX5800 Services Gateway
Installation and Initial
Configuration

Air Filter Replacement

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to replace the air
filt on the
filter th Juniper
J i Networks
N t k SRX5800 S Services
i
Gateway.
After completing this section, you will be able to:
• Describe the air filter
• Identify the tools and parts required to replace
an air filter
• Remove the air filter
• I t ll the
Install th airi filter
filt

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 153
Air Filter Description

• The air filter is hot-insertable and hot-removable.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 154
Tools and Parts Required

You will need:


• An ESD grounding wrist strap
• A #2 Phillips screwdriver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 155
Removing the Air Filter

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Unwrap any cables on the cable management system and remove the cables from the
tray. Arrange the cables so that they do not block the front of the cable management
system and tray, and secure them with temporary fasteners so that they are not
supporting their own weight as they hang from the connector.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 156
Removing the Air Filter

Do not let fiber-optic cable hang free from the connector. Do not allow fastened loops
of cable to dangle, which stresses the cable at the fastening point.
• Si l
Simultaneously l pullll the
h two releases
l labeled
l b l d PULL on the
h cable
bl management system.
• Lift it up and outwards to lock it in place to access the front air filter.
• Simultaneously slide the latches on the outer edges of the air filter tray in towards the
center of the tray.
• Slide the air filter tray out of the chassis.
• Lift the air filter out of the air filter tray.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 157
Installing the Air Filter

1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of
the ESD points on the chassis.
2.
2 E
Ensure the
h airi fil
filter iis right
i h side
id up.
3. Place the air filter into the air filter tray.
4. Insert the air filter tray into the chassis by sliding it straight into the chassis until it
stops.
5. Lower the cable management system back into position.
6. Rearrange the cables in the cable management system.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 158
Section Summary
In this section, you learned to:
• Describe the air filter
• Identify the tools and parts required to replace
an air filter
• Remove the air filter
• Install the air filter

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 159
SRX5800 Services Gateway
Installation and Initial
Configuration

AC Power Supply Replacement

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to replace an AC
power supply l on th
the JJuniper
i N
Networks
t k SRX5800
Services Gateway.
After completing this section, you will be able to:
• Describe an AC p power supplypp y
• Identify the tools and parts required to replace
an AC power supply
• Remove an AC power supply
• I t ll an AC power supply
Install l

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 161
AC Power Supply Description

• All power supplies are hot-removable and hot-insertable.

The SRX5800 cannot be powered from AC and DC power supplies simultaneously. The
first type of power supply detected by the SRX5800 when initially powered on
determines the type of power supply allowed by the SRX5800. All installed power
supplies of the other type are disabled by the SRX5800. If you install a power supply
of the other type while the SRX5800 is operating, the SRX5800 disables the power
supply and generates an alarm.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 162
AC Power Supply Description

AC Power Configuration
• The SRX5800 contains three or four AC power supplies, located vertically at the rear of the
chassis
h i in i slots
l PEM0 through
h h PEM3 (l(left
f to right).
i h)
• Each AC power supply provides power to all components in the SRX5800.
• Four AC power supplies provide full power redundancy.
• Three power supplies provide the maximum configuration with full power for as long as the
SRX5800 is operational.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 163
AC Power Supply Description

• Each AC power supply has a corresponding AC appliance inlet located in the chassis directly
above the power supply.
• Each
E h requires
i addedicated
di d AC power ffeedd and
dad dedicated
di d 15A (250 VAC) circuit
i i b breaker.
k
The SRX5800 is pluggable type A equipment installed in a restricted-access location. It has a
separate protective earthing terminal (the left pair is sized for M6 bolts, and the right pair is
sized for UNC 1/4-20 ground lugs) provided on the chassis in addition to the grounding pin
of the power supply cord. This separate protective earth terminal must be permanently
connected to earth.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 164
AC Power Supply Description

AC Power Supply Specifications

AC Power Supply LEDs

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 165
Tools and Parts Required

You will need:


• An ESD grounding wrist strap

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 166
Removing an AC Power Supply

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.

Do not leave a power supply slot empty for more than a short time while the SRX5800 is
operational.

After powering off a power supply, wait at least 60 seconds before turning it back on.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 167
Removing an AC Power Supply

• .Switch the circuit breaker in the chassis above the power supply to the OFF position (O).
• Remove the AC power cable from the corresponding AC appliance inlet located in the
chassis directly above the power supply.
• While grasping the handle on the power supply faceplate with one hand, use your other
hand to pull the spring-loaded locking pin in the release lever away from the chassis and
turn the release lever counterclockwise until it stops.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 168
Removing an AC Power Supply

• Let go of the locking pin in the release lever. Ensure that the pin is seated inside the
corresponding hole in the chassis.
• Pull the power supply straight out of the chassis and place it in an electrostatic bag.

Do not touch the power connector on the top of the power supply. It can contain dangerous
voltages.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 169
Installing an AC Power Supply

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Move the power switch in the chassis above the empty power supply slot to the off
position (O).
• Ensure that the release lever below the empty power supply slot is locked in the
counterclockwise position.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 170
Installing an AC Power Supply

• If necessary, pull the spring-loaded locking pin in the release lever away from the
chassis and turn the release lever counterclockwise until it stops. Let go of the locking
pin in the release lever.
le er Ensure
Ens re that the pin is seated inside the corresponding hole in
the chassis.
• Using both hands, slide the power supply straight into the chassis until the power
supply is fully seated in the chassis slot. The power supply faceplate should be flush
with any adjacent power supply faceplates.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 171
Installing an AC Power Supply

• The small tab on the metal housing that is controlled by the release lever must be inside
of the corresponding slot at the bottom of the power supply. This tab is used to pull the
po er ssupply
power ppl down
do n in the chassis slot,
slot prior to removing
remo ing the power
po er supply.
s ppl
• While firmly pushing the handle on the power supply faceplate with one hand, use your
other hand to pull the spring-loaded locking pin in the release lever away from the
chassis and turn the release lever clockwise until it stops.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 172
Installing an AC Power Supply

• Let go of the locking pin in the release lever. Ensure that the pin is seated inside the
corresponding hole in the chassis.
• Insert the plug on the AC power cord into the appliance inlet located in the chassis directly
above the power supply.
• Move the power switch in the chassis above the power supply to the ON position (—) and
observe the status LEDs on the power supply faceplate. If the power supply is correctly
installed and functioning normally, the AC OK and DC OK LEDs light steadily, and the PS
FAIL LED is not lit.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 173
Section Summary
In this section, you learned to:
• Describe an AC power supply
• Identify the tools and parts required to replace
an AC power supply
• Remove an AC power supply
• Install an AC power supply

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 174
SRX5800 Services Gateway
Installation and Initial
Configuration

DC Power Supply Replacement

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn to replace a DC
power supply l on th
the JJuniper
i N
Networks
t k SRX5800
Services Gateway.
After completing this section, you will be able to:
• Describe a DC p power supply
pp y
• Identify the tools and parts required to replace a
DC power supply
• Remove a DC power supply
• I t ll a DC power supply
Install l

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 176
DC Power Supply Description

• Each power supply weighs approximately 3.8 lb (1.7 kg), and is hot-insertable and hot-
removable.
DC Power Supply Specifications
DC Power Supply LEDs

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 177
Tools and Parts Required

You will need:


• An ESD grounding wrist strap
• A 3/8-in. nut driver
• Wire cutters

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 178
Removing a DC Power Supply

Do not leave a power supply slot empty for more than a short time while the SRX5800
is operational. The power supply must remain in the chassis for proper airflow;
alternatel you
alternately, o may
ma install a blank panel.
panel

After powering off a power supply, wait at least 60 seconds before turning it back on.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 179
Removing a DC Power Supply

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the
ESD points on the chassis.
• Switch the circuit breaker on the power supply faceplate to the OFF position (O).
• Remove the clear plastic cover protecting the terminal studs on the faceplate.
• Loosen the captive screw on the cable restraint on the lower edge of the power supply
faceplate.
• Remove the nuts and washers from the terminal studs.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 180
Removing a DC Power Supply

• Remove the cable lugs from the terminal studs.


• While grasping the handle on the power supply faceplate with one hand, use your other
h d to pullll the
hand h spring-loaded
i l d d locking
l ki pin i in
i the
h release
l llever away ffrom the
h chassis
h i and d
turn the release lever counterclockwise until it stops.
• Let go of the locking pin in the release lever. Ensure that the pin is seated inside the
corresponding hole in the chassis.
• Pull the power supply straight out of the chassis.
• Put the power supply in an electrostatic bag.
© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 181
Removing a DC Power Supply

Do not touch the power connector on the top of the power supply. It can contain dangerous
voltages.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 182
Installing a DC Power Supply

There is no standard color coding for DC power cables. The color coding used by the
external DC power source at your site determines the color coding for the leads on the
po er cables that attach to the terminal st
power studs
ds on each power
po er supply.
s ppl You
Yo must
m st ensure
ens re that
power connections maintain the proper polarity. The power source cables might be labeled
(+) and (–) to indicate their polarity.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 183
Installing a DC Power Supply

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Switch the circuit breaker on the power supply faceplate to the OFF position.
• Ensure that the release lever below the empty power supply slot is locked in the
counterclockwise position.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 184
Installing a DC Power Supply

• If necessary, pull the spring-loaded locking pin in the release lever away from the chassis
and turn the release lever counterclockwise until it stops. Let go of the locking pin in the
release lever.
le er Ensure
Ens re that the pin is seated inside the corresponding hole in the chassis
chassis.
• Using both hands, slide the power supply straight into the chassis until the power supply is
fully seated in the chassis slot. The power supply faceplate should be flush with any
adjacent power supply faceplates.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 185
Installing a DC Power Supply

• The small tab on the metal housing that is controlled by the release lever must be inside of
the corresponding slot at the bottom of the power supply. This tab is used to pull the power
s ppl down
supply do n in the chassis slot
slot, prior to removing
remo ing the power
po er supply.
s ppl
• While firmly pushing the handle on the power supply faceplate with one hand, use your
other hand to pull the spring-loaded locking pin in the release lever away from the chassis
and turn the release lever clockwise until it stops.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 186
Installing a DC Power Supply

• Let go of the locking pin in the release lever. Ensure that the pin is seated inside the
corresponding hole in the chassis.
• Remove the clear plastic cover protecting the terminal studs on the faceplate.
• Loosen the captive screw on the cable restraint on the lower edge of the power supply
faceplate. Remove the cable restraint.
• Remove the nuts and washers from the RTN (return) terminal studs.
studs

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 187
Installing a DC Power Supply

• Attach the positive (+) DC power source cable lug to the RTN (return) terminal studs.
• Secure the power cable lug to the terminal studs. Apply between 23 lb-in. (2.6 Nm) and 25
lb i (2
lb-in (2.8
8NNm)) off torque to each
h nut.
• Remove the nuts and washers from the 48V (input) terminal studs.
• Attach the negative (–) DC source power cable lug to the –48-V (input) terminal.
• Secure the power cable lug to the terminal studs. Apply between 23 lb-in. (2.6 Nm) and 25
lb-in (2.8 Nm) of torque to each nut.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 188
Installing a DC Power Supply

• A The DC power supplies in slots PEM0 and PEM1 must be powered by dedicated power
feeds derived from feed A, and the DC power supplies in slots PEM2 and PEM3 must be
po ered b
powered by dedicated power
po er feeds derived
deri ed from feed B.
B This configuration
config ration provides
pro ides the
commonly deployed A/B feed redundancy for the system.

Make sure the positive and negative DC power cables run properly through the left and
right sides of the cable restraint.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 189
Installing a DC Power Supply

• Tighten the cable restraint captive screws to hold the power cables in place. Verify that the
ground and power cabling are correct, they are not touching or blocking access to SRX5800
components and they
components, the do not drape where
here people can trip on them.
them
• Replace the clear plastic cover over the terminal studs on the faceplate.
• Switch the circuit breaker on the power supply to the ON position and observe the status
LEDs on the power supply faceplate. If the power supply is correctly installed and
functioning normally, the PWR OK, BREAKER ON, and INPUT OK LEDs light steadily.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 190
Section Summary
In this section, you learned to:
• Describe a DC power supply
• Identify the tools and parts required to replace a
DC power supply
• Remove a DC power supply
• Install a DC power supply

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 191
SRX5800 Services Gateway
Installation and Initial
Configuration

Replacing the Cable Management


System
y

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Section Objectives
In this section, you will learn how to replace the
cable
bl managementt system t on the
th JJuniper
i
Networks SRX5800 Services Gateway.
After successfully completing this section, you
will be able to:
• Describe the cable management system
• Identify the tools and parts required to replace
the cable management system
• Remove the cable management system
• Install the cable management system

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 193
Tools and Parts Required

You will need:


• An electrostatic discharge (ESD) grounding wrist strap
• 3/8-in. nut driver

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 194
Removing the Cable Management System

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Gather any cables placed in the cable manager and secure them out of the way.
• Loosen the nuts on either side of the chassis.
• Remove the cable manager.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 195
Installing the Cable Management System

• Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD
points on the chassis.
• Position the cable management system on the front sides of the chassis.
• Tighten the nuts completely.
• Gather any cables connected to the SRX5800 and secure them in the cable manager.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 196
Section Summary
In this section, you learned how to:
• Describe the cable management system
• Identify the tools and parts required to replace
the cable management system
• Remove the cable management system
• Install the cable management system

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 197
SRX5800 Services Gateway
Installation and Initial
Configuration

Additional Information

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Additional Information

List of technical publications:


http://www.juniper.net/techpubs/
Training courses:
http://www.juniper.net/training/

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 199
SRX5800 Services Gateway
Installation and Initial
Configuration

Course Summary

© 2010 Juniper Networks, Inc. All rights reserved. | www.juniper.net | Proprietary and Confidential
Conclusion

Thank you for taking this course

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 201
© 2010 Juniper Networks, Inc.

Juniper Networks, Inc. All rights reserved. Juniper Networks, the


Juniper Networks logo, Junos, NetScreen and ScreenOS are
registered trademarks of Juniper Networks, Inc. in the United States
andd other
th countries.
t i JunosE
J E is
i a ttrademark
d k off Juniper
J i Networks,
N t k Inc.I
All other trademarks, service marks, registered trademarks or
registered service marks are the property of their respective owners.
Juniper Networks reserves the right to change,
change modify,
modify transfer or
otherwise revise this publication without notice.

© 2010 Juniper Networks, Inc. All rights reserved. CONFIDENTIAL FSSSRX5800 www.juniper.net | 202

Das könnte Ihnen auch gefallen