Juniper SRX4600 Services Gateway User Guide

: August 21, 2024
: JUNIPer

Table of Contents

Juniper SRX4600 Services Gateway
Product Usage Instructions
Begin
Connect the SRX4600 to Ground
- Connect Power to the SRX4600
Up and Running
Keep Going
- What’s Next
- Learn With Videos
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

Juniper SRX4600 Services Gateway

Specifications:

Model: SRX4600
Weight: AC device – 38 lb (17.23 kg), DC device – 40 lb (18.14 kg)
Rack Configuration: 19-inch four-post rack
Power Options: AC-powered, DC-powered

Product Usage Instructions

Mount the SRX4600:

Attach the ESD grounding strap to your bare wrist and to a site ESD point.
Secure the rack in its permanent location.
Attach front-mounting brackets to the side mounting rails.
Align holes in side mounting rails with chassis holes and attach the side mounting rails to the chassis.
Lift and position the device in the rack, aligning the front bracket with rack holes, and secure it.
Secure the front of the device to the rack using mounting screws.
Slide the rear mounting blades into the channel of side mounting rails and secure them to the rack.
Attach a grounding cable to earth ground and then to the chassis grounding points.

Connect the SRX4600 to Ground:

Attach an ESD grounding strap to your bare wrist and connect it to the ESD point on the chassis.
Connect one end of the grounding cable to a proper earth ground.
Secure the grounding lug to the protective earthing terminal.
Dress the grounding cable to avoid blockage or tripping hazards.

Connect Power to the SRX4600:

Connect Power to an AC-powered SRX4600:

Insert the coupler end of the power cord into the AC power cord inlet on the AC power supply faceplate.
Ensure that the power supply is fully inserted into the chassis for proper connection.

FAQ:

Q: How many persons are recommended for mounting the SRX4600?
A: Two persons are required for mounting the SRX4600 due to its weight and installation complexity.

Q: What is the weight difference between an AC device and a DC device of SRX4600?
A: An AC device weighs approximately 38 lb (17.23 kg) while a DC device weighs approximately 40 lb (18.14 kg).

Begin

In this guide, we provide a simple, three-step path, to quickly get you up and running with your new SRX4600. We’ve simplified and shortened the installation and configuration steps, and included how-to videos. You’ll learn how to install the SRX4600 in a rack, power it up, and deploy it on your network.

To mount, connect power to, and perform initial configuration on the SRX4600 Firewall, you need:

Electrostatic discharge (ESD) grounding strap (not provided)
Four-post rack-mounting kit (provided)
Twelve screws to secure the mounting rails and mounting blades to the chassis (provided)
Eight screws to secure the chassis to the rack (not provided)
Screwdriver appropriate for your rack-mounting screws (not provided)
Two AC power cords with plugs appropriate for your geographical location (provided)
Management host, such as a PC or laptop, with a serial port (not provided)
A grounding cable (minimum 14 AWG (2 mm²), minimum 90°C wire), a grounding lug (Panduit LCD10-10A-L or equivalent) (not provided).
RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided)

NOTE: We no longer include the console cable as part of the device package. If the console cable and adapter are not included in your device package, or if you need a different type of adapter, you can order the following separately:

RJ-45 to DB-9 adapter (JNP-CBL-RJ45-DB9)
RJ-45 to USB-A adapter (JNP-CBL-RJ45-USBA)
RJ-45 to USB-C adapter (JNP-CBL-RJ45-USBC)

If you want to use an RJ-45 to USB-A or RJ-45 to USB-C adapter, you must have the X64 (64-Bit) Virtual COM port (VCP) driver installed on your PC. See https://ftdichip.com/drivers/vcp-drivers/ to download the driver.

Mount the SRX4600
You can mount an SRX4600 Firewall in a 19-inch four-post rack configuration. An AC device weighs approximately 38 lb (17.23 kg) and a DC device weighs approximately 40 lb (18.14 kg). Two persons are required for mounting the device.

To mount the firewall:

Attach the ESD grounding strap to your bare wrist and to a site ESD point.
NOTE: If you are mounting multiple units in the rack, mount the heaviest unit at the bottom and mount the others from bottom to top in order of decreasing weight.
Place the rack in its permanent location, allowing adequate clearance for airflow and maintenance, and secure it to the building structure.
Attach the front-mounting brackets to the side mounting rails by using the Phillips 4-40 flat-head mounting screws.
Align the holes in the side mounting rails with the holes on the side of the chassis and attach the side mounting rails to the chassis by using the mounting screws.
Have one person grasp both sides of the device, lift it, and position it in the rack so that the front bracket is aligned with the rack holes and the second person secure the front of the device to the rack by using four mounting screws.
Have the second person use the mounting screws (and cage nuts and washers if your rack requires them) to screw the mounting bracket to the rack.
Continue to support the device and slide the rear mounting blades into the channel of the side mounting rails and securing the blades to the rack. Use the four mounting screws (cage nuts and washers if the rack requires) to attach each blade to the rack.
Attach a grounding cable to earth ground and then attach it to the chassis grounding points.

Connect the SRX4600 to Ground

To connect the Firefall to the ground:

Attach an ESD grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis.
Connect one end of the grounding cable to a proper earth ground, such as the rack in which the firewall is mounted.
Place the grounding lug attached to the grounding cable over the protective earthing terminal on the protective earthing terminal bracket.
Secure the grounding lug to the protective earthing terminal with the washers and screws.
Dress the grounding cable and ensure that it does not touch or block access to other device components and that it does not drape where people could trip over it.does not drape where people could trip over it.

Connect Power to the SRX4600

NOTE: Check if the power supplies AC or DC are fully inserted into the chassis.

Connect Power to an AC-powered SRX4600

To connect power to an AC-powered Firewall:

NOTE: An AC-powered device gets additional grounding when you connect the power supply in the device to a grounded AC power outlet by using the power cord.

Insert the coupler end of the power cord into the AC power cord inlet on the AC power supply faceplate. Push the power cord retainer onto the power cord.
Insert the power cord plug into an AC power source outlet:
- If the AC power source outlet has a power switch, set it to on (|) position and the Firewall will power on.
- If there is no power switch on the AC power source outlet, the firewall will power on instantly.
Verify that the OK/FAIL LED is lit green and on steadily.

Connect Power to a DC-powered SRX4600

To connect power to a DC-powered Firewall:

WARNING: Before performing the following procedure, ensure that there is no power in the DC circuit. To ensure that all power is cut off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off (0) position, and tape the switch handle of the circuit breaker in the off position.

Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become active while you are connecting DC power.
Verify that the DC power cables are correctly labeled before connecting them to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the –48V and RTN DC cables to chassis ground:
- The cable with very high resistance (indicating an open circuit) to chassis ground is negative (–) and is installed on the –48V (input) DC power input terminal.
- The cable with very low resistance (indicating a closed circuit) to chassis ground is positive (+) and is installed on the RTN (return) DC power input terminal.
Remove the protective cover from the DC power input terminal block. Save this cover for future use.
Remove the M5 K-nuts from each DC power input terminal.
Attach DC terminal rings (TYCO 2-36161-2 Terminal Ring, number 10, not provided) to the ends of the DC power cables. Crimp tightly.
Insert the DC terminal rings into the DC power input terminals and secure the DC terminal rings with M5 K-nuts. Do not overtighten.
Replace the protective cover over the input terminal block.
Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit, and switch the circuit breaker to the ON (|) position.
Verify that the OK/FAIL LED is lit green and on steadily.

Up and Running

Set Parameter Values
You must perform the initial configuration of the device through the console port. Before you begin, set the following parameter values in the console server or the management host:

Baud Rate—9600
Flow Control—None
Data—8
Parity—None
Stop Bits—1
DCD State—Disregard

Perform the Initial Configuration
To connect and configure the Firewall from the console:

Connect the console port (CON), located on the front panel of the SRX4600 to a laptop or PC by using the provided RJ-45 cable and RJ-45 to DB-9 serial port adapter (not provided).
Log in as root. There is no password. If the software booted before you connected to the console port, you might need to press the Enter key for the prompt to appear.
login: root
Start the CLI.
root# cli
root@>
Enter configuration mode.
root@> configure.
Set the root authentication password by entering either a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA):
[edit] root@# set system root-authentication plain-text-password
New password: password Retype new password: password
Configure an administrator account on the device. When prompted, enter the password for the administrator account:
[edit] root@# set system login user admin class super-user authentication plain-text-password New password: password
Retype new password: password
Commit the configuration to activate it on the device:
[edit] root@# commit
Log in as the administrative user you configured in Step 6.
(Optional) Configure the name of the device. If the name includes spaces, enclose the name in quotation marks (“ ”):
[edit] admin@# set system host-name host-name
Configure the IP address and prefix length for the management interface on the Firewall.
[edit] admin@# set interfaces fxp0 unit 0 family inet address address/prefix- length
Configure the default route.
[edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
Check the configuration for validity:
[edit] admin@# commit check
Commit the configuration to activate it on the device:
[edit] admin@# commit

Keep Going

Congratulations! You’ve completed the initial steps to get your SRX4600 up and running. Let’s keep going and learn more about what you can do with the SRX4600.

What’s Next

Now that you’ve done the initial configuration, here are some things you might want to do next.

If you want to	Then

Set up your SRX4600 with advanced security measures to protect and defend your network| Visit Day One: SRX Series Up and Running With Advanced Security Services
Manage software upgrades on your SRX4600| See Installing Software on SRX Series Devices
See, automate, and protect your network with Juniper Security| Visit the Security Design Center
Get hands-on experience with the procedures covered in this guide| Visit Juniper Networks Virtual Labs and reserve your free sandbox. You’ll find the Junos Day One Experience sandbox in the stand alone category.

General Information

If you want to	Then
See all documentation available for the SRX4600	See the [SRX4600

](https://www.juniper.net/documentation/product/us/en/srx4600/)Documentation in the Juniper Networks TechLibrary.
Download, activate, and manage your software licenses to unlock additional features for your SRX Firewall| See Activate Junos OS Licenses in the Juniper Licensing Guide.
Configure the SRX4600 with the Junos OS CLI| Start with the Quick Start for Junos OS guide.
Stay up-to-date about new and changed features, and known and resolved issues| Junos OS Release Notes

Learn With Videos

Our video library continues to grow! We’ve created many, many videos that demonstrate how to do everything from install your hardware to configure advanced Junos OS network features. Here are some great video and training resources that will help you expand your knowledge of Junos OS.

If you want to	Then

Get short and concise tips and instructions that provide quick answers, clarity, and insight into specific features and functions of Juniper technologies| See Learning with Juniper on Juniper Networks main YouTube page
Learn how to install and configure your Juniper Networks devices| Check out our free Web-based training videos at Hardware Installation and Configuration Videos
View a list of the many free technical trainings we offer at Juniper| Visit the Getting Started page on the Juniper Learning Portal

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.