To Next PageTo Next Page
Need help?Do you have a question about the Juniper SRX3600 and is the answer not in the manual?
Explains the status of the OK/FAIL LED on the SRX Clustering Module.
This document provides a comprehensive reference for the modules used with the SRX1400, SRX3400, and SRX3600 Services Gateways. These modules allow for customization and upgrades to meet specific network requirements.
The SRX1400, SRX3400, and SRX3600 Services Gateways are designed to be flexible, allowing users to upgrade and customize their devices with various modules. These modules include I/O cards (IOCs), Network Processing I/O Cards (NP-IOCs), Services Processing Cards (SPCs), Network Processing Cards (NPCs), Routing Engines, and the SRX Clustering Module (SCM).
IOCs are common form-factor modules (CFMs) that expand the physical network connectivity of the services gateway beyond the Ethernet ports on the Switch Fabric Board (SFB). Their primary role is to facilitate the transfer of data packets. Incoming packets from physical ports are directed to the Network Processing Card (NPC) for processing, and after services are applied, the IOCs forward the processed data packets out through the physical ports.
The SRX3K-16GE-TX is an IOC that provides 16 ports for standard Ethernet, Fast Ethernet, or Gigabit Ethernet traffic over copper media. It is installed horizontally into the services gateway and communicates with the SFB for data transfer and power. The ports use RJ-45 connectors, and LEDs on the faceplate indicate port status and connectivity. This module is a cold-swap-only module, meaning the services gateway must be powered off before it can be removed, replaced, or added.
The SRX3K-16GE-SFP IOC offers 16 ports for Gigabit Ethernet traffic, supporting both copper and fiber interface media. Similar to the TX model, it installs horizontally into the midplane, connecting to the SFB for communication and power. For fiber interfaces, small form-factor pluggable (SFP) transceivers must be installed in the desired ports. LEDs on the faceplate provide port status and connectivity information. The ports are numbered 0-15, from top to bottom and left to right. This is also a cold-swap-only module, requiring the services gateway to be powered down for installation or removal.
The SRX3K-2XGE-XFP IOC adds two ports for 10-Gigabit Ethernet traffic using fiber interface media. It is inserted horizontally into the midplane, connecting to the SFB for communication and power. To utilize fiber interfaces, 10-Gigabit small form-factor pluggable (XFP) transceivers are required in the desired ports. LEDs on the faceplate indicate port status and connectivity, with ports numbered 0-1 from left to right. Like other IOCs, this is a cold-swap-only module.
NP-IOCs are a specialized type of IOC that include their own network processing units (NPUs). This design eliminates the need for traffic traversing the NP-IOC to pass through the services gateway bus to a remote NPC, making them ideal for low-latency applications.
The SRX1K3K-NP-2XGE-SFPP is an NP-IOC with two SFP+ ports for Gigabit Ethernet transceivers. It is inserted horizontally into the midplane, connecting to the SFB for communication and power. For fiber interface media, enhanced small form-factor pluggable (SFP+) transceivers are installed in the desired ports. LEDs on the faceplate indicate port status and connectivity, with ports numbered 0-1 from left to right. NP-IOCs are cold-swap-only modules, requiring the services gateway to be powered off for any installation or removal.
SPCs are CFMs that provide the necessary processing power for integrated services such as firewall, IPsec, and IDP. All traffic flowing through the services gateway is directed to an SPC for service processing. NPCs intelligently distribute traffic to SPCs for various service processing tasks, including session setup based on policies, fast packet processing for matching sessions, encryption and decryption, and IKE negotiation.
The SRX3K-SPC-1-10-40 Services Processing Card contains one Services Processing Unit (SPU). The ONLINE button on the SPC front panel does not perform any function. SPCs are cold-swap-only modules, meaning the services gateway must be powered off before removing, replacing, or adding them.
NPCs are CFMs responsible for receiving inbound traffic from IOCs and directing it to the appropriate SPC for service processing. Once processing is complete, the NPC receives outbound traffic from the SPC(s) and routes it back to the correct IOC. Additionally, NPCs buffer incoming and queue outgoing traffic, and perform advanced traffic management functions, including DoS/DDoS protective measures. For example, they can drop traffic to or from specific IP addresses to protect against ICMP, UDP, and TCP SYN flooding, and buffer bursty traffic to protect the SPC.
The SRX3K-NPC is a CFM that supports the SRX1400, SRX3400, and SRX3600. The ONLINE button on the NPC front panel does not perform any function. NPCs are cold-swap-only modules, requiring the services gateway to be powered off before removing, replacing, or adding them.
Routing Engines are PowerPC platforms that execute the Junos operating system (Junos OS). These engines manage routing tables, routing protocols, services gateway interfaces, and certain chassis components, while also providing the interface for system management and user access.
The SRX3K-RE-12-10 and SRX1K-RE-12-10 Routing Engines include two USB ports for USB memory cards, which can be used to load Junos OS and perform file transfers. They also provide integrated services such as Central Packet Forwarding Engine Processing (CPP), which manages all CFM cards, and System Control, which handles Routing Engine arbitration and switching between multiple control planes. The services gateway requires one Routing Engine installed in slot RE0. A Gigabit Ethernet port on the SFB, labeled RE ETHERNET 0, connects directly to the processors on the Routing Engine in slot RE0 for management. The ONLINE button on the Routing Engine front panel does not perform any function. Routing Engines are cold-swap-only modules.
The SRX Clustering Module (SCM) is a card that enables the dual control link feature for chassis clusters in Junos OS Release 10.2 and later. It is installed in the RE1 slot on the rear panel of the services gateway.
The SRX3K-CRM is the SCM for SRX3400 and SRX3600 Services Gateways. The ONLINE button on the SCM front panel does not perform any function. The SCM is a cold-swap-only module, requiring the services gateway to be powered off before removal or installation.
Installing Common Form Factor Modules (CFMs): To install a CFM, first attach an ESD grounding strap. If installing cold-swap-only CFMs, power off the services gateway by pressing the Power button for three to five seconds (on SRX3400/SRX3600, this is on the SFB; on SRX1400, it's on the System I/O card). Wait for the PWR LED to stop blinking. Identify the correct slot, place the CFM on an antistatic mat, and remove any blank panel covering the slot. Orient the CFM with the faceplate facing you, slide it into the card cage until resistance is felt, and then tighten the screws on either side of the faceplate. If installing additional CFMs, repeat the steps. Insert and secure appropriate cables. For hot-swappable CFMs, press the ONLINE button for five or more seconds to bring them online.
Installing Routing Engines and SRX Clustering Modules: Begin by placing an electrostatic bag or antistatic mat on a stable surface and attaching an ESD grounding strap. Power off the services gateway by pressing the Power button on the SFB for three to five seconds, waiting for the PWR LED to indicate shutdown. Identify the correct slot (RE for SRX1400 Routing Engines; RE0 for SRX3400/SRX3600 Routing Engines; RE1 for SCMs). Carefully align the module with the guides inside the chassis, slide it in until resistance is felt, and then press its faceplate to engage the connectors. Press both ejector handles inward to seat the module and tighten the captive screws. Reconnect any previously attached AUX or USB cables. Power on the services gateway; the OK/FAIL LED should blink green and then light steadily. If the OK/FAIL LED remains red after several minutes, the module may not be functioning correctly, and customer support should be contacted.
Installing SFP, SFP+, and XFP Transceivers: Transceivers are hot-insertable and hot-removable, meaning they can be installed or removed without powering off the device or interrupting data flow, though the removed transceiver will cease to transmit/receive data. To install, attach an ESD grounding strap. Remove the transceiver from its electrostatic bag and identify the socket. For fiber transceivers, ensure the interface port is covered by a rubber safety cap to prevent laser light exposure. Align the transceiver with the socket, ensuring the connector faces the component. Slide the transceiver into the socket until it is seated, then close the ejector handle. Remove safety caps and insert the cable. Verify that the status LEDs on the component faceplate indicate correct functioning.
Troubleshooting and Support: The document emphasizes the importance of using Juniper Networks qualified optics and cables. If issues arise with third-party components, the Juniper Networks Technical Assistance Center (JTAC) can help diagnose the problem but may recommend replacing them with qualified Juniper components.
Online Resources: Juniper Networks provides a Customer Support Center (CSC) with self-help tools, including:
Technical Support: Technical product support is available through JTAC for customers with active J-Care or JNASC support contracts, or those covered under warranty. JTAC policies and product warranty information are available online. JTAC centers operate 24 hours a day, 7 days a week. Cases can be opened via the Web or telephone, with toll-free and direct-dial options provided.
General| Maximum Firewall Throughput | 20 Gbps |
|---|---|
| Maximum VPN Throughput | 10 Gbps |
| Maximum Concurrent Sessions | 1, 000, 000 |
| Memory | 16 GB |
| Power Supply | Dual AC or DC power supplies |
| Operating Temperature | 32°F to 104°F (0°C to 40°C) |
| Interfaces | 8 x 10/100/1000BASE-T ports, 4x 10GBASE SFP+ ports |
