Juniper-networks SRX 210 Manuel d'utilisateur

SRX210 Services GatewayHardware GuidePublished: 2013-06-20Copyright © 2013, Juniper Networks, Inc.

Copyright © 2013, Juniper Networks, Inc.xSRX210 Services Gateway Hardware Guide

Copyright © 2013, Juniper Networks, Inc.84SRX210 Services Gateway Hardware Guide

CHAPTER 15Performing Initial Software Configurationon the SRX210 Services GatewayThis chapter includes the following topics:•SRX210 Services Gateway S

•Time information for services gateway location•Local time zone•Name or IP address of a Network Time Protocol (NTP) server, if NTP is used to setthe t

NOTE: Downloading of purchased licenses from the setup wizard isavailable only in Junos OS Release 11.2R3 or later.•Configuration of a chassis cluster

Understanding Management AccessTelnet allows you to connect to the services gateway and access the CLI to executecommands from a remote system. The Te

Performing Initial Software Configuration on the SRX210 Services Gateway Using theCLIThis procedure connects the device to the network but does not en

11. Configure the default route.[edit]admin@# set routing-options static route 0.0.0.0/0 next-hop gateway12. Configure basic security zones and bind t

}interfaces {ge-0/0/0 {unit 0 {family inet {address 192.168.1.1/24;}}}lo0 {unit 0 {family inet {address 172.16.1.24/32;}}}}18. Commit the configuratio

Establishing Basic ConnectivityTo establish basic connectivity:1. Connect an Ethernet cable from any of ports 0/1 through 0/7 to the Ethernet port ont

NOTE: All network and management access settings are optional.SeeTable34 on page93 Table35 on page94 summarize the configurationdetails for the initia

About This GuideThis preface includes the following topics:•Objectives on page xi•Audience on page xi•Documentation Conventions on page xi•SRX Series

Table 35: Optional Setup FieldsYour ActionFunctionFieldConfigure System:IdentificationType the IP address of thedefault gateway.Default GatewayType th

You can use other wizards to configure basic firewall policies, VPN settings, and NATrules. Choose Configure > Wizards to use the available wizards

Copyright © 2013, Juniper Networks, Inc.96SRX210 Services Gateway Hardware Guide

PART 3Maintaining and Monitoring the SRX210Services Gateway Hardware•Maintaining the SRX210 Services Gateway Hardware Components on page 99•Monitoring

Copyright © 2013, Juniper Networks, Inc.98SRX210 Services Gateway Hardware Guide

CHAPTER 16Maintaining the SRX210 Services GatewayHardware ComponentsThis chapter describes how to maintain the hardware components of the SRX210 Servi

Table 36: Maintenance Procedures for Services Gateway HardwareComponents (continued)DescriptionMaintenanceProceduresTo maintain the power supply on th

CHAPTER 17Monitoring the SRX210 Services GatewayThis chapter describes how to monitor the SRX210 Services Gateway hardwarecomponents. If you encounter

The following examples provide the sample output of commands:show chassis hardware•For the SRX210 Services Gatewayuser@host > show chassis hardware

Temp CPU Utilization (%) Memory Utilization (%)Slot State (C) Total Interrupt DRAM (MB) Heap Buffer 0 Online

Table 1: Notice IconsDescriptionMeaningIconIndicates important features or instructions.Informational noteIndicates a situation that might result in l

Table 37: Component LEDs on the Services Gateway (continued)Possible Causes andCorrective ActionsMeaningStateLEDA major alarm indicates acritical situ

Table 37: Component LEDs on the Services Gateway (continued)Possible Causes andCorrective ActionsMeaningStateLEDThe device is not part of thechassis c

Table 38: SRX210 Services Gateway Chassis Alarm Conditions andCorrective ActionsAlarmSeverityActionAlarm ConditionComponentAmber(minor)•If the interna

Table 38: SRX210 Services Gateway Chassis Alarm Conditions andCorrective Actions (continued)AlarmSeverityActionAlarm ConditionComponentAmber(minor)•Ch

Monitoring the SRX210 Services Gateway Power SystemThe LEDs on the services gateway enable you to determine the performance andoperation. The Power LE

Resetting the Configuration File When the SRX210 Services Gateway Is InaccessibleYou can use the SRX210 Services Gateway's Reset Config button to

• Monitoring the SRX210 Services Gateway Power System on page 108• Juniper Networks Technical Assistance Center on page 110Changing the Reset Config B

PART 4Appendixes•Safety and Regulatory Compliance Information on page 113•SRX210 Services Gateway Power Guidelines, Requirements, andSpecifications on

Copyright © 2013, Juniper Networks, Inc.112SRX210 Services Gateway Hardware Guide

APPENDIX ASafety and Regulatory ComplianceInformationThis appendix includes the following topics:•SRX210 Services Gateway Definition of Safety Warning

Table 2: Text and Syntax Conventions (continued)ExamplesDescriptionConventionbroadcast | multicast(string1 | string2 | string3)Indicates a choice betw

WARNING: This symbol is used with laser warnings. Unterminated opticalconnectors can emit invisible laser radiation. Focusing your eye directly on ala

¡Atención! Este símbolo de aviso significa peligro. Existe riesgo para suintegridad física. Antes de manipular cualquier equipo, considerar los riesgo

•Never install or manipulate wiring during electrical storms.•Never install electrical jacks in wet locations unless the jacks are specifically design

Restricted Access Area WarningWARNING: The services gateway is intended for installation in restrictedaccess areas. A restricted access area is an are

¡Atención! Esta unidad ha sido diseñada para instalarse en áreas de accesorestringido. Área de acceso restringido significa un área a la que solamente

Figure 26: Placing a Component into an Electrostatic Bagg031023ADSL 2/2+ ASYNCTX/RXRelatedDocumentationSRX210 Services Gateway Definition of Safety Wa

Any equipment in a room in which a chemical fire extinguisher has been discharged issubject to premature failure and unreliable operation. The equipme

Ensure that the equipment rack into which the services gateway is installed is evenly andsecurely supported to avoid the hazardous condition that coul

•Jos laite asetetaan osaksi täytettyyn telineeseen, aloita kuormittaminensen alaosasta kaikkein raskaimmalla esineellä ja siirry sitten sen yläosaan.•

•Quando questa unità viene montata in un supporto parzialmente pieno,caricare il supporto dal basso all'alto, con il componente più pesantesistem

Copies of the Management Information Bases (MIBs) available in a software release areincluded on the documentation CDs and at http://www.juniper.net/.

•Cuandoeste equipo se vaya a instalar en un bastidor parcialmente ocupado,comenzar la instalación desde la parte inferior hacia la superior colocandoe

WARNING: Unterminated optical connectors can emit invisible laserradiation. The lens in the human eye focuses all the laser power on theretina, so foc

Laser Beam WarningWARNING: Do not stare into the laser beam or view it directly with opticalinstruments.Waarschuwing Niet in de straal staren of hem r

Warnung Aus der Port-Öffnung können unsichtbare Strahlen emittieren,wenn kein Glasfaserkabel angeschlossen ist. Vermeiden Sie es, sich denStrahlungen

door de fabrikant aanbevolen is. Gebruikte batterijen dienen overeenkomstigfabrieksvoorschriften weggeworpen te worden.Varoitus Räjähdyksen vaara, jos

aarde zijn verbonden, en kunnen ernstige brandwonden veroorzaken of hetmetalen voorwerp aan de aansluitklemmen lassen.Varoitus Ennen kuin työskentelet

Lightning Activity WarningWARNING: Do not work on the system or connect or disconnect cablesduringperiods of lightning activity.Waarschuwing Tijdens o

ympäristölämpötilan 40οC. Ettei ilmanvaihto estyisi, tuuletusaukkojenympärille on jätettävä ainakin 15,2 cm tilaa.Attention Pour éviter toute surchauf

Waarschuwing Dit produkt dient volgens alle landelijke wetten envoorschriften te worden afgedankt.Varoitus Tämän tuotteen lopullisesta hävittämisestä

•United States—National Fire Protection Association (NFPA 70), United StatesNational Electrical Code•Canada—Canadian Electrical Code, Part 1, CSA C22.

•Join and participate in the Juniper Networks Community Forum:http://www.juniper.net/company/communities/•Open a case online in the CSC Case Manager:

•EN 300 386 V1.3.3 (2005) Telecom Network Equipment - EMC requirements•EMI ( SRX210 Services Gateway Low Memory and High Memory Models) :•FCC Part 15

This is a Class B product.JapanThe preceding translates as follows:This is a Class B product based on the standard of the Voluntary Control Council fo

For the SRX210 Services Gateway with PoECanadaThis Class A digital apparatus complies with Canadian ICES-003.Cet appareil numérique de la classe A est

SRX210 Services Gateway Compliance Statements for Environmental RequirementsThis topic includes the compliance statement for the following environment

Copyright © 2013, Juniper Networks, Inc.138SRX210 Services Gateway Hardware Guide

APPENDIX BSRX210 Services Gateway PowerGuidelines, Requirements, andSpecificationsThis appendix includes the following topics:•SRX210 Services Gateway

Table 40: Site Electrical Wiring Guidelines for the Services GatewayGuidelineSite Wiring FactorTo ensure that signaling functions optimally:•Install w

SRX210 Services Gateway Power Specifications and RequirementsThe AC power system electrical specifications for the SRX210 Services Gateway arelisted i

Table 42: Grounding Cable Specifications for the Services GatewaySpecificationGrounding Requirement14 AWG single-strand wire cableGrounding cableUp to

APPENDIX CSRX210 Services Gateway Interface CableSpecifications and Connector PinoutsThe network interfaces supported on the services gateway accept d

Copyright © 2013, Juniper Networks, Inc.xviSRX210 Services Gateway Hardware Guide

RJ-45 Connector Pinouts for the SRX210 Services Gateway Ethernet PortFigure 27 on page 144 shows the RJ-45 cable connector pinouts for Ethernet ports.

Table 45: RJ-45 Connector Pinouts for the Services Gateway EthernetPort (1 Gbps) (continued)SignalPinBI_DB-6BI_DD+7BI_DD-8RelatedDocumentationInterfac

RelatedDocumentation• Interface Cable and Wire Specifications for the SRX210 Services Gateway on page 143• RJ-45 Connector Pinouts for the SRX210 Serv

APPENDIX DContacting Customer Support andReturning the SRX210 Services GatewayHardwareThis appendix describes how to return the SRX210 Services Gatewa

NOTE: Do not return the deviceor anycomponentto Juniper Networks unlessyou have first obtained an RMA number. Juniper Networks reserves the righttoref

Power Supply 0NOTE: In the show chassis hardware command, the Mini-Physical InterfaceModule (Mini-PIM) slot number is reported as an FPC number, and t

• Contacting Customer Support on page 150Contacting Customer Support to Obtain Return Materials AuthorizationThis topic includes the following section

NOTE: If contacting JTAC by telephone, enter your 11-digit case numberfollowed by the pound (#) key if this is an existing case, or press the star(*)

9. Place the device in the shipping carton.10. Cover the device with an ESD bag, and place the packing foam on top of and aroundthe device.11. Replace

PART 5Index•Index on page 155153Copyright © 2013, Juniper Networks, Inc.

PART 1SRX210 Services Gateway Overview•Introduction to the SRX210 Services Gateway on page 3•SRX210 Services Gateway Hardware Components and Specifica

Copyright © 2013, Juniper Networks, Inc.154SRX210 Services Gateway Hardware Guide

IndexSymbols#, comments in configuration statements...xiii( ), in syntax descriptions...

console port, RJ-45...145conventionsnotice icons...

interfaceinstalling...66removing...

rack mountpreparing...53radio frequency interference...

show chassis commandsshow chassis alarms...101show chassis environment...

Copyright © 2013, Juniper Networks, Inc.160SRX210 Services Gateway Hardware Guide

Copyright © 2013, Juniper Networks, Inc.2SRX210 Services Gateway Hardware Guide

CHAPTER 1Introduction to the SRX210 ServicesGatewayThis chapter includes the following topics:•SRX210 Services Gateway Description on page 3•SRX210 Se

Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, California 94089USA408-745-2000www.juniper.netThis product includes the Envoy SNMP Engine,

Table 3: SRX210 Services Gateway Models (continued)Model NumberDevice TypeProduct NameSRX210HHigh MemorySRX210 Services GatewaySRX210H-POEHigh Memory

Table 4: SRX210 Services Gateway Hardware FeaturesSRX210 ServicesGateway PoweroverEthernetSRX210 ServicesGateway HighMemorySRX210 ServicesGateway LowM

Copyright © 2013, Juniper Networks, Inc.6SRX210 Services Gateway Hardware Guide

CHAPTER 2SRX210 Services Gateway HardwareComponents and SpecificationsThis chapter includes the following topics:•SRX210 Services Gateway Specificatio

Table 5 on page 8 provides information on the physical specifications of the device.Table 5: SRX210 Services Gateway SpecificationsValueSpecification1

RelatedDocumentationSRX210 Services Gateway Description on page 3•• SRX210 Services Gateway Front Panel and Back Panel Views (Low Memory, HighMemory,

Table 6: SRX210 Services Gateway Front Panel Components (continued)ComponentNumberUniversal Serial Bus (USB) ports5Console port6Gigabit Ethernet ports

NOTE: The cable tie holder provides support to hold the power cord on tothe power supply point.The lock provides the capability to lock and secure the

Table 8: SRX210 Services Gateway Built-In HardwareInterfaces (continued)DescriptionSpecificationsInterface TypeThe Fast Ethernet ports canbe used as f

Table 8: SRX210 Services Gateway Built-In HardwareInterfaces (continued)DescriptionSpecificationsInterface TypeThe console port can be usedas follows:

http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions ofthat EULA.iiiCopy

Front Panel LEDsFigure 4 on page 14 shows the SRX210 Services Gateway front panel LEDs.Table 9 on page 14 lists the LED indicators on the SRX210 Servi

Table 9: SRX210 Services Gateway Front Panel ComponentsLEDs (continued)UsageDescriptionComponentThe Power LED can be usedto determine if the device is

Figure 5: SRX210 Services Gateway Ethernet Port LEDsNOTE: The numbers in Figure 5 on page 16 correspond to the numbers inTable 10 on page 16.Table 10

NOTE: The PoE LED is enabled only on the Power over Ethernet (PoE) modelof the SRX210 Services Gateway. For non-PoE models, the PoE LED remainsoff.Rel

NOTE: SRX210 Services Gateway that ship from the factory with Junos OSRelease 10.0 is formatted with the dual-root partitioning scheme.Existing SRX210

Figure 6: Airflow Through the Chassisg031140RearFanAir flowFrontRelatedDocumentationSRX210 Services Gateway Front Panel and Back Panel Views (Low Memo

Figure 7: SRX210 Services Gateway — 12 V Power Supplyg031177Figure 8 on page 20 shows the label for the 48 V power supply.Figure 8: SRX210 Services Ga

Figure 9: SRX210 Services Gateway — 54 V Power Supplyg037543150W AD/DC ADAPTERJUNIPER P/N:740-027642MODEL : EADP-150NB B REV: S3INPUT : 100-240V ~ 2.5

• Monitoring the SRX210 Services Gateway Power System on page 108Copyright © 2013, Juniper Networks, Inc.22SRX210 Services Gateway Hardware Guide

CHAPTER 3SRX210 Services Gateway 3G ExpressCardThis chapter includes the following topics:•SRX210 Services Gateway 3G ExpressCard Overview on page 23•

Copyright © 2013, Juniper Networks, Inc.iv

Table 11: Juniper Networks Wireless Modems Supported by the SRX210Services GatewayRelease SupportedWireless CardsJunos OS Releases 9.6, 10.0,10.1, and

•Unlocking ExpressCards — You can unlock GSM ExpressCards from the Junos OS CLI.If the SIM is locked, you need to unlock it before making a call.NOTE:

Table 12: 3G ExpressCard Physical Specifications (continued)ValueSpecification•3.3 V (primary source)•1.5 V (secondary source)Voltage supplyRelatedDoc

Figure 11: Installing the 3G ExpressCard in the SRX210 Services Gateway3. Insert the 3G ExpressCard slowly and firmly into the ExpressCard slot until

Table 13: SRX210 Services Gateway 3G ExpressCard Basic CLICommands (continued)CommandActionrequest modem wireless activate•request modem wireless acti

CHAPTER 4SRX210 Services Gateway Power overEthernet SupportThis chapter includes the following topics:•SRX210 Services Gateway PoE Overview on page 29

Table 14: SRX210 Services Gateway PoE Specifications (continued)ValuesPower Management SchemesThe following ports support PoE:•ge-0/0/0•ge-0/0/1•fe-0/

Table 15: PoE Classes and Power Ratings on the SRX210 ServicesGateway (continued)Maximum Power Level Output from the PoEPortClass4.0 watts17.0 watts21

Copyright © 2013, Juniper Networks, Inc.32SRX210 Services Gateway Hardware Guide

CHAPTER 5SRX210 Services Gateway Mini-PhysicalInterface ModulesThis chapter includes the following topic:•SRX210 Services Gateway Mini-Physical Interf

Table of ContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiObjectives . .

Copyright © 2013, Juniper Networks, Inc.34SRX210 Services Gateway Hardware Guide

PART 2Setting Up the SRX210 Services Gateway•Preparing the Site for the SRX210 Services Gateway Installation on page 37•Installation Overview for the

Copyright © 2013, Juniper Networks, Inc.36SRX210 Services Gateway Hardware Guide

CHAPTER 6Preparing the Site for the SRX210 ServicesGateway InstallationThis chapter provides a checklist to help you prepare your site for installatio

Table 16: Site Preparation Checklist for the SRX210 Services GatewayInstallation (continued)DateandNotesAdditional InformationItem or Task“SRX210 Serv

• Installation Overview for the SRX210 Services Gateway on page 45• SRX210 Services Gateway Cabinet Requirements on page 39• SRX210 Services Gateway R

Table 17: SRX210 Services Gateway Cabinet RequirementsSpecificationsCabinetRequirements19 in. (48.3 cm) as defined in Cabinets, Racks, Panels, and Ass

Table 18: Rack Requirements for the Services GatewaySpecificationsRack RequirementA 19 in. (48.3 cm) rack as defined in Cabinets, Racks, Panels, and A

•If you are mounting the device in a rack with other equipment, or if you are placing iton the desktop near other equipment, ensure that the exhaust f

RelatedDocumentation• SRX210 Services Gateway Site Electrical Wiring Guidelines on page 139• SRX210 Services Gateway Power Specifications and Requirem

Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Installing the 3G ExpressCard in the S

Copyright © 2013, Juniper Networks, Inc.44SRX210 Services Gateway Hardware Guide

CHAPTER 7Installation Overview for the SRX210Services GatewayThis chapter includes the following topic:•Installation Overview for the SRX210 Services

Table 20: Installation Process Order for the SRX210 ServicesGateway (continued)For more information, seeTaskStep“Connecting and Organizing InterfaceCa

CHAPTER 8Required Tools and Parts for Installing andMaintaining the SRX210 Services GatewayThis chapter includes the following topic:•Required Tools a

RelatedDocumentation• Unpacking the SRX210 Services Gateway on page 49• Grounding the SRX210 Services Gateway on page 70• Connecting the SRX210 Servic

CHAPTER 9Unpacking the SRX210 Services GatewayThis chapter includes the following topics:•Unpacking the SRX210 Services Gateway on page 49•Verifying P

against the items on the packing list. The packing list specifies the part numbers anddescriptions of each part in your order.If any part is missing,

Table 23: Accessory Parts List for the SRX210 Services GatewayQuantityPart1Juniper Networks Product Warranty1End User License Agreement1Quick Start Gu

Copyright © 2013, Juniper Networks, Inc.52SRX210 Services Gateway Hardware Guide

CHAPTER 10Preparing the SRX210 Services Gatewayfor InstallationThis chapter includes the following topics:•Preparing the SRX210 Services Gateway for R

Installing the SRX210 Services Gateway on a Wall . . . . . . . . . . . . . . . . . . . . . 63Replacing or Installing Mini-Physical Interface Modules i

NOTE: The SRX210 Services Gateway cannot be center-mounted in racks.Table 24 on page 54 provides the list of tasks you need to perform before installi

Preparing the SRX210 Services Gateway for Desk-Mount InstallationYou can mount an SRX210 Services Gateway on a desk or other level surface horizontall

Preparing the SRX210 Services Gateway for Wall-Mount InstallationYou can mount an SRX210 Services Gateway on a wall. The four rubber feet attachedto t

CHAPTER 11Installing the SRX210 Services GatewayThis chapter includes the following topics:•SRX210 Services Gateway Safety Requirements, Warnings, and

Install the device as appropriate for your site using one of the following procedures:•Adjusting the Power Supply Adapter Tray for the SRX210 Services

Figure 13 on page 59 shows the adjustments to the power supply adapter tray requiredfor the 150-watt power supply.Figure 13: Adjusting the Power Suppl

To install the device in a rack:1. Position a mounting bracket on each side of the chassis as shown inFigure 14 on page 60.Figure 14: SRX210 Services

Figure 16: SRX210 Services Gateway Rack Installation — Positioning thePower Supply Adapter Tray4. Have one person grasp the sides of the device, lift

RelatedDocumentationSRX210 Services Gateway General Safety Guidelines and Warnings on page 115•• Required Tools and Parts for Installing and Maintaini

Figure 18: SRX210 Services Gateway Desk Installation — Attaching theVertical Stand3. Place the chassis vertically on the desk with the stand resting o

Chapter 17 Monitoring the SRX210 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 101Monitoring Hardware Components on the SRX21

NOTE: The wall-mounting kit is not shipped with the device and must beordered separately.To install the device on a wall:1. Place the device on a flat

NOTE: Ensure that the fan (back panel) of your device faces the ceiling(see Figure 21 on page 65).6. Have a second person install two pairs of mountin

Replacing or Installing Mini-Physical Interface Modules in the SRX210 Services GatewayMini-Physical Interface Modules (Mini-PIMs) are circuit boards t

CHAPTER 12Connecting, Grounding, and Powering Onthe SRX210 Services GatewayThis chapter includes the following topics:•Connecting the SRX210 Services

Figure 22: Connecting the SRX210 Services Gateway to the Power SupplyNOTE: The device must be connected to earth ground during normaloperation. The pr

transmit data. You must configure each network interface before it can operate on thedevice.To connect and organize an interface cable for the device:

Grounding the SRX210 Services GatewayTo meet safety and electromagnetic interference (EMI) requirements and to ensureproper operation, you must adequa

To ground the device:1. Connect the grounding cable to a proper earth ground.2. Verify that a licensed electrician has attached the cable lug to the g

NOTE: After the power supply is turned on, it can take up to 60 seconds forstatus indicators—such as the Status and Power LEDs—to show that thepower s

TIP: When youare powering off the device, the system displays the followingmessage: Turning the system power off. You can now safely remove the powerc

Appendix B SRX210 Services Gateway Power Guidelines, Requirements, andSpecifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Copyright © 2013, Juniper Networks, Inc.74SRX210 Services Gateway Hardware Guide

CHAPTER 13SRX210 Services GatewayAutoinstallationThis chapter includes the following topic:•SRX210 Services Gateway Autoinstallation Overview on page

• Connecting an SRX210 Services Gateway to the J-Web Interface on page 77Copyright © 2013, Juniper Networks, Inc.76SRX210 Services Gateway Hardware Gu

CHAPTER 14Connecting the SRX210 Services Gatewayto Management DevicesThis chapter includes the following topics:•Connecting an SRX210 Services Gateway

Figure 24: Connecting to the Ethernet Port on an SRX210 Services Gatewayg031118To enable communication between the management device and the services

• Connecting an SRX210 Services Gateway to the CLI Locally on page 79• SRX210 Services Gateway Software Configuration Overview on page 85• SRX210 Serv

4. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the managementdevice (see Figure 25 on page 79).5. Connect the other end of the

The modem connection allows you to remotely perform the same console operationsyou can perform locally.RelatedDocumentationConnecting an SRX210 Servic

An OK response verifies that the modem can communicate successfully with the COMport on the PC or laptop.6. Configure the modem to answer a call on th

Connecting to the CLI at the User End for the SRX210 Services GatewayTo remotely connect to the CLI through a dial-up modem connected to the console p