Juniper SRX4600 Cloud Service Provider Firewall User Manual

: June 13, 2024
: JUNIPer

Table of Contents

SRX4600 Quick Start
Mount the SRX4600
Connect the SRX4600 to Ground
Up and Running
keep-going
General Information
Learn With Videos
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

SRX4600 Cloud Service Provider Firewall
User Manual

SRX4600 Quick Start

IN THIS GUIDE

Step 1: Begin | 1
Step 2: Up and Running | 5
step-3-keep-going | 8

Step 1: Begin

IN THIS SECTION

Mount the SRX4600 | 2
Connect the SRX4600 to Ground | 3
Connect Power to the SRX4600 | 3

To mount, connect power to, and perform initial configuration on the Juniper Networks® SRX4600 Firewall, you need:

Electrostatic discharge (ESD) grounding strap (not provided)
Four-post rack-mounting kit (provided)
Twelve screws to secure the mounting rails and mounting blades to the chassis (provided)
Eight screws to secure the chassis to the rack (not provided)
Screwdriver appropriate for your rack-mounting screws (not provided)
Two AC power cords with plugs appropriate for your geographical location (provided)
Management host, such as a PC or laptop, with a serial port (not provided)
A grounding cable (minimum 14 AWG (2 mm²), minimum 90°C wire), a grounding lug (Panduit LCD10-10A-L or equivalent) (not provided).
RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided)

NOTE: We no longer include a DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable as part of the device package. If you require a console cable, you can order it separately with the part number JNP- CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).

Mount the SRX4600

You can mount an SRX4600 Firewall in a 19-inch four-post rack configuration. An AC device weighs approximately 38 lb (17.23 kg) and a DC device weighs approximately 40 lb (18.14 kg). Two persons are required for mounting the device.
To mount the firewall:

Attach the ESD grounding strap to your bare wrist and to a site ESD point.
NOTE: If you are mounting multiple units in the rack, mount the heaviest unit at the bottom and mount the others from bottom to top in order of decreasing weight.
Place the rack in its permanent location, allowing adequate clearance for airflow and maintenance, and secure it to the building structure.
Attach the front-mounting brackets to the side mounting rails by using the Phillips 4-40 flat-head mounting screws.
Align the holes in the side mounting rails with the holes on the side of the chassis and attach the side mounting rails to the chassis by using the mounting screws.
Have one person grasp both sides of the device, lift it, and position it in the rack so that the front bracket is aligned with the rack holes and the second person secure the front of the device to the rack by using four mounting screws.
Have the second person use the mounting screws (and cage nuts and washers if your rack requires them) to screw the mounting bracket to the rack.
Continue to support the device and slide the rear mounting blades into the channel of the side mounting rails and securing the blades to the rack. Use the four mounting screws (cage nuts and washers if the rack requires) to attach each blade to the rack.
Attach a grounding cable to earth ground and then attach it to the chassis grounding points.

Connect the SRX4600 to Ground

To connect the Firefall to the ground:

Attach an ESD grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis.
Connect one end of the grounding cable to a proper earth ground, such as the rack in which the services gateway is mounted.
Place the grounding lug attached to the grounding cable over the protective earthing terminal on the protective earthing terminal bracket.
Secure the grounding lug to the protective earthing terminal with the washers and screws.
Dress the grounding cable and ensure that it does not touch or block access to other device components and that it does not drape where people could trip over it.

Connect Power to the SRX4600
IN THIS SECTION

Connect Power to an AC-powered SRX4600 | 4
Connect Power to a DC-powered SRX4600 | 4

NOTE: Check if the power supplies AC or DC are fully inserted into the chassis.
Connect Power to an AC-powered SRX4600
To connect power to an AC-powered Firewall:
NOTE: An AC-powered device gets additional grounding when you connect the power supply in the device to a grounded AC power outlet by using the power cord.

Insert the coupler end of the power cord into the AC power cord inlet on the AC power supply faceplate. Push the power cord retainer onto the power cord.
Insert the power cord plug into an AC power source outlet:
a. If the AC power source outlet has a power switch, set it to on (|) position and the Firewall will power on.
b. If there is no power switch on the AC power source outlet, the services gateway will power on instantly.
Verify that the OK/FAIL LED is lit green and on steadily.

Connect Power to a DC-powered SRX4600
To connect power to a DC-powered Firewall:
WARNING: Before performing the following procedure, ensure that there is no power in the DC circuit. To ensure that all power is cut off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off (0) position, and tape the switch handle of the circuit breaker in the off position.

Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become active while you are connecting DC power.
Verify that the DC power cables are correctly labeled before connecting them to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the –48V and RTN DC cables to chassis ground:
a. The cable with very high resistance (indicating an open circuit) to chassis ground is negative (–) and is installed on the –48V (input) DC power input terminal.
b. The cable with very low resistance (indicating a closed circuit) to chassis ground is positive (+) and is installed on the RTN (return) DC power input terminal.
Remove the protective cover from the DC power input terminal block. Save this cover for future use.
Remove the M5 K-nuts from each DC power input terminal.
Attach DC terminal rings (TYCO 2-36161-2 Terminal Ring, number 10, not provided) to the ends of the DC power cables. Crimp tightly.
Insert the DC terminal rings into the DC power input terminals and secure the DC terminal rings with M5 K-nuts. Do not overtighten.
Replace the protective cover over the input terminal block.
Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit, and switch the circuit breaker to the ON (|) position.
Verify that the OK/FAIL LED is lit green and on steadily.

Up and Running

IN THIS SECTION

Set Parameter Values | 5
Perform the Initial Configuration | 6

Set Parameter Values
You must perform the initial configuration of the device through the console port. Before you begin, set the following parameter values in the console server or the management host:

Baud Rate—9600
Flow Control—None
Data—8
Parity—None
Stop Bits—1
DCD State—Disregard

Perform the Initial Configuration
To connect and configure the Firewall from the console:

Connect the console port (CON), located on the front panel of the SRX4600 to a laptop or PC by using the provided RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided).
Log in as root. There is no password. If the software booted before you connected to the console port, you might need to press the Enter key for the prompt to appear.
login: root
Start the CLI.
root# cli
root@>
Enter configuration mode.
root@> configure
Set the root authentication password by entering either a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA):
[edit] root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
Configure an administrator account on the device. When prompted, enter the password for the administrator account:
[edit] root@# set system login user admin class super-user authentication plain-text-password
New password: password
Retype new password: password
Commit the configuration to activate it on the device:
[edit] root@# commit
Log in as the administrative user you configured in Step 6.
(Optional) Configure the name of the device. If the name includes spaces, enclose the name in quotation marks (“ ”):
[edit] admin@# set system host-name host-name
Configure the IP address and prefix length for the management interface on the Firewall.
[edit] admin@# set interfaces fxp0 unit 0 family inet address address/prefix- length
Configure the default route.
[edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
Check the configuration for validity:
[edit] admin@# commit check
Commit the configuration to activate it on the device:
[edit] admin@# commit

keep-going

IN THIS SECTION

What’s Next | 8
General Information | 9
Learn With Videos | 9

Congratulations! You’ve completed the initial steps to get your ACX7024 up and running. Let’s keep going and learn more about what you can do with the ACX7024.
What’s Next
Now that you’ve done the initial configuration, here are some things you might want to do next.

If you want to	Then
Configure the ACX7024 with the Junos OS Evolved CLI	Start with the [Day One+

for Junos OS Evolved](https://www.juniper.net/documentation/us/en/quick-start /junos-os-evolved/id-step-1-begin.html) guide
Install and upgrade Junos OS Evolved and related software| See Junos OS Evolved Software Installation and Upgrade Guide
Activate, and manage your software licenses to unlock additional features for your ACX7024 router| See Activate Junos OS Licenses
Configure, monitor, and troubleshoot various interfaces on the ACX7024| See Ethernet Interfaces User Guide for Routing Devices
Configure essential user access and authentication features for your system| See User Access and Authentication Administration Guide for Junos OS Evolved

General Information

If you want to	Then
See all documentation available for the SRX4600	See the[

SRX4600](https://www.juniper.net/documentation/product/us/en/srx4600/) Documentation in the Juniper Networks TechLibrary
Stay up-to-date about new and changed features, and known and resolved issues| Junos OS Release Notes

Learn With Videos

Our video library continues to grow! We’ve created many, many videos that demonstrate how to do everything from install your hardware to configure advanced Junos OS network features. Here are some great video and training resources that will help you expand your knowledge of Junos OS.

If you want to	Then

Get short and concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies| See Learning with Juniper on Juniper Networks main YouTube page
Learn how to install and configure your Juniper Networks devices| Check out our free Web-based training videos at Hardware Installation and Configuration Videos
View a list of the many free technical trainings we offer at Juniper| Visit the Getting Started page on the Juniper Learning Portal

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2023 Juniper Networks, Inc. All rights reserved.