JuniPer SRX4600 1U RM Services Security Gateway User Manual

: June 16, 2024
: JUNIPer

Table of Contents

JuniPer SRX4600 1U RM Services Security Gateway
Product Information
Product Usage Instructions
Begin
Up and Running
What’s Next
General Information
Learn With Videos
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

JuniPer SRX4600 1U RM Services Security Gateway

Product Information

Specifications:

Weight: AC device – 38 lb (17.23 kg), DC device – 40 lb (18.14 kg)
Mounting: 19-inch four-post rack configuration
Power: AC-powered and DC-powered options

Product Usage Instructions

Step 1: Mount the SRX4600

Attach the ESD grounding strap to your bare wrist and to a site ESD point.
Place the rack in its permanent location, ensuring adequate clearance for airflow and maintenance, and secure it to the building structure.
Attach the front-mounting brackets to the side mounting rails using the provided Phillips 4-40 flat-head mounting screws.
Align the holes in the side mounting rails with the holes on the side of the chassis and attach the side mounting rails to the chassis using the provided mounting screws.
Have one person grasp both sides of the device, lift it, and position it in the rack so that the front bracket is aligned with the rack holes, while the second person secures the front of the device to the rack using four mounting screws.
The second person should use the mounting screws (and cage nuts and washers if required by your rack) to secure the mounting bracket to the rack.
Continue to support the device and slide the rear mounting blades into the channel of the side mounting rails, securing each blade to the rack using four mounting screws (cage nuts and washers if required by your rack).
Attach a grounding cable to earth ground and then attach it to the chassis grounding points.

Step 2: Connect the SRX4600 to the Ground

Attach an ESD grounding strap to your bare wrist and connect the strap to the ESD point on the chassis.
Connect one end of the grounding cable to a proper earth ground, such as the rack in which the firewall is mounted.
Place the grounding lug attached to the grounding cable over the protective earthing terminal on the protective earthing terminal bracket.
Secure the grounding lug to the protective earthing terminal with the provided washers and screws.
Dress the grounding cable and ensure that it does not touch or block access to other device components and that it does not drape where people could trip over it.

Step 3: Connect Power to the SRX4600

AC-powered SRX4600:

Ensure that the AC power supply is fully inserted into the chassis.
Connect the AC power cord to the AC power supply and a suitable power outlet.

DC-powered SRX4600:

Ensure that the DC power supply is fully inserted into the chassis.
Connect the DC power cables to the DC power supply terminals, following the polarity markings.

FAQ

Q: Do I need to purchase a separate console cable?
A: No, we no longer include a DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable as part of the device package. However, if you require a console cable, you can order it separately with the part number JNP- CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).

Begin

In this guide, we provide a simple, three-step path, to quickly get you up and running with your new SRX4600. We’ve simplified and shortened the installation and configuration steps, and included how-to videos. You’ll learn how to install the SRX4600 in a rack, power it up, and deploy it on your network. To mount, connect power to, and perform initial configuration on the SRX4600 Firewall, you need:

Electrostatic discharge (ESD) grounding strap (not provided).
Four-post rack-mounting kit (provided).
Twelve screws to secure the mounting rails and mounting blades to the chassis (provided).
Eight screws to secure the chassis to the rack (not provided).
Screwdriver appropriate for your rack-mounting screws (not provided).
Two AC power cords with plugs appropriate for your geographical location (provided).
Management host, such as a PC or laptop, with a serial port (not provided).
A grounding cable (minimum 14 AWG (2 mm²), minimum 90°C wire), a grounding lug (Panduit LCD10-10A-L or equivalent) (not provided).
RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided).

NOTE: We no longer include a DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable as part of the device package. If you require a console cable, you can order it separately with the part number JNP- CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).

Mount the SRX4600
You can mount an SRX4600 Firewall in a 19-inch four-post rack configuration. An AC device weighs approximately 38 lb (17.23 kg) and a DC device weighs approximately 40 lb (18.14 kg). Two persons are required for mounting the device.
To mount the firewall:

Attach the ESD grounding strap to your bare wrist and to a site ESD point.
NOTE: If you are mounting multiple units in the rack, mount the heaviest unit at the bottom and mount the others from bottom to top in order of decreasing weight.
Place the rack in its permanent location, allowing adequate clearance for airflow and maintenance, and secure it to the building structure.
Attach the front-mounting brackets to the side mounting rails by using the Phillips 4-40 flat-head mounting screws.
Align the holes in the side mounting rails with the holes on the side of the chassis and attach the side mounting rails to the chassis by using the mounting screws.
Have one person grasp both sides of the device, lift it, and position it in the rack so that the front bracket is aligned with the rack holes and the second person secure the front of the device to the rack by using four mounting screws.
Have the second person use the mounting screws (and cage nuts and washers if your rack requires them) to screw the mounting bracket to the rack.
Continue to support the device and slide the rear mounting blades into the channel of the side mounting rails and securing the blades to the rack. Use the four mounting screws (cage nuts and washers if the rack requires) to attach each blade to the rack.
Attach a grounding cable to earth ground and then attach it to the chassis grounding points.

Connect the SRX4600 to Ground
To connect the Firefall to the ground:

Attach an ESD grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis.
Connect one end of the grounding cable to a proper earth ground, such as the rack in which the firewall is mounted.
Place the grounding lug attached to the grounding cable over the protective earthing terminal on the protective earthing terminal bracket.
Secure the grounding lug to the protective earthing terminal with the washers and screws.
Dress the grounding cable and ensure that it does not touch or block access to other device components and that it does not drape where people could trip over it.

Connect Power to the SRX4600
NOTE: Check if the power supplies AC or DC are fully inserted into the chassis.

Connect Power to an AC-powered SRX4600
To connect power to an AC-powered Firewall:
NOTE: An AC-powered device gets additional grounding when you connect the power supply in the device to a grounded AC power outlet by using the power cord.

1. Insert the coupler end of the power cord into the AC power cord inlet on the AC power supply faceplate. Push the power cord retainer onto the power cord.
2. Insert the power cord plug into an AC power source outlet:
  *  **a.** If the AC power source outlet has a power switch, set it to on (|) position and the Firewall will power on.
  *  **b.** If there is no power switch on the AC power source outlet, the firewall will power on instantly.
3. Verify that the OK/FAIL LED is lit green and on steadily.

Connect Power to a DC-powered SRX4600
To connect power to a DC-powered Firewall:
WARNING: Before performing the following procedure, ensure that there is no power in the DC circuit. To ensure that all power is cut off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off (0) position, and tape the switch handle of the circuit breaker in the off position.

1. Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become active while you are connecting DC power.
2. Verify that the DC power cables are correctly labeled before connecting them to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the –48V and RTN DC cables to chassis ground:
  *  **a.** The cable with very high resistance (indicating an open circuit) to chassis ground is negative (–) and is installed on the –48V (input) DC power input terminal.
  *  **b.** The cable with very low resistance (indicating a closed circuit) to chassis ground is positive (+) and is installed on the RTN (return) DC power input terminal.
3. Remove the protective cover from the DC power input terminal block. Save this cover for future use.
4. Remove the M5 K-nuts from each DC power input terminal.
5. Attach DC terminal rings (TYCO 2-36161-2 Terminal Ring, number 10, not provided) to the ends of the DC power cables. Crimp tightly.
6. Insert the DC terminal rings into the DC power input terminals and secure the DC terminal rings with M5 K-nuts. Do not over tighten.
7. Replace the protective cover over the input terminal block.
8. Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit, and switch the circuit breaker to the ON (|) position.
9. Verify that the OK/FAIL LED is lit green and on steadily.

Up and Running

Set Parameter Values
You must perform the initial configuration of the device through the console port. Before you begin, set the following parameter values in the console server or the management host:

Baud Rate—9600
Flow Control—None
Data—8
Parity—None
Stop Bits—1
DCD State—Disregard

Perform the Initial Configuration
To connect and configure the Firewall from the console:

Connect the console port (CON), located on the front panel of the SRX4600 to a laptop or PC by using the provided RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided).
Log in as root. There is no password. If the software booted before you connected to the console port, you might need to press the Enter key for the prompt to appear.
login: root
Start the CLI.
root# cli
root@>
Enter configuration mode.
root@> configure
Set the root authentication password by entering either a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA):
[edit] root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
Configure an administrator account on the device. When prompted, enter the password for the administrator account:
[edit]
root@# set system login user admin class super-user authentication plain-text- password
New password: password
Retype new password: password
Commit the configuration to activate it on the device:
[edit] root@# commit
Log in as the administrative user you configured in Step 6.
(Optional) Configure the name of the device. If the name includes spaces, enclose the name in quotation marks (“ ”):
[edit] admin@# set system host-name host-name
Configure the IP address and prefix length for the management interface on the Firewall.
[edit] admin@# set interfaces fxp0 unit 0 family inet address address /prefix-length
Configure the default route.
[edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
Check the configuration for validity:
[edit] admin@# commit check
Commit the configuration to activate it on the device:
[edit] admin@# commit

Keep Going
Congratulations! You’ve completed the initial steps to get your SRX4600 up and running. Let’s keep going and learn more about what you can do with the SRX4600.

What’s Next

Now that you’ve done the initial configuration, here are some things you might want to do next.

If you want to	Then

Set up your SRX4600 with advanced security measures to protect and defend your network| Visit Day One: SRX Series Up and Running With Advanced Security Services
Manage software upgrades on your SRX4600| See Installing Software on SRX Series Devices
See, automate, and protect your network with Juniper Security| Visit the Security Design Center
Get hands-on experience with the procedures covered in this guide| Visit Juniper Networks Virtual Labs and reserve your free sandbox. You’ll find the Junos Day One Experience sandbox in the stand alone category.

General Information

If you want to	Then
See all documentation available for the SRX4600	See the [SRX4600

](https://www.juniper.net/documentation/product/us/en/srx4600/)Documentation in the Juniper Networks TechLibrary.
Download, activate, and manage your software licenses to unlock additional features for your SRX Firewall| See Activate Junos OS Licenses in the Juniper Licensing Guide.
Configure the SRX4600 with the Junos OS CLI| Start with the Quick Start for Junos OS guide.
Stay up-to-date about new and changed features, and known and resolved issues| Junos OS Release Notes

Learn With Videos

Our video library continues to grow! We’ve created many, many videos that demonstrate how to do everything from install your hardware to configure advanced Junos OS network features. Here are some great video and training resources that will help you expand your knowledge of Junos OS.

If you want to	Then

Get short and concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies| See Learning with Juniper on Juniper Networks main YouTube page
Learn how to install and configure your Juniper Networks devices| Check out our free Web-based training videos at Hardware Installation and Configuration Videos
View a list of the many free technical trainings we offer at Juniper| Visit the Getting Started page on the Juniper Learning Portal

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2023 Juniper Networks, Inc. All rights reserved.