SRX 345
SRX 345
Modified: 2016-05-23
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other
trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
The information in this document is current as of the date on the title page.
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (EULA) posted at
http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of
that EULA.
Part 1 Overview
Chapter 1 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX345 Services Gateway Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX345 Services Gateway CLI and J-Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Chapter 2 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
SRX345 Services Gateway Chassis Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Understanding the SRX345 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . . 5
Understanding the SRX345 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . 8
Chapter 3 Interface Module Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
SRX345 Services Gateway Interface Modules Overview . . . . . . . . . . . . . . . . . . . . . 11
Chapter 4 Cooling System Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Understanding the SRX345 Services Gateway Cooling System . . . . . . . . . . . . . . . 13
Chapter 5 Power System Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Understanding the SRX345 Services Gateway Power Supply . . . . . . . . . . . . . . . . 15
Listing the SRX345 Services Gateway Component Details with the CLI . . . . . . . . 93
Information You Might Need to Supply to JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Required Tools and Parts for Packing the SRX345 Services Gateway . . . . . . . . . . 95
Packing the SRX345 Services Gateway for Shipment . . . . . . . . . . . . . . . . . . . . . . 95
Packing SRX345 Services Gateway Components for Shipment . . . . . . . . . . . . . . 96
Part 7 Index
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Part 1 Overview
Chapter 2 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Table 3: SRX345 Services Gateway Front Panel Components . . . . . . . . . . . . . . . . 6
Table 4: SRX345 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . 7
Table 5: SRX345 Services Gateway Back Panel Components . . . . . . . . . . . . . . . . . 8
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
SRX345
Documentation Conventions
Caution Indicates a situation that might result in loss of data or hardware damage.
Laser warning Alerts you to the risk of personal injury from a laser.
Table 2 on page xiv defines the text and syntax conventions used in this guide.
Bold text like this Represents text that you type. To enter configuration mode, type the
configure command:
user@host> configure
Fixed-width text like this Represents output that appears on the user@host> show chassis alarms
terminal screen.
No alarms currently active
Italic text like this Introduces or emphasizes important A policy term is a named structure
new terms. that defines match conditions and
Identifies guide names. actions.
Junos OS CLI User Guide
Identifies RFC and Internet draft titles.
RFC 1997, BGP Communities Attribute
Italic text like this Represents variables (options for which Configure the machines domain name:
you substitute a value) in commands or
configuration statements. [edit]
root@# set system domain-name
domain-name
Text like this Represents names of configuration To configure a stub area, include the
statements, commands, files, and stub statement at the [edit protocols
directories; configuration hierarchy levels; ospf area area-id] hierarchy level.
or labels on routing platform The console port is labeled CONSOLE.
components.
< > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>;
# (pound sign) Indicates a comment specified on the rsvp { # Required for dynamic MPLS only
same line as the configuration statement
to which it applies.
[ ] (square brackets) Encloses a variable for which you can community name members [
substitute one or more values. community-ids ]
GUI Conventions
Bold text like this Represents graphical user interface (GUI) In the Logical Interfaces box, select
items you click or select. All Interfaces.
To cancel the configuration, click
Cancel.
> (bold right angle bracket) Separates levels in a hierarchy of menu In the configuration editor hierarchy,
selections. select Protocols>Ospf.
Documentation Feedback
Online feedback rating systemOn any page of the Juniper Networks TechLibrary site
at http://www.juniper.net/techpubs/index.html, simply click the stars to rate the content,
and use the pop-up form to provide us with information about your experience.
Alternately, you can use the online feedback form at
http://www.juniper.net/techpubs/feedback/.
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or Partner Support Service
support contract, or are covered under warranty, and need post-sales technical support,
you can access our tools and resources online or open a case with JTAC.
JTAC hours of operationThe JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/
To verify service entitlement by product serial number, use our Serial Number Entitlement
(SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
Overview
System Overview on page 3
Chassis Description on page 5
Interface Module Descriptions on page 11
Cooling System Description on page 13
Power System Description on page 15
System Overview
The SRX345 Services Gateway consolidates security, routing, switching, and WAN
interfaces for midsize distributed enterprises. With advanced threat mitigation capabilities,
the services gateway provides cost-effective and secure connectivity across distributed
enterprises.
The SRX345 Services Gateway has a capacity of 5 gigabits per second (Gbps) and is 1
rack unit (U) tall. The services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports,
one management port, 4 GB of DRAM memory, 8 GB of flash memory, and four
Mini-Physical Interface Module (Mini-PIM) slots.
The SRX345 Services Gateway runs the Junos operating system (Junos OS) and supports
the following features:
High availability
QoS
MPLS
The SRX345 Services Gateway runs the Junos operating system (Junos OS). You can
use two user interfaces to monitor, configure, troubleshoot, and manage the services
gateway:
J-Web interfaceA Web-based graphical interface that allows you to operate the
services gateway without commands.
In addition, you can also use Junos Space Security Director to define and manage security
policies on the services gateway.
Chassis Description
The SRX345 Services Gateway chassis is a rigid sheet metal structure that houses all of
the other services gateway components. The chassis measures 1.72 in. (4.36 cm) high,
17.36 in. (44.09 cm) wide, and 14.57 in. (37.01 cm) deep (from the front to the rear of the
chassis). The chassis installs in standard 800mm (or larger) enclosed cabinets, 19 in.
equipment racks, or telecommunications open-frame racks.
The services gateway must be connected to earth ground during normal operation. The
protective earthing terminal on the side of the chassis is provided to connect the services
gateway to ground.
Figure 1 on page 6 shows the front panel of the SRX345 Services Gateway.
1 Reset Config button Returns the services gateway to the rescue configuration or the
factory-default configuration.
3 Management port Use the management (MGMT) port to connect to the device over
the network.
4 Mini-PIM slots Four slots for Mini-PIMs. The Mini-PIM slots can be used to provide
LAN and WAN functionality along with connectivity to various media
types.
5 ESD point For personal safety, while working on the services gateway, use the
ESD outlet to plug in an ESD grounding strap to prevent your body
from sending static charges to the services gateway.
6 1 G SFP ports Eight 1 G small form-factor pluggable (SFP) ports for network traffic.
9 USB port The services gateway has one USB port that accepts a USB storage
device.
11 Power button Use the Power button to shut down the services gateway.
Figure 3 on page 8 shows the back panel of the SRX345 Services Gateway and
Table 5 on page 8 lists the components on the back panel.
1 2 3
g000961
CAUTION: The Mini-PIMs are not hot-swappable. You must power off the
services gateway before removing or installing Mini-PIMs.
For more information on the Mini-PIMs, see the SRX300 Series and SRX550 High Memory
Gateway Interface Modules Reference.
The cooling system for the SRX345 Services Gateway includes four fixed fans. The fans
draw air through vents on the front of the chassis and exhaust the air through the back
of the chassis. The airflow produced by the fans keeps device components within the
acceptable temperature range.
Figure 4 on page 13 shows the airflow through the SRX345 Services Gateway chassis.
The SRX345 Services Gateway uses a fixed, internal AC power supply. The power supply
distributes the different output voltages to the device components according to their
voltage requirements. The power supply is fixed in the chassis and is not field-replaceable.
The power supply has a single AC appliance inlet that requires a dedicated AC power
feed.
Table 6 on page 19 lists the physical specifications for the services gateway.
Weight 10.80 lb
Table 7 on page 19 provides the required environmental conditions for normal SRX345
Services Gateway operations.
Table 8 on page 20 provides a checklist of tasks you need to perform when preparing a
site for installing the SRX345 Services Gateway.
Environment
Power
Rack Requirements
Rack Installation
Cabinet Requirements
Cables
Related General Site Installation Guidelines for the SRX345 Services Gateway on page 22
Documentation
The following precautions help you plan an acceptable operating environment for your
SRX345 Services Gateway and avoid environmentally caused equipment failures:
For the cooling system to function properly, the airflow around the chassis must be
unrestricted. Allow sufficient clearance between the front and back of the chassis and
adjacent equipment. Ensure that there is adequate circulation in the installation location.
Follow the ESD procedures to avoid damaging equipment. Static discharge can cause
components to fail completely or intermittently over time. For more information, see
Preventing Electrostatic Discharge Damage to the SRX345 Services Gateway on
page 107.
Ensure that a blank Mini-PIM panel is installed in the empty slot to prevent any
interruption or reduction in the flow of air across internal components.
Related Site Preparation Checklist for the SRX345 Services Gateway on page 20
Documentation
Rack Requirements
Ensure that the equipment rack into which the services gateway is installed is evenly and
securely supported to avoid hazardous conditions that could result from uneven
mechanical loading.
The services gateway must be installed into a rack that is secured to the
building structure.
When mounting the services gateway in a partially filled rack, load the rack
from the bottom to the top with the heaviest component at the bottom of
the rack.
If the rack is provided with stabilizing devices, install the stabilizers before
mounting or servicing the services gateway in the rack.
Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel
het enige in het rek is.
Wanneer u dit toestel in een gedeeltelijk gevuld rek monteert, dient u het
rek van onderen naar boven te laden met het zwaarste onderdeel onderaan
in het rek.
Varoitus Kun laite asetetaan telineeseen tai huolletaan sen ollessa telineess,
on noudatettava erityisi varotoimia jrjestelmn vakavuuden silyttmiseksi,
jotta vltytn loukkaantumiselta. Noudata seuraavia turvallisuusohjeita:
Le rack sur lequel est mont le Juniper Networks services gateway doit tre
fix la structure du btiment.
Si cette unit constitue la seule unit monte en casier, elle doit tre place
dans le bas.
Wenn diese Einheit die einzige im Gestell ist, sollte sie unten im Gestell
angebracht werden.
Bei Anbringung dieser Einheit in einem zum Teil gefllten Gestell ist das
Gestell von unten nach oben zu laden, wobei das schwerste Bauteil unten
im Gestell anzubringen ist.
Questa unit deve venire montata sul fondo del supporto, se si tratta
dell'unica unit da montare nel supporto.
Esta unidade dever ser montada na parte inferior da estante, caso seja
esta a nica unidade a ser montada.
Related SRX345 Services Gateway Rack Size and Strength Requirements on page 29
Documentation
SRX345 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
When installing the services gateway in a rack, you must ensure that the rack complies
with a 1U (19 in. or 48.7 cm) rack as defined in Cabinets, Racks, Panels, and Associated
Equipment (document number EIA-310-D), published by the Electronic Industries Alliance
(http://www.ecaus.org/eia/site/index.html).
When selecting a rack, ensure that the physical characteristics of the rack comply with
the following specifications:
The outer edges of the mounting brackets extend the width of either chassis to 19 in.
(48.3 cm).
The front of the chassis extends approximately 0.5 in. (1.27 cm) beyond the mounting
ears.
Maximum permissible ambient temperature when two devices are placed side by side
in a 19 in. rack is 40 C.
The spacing of the mounting brackets and flange holes on the rack and device mounting
brackets are as follows:
The holes within each rack set are spaced at 1 U (1.75 in. or 4.5 cm).
The mounting brackets and front-mount flanges used to attach the chassis to a rack
are designed to fasten to holes spaced at rack distances of 1 U (1.75 in.).
The mounting holes in the mounting brackets provided with the device are spaced
1.25 in. (3.2 cm) apart (top and bottom mounting hole).
When planning the installation site for the SRX345 Services Gateway, you need to allow
sufficient clearance around the device. Consider the following:
For the operating temperature of the services gateway to be optimal, the airflow around
the chassis must be unrestricted. The fan tray contains four fans and provides
front-to-back chassis cooling.
For service personnel to remove and install hardware components, there must be
adequate space at the front and back of the device. Allow at least 24 in. (61 cm) both
in front of and behind the device.
If you are mounting the device in a rack with other equipment, or if you are placing it
on the desktop near other equipment, ensure that the exhaust from other equipment
does not blow into the intake vents of the chassis.
For information on the airflow through the SRX345 Services Gateway chassis, see
Understanding the SRX345 Services Gateway Cooling System on page 13.
SRX345 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
Cabinet Requirements
You can install the SRX345 Services Gateway in a 19 in. (48.7 cm) cabinet as defined in
Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D)
published by the Electronic Industries Alliance (http://www.ecaus.org/eia/site/index.html).
You must mount the services gateway horizontally in the cabinet.
The cabinet is at least 1U (3.50 in. or 8.89 cm) and can accommodate the services
gateway.
The outer edges of the mounting brackets extend the width of either chassis to 19 in.
(48.7 cm), and the front of the chassis extends approximately 0.5 in. (1.27 cm) beyond
the mounting brackets.
The minimum total clearance inside the cabinet is 30.7 in. (78 cm) between the inside
of the front door and the inside of the rear door.
NOTE: A cabinet larger than the minimum required provides better airflow
and reduces the chance of overheating.
When you mount the SRX345 Services Gateway in a cabinet, you must ensure that
ventilation through the cabinet is sufficient to prevent overheating. Consider the following
when planning for chassis cooling:
Ensure that the cool air supply you provide through the cabinet can adequately dissipate
the thermal output of the services gateway.
Install the services gateway as close as possible to the front of the cabinet so that the
cable management system clears the inside of the front door. Installing the chassis
close to the front of the cabinet maximizes the clearance in the rear of the cabinet for
critical airflow.
Route and dress all cables to minimize the blockage of airflow to and from the chassis.
Table 9 on page 33 describes the factors you must consider while planning the electrical
wiring for the services gateway at your site.
Radio Frequency To reduce or eliminate the emission of RFI from your site wiring:
Interference (RFI)
Use twisted-pair cable with a good distribution of grounding
conductors.
Use a high-quality twisted-pair cable with one ground conductor
for each data signal when applicable, if you must exceed the
recommended distances.
The AC power system electrical specifications for the SRX345 Services Gateway are
listed in Table 10 on page 34.
Table 10: Power System Electrical Specifications for the SRX345 Services
Gateway
Power Requirement Specification
WARNING: The AC power cord for the services gateway is intended for use
with the device only and not for any other use.
WARNING: The AC power cord for the services gateway is intended for use
with the services gateway only and not for any other use.
Table 11 on page 35 provides power cord specifications, and Figure 5 on page 35 depicts
the plug on the AC power cord provided for each country or region.
Europe (except Italy and United Kingdom) 250 VAC, 10 A, 50 Hz CEE (7) VII
NOTE: Power cords and cables must not block access to services gateway
components or drape where people might trip on them.
RJ-45 Connector Pinouts for the SRX345 Services Gateway Ethernet Port on page 37
RJ-45 Connector Pinouts for the SRX345 Services Gateway Console Port on page 37
Mini-USB Connector Pinouts for the SRX345 Services Gateway Console Port on page 38
RJ-45 Connector Pinouts for the SRX345 Services Gateway Ethernet Port
Table 12 on page 37 describes the RJ-45 connector pinouts for the Ethernet port.
Table 12: RJ-45 Connector Pinouts for the SRX345 Services Gateway
Ethernet Port
Pin Signal
1 BI_DA+
2 BI_DA
3 BI_DB+
4 BI_DC+
5 BI_DC
6 BI_DB
7 BI_DD+
8 BI_DD
Related RJ-45 Connector Pinouts for the SRX345 Services Gateway Console Port on page 37
Documentation
Mini-USB Connector Pinouts for the SRX345 Services Gateway Console Port on page 38
RJ-45 Connector Pinouts for the SRX345 Services Gateway Console Port
Table 13 on page 38 describes the RJ-45 connector pinouts for the console port.
Table 13: RJ-45 Connector Pinouts for the SRX345 Services Gateway
Console Port
Pin Signal Description
Related RJ-45 Connector Pinouts for the SRX345 Services Gateway Ethernet Port on page 37
Documentation
Mini-USB Connector Pinouts for the SRX345 Services Gateway Console Port on page 38
Mini-USB Connector Pinouts for the SRX345 Services Gateway Console Port
The SRX345 Services Gateway has two console ports: an RJ-45 Ethernet port and a
mini-USB Type-B port. If your management device (laptop or PC) does not have a DB-9
male connector pin or an RJ-45 connector pin, you can connect your management device
to the Mini-USB Type-B console port of the services gateway by using a cable that has
a standard Type-A USB connector on one end and a Mini-USB Type-B (5-pin) connector
on the other end. Table 14 on page 38 describes the Mini-USB Type-B connector pinouts
for the console port.
NOTE: By design, the mini-USB console port has higher priority over the RJ-45
console port. If both mini-USB and RJ-45 console ports are connected, then
the mini-USB console port will be active.
Table 14: Mini-USB Type-B Connector Pinouts for the Services Gateway
Console Port
Pin Signal Cable Color Description
2 D- White Data -
3 D+ Green Data +
Table 14: Mini-USB Type-B Connector Pinouts for the Services Gateway
Console Port (continued)
Pin Signal Cable Color Description
Related RJ-45 Connector Pinouts for the SRX345 Services Gateway Ethernet Port on page 37
Documentation
RJ-45 Connector Pinouts for the SRX345 Services Gateway Console Port on page 37
Installation Overview
After you have prepared the site for installation and unpacked the SRX345 Services
Gateway, you are ready to install the device. It is important to proceed through the
installation process in the following order:
1. Review the safety guidelines explained in General Electrical Safety Guidelines and
Warnings on page 121.
2. Prepare the services gateway for installation as described in Preparing the SRX345
Services Gateway for Rack-Mount Installation on page 49.
3. Install the services gateway as described in Installing the SRX345 Services Gateway
into a Rack on page 51.
Related Required Tools and Parts for Installing the SRX345 Services Gateway on page 43
Documentation
SRX345 Services Gateway Autoinstallation Overview on page 44
Required Tools and Parts for Installing the SRX345 Services Gateway
To install the services gateway, you need the following tools and parts:
Tie-wrap
The autoinstallation process begins any time a services gateway is powered on and
cannot locate a valid configuration file in the internal flash. Typically, a configuration file
is unavailable when a services gateway is powered on for the first time or if the
configuration file is deleted from the internal flash. The autoinstallation feature enables
you to deploy multiple services gateways from a central location in the network.
If you are setting up many devices, autoinstallation can help automate the configuration
process by loading configuration files onto new or existing devices automatically over
the network. You can use either the J-Web interface or the CLI to configure a device for
autoinstallation.
For the autoinstallation process to work, you must store one or more host-specific or
default configuration files on a configuration server in the network and have a service
availabletypically Dynamic Host Configuration Protocol (DHCP)to assign an IP address
to the services gateway.
Autoinstallation takes place automatically when you connect an Ethernet port on a new
services gateway to the network and power on the device. To simplify the process, you
can explicitly enable autoinstallation on a device and specify a configuration server, an
autoinstallation interface, and a protocol for IP address acquisition.
For more information about configuring autoinstallation, see the following topics:
Ensure that you have the following parts and tools available:
The SRX345 Services Gateway is shipped in a cardboard carton and secured with foam
packing material. The carton also contains an accessory box and quick start instructions.
1. Move the cardboard carton to a staging area as close to the installation site as possible,
where you have enough room to remove the components from the chassis.
6. Verify the parts received against the lists in Verifying Parts Received with the SRX345
Services Gateway on page 46.
8. Save the shipping carton and packing materials in case you need to move or ship the
services gateway at a later time.
Related Verifying Parts Received with the SRX345 Services Gateway on page 46
Documentation
The SRX345 Services Gateway shipment package contains a packing list. Check the
parts in the shipment against the items on the packing list. The packing list specifies the
part numbers and carries a brief description of each part in your order.
If any part on the packing list is missing, contact your customer service representative or
contact Juniper customer care from within the U.S. or Canada by telephone at
1-888-314-5822. For international-dial or direct-dial options in countries without toll-free
numbers, see http://www.juniper.net/support/requesting-support.html.
A fully configured services gateway contains the chassis with installed components,
listed in Table 15 on page 46, and an accessory box, which contains the parts listed in
Table 16 on page 46.
NOTE: The parts shipped with your services gateway can vary depending on
the configuration you ordered.
Table 15: Parts List for a Fully Configured SRX345 Services Gateway
Component Quantity
RJ-45 cable 1
DB-9 adapter
Table 16: Accessory Parts List for the SRX345 Services Gateway
Part Quantity
Safety Guide 1
Related Preparing the SRX345 Services Gateway for Rack-Mount Installation on page 49
Documentation
You can mount an SRX345 Services Gateway on four-post (telco) racks, enclosed
cabinets, and open-frame racks. Center-mount racks are not supported.
Verify that the site meets the requirements described in Site Preparation Checklist
for the SRX345 Services Gateway on page 20.
Verify that you have the following parts available in your rack-mounting kit for the
SRX345 Services Gateway:
Rack-mounting brackets
Eight mounting screws to attach the mounting brackets to the chassis of the services
gateway
Four mounting screws to attach the mounting brackets to the rack rail
Verify that the racks or cabinets meet the specific requirements described in SRX345
Services Gateway Rack Size and Strength Requirements on page 29.
Place the rack or cabinet in its permanent location, allowing adequate clearance for
airflow and maintenance, and secure it to the building structure. For more information,
see SRX345 Services Gateway Cabinet Airflow Requirements on page 31.
Remove the gateway chassis from the shipping carton. For unpacking instructions, see
Unpacking the SRX345 Services Gateway on page 45.
Always secure the rack in which you are installing the SRX345 High Memory Services
Gateway to the structure of the building. If your geographical area is subject to
earthquakes, bolt the rack to the floor. For maximum stability, also secure the rack to
ceiling brackets.
You can front-mount the SRX345 Services Gateway in a rack. Many types of racks are
acceptable, including four-post (telco) racks, enclosed cabinets, and open-frame racks.
NOTE: If you are installing multiple devices in one rack, install the lowest one
first and proceed upward in the rack.
2. Use a number-2 Phillips (+) screwdriver to install the screws that secure the mounting
brackets to the chassis. Use either the front mount position, as shown in
Figure 6 on page 51, or the center mount position, as shown in Figure 7 on page 52.
3. Have one person grasp the sides of the services gateway, lift it, and position it in the
rack.
4. Align the bottom hole in each mounting bracket with a hole in each rack rail, making
sure the chassis is level.
5. Have a second person install a mounting screw into each of the two aligned holes.
Use a Phillips (+) screwdriver, number 2 to tighten the screws.
6. Install the second screw in each mounting bracket as shown in Figure 8 on page 52.
Figure 8: Installing the Services Gateway in the Rack (Front Mount Shown,
Center Mount Similar)
7. Verify that the mounting screws on one side of the rack are aligned with the mounting
screws on the opposite side and that the services gateway is level.
Required Tools and Parts for Grounding the SRX345 Services Gateway on page 53
SRX345 Services Gateway Grounding Specifications on page 53
Connecting the SRX345 Services Gateway Grounding Cable on page 54
Required Tools and Parts for Grounding the SRX345 Services Gateway
To ground and to provide power to the services gateway, you need the following tools:
Wire cutters
The services gateway chassis has one grounding point on the side of the chassis. The
grounding point holes fit M5 screws.
Table 17 on page 54 lists the specifications of the grounding cable used with the device.
Related Required Tools and Parts for Grounding the SRX345 Services Gateway on page 53
Documentation
Connecting the SRX345 Services Gateway Grounding Cable on page 54
You ground the services gateway by connecting a grounding cable to earth ground and
then attaching it to the chassis grounding point located on the side of the device using
two metric M5 x 0.8, 12-mm-long grounding screws.
Grounding cables
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the strap to the ESD point on the chassis. For more details, see Preventing Electrostatic
Discharge Damage to the SRX345 Services Gateway on page 107.
2. Ensure that all grounding surfaces are clean and brought to a bright finish before
grounding connections are made.
4. Place the grounding cable lug over the grounding point (sized for metric M5 x 0.8,
12-mm-long grounding screws) on the side of the chassis.
5. Secure the grounding cable lug to the grounding point, first with the washer, then with
the screws.
6. Dress the grounding cable and verify that it does not touch or block access to the
services gateway components and that it does not drape where people could trip on
it.
Related Required Tools and Parts for Grounding the SRX345 Services Gateway on page 53
Documentation
SRX345 Services Gateway Grounding Specifications on page 53
Connecting the Dial-Up Modem to the Console Port on the SRX345 Services
Gateway on page 57
Connecting to the SRX345 Services Gateway CLI Using a Dial-Up Modem on page 58
Connecting the Dial-Up Modem to the Console Port on the SRX345 Services Gateway
To connect the dial-up modem to the console port on the services gateway:
3. Connect one end of the Ethernet cable supplied with your services gateway into the
console port on the services gateway.
4. Connect the other end of the CAT-5e cable (Ethernet cable) into the RJ-45 to DB-9
serial port adapter supplied with your services gateway.
5. Connect the serial port adapter to a separately purchased DB-9 female to DB-25
male adapter or other adapter appropriate for your modem.
6. Plug the modem adapter into the DB-25 connector on the modem.
9. Power on the services gateway by pressing the Power button on the front panel. Verify
that the PWR LED on the front panel turns green.
Related Connecting to the SRX345 Services Gateway CLI Using a Dial-Up Modem on page 58
Documentation
To remotely connect to the CLI through a dial-up modem connected to the console port
on the services gateway:
3. Select the COM port to which the modem is connected (for example, COM1).
Data bits8
ParityNone
Stop bits1
Flow controlNone
An OK response verifies that the modem can communicate successfully with the COM
port on the PC or laptop.
6. Dial the modem that is connected to the console port on the services gateway by
entering ATDT remote-modem-number. For example, if the number of the modem
connected to the console port on the services gateway is 0013033033030, enter
ATDT 0013033033030.
7. Log in as the root user. No password is required at initial connection, but you must
assign a root password before committing any configuration settings.
Related Connecting the Dial-Up Modem to the Console Port on the SRX345 Services Gateway
Documentation on page 57
You connect AC power to the services gateway by attaching a power cord from the AC
power source to the AC appliance inlet located on the power supply faceplate. To connect
the device to the power supply:
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the other end of the ESD strap to the ESD point on the rack.
2. Insert the appliance coupler end of the power cord into the appliance inlet on the
power supply faceplate.
NOTE: We strongly recommend that you use only the 3-prong power cord
supplied with your services gateway.
3. Insert the power cord plug into an external AC power source receptacle as shown in
Figure 10 on page 60. Use a retainer clip to secure the power cord to the power supply
point. Verify that the power cord does not block the air exhaust and access to services
gateway components or drape where people could trip on it.
g000958
CAUTION: We recommend using a surge protector for the power connection.
The device starts automatically as the power supply completes its startup sequence.
The PWR LED lights during startup and remains on when the device is operating normally.
NOTE: After the power supply is turned on, it can take up to 60 seconds for
status indicatorssuch as the STAT and PWR LEDsto show that the power
supply is functioning normally. Ignore error indicators that appear during the
first 60 seconds.
NOTE: When the system is completely powered off and you turn on the power
supply, the device starts as the power supply completes its startup sequence.
If the device finishes starting and you need to power off the system again,
first issue the CLI request system power-off command.
You can power off the services gateway in one of the following ways:
Graceful shutdownPress and immediately release the Power button. The device
begins gracefully shutting down the operating system and then powers itself off.
CAUTION: Use the graceful shutdown method to power off or reboot the
services gateway.
Forced shutdownPress the Power button and hold it for ten seconds. The device
immediately powers itself off without shutting down the operating system.
CAUTION: Use the forced shutdown method as a last resort to recover the
services gateway if the services gateway operating system is not responding
to the graceful shutdown method.
WARNING: Do not press the Power button while the device is shutting down.
CAUTION: Forced shutdown can result in data loss and corruption of the file
system.
NOTE: To remove power completely from the device, unplug the power cord
or switch off the AC power source.
After powering off a power supply, wait at least 10 seconds before turning it
back on. After powering on a power supply, wait at least 10 seconds before
turning it off.
The Power button on the services gateway is a standby power switch, which
will not turn off the input power to the services gateway.
TIP: When you are powering off the device, the CLI displays the following
message: Turning the system power off. You can now safely remove the power
cable to completely power off the device.
NOTE: You can use the request system reboot CLI command to schedule a
reboot.
The services gateway is shipped with the Juniper Networks Junos operating system (Junos
OS) preinstalled and ready to be configured when the device is powered on. You can
perform the initial software configuration of the services gateway by using the
browser-based setup wizard or by using the command-line interface (CLI).
Before configuring the device, gather the configuration information required to deploy
the device in your network. At a minimum, the setup wizard requires the following
information:
Device name
Management interface
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
Your services gateway comes configured with a factory-default configuration. The default
configuration includes the following security configuration:
Interface ge-0/0/0 is in the untrust zone, while interfaces ge-0/0/1 through ge-0/0/7
are in the trust zone.
A security policy is created that permits outbound traffic from the trust zone to the
untrust zone.
If the current active configuration fails, you can use the load factory-default command
to revert to the factory-default configuration.
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
To view the factory-default configuration of the services gateway using the CLI:
% cd /etc/config
% ls
The following sample output displays the list of factory-default configuration files:
blv-defaults.conf srx210he2-factory.conf
ex9204-factory.conf srx210he2-poe-defaults.conf
ex9208-factory.conf srx210he2-poe-factory.conf
ex9214-factory.conf srx220-8xge-factory.conf
j-series-defaults.conf srx220-poe-8xge-factory.conf
jnu-factory.conf srx220h-defaults.conf
jsrxsme-series-defaults.conf srx220h-factory.conf
jsrxsme-series-factory.conf srx220h-poe-defaults.conf
junos-defaults.conf srx220h-poe-factory.conf
junos-factory.conf srx220h2-defaults.conf
junos-fips-defaults.conf srx220h2-factory.conf
ptx-series-defaults.conf srx220h2-poe-defaults.conf
shmlog srx220h2-poe-factory.conf
srx100-8xfe-factory.conf srx240-16xge-factory.conf
srx100b-defaults.conf srx240-poe-16xge-factory.conf
srx100b-factory.conf srx240b-factory.conf
srx100h-defaults.conf srx240b2-factory.conf
srx100h-factory.conf srx240h-dc-defaults.conf
srx100h2-defaults.conf srx240h-dc-factory.conf
srx100h2-factory.conf srx240h-defaults.conf
srx110-8xfe-vdsl-factory.conf srx240h-factory.conf
srx110-8xfe-vdsl-wl-factory.conf srx240h-poe-defaults.conf
srx110-8xfe-wl-factory.conf srx240h-poe-factory.conf
srx110b-defaults.conf srx240h2-dc-defaults.conf
srx110b-va-defaults.conf srx240h2-dc-factory.conf
srx110b-va-factory.conf srx240h2-defaults.conf
srx110b-vb-defaults.conf srx240h2-factory.conf
srx110b-vb-factory.conf srx240h2-poe-defaults.conf
srx110b-wl-defaults.conf srx240h2-poe-factory.conf
srx110b-wl-factory.conf srx300-8xge-factory.conf
srx110h-defaults.conf srx300-defaults.conf
srx110h-va-defaults.conf srx300-factory.conf
srx110h-va-factory.conf srx300-lem-factory.conf
srx110h-va-wl-defaults.conf srx320-8xge-factory.conf
srx110h-va-wl-factory.conf srx320-defaults.conf
srx110h-vb-defaults.conf srx320-factory.conf
srx110h-vb-factory.conf srx320-lem-factory.conf
srx110h-vb-wl-defaults.conf srx320-poe-8xge-factory.conf
srx110h-vb-wl-factory.conf srx320-poe-defaults.conf
srx110h-wl-defaults.conf srx320-poe-factory.conf
srx110h-wl-factory.conf srx320-poe-lem-factory.conf
srx110h2-va-defaults.conf srx340-16xge-factory.conf
srx110h2-va-factory.conf srx340-defaults.conf
srx110h2-vb-defaults.conf srx340-factory.conf
srx110h2-vb-factory.conf srx340-lem-factory.conf
srx210-2xge-6xfe-factory.conf srx345-defaults.conf
srx210-poe-2xge-6xfe-factory.conf srx345-factory.conf
srx210b-defaults.conf srx345-lem-factory.conf
srx210b-factory.conf srx550-6xge-factory.conf
srx210be-defaults.conf srx550-defaults.conf
srx210be-factory.conf srx550-factory.conf
srx210h-defaults.conf srx550m-6xge-factory.conf
srx210h-factory.conf srx550m-defaults.conf
srx210h-poe-defaults.conf srx550m-factory.conf
srx210h-poe-factory.conf srx650-4xge-factory.conf
srx210he-defaults.conf srx650-defaults.conf
srx210he-factory.conf srx650-factory.conf
srx210he-poe-defaults.conf subs-mgmt-proc-set
srx210he-poe-factory.conf vrr-series-defaults.conf
srx210he2-defaults.conf
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
The J-Web interface is a Web-based graphical interface that allows you to operate a
services gateway without commands.
NOTE: To access the J-Web interface, your management device requires one
of the following supported browsers:
To access J-Web:
1. Connect the management port MGMT to the Ethernet port on the management device,
using an RJ-45 cable as shown in Figure 11 on page 66.
2. Configure a static IP address in the 192.168.1.0/24 network for the management device.
Do not assign the 192.168.1.1 IP address to the management device, as this IP address
is assigned to the device. You can use the ipconfig (or ifconfig for Macintosh or Linux
users) command to verify the IP address.
3. Open a Web browser on the management device and enter the IP address
http://192.168.1.1 in the address field.
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard
This topic describes how to perform the initial software configuration of your services
gateway using the setup wizard.
Provides recommended settings based on your previous selections. For example, the
wizard recommends security policies based on the security topology you have defined.
Flags any missing required configuration when you attempt to leave a page.
Indicates which configuration elements or tasks are unavailable to you based on your
previous selections by graying them out.
You can choose one of the following setup modes to configure the services gateway:
Default Setup modeThis mode allows you to quickly set up a services gateway in a
default security configuration. In this mode, you can configure basic system settings,
such as the administrator password, and download purchased licenses. Any additional
configuration can be carried out after completing the wizard setup.
Guided Setup modeThis mode allows you to set up a services gateway in a custom
security configuration.
NOTE: It is mandatory to configure only the device name and root password.
You can skip all the other steps by clicking Next to go directly to the Confirm
& Apply page to apply the configuration.
Device name
Name or IP address of a Network Time Protocol (NTP) server, if NTP is used to set
the time on the services gateway
Local date and time if an NTP server is not used to set the time
Management interface
You cannot do additional configuration in the Default Setup mode. You must commit
your changes and exit the wizard to perform any additional configuration. You can perform
additional configuration by rerunning the wizard in the Guided Setup mode, by using the
J-Web interface, or by using the CLI.
See the How to Set Up Your SRX345 Services Gateway for step-by-step instructions on
how to configure your services gateway in the Default Setup mode.
Basic Expert
Can configure only three internal zones Can configure more than three internal zones
Can configure static and dynamic IP for the Can configure static IP, static pool, and dynamic
Internet zone IP for the Internet zone
Can configure internal zone service Can configure internal zone service
Cannot configure internal destination NAT Can configure internal destination NAT
Configuring basic options such as device name, root password, management interface,
and system time
Internet zone
Internal zones
DMZ
After you finish configuring the services gateway with the setup wizard and commit your
configuration, you are redirected to the J-Web interface. Thereafter, whenever you connect
to the services gateway, you are placed in the J-Web interface. You can access the setup
wizard from the J-Web interface and use it to reconfigure your services gateway. To do
so, select Configuration Wizards>Set Up. You can either edit an existing configuration or
create a new configuration.
NOTE: If you elect to create a new configuration, then all the current
configuration in the services gateway will be deleted.
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
1. Plug one end of the Ethernet cable into the RJ-45 to DB-9 serial port adapter supplied
with your services gateway.
2. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management
device.
3. Connect the other end of the Ethernet cable to the serial console port on the services
gateway. See Figure 12 on page 70.
NOTE: Alternately, you can use the USB cable to connect to the mini-USB
console port on the services gateway. To use the USB console port, you
must download a USB driver to the management device from
http://www.juniper.net/support/downloads/group/?f=junos.
Figure 12: Connecting to the Console Port on the SRX345 Services Gateway
Baud rate9600
ParityN
Data bits8
Stop bits1
Flow controlnone
6. Power on the services gateway. You can start performing initial software configuration
on the services gateway after the device is up.
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
1. Plug one end of an Ethernet cable with RJ-45 connectors into the MGMT port on the
front panel of the services gateway.
2. Plug the other end of the cable into the management device.
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
This sample procedure explains how you can create an initial configuration using CLI
commands to connect the SRX345 Services Gateway to the network.
root@% cli
root>
4. Enter configuration mode.
configure
[edit]
root#
5. Set the root authentication password by entering a cleartext password, an encrypted
password, or an SSH public key string (DSA or RSA).
[edit]
root# set system root-authentication plain-text-password
New password: password
Retype new password: password
6. Configure an administrator account on the device. When you are prompted, enter the
password for the administrator account.
[edit]
root# set system login user admin class super-user authentication plain-text-password
New password: password
Retype new password: password
7. Commit the configuration to activate it on the services gateway.
[edit]
root# commit
8. Log in as the administrative user you configured in Step 6.
9. Configure the name of the services gateway. If the name includes spaces, enclose the
name in quotation marks ( ).
configure
[edit]
admin# set system host-name host-name
10. Configure the IP address and prefix length for the services gateway Ethernet interface.
[edit]
admin# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
NOTE: The ge-0/0/0 interface is for the ISP, and the ge-0/0/1 interface
is for the LAN.
[edit]
admin# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin# set security zones security-zone untrust interfaces ge-0/0/0
admin# set security zones security-zone trust interfaces ge-0/0/1
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
system-services all
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
protocols all
14. Configure basic security policies.
[edit]
admin# set security policies from-zone trust to-zone trust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone trust policy policy-name then permit
admin# set security policies from-zone trust to-zone untrust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone untrust policy policy-name then permit
[edit]
admin# commit check
configuration check succeeds
16. Commit the configuration to activate it on the services gateway.
[edit]
admin# commit
commit complete
17. Optionally, display the configuration to verify that it is correct.
[edit]
admin# show
18. Optionally, configure additional properties by adding the necessary configuration
statements. Then commit the changes to activate them on the services gateway.
[edit]
admin# commit
19. When you have finished configuring the services gateway, exit configuration mode.
[edit]
admin# exit
admin>
Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 67
Connecting to the SRX345 Services Gateway from the CLI Remotely on page 71
Maintaining Components
Required Tools and Parts for Maintaining the SRX345 Services Gateway Hardware
Components on page 77
Routine Maintenance Procedures for the SRX345 Services Gateway on page 77
Maintaining the SRX345 Services Gateway Cooling System Components on page 78
Maintaining the SRX345 Services Gateway Power Supply on page 78
Required Tools and Parts for Maintaining the SRX345 Services Gateway Hardware
Components
The following tools and parts are required to maintain the hardware components of the
services gateway:
Related Routine Maintenance Procedures for the SRX345 Services Gateway on page 77
Documentation
Maintaining the SRX345 Services Gateway Cooling System Components on page 78
For optimum performance of the services gateway, perform the following preventive
maintenance procedures regularly:
Inspect the installation site for moisture, loose wires or cables, and excessive dust.
Make sure that airflow is unobstructed around the services gateway and into the air
intake vents.
Check the status LEDs on the front and back panels of the services gateway.
Related Required Tools and Parts for Maintaining the SRX345 Services Gateway Hardware
Documentation Components on page 77
The services gateway fan controller works to maintain an optimal temperature for the
services gateway. If the fan controller fails, the services gateway temperature will exceed
the maximum working temperature and it will fail. Make sure that you maintain the
recommended clearances behind the services gateway to enable the fan controller to
function optimally.
Related Required Tools and Parts for Maintaining the SRX345 Services Gateway Hardware
Documentation Components on page 77
Make sure that all power cables are arranged so that they do not obstruct access to
other services gateway components.
Routinely check the POWER LED on the front panel. If this LED is solid green, the power
supplies are functioning normally.
Periodically inspect the site to ensure that the power cables connected to the services
gateway are securely in place and that there is no moisture accumulating near the
services gateway.
Related Required Tools and Parts for Maintaining the SRX345 Services Gateway Hardware
Documentation Components on page 77
Troubleshooting Components
To troubleshoot a services gateway, you use the Junos OS command-line interface (CLI)
and LEDs on the components:
LEDsWhen the services gateway detects an alarm condition, the alarm LED on the
interfaces glows red or yellow.
CLIThe CLI is the primary tool for controlling and troubleshooting hardware, Junos
OS, and network connectivity. Use the CLI to display more information about alarms.
CLI commands display information about network connectivity derived from the ping
and traceroute utilities. For information about using the CLI to troubleshoot Junos OS,
see the appropriate Junos OS configuration guide.
JTACIf you need assistance during troubleshooting, you can contact the Juniper
Networks Technical Assistance Center (JTAC) by using the Web or by telephone. If
you encounter software problems, or problems with hardware components not
discussed here, contact JTAC.
Related Troubleshooting Chassis and Interface Alarm Messages on the SRX345 Services
Documentation Gateway on page 80
Using the RESET CONFIG Button on the SRX345 Services Gateway on page 82
Changing the RESET CONFIG Button Behavior on the SRX345 Services Gateway on
page 83
When the services gateway detects an alarm condition, the alarm LED on the front panel
turns red or amber as appropriate. To view a more detailed description of the alarm
cause, issue the show chassis alarms CLI command.
Table 18 on page 80 describes alarms that can occur for an SRX345 Services Gateway
chassis component.
Boot media The services gateway If the internal flash memory fails at Amber
boots from an alternate startup, the services gateway (minor)
boot device. automatically boots itself from the
alternative boot device (USB storage
device).
Hardware The services gateway Check the room temperature. See SRX345 Amber
components chassis temperature or Services Gateway Environmental (minor)
on the chassis is too warm Specifications on page 19.
services
gateway
The services gateway The services gateway shuts down Red
temperature is too high, automatically in 4 minutes. (major)
either because of an
internal overheating
condition or because
the maximum
recommended room
temperature has been
exceeded.
Mini-PIM A Mini-PIM has failed. Contact the Juniper Networks Technical Red
Assistance Center (JTAC). (major)
If you must replace the failed Mini-PIM,
see the SRX300 Series and SRX550 High
Memory Services Gateway Interface
Modules Reference for information about
replacing the Mini-PIMs.
Related Troubleshooting Resources for the SRX345 Services Gateway Overview on page 79
Documentation
Troubleshooting the Power System on the SRX345 Services Gateway on page 81
Using the RESET CONFIG Button on the SRX345 Services Gateway on page 82
Changing the RESET CONFIG Button Behavior on the SRX345 Services Gateway on
page 83
The LEDs on the services gateway enable you to determine the performance and
operation. The PWR LED, located on the front panel of the services gateway, indicates
the different settings with respect to the power system.
Table 19 on page 81 describes different PWR LED status settings and their corrective
actions.
Off Indicates that the device Verify that the AC power cord from
is not receiving power. the power source to the device is not
damaged. If the insulation is cracked
or broken, immediately replace the
cord or cable.
Ensure that the socket you plug in is
in working condition.
Ensure the device has an AC input
voltage between 100 and 240 VAC.
If you cannot determine the cause
of the problem or need additional
assistance, contact JTAC.
Related Troubleshooting Resources for the SRX345 Services Gateway Overview on page 79
Documentation
Troubleshooting Chassis and Interface Alarm Messages on the SRX345 Services
Gateway on page 80
Using the RESET CONFIG Button on the SRX345 Services Gateway on page 82
Changing the RESET CONFIG Button Behavior on the SRX345 Services Gateway on
page 83
If a configuration fails or denies management access to the services gateway, you can
use the RESET CONFIG button to restore the device to the factory-default configuration
or a rescue configuration. For example, if someone inadvertently commits a configuration
that denies management access to a services gateway, you can delete the invalid
configuration and replace it with a rescue configuration by pressing the RESET CONFIG
button.
NOTE: The RESET CONFIG button is recessed to prevent it from being pressed
accidentally.
The rescue configuration is a previously committed, valid configuration. You must have
previously set the rescue configuration through the J-Web interface or the CLI. To press
the RESET CONFIG button, insert a small probe (such as a straightened paper clip) into
the pinhole on the front panel.
By default, pressing and quickly releasing the RESET CONFIG button loads and commits
the rescue configuration through the J-Web interface or the CLI. The Status LED is solid
amber during this time.
By default, pressing and holding the RESET CONFIG button for 15 seconds or moreuntil
the Status LED is solid amber deletes all configurations on the device, including the
backup configurations and rescue configuration, and loads and commits the factory
configuration.
Related Troubleshooting Resources for the SRX345 Services Gateway Overview on page 79
Documentation
Troubleshooting Chassis and Interface Alarm Messages on the SRX345 Services
Gateway on page 80
Changing the RESET CONFIG Button Behavior on the SRX345 Services Gateway on
page 83
Changing the RESET CONFIG Button Behavior on the SRX345 Services Gateway
You can change the default operation of the RESET CONFIG button by limiting how the
button resets the services gateway:
To prevent the RESET CONFIG button from setting the device to the factory-default
configuration and deleting all other configurations:
You can still press and quickly release the button to reset it to the rescue configuration.
To prevent the RESET CONFIG button from setting the device to the rescue
configuration:
You can still press and hold the button for 15 seconds or more to reset the gateway to
the factory-default configuration.
To disable the button and prevent the device from resetting to either configuration:
The no-clear option prevents the RESET CONFIG button from deleting all configurations
on the services gateway. The no-rescue option prevents the RESET CONFIG button from
loading the rescue configuration.
To return the function of the RESET CONFIG button to its default behavior, remove the
config-button statement from the device configuration.
Related Troubleshooting Resources for the SRX345 Services Gateway Overview on page 79
Documentation
Troubleshooting Chassis and Interface Alarm Messages on the SRX345 Services
Gateway on page 80
Using the RESET CONFIG Button on the SRX345 Services Gateway on page 82
Replacing Components
Overview of Replacing Components on page 87
Replacing Interface Modules on page 89
Contacting Customer Support and Returning Components on page 91
Field-replaceable units (FRUs) are components that you can replace at your site. The
Mini-Physical Interface Module (MPIM) is the only FRU on the SRX345 Services Gateway.
The Mini-PIMs are not hot-swappable. You must power off the services gateway before
removing or installing Mini-PIMs.
Related Required Tools and Parts for Replacing the SRX345 Services Gateway Components
Documentation on page 87
Required Tools and Parts for Replacing the SRX345 Services Gateway Components
The following tools and parts are required for replacing a Mini-Physical Interface Module
(MPIM) on the services gateway:
The Mini-PIMs available on the SRX345 Services Gateway are not hot-swappable. You
need to power off the device before removing or installing Mini-PIMs. For information on
replacing Mini-PIMs, see the SRX300 Series and SRX550 High Memory Services Gateway
Interface Modules Reference.
Once you have located the serial numbers of the device or component, you can return
the device or component for repair or replacement. For this, you need to contact Juniper
Networks Technical Assistance Center (JTAC).
You can contact JTAC 24 hours a day, 7 days a week, using any of the following methods:
By telephone:
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
1. Determine the part number and serial number of the services gateway or component.
For more information about return and repair policies, see the customer support webpage
at http://www.juniper.net/support/guidelines.html.
For product problems or technical support issues, open a support case using the Case
Manager link at http://www.juniper.net/support/ or call 1-888-314-JTAC (within the United
States) or 1-408-745-9500 (outside the United States).
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label
Mini-PIMs are field-replaceable on the SRX345 Services Gateway. Each Mini-PIM has a
unique serial number. The serial number label is located on the right side of the Mini-PIM,
when the Mini-PIM is horizontally oriented (as it would be when installed on the device).
The exact location might be slightly different on different Mini-PIMs, depending on the
placement of components on the Mini-PIM.
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
Listing the SRX345 Services Gateway Component Details with the CLI
Before contacting Juniper Networks to request an RMA, you must find the serial number
on the SRX345 Services Gateway or component.
To list all of the SRX345 Services Gateway components and their serial numbers, enter
the following command:
NOTE: In the show chassis hardware command, the Mini-PIM slot number is
reported as an FPC number, and the Mini-PIM number (always 0) is reported
as the PIC number.
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
When requesting support from JTAC by telephone, be prepared to provide the following
information:
Type of activity being performed on the services gateway when the problem occurred
Your name, organization name, telephone number, fax number, and shipping address
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
Required Tools and Parts for Packing the SRX345 Services Gateway
To remove the components from the SRX345 Services Gateway or to remove the services
gateway from a rack, you need the following tools and parts:
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
1. Retrieve the shipping carton and packing materials in which the services gateway was
originally shipped. If you do not have these materials, contact your Juniper Networks
representative about approved packaging materials.
2. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect
the strap to the ESD point on the chassis or to an outside ESD point if the device is
disconnected from earth ground. For more information about ESD, see Preventing
Electrostatic Discharge Damage to the SRX345 Services Gateway on page 107.
3. On the console or other management device connected to the services gateway, enter
CLI operational mode and issue the following command to shut down the services
gateway software:
Wait until a message appears on the console confirming that the operating system
has halted.
4. Shut down power to the services gateway by pressing the Power button on the front
of the services gateway.
7. If the device is installed on a wall or rack, have one person support the weight of the
device while another person unscrews and removes the mounting screws.
9. Cover the services gateway with an ESD bag, and place the packing foam on top of
and around the device.
12. Write the Return Materials Authorization (RMA) number on the exterior of the box to
ensure proper tracking.
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
Follow these guidelines for packing and shipping individual components of the services
gateway:
When you return a component, make sure that it is adequately protected with packing
materials and packed so that the pieces are prevented from moving around inside the
carton.
Write the Return Materials Authorization (RMA) number on the exterior of the box to
ensure proper tracking.
Locating the SRX345 Services Gateway Chassis Serial Number and Agency Labels on
page 93
Locating the SRX345 Services Gateway Mini-Physical Interface Module Serial Number
Label on page 93
Listing the SRX345 Services Gateway Component Details with the CLI on page 93
Required Tools and Parts for Packing the SRX345 Services Gateway on page 95
This topic defines the following four levels of safety warnings used in Juniper Networks
technical publications:
CAUTION: You need to observe the specified guidelines to avoid minor injury
or discomfort to you or severe damage to the services gateway.
WARNING: This symbol means danger. You are in a situation that could cause
bodily injury. Before you work on any equipment, be aware of the hazards
involved with electrical circuitry and be familiar with standard practices for
preventing accidents.
apparatuur gaat werken, dient u zich bewust te zijn van de bij elektrische
schakelingen betrokken risico's en dient u op de hoogte te zijn van standaard
maatregelen om ongelukken te voorkomen.
Aviso Este smbolo de aviso indica perigo. Encontra-se numa situao que
lhe poder causar danos fsicos. Antes de comear a trabalhar com qualquer
equipamento, familiarize-se com os perigos relacionados com circuitos
elctricos, e com quaisquer prticas comuns que possam prevenir possveis
acidentes.
Related SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
Documentation
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
The following guidelines help ensure your safety and protect the services gateway from
damage. The list of guidelines might not address all potentially hazardous situations in
your working environment, so be alert and exercise good judgment at all times.
Perform only the procedures explicitly described in these topics. Ensure that only
authorized service personnel perform other system services.
Keep the area around the chassis clear and free from dust before, during, and after
installation.
Keep tools away from areas where people could trip on them.
Wear safety glasses if you are working under any conditions that could be hazardous
to your eyes.
Do not perform any actions that create a potential hazard to people or make the
equipment unsafe.
Never install electrical jacks in wet locations unless the jacks are specifically designed
for wet environments.
Do not open or remove chassis covers or sheet metal parts unless instructions are
provided in this guide. Such an action could cause severe electrical shock.
Do not push or force any objects through any opening in the chassis frame. Such an
action could result in electrical shock or fire.
Avoid spilling liquid onto the services gateway chassis or onto any services gateway
component. Such an action could cause electrical shock or damage the services
gateway.
Avoid touching uninsulated electrical wires or terminals that have not been
disconnected from their power source. Such an action could cause electrical shock.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
To avoid harm to yourself or the device as you install and maintain it, follow the guidelines
for working with and near electrical equipment, as well as the safety procedures for
working with devices. For a discussion of how to make the installation site a safe
environment and a list of safety warnings, see General Site Installation Guidelines for
the SRX345 Services Gateway on page 22 and SRX345 Services Gateway General
Safety Guidelines and Warnings on page 103.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
Attention Cet appareil est installer dans des zones d'accs rserv. Ces
dernires sont des zones auxquelles seul le personnel de service peut accder
en utilisant un outil spcial, un mcanisme de verrouillage et une cl, ou tout
autre moyen de scurit. L'accs aux zones de scurit est sous le contrle
de l'autorit responsable de l'emplacement.
Aviso Esta unidade foi concebida para instalao em reas de acesso restrito.
Uma rea de acesso restrito uma rea qual apenas tem acesso o pessoal
de servio autorizado, que possua uma ferramenta, chave e fechadura
especial, ou qualquer outra forma de segurana. Esta rea controlada pela
autoridade responsvel pelo local.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
WARNING: Only trained and qualified personnel should install or replace the
services gateway.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
Many services gateway hardware components are sensitive to damage from static
electricity. Some components can be impaired by voltages as low as 30 V. You can easily
generate potentially damaging static voltages whenever you handle plastic or foam
packing material or if you move components across plastic or carpets. Observe the
following guidelines to minimize the potential for electrostatic discharge (ESD) damage,
which can cause intermittent or complete component failures:
Always use an ESD wrist strap or ankle strap, and verify that it is in direct contact with
your skin.
CAUTION: For safety, periodically check the resistance value of the ESD
strap. The resistance must be in the range of 1 to 10 Mohm.
When handling any component that is removed from the chassis, verify that the
equipment end of your ESD strap is attached to one of the ESD points on the chassis.
Avoid contact between the component and your clothing. ESD voltages emitted from
clothing can damage components.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
SRX345 Services Gateway Fire Safety Requirements and Fire Suppression Equipment
In the event of a fire emergency involving devices and other network equipment, the
safety of people is the primary concern. Establish procedures for protecting people in
the event of a fire emergency, provide safety training, and properly provision fire control
equipment and fire extinguishers.
In the event of an electrical hazard or an electrical fire, first turn power off to the equipment
at the source. Then use a Type C fire extinguisher to extinguish the fire. Type C fire
extinguishers, which use noncorrosive fire retardants such as carbon dioxide (CO ) and
2
Halotron, are most effective for suppressing electrical fires. Type C fire extinguishers
displace the oxygen from the point of combustion to eliminate the fire. For extinguishing
fire on or around equipment that draws air from the environment for cooling, use this
type of inert oxygen displacement extinguisher instead of an extinguisher that leave
residues on equipment.
Do not use multipurpose Type ABC chemical fire extinguishers (dry chemical fire
extinguishers) near Juniper Networks equipment. The primary ingredient in these fire
extinguishers is monoammonium phosphate, which is very sticky and difficult to clean.
In addition, in minute amounts of moisture, monoammonium phosphate can become
highly corrosive and corrodes most metals.
Any equipment in a room in which a chemical fire extinguisher has been discharged is
subject to premature failure and unreliable operation. The equipment is considered to
be irreparably damaged.
NOTE: To keep warranties effective, do not use a dry chemical fire extinguisher
to control a fire at or near a Juniper Networks services gateway. If a dry
chemical fire extinguisher is used, the unit is no longer eligible for coverage
under a service agreement.
Related SRX345 Services Gateway Definition of Safety Warning Levels on page 101
Documentation
SRX345 Services Gateway General Safety Guidelines and Warnings on page 103
SRX345 Services Gateway Safety Requirements, Warnings, and Guidelines on page 104
When working around the services gateway, observe the following safety guidelines to
prevent eye injury:
Do not look into unterminated ports or at fibers that connect to unknown sources.
WARNING: Do not stare into the laser beam or view it directly with optical
instruments.
Warnung Nicht direkt in den Strahl blicken und ihn nicht direkt mit optischen
Gerten prfen.
Avvertenza Non fissare il raggio con gli occhi n usare strumenti ottici per
osservarlo direttamente.
Aviso No olhe fixamente para o raio, nem olhe para ele directamente com
instrumentos pticos.
Varning! Rikta inte blicken in mot strlen och titta inte direkt p den genom
optiska instrument.
Avvertenza Quando i cavi in fibra non sono inseriti, radiazioni invisibili possono
essere emesse attraverso l'apertura della porta. Evitate di esporvi alle
radiazioni e non guardate direttamente nelle aperture.
Advarsel Unng utsettelse for strling, og stirr ikke inn i pninger som er pne,
fordi usynlig strling kan emiteres fra portens pning nr det ikke er tilkoblet
en fiberkabel.
Atencin! Debido a que la apertura del puerto puede emitir radiacin invisible
cuando no existe un cable de fibra conectado, evite mirar directamente a las
aperturas para no exponerse a la radiacin.
Battery-Handling Warning
Advarsel Det kan vre fare for eksplosjon hvis batteriet skiftes p feil mte.
Skift kun med samme eller tilsvarende type som er anbefalt av produsenten.
Kasser brukte batterier i henhold til produsentens instruksjoner.
Waarschuwing Tijdens onweer dat gepaard gaat met bliksem, dient u niet
aan het systeem te werken of kabels aan te sluiten of te ontkoppelen.
Warnung Arbeiten Sie nicht am System und schlieen Sie keine Kabel an
bzw. trennen Sie keine ab, wenn es gewittert.
Advarsel Utfr aldri arbeid p systemet, eller koble kabler til eller fra systemet
nr det tordner eller lyner.
Varning! Vid ska skall du aldrig utfra arbete p systemet eller ansluta eller
koppla loss kablar.
Warnung Vor der Arbeit an Gerten, die an das Netz angeschlossen sind,
jeglichen Schmuck (einschlielich Ringe, Ketten und Uhren) abnehmen.
Metallgegenstnde erhitzen sich, wenn sie an das Netz und die Erde
inskrnks genom att se till att det finns fritt utrymme p minst 15,2 cm omkring
ventilationsppningarna.
Atencin! El desecho final de este producto debe realizarse segn todas las
leyes y regulaciones nacionales
If an electrical accident results in an injury, take the following actions in this order:
1. Use caution. Be aware of potentially hazardous conditions that could cause further
injury.
3. If possible, send another person to get medical aid. Otherwise, assess the condition
of the victim, then call for help.
Install the services gateway in compliance with the following local, national, or
international electrical codes:
Locate the emergency power-off switch for the room in which you are working so that
if an electrical accident occurs, you can quickly turn off the power.
Do not work alone if potentially hazardous conditions exist anywhere in your workspace.
Never assume that power is disconnected from a circuit. Always check the circuit before
starting to work.
Carefully look for possible hazards in your work area, such as moist floors, ungrounded
power extension cords, and missing safety grounds.
Operate the services gateway within marked electrical ratings and product usage
instructions.
For the services gateway and peripheral equipment to function safely and correctly,
use the cables and connectors specified for the attached peripheral equipment, and
make certain they are in good condition.
AC-powered services gateways are shipped with a three-wire electrical cord with a
grounding-type plug that fits only a grounding-type power outlet. Do not circumvent
this safety feature. Equipment grounding should comply with local and national
electrical codes.
You must provide an external certified circuit breaker rated minimum 15 A in the building
installation.
The power cord serves as the main disconnecting device. The socket outlet must be
near the switch and be easily accessible.
WARNING: The attached power cable is only for this product. Do not use the
cable for another product.
Safety
EMC
CISPR 32:2012
EMI
Immunity
Environmental
Telco
Related SRX345 Services Gateway Acoustic Noise Compliance Statements on page 126
Documentation
SRX345 Services Gateway EMC Requirements on page 127
The maximum emitted sound pressure level is 70 dB(A) or less per EN ISO 7779.
German Translation:
Canada
This Class A digital apparatus complies with Canadian ICES-003.
European Community
This is a Class A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.
Israel
This product is Class A. In residential environments, the product may cause radio
interference, and in such a situation, the user may be required to take adequate measures.
Japan
This is a Class A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.
VCCI-A
United States
The services gateway has been tested and found to comply with the limits for a Class A
digital device of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy
and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference in which case the user will be required to
correct the interference at his own expense.
Index
Index on page 131
Index E
electrical
accident procedures.....................................................121
safety guidelines and warnings................................121
Symbols
AC power.................................................................122
#, comments in configuration statements....................xv
electromagnetic compatibility...........................................33
( ), in syntax descriptions.....................................................xv
EMC requirements
< >, in syntax descriptions....................................................xv
Canada..............................................................................127
[ ], in configuration statements.........................................xv
European Community.................................................127
{ }, in configuration statements.........................................xv
Hebrew..............................................................................127
| (pipe), in syntax descriptions...........................................xv
Japan..................................................................................127
United States..................................................................127
A
AC power safety guidelines................................................122 Ethernet port
accident procedures, electrical.........................................121 RJ-45...................................................................................37
acoustic noise compliance statement..........................126
agency approvals..................................................................125
F
font conventions.....................................................................xiv
B
battery-handling warning...................................................115
G
guidelines, electrical safety.................................................121
braces, in configuration statements.................................xv
brackets
I
angle, in syntax descriptions......................................xv
immunity standards.............................................................125
square, in configuration statements........................xv
installation
overview.............................................................................43
C
class 1 laser warning..............................................................112
J
class 1 LED warning................................................................112
jewelry removal warning......................................................117
comments, in configuration statements........................xv
JTAC..............................................................................................91
compliance statement, acoustic noise.........................126
Juniper Technical Assistance Center See JTAC
compliance statements for EMC requirements
Canada..............................................................................127
L
European Community.................................................127
laser beam warning...............................................................113
Hebrew..............................................................................127
laser safety guidelines...........................................................111
Japan..................................................................................127
LEDs
United States..................................................................127
class 1 warning................................................................112
components, packing for shipment................................96
safety warnings...............................................................111
console port, RJ-45................................................................38
lightning activity warning....................................................116
conventions
text and syntax...............................................................xiv
M
curly braces, in configuration statements......................xv
manuals
customer support...................................................................xvi
comments on...................................................................xv
contacting JTAC..............................................................xvi
customer support, contacting...........................................92 N
NEBS standards.....................................................................125
O T
operating temperature warning.......................................118 technical support
overview, installation of services gateway....................43 contacting JTAC..............................................................xvi
tools required for
P packing..............................................................................95
packing services gateway
components for shipment.........................................96 W
required tools and parts..............................................95 warning
parentheses, in syntax descriptions.................................xv electrical safety guidelines.........................................121
parts warnings
required for packing......................................................95 battery-handling............................................................115
power class 1 laser.......................................................................112
safety guidelines, AC...................................................122 class 1 LED........................................................................112
preventing ESD damage.....................................................107 jewelry removal...............................................................117
product disposal warning..................................................120 laser beam........................................................................113
lightning activity.............................................................116
Q operating temperature................................................118
qualified personnel warning.............................................106 product disposal...........................................................120
radiation from open apertures.................................114
R
radiation from open port apertures warning...............114
radio frequency interference...............................................33
repair policies...........................................................................92
restricted access area warning........................................104
return materials authorization See RMA
return procedure......................................................................92
RMA
return materials authorization..................................92
S
safety guidelines, laser..........................................................111
services gateway
packing for shipment...................................................95
returning............................................................................92
setup wizard
default setup mode......................................................68
description........................................................................67
guided setup mode.......................................................68
shipment
packing components...................................................96
packing services gateway...........................................95
signaling limitations...............................................................33
standards compliance.........................................................125
support, requesting from JTAC...................................91, 94
support, technical See technical support
syntax conventions................................................................xiv