Juniper-networks 5000 Manuel d'utilisateur

NETSCREEN-5000 SERIESUser’s GuideVersion 5.0 P/N 093-1698-000 Rev. D

Chapter 1 Overview2 User’s GuideNETSCREEN-5000 SERIESThis section describes the NetScreen-5000 Series, which currently includes the NetScreen-5200 and

Power SuppliesNetScreen-5000 Series 3POWER SUPPLIESThe NetScreen-5000 Series can use two kinds of power supplies:• Direct Current (DC) Power Supply•

Chapter 1 Overview4 User’s GuideThe DC Power SupplyThe DC power supply weighs about three pounds. The faceplate contains a power LED, a power switch,

Fan ModulesNetScreen-5000 Series 5FAN MODULESThe NetScreen-5200 has a three-fan module and the NetScreen-5400 has a two-fan module. You can access th

Chapter 1 Overview6 User’s GuideManagement ModulesThe management module provides general-purpose CPU delivery, and contains dedicated High Availabilit

NetScreen-5000 ModulesNetScreen-5000 Series 7The 5000-M2 Management ModuleThe 5000-M2 management module is based around powerful, dual 1GHz PowerPC C

Chapter 1 Overview8 User’s GuideSecure Port ModulesSecure Port Modules (SPMs) perform general packet processing and device connection tasks for device

NetScreen-5000 ModulesNetScreen-5000 Series 9The 5000-2G24FE SPMThe 5000-2G24FE SPM provides two 1-Gigabit Ethernet ports and 24 Fast Ethernet (FE) p

Chapter 1 Overview10 User’s GuideThe 5000-8G2 SPMThe 5000-8G2 SPM provides eight 1-Gigabit mini-GBIC Ethernet ports using hot-swappable transceivers.

NetScreen-5000 ModulesNetScreen-5000 Series 11The 5000-2XGE SPMThe 5000-2XGE SPM provides two 10-Gigabit mini-GBIC Ethernet ports using hot-swappable

Copyright NoticeCopyright © 2006 Juniper Networks, Inc. All rights reserved.Juniper Networks, the Juniper Networks logo, NetScreen, NetScreen Technolo

Chapter 1 Overview12 User’s Guide

NetScreen-5000 Series 132Chapter 2Installing the DeviceThis chapter describes how to install a NetScreen-5000 Series in an equipment rack or on a des

Chapter 2 Installing the Device14 User’s GuideGENERAL INSTALLATION GUIDELINESObserving the following precautions can prevent injuries, equipment failu

Mounting the NetScreen-5000 SeriesNetScreen-5000 Series 15There are two ways to rack mount the NetScreen-5200:• Rear and front mount• Mid-mountYou ca

Chapter 2 Installing the Device16 User’s GuideNetScreen-5200 Mid-MountTo mid-mount the NetScreen-5200, you need four fitted screws, a Phillips-head sc

Installing and Connecting the AC Power SupplyNetScreen-5000 Series 17INSTALLING AND CONNECTING THE AC POWER SUPPLYTo install and connect the AC power

Chapter 2 Installing the Device18 User’s GuideThe DC power supply, power switch, grounding screw, and terminal blocks, are located on the faceplate of

Establishing an HA ConnectionNetScreen-5000 Series 19ESTABLISHING AN HA CONNECTIONTo assure continuous traffic flow in the event of a system failure,

Chapter 2 Installing the Device20 User’s Guide

NetScreen-5000 Series 213Chapter 3Configuring the DeviceThis chapter describes how to perform initial configuration on the NetScreen-5000 Series once

NetScreen-5000 Series iiiTable of ContentsPreface...

Chapter 3 Configuring the Device22 User’s GuideOPERATIONAL MODESThe NetScreen-5000 Series supports two operational modes: Transparent and Route. The d

The NetScreen-5000 InterfacesNetScreen-5000 Series 23THE NETSCREEN-5000 INTERFACESEach Secure Port Module (SPM) for the NetScreen-5000 Series system

Chapter 3 Configuring the Device24 User’s GuideNetScreen-5400 InterfacesA NetScreen-5400 contains one management module (in slot 1) and up to three SP

Performing Initial Connection and ConfigurationNetScreen-5000 Series 25PERFORMING INITIAL CONNECTION AND CONFIGURATIONTo establish the first console

Chapter 3 Configuring the Device26 User’s GuideUpgrading the Firmware During the Boot Process1. Connect your computer to the NetScreen-5000 Series sys

Performing Initial Connection and ConfigurationNetScreen-5000 Series 27Changing Your Admin Name and PasswordBecause all NetScreen products use the sa

Chapter 3 Configuring the Device28 User’s GuideFor example, to set the IP address and subnet mask of the MGT interface to 10.100.2.183 and 16, respect

Configuring the Device for Telnet and WebUI SessionsNetScreen-5000 Series 293. Set the IP address and subnet mask by executing the following command:

Chapter 3 Configuring the Device30 User’s GuideFor example, if the MGT interface has an address of 10.100.2.183, then enter:telnet 10.100.2.1833. At t

Configuring the Chassis AlarmNetScreen-5000 Series 31For example, if you assigned the MGT interface an IP address of 10.100.2.183/16, then enter:http

Table of Contentsiv User’s GuideNetScreen-5400 Interfaces... 24Configurable

Chapter 3 Configuring the Device32 User’s GuideCONFIGURING JUMBO FRAMESThe 5000-8G2 and 5000-2XGE SPMs support jumbo frames that are up to 9,830 bytes

Using CLI Commands to Reset the DeviceNetScreen-5000 Series 334. (Optional) To see the updated port list and details about the new aggregate interfac

Chapter 3 Configuring the Device34 User’s Guide3. Press the y key.The following message appears:!! Reconfirm Lost Password Reset !! If you continue, t

NetScreen-5000 Series 354Chapter 4Servicing the DeviceThis chapter details service and maintenance of various components in yourNetScreen-5000 Series

Chapter 4 Servicing the Device36 User’s GuideREMOVING AND RESEATING MODULESAlthough NetScreen-5000 Series modules are pre-installed before shipping, y

Replacing an AC Power SupplyNetScreen-5000 Series 37REPLACING AN AC POWER SUPPLYTo replace an AC power supply:1. Turn off the power supply.2. Lift th

Chapter 4 Servicing the Device38 User’s GuideNetScreen-5200 Fan ModuleTo remove the fan module on a NetScreen-5200:1. Pull the fan lever until it is f

Replacing the Fan ModuleNetScreen-5000 Series 39NetScreen-5200 Fan Tray FilterBefore you replace the fan tray filter, make sure you have the followin

Chapter 4 Servicing the Device40 User’s Guide7. Once the filter is fully inserted, push the wooden ruler against the filters surface several times to

Replacing the Fan ModuleNetScreen-5000 Series 413. Align the new fan module in the fan bay, and then push it straight in.4. Secure the fan module in

NetScreen-5000 Series vEMI Certifications ...A-IIIConnectors ...

Chapter 4 Servicing the Device42 User’s GuideNetScreen-5400 Fan Tray FilterTo replace the fan tray filter:1. Remove the fan tray (See “NetScreen-5400

Connecting and Disconnecting Gigabit Ethernet CablesNetScreen-5000 Series 43CONNECTING AND DISCONNECTING GIGABIT ETHERNET CABLESTo connect a Gigabit

Chapter 4 Servicing the Device44 User’s Guide

NetScreen-5000 Series IAAppendix ASpecificationsThis appendix provides general system specifications for the NetScreen-5000 Series.• “NetScreen-5200

Appendix A SpecificationsII User’s GuideNETSCREEN-5200 ATTRIBUTESHeight: 3.4 inches (8.6 cm)Depth: 19.5 inches (49.5 cm)Width: 17.5 inches (44.5 cm)We

NetScreen-5000 Series IIINEBS CERTIFICATIONSLevel 3 NetScreen-5200 with DC power supply.GR-63-Core: NEBS, Environmental TestingGR-1089-Core: EMC and

Appendix A SpecificationsIV User’s GuideThe following table shows the 10-Gigabit media types and distances for the different types of connectors used

NetScreen-5000 Series IBAppendix BPort Descriptions and LED StatusThis appendix provides detail on port descriptions and LED status for the NetScreen

Appendix B Port Descriptions and LED StatusII User’s GuideMODULE PORT DESCRIPTIONSThe following table describes the ports on the 5000-M and 5000-M2 ma

NetScreen-5000 Series IIIThe following table details the ports on the 5000-8G2 SPM.The following table details the ports on the 5000-2XGE SPM.MODULE

Table of Contentsvi User’s Guide

Appendix B Port Descriptions and LED StatusIV User’s GuideSTATUS LED STATESThis section describes Status LED states on all modules.Interpreting Status

NetScreen-5000 Series VInterpreting Status LEDs for the Secure Port ModuleThe Status LEDs indicate whether the Secure Port Module is operating proper

Appendix B Port Descriptions and LED StatusVI User’s GuidePOWER SUPPLY LEDSThe following tables describe LED behaviors on the 5000-M and 5000-M2 for d

NetScreen-5000 Series VIIFAN LEDThe following table describes the Fan LED on both the NetScreen-5200 and NetScreen-5400 chassis.LED Color Meaning of

Appendix B Port Descriptions and LED StatusVIII User’s Guide

IndexNetScreen-5000 Series IX-IIndexNumerics5000-2G24FE, description 95000-2XGE, description 115000-8Gdescription 8figure 8port status LEDs Vsystem

IndexIX-II User’s Guide5000-8G 85000-8G2 10, 115000-M 65000-M2 7allowable slots 5installing 5management module 6secure port modules 7mountingmid-moun

NetScreen-5000 Series viiPrefaceThe Juniper Networks NetScreen-5000 Series consists of purpose-built, high-performance security systems that provide I

Prefaceviii User’s GuideCOMMAND LINE INTERFACE (CLI) CONVENTIONSThe following conventions are used when presenting the syntax of a command line inter

NetScreen-5000 Series 11Chapter 1OverviewThis chapter provides detailed descriptions of the NetScreen-5000 Series, modules, power supplies, and fan a