Juniper SRX340 Bruksanvisning
Läs nedan 📖 manual på svenska för Juniper SRX340 (150 sidor) i kategorin Router. Denna guide var användbar för 14 personer och betygsatt med 4.5 stjärnor i genomsnitt av 2 användare
Sida 1/150
SRX340 Services Gateway Hardware Guide
Modified: 2017-08-14
Copyright © 2017, Juniper Networks, Inc.
Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Copyright © 2017 Juniper Networks, Inc. All rights reserved.
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. and/or its affiliates in
the United States and other countries. All other trademarks may be property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
SRX340 Services Gateway Hardware Guide
Copyright © 2017 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
http://www.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that
EULA.
Copyright © 2017, Juniper Networks, Inc.ii
Table of Contents
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Part 1 Overview
Chapter 1 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX340 Services Gateway Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
SRX340 Services Gateway CLI and J-Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Chapter 2 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
SRX340 Services Gateway Chassis Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Understanding the SRX340 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . 5
Understanding the SRX340 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . 8
Chapter 3 Interface Module Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
SRX340 Services Gateway Interface Modules Overview . . . . . . . . . . . . . . . . . . . . . 11
Chapter 4 Cooling System Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Understanding the SRX340 Services Gateway Cooling System . . . . . . . . . . . . . . . 13
Chapter 5 Power System Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Understanding the SRX340 Services Gateway Power Supply . . . . . . . . . . . . . . . . 15
Part 2 Site Planning and Specifications
Chapter 6 Planning and Preparing the Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
SRX340 Services Gateway Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . 19
SRX340 Services Gateway Environmental Specifications . . . . . . . . . . . . . . . . . . . 19
Site Preparation Checklist for the SRX340 Services Gateway . . . . . . . . . . . . . . . . 20
General Site Installation Guidelines for the SRX340 Services Gateway . . . . . . . . 22
Chapter 7 Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
SRX340 Services Gateway Rack-Mounting Requirements and Warnings . . . . . . 25
SRX340 Services Gateway Rack Size and Strength Requirements . . . . . . . . . . . . 29
SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes . . . 29
SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
iiiCopyright © 2017, Juniper Networks, Inc.
Chapter 8 Cabinet Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
SRX340 Services Gateway Cabinet Size and Clearance Requirements . . . . . . . . . 31
SRX340 Services Gateway Cabinet Airflow Requirements . . . . . . . . . . . . . . . . . . . 31
Chapter 9 Power Requirements and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
SRX340 Services Gateway Electrical Wiring Guidelines . . . . . . . . . . . . . . . . . . . . 33
SRX340 Services Gateway Power Specifications and Requirements . . . . . . . . . . 34
SRX340 Services Gateway Supported AC Power Cords . . . . . . . . . . . . . . . . . . . . 35
Chapter 10 Cable Specifications and Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
RJ-45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port . . . . . 37
RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port . . . . . . 37
Mini-USB Connector Pinouts for the SRX340 Services Gateway Console
Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Part 3 Initial Installation and Configuration
Chapter 11 Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
SRX340 Services Gateway Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . 43
Required Tools and Parts for Installing the SRX340 Services Gateway . . . . . . . . 43
SRX340 Services Gateway Autoinstallation Overview . . . . . . . . . . . . . . . . . . . . . 44
Chapter 12 Unpacking the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Unpacking the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Verifying Parts Received with the SRX340 Services Gateway . . . . . . . . . . . . . . . . 46
Chapter 13 Installing the Rack Mounting Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Preparing the SRX340 Services Gateway for Rack-Mount Installation . . . . . . . . 49
Connecting the SRX340 Services Gateway to the Building Structure . . . . . . . . . . 49
Chapter 14 Installing the SRX340 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . . . . 51
Installing the SRX340 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . . . . . . . . 51
Chapter 15 Connecting the SRX340 Services Gateway to Ground . . . . . . . . . . . . . . . . . 55
Required Tools and Parts for Grounding the SRX340 Services Gateway . . . . . . . 55
SRX340 Services Gateway Grounding Specifications . . . . . . . . . . . . . . . . . . . . . . 55
Connecting the SRX340 Services Gateway Grounding Cable . . . . . . . . . . . . . . . . 56
Chapter 16 Connecting the SRX340 Services Gateway to External Devices . . . . . . . . . 59
Connecting the Dial-Up Modem to the Console Port on the SRX340 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Connecting to the SRX340 Services Gateway CLI Using a Dial-Up Modem . . . . . 60
Chapter 17 Providing Power to the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . 63
Connecting the SRX340 Services Gateway to an AC Power Supply . . . . . . . . . . . 63
Powering On the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Powering Off the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Copyright © 2017, Juniper Networks, Inc.iv
SRX340 Services Gateway Hardware Guide
Chapter 18 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
SRX340 Services Gateway Software Configuration Overview . . . . . . . . . . . . . . . . 67
Understanding SRX340 Services Gateway Factory-Default Settings . . . . . . . . . . 68
Viewing SRX340 Services Gateway Factory-Default Settings . . . . . . . . . . . . . . . 68
Accessing J-Web on the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . 70
Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard . . . . . 71
AbouttheSetupWizard..........................................72
AbouttheDefaultSetupMode.....................................72
AbouttheGuidedSetupMode.....................................73
Accessing the CLI on the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . 75
Connecting to the SRX340 Services Gateway from the CLI Remotely . . . . . . . . . 76
Configuring the SRX340 Services Gateway Using the CLI . . . . . . . . . . . . . . . . . . . 77
Part 4 Maintaining and Troubleshooting Components
Chapter 19 Maintaining Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Required Tools and Parts for Maintaining the SRX340 Services Gateway
Hardware Components..........................................83
Routine Maintenance Procedures for the SRX340 Services Gateway . . . . . . . . . . 83
Maintaining the SRX340 Services Gateway Cooling System Components . . . . . 84
Maintaining the SRX340 Services Gateway Power Supply . . . . . . . . . . . . . . . . . . 84
Chapter 20 Troubleshooting Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Troubleshooting Resources for the SRX340 Services Gateway Overview . . . . . . 85
Troubleshooting Chassis and Interface Alarm Messages on the SRX340 Services
Gateway ......................................................86
Troubleshooting the Power System on the SRX340 Services Gateway . . . . . . . . 87
Using the RESET CONFIG Button on the SRX340 Services Gateway . . . . . . . . . . 88
Changing the RESET CONFIG Button Behavior on the SRX340 Services
Gateway ......................................................89
Part 5 Replacing Components
Chapter 21 Overview of Replacing Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
SRX340 Services Gateway Field Replaceable Units Overview . . . . . . . . . . . . . . . 93
Required Tools and Parts for Replacing the SRX340 Services Gateway
Components...................................................93
Chapter 22 Replacing Interface Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Replacing Mini-Physical Interface Modules in the SRX340 Services Gateway . . . 95
Chapter 23 Contacting Customer Support and Returning Components . . . . . . . . . . . . . 97
ContactingCustomerSupport.........................................97
Returning a SRX340 Services Gateway Component to Juniper Networks . . . . . . 98
Locating the SRX340 Services Gateway Chassis Serial Number and Agency
Labels ........................................................99
Locating the SRX340 Services Gateway Mini-Physical Interface Module Serial
NumberLabel..................................................99
vCopyright © 2017, Juniper Networks, Inc.
Table of Contents
Listing the SRX340 Services Gateway Component Details with the CLI . . . . . . . 100
Information You Might Need to Supply to JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Required Tools and Parts for Packing the SRX340 Services Gateway . . . . . . . . . 101
Packing the SRX340 Services Gateway for Shipment . . . . . . . . . . . . . . . . . . . . . 102
Packing SRX340 Services Gateway Components for Shipment . . . . . . . . . . . . . 103
Part 6 Safety and Regulatory Compliance Information
Chapter 24 General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Definitions of Safety Warning Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Restricted Access Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Qualified Personnel Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Prevention of Electrostatic Discharge Damage . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Chapter 25 Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Chapter 26 Laser and LED Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . 117
Laser and LED Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
General Laser Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Class 1 Laser Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Class 1 LED Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Laser Beam Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Radiation from Open Port Apertures Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Chapter 27 Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . . 121
Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . . . . . . . 121
Battery Handling Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Jewelry Removal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Lightning Activity Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Operating Temperature Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Product Disposal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Chapter 28 Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Action to Take After an Electrical Accident . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
General Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . 127
AC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Chapter 29 Agency Approvals and Regulatory Compliance Information . . . . . . . . . . . . 131
SRX340 Services Gateway Agency Approvals . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
SRX340 Services Gateway Acoustic Noise Compliance Statements . . . . . . . . . 132
SRX340 Services Gateway EMC Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Israel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Japan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
United States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Copyright © 2017, Juniper Networks, Inc.vi
SRX340 Services Gateway Hardware Guide
List of Figures
Part 1 Overview
Chapter 2 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Figure 1: SRX340 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Figure 2: SRX340 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . 7
Figure 3: SRX340 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Chapter 4 Cooling System Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Figure 4: Airflow Through the SRX340 Services Gateway Chassis . . . . . . . . . . . . . 13
Part 2 Site Planning and Specifications
Chapter 9 Power Requirements and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Figure 5: AC Plug Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Part 3 Initial Installation and Configuration
Chapter 14 Installing the SRX340 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . . . . 51
Figure 6: Installing the Rack Mount Brackets (Front Mount Position) . . . . . . . . . . 51
Figure 7: Installing the Rack Mount Brackets (Center Mount Position) . . . . . . . . . 52
Figure 8: Installing the Services Gateway in the Rack (Front Mount Shown, Center
Mount Similar) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Chapter 15 Connecting the SRX340 Services Gateway to Ground . . . . . . . . . . . . . . . . . 55
Figure 9: Connecting the Grounding Cable to the SRX340 Services Gateway . . . 57
Chapter 17 Providing Power to the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . 63
Figure 10: Connecting the SRX340 Services Gateway to an AC Power Supply . . . 64
Chapter 18 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Figure 11: Connecting to the Management Port on the SRX340 Services
Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Figure 12: Connecting to the Console Port on the SRX340 Services Gateway . . . . 75
Part 6 Safety and Regulatory Compliance Information
Chapter 24 General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Figure 13: Placing a Component into an Antistatic Bag . . . . . . . . . . . . . . . . . . . . . 113
viiCopyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.viii
SRX340 Services Gateway Hardware Guide
List of Tables
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Part 1 Overview
Chapter 2 Chassis Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Table 3: SRX340 Services Gateway Front Panel Components . . . . . . . . . . . . . . . . 6
Table 4: SRX340 Services Gateway Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . 7
Table 5: SRX340 Services Gateway Back Panel Components . . . . . . . . . . . . . . . . 8
Part 2 Site Planning and Specifications
Chapter 6 Planning and Preparing the Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Table 6: Physical Specifications for the SRX340 Services Gateway . . . . . . . . . . . 19
Table 7: Environmental Specifications for the SRX340 Services Gateway . . . . . . 20
Table 8: Site Preparation Checklist for SRX340 Services Gateway
Installation ....................................................20
Chapter 9 Power Requirements and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Table 9: Site Electrical Wiring Guidelines for the SRX340 Services Gateway . . . . 33
Table 10: Power System Electrical Specifications for the SRX340 Services
Gateway ......................................................34
Table 11: AC Power Cord Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Chapter 10 Cable Specifications and Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Table 12: RJ-45 Connector Pinouts for the SRX340 Services Gateway Ethernet
Port ..........................................................37
Table 13: RJ-45 Connector Pinouts for the SRX340 Services Gateway Console
Port ..........................................................38
Table 14: Mini-USB Type-B Connector Pinouts for the Services Gateway Console
Port ..........................................................38
Part 3 Initial Installation and Configuration
Chapter 12 Unpacking the SRX340 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Table 15: Parts List for a Fully Configured SRX340 Services Gateway . . . . . . . . . 46
Table 16: Accessory Parts List for the SRX340 Services Gateway . . . . . . . . . . . . . 47
Chapter 15 Connecting the SRX340 Services Gateway to Ground . . . . . . . . . . . . . . . . . 55
Table 17: Grounding Cable Specifications for the Services Gateway . . . . . . . . . . . 56
ixCopyright © 2017, Juniper Networks, Inc.
Part 4 Maintaining and Troubleshooting Components
Chapter 20 Troubleshooting Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Table 18: SRX340 Services Gateway Chassis Alarm Conditions and Corrective
Actions .......................................................86
Table 19: SRX340 Services Gateway Power LED Status . . . . . . . . . . . . . . . . . . . . 87
Copyright © 2017, Juniper Networks, Inc.x
SRX340 Services Gateway Hardware Guide
About the Documentation
•Documentation and Release Notes on page xi
•Supported Platforms on page xi
•Documentation Conventions on page xi
•Documentation Feedback on page xiii
•Requesting Technical Support on page xiv
Documentation and Release Notes
To obtain the most current version of all Juniper Networks ®technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
•SRX340
Documentation Conventions
Table 1 on page xii defines notice icons used in this guide.
xiCopyright © 2017, Juniper Networks, Inc.
Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware damage.Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xii defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type the
configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on the
terminal screen.
Fixed-width text like this
•A policy is a named structureterm
that defines match conditions and
actions.
•Junos OS CLI User Guide
•RFC 1997, BGP Communities Attribute
•Introduces or emphasizes important
new terms.
•Identifies guide names.
•Identifies RFC and Internet draft titles.
Italic text like this
Configure the machine’s domain name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for which
you substitute a value) in commands or
configuration statements.
Italic text like this
Copyright © 2017, Juniper Networks, Inc.xii
SRX340 Services Gateway Hardware Guide
Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
•To configure a stub area, include the
stub statement at the [edit protocols
ospf area area-id] hierarchy level.
•The console port is labeled CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy levels;
or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)
broadcast | multicast
( | | )string1 string2 string3
Indicates a choice between the mutually
exclusive keywords or variables on either
side of the symbol. The set of choices is
often enclosed in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the
same line as the configuration statement
to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop ;address
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
•In the Logical Interfaces box, select
All Interfaces.
•To cancel the configuration, click
Cancel.
Represents graphical user interface (GUI)
items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of menu
selections.
>(bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback, comments, and suggestions so that we can
improve the documentation. You can provide feedback by using either of the following
methods:
•Online feedback rating system—On any page of the Juniper Networks TechLibrary site
athttp://www.juniper.net/techpubs/index.html, simply click the stars to rate the content,
and use the pop-up form to provide us with information about your experience.
Alternately, you can use the online feedback form at
http://www.juniper.net/techpubs/feedback/.
xiiiCopyright © 2017, Juniper Networks, Inc.
About the Documentation
•E-mail—Send your commentstotechpubs-comments@juniper.net.Includethe document
or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or Partner Support Service
support contract, or are covered under warranty, and need post-sales technical support,
you can access our tools and resources online or open a case with JTAC.
•JTAC policies—For a complete understanding of our JTAC procedures and policies,
review the JTAC User Guide located at
http://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
•Product warranties—For product warranty information, visit
http://www.juniper.net/support/warranty/.
•JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with the
following features:
•Find CSC offerings: http://www.juniper.net/customers/support/
•Search for known bugs: http://www2.juniper.net/kb/
•Find product documentation: http://www.juniper.net/techpubs/
•Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/
•Download the latest versions of software and review release notes:
http://www.juniper.net/customers/csc/software/
•Search technical bulletins for relevant hardware and software notifications:
http://kb.juniper.net/InfoCenter/
•Join and participate in the Juniper Networks Community Forum:
http://www.juniper.net/company/communities/
•Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/
To verify service entitlement by product serial number, use our Serial Number Entitlement
(SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
Opening a Case with JTAC
You can open a case with JTAC on the Web or by telephone.
•Use the Case Management tool in the CSC at http://www.juniper.net/cm/.
•Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
Copyright © 2017, Juniper Networks, Inc.xiv
SRX340 Services Gateway Hardware Guide
For international or direct-dial options in countries without toll-free numbers, see
http://www.juniper.net/support/requesting-support.html.
xvCopyright © 2017, Juniper Networks, Inc.
About the Documentation
Copyright © 2017, Juniper Networks, Inc.xvi
SRX340 Services Gateway Hardware Guide
PART 1
Overview
•System Overview on page 3
•Chassis Description on page 5
•Interface Module Descriptions on page 11
•Cooling System Description on page 13
•Power System Description on page 15
1Copyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.2
SRX340 Services Gateway Hardware Guide
CHAPTER 1
System Overview
•SRX340 Services Gateway Description on page 3
•SRX340 Services Gateway CLI and J-Web Access on page 3
SRX340 Services Gateway Description
The SRX340 Services Gateway consolidates security, routing, switching, and WAN
interfacesfor midsize distributed enterprises. With advanced threat mitigation capabilities,
the services gateway provides cost-effective and secure connectivity across distributed
enterprises.
The SRX340 Services Gateway has a capacity of 3 gigabits per second (Gbps) and is 1
rack unit (U) tall. The services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports,
one management port, 4 GB of DRAM memory, 8 GB of flash memory, and four
Mini-Physical Interface Module (Mini-PIM) slots.
The SRX340 Services Gateway runs the Junos operating system (Junos OS) and supports
the following features:
•Firewall support with key features such as IPsec and VPN
•Intrusion Detection and Prevention (IDP)
•High availability
•QoS
•MPLS
Related
Documentation
SRX340 Services Gateway Chassis Overview on page 5•
•Understanding the SRX340 Services Gateway Front Panel on page 5
•Understanding the SRX340 Services Gateway Back Panel on page 8
SRX340 Services Gateway CLI and J-Web Access
The SRX340 Services Gateway runs the Junos operating system (Junos OS). You can
use two user interfaces to monitor, configure, troubleshoot, and manage the services
gateway:
3Copyright © 2017, Juniper Networks, Inc.
•J-Web interface—A Web-based graphical interface that allows you to operate the
services gateway without commands.
•Junos OS command-line interface (CLI)—Juniper Networks command shell that runs
on top of a UNIX-based operating system kernel. The CLI is a straightforward command
interface. On a single line, you type commands that are executed when you press the
Enter key. The CLI provides command help and command completion.
In addition, you can also use Junos Space Security Director to define and manage security
policies on the services gateway.
Related
Documentation
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Accessing the CLI on the SRX340 Services Gateway on page 75
Copyright © 2017, Juniper Networks, Inc.4
SRX340 Services Gateway Hardware Guide
CHAPTER 2
Chassis Description
•SRX340 Services Gateway Chassis Overview on page 5
•Understanding the SRX340 Services Gateway Front Panel on page 5
•Understanding the SRX340 Services Gateway Back Panel on page 8
SRX340 Services Gateway Chassis Overview
The SRX340 Services Gateway chassis is a rigid sheet metal structure that houses all of
the other services gateway components. The chassis measures 1.72 in. (4.36 cm) high,
17.36 in. (44.09 cm) wide, and 14.57 in. (37.01 cm) deep (from the front to the rear of the
chassis). The chassis installs in standard 800–mm (or larger) enclosed cabinets, 19 in.
equipment racks, or telecommunications open-frame racks.
CAUTION: Before removing or installing components of a functioning services
gateway, attach an electrostatic discharge (ESD) strap to an ESD point and
place the other end of the strap around your bare wrist. Failure to use an ESD
strap could result in damage to the device.
The services gateway must be connected to earth ground during normal operation. The
protective earthing terminal on the side of the chassis isprovided to connect the services
gateway to ground.
Related
Documentation
Understanding the SRX340 Services Gateway Front Panel on page 5•
•Understanding the SRX340 Services Gateway Back Panel on page 8
Understanding the SRX340 Services Gateway Front Panel
Figure 1 on page 6 shows the front panel of the SRX340 Services Gateway.
5Copyright © 2017, Juniper Networks, Inc.
Figure 1: SRX340 Services Gateway Front Panel
Table 3 on page 6 provides details about the front panel components.
Table 3: SRX340 Services Gateway Front Panel Components
DescriptionComponentCallout
Returns the services gateway to the rescue configuration or the
factory-default configuration.
Reset Config button1
•Serial—Connects a laptop to the services gateway for CLI
management. The port uses an RJ-45 serial connection and
supports the RS-232 (EIA-232) standard.
•USB—Connects a laptop to the services gateway for CLI
managementthrougha USBinterface.Theport accepts a Mini-B
type USB cable plug. A USB cable with Mini-B and Type A USB
plugs is supplied with the services gateway. To use the mini-USB
console port, you must download a USB driver to the
management device from the SRX340 Software Download
page or page.Silicon Labs
Console ports2, 8
Use the management (MGMT) port to connect to the device over
the network.
Management port3
Four slots for Mini-PIMs. The Mini-PIM slots can be used to provide
LAN and WAN functionality along with connectivityto various media
types.
Mini-PIM slots4
For personal safety, while working on the services gateway, use the
ESD outlet to plug in an ESD grounding strap to prevent your body
from sending static charges to the services gateway.
ESD point5
Eight 1 G small form-factor pluggable (SFP) ports for network
traffic.
1 G SFP ports6
Copyright © 2017, Juniper Networks, Inc.6
SRX340 Services Gateway Hardware Guide
Table 3: SRX340 Services Gateway Front Panel Components (continued)
DescriptionComponentCallout
Eight Gigabit Ethernet LAN ports (0/0 to 0/7)
The Gigabit Ethernet ports have the following characteristics:
•Use an RJ-45 connector
•Operate in full-duplex and half-duplex modes
•Support flow control
•Support autonegotiation
The Gigabit Ethernet ports can be used to:
•Function as front-end network ports
•Provide LAN and WAN connectivity to hubs, switches, local
servers, and workstations
•Forward incoming data packets to the services gateway
•Receive outgoing data packets from the services gateway
1 G Ethernet ports7
The services gateway has one USB port that accepts a USB storage
device.
USB port9
Indicate component and system status, and troubleshooting
information at a glance.
LEDs10
Use the Power button to shut down the services gateway.Power button11
Figure 2 on page 7 shows the LEDs on the front panel.
Figure 2: SRX340 Services Gateway Front Panel LEDs
Table 4 on page 7 lists the front panel LEDs.
Table 4: SRX340 Services Gateway Front Panel LEDs
DescriptionComponent
•Solid amber (noncritical alarm)
•Solid red (critical alarm)
•Off (no alarms)
ALARM
•Solid green (operating normally)
•Solid red (error detected)
STAT
7Copyright © 2017, Juniper Networks, Inc.
Chapter 2: Chassis Description
Table 4: SRX340 Services Gateway Front Panel LEDs (continued)
DescriptionComponent
•Solid green (receiving power)
•Solid red (power failure)
•Off (no power)
PWR
•Solid green (all HA links are available)
•Solid amber (some HA links are
unavailable)
•Solid red (HA links are not functional)
•Off (HA is disabled)
HA
•Solid green (Mini-PIM is functioning
normally)
•Solid red (Mini-PIM hardware failure)
•Off (Mini-PIM is not present or Mini-PIM is
not detected by the device)
mPIM0 , mPIM1, mPIM2, and mPIM3
Related
Documentation
SRX340 Services Gateway Chassis Overview on page 5•
•Understanding the SRX340 Services Gateway Back Panel on page 8
Understanding the SRX340 Services Gateway Back Panel
Figure 3 on page 8 shows the back panel of the SRX340 Services Gateway and
Table 5 on page 8 lists the components on the back panel.
Figure 3: SRX340 Services Gateway Back Panel
g000961
21 3
Table 5: SRX340 Services Gateway Back Panel Components
DescriptionComponentCallout
SSD storage device slot for
optional logging device.
SSD slot1
Keeps all the services
gateway components within
the acceptable temperature
range.
Fans2
Copyright © 2017, Juniper Networks, Inc.8
SRX340 Services Gateway Hardware Guide
Table 5: SRX340 Services Gateway Back Panel Components (continued)
DescriptionComponentCallout
Connects the services
gateway to the AC power
supply.
Power supply input3
Related
Documentation
•SRX340 Services Gateway Chassis Overview on page 5
•Understanding the SRX340 Services Gateway Front Panel on page 5
9Copyright © 2017, Juniper Networks, Inc.
Chapter 2: Chassis Description
Copyright © 2017, Juniper Networks, Inc.10
SRX340 Services Gateway Hardware Guide
CHAPTER 3
Interface Module Descriptions
•SRX340 Services Gateway Interface Modules Overview on page 11
SRX340 Services Gateway Interface Modules Overview
Mini-Physical Interface Modules (Mini-PIMs) are field-replaceable network interface
cards (NICs) supported on the SRX300 line of services gateways. You can easily insert
or remove Mini-PIMs from the front slots of the services gateway chassis. The Mini-PIMs
provide physical connections to a LAN or a WAN. The Mini-PIMs receive incoming packets
from the network and transmit outgoing packets to the network. During this process,
they perform framing and line-speed signaling for the medium type.
CAUTION: The Mini-PIMs are not hot-swappable. You must power off the
services gateway before removing or installing Mini-PIMs.
The following Mini-PIMs are supported on the SRX340 Services Gateway:
•1-Port Serial Mini-Physical Interface Module (SRX-MP-1SERIAL-R)
•1-Port T1/E1 Mini-Physical Interface Module (SRX-MP-1T1E1-R)
•1-Port VDSL2 (Annex A) Mini-Physical Interface Module (SRX-MP-1VDSL2-R)
•LTE Mini-Physical Interface Module (SRX-MP-LTE-AE and SRX-MP-LTE-AA)
NOTE: Gigabit-Backplane Physical Interface Modules (GPIMs) are not
supported on the SRX340 Services Gateway.
For more information on the Mini-PIMs, see the SRX300 Series and SRX550 High Memory
Gateway Interface Modules Reference.
Related
Documentation
•SRX340 Services Gateway Chassis Overview on page 5
•Understanding the SRX340 Services Gateway Front Panel on page 5
11Copyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.12
SRX340 Services Gateway Hardware Guide
CHAPTER 4
Cooling System Description
•Understanding the SRX340 Services Gateway Cooling System on page 13
Understanding the SRX340 Services Gateway Cooling System
The cooling system for the SRX340 Services Gateway includes four fixed fans. The fans
draw air through vents on the front of the chassis and exhaust the air through the back
of the chassis. The airflow produced by the fans keeps device components within the
acceptable temperature range.
Figure 4 on page 13 shows the airflow through the SRX340 Services Gateway chassis.
Figure 4: Airflow Through the SRX340 Services Gateway Chassis
Related
Documentation
•SRX340 Services Gateway Chassis Overview on page 5
•Understanding the SRX340 Services Gateway Front Panel on page 5
13Copyright © 2017, Juniper Networks, Inc.
•Understanding the SRX340 Services Gateway Back Panel on page 8
Copyright © 2017, Juniper Networks, Inc.14
SRX340 Services Gateway Hardware Guide
CHAPTER 5
Power System Description
•Understanding the SRX340 Services Gateway Power Supply on page 15
Understanding the SRX340 Services Gateway Power Supply
The SRX340 Services Gateway uses a fixed, internal AC power supply. The power supply
distributes the different output voltages to the device components according to their
voltage requirements. The power supply is fixed in the chassis and is not field-replaceable.
The power supply has a single AC appliance inlet that requires a dedicated AC power
feed.
Related
Documentation
•SRX340 Services Gateway Chassis Overview on page 5
•Understanding the SRX340 Services Gateway Front Panel on page 5
•Understanding the SRX340 Services Gateway Back Panel on page 8
•SRX340 Services Gateway Power Specifications and Requirements on page 34
15Copyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.16
SRX340 Services Gateway Hardware Guide
PART 2
Site Planning and Specifications
•Planning and Preparing the Site on page 19
•Rack Requirements on page 25
•Cabinet Requirements on page 31
•Power Requirements and Specifications on page 33
•Cable Specifications and Pinouts on page 37
17Copyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.18
SRX340 Services Gateway Hardware Guide
CHAPTER 6
Planning and Preparing the Site
•SRX340 Services Gateway Physical Specifications on page 19
•SRX340 Services Gateway Environmental Specifications on page 19
•Site Preparation Checklist for the SRX340 Services Gateway on page 20
•General Site Installation Guidelines for the SRX340 Services Gateway on page 22
SRX340 Services Gateway Physical Specifications
Table 6 on page 19 lists the physical specifications for the services gateway.
Table 6: Physical Specifications for the SRX340 Services Gateway
ValuePhysical Specification of Chassis
14.57 in. (37.01 cm)Depth
17.36 in. (44.09 cm)Width
1.72 in. (4.37 cm)Height
10.80 lb (4.89 kg)Weight
Related
Documentation
Understanding the SRX340 Services Gateway Front Panel on page 5•
•Understanding the SRX340 Services Gateway Back Panel on page 8
•SRX340 Services Gateway Environmental Specifications on page 19
SRX340 Services Gateway Environmental Specifications
Table 7 on page 20 provides the required environmental conditions for normal SRX340
Services Gateway operations.
19Copyright © 2017, Juniper Networks, Inc.
Table 7: Environmental Specifications for the SRX340 Services Gateway
ValueDescription
No performance degradation up to 10,000 ft
(3048 m)
Altitude
5% to 95%, noncondensingRelative humidity
•Operational temperature—32° F (0° C) to
104° F (40° C)
•Nonoperational temperature—4° F (-20°
C) to 158° F (70° C)
Temperature
122 WAverage power consumption
420 BTU/hrAverage heat dissipation
35 dBANoise level
Related
Documentation
SRX340 Services Gateway Physical Specifications on page 19•
Site Preparation Checklist for the SRX340 Services Gateway
Table 8 on page 20 provides a checklist of tasks you need to perform when preparing a
site for installing the SRX340 Services Gateway.
Table 8: Site Preparation Checklist for SRX340 Services Gateway
Installation
NotesDatePerformed By
Additional
InformationItem or Task
Environment
“SRX340
Services
Gateway
Environmental
Specifications”
on page 19
Verify that
environmental factors
such as temperature
and humidity do not
exceed device
tolerances.
Power
“SRX340
Services
Gateway
Electrical Wiring
Guidelines” on
page 33
Measure the distance
between the external
power sources and the
device installation site.
Copyright © 2017, Juniper Networks, Inc.20
SRX340 Services Gateway Hardware Guide
Table 8: Site Preparation Checklist for SRX340 Services Gateway
Installation (continued)
NotesDatePerformed By
Additional
InformationItem or Task
“Connecting the
SRX340
Services
Gateway
Grounding
Cable” on
page 56
Locate sites for
connection of system
grounding.
“SRX340
Services
Gateway Power
Specifications
and
Requirements”
on page 34
Calculate the power
consumption and
requirements.
Rack Requirements
“SRX340
Services
Gateway
Rack-Mounting
Requirements
and Warnings”
on page 25
Verify that your rack
meets the minimum
requirements.
Rack Installation
“Preparing the
SRX340
Services
Gateway for
Rack-Mount
Installation” on
page 49
Plan the rack location,
including required space
clearances.
“Connecting the
SRX340
Services
Gateway to the
Building
Structure” on
page 49
Secure the rack to the
floor and building
structure.
Cabinet Requirements
21Copyright © 2017, Juniper Networks, Inc.
Chapter 6: Planning and Preparing the Site
Table 8: Site Preparation Checklist for SRX340 Services Gateway
Installation (continued)
NotesDatePerformed By
Additional
InformationItem or Task
“SRX340
Services
Gateway
Cabinet Size
and Clearance
Requirements”
on page 31
Verify that your cabinet
meets the minimum
requirements.
“SRX340
Services
Gateway
Cabinet Airflow
Requirements”
on page 31
Plan the cabinet
location, including
required space
clearances.
Cables
•Acquire cables and
connectors.
•Reviewthemaximum
distance allowed for
each cable. Choose
the length of cable
based on the distance
between the
hardware
components being
connected.
•Planthe cablerouting
and management.
Related
Documentation
General Site Installation Guidelines for the SRX340 Services Gateway on page 22•
General Site Installation Guidelines for the SRX340 Services Gateway
The following precautions help you plan an acceptable operating environment for your
SRX340 Services Gateway and avoid environmentally caused equipment failures:
•For the cooling system to function properly, the airflow around the chassis must be
unrestricted. Allow sufficient clearance between the front and back of the chassis and
adjacent equipment. Ensure that there is adequate circulation in the installation location.
•Follow the ESD procedures to avoid damaging equipment. Static discharge can cause
components to fail completely or intermittently over time. For more information, see
Preventing Electrostatic Discharge Damage to the SRX340 Services Gateway.
•Ensure that a blank Mini-PIM panel is installed in the empty slot to prevent any
interruption or reduction in the flow of air across internal components.
Copyright © 2017, Juniper Networks, Inc.22
SRX340 Services Gateway Hardware Guide
Related
Documentation
•Site Preparation Checklist for the SRX340 Services Gateway on page 20
23Copyright © 2017, Juniper Networks, Inc.
Chapter 6: Planning and Preparing the Site
Copyright © 2017, Juniper Networks, Inc.24
SRX340 Services Gateway Hardware Guide
CHAPTER 7
Rack Requirements
•SRX340 Services Gateway Rack-Mounting Requirements and Warnings on page 25
•SRX340 Services Gateway Rack Size and Strength Requirements on page 29
•SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
•SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance on page 30
SRX340 Services Gateway Rack-Mounting Requirements and Warnings
Ensure that the equipment rack into which the services gateway is installed is evenly and
securely supported to avoid hazardous conditions that could result from uneven
mechanical loading.
WARNING: To prevent bodily injury when mounting or servicing the services
gateway in a rack, take the following precautions to ensure that the system
remains stable. The following directives help maintain your safety:
•The services gateway must be installed into a rack that is secured to the
building structure.
•The services gateway should be mounted at the bottom of the rack if it is
the only unit in the rack.
•When mounting the services gateway in a partially filled rack, load the rack
from the bottom to the top with the heaviest component at the bottom of
the rack.
•If the rack is provided with stabilizing devices, install the stabilizers before
mounting or servicing the services gateway in the rack.
Waarschuwing Om lichamelijk letsel te voorkomen wanneer u dit toestel in
een rek monteert of het daar een servicebeurt geeft, moet u speciale
voorzorgsmaatregelen nemen om ervoor te zorgen dat het toestel stabiel
blijft. De onderstaande richtlijnen worden verstrekt om uw veiligheid te
verzekeren:
25Copyright © 2017, Juniper Networks, Inc.
•De Juniper Networks services gateway moet in een stellage worden
geïnstalleerd die aan een bouwsel is verankerd.
•Dit toestel dient onderaan in het rek gemonteerd te worden als het toestel
het enige in het rek is.
•Wanneer u dit toestel in een gedeeltelijk gevuld rek monteert, dient u het
rek van onderen naar boven te laden met het zwaarste onderdeel onderaan
in het rek.
•Als het rek voorzien is van stabiliseringshulpmiddelen, dient u de
stabilisatoren te monteren voordat u het toestel in het rek monteert of het
daar een servicebeurt geeft.
Varoitus Kun laite asetetaan telineeseen tai huolletaan sen ollessa telineessä,
on noudatettava erityisiä varotoimia järjestelmän vakavuuden säilyttämiseksi,
jotta vältytään loukkaantumiselta. Noudata seuraavia turvallisuusohjeita:
•Juniper Networks services gateway on asennettava telineeseen, joka on
kiinnitetty rakennukseen.
•Jos telineessä ei ole muita laitteita, aseta laite telineen alaosaan.
•Jos laite asetetaan osaksi täytettyyn telineeseen, aloita kuormittaminen
sen alaosasta kaikkein raskaimmalla esineellä ja siirry sitten sen yläosaan.
•Jos telinettä varten on vakaimet, asenna ne ennen laitteen asettamista
telineeseen tai sen huoltamista siinä.
Attention Pour éviter toute blessure corporelle pendant les opérations de
montage ou de réparation de cette unité en casier, il convient de prendre des
précautions spéciales afinde maintenir la stabilité du système. Les directives
ci-dessous sont destinées à assurer la protection du personnel:
•Le rack sur lequel est monté leJuniper Networks services gateway doit être
fixé à la structure du bâtiment.
•Si cette unité constitue la seule unité montée en casier, elle doit êtreplacée
dans le bas.
•Si cette unité est montée dans un casier partiellement rempli, charger le
casier de bas en haut en plaçant l'élément le plus lourd dans le bas.
•Si le casier est équipé de dispositifs stabilisateurs, installer les stabilisateurs
avant de monter ou de réparer l'unité en casier.
Warnung Zur Vermeidung von Körperverletzung beim Anbringen oder Warten
dieser Einheit in einem Gestell müssen Sie besondere Vorkehrungen treffen,
um sicherzustellen, daß das System stabil bleibt. Die folgenden Richtlinien
sollen zur Gewährleistung Ihrer Sicherheit dienen:
Copyright © 2017, Juniper Networks, Inc.26
SRX340 Services Gateway Hardware Guide
•Der Juniper Networks services gateway muß in einem Gestell installiert
werden, das in der Gebäudestruktur verankert ist.
•Wenn diese Einheit die einzige im Gestell ist, sollte sie unten im Gestell
angebracht werden.
•Bei Anbringung dieser Einheit in einem zum Teil gefüllten Gestell ist das
Gestell von unten nach oben zu laden, wobei das schwerste Bauteil unten
im Gestell anzubringen ist.
•Wird das Gestell mit Stabilisierungszubehör geliefert, sind zuerst die
Stabilisatoren zu installieren, bevor Sie die Einheit im Gestell anbringen
oder sie warten.
Avvertenza Perevitare infortunifisiciduranteil montaggioo la manutenzione
di questa unità in un supporto, occorre osservare speciali precauzioni per
garantire che il sistemarimanga stabile.Le seguenti direttive vengono fornite
per garantire la sicurezza personale:
•Il Juniper Networks services gateway deve essere installato in un telaio, il
quale deve essere fissato alla struttura dell'edificio.
•Questa unità deve venire montata sul fondo del supporto, se si tratta
dell'unica unità da montare nel supporto.
•Quando questa unità viene montata in un supporto parzialmente pieno,
caricare il supporto dal basso all'alto, con il componente più pesante
sistemato sul fondo del supporto.
•Se il supporto è dotato di dispositivi stabilizzanti, installare tali dispositivi
prima di montareo di procedereallamanutenzione dell'unitànel supporto.
Advarsel Unngå fysiske skader under montering eller reparasjonsarbeid på
denne enheten når den befinner seg i et kabinett. Vær nøye med at systemet
er stabilt. Følgende retningslinjer er gitt for å verne om sikkerheten:
•Juniper Networksservicesgateway må installeres i et stativ som er forankret
til bygningsstrukturen.
•Denne enheten bør monteres nederst i kabinettet hvis dette er den eneste
enheten i kabinettet.
•Ved montering av denne enheten i et kabinett som er delvis fylt, skal
kabinettetlastesfra bunnen og opp med den tyngste komponentennederst
i kabinettet.
•Hvis kabinettet er utstyrt med stabiliseringsutstyr, skal stabilisatorene
installeres før montering eller utføring av reparasjonsarbeid på enheten i
kabinettet.
Aviso Para se prevenir contra danos corporais ao montar ou reparar esta
unidade numa estante, deverá tomar precauções especiais para se certificar
27Copyright © 2017, Juniper Networks, Inc.
Chapter 7: Rack Requirements
de que o sistema possui um suporte estável. As seguintes directrizes
ajudá-lo-ão a efectuar o seu trabalho com segurança:
•O Juniper Networks services gateway deverá ser instalado numa prateleira
fixa à estrutura do edificio.
•Esta unidade deverá ser montada na parte inferior da estante, caso seja
esta a única unidade a ser montada.
•Ao montar esta unidade numa estante parcialmente ocupada, coloque os
itens mais pesados na parte inferior da estante, arrumando-os de baixo
para cima.
•Se a estante possuir um dispositivo de estabilização, instale-o antes de
montar ou reparar a unidade.
¡Atención! Para evitar lesiones durante el montaje de este equipo sobre un
bastidor, o posteriormente durante su mantenimiento, se debe poner mucho
cuidado en que el sistema quede bien estable. Para garantizar su seguridad,
proceda según las siguientes instrucciones:
•El Juniper Networks services gateway debe instalarse en un bastidor fijado
a la estructura del edificio.
•Colocar el equipo en la parte inferior del bastidor, cuando sea la única
unidad en el mismo.
•Cuando este equipo se vaya a instalar en un bastidor parcialmente ocupado,
comenzar la instalación desde la parte inferior hacia la superior colocando
el equipo más pesado en la parte inferior.
•Si el bastidor dispone de dispositivos estabilizadores, instalar éstos antes
de montar o proceder al mantenimiento del equipo instalado en el bastidor.
Varning! För att undvika kroppsskada när du installerar eller utför
underhållsarbete på denna enhet på en ställning måste du vidta särskilda
försiktighetsåtgärder för att försäkra dig om att systemet står stadigt. Följande
riktlinjer ges för att trygga din säkerhet:
•Juniper Networks services gateway måste installeras i en ställning som är
förankrad i byggnadens struktur.
•Om denna enhet är den enda enheten på ställningen skall den installeras
längst ned på ställningen.
•Om denna enhet installeras på en delvis fylld ställning skall ställningen
fyllas nedifrån och upp, med de tyngsta enheterna längst ned på ställningen.
•Om ställningen är försedd med stabiliseringsdon skall dessa monteras fast
innan enheten installeras eller underhålls på ställningen.
Related
Documentation
SRX340 Services Gateway Rack Size and Strength Requirements on page 29•
Copyright © 2017, Juniper Networks, Inc.28
SRX340 Services Gateway Hardware Guide
•SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
•SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance on page 30
SRX340 Services Gateway Rack Size and Strength Requirements
When installing the services gateway in a rack, you must ensure that the rack complies
with a 1U (19 in. or 48.7 cm) rack as defined in Cabinets, Racks, Panels, and Associated
Equipment (document number EIA-310-D), published by the Electronic Industries Alliance
(http://www.ecaus.org/eia/site/index.html).
When selecting a rack, ensure that the physical characteristics of the rack comply with
the following specifications:
•The outer edges of the mounting brackets extend the width of either chassis to 19 in.
(48.3 cm).
•The front of the chassis extends approximately 0.5 in. (1.27 cm) beyond the mounting
ears.
•Maximum permissible ambient temperature when two devices are placed side by side
in a 19 in. rack is 40° C.
Related
Documentation
SRX340 Services Gateway Rack-Mounting Requirements and Warnings on page 25•
•SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
•SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance on page 30
SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes
The spacing of the mounting brackets and flange holes on the rack and device mounting
brackets are as follows:
•The holes within each rack set are spaced at 1 U (1.75 in. or 4.5 cm).
•The mounting brackets and front-mount flanges used to attach the chassis to a rack
are designed to fasten to holes spaced at rack distances of 1 U (1.75 in.).
•The mounting holes in the mounting brackets provided with the device are spaced
1.25 in. (3.2 cm) apart (top and bottom mounting hole).
Related
Documentation
SRX340 Services Gateway Rack-Mounting Requirements and Warnings on page 25•
•SRX340 Services Gateway Rack Size and Strength Requirements on page 29
•SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance on page 30
29Copyright © 2017, Juniper Networks, Inc.
Chapter 7: Rack Requirements
SRX340 Services Gateway Clearance Requirements for Airflow and Hardware
Maintenance
When planning the installation site for the SRX340 Services Gateway, you need to allow
sufficient clearance around the device. Consider the following:
•For the operating temperature of the services gateway to be optimal, the airflow around
the chassis must be unrestricted. The fan tray contains four fans and provides
front-to-back chassis cooling.
•For service personnel to remove and install hardware components, there must be
adequate space at the front and back of the device. Allow at least 24 in. (61 cm) both
in front of and behind the device.
•If you are mounting the device in a rack with other equipment, or if you are placing it
on the desktop near other equipment, ensure that the exhaust from other equipment
does not blow into the intake vents of the chassis.
For information on the airflow through the SRX340 Services Gateway chassis, see
“Understanding the SRX340 Services Gateway Cooling System” on page 13.
Related
Documentation
•SRX340 Services Gateway Rack-Mounting Requirements and Warnings on page 25
•SRX340 Services Gateway Rack Size and Strength Requirements on page 29
•SRX340 Services Gateway Spacing of Mounting Brackets and Flange Holes on page 29
Copyright © 2017, Juniper Networks, Inc.30
SRX340 Services Gateway Hardware Guide
CHAPTER 8
Cabinet Requirements
•SRX340 Services Gateway Cabinet Size and Clearance Requirements on page 31
•SRX340 Services Gateway Cabinet Airflow Requirements on page 31
SRX340 Services Gateway Cabinet Size and Clearance Requirements
You can install the SRX340 Services Gateway in a 19 in. (48.7 cm) cabinet as defined in
Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D)
published by the Electronic Industries Alliance (http://www.ecaus.org/eia/site/index.html).
You must mount the services gateway horizontally in the cabinet.
When selecting a cabinet, ensure that it meets the following specifications:
•The cabinet is at least 1U (3.50 in. or 8.89 cm) and can accommodate the services
gateway.
•The outer edges of the mounting brackets extend the width of either chassis to 19 in.
(48.7 cm), and the front of the chassis extends approximately 0.5 in. (1.27 cm) beyond
the mounting brackets.
•The minimum total clearance inside the cabinet is 30.7 in. (78 cm) between the inside
of the front door and the inside of the rear door.
NOTE: A cabinet larger than the minimum required provides better airflow
and reduces the chance of overheating.
Related
Documentation
SRX340 Services Gateway Cabinet Airflow Requirements on page 31•
SRX340 Services Gateway Cabinet Airflow Requirements
When you mount the SRX340 Services Gateway in a cabinet, you must ensure that
ventilation through the cabinet is sufficient to prevent overheating. Consider the following
when planning for chassis cooling:
•Ensure that the cool air supply you provide through the cabinet can adequately dissipate
the thermal output of the services gateway.
31Copyright © 2017, Juniper Networks, Inc.
•Install the services gateway as close as possible to the front of the cabinet so that the
cable management system clears the inside of the front door. Installing the chassis
close to the front of the cabinet maximizes the clearance in the rear of the cabinet for
critical airflow.
•Route and dress all cables to minimize the blockage of airflow to and from the chassis.
Related
Documentation
•SRX340 Services Gateway Cabinet Size and Clearance Requirements on page 31
Copyright © 2017, Juniper Networks, Inc.32
SRX340 Services Gateway Hardware Guide
CHAPTER 9
Power Requirements and Specifications
•SRX340 Services Gateway Electrical Wiring Guidelines on page 33
•SRX340 Services Gateway Power Specifications and Requirements on page 34
•SRX340 Services Gateway Supported AC Power Cords on page 35
SRX340 Services Gateway Electrical Wiring Guidelines
Table 9 on page 33 describes the factors you must consider while planning the electrical
wiring for the services gateway at your site.
CAUTION: It is particularly important to provide a properly grounded and
shielded environment and to use electrical surge-suppression devices.
Table 9: Site Electrical Wiring Guidelines for the SRX340 Services
Gateway
GuidelineSite Wiring Factor
To ensure that signaling functions optimally:
•Install wires correctly.
Improperly installed wires can emit radio interference.
•Do not exceed the recommended distances or pass wires
between buildings.
The potential for damage from lightning strikes increases if wires
exceed recommended distances or if wires pass between
buildings.
•Shield all conductors.
The electromagnetic pulse (EMP) caused by lightning can
damage unshielded conductors and destroy electronic devices.
Signaling Limitations
To reduce or eliminate the emission of RFI from your site wiring:
•Use twisted-pair cable with a good distribution of grounding
conductors.
•Use a high-quality twisted-pair cable with one ground conductor
for each data signal when applicable, if you must exceed the
recommended distances.
Radio Frequency
Interference (RFI)
33Copyright © 2017, Juniper Networks, Inc.
Table 9: Site Electrical Wiring Guidelines for the SRX340 Services
Gateway (continued)
GuidelineSite Wiring Factor
Provide a properly grounded and shielded environment and use
electrical surge-suppression devices.
Strong sources of electromagnetic interference (EMI) can cause
the following damage:
•Destroy the signal drivers and receivers in the device
•Conduct power surges over the lines into the equipment, resulting
in an electrical hazard
NOTE: If your site is susceptible to problems with EMC, particularly
from lightning or radio transmitters, you may want to seek expert
advice.
Electromagnetic
Compatibility (EMC)
CAUTION: To comply with intrabuilding lightning/surge requirements, the
intrabuilding wiring must be shielded. The shielding for the wiring must be
grounded at both ends.
Related
Documentation
SRX340 Services Gateway Power Specifications and Requirements on page 34•
•SRX340 Services Gateway Supported AC Power Cords on page 35
•General Electrical Safety Guidelines and Warnings
SRX340 Services Gateway Power Specifications and Requirements
The AC power system electrical specifications for the SRX340 Services Gateway are
listed in Table 10 on page 34.
Table 10: Power System Electrical Specifications for the SRX340 Services
Gateway
SpecificationPower Requirement
100 to 240 VACAC input voltage
50 to 60 HzAC input line frequency
1 to 1.5 AAC system current rating
WARNING: The AC power cord for the services gateway is intended for use
with the device only and not for any other use.
Copyright © 2017, Juniper Networks, Inc.34
SRX340 Services Gateway Hardware Guide
Related
Documentation
SRX340 Services Gateway Electrical Wiring Guidelines on page 33•
•SRX340 Services Gateway Supported AC Power Cords on page 35
SRX340 Services Gateway Supported AC Power Cords
WARNING: The AC power cord for the services gateway is intended for use
with the services gateway only and not for any other use.
NOTE: In North America, AC power cords must not exceed 4.5 m
(approximately 14.75 ft) in length, to comply with National Electrical code
(NEC) Section 400-8 (NFPA 75, 5-2.2) and 210-52, and Canadian Electrical
Code (CEC) Section 4-010(3).
Table 11 on page 35 provides power cord specifications, and Figure 5 on page 35 depicts
the plug on the AC power cord provided for each country or region.
Table 11: AC Power Cord Specifications
Plug StandardsElectrical SpecificationCountry
AS/NZ 3112-1993250 VAC, 10 A, 50 HzAustralia
GB2099.1 1996 and
GB 1002 1996
(CH1-10P)
250 VAC, 10 A, 50 HzChina
CEE (7) VII250 VAC, 10 A, 50 HzEurope (except Italy and United Kingdom)
CEI 23-16/VII250 VAC, 10 A, 50 HzItaly
JIS 8303125 VAC, 12 A, 50 or 60 HzJapan
NEMA 5-15125 VAC, 10 A, 60 HzNorth America
BS 1363A250 VAC, 10 A, 50 HzUnited Kingdom
Figure 5: AC Plug Types
NOTE: Power cords and cables must not block access to services gateway
components or drape where people might trip on them.
35Copyright © 2017, Juniper Networks, Inc.
Chapter 9: Power Requirements and Specifications
Related
Documentation
•SRX340 Services Gateway Electrical Wiring Guidelines on page 33
•SRX340 Services Gateway Power Specifications and Requirements on page 34
Copyright © 2017, Juniper Networks, Inc.36
SRX340 Services Gateway Hardware Guide
CHAPTER 10
Cable Specifications and Pinouts
•RJ-45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port on page 37
•RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37
•Mini-USB Connector Pinouts for the SRX340 Services Gateway Console Port on page 38
RJ-45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port
Table 12 on page 37 describes the RJ-45 connector pinouts for the Ethernet port.
Table 12: RJ-45 Connector Pinouts for the SRX340 Services Gateway
Ethernet Port
SignalPin
BI_DA+1
BI_DA2
BI_DB+3
BI_DC+4
BI_DC5
BI_DB6
BI_DD+7
BI_DD8
Related
Documentation
RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37•
•Mini-USB Connector Pinouts for the SRX340 Services Gateway Console Port on page 38
RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port
Table 13 on page 38 describes the RJ-45 connector pinouts for the console port.
37Copyright © 2017, Juniper Networks, Inc.
Table 13: RJ-45 Connector Pinouts for the SRX340 Services Gateway
Console Port
DescriptionSignalPin
Request to SendRTS1
Data Terminal ReadyDTR2
Transmit DataTXD3
Signal GroundGround4
Signal GroundGround5
Receive DataRXD6
Data Set ReadyDSR/DCD7
Clear to SendCTS8
Related
Documentation
RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37•
•Mini-USBConnector Pinouts for the SRX340 Services Gateway Console Port on page 38
Mini-USB Connector Pinouts for the SRX340 Services Gateway Console Port
The SRX340 Services Gateway has two console ports: an RJ-45 Ethernet port and a
mini-USB Type-B port. If your management device (laptop or PC) does not have a DB-9
male connector pin or an RJ-45 connector pin, you can connect your management device
to the Mini-USB Type-B console port of the services gateway by using a cable that has
a standard Type-A USB connector on one end and a Mini-USB Type-B (5-pin) connector
on the other end. Table 14 on page 38 describes the Mini-USB Type-B connector pinouts
for the console port.
NOTE: By design, the mini-USB console port has higher priority over the RJ-45
console port. If the mini-USB and RJ-45 console ports are both connected,
then the mini-USB console port will be active.
Table 14: Mini-USB Type-B Connector Pinouts for the Services Gateway
Console Port
DescriptionCable ColorSignalPin
+5 VDCRedVCC1
Data -WhiteD-2
Copyright © 2017, Juniper Networks, Inc.38
SRX340 Services Gateway Hardware Guide
Table 14: Mini-USB Type-B Connector Pinouts for the Services Gateway
Console Port (continued)
DescriptionCable ColorSignalPin
Data +GreenD+3
Could be not
connected (N/C),
connected to ground
(GND), or used as an
attached device
presence indicator
N/CX
GroundBlackGND4
Related
Documentation
•RJ-45 Connector Pinouts for the SRX340 Services Gateway Ethernet Port on page 37
•RJ-45 Connector Pinouts for the SRX340 Services Gateway Console Port on page 37
39Copyright © 2017, Juniper Networks, Inc.
Chapter 10: Cable Specifications and Pinouts
Copyright © 2017, Juniper Networks, Inc.40
SRX340 Services Gateway Hardware Guide
PART 3
Initial Installation and Configuration
•Installation Overview on page 43
•Unpacking the SRX340 Services Gateway on page 45
•Installing the Rack Mounting Hardware on page 49
•Installing the SRX340 Services Gateway in a Rack on page 51
•Connecting the SRX340 Services Gateway to Ground on page 55
•Connecting the SRX340 Services Gateway to External Devices on page 59
•Providing Power to the SRX340 Services Gateway on page 63
•Performing the Initial Configuration on page 67
41Copyright © 2017, Juniper Networks, Inc.
Copyright © 2017, Juniper Networks, Inc.42
SRX340 Services Gateway Hardware Guide
CHAPTER 11
Installation Overview
•SRX340 Services Gateway Installation Overview on page 43
•Required Tools and Parts for Installing the SRX340 Services Gateway on page 43
•SRX340 Services Gateway Autoinstallation Overview on page 44
SRX340 Services Gateway Installation Overview
After you have prepared the site for installation and unpacked the SRX340 Services
Gateway, you are ready to install the device. It is important to proceed through the
installation process in the following order:
1. Review the safety guidelines explained in “General Electrical Safety Guidelines and
Warnings” on page 127.
2. Prepare the services gateway for installation as described in “Preparing the SRX340
Services Gateway for Rack-Mount Installation” on page 49.
3. Install the services gateway as described in “Installing the SRX340 Services Gateway
in a Rack” on page 51.
4. Connect cables to external devices.
5. Connect the grounding cable as described in “Connecting the SRX340 Services
Gateway Grounding Cable” on page 56.
6. Power on the services gateway as described in “Powering On the SRX340 Services
Gateway” on page 64.
Related
Documentation
Required Tools and Parts for Installing the SRX340 Services Gateway on page 43•
•SRX340 Services Gateway Autoinstallation Overview on page 44
Required Tools and Parts for Installing the SRX340 Services Gateway
To install the services gateway, you need the following tools and parts:
43Copyright © 2017, Juniper Networks, Inc.
•Phillips (+) screwdriver, number 2
•Tie-wrap
•Electrostatic discharge (ESD) grounding wrist strap
Related
Documentation
SRX340 Services Gateway Installation Overview on page 43•
•SRX340 Services Gateway Autoinstallation Overview on page 44
SRX340 Services Gateway Autoinstallation Overview
The autoinstallation process begins any time a services gateway is powered on and
cannot locate a valid configuration file in the internal flash. Typically, a configuration file
is unavailable when a services gateway is powered on for the first time or if the
configuration file is deleted from the internal flash. The autoinstallation feature enables
you to deploy multiple services gateways from a central location in the network.
If you are setting up many devices, autoinstallation can help automate the configuration
process by loading configuration files onto new or existing devices automatically over
the network. You can use either the J-Web interface or the CLI to configure a device for
autoinstallation.
For the autoinstallation process to work, you must store one or more host-specific or
default configuration files on a configuration server in the network and have a service
available—typically Dynamic Host Configuration Protocol (DHCP)—to assign an IP address
to the services gateway.
Autoinstallation takes place automatically when you connect an Ethernet port on a new
services gateway to the network and power on the device. To simplify the process, you
can explicitly enable autoinstallation on a device and specify a configuration server, an
autoinstallation interface, and a protocol for IP address acquisition.
For more information about configuring autoinstallation, see the following topics:
•Installation and Upgrade Guide for Security Devices
•Network Monitoring and Troubleshooting Guide for Security Devices
Related
Documentation
•SRX340 Services Gateway Installation Overview on page 43
•Required Tools and Parts for Installing the SRX340 Services Gateway on page 43
Copyright © 2017, Juniper Networks, Inc.44
SRX340 Services Gateway Hardware Guide
CHAPTER 12
Unpacking the SRX340 Services Gateway
•Unpacking the SRX340 Services Gateway on page 45
•Verifying Parts Received with the SRX340 Services Gateway on page 46
Unpacking the SRX340 Services Gateway
Ensure that you have the following parts and tools available:
•Phillips (+) screwdriver, number 2
•Blank panels to cover any slots not occupied by a component
The SRX340 Services Gateway is shipped in a cardboard carton and secured with foam
packing material. The carton also contains an accessory box and quick start instructions.
NOTE: The services gateway is maximally protected inside the cardboard
carton. Do not unpack it until you are ready to begin installation.
To unpack the SRX340 Services Gateway:
1. Move the cardboard carton to a staging area as close to the installation site as possible,
where you have enough room to remove the components from the chassis.
2. Position the cardboard carton with the arrows pointing up.
3. Carefully open the top of the cardboard carton.
4. Remove the foam covering the top of the services gateway.
5. Remove the accessory box.
6. Verify the parts received against the lists in “Verifying Parts Received with the SRX340
Services Gateway” on page 46.
45Copyright © 2017, Juniper Networks, Inc.
7. Store the brackets and bolts inside the accessory box.
8. Save the shipping carton and packing materials in case you need to move or ship the
services gateway at a later time.
Related
Documentation
Verifying Parts Received with the SRX340 Services Gateway on page 46•
Verifying Parts Received with the SRX340 Services Gateway
The SRX340 Services Gateway shipment package contains a packing list. Check the
parts in the shipment against the items on the packing list. The packing list specifies the
part numbers and carries a brief description of each part in your order.
If any part on the packing list is missing, contact your customer service representative or
contact Juniper customer care from within the U.S. or Canada by telephone at
1-888-314-5822. For international-dial or direct-dial options in countries without toll-free
numbers, see http://www.juniper.net/support/requesting-support.html.
A fully configured services gateway contains the chassis with installed components,
listed in Table 15 on page 46, and an accessory box, which contains the parts listed in
Table 16 on page 47.
NOTE: The parts shipped with your services gateway can vary depending on
the configuration you ordered.
Table 15: Parts List for a Fully Configured SRX340 Services Gateway
QuantityComponent
11U SRX340 Services Gateway chassis with 4 Mini-PIM slots, 8 1 G Ethernet ports,
and 8 Gigabit Ethernet SFP ports (includes blank covers for Mini-PIM slots).
2Mounting brackets
8Mounting screws to attach the mounting brackets to the chassis
1RJ-45 cable
DB-9 adapter
1USB console cable with Type-A and Mini-B USB plugs
1Power cord appropriate for your geographical location
Copyright © 2017, Juniper Networks, Inc.46
SRX340 Services Gateway Hardware Guide
Table 16: Accessory Parts List for the SRX340 Services Gateway
QuantityPart
1Juniper Networks Product Warranty and RoHS Card
1End User License Agreement
1How to Set Up Your SRX340 Services Gateway
1Safety Guide
Related
Documentation
•Preparing the SRX340 Services Gateway for Rack-Mount Installation on page 49
47Copyright © 2017, Juniper Networks, Inc.
Chapter 12: Unpacking the SRX340 Services Gateway
Copyright © 2017, Juniper Networks, Inc.48
SRX340 Services Gateway Hardware Guide
CHAPTER 13
Installing the Rack Mounting Hardware
•Preparing the SRX340 Services Gateway for Rack-Mount Installation on page 49
•Connecting the SRX340 Services Gateway to the Building Structure on page 49
Preparing the SRX340 Services Gateway for Rack-Mount Installation
You can mount an SRX340 Services Gateway on four-post (telco) racks, enclosed
cabinets, and open-frame racks. Center-mount racks are not supported.
Before mounting the SRX340 Services Gateway in a rack:
•Verify that the site meets the requirements described in “Site Preparation Checklist
for the SRX340 Services Gateway” on page 20.
•Verify that you have the following parts available in your rack-mounting kit for the
SRX340 Services Gateway:
•Rack-mounting brackets
•Eight mounting screws to attach the mounting brackets to the chassis of the services
gateway
•Four mounting screws to attach the mounting brackets to the rack rail
•Verify that the racks or cabinets meet the specific requirements described in “SRX340
Services Gateway Rack Size and Strength Requirements” on page 29.
•Place the rack or cabinet in its permanent location, allowing adequate clearance for
airflow and maintenance, and secure it to the building structure. For more information,
see “SRX340 Services Gateway Cabinet Airflow Requirements” on page 31.
•Remove the gateway chassis from the shipping carton. For unpacking instructions, see
“Unpacking the SRX340 Services Gateway” on page 45.
Related
Documentation
Installing the SRX340 Services Gateway in a Rack on page 51•
Connecting the SRX340 Services Gateway to the Building Structure
Always secure the rack in which you are installing the SRX340 High Memory Services
Gateway to the structure of the building. If your geographical area is subject to
49Copyright © 2017, Juniper Networks, Inc.
earthquakes, bolt the rack to the floor. For maximum stability, also secure the rack to
ceiling brackets.
Related
Documentation
•Installing the SRX340 Services Gateway in a Rack on page 51
•Preparing the SRX340 Services Gateway for Rack-Mount Installation on page 49
Copyright © 2017, Juniper Networks, Inc.50
SRX340 Services Gateway Hardware Guide
CHAPTER 14
Installing the SRX340 Services Gateway
in a Rack
•Installing the SRX340 Services Gateway in a Rack on page 51
Installing the SRX340 Services Gateway in a Rack
You can front-mount the SRX340 Services Gateway in a rack. Many types of racks are
acceptable, including four-post (telco) racks, enclosed cabinets, and open-frame racks.
NOTE: If you are installing multiple devices in one rack, install the lowest one
first and proceed upward in the rack.
To install the services gateway in a rack:
1. Position a mounting bracket on each side of the chassis.
2. Use anumber-2 Phillips (+) screwdriver to install the screws thatsecure the mounting
brackets to the chassis. Use either the front mount position, as shown in
Figure 6 on page 51 Figure 7 on page 52, or the center mount position, as shown in .
Figure 6: Installing the Rack Mount Brackets (Front Mount Position)
51Copyright © 2017, Juniper Networks, Inc.
Figure 7: Installing the Rack Mount Brackets (Center Mount Position)
3. Have one person grasp the sides of the services gateway, lift it, and position it in the
rack.
4. Align the bottom hole in each mounting bracket with a hole in each rack rail, making
sure the chassis is level.
5. Have a second person install a mounting screw into each of the two aligned holes.
Use a Phillips (+) screwdriver, number 2 to tighten the screws.
6. Install the second screw in each mounting bracket as shown in Figure 8 on page 52.
Figure 8: Installing the Services Gateway in the Rack (Front Mount Shown,
Center Mount Similar)
7. Verify that the mounting screws on one side of the rack are aligned with the mounting
screws on the opposite side and that the services gateway is level.
Copyright © 2017, Juniper Networks, Inc.52
SRX340 Services Gateway Hardware Guide
Copyright © 2017, Juniper Networks, Inc.54
SRX340 Services Gateway Hardware Guide
CHAPTER 15
Connecting the SRX340 Services Gateway
to Ground
•Required Tools and Parts for Grounding the SRX340 Services Gateway on page 55
•SRX340 Services Gateway Grounding Specifications on page 55
•Connecting the SRX340 Services Gateway Grounding Cable on page 56
Required Tools and Parts for Grounding the SRX340 Services Gateway
To ground and to provide power to the services gateway, you need the following tools:
•Phillips (+) screwdrivers, numbers 1 and 2
•Electrostatic discharge (ESD) grounding wrist strap
•Wire cutters
Related
Documentation
SRX340 Services Gateway Grounding Specifications on page 55•
•Connecting the SRX340 Services Gateway Grounding Cable on page 56
SRX340 Services Gateway Grounding Specifications
To meet safety and electromagnetic interference (EMI) requirements and to ensure
proper operation, the SRX340 Services Gateway must be adequately grounded before
power is connected. You must provide a grounding lug to connect the services gateway
to earth ground.
WARNING: Before you connect power to the services gateway, a licensed
electrician must attach a cable lug to the grounding and power cables that
you supply. A cable with an incorrectly attached lug can damage the services
gateway (for example, by causing a short circuit).
The services gateway chassis has one grounding point on the side of the chassis. The
grounding point holes fit M5 screws.
55Copyright © 2017, Juniper Networks, Inc.
4. Place the grounding cable lug over the grounding point (sized for metric M5 x 0.8,
12-mm-long grounding screws) on the side of the chassis as shown in
Figure 9 on page 57.
5. Secure the grounding cable lug to the grounding point, first with the washer, then with
the screws.
Figure 9: Connecting the Grounding Cable to the SRX340 Services
Gateway
6. Dress the grounding cable and verify that it does not touch or block access to the
services gateway components and that it does not drape where people could trip on
it.
NOTE: The device should be permanently connected to ground during
operation.
Related
Documentation
•Required Tools and Parts for Grounding the SRX340 Services Gateway on page 55
•SRX340 Services Gateway Grounding Specifications on page 55
57Copyright © 2017, Juniper Networks, Inc.
Chapter 15: Connecting the SRX340 Services Gateway to Ground
Copyright © 2017, Juniper Networks, Inc.58
SRX340 Services Gateway Hardware Guide
NOTE: Most modems have an RS-232 DB-25 connector. You must
separately purchase an adapter to connect your modem to the RJ-45 to
DB-9 adapter and the Ethernet cable supplied with the services gateway.
Related
Documentation
Connecting to the SRX340 Services Gateway CLI Using a Dial-Up Modem on page 60•
Connecting to the SRX340 Services Gateway CLI Using a Dial-Up Modem
To remotely connect to the CLI through a dial-up modem connected to the console port
on the services gateway:
1. Connect a modem at your remote location to a management device such as a PC or
laptop computer.
2. Start your asynchronous terminal emulation application (such as Microsoft Windows
HyperTerminal) on the PC or laptop computer.
3. Select the COM port to which the modem is connected (for example, COM1).
4. Configure the port settings :
•Bits per second—9600
•Data bits—8
•Parity—None
•Stop bits—1
•Flow control—None
5. In the HyperTerminal window, enter AT.
For more information on the AT commands, see the following topics:
•Installation and Upgrade Guide for Security Devices
•Network Monitoring and Troubleshooting Guide
An response verifies that the modem can communicate successfully with the COMOK
port on the PC or laptop.
6. Dial the modem that is connected to the console port on the services gateway by
entering ATDT remote-modem-number. For example, if the number of the modem
connected to the console port on the services gateway is 0013033033030, enter
ATDT 0013033033030.
Copyright © 2017, Juniper Networks, Inc.60
SRX340 Services Gateway Hardware Guide
The services gateway login prompt appears.
7. Log in as the root user. No password is required at initial connection, but you must
assign a root password before committing any configuration settings.
Related
Documentation
•Connecting the Dial-Up Modem to the Console Port on the SRX340 Services Gateway
on page 59
61Copyright © 2017, Juniper Networks, Inc.
Chapter 16: Connecting the SRX340 Services Gateway to External Devices
CHAPTER 17
Providing Power to the SRX340 Services
Gateway
•Connecting the SRX340 Services Gateway to an AC Power Supply on page 63
•Powering On the SRX340 Services Gateway on page 64
•Powering Off the SRX340 Services Gateway on page 65
Connecting the SRX340 Services Gateway to an AC Power Supply
You connect AC power to the services gateway by attaching a power cord from the AC
power source to the AC appliance inlet located on the power supply faceplate. To connect
the device to the power supply:
NOTE: The services gateway must be connected to earth ground during
normal operation. The protective earthing terminal on the side of the chassis
is provided to connect the services gateway to ground.
1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the other end of the ESD strap to the ESD point on the rack.
2. Insert the appliance coupler end of the power cord into the appliance inlet on the
power supply faceplate.
NOTE: We strongly recommendthat you use only the 3-prong power cord
supplied with your services gateway.
3. Insert the power cord plug into an external AC power source receptacle as shown in
Figure 10 on page 64. Verify that the power cord does not block the air exhaust and
access to services gateway components or drape where people could trip on it.
63Copyright © 2017, Juniper Networks, Inc.
Figure 10: Connecting the SRX340 Services Gateway to an AC Power
Supply
g000958
CAUTION: We recommend using a surge protector for the power connection.
Related
Documentation
Powering On the SRX340 Services Gateway on page 64•
•Powering Off the SRX340 Services Gateway on page 65
Powering On the SRX340 Services Gateway
To power on the services gateway:
1. Insert the power cord plug into an AC power source receptacle.
2. Turn on the power to the AC power receptacle.
The device starts automatically as the power supply completes its startup sequence.
The PWR LED lights during startup and remains on when the device is operating normally.
NOTE: After the power supply is turned on, it can take up to 60 seconds for
status indicators—such as the STAT and PWR LEDs—to show that the power
supply is functioning normally. Ignore error indicators that appear during the
first 60 seconds.
NOTE: When the system is completely powered off and you turn on the power
supply, the device starts as the power supply completes its startup sequence.
If the device finishes starting and you need to power off the system again,
first issue the CLI request system power-off command.
Related
Documentation
Connecting the SRX340 Services Gateway to an AC Power Supply on page 63•
•Powering Off the SRX340 Services Gateway on page 65
Copyright © 2017, Juniper Networks, Inc.64
SRX340 Services Gateway Hardware Guide
Powering Off the SRX340 Services Gateway
You can power off the services gateway in one of the following ways:
•Graceful shutdown—Press and immediately release the Power button. The device
begins gracefully shutting down the operating system and then powers itself off.
CAUTION: Use the graceful shutdown method to power off or reboot the
services gateway.
•Forced shutdown—Press the Power button and hold it for ten seconds. The device
immediately powers itself off without shutting down the operating system.
CAUTION: Use the forced shutdown method as a last resort to recover the
services gateway if the services gateway operating system is not responding
to the graceful shutdown method.
WARNING: Do not press the Power button while the deviceis shutting down.
CAUTION: Forced shutdown can result in data loss and corruption of the file
system.
NOTE: To remove power completely from the device, unplug the power cord
or switch off the AC power source.
After powering off a power supply, wait at least 10 seconds before turning it
back on. After powering on a power supply, wait at least 10 seconds before
turning it off.
The Power button on the services gateway is a standby power switch, which
will not turn off the input power to the services gateway.
TIP: When you are powering off the device, the CLI displays the following
message: Turning the system power off. You can now safely remove the power
cable to completely power off the device.
NOTE: You can use the request system reboot CLI command to schedule a
reboot.
65Copyright © 2017, Juniper Networks, Inc.
Chapter 17: Providing Power to the SRX340 Services Gateway
CHAPTER 18
Performing the Initial Configuration
•SRX340 Services Gateway Software Configuration Overview on page 67
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
•Configuring the SRX340 Services Gateway Using the CLI on page 77
SRX340 Services Gateway Software Configuration Overview
The services gateway is shipped with the Juniper Networks Junos operating system (Junos
OS) preinstalled and ready to be configured when the device is powered on. You can
perform the initial software configuration of the services gateway by using the
browser-based setup wizard or by using the command-line interface (CLI).
Before configuring the device, gather the configuration information required to deploy
the device in your network. At a minimum, the setup wizard requires the following
information:
•Device name
•Password for the root user
•Management interface
•Time information for the services gateway location
Related
Documentation
Understanding SRX340 Services Gateway Factory-Default Settings on page 68•
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
67Copyright © 2017, Juniper Networks, Inc.
blv-defaults.conf srx210he2-factory.conf
ex9204-factory.conf srx210he2-poe-defaults.conf
ex9208-factory.conf srx210he2-poe-factory.conf
ex9214-factory.conf srx220-8xge-factory.conf
j-series-defaults.conf srx220-poe-8xge-factory.conf
jnu-factory.conf srx220h-defaults.conf
jsrxsme-series-defaults.conf srx220h-factory.conf
jsrxsme-series-factory.conf srx220h-poe-defaults.conf
junos-defaults.conf srx220h-poe-factory.conf
junos-factory.conf srx220h2-defaults.conf
junos-fips-defaults.conf srx220h2-factory.conf
ptx-series-defaults.conf srx220h2-poe-defaults.conf
shmlog srx220h2-poe-factory.conf
srx100-8xfe-factory.conf srx240-16xge-factory.conf
srx100b-defaults.conf srx240-poe-16xge-factory.conf
srx100b-factory.conf srx240b-factory.conf
srx100h-defaults.conf srx240b2-factory.conf
srx100h-factory.conf srx240h-dc-defaults.conf
srx100h2-defaults.conf srx240h-dc-factory.conf
srx100h2-factory.conf srx240h-defaults.conf
srx110-8xfe-vdsl-factory.conf srx240h-factory.conf
srx110-8xfe-vdsl-wl-factory.conf srx240h-poe-defaults.conf
srx110-8xfe-wl-factory.conf srx240h-poe-factory.conf
srx110b-defaults.conf srx240h2-dc-defaults.conf
srx110b-va-defaults.conf srx240h2-dc-factory.conf
srx110b-va-factory.conf srx240h2-defaults.conf
srx110b-vb-defaults.conf srx240h2-factory.conf
srx110b-vb-factory.conf srx240h2-poe-defaults.conf
srx110b-wl-defaults.conf srx240h2-poe-factory.conf
srx110b-wl-factory.conf srx300-8xge-factory.conf
srx110h-defaults.conf srx300-defaults.conf
srx110h-va-defaults.conf srx300-factory.conf
srx110h-va-factory.conf srx300-lem-factory.conf
srx110h-va-wl-defaults.conf srx320-8xge-factory.conf
srx110h-va-wl-factory.conf srx320-defaults.conf
srx110h-vb-defaults.conf srx320-factory.conf
srx110h-vb-factory.conf srx320-lem-factory.conf
srx110h-vb-wl-defaults.conf srx320-poe-8xge-factory.conf
srx110h-vb-wl-factory.conf srx320-poe-defaults.conf
srx110h-wl-defaults.conf srx320-poe-factory.conf
srx110h-wl-factory.conf srx320-poe-lem-factory.conf
srx110h2-va-defaults.conf srx340-16xge-factory.conf
srx110h2-va-factory.conf srx340-defaults.conf
srx110h2-vb-defaults.conf srx340-factory.conf
srx110h2-vb-factory.conf srx340-lem-factory.conf
srx210-2xge-6xfe-factory.conf srx345-defaults.conf
srx210-poe-2xge-6xfe-factory.conf srx345-factory.conf
srx210b-defaults.conf srx345-lem-factory.conf
srx210b-factory.conf srx550-6xge-factory.conf
srx210be-defaults.conf srx550-defaults.conf
srx210be-factory.conf srx550-factory.conf
srx210h-defaults.conf srx550m-6xge-factory.conf
srx210h-factory.conf srx550m-defaults.conf
srx210h-poe-defaults.conf srx550m-factory.conf
srx210h-poe-factory.conf srx650-4xge-factory.conf
srx210he-defaults.conf srx650-defaults.conf
srx210he-factory.conf srx650-factory.conf
srx210he-poe-defaults.conf subs-mgmt-proc-set
69Copyright © 2017, Juniper Networks, Inc.
Chapter 18: Performing the Initial Configuration
srx210he-poe-factory.conf vrr-series-defaults.conf
srx210he2-defaults.conf
5. View the required default config file.
% vi config filename
Related
Documentation
SRX340 Services Gateway Software Configuration Overview on page 67•
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
•Configuring the SRX340 Services Gateway Using the CLI on page 77
Accessing J-Web on the SRX340 Services Gateway
The J-Web interface is a Web-based graphical interface that allows you to operate a
services gateway without commands.
NOTE: To access the J-Web interface, your management device requires one
of the following supported browsers:
•Microsoft Internet Explorer version 10 or 11
•Mozilla Firefox version 40 or later
•Google Chrome version 55 or later
To access J-Web:
1. Connect the management port MGMT to the Ethernet port on the management device,
using an RJ-45 cable as shown in Figure 11 on page 71.
Copyright © 2017, Juniper Networks, Inc.70
SRX340 Services Gateway Hardware Guide
Figure 11: Connecting to the Management Port on the SRX340 Services
Gateway
2. Configure a static IP address in the 192.168.1.0/24 network for the management device.
Do not assign the 192.168.1.1 IP address to the management device, as this IP address
is assigned to the device. You can use the (oripconfig ifconfig for Macintosh or Linux
users) command to verify the IP address.
3. Open a Web browser on the management device and enter the IP address
http://192.168.1.1 in the address field.
Related
Documentation
SRX340 Services Gateway Software Configuration Overview on page 67•
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
•Configuring the SRX340 Services Gateway Using the CLI on page 77
Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard
This topic describes how to perform the initial software configuration of your services
gateway using the setup wizard.
This topic includes the following sections:
•About the Setup Wizard on page 72
•About the Default Setup Mode on page 72
•About the Guided Setup Mode on page 73
71Copyright © 2017, Juniper Networks, Inc.
Chapter 18: Performing the Initial Configuration
About the Setup Wizard
The setup wizard guides you through the step-by-step configuration of a services gateway
that can securely pass traffic. To help guide you through the process, the wizard:
•Provides recommended settings based on your previous selections. For example, the
wizard recommends security policies based on the security topology you have defined.
•Determines which configuration tasks to present to you based on your selections.
•Flags any missing required configuration when you attempt to leave a page.
•Indicates which configuration elements or tasks are unavailable to you based on your
previous selections by graying them out.
You can choose one of the following setup modes to configure the services gateway:
•Default Setup mode—This mode allows you to quickly set up a services gateway in a
default security configuration. In this mode, you can configure basic system settings,
such as the administrator password, and download purchased licenses. Any additional
configuration can be carried out after completing the wizard setup.
•Guided Setup mode—This mode allows you to set up a services gateway in a custom
security configuration.
NOTE: It is mandatory to configure only the device name and root password.
You can skip all the other steps by clicking to go directly to the ConfirmNext
& Apply page to apply the configuration.
About the Default Setup Mode
If you choose the Default Setup mode, the wizard takes you through the minimal
configuration needed to set up the services gateway that can securely pass traffic in the
default configuration.
In the Default Setup mode, you configure:
•Device name
•Password for the root account
•Time information for the services gateway location:
•Local time zone
•Name or IP address of a Network Time Protocol (NTP) server, if NTP is used to set
the time on the services gateway
•Local date and time if an NTP server is not used to set the time
•Management interface
Copyright © 2017, Juniper Networks, Inc.72
SRX340 Services Gateway Hardware Guide
You cannot do additional configuration in the Default Setup mode. You must commit
your changes and exit the wizard to perform any additional configuration. You can perform
additional configuration by rerunning the wizard in the Guided Setup mode, by using the
J-Web interface, or by using the CLI.
To configure your services gateway in the Default Setup mode:
1. Connect port 0/0 0/15or to the ISP device to obtain a dynamic IP address. Ensure
that the cable connecting the ISP-supplied device to the SRX Series device is firmly
seated.
2. Configure the basic settings – device name, root account information, management
interface, and system time.
3. Configure the security policy – licenses.
4. Review the settings.
NOTE: Verify that the internal zone IP and management interface IP are
on different networks.
5. Click . Click to complete the setup.Apply Settings Done
NOTE: Check the connectivity from the management device to the SRX
Series device. You might lose connectivity to the SRX Series device if you
have changed the management interface IP. Click the URL for reconnection
instructions on the Confirm & Apply page to reconnect, if required.
About the Guided Setup Mode
If you choose the Guided Setup mode, the wizard guides you through configuring your
services gateway in a custom security configuration. To configure your services gateway
in the Guided Setup mode:
1. Connect port 0/0 to the ISP device to obtain a dynamic IP address. Ensure that the
cable connecting the ISP-supplied device to the SRX Series device is firmly seated.
2. Select the expertise level as or . The following table compares the BasicBasic Expert
and Expert levels:
ExpertBasic
Can configure more than three internal zonesCan configure only three internal zones
Can configure static IP, static pool, and dynamic
IP for the Internet zone
Can configure static and dynamic IP for the
Internet zone
Can configure internal zone serviceCan configure internal zone service
Can configure internal destination NATCannot configure internal destination NAT
73Copyright © 2017, Juniper Networks, Inc.
Chapter 18: Performing the Initial Configuration
3. Configure the basic settings:
a. Device name
b. Password for the root account
c. Management interface
d. Time
4. Configure the security topology:
a. Internet zone
b. Internal zones
c. DMZ
5. Configure the security policy:
a. Licenses
b. DMZ policy
c. Internal policy
d. Remote access
6. Configure Network Address Translation (source NAT).
7. Review the settings and click Apply Setting.
NOTE: Check the connectivity from the management device to the SRX
Series device. You might lose connectivity to the SRX Series device if you
have changedthe management interface IP. Clickthe URL for reconnection
instructions on the Confirm & Apply page to reconnect, if required.
8. Click to complete the setup.Done
After you finish configuring the services gateway with the setup wizard and commit your
configuration, youare redirected tothe J-Web interface.Thereafter, whenever you connect
to the services gateway, you are placed in the J-Web interface. You can access the setup
wizard from the J-Web interface and use it to reconfigure your services gateway. To do
so, select Configure > Device Setup > Set Up. You can either edit an existing configuration
or create a new configuration.
NOTE: If you elect to create a new configuration, then all the current
configuration in the services gateway will be deleted.
Related
Documentation
SRX340 Services Gateway Software Configuration Overview on page 67•
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
Copyright © 2017, Juniper Networks, Inc.74
SRX340 Services Gateway Hardware Guide
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
•Configuring the SRX340 Services Gateway Using the CLI on page 77
Accessing the CLI on the SRX340 Services Gateway
To access the CLI on the SRX340 Services Gateway:
1. Plug one end of the Ethernet cable into the RJ-45 to DB-9 serial port adapter supplied
with your services gateway.
2. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management
device.
3. Connect the other end of the Ethernet cable to the serial console port on the services
gateway.
NOTE: Alternately, you can use the USB cable to connect to the mini-USB
console port on the services gateway. To use the mini-USB console port,
you must download a USB driver to the management device from the
SRX340 Software Download Silicon Labspage or page.
Figure 12: Connecting to the Console Port on the SRX340 Services
Gateway
4. Start your asynchronous terminal emulation application (such as Microsoft Windows
HyperTerminal) and select the appropriate COM port to use (for example, COM1).
5. Configure the serial port settings with the following values:
75Copyright © 2017, Juniper Networks, Inc.
Chapter 18: Performing the Initial Configuration
•Baud rate—9600
•Parity—N
•Data bits—8
•Stop bits—1
•Flow control—none
6. Power on the services gateway. You can start performing initial software configuration
on the services gateway after the device is up.
Related
Documentation
SRX340 Services Gateway Software Configuration Overview on page 67•
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Connecting to the SRX340 Services Gateway from the CLI Remotely on page 76
•Configuring the SRX340 Services Gateway Using the CLI on page 77
Connecting to the SRX340 Services Gateway from the CLI Remotely
To connect the services gateway to a network for out-of-band management:
1. Plug one end of an Ethernet cable with RJ-45 connectors into the MGMT port on the
front panel of the services gateway.
2. Plug the other end of the cable into the management device.
Related
Documentation
SRX340 Services Gateway Software Configuration Overview on page 67•
•Understanding SRX340 Services Gateway Factory-Default Settings on page 68
•Viewing SRX340 Services Gateway Factory-Default Settings on page 68
•Accessing J-Web on the SRX340 Services Gateway on page 70
•Configuring the SRX340 Services Gateway Using the J-Web Setup Wizard on page 71
•Accessing the CLI on the SRX340 Services Gateway on page 75
•Configuring the SRX340 Services Gateway Using the CLI on page 77
Copyright © 2017, Juniper Networks, Inc.76
SRX340 Services Gateway Hardware Guide
Configuring the SRX340 Services Gateway Using the CLI
This sample procedure explains how you can create an initial configuration using CLI
commands to connect the SRX340 Services Gateway to the network.
1. Verify that the device is powered on.
2. Log in as the root user. Do not enter a password.
3. Start the CLI.
root@% cli
root>
4. Enter configuration mode.
configure
[edit]
root#
5. Set the root authentication password by entering a cleartext password, an encrypted
password, or an SSH public key string (DSA or RSA).
[edit]
root# set system root-authentication plain-text-password
New password: password
Retype new password: password
6. Configure an administrator account on the device. When you are prompted, enter the
password for the administrator account.
[edit]
root# set system login user admin class super-user authentication plain-text-password
New password: password
Retype new password: password
7. Commit the configuration to activate it on the services gateway.
[edit]
root# commit
8. Log in as the administrative user you configured in Step .6
77Copyright © 2017, Juniper Networks, Inc.
Chapter 18: Performing the Initial Configuration
9. Configure the name of the services gateway. If the name includes spaces, enclose the
name in quotation marks (“ ”).
configure
[edit]
admin# set system host-name host-name
10. Configure the IP address and prefix length for the services gateway Ethernet interface.
[edit]
admin# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
NOTE: The ge-0/0/0 interface is for the ISP, and the ge-0/0/1 interface
is for the LAN.
12. Configure the default route.
[edit]
admin# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin# set security zones security-zone untrust interfaces ge-0/0/0
admin# set security zones security-zone trust interfaces ge-0/0/1
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
system-services all
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
protocols all
14. Configure basic security policies.
[edit]
admin# set security policies from-zone trust to-zone trust policy matchpolicy-name
source-address any destination-address any application any
Copyright © 2017, Juniper Networks, Inc.78
SRX340 Services Gateway Hardware Guide
Produktspecifikationer
| Varumärke: | Juniper |
| Kategori: | Router |
| Modell: | SRX340 |
Behöver du hjälp?
Om du behöver hjälp med Juniper SRX340 ställ en fråga nedan och andra användare kommer att svara dig
Router Juniper Manualer
18 September 2024
18 September 2024
18 September 2024
18 September 2024
18 September 2024
18 September 2024
18 September 2024
Router Manualer
- Router Xiaomi
- Router Bosch
- Router Huawei
- Router HP
- Router DeWalt
- Router Motorola
- Router Nokia
- Router Siemens
- Router Topcom
- Router VTech
- Router Alcatel
- Router Allnet
- Router Alfa
- Router Allied Telesis
- Router Airlive
- Router Anker
- Router Silverline
- Router Edimax
- Router Strong
- Router Hikvision
- Router Proximus
- Router Arris
- Router BenQ
- Router Makita
- Router Hitachi
- Router Thomson
- Router Gembird
- Router Black And Decker
- Router Asus
- Router Skil
- Router Eminent
- Router Renkforce
- Router Vivanco
- Router Festool
- Router Sitecom
- Router Metabo
- Router TP Link
- Router Manhattan
- Router Ezviz
- Router Black Box
- Router Trust
- Router Milwaukee
- Router Hikoki
- Router Sagem
- Router Roland
- Router ZTE
- Router Nilox
- Router Einhell
- Router Hama
- Router Sonos
- Router AVM
- Router TCL
- Router Gigabyte
- Router Nec
- Router Techly
- Router Totolink
- Router Cisco
- Router Engenius
- Router KPN
- Router IFM
- Router Netis
- Router Envivo
- Router Digitus
- Router Kathrein
- Router Draytek
- Router Belkin
- Router Devolo
- Router Linksys
- Router Barco
- Router Buffalo
- Router Powerplus
- Router Porter-Cable
- Router Dahua Technology
- Router Cotech
- Router Netgear
- Router Nest
- Router LevelOne
- Router BT
- Router QNAP
- Router Vodafone
- Router Sigma
- Router ICIDU
- Router Dell
- Router Mercusys
- Router Milan
- Router Planet
- Router ZyXEL
- Router Western Digital
- Router Clas Ohlson
- Router Konig
- Router AT&T
- Router Sweex
- Router MSI
- Router Foscam
- Router Zebra
- Router D-Link
- Router Aruba
- Router Tenda
- Router Phicomm
- Router Kyocera
- Router Teltonika
- Router Ubiquiti Networks
- Router Zoom
- Router Marshall Electronics
- Router Thrustmaster
- Router Jung
- Router Technicolor
- Router Synology
- Router Trendnet
- Router Blackmagic Design
- Router Mikrotik
- Router ATen
- Router Digi
- Router Verizon
- Router Billion
- Router T-Mobile
- Router Conceptronic
- Router RGBlink
- Router Gefen
- Router RAVPower
- Router Hawking Technologies
- Router Kopul
- Router Nexxt
- Router Beafon
- Router Kraun
- Router Zolid
- Router Sagemcom
- Router Toolcraft
- Router Telstra
- Router SPL
- Router Logilink
- Router Moxa
- Router Smart-AVI
- Router StarTech.com
- Router Holzmann
- Router SIIG
- Router Eero
- Router Advantech
- Router Mercku
- Router IOGEAR
- Router Hercules
- Router Xantech
- Router KanexPro
- Router Intelix
- Router Blustream
- Router Intellinet
- Router Lancom
- Router Arcadyan
- Router ModeCom
- Router Digiconnect
- Router Ubee
- Router SMC
- Router Tele 2
- Router Vimar
- Router Kogan
- Router Ocean Matrix
- Router Peak
- Router CradlePoint
- Router Davolink
- Router Sixnet
- Router Kramer
- Router 7inova
- Router Media-tech
- Router AVPro Edge
- Router Cudy
- Router Lindy
- Router F-Secure
- Router Rosewill
- Router Digicom
- Router Sabrent
- Router On Networks
- Router Atlona
- Router AVMATRIX
- Router PENTAGRAM
- Router Leoxsys
- Router Readynet
- Router OneAccess
- Router Accelerated
- Router Nexaira
- Router FSR
- Router Hamlet
- Router Approx
- Router T-com
- Router Alfatron
- Router Amped Wireless
- Router Key Digital
- Router Cambium Networks
- Router 3Com
- Router I-Tec
- Router Avenview
- Router United Telecom
- Router BZBGear
- Router WyreStorm
- Router Rocstor
- Router Ruckus Wireless
- Router Dovado
- Router Mach Power
- Router MuxLab
- Router EXSYS
- Router NetComm
- Router Comtrend
- Router Premiertek
- Router Bea-fon
- Router GL.iNet
- Router A-NeuVideo
- Router Shinybow
- Router Edgewater
- Router Atlantis Land
- Router Lantronix
- Router Lumantek
- Router Keenetic
- Router Starlink
- Router Keewifi
- Router Milesight
- Router PulseAudio
- Router Wisetiger
- Router Predator
- Router Evolution
- Router Comprehensive
- Router Digitalinx
- Router Luxul
- Router DVDO
- Router StarIink
- Router Silentwind
- Router Keezel
- Router VigilLink
- Router Digital Forecast
Nyaste Router Manualer
9 April 2025
9 April 2025
8 April 2025
3 April 2025
1 April 2025
30 Mars 2025
30 Mars 2025
30 Mars 2025
30 Mars 2025
30 Mars 2025