Connecting the SRX5800 to Power

Tools and Parts Required for SRX5800 Firewall Grounding and Power Connections

To ground and provide power to the firewall, you need the following tools and parts:

Phillips (+) screwdrivers, numbers 1 and 2
2.5-mm flat-blade (–) screwdriver
7/16-in. hexagonal-head external drive socket wrench, or nut driver, with a torque range between 23 lb-in. (2.6 Nm) and 25 lb-in. (2.8 Nm) tightening torque, for tightening nuts to terminal studs on each power supply on a DC-powered firewall.
Wire cutters
Electrostatic discharge (ESD) grounding wrist strap

Grounding the SRX5800 Firewall

Warning:

To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the firewall chassis before connecting power. You must install the SRX8500 device in a restricted-access location and ensure that the chassis is always properly grounded. The SRX5800 device has a two-hole protective grounding terminal provided on the chassis. See Figure 1. Under all circumstances, use this grounding connection to ground the chassis. For AC-powered systems, you must also use the grounding wire in the AC power cord along with the two-hole grounding lug connection. This tested system meets or exceeds all applicable EMC regulatory requirements with the two-hole protective grounding terminal.

You ground the firewall by connecting a grounding cable to earth ground and then attaching it to one of the chassis grounding points using two screws. You must provide the grounding cable (the cable lug is supplied with the firewall).

Verify that a licensed electrician has attached the cable lug provided with the firewall to the grounding cable.
Attach an ESD grounding strap to your bare wrist and connect the strap to an approved site ESD grounding point. See the instructions for your site.
Ensure that all grounding surfaces are clean and brought to a bright finish before grounding connections are made.
Connect the grounding cable to a proper earth ground.
Detach the ESD grounding strap from the site ESD grounding point.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Place the grounding cable lug over one of the two grounding points. The right pair is sized for UNC 1/4-20 screws and 1/4 in. split washers, which are provided in the accessory box. The left pair is sized for M6 metric screws. If you wish to use the metric-sized grounding point, you must provide appropriate screws and split washers.
Secure the grounding cable lug to the grounding point, first with the washers, and then with the screws as shown in Figure 1.
Figure 1: Connecting the Grounding Cable
Dress the grounding cable and verify that it does not touch or block access to firewall components, and that it does not drape where people could trip on it.

Connecting Power to an AC-Powered SRX5800 Firewall

Warning:

To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the firewall chassis before connecting power. See Grounding the SRX5800 Firewall for instructions.

CAUTION:

Do not mix AC and DC power supplies within the same firewall. Damage to the firewall might occur.

You connect AC power to the device by attaching power cords from the AC power sources to the AC appliance inlets located on the chassis above the power supplies. If the firewall is powered by high-capacity power supplies, you also connect AC feeds to AC appliance inlets located on the power supplies themselves. The power cords are not provided with the firewall; you must order them separately.

To connect the AC power cords to the firewall (see Figure 2 and Figure 3):

Locate or obtain the power cords you will use with the firewall. The power cords must have a plug appropriate for your geographical location.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Move the AC input switch on the chassis above each power supply to the off (O) position. If the firewall is equipped with high-capacity AC power supplies, you must also move the AC input switch on each power supply to the off (O) position.
For each installed AC power supply, connect a power cord to the appliance inlet on the chassis directly above the power supply.
If your firewall is equipped with high-capacity AC power supplies, you must also connect a power cord to the appliance inlet located on each power supply.
Insert the power cord plugs into an external AC power source receptacle.

Note:
Each power supply must be connected to a dedicated AC power feed and a dedicated customer site circuit breaker. We recommend that you use a 15 A (250 VAC) minimum, or as required by local code.
Dress the power cords appropriately. Verify that the power cords do not block the air exhaust and access to firewall components, or drape where people could trip on them.
Repeat Step 3 through Step 7 for the remaining power supplies.

Figure 2: Connecting AC Power to the Firewall (Standard-Capacity Power Supplies)

Figure 3: Connecting AC Power to the Firewall (High-Capacity Power Supplies)

Connect Power to an SRX5800 Firewall with High-Capacity Second-Generation Power Supplies

A minimum of two AC nominal 220 VAC 20 amp power cords are required for this procedure.

To install and power on an SRX5800 Firewall with High-Capacity Second-Generation AC (MX960-PSM-5K-AC) power supply, use the following procedure.

Verify that the power switch on the power supply is in the off (O) position.
Ensure that the release lever below the empty power supply slot is locked in the counterclockwise position (see Figure 4).
Figure 4: SRX5800 Firewall with High-Capacity Second Generation AC Power Supplies Installed

If necessary, pull the spring-loaded locking pin in the release lever away from the chassis and turn the release lever counterclockwise until it stops. Let go of the locking pin in the release lever. Ensure that the pin is seated inside the corresponding hole in the chassis.
On the power supply, rotate the metal cover away from the input mode switch to expose the switch.
Move the input mode switch to position 0 if you plan to connect one feed, or position 1 if you plan to connect two feeds (see Figure 5).
Figure 5: SRX5800 High-Capacity Second-Generation AC Power Input Mode Switch

1
—
1 (if you connect two feeds)
2
—
0 (if you connect one feed)

CAUTION:
Do not use a pencil, because fragments can break off and cause damage to the power supply.
Using both hands, slide the power supply straight into the chassis until the power supply is fully seated in the chassis slot. The power supply faceplate will protrude beyond the chassis.
The small tab on the metal housing that is controlled by the release lever must be inside of the corresponding slot at the bottom of the power supply (see Figure 4). This tab is used to pull the power supply down in the chassis slot, prior to removing the power supply.
While firmly pushing the handle on the power supply faceplate with one hand, use your other hand to pull the spring-loaded locking pin in the release lever away from the chassis and turn the release lever clockwise until it stops.
Let go of the locking pin in the release lever. Ensure that the pin is seated inside the corresponding hole in the chassis.
Make sure the cover is attached on the power distribution unit on the chassis.
Make sure the grounding cable is attached, See .
Locate a power cord with the type of plug appropriate for your geographical location (see ).
Plug the power cord into the corresponding appliance inlet located in the chassis directly on the power supply. If using the power supply in two-feed mode, plug the second power cord into the receptacle on the power supply.
Using a screwdriver, tighten the screw on the retainer to prevent the AC cord from getting lose. See Figure 6.

Note:
Each power supply must be connected to a dedicated AC power feed and a dedicated customer site circuit breaker.

Note:
To use high-capacity second-generation AC power supplies with full capacity you have to switch them to two feed mode and use two power cords per power supply. See Figure 6.

Figure 6: SRX5800 with One High-Capacity Second-Generation AC Power Feed Connected

Figure 7: SRX5800 with Both High-Capacity Second-Generation AC Power Feeds Connected
Dress the power cords appropriately. Verify that the power cord does not block the air exhaust and access to router components, and that they do not drape where people could trip on them.
Move the AC input switch above the power supply to the on (—) position. See Figure 8. This is the only switch you have to turn on.
Figure 8: SRX5800 with High-Capacity Second-Generation AC Power Supplies Input Switch

If the power supply is correctly installed and functioning normally, the IN1 OK, IN2 OK (two-feed mode only) DC OK LEDs light steadily, and the PS FAIL LED is not lit. See Table 1.

Table 1: High-Capacity Second-Generation AC Power Supply DIP Switch Position and LEDs Behaviour
Connected Inputs	DIP Switch Position	LEDs
Connected Inputs	DIP Switch Position	INP0 OK	INP1 OK	DC OK	PS FAIL
INP0 connected, INP1 disconnected	0 (1 input)	Green	Off	Green	Off
INP0 disconnected, INP1 connected	0 (1 input)	Off	Green	Green	Off
INP0 connected, INP1 connected	0 (1 input)	Green	Green	Green	Off
INP0 connected, INP1 disconnected	1 (2 inputs)	Green	Off	Off	Red
INP0 disconnected, INP1 connected	1 (2 inputs)	Off	Green	Off	Red
INP0 connected, INP1 connected	1 (2 inputs)	Green	Green	Green	Off

Repeat steps 1-12 for installing power supplies in the other slot as required.

Powering On an AC-Powered SRX5800 Firewall

To power on an AC-powered firewall:

Verify that the power supplies are fully inserted in the chassis.
Verify that each AC power cord is securely inserted into its appliance inlet.
Verify that an external management device is connected to one of the Routing Engine ports (AUX, CONSOLE, or ETHERNET).
Turn on the power to the external management device.
Switch on the dedicated customer site circuit breakers. Follow the ESD and safety instructions for your site.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Switch the AC switch in the chassis above each power supply to the on (—) position.
If the firewall has high-capacity power supplies installed, you must also move the AC switch at the top of each power supply to the on (|) position.
Verify the following LED indications for each installed power supply:
- For standard-capacity AC power supplies, verify that the AC OK and DC OK LEDs light steadily and the PS FAIL LED is not lit.
- For high-capacity AC power supplies, verify that the DC OK LED lights steadily, and the PS FAIL LED is not lit. In addition, the AC-1 OK LED should light green steadily if the upper AC feed (on the chassis above the power supply) is connected and receiving power, and the AC-2 OK LED should light green steadily if the lower AC feed (on the power supply itself) is connected and receiving power.
Note:
After a power supply is powered on, it can take up to 60 seconds for status indicators—such as the status LEDs on the power supply and the show chassis command display—to indicate that the power supply is functioning normally. Ignore error indicators that appear during the first 60 seconds.
If any of the status LEDs indicates that the power supply is not functioning normally, repeat the installation and cabling procedures.
On the external management device connected to the Routing Engine, monitor the startup process to verify that the system has booted properly.

Note:
If the system is completely powered off when you power on the power supply, the Routing Engine boots as the power supply completes its startup sequence. Normally, the firewall boots from the Junos OS imageon the CompactFlash card.

After you have powered on a power supply, wait at least 60 seconds before you power it off.

Connect Power to an SRX5800 Firewall with High-Voltage Second-Generation Universal (HVAC/HVDC) Power Supplies

To install and power on an High-Voltage Second-Generation Universal (HVAC/HVDC) power supply, use the following procedure.

Verify that the power switch on the power supply is in the off (O) position.
Ensure that the release lever below the empty power supply slot is locked in the counterclockwise position (see Figure 9).
Figure 9: SRX5800 Firewall with High-Voltage Second-Generation Universal (HVAC or HVDC) Installed

If necessary, pull the spring-loaded locking pin in the release lever away from the chassis and turn the release lever counterclockwise until it stops. Let go of the locking pin in the release lever. Ensure that the pin is seated inside the corresponding hole in the chassis.
On the power supply, rotate the metal cover away from the input mode switch to expose the switch.
Using both hands, slide the power supply straight into the chassis until the power supply is fully seated in the chassis slot. The power supply faceplate protrudes beyond the chassis.
The small tab on the metal housing that is controlled by the release lever must be inside of the corresponding slot at the bottom of the power supply. This tab is used to pull the power supply down in the chassis slot, prior to removing the power supply.
While firmly pushing the handle on the power supply faceplate with one hand, use your other hand to pull the spring-loaded locking pin in the release lever away from the chassis and turn the release lever clockwise until it stops.
Let go of the locking pin in the release lever. Ensure that the pin is seated inside the corresponding hole in the chassis.
Make sure the cover is attached on the power distribution unit on the chassis on the high-voltage second-generation universal (HVAC or HVDC) power supply.
Make sure the grounding cable is attached,
Locate a power cord with the type of plug appropriate for your geographical location.
Plug the power cord into the corresponding appliance inlet located in the chassis directly on the power supply.

Note:
Each power supply must be connected to a dedicated power feed and a dedicated customer site circuit breaker.

Figure 10: SRX5800 Firewall with One High-Voltage Second-Generation (HVAC or HVDC) Power Feed Connected
Dress the power cords appropriately. Verify that the power cord does not block the air exhaust and access to router components, and that they do not drape where people could trip on them.
Move the input switch above the power supply to the on (—) position.
Figure 11: High-Voltage Second-Generation (HVAC or HVDC)MX960 AC Power Input Mode Switch
If the power supply is correctly installed and functioning normally, the INP OK, DC OK LEDs light steadily, and the PS FAIL LED is not lit.
Repeat steps 1-12 for installing power supplies in slots 1, 2, and 3, where required.

Connecting Power to a DC-Powered SRX5800 Firewall

Warning:

Before you perform DC power procedures, ensure there is no power to the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off position, and tape the switch handle of the circuit breaker in the off position.

Warning:

To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the firewall chassis before connecting power. See Grounding the SRX5800 Firewall for instructions.

CAUTION:

Do not mix AC and DC power supplies within the same firewall. Damage to the firewall might occur.

You connect DC power to the firewall by attaching power cables from the external DC power sources to the terminal studs on the power supply faceplates. You must provide the power cables (the cable lugs are supplied with the firewall).

To connect the DC source power cables to the firewall:

Switch off the dedicated customer site circuit breakers. Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable leads might become active during installation.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Move the DC circuit breaker on the power supply faceplate to the off (O) position.
Remove the clear plastic cover protecting the terminal studs on the faceplate.
Verify that the DC power cables are correctly labeled before making connections to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the –48V and RTN DC cables to chassis ground:
- The cable with very large resistance (indicating an open circuit) to chassis ground is –48V.
- The cable with very low resistance (indicating a closed circuit) to chassis ground is RTN.
CAUTION:
You must ensure that power connections maintain the proper polarity. The power source cables might be labeled (+) and (–) to indicate their polarity. There is no standard color coding for DC power cables. The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply.
Install heat-shrink tubing insulation around the power cables.
To install heat-shrink tubing:
1. Slide the tubing over the portion of the cable where it is attached to the lug barrel. Ensure that tubing covers the end of the wire and the barrel of the lug attached to it.
2. Shrink the tubing with a heat gun. Ensure that you heat all sides of the tubing evenly so that it shrinks around the cable tightly.
Figure 12 shows the steps to install heat-shrink tubing.

Note:
Do not overheat the tubing.
Figure 12: How to Install Heat-Shrink Tubing
Remove the nuts and washers from the terminal studs. (Use a 7/16-in. nut driver or socket wrench.)
Secure each power cable lug to the terminal studs, first with the split washer, then with the nut (see Figure 13). Apply between 23 lb-in. (2.6 Nm) and 25 lb-in. (2.8 Nm) of torque to each nut. (Use a 7/16-in. nut driver or socket wrench.)
1. Secure each positive (+) DC source power cable lug to the RTN (return) terminal.
2. Secure each negative (–) DC source power cable lug to the –48V (input) terminal.
The DC power supplies in slots PEM0 and PEM1 must be powered by dedicated power feeds derived from feed A, and the DC power supplies in slots PEM2 and PEM3 must be powered by dedicated power feeds derived from feed B. This configuration provides the commonly deployed A/B feed redundancy for the system.
For standard-capacity DC power supplies, secure each DC power cable to its strain relief bracket as follows:
1. Loosen the captive screw on the cable restraint on the lower edge of the power supply faceplate.
2. Route the positive and negative DC power cables through the left and right sides of the cable restraint.
3. Tighten the cable restraint captive screw to hold the power cables in place.
Replace the clear plastic cover over the terminal studs on the faceplate.
Verify that the power cables are connected correctly, that they are not touching or blocking access to firewall components, and that they do not drape where people could trip on them.
Repeat Steps 3 through 11 for the remaining power supplies.

Figure 13: Connecting DC Power to the Firewall (Standard-Capacity SHown, High-Capacity Similar)

Powering On a DC-Powered SRX5800 Firewall

To power on a DC-powered firewall:

Verify that an external management device is connected to one of the Routing Engine ports (AUX, CONSOLE, or ETHERNET).
Turn on the power to the external management device.
Verify that the power supplies are fully inserted in the chassis.
Verify that the source power cables are connected to the appropriate terminal: the positive (+) source cable to the return terminal (labeled RTN) and the negative (–) source cable to the input terminal (labeled –48V).
Switch on the dedicated customer site circuit breakers to provide power to the DC power cables. Follow your site’s procedures.
Check the INPUT OK LED is lit steadily green to verify that power is present.
If power is not present:
- Verify that the fuse is installed correctly and turn on the breaker at the battery distribution fuse board or fuse bay.
- Check the voltage with a meter at the terminals of the power supply for correct voltage level and polarity.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Move the DC circuit breaker on the DC power supplies to the on (|) position.
Verify that the BREAKER ON LED is lit green steadily.
Verify that the PWR OK LED is lit green steadily, indicating the power supply is correctly installed and functioning normally.

Note:
After a power supply is powered on, it can take up to 60 seconds for status indicators—such as the status LEDs on the power supply and the show chassis command display—to indicate that the power supply is functioning normally. Ignore error indicators that appear during the first 60 seconds.
If any of the status LEDs indicates that the power supply is not functioning normally, repeat the installation and cabling procedures .
On the external management device connected to the Routing Engine, monitor the startup process to verify that the system has booted properly.

Note:
If the system is completely powered off when you power on the power supply, the Routing Engine boots as the power supply completes its startup sequence. Normally, the firewall boots from the Junos OS image on the CompactFlash card.

After powering on a power supply, wait at least 60 seconds before turning it off.

Powering Off the SRX5800 Firewall

Note:

After powering off a power supply, wait at least 60 seconds before turning it back on.

To power off the firewall:

On the external management device connected to the Routing Engine, issue the request system halt operational mode command. The command shuts down the Routing Engine cleanly, so its state information is preserved.
```
user@host> request system halt
```
Wait until a message appears on the console confirming that the operating system has halted.
For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.
Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
Switch off the power supplies:
- For an AC-powered firewall, move the AC input switch on the chassis above each AC power supply to the off (O) position. If the firewall is equipped with high-capacity AC power supplies, you must also move the AC input switch on each power supply to the off (O) position.
- For a DC-powered firewall, move the DC circuit breaker on each DC power supply faceplate to the off (O) position.

SRX5800 Firewall Hardware Guide

ON THIS PAGE

Connecting the SRX5800 to Power

Tools and Parts Required for SRX5800 Firewall Grounding and Power Connections

Grounding the SRX5800 Firewall

Connecting Power to an AC-Powered SRX5800 Firewall

Connect Power to an SRX5800 Firewall with High-Capacity Second-Generation Power Supplies

Powering On an AC-Powered SRX5800 Firewall

Connect Power to an SRX5800 Firewall with High-Voltage Second-Generation Universal (HVAC/HVDC) Power Supplies

Connecting Power to a DC-Powered SRX5800 Firewall

Powering On a DC-Powered SRX5800 Firewall

Powering Off the SRX5800 Firewall