SRX5400 Host Subsystem

The host subsystem is composed of a Routing Engine installed in a Switch Control Board (SCB). The host subsystem provides the routing and system management functions of the firewall. You must install one host subsystem on the device. The host subsystem components are as follows:

• Switch Control Board

  • SRX5K-SCB–from Junos OS Release 9.2 to 12.3X48

  • SRX5K-SCBE–from Junos OS Release 12.1X47-D15 and later

  • SRX5K-SCB3–from Junos OS Release 15.1X49-D10 and later

  • SRX5K-SCB4–from Junos OS Release 19.3R1 and later

    Note:

    SRX5K-SCB4 is not supported on SRX5400 Firewalls.

• Routing Engine

  • SRX5K-RE-13-20–from Junos OS Release 9.2 to 12.3X48

  • SRX5K-RE-1800X4–from Junos OS Release 12.1X47-D15 and later

  • SRX5K-RE3-128G–from Junos OS Release 19.3R1 and later

The host subsystem has three LEDs that display its status. The host subsystem LEDs are located in the middle of the craft interface.

The Switch Control Board (SCB) provides the following functions:

• Powers on and powers off MPCs and SPC

• Controls clocking, system resets, and booting

• Monitors and controls system functions, including fan speed, board power status, PDM status and control, and the system front panel

• Provides interconnections to all the MPCs within the chassis through the switch fabrics integrated into the SCB

When the SCB is part of a host subsystem, the Routing Engine installs directly into a slot on the SCB (see Figure 1).

Figure 1: SRX5K-SCB

You must install one SCB in the firewall as part of a host subsystem.

The SCB installs horizontally into the slot at the bottom of the card cage labeled 0. If any slots are empty, you must install a blank panel.

For detailed information about SCBs supported by the firewall, see the SRX5400, SRX5600, and SRX5800 Firewall Card Reference at www.juniper.net/documentation/.

The SRX5K-SCB Switch Control Board (SCB) (Figure 2) performs the following functions:

• Powers on and powers off I/O cards (IOCs) and Services Processing Cards (SPCs)

• Controls clocking, system resets, and booting

• Monitors and controls system functions, including fan speed, board power status, PDM status and control, and the system front panel

• Provides interconnections to all the IOCs within the chassis through the switch fabrics integrated into the SCB

SRX5400 and SRX5600 Firewalls have one SCB each installed and you can install a second SCB for redundancy. The SRX5800 Firewall has two SCBs installed and you can install a third SCB for switch fabric redundancy.

The host subsystem is composed of a Routing Engine installed directly into a slot on the faceplate of the SCB. When there is no Routing Engine is a SCB, its slot must be covered with a blank panel.

Figure 2: Switch Control Board SRX5K-SCB

Each SCB consists of the following components:

• Chassis management Ethernet switch.

• I2C bus logic, used for low-level communication with each component.

• Component redundancy circuitry.

• Gigabit Ethernet switch that is connected to the embedded CPU complex on all components.

• Switch fabric—Provides the switching functions for the IOCs.

• Control FPGA—Provides the Peripheral Component Interconnect (PCI) interface to the Routing Engine.

• 1000Base-T Ethernet controller—Provides a 1-Gbps Ethernet link between the Routing Engines.

• Ethernet switch—Provides 1-Gbps link speeds between the Routing Engine and the IOCs.

• Circuits for chassis management and control.

• Power circuits for the Routing Engine and SCB.

Description	SCB with slot for Routing Engine Maximum throughput: 75 Gbps per slot
Software release	Junos OS Release 9.2 and later
Cables and connectors	Slot for Routing Engine
Controls	None
Supported Slots	SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6
Power Requirement	150 W
Weight	Approximately 10 lb (4.5 kg)
LEDs	OK/FAIL LED, one bicolor: Green–The SCB is operating normally. Red–The SCB has failed and is not operating normally. Off–The SCB is powered down. FABRIC ONLY LED: Green–The SCB is operating in fabric-only mode. Off–The SCB is operating in fabric/control board mode. FABRIC ACTIVE LED: Green–The fabric is in active mode.
Serial Number Location	The serial number label is located as shown in Figure 3. Figure 3: SCB Serial Number Label

Some key attributes of the SRX5K-SCBE are:

• A bandwidth of 120 Gbps per slot with redundant fabric support and improved fabric performance by using the next-generation fabric (XF) chip.

• A centralized clocking architecture that supports clock cleanup and distribution. The Stratum 3 clock module performs clock monitoring, filtering, and holdover in a centralized chassis location.

• Full performance with fabric redundancy for higher capacity line cards such as the SRX5K-MPC.

The Routing Engine installs directly into a slot on the SRX5K-SCBE as shown in Figure 4.

Figure 4: SRX5K-SCBE

Each SRX5K-SCBE consists of the following components:

• I2C bus logic for low-level communication with each component

• Component redundancy circuitry

• Control Board/Routing Engine primary-role mechanism

• Gigabit Ethernet switch that is connected to the embedded CPU complex on all components

• Switch fabric to provide the switching functions for the MPCs

• 1000BASE-T Ethernet controller to provide a 1-Gbps Ethernet link between the Routing Engines

• Power circuits for the Routing Engine and the SRX5K-SCBE

• LEDs—Provides status of the SRX5K-SCBE and clocking interface

Description	SRX5K-SCBE with slot for Routing Engine Maximum throughput: 120 Gbps per slot
Software release	Junos OS Release 12.1X47-D15 and later
Cables and connectors	Slot for Routing Engine
Controls	None
Supported slots	SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6
Power requirement	160 W at 131º F (55º C) 130 W at 104º F (40º C) 120 W at 77º F (25º C)
Weight	9.6 lb (4.4 kg) with Routing Engine
Serial number location	The serial number label is located as shown in Figure 5. Figure 5: SRX5K-SCBE Serial Number Label

Some key attributes of the SCB3 are:

• With the existing midplane and fabric link speed of 8.36 Gbps, supports a bandwidth of 205 Gbps per slot with redundant fabric support and 308 Gbps per slot without redundancy.

• With the enhanced midplane and fabric link speed of 10.2 Gbps, supports a bandwidth of 249 Gbps per slot with redundant fabric support and 374 Gbps per slot without redundancy with the enhanced midplane

• Improved fabric performance with the next-generation fabric (XF2) chip.

• Full performance with fabric redundancy for higher-capacity line cards.

• Support for MPC line cards such as SRX5K-MPC (IOC2) and IOC3 (SRX5K-MPC3-40G10G or SRX5K-MPC3-100G10G) only.

• Two 10-Gigabit Ethernet SFP+ ports (These ports are disabled and reserved for future use).

The Routing Engine installs directly into a slot on the SCB3, as shown in Figure 6.

Figure 6: SRX5K-SCB3

Each SRX5K-SCB3 (SCB3) consists of the following components:

• I2C bus logic for low-level communication with each component

• Component redundancy circuitry

• Control Board/Routing Engine primary-role mechanism

• Gigabit Ethernet switch that is connected to the embedded CPU complex on all components

• Switch fabric to provide the switching functions for the MPCs

• Control field-programmable gate array (FPGA) to provide the Peripheral Component Interconnect (PCI) interface to the Routing Engine

• Circuits for chassis management and control

• Power circuits for the Routing Engine and SCB3

• LEDs to provides status of the SCB3

Description	SCB3 with slot for Routing Engine
Software release	Junos OS Release 15.1X49-D10 and later
Cables and connectors	Slot for Routing Engine
Controls	None
Supported slots	SRX5400–Only bottom slots 0 and 1/0 SRX5600–Only bottom slots 0 and 1 SRX5800–Only center slots 0, 1, and 2/6
Power requirement	300 W
Weight	9.6 lb (4.4 kg) with Routing Engine
Serial number location	The serial number label is located as shown in Figure 7. Figure 7: SRX5K-SCB3 Serial Number Label

The Routing Engine is an Intel-based PC platform that runs Junos OS. Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device (see Figure 8).

A USB port on the Routing Engine accepts a USB memory card that allows you to load Junos OS.

Figure 8: SRX5K-RE-13-20 Routing Engine

For detailed information about the Routing Engines supported by the firewall, see the SRX5400, SRX5600, and SRX5800 Firewall Card Reference at www.juniper.net/documentation/.

The SRX5K-RE-13-20 Routing Engine (Figure 9) is an Intel-based PC platform that runs the Junos operating system (Junos OS). Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device.

Figure 9: Routing Engine

You must install at least one Routing Engine in the firewall. You can install a second Routing Engine if both Routing Engines are running Junos OS Release 10.0 or later. A second Routing Engine is required if you are using the dual chassis cluster control link feature available in Junos OS Release 10.0 and later. The second Routing Engine does not perform all the functions of a Routing Engine and does not improve resiliency or redundancy. The second Routing Engine and the Switch Control Board (SCB) in which it is installed do not constitute a host subsystem. The only function of the second Routing Engine is to enable the hardware infrastructure that enables the chassis cluster control 1 port on the Services Processing Card (SPC) used for chassis cluster control links. If you install only one Routing Engine in the firewall, you must install it in the slot in the front panel of SCB0. If you install a second Routing Engine to use the dual chassis cluster control link feature, you install it in the slot in the front panel of SCB1.

The Routing Engine consists of the following components:

• CPU—Runs Junos OS to maintain the firewall's routing tables and routing protocols. It has a Pentium-class processor.

• DRAM—Provides storage for the routing and forwarding tables and for other Routing Engine processes.

• USB port—Provides a removable media interface through which you can install Junos OS manually. Junos supports USB version 1.0.

• Internal flash disk—Provides primary storage for software images, configuration files, and microcode. The disk is a fixed compact flash and is inaccessible from outside the firewall.

• Hard disk—Provides secondary storage for log files, memory dumps, and rebooting the system if the internal compact flash disk fails.

• HDD LED—Indicates disk activity for the hard disk drive.

• Management ports—Each Routing Engine has one 10/100-Mbps Ethernet port for connecting to a management network, and two asynchronous serial ports—one for connecting to a console and one for connecting to a modem or other auxiliary device. The interface ports are labeled AUX, CONSOLE, and ETHERNET.

• EEPROM—Stores the serial number of the Routing Engine.

• Extractor clips—Used for inserting and extracting the Routing Engine.

• Captive screws—Secures the Routing Engine in place.

The Routing Engine boots from the storage media in this order: the USB device (if present), then the internal flash disk, then the hard disk, then the LAN.

Description	Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls
Software release	Junos OS Release 9.2 and later Junos OS Release 10.0 and later required to install a second Routing Engine
Cables and connectors	AUX—Connects the Routing Engine to a laptop, a modem, or another auxiliary device through a cable with an RJ-45 connector. CONSOLE—Connects the Routing Engine to a system console through a cable with an RJ-45 connector. ETHERNET—Connects the Routing Engine through an Ethernet connection to a management LAN (or any other device that plugs into an Ethernet connection) for out-of-band management.
Controls	RESET button—Reboots the Routing Engine when pressed ONLINE/OFFLINE Button—Not supported in the current release
Supported Slots	Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 Note: The firewall host subsystem Routing Engine must be installed in the SCB in slot 0. A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations.
Power Requirement	90 W
Weight	Approximately 2.4 lb (1.1 kg)
LEDs	HDD LED: Blinking green–The Routing Engine hard disk is functioning normally. MASTER LED: Blue–The Routing Engine is Primary. Note: The SRX5400, SRX5600, and SRX5800 Firewalls do not support a secondary or backup Routing Engine, so the MASTER LED should always be lit. OK/FAIL LED, one bicolor: Off–The Routing Engine is operating normally. Red–The Routing Engine has failed and is not operating normally. ONLINE LED: Blinking green–The Routing Engine is coming online. Steady green–The Routing Engine is functioning normally.
Serial Number Location	The serial number label is located on the right side of the top of the Routing Engine as shown in Figure 10 Figure 10: SRX5K-RE-13-20 Serial Number Label

The enhanced Routing Engine is an Intel-based PC platform that runs Junos OS. Software processes that run on the Routing Engine maintain the routing tables, manage the routing protocols used on the device, control the device interfaces, control some chassis components, and provide the interface for system management and user access to the device.The Routing Engine must be installed directly into the SRX5K-SCBE. A USB port on the Routing Engine accepts a USB memory device that allows you to load Junos OS. Figure 11 shows the Routing Engine.

Figure 11: SRX5K-RE-1800X4 Routing Engine

Three ports located on the Routing Engine connect to one or more external devices on which system administrators can issue Junos OS CLI commands to manage the firewall.

The ports function as follows:

• AUX–Connects the Routing Engine to a laptop, modem, or other auxiliary device through a serial cable with an RJ-45 connector.

• CONSOLE–Connects the Routing Engine to a system console through a serial cable with an RJ-45 connector.

• ETHERNET–Connects the Routing Engine through an Ethernet connection to a management LAN (or any other device that plugs into an Ethernet connection) for out-of-band management. The port uses an autosensing RJ-45 connector to support 10/100/1000 Mbps connections. Two small LEDs on the bottom of the port indicate the connection in use: the LED flashes yellow or green for a 10/100/1000 Mbps connection, and the LED is light green when traffic is passing through the port.

The solid-state drive (SSD) slots located on the Routing Engine provide secondary storage for log files, for generating core files, and for rebooting the system if the CompactFlash card fails. Currently, SRX5K-RE-1800X4 only supports one 128-GB SSD.

Each Routing Engine consists of the following components:

• CPU—Runs Junos OS to maintain the routing tables and routing protocols.

• DRAM—Provides storage for the routing and forwarding tables and for other Routing Engine processes.

• USB port—Provides a removable media interface through which you can install the Junos OS manually. Junos OS supports USB version 1.0 and 2.0.

• CompactFlash card—Provides primary storage for software images, configuration files, and microcode. The CompactFlash card is fixed and is inaccessible from outside the device.

• Solid-state drive (SSD)—Provides secondary storage for log files, for generating core files, and for rebooting the system if the CompactFlash card fails.

• Interface ports—The AUX, CONSOLE, and ETHERNET ports provide access to management devices. Each Routing Engine has one 10/100/1000-Mbps Ethernet port for connecting to a management network, and two asynchronous serial ports—one for connecting to a console and one for connecting to a modem or other auxiliary device.

• EEPROM—Stores the serial number of the Routing Engine.

• Reset button—Reboots the Routing Engine when pressed.

• Online/Offline button—Takes the Routing Engine online or offline when pressed.

• Extractor clips—Inserts and extracts the Routing Engine.

• Captive screws—Secures the Routing Engine in place.

Description	Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls
Software release	Junos OS Release 12.1X47-D15 and later
Cables and connectors	Slot for Routing Engine AUX–Connects the Routing Engine to a laptop, a modem, or another auxiliary device through a cable with an RJ-45 connector. CONSOLE–Connects the Routing Engine to a system console through a cable with an RJ-45 connector. ETHERNET–Connects the Routing Engine through an Ethernet connection to a management LAN (or any other device that plugs into an Ethernet connection) for out-of-band management.
Controls	RESET button–Reboots the Routing Engine when pressed.
Supported slots	Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 Note: The firewall host subsystem Routing Engine must be installed in the SCB in slot 0. A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations.
Power requirement	90 W
Weight	2.4 lb (1.1 kg)
Serial number location	The serial number label is located as shown in Figure 12. Figure 12: SRX5K-RE-1800X4 Serial Number Label

The Routing Engine maintains the routing tables, manages the routing protocols used on the device, controls the device interfaces, controls some chassis components, and provides the interfaces for system management and user access to the device.

Figure 13 shows the SRX5K-RE3-128G Routing Engine.

Figure 13: SRX5K-RE3-128G Routing Engine Front View

1 — Extractor clips	6 — ONLINE/OFFLINE button
2 — Auxiliary port (AUX)	7 — SSD LEDs—DISK1 and DISK2
3 — Console port (CONSOLE)	8 — USB ports—USB1 and USB2
4 — Management port (MGMT)	9 — RESET button
5 — Routing Engine status LEDs—ONLINE, OK/FAIL, and MASTER	10 — SSD card slot cover

Description	Routing Engine for SRX5400, SRX5600, and SRX5800 Firewalls, based on Intel’s Haswell-EP CPU with 6 cores, and 128GB of DDR4 memory. It provides increased control plane performance and scalability along with virtualization features in the SRX Series 5000 line of chassis.
Software release	Junos OS Release 19.3R1 and later
Cables and connectors	Slot for Routing Engine AUX–Connects the Routing Engine to a laptop, a modem, or another auxiliary device through a cable with an RJ-45 connector. CONSOLE–Connects the Routing Engine to a system console through a cable with an RJ-45 connector. MGMT–Connects the Routing Engine through an Ethernet connection to a management LAN (or any other device that plugs into an Ethernet connection) for out-of-band management.
Controls	RESET button–Reboots the Routing Engine when pressed.
Supported slots	Front panel slot in an SCB installed in: SRX5400: Bottom slot 0 SRX5600: Bottom slots 0 or 1 SRX5800: Center slots 0 or 1 Note: The firewall host subsystem Routing Engine must be installed in the SCB in slot 0. A Routing Engine installed in an SCB in slot 1 only enables dual control links in chassis cluster configurations. Note: In the SRX5600 or SRX5800 Firewalls chassis cluster configurations, dual control links functionality is not supported if you mix SRX5K-RE-1800X4 and SRX5K-RE3-128G Routing Engines. To support dual control links you have to install two SRX5K-RE3-128Gs.
Power requirement	110 W
Weight	2.69 lb (1.22 kg)
Serial number location	The serial number label is located as shown in Figure 14. Figure 14: SRX5K-RE3-128G Serial Number Label

• SRX5K-RE3-128G Routing Engine Components
• SRX5K-RE3-128G Routing Engine LEDs
• SRX5K-RE3-128G Routing Engine Boot Sequence