Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

SRX5400 Chassis

SRX5400 Firewall Chassis

The firewall chassis is a rigid sheet metal structure that houses all the other components (see Figure 1, Figure 2, and Figure 3). The chassis measures 8.71 in. (22.1 cm) high, 17.45 in. (44.3 cm) wide, and 24.5 in. (62.2 cm) deep (from the front to the rear of the chassis). The chassis installs in standard 800-mm (or larger) enclosed cabinets, 19-in. equipment racks, or telco open-frame racks. Up to five firewalls can be installed in one standard (48 U) rack if the rack can handle their combined weight, which can be greater than 1100 lb (500 kg). See SRX5400 Firewall Physical Specifications for physical specifications for the SRX5400 Firewall.

CAUTION:

Before removing or installing components of a firewall, attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap can result in damage to the firewall.

Warning:

The firewall must be connected to earth ground during normal operation.

Figure 1: Front View of a Fully Configured Firewall Chassis Front View of a Fully Configured Firewall Chassis
Figure 2: Rear View of an AC-Powered Firewall Chassis Rear View of an AC-Powered Firewall Chassis
Figure 3: Rear View of a Fully Configured DC-Powered Firewall Chassis Rear View of a Fully Configured DC-Powered Firewall Chassis

SRX5400 Firewall Physical Specifications

Table 1 summarizes the physical specifications for the firewall chassis.

Table 1: Physical Specifications

Description

Value

Chassis dimensions

8.7 in. (22.1 cm) high

17.45 in. (44.3 cm) wide

24.5 in. (62.2 cm) deep (from front-mounting bracket to chassis rear)

Total depth (including cable management system): 27.75 in. (70.5 cm)

Firewall weight

Chassis with midplane, fan tray, air filter, and cable management system: 52 lb (23.6 kg)

Maximum configuration: 128 lb (58.1 kg)

Routing Engine weight

SRX5K-RE-13-20: 2.4 lb (1.1 kg)

SRX5K-RE-1800X4: 2.4 lb (1.1 kg)

SCB weight

SRX5K-SCB: 9.6 lb (4.4 kg)

SRX5K-SCBE: 9.6 lb (4.4 kg)

SRX5K-SCB3: 10.14 lb (4.6 kg)

MPC weight (with two MICs)

13.1 lb (5.9 kg)

Craft interface weight

1.1 lb (0.5 kg)

Fan tray weight

4.2 lb (1.9 kg)

Air filter weight

1.0 lb (0.5 kg)

Cable management weight

0.3 lb (0.14 kg)

High-capacity DC power supply weight

6.2 lb (2.8 kg)

High-capacity AC power supply weight

6.6 lb (3.0 kg)

SRX5400 Firewall Midplane Description

The midplane is located toward the rear of the chassis and forms the rear of the card cage. MPCs, SPCs, and SCB install into the midplane from the front of the chassis, and the power supplies install into the midplane from the rear of the chassis. The cooling system components also connect to the midplane.

The midplane performs the following major functions:

  • Data path—Data packets are transferred across the midplane between the MPCs and SPCs through the fabric ASICs on the SCB.

  • Power distribution—The power supplies are connected to the midplane, which distributes power to all the firewall components.

  • Signal path—The midplane provides the signal path to the MPCs, SCB, SPCs, Routing Engine, and other system components for monitoring and control of the system.

The enhanced midplane supports Junos OS Release 15.1X49-D10. It provides greater per-slot fabric performance and signal integrity, along with error-free high speed data transfer, and it reduces cross-talk. The midplane supports link speeds up to 10 Gbps and is not field replaceable.

SRX5400 Firewall Craft Interface Overview

The craft interface shows you status and troubleshooting information at a glance and lets you perform many system control functions. It is hot-insertable and hot-removable. The craft interface is located on the front of the firewall above the upper fan tray.

Figure 4 shows the front panel of the craft interface and Table 2 describes the components on the front panel.

Figure 4: Front Panel of the Craft InterfaceFront Panel of the Craft Interface
Table 2: Front Panel of the Craft Interface

Component

Description

Reference

1

Routing Engine LEDs

See SRX5400 Firewall Craft Interface Host Subsystem LEDs

2

Fan LEDs

See SRX5400 Firewall Craft Interface Fan LEDs

3

PEM LEDs

See SRX5400 Firewall Craft Interface Power Supply LEDs

4

Minor alarm LED

See SRX5400 Firewall Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button

5

Major alarm LED

6

Alarm cutoff button

7

Alarm relay contacts

See SRX5400 Firewall Craft Interface Alarm Relay Contacts

8/9

SCB and MPC LEDs, and MPC online/offline buttons

The card LEDs are located along the bottom edge of the craft interface and are labeled 0 for the bottom slot reserved for the SCB and 0/1, 1, and 2 for the remaining slots.

See SRX5400 Firewall Craft Interface Card OK/Fail LEDs

See SRX5400 Firewall Craft Interface Online/Offline Buttons

Note:

The SCB must be installed in the firewall for the craft interface to obtain power.

SRX5400 Firewall Craft Interface Alarm LEDs and Alarm Cutoff/Lamp Test Button

Two large alarm LEDs are located at the upper right of the craft interface. The circular red LED lights to indicate a major alarm condition that can result in a system shutdown. The triangular yellow LED lights to indicate a less severe minor alarm condition that requires monitoring or maintenance. Both LEDs can be lit simultaneously. A condition that causes an LED to light also activates the corresponding alarm relay contact on the craft interface.

To deactivate the major and minor alarms, press the button labeled ACO/LT (for “alarm cutoff/lamp test”), which is located to the right of the alarm LEDs. Deactivating an alarm turns off both LEDs and deactivates the device attached to the corresponding alarm relay contact on the craft interface.

Table 3 describes the alarm LEDs and alarm cutoff button in more detail.

Table 3: Alarm LEDs and Alarm Cutoff/Lamp Test Button

Shape

Label

Color

State

Description

Major Alarm

Red

On steadily

Critical alarm LED—Indicates a critical condition that can cause the device to stop functioning. Possible causes include component removal, failure, or overheating.

Minor Alarm

Yellow

On steadily

Warning alarm LED—Indicates a serious but nonfatal error condition, such as a maintenance alert or a significant increase in component temperature.

ACO/LT

Alarm cutoff/lamp test button—Deactivates major and minor alarms. Causes all LEDs on the craft interface to light (for testing) when pressed and held.

SRX5400 Firewall Craft Interface Host Subsystem LEDs

The host subsystem has three LEDs, located on the upper left of the craft interface, that indicate its status. The LEDs labeled RE0 show the status of the Routing Engine and SCB in slot 0 . The LEDs labeled RE1 are disabled and have no function. Table 4 describes the functions of the host subsystem LEDs.

Table 4: Host Subsystem LEDs

Label

Color

State

Description

MASTER

Green

On steadily

Host is functioning as the primary.

ONLINE

Green

On steadily

Host is online and is functioning normally.

OFFLINE

Red

On steadily

Host is installed but the Routing Engine is offline.

Off

Host is not installed.

SRX5400 Firewall Craft Interface Power Supply LEDs

Each power supply has two LEDs on the craft interface that indicate its status. The LEDs, labeled 0 through 3, are located near the middle of the craft interface next to the PEM label. Table 5 describes the functions of the power supply LEDs on the craft interface.

Table 5: Power Supply LEDs on the Craft Interface

Label

Color

State

Description

PEM

Green

On steadily

Power supply is functioning normally.

Red

On steadily

Power supply has failed or power input has failed.

SRX5400 Firewall Craft Interface Card OK/Fail LEDs

Each slot in the card cage has a pair of LEDs on the craft interface that indicates the status of the card installed in it. The card LEDs are located along the bottom edge of the craft interface and are labeled 0 for the bottom slot reserved for the SCB and 0/1, 1, and 2 for the remaining slots.Table 6 describes the functions of the OK and Fail LEDs.

Table 6: Card OK/Fail LEDs

Label

Color

State

Description

OK

Green

On steadily

The card is functioning normally.

Blinking

The card is transitioning online or offline.

Off

The card is not online.

FAIL

Red

On steadily

The card has failed.

SRX5400 Firewall Craft Interface Fan LEDs

The fan tray LED are located near the middle of the craft interface. Table 7 describes the functions of the fan tray LEDs.

Table 7: Fan LEDs

Label

Color

State

Description

OK

Green

On steadily

Fan tray is functioning normally.

FAIL

Red

On steadily

Fan tray has failed.

SRX5400 Firewall Craft Interface Online/Offline Buttons

The craft interface has a row of Online/Offline buttons along its lower edge. Each button corresponds to one slot in the card cage. The Online/Offline buttons are only supported for slots containing MPC interface cards. You can install MPCs into slots:

  • SRX5400–Any slot except bottom slot 0

  • SRX5600–Any slot except bottom slots 0 or 1

  • SRX5800–Any slot except center slots 0 or 1

Note:

The Online/Offline buttons are not supported for removal and replacement of SPCs or SCB.

CAUTION:

While traffic is passing through the firewall, particularly if the device is configured as part of a high availability (HA) cluster, we strongly recommend that you do not push any of the Online/Offline buttons.

To take an MPC offline using the Online/Offline buttons:

  1. Press and hold the corresponding card’s Online/Offline button on slot 1 on the craft interface. The green OK/FAIL LED next to the button begins to blink. Hold until both the button’s LED and the MPC’s LED are off.

  2. Issue the CLI show chassis fpc command to check the status of installed MPCs. As shown in the sample output, the value Offline in the column labeled State indicates that the MPC in slot 1 is now offline:

    An MPC can also be taken offline via CLI command:

To bring an MPC back online using the Online/Offline buttons:

  1. Press and hold the corresponding card’s Online/Offline button on slot 1 on the craft interface. The green OK/FAIL LED next to the button and the MPC’s LED begins to blink. Hold until both the button’s LED and the MPC’s LED are green and steady.

  2. Issue the CLI show chassis fpc command to check the status of installed MPCs. As shown in the sample output, the value Online in the column labeled State indicates that the MPC in slot 1 is functioning normally:

    Verify if the MPC is offline:

    The command output indicates the MPC is offline.

    Bring the MPC online for the first time by using the following CLI command:

    Verify that the MPC is online:

    The command output indicates the MPC is online.

    Confirm that the MPC in the chassis is online:

SRX5400 Firewall Craft Interface Alarm Relay Contacts

The craft interface has two alarm relay contacts for connecting the device to external alarm devices (see Figure 5). Whenever a system condition triggers either the major or minor alarm on the craft interface, the alarm relay contacts are also activated. The alarm relay contacts are located on the upper right of the craft interface.

Figure 5: Alarm Relay ContactsAlarm Relay Contacts

The alarm relay contacts consist of two sets of connectors, one set for each of the two alarms (major and minor). For each alarm color there are three connectors. Table 8 describes the functions of the connectors.

Table 8: Alarm Relay Contact Functions

Contact Label

Contact Name

Function

NC

Normally Closed

Connects the alarm relay to an external alarm-reporting device that activates when the circuit between C and NC is closed.

C

Current In

Connects the alarm relay to the current source for the external alarm-reporting device.

NO

Normally Open

Connects the alarm relay to an external alarm-reporting device that activates when the circuit between C and NC is open.

Table 9 shows the electrical specifications for the alarm relay contacts.

Table 9: Alarm Relay Contact Electrical Specifications

Current Type

AC

DC

Maximum Voltage

250

30

Maximum Current

8 A

Figure 6 shows an example wiring diagram for a simple alarm reporting device. In this case the device is a 12-volt light bulb that illuminates when the device encounters a condition that activates the major alarm LED and relay contacts. The alarm relay contacts can also be used to activate other devices such as bells or buzzers.

Figure 6: Example Alarm Reporting DeviceExample Alarm Reporting Device