SRX5600 Line Cards and Modules
SRX5400, SRX5600, and SRX5800 Services Gateway Card Overview
The cards described in this guide let you upgrade and customize your SRX5400, SRX5600, or SRX5800 Services Gateway to suit the needs of your network. The following types of cards are available for the SRX5400, SRX5600, and SRX5800 Services Gateways:
I/O cards (IOCs) provide additional physical network connections to the services gateway. Their primary function is to deliver data packets arriving on the physical ports to the Services Processing Cards (SPCs) and to forward data packets out the physical ports after services processing.
Flex IOCs have two slots for port modules that add additional physical network connections to the services gateway. Like IOCs, their primary function is to deliver data packets arriving on the physical ports to the SPCs and to forward data packets out the physical ports after services processing.
Modular Port Concentrators (MPCs) have slots on the front panel that accept smaller cards called Modular Interface Cards (MICs). Each MIC has one or more physical interfaces on it. An MPC with MICs installed functions in the same way as a regular I/O card (IOC), but allows greater flexibility in adding different types of Ethernet ports to your services gateway. MPCs and MICs are similar in form and function to Flex IOCs and port modules. However, the two use different form-factors, so you cannot install port modules in an MPC, nor can you install MICs in a Flex IOC.
Services Processing Cards (SPCs) provide the processing power to run integrated services such as firewall, IPsec and IDP. All traffic traversing the services gateway is passed to an SPC to have services processing applied to it.
Switch Control Boards (SCBs) power on and power off IOCs and SPCs; control clocking and system resets; and control booting, monitor, and system functions. Each SCB has a slot in the front panel for a Routing Engine.
Although the following modules are not cards in the sense of having a form-factor that fits the card cage of the SRX5400, SRX5600, and SRX5800 Services Gateway, this guide also addresses the following modules that fit into certain SRX5400, SRX5600, and SRX5800 Services Gateway cards:
Routing Engines fit into slots in SCBs and maintain the routing tables, manage the routing protocols used on the device, control the device interfaces and some chassis components, and provide the interface for system management and user access to the device.
Port modules fit into slots in Flex IOCs and add additional physical network interface ports to the services gateway.
Modular Interface Cards (MICs) fit into slots in MPCs and add additional physical network interface ports to the services gateway. MPCs and MICs are similar in form and function to Flex IOCs and port modules. However, the two use different form-factors, so you cannot install port modules in an MPC, nor can you install MICs in a Flex IOC.
SRX5600 Services Gateway Card Terminology
Regardless of orientation, this information uses the same terms for all four edges of the card (see Figure 1):
Faceplate—Edge of the card that has connectors to which you connect cables or sockets in which you insert SFP or XFP transceivers.
Connector edge—Edge opposite the faceplate; this edge has the connectors that attach to the midplane.
Top edge—Edge at the top of the card when it is vertical.
Bottom edge—Edge at the bottom of the card when it is vertical.
This terminology applies to SPCs, IOCs, MPCs, and SCBs in addition to Routing Engines and port modules.

Cards Supported on SRX5400, SRX5600, and SRX5800 Services Gateways
Table 1 describes the cards and other modules supported on the SRX5400, SRX5600, and SRX5800 Services Gateways.
Table 1: Supported Cards for SRX5400, SRX5600, and SRX5800 Services Gateways
Card Name and Model Number | Earliest Supported Junos OS Release | Last Supported Junos OS Release | |
---|---|---|---|
SRX5400 | SRX5600 and SRX5800 | SRX5400, SRX5600, and SRX5800 | |
SPCs | |||
Not supported | 9.2 | 15.1X49 | |
12.1X46-D10 | 12.1X44-D10 | ||
18.2R1-S1 | 18.2R1-S1 | ||
Interface Cards | |||
Not supported | 9.2 | 15.1X49 | |
Not supported | 9.2 | 15.1X49 | |
Not supported | 10.2 | 15.1X49 | |
12.1X46-D10 | 12.1X46-D10 | ||
15.1X49-D10 | 15.1X49-D10 | ||
15.1X49-D10 | 15.1X49-D10 | ||
19.3R1 | 19.3R1 | ||
19.3R1 | 19.3R1 | ||
SCBs | |||
12.1X46-D10 | 9.2 | 15.1X49 | |
12.1X47-D15 | 12.1X47-D15 | ||
15.1X49-D10 | 15.1X49-D10 | ||
Not supported | 19.3R1 | ||
Other modules | |||
Not supported | 10.2 | ||
Not supported | 10.2 | ||
Not supported | 10.2 | ||
12.1X46-D10 | 12.1X46-D10 | ||
12.1X46-D10 | 12.1X46-D10 | ||
12.1X46-D10 | 12.1X46-D10 | ||
12.1X47-D10 | 12.1X47-D10 | ||
12.1X46-D10 | 9.2 | 12.3X48 | |
12.1X47-D15 | 12.1X47-D15 | ||
19.3R1 | 19.3R1 |
Figure 2 is an interoperability matrix that describes the compatibility between various interface cards for the SRX5400, SRX5600, and SRX5800 Services Gateways.

SRX5600 Services Gateway Card Cage and Slots
The card cage is the set of eight horizontal slots in the front of the chassis where you install cards. The slots are numbered from bottom to top. Table 2 describes the types of cards that you can install into each slot.
Table 2: SRX5600 Services Gateway Card Cage Slots
Card Cage Slot | Eligible Cards | ||||
---|---|---|---|---|---|
SPC | MPC | IOC | Flex IOC | SCB | |
5 | X | X | X | X | |
4 | X | X | X | X | |
3 | X | X | X | X | |
2 | X | X | X | X | |
1 | X | X | X | X | |
0 | X | X | X | X | |
1 | X | ||||
0 | X |
SRX5600 Services Gateway SPC Description
The Services Processing Card (SPC) has Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 3). All traffic traversing the services gateway is passed to an SPU to have services processing applied to it. Traffic is intelligently distributed by interface cards to SPUs for services processing.
The services gateway must have one SPC installed.
You can install an SPC in any of the slots that are not reserved for Switch Control Board (SCB). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the device.
Figure 3 shows a typical SPC supported on the services gateway.

For detailed information about SPCs supported by the services
gateway, see the SRX5400, SRX5600, and SRX5800 Services Gateway Card Reference
Services Processing Card SRX5K-SPC-2-10-40 Specifications
The SRX5K-SPC-2-10-40 Services Processing Card (SPC) contains two Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 4). All traffic traversing the services gateway is passed to an SPU to have services processing applied to it. Traffic is intelligently distributed by I/O cards (IOCs) to SPUs for services processing.
The services gateway must have at least one SPC installed. You can install additional SPCs to increase services processing capacity.
You can install SPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the device.
Figure 4 shows a typical SPC supported on the services gateway.

Each SPC consists of the following components:
SPC cover, which functions as a ground plane and a stiffener.
Two small form-factor pluggable (SFP) chassis cluster control ports for connecting multiple devices into a redundant chassis cluster. See Chassis Cluster User Guide for SRX Series Devices for more information about connecting and configuring redundant chassis clusters.
Caution If you face a problem running a Juniper Networks device that uses a third-party optic or cable, the Juniper Networks Technical Assistance Center (JTAC) can help you diagnose the source of the problem. Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.
Fabric interfaces.
Two Gigabit Ethernet interfaces that allow control information, route information, and statistics to be sent between the Routing Engine and the CPU on the SPCs.
Two interfaces from the SCBs that enable the boards to be powered on and controlled.
Physical SPC connectors.
Midplane connectors and power circuitry.
Processor subsystem, which includes a 1.2-GHz CPU, system controller, and 1 GB of SDRAM.
LEDs on the faceplate that indicate the SPC and SPU status.
Description | SPC with two SPUs |
Software release |
|
Cables and connectors |
Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) |
Controls | None |
Supported Slots |
|
Power Requirement | Maximum 351 W |
Weight | Approximately 13 lb (5.9 kg) |
LEDs |
Note:
The Sometimes even after the control link is removed from the SPC,
the
|
Serial Number Location | The serial number label is located as shown in Figure 5. ![]() |
Services Processing Card SRX5K-SPC-4-15-320 Specifications
The SRX5K-SPC-4-15-320 Services Processing Card (SPC) contains four Services Processing Units (SPUs), which provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 6). All traffic traversing the services gateway is passed to an SPU to have services processing applied to it. Traffic is intelligently distributed by I/O cards (IOCs) to SPUs for services processing.
The services gateway must have at least one SPC installed. You can install additional SPCs to increase services processing capacity.
You can install SPCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the device.
If your services gateway contains a mix of SRX5K-SPC-4-15-320 SPCs and earlier SRX5K-SPC-2-10-40 SPCs, an SRX5K-SPC-4-15-320 SPC must occupy the lowest-numbered slot of any SPC in the chassis. This configuration ensures that the center point (CP) function is performed by the faster and higher-performance SPC type.

Each SPC consists of the following components:
SPC cover, which functions as a ground plane and a stiffener.
Two small form-factor pluggable (SFP) chassis cluster control ports for connecting multiple devices into a redundant chassis cluster. See Chassis Cluster User Guide for SRX Series Devices for more information about connecting and configuring redundant chassis clusters.
Caution If you face a problem running a Juniper Networks device that uses a third-party optic or cable, the Juniper Networks Technical Assistance Center (JTAC) can help you diagnose the source of the problem. Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.
Fabric interfaces.
Two Gigabit Ethernet interfaces that allow control information, route information, and statistics to be sent between the Routing Engine and the CPU on the SPCs.
Two interfaces from the SCBs that enable the boards to be powered on and controlled.
Physical SPC connectors.
Midplane connectors and power circuitry.
Processor subsystem, which includes a 1.2-GHz CPU, system controller, and 1 GB of SDRAM.
LEDs on the faceplate that indicate the SPC and SPU status.
Description | SPC with four SPUs |
Software release |
|
Cables and connectors |
Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) |
Controls | None |
Supported Slots |
|
Power Requirement | 475 W typical, 585 W maximum Note:
|
Weight | Approximately 18 lb (8.3 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 7. ![]() |
Services Processing Card SRX5K-SPC3 Specifications
The SRX5K-SPC3 Services Processing Card (SPC) contains two Services Processing Units (SPUs) with 128GB of memory per SPU, that provide the processing power to run integrated services such as firewall, IPsec, and IDP (see Figure 8). All traffic traversing the services gateway is passed to an SPU to have services processing applied to it. Traffic is intelligently distributed by I/O cards (IOCs) to SPUs for services processing.
The services gateway must have at least one SPC installed. You can install additional SPCs to increase services processing capacity.
SPCs cannot be installed in slots that are reserved for Switch
Control Boards (SCBs) or in slot 11
on the SRX5800.
If a slot is not occupied by a card, you must install a blank panel
to shield the empty slot and to allow cooling air to circulate properly
through the device.
Your services gateway cannot have a mix of SRX5K-SPC-2-10-40 SPCs and SRX5K-SPC3 SPCs. Starting with Junos OS release 18.2R2 and then 18.4R1 but not 18.3R1, you can have a mix of SRX5K-SPC-4-15-320 SPCs and SRX5K-SPC3 SPCs.

Each SPC consists of the following components:
SPC cover, which functions as a ground plane and a stiffener.
Two 10–Gigabit Ethernet small form-factor pluggable plus (SFP+) chassis cluster control ports for connecting multiple devices into a redundant chassis cluster. See the Chassis Cluster User Guide for SRX Series Devices for more information about connecting and configuring redundant chassis clusters.
Caution If you face a problem running a Juniper Networks device that uses a third-party optic or cable, the Juniper Networks Technical Assistance Center (JTAC) can help you diagnose the source of the problem. Your JTAC engineer might recommend that you check the third-party optic or cable and potentially replace it with an equivalent Juniper Networks optic or cable that is qualified for the device.
Fabric interfaces
One Gigabit Ethernet switch that provides control connectivity to the Routing Engine.
Two interfaces from the SCBs that enable the boards to be powered on and controlled.
Physical SPC connectors
Midplane connectors and power circuitry.
Processor subsystem, which includes a 2.3-GHz CPU, system controller, and two 128 GB solid state-drives (SSDs).
LEDs on the faceplate that indicate the SPC and SPU status.
Description | SPC with two SPUs of 256 GB memory. |
Software release |
|
Cables and connectors |
Supported transceivers:
|
Controls | None |
Supported Slots |
|
Power Requirement | 650 W maximum Note:
|
Weight | Approximately 18 lb (8.3 kg) |
LEDs |
|
SRX5600 Services Gateway Interface Card Description
Interface cards are cards that support physical interfaces that you use to connect the services gateway to your data network. Three different types of interface cards are available:
I/O Cards (IOCs) have fixed interface ports on the front panel of the card.
Flex I/O Cards (Flex IOCs) have slots on the front panel that accept smaller cards called port modules. Each port module has two or more physical interfaces on it. A Flex IOC with installed port modules functions in the same way as a regular IOC, but allows greater flexibility in adding different types of Ethernet ports to your services gateway.
Modular Port Concentrators (MPCs) have slots on the front panel that accept smaller cards called Modular Interface Cards (MICs). Each MIC has one or more physical interface on it. An MPC with MICs installed functions in the same way as a regular I/O card (IOC), but allows greater flexibility in adding different types of Ethernet ports to your services gateway. MPCs and MICs are similar in form and function to Flex IOCs and port modules. However, the two use different form-factors, so you cannot install port modules in an MPC, nor can you install MICs in a Flex IOC.
For all interface card types, the card assembly combines packet forwarding and Ethernet interfaces on a single board. The interface cards interface with the power supplies and Switch Control Boards (SCBs).
You can install interface cards in any of the slots that are not reserved for SCBs. If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Figure 9 shows typical IOCs supported on the services gateway.

Figure 10 shows a Flex IOC with two typical port modules installed.

Figure 11 shows an MPC.

For detailed information about the interface cards, port modules,
and MICs supported by the services gateway, see the SRX5400, SRX5600, and SRX5800 Services
Gateway Card Reference
Modular Port Concentrator (SRX5K-MPC) Specifications
The SRX5K-MPC (see Figure 12) is an interface card with two slots that accept MICs. These MICs add Ethernet ports to your services gateway. An MPC with MICs installed functions in the same way as a regular IOC but allows you to add different types of Ethernet ports to your services gateway. MPCs and MICs are similar in form and function to Flex IOCs and port modules. However, the two use different form-factors, so you cannot install port modules in an MPC, nor can you install MICs in a Flex IOC.
You must install at least one interface card in the services gateway. The interface card can be of any of the available IOC, Flex IOC, or MPC types. You can add just one MIC; or you can add two MICs of the same or different types.
You can install MPCs in any of the slots that are not reserved for Switch Control Boards (SCBs).
If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway. If a slot in an MPC is not occupied by a MIC, you must install a blank panel in the empty MIC slot to shield it and to allow cooling air to circulate properly through the MPC.

When installing an SRX5K-MPC in an SRX5600 or SRX5800 Services Gateway:
If the session-distribution-mode has not been explicitly configured using the CLI command:
user@host set security forwarding-process application-services session-distribution-mode
The SRX5K-MPC defaults to hash-based mode automatically even if existing SRX5K-MPC or non-MPCs are installed. You cannot set the session-distribution-mode to normal.
If the session-distribution-mode has been explicitly configured to normal, and the MIC is installed in the device, then the SRX5K-MPC will remain offline, and the services gateway generates a major alarm and logs the event for troubleshooting. You must explicitly configure the session-distribution-mode using the CLI command:
user@host set security forwarding-process application-services session-distribution-mode hash-based
When installing an SRX5K-MPC in an SRX5400 Services Gateway, the session-distribution-mode will only function when hash-based mode is configured or set as the default. The normal mode is not supported.
A 9% drop is observed for PPS (throughput) when moving from session mode to hash mode (for SRX5K-MPC or non-MPCs), whereas no drop in performance is observed on CPS (connection per second) and session capacity numbers.
For more information about the CLI command, see the Junos OS documentation at www.juniper.net/documentation/.
Description |
|
Software release | Junos OS Release 12.1x46-D10 |
Cables and connectors | Slots for two MICs |
Controls | One ejector knob each for MIC slots |
Supported slots |
|
Power requirement | Maximum of 570 W for the MPC with two MICs, including applicable transceivers. Note:
|
Weight | Approximately 10 lb (4.5 kg) without MICs |
LEDs |
|
Serial number location | The serial number label is yellow and is located on the opposite side of the card. |
SRX5K-MPC3-40G10G Specifications
The SRX5K-MPC3-40G10G (IOC3) is an interface card that provides 10 Gigabit Ethernet and 40 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 13.
These cards do not support plug-in Modular Interface Cards (MICs).
All ports on the interface card have dual-color LEDs for reporting link status.
The interface card also supports hot-pluggable optical modules.

If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Description |
|
Software release | Junos OS Release 15.1X49-D10 and later |
Supported Slots |
|
Cables and connectors | Sockets for 40-Gbps and 10-Gbps SFP+ transceivers See Hardware Compatibility Tool for the transceivers supported. |
Power requirements | Typical: 9.68 A @ 48 V (460 W) At different temperatures:
|
Weight | 21 lb (9.52 kg) |
Hardware features |
|
Software features |
Note: At any one time you can have only one of the following PIC combinations powered on:
If you configure any of the following invalid PIC combinations, the chassis will set PIC0 & PIC1 combination online.
|
LEDs | OK/FAIL LED, one bicolor:
10-Gigabit Ethernet LINK LED, one green per port:
40-Gigabit Ethernet LINK LED, one bicolor per port:
|
Serial Number Location | The serial number label is located as shown in Figure 14. ![]() |
SRX5K-MPC3-100G10G Specifications
The SRX5K-MPC3-100G10G (IOC3) is an interface card that provides 100 Gigabit Ethernet and 10 Gigabit Ethernet interfaces, with a Packet Forwarding Engine that provides a 240 Gbps line rate. This interface card is supported on SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 15.
These cards do not support plug-in Modular Interface Cards (MICs).
All ports on the interface card have dual-color LEDs for reporting link status.
The interface card also supports hot-pluggable optical modules.

If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Description |
|
Software release | Junos OS Release 15.1X49-D10 and later |
Supported Slots |
|
Cables and connectors | Sockets for 100-Gbps and 10-Gbps SFP+ transceivers See Hardware Compatibility Tool for the transceivers supported. |
Power requirements |
At different temperatures:
|
Weight | 21 lb (9.52 kg) |
Hardware features |
The ports are labeled as:
|
Software features |
|
LEDs | OK/FAIL LED, one bicolor:
10-Gigabit Ethernet LINK LED, one bicolor per port:
100-Gigabit Ethernet LINK LED, one bicolor per port:
|
Serial Number Location | The serial number label is located as shown in Figure 16. ![]() |
MIC with 20x1GE SFP Interfaces (SRX-MIC-20GE-SFP)
You use Modular Interface Cards (MICs) and Modular Port Concentrators (MPCs) to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network.
The SRX-MIC-20GE-SFP MIC (see Figure 17) can be installed in the SRX-5K MPC to add twenty 1-Gigabit Ethernet small form-factor pluggable (SFP) Ethernet ports.

Description |
|
Software release | Junos OS Release 12.1X47-D10 |
Cables and connectors | Sockets for 20 SFP Gigabit Ethernet transceivers. Supported SFP transceivers: 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) |
Weight | Approximately 1.2 lb (0.54 kg) |
LEDs |
|
Port and Interface Numbering | Each MPC accepts up to two MICs. SRX-MIC-20GE-SFP is a 20-port Gigabit Ethernet MIC with SFP. Each port on a MIC corresponds to a unique interface name in the CLI. In the syntax of an interface name, a hyphen (-) separates the media type from the MPC number (represented as an FPC in the CLI). The MPC slot number corresponds to the first number in the interface. The second number in the interface corresponds to the logical PIC number. The last number in the interface matches the port number on the MIC. Slashes (/) separate the MPC number from the logical PIC number and port number: type-fpc/pic/port
Figure 18 shows the SRX-MIC-20GE-SFP MIC installed in slot ![]() The SRX-MIC-20GE-SFP MIC contains two logical PICs, numbered PIC 0 through PIC 1 in the CLI. Each logical PIC
contains 10 ports numbered The sample output of the show chassis fpc pic-status command output displays two 20-port Gigabit Ethernet MICs with SFP — inserted into the slots of an MPC in slot 2. The logical PICs of the two MICs— 10x 1GE(LAN) SFP — are shown as PIC 0, PIC 1, PIC 2, and PIC 3. user@host> show chassis hardware node1: -------------------------------------------------------------------------- Slot 1 Online SRX5k SPC II PIC 0 Online SPU Cp PIC 1 Online SPU Flow PIC 2 Online SPU Flow PIC 3 Online SPU Flow Slot 2 Online SRX5k IOC II PIC 0 Online 10x 1GE(LAN) SFP PIC 1 Online 10x 1GE(LAN) SFP PIC 2 Online 10x 1GE(LAN) SFP PIC 3 Online 10x 1GE(LAN) SFP {primary:node1} The show interfaces terse command output displays the Gigabit Ethernet interfaces that correspond to all the ports located on the two MICs. user@host> show interfaces terse
|
Serial number location | The serial number label is yellow and is located as shown in Figure 19. ![]() Note: The serial number for the mezzanine card is shown only for reference and is never used for any purpose. |
MIC with 10x10GE SFP+ Interfaces (SRX-MIC-10XG-SFPP)
You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-10XG-SFPP (see Figure 20) can be installed in an MPC to add ten 10-Gigabit Ethernet SFP+ ports.

Description |
|
Software release | Junos OS Release 12.1X46-D10 |
Cables and connectors | Sockets for ten 10-Gbps SFP+ transceivers See Hardware Compatibility Tool for the transceivers supported. |
Supported slots | Either slot in SRX5K-MPC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Port and Interface Numbering | Each port on a MIC corresponds to a unique interface name in the CLI. In the syntax of an interface name, a hyphen (-) separates the media type from the MPC number (represented as an FPC in the CLI). The MPC slot number corresponds to the first number in the interface. The second number in the interface corresponds to the logical PIC number. The last number in the interface matches the port number on the MIC. Slashes (/) separate the MPC number from the logical PIC number and port number: type-fpc/pic/port
Figure 21 shows the port and interface numbering of an SRX-MIC-10XG-SFPP
MIC when it is installed in slot ![]() The SRX-MIC-10XG-SFPP MIC contains one logical PIC, numbered PIC 0 in the CLI when inserted in the first slot of the MPC
or PIC 2 when inserted in the second slot of the MPC. Each
logical PIC contains 10 ports numbered The sample output of the show chassis fpc pic-status command displays two 10-port 10-Gigabit Ethernet MICs with SFP+ — inserted into the slots of an MPC in slot 2. The logical PICs of the two MICs— 10x 10GE SFP+ — are shown as PIC 0 and PIC 2. user@host> show chassis fpc pic-status
The show interfaces terse command output displays the 10–Gigabit Ethernet interfaces that correspond to the 10 ports located on each MIC. user@host> show interfaces terse
|
Serial number location | The serial number label is yellow and located as shown in Figure 22. ![]() |
MIC with 1x100GE CFP Interface (SRX-MIC-1X100G-CFP)
You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-1X100G-CFP (see Figure 23) can be installed in an MPC to add one 100-Gigabit Ethernet CFP port.

Description |
|
Software release | Junos OS Release 12.1X46-D10 |
Cables and connectors | One socket for a 100-Gigabit CFP transceiver. Supported CFP transceivers:
|
Supported slots | Either slot in SRX5K-MPC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Serial number location | The serial number label is yellow and located as shown in Figure 24. ![]() |
MIC with 2x40GE QSFP+ Interfaces (SRX-MIC-2X40G-QSFP)
You use MICs and MPCs to add different combinations of Ethernet interfaces to your services gateway to suit the specific needs of your network. The SRX-MIC-2X40G-QSFP (see Figure 25) can be installed in an MPC to add two 40-Gigabit quad small form-factor pluggable (QSFP+) Ethernet ports.

Description |
|
Software release | Junos OS Release 12.1X46-D10 |
Cables and connectors | Sockets for two QSFP+ 40-Gigabit Ethernet fiber-optic transceivers. Supported QSFP+ transceiver: 40GBASE-SR4 (model number SRX-QSFP-40G-SR4) 40GBASE-LR4 (model number SRX-QSFP-40G-LR4) |
Supported slots | Either slot in SRX5K-MPC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Serial number location | The serial number label is yellow and typically located as shown in Figure 26. ![]() |
SRX5K-IOC4-10G Specifications
SRX5K-IOC4-10G is a fixed-configuration interface card with a Packet Forwarding Engine that provides 400-Gbps line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600 and SRX5800 Services Gateways. See Figure 27.
SRX5K-IOC4-10G cards do not support plug-in Modular Interface Cards (MICs).

If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Description |
|
Software release | Junos OS Release 19.3R1 and later |
Supported slots |
|
Cables and connectors | See Hardware Compatibility Tool for the transceivers supported. |
Power requirements |
At different temperatures:
|
Weight | 17 lb (7.7 kg) |
Hardware features |
|
Software features |
|
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 28. ![]() |
SRX5K-IOC4-MRAT Specifications
SRX5K-IOC4-MRAT is a fixed-configuration interface card with a Packet Forwarding Engine that provides up to 480-Gbps (240-Gbps per PIC slot) line rate. This interface card provides scalability in bandwidth and services to the SRX5400, SRX5600, and SRX5800 Services Gateways. See Figure 29.
SRX5K-IOC4-MRAT cards do not support plug-in Modular Interface Cards (MICs).

If a slot in the SRX5400, SRX5600, or SRX5800 Services Gateway card cage is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.
Description |
|
Software release | Junos OS Release 19.3R1 and later |
Supported Slots |
|
Cables and connectors | See Hardware Compatibility Tool for the transceivers supported. |
Power requirements | At different temperatures:
|
Weight | 15.7 lb (7.12 kg) |
Hardware features |
|
Software features |
|
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 30. ![]() |
I/O Card SRX5K-40GE-SFP Specifications
The SRX5K-40GE-SFP I/O card (IOC) is optimized for Ethernet density and supports 40 Gigabit Ethernet ports (see Figure 31). The IOC assembly combines packet forwarding and Ethernet interfaces on a single board, with four 10-Gbps Packet Forwarding Engines. Each Packet Forwarding Engine consists of one I-chip for Layer 3 processing and one Layer 2 network processor. The IOCs interface with the power supplies and Switch Control Boards (SCBs).
You must install at least one IOC in the services gateway. The IOC can be of any of the available IOC or Flex IOC types.
You can install IOCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.

Description |
|
Software release |
|
Cables and connectors | 40 Gigabit Ethernet SFP ports Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) |
Controls | None |
Supported Slots |
|
Power Requirement | 312 W typical, 365 W maximum |
Weight | Approximately 13 lb (5.9 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 32. ![]() |
I/O Card SRX5K-4XGE-XFP Specifications
The SRX5K-4XGE-XFP I/O card (IOC) supports four 10-Gigabit Ethernet ports (see Figure 33). The IOC assembly combines packet forwarding and Ethernet interfaces on a single board, with four 10-Gbps Packet Forwarding Engines. Each Packet Forwarding Engine consists of one I-chip for Layer 3 processing and one Layer 2 network processor. The IOCs interface with the power supplies and Switch Control Boards (SCBs).
You must install at least one IOC in the services gateway. The IOC can be of any of the available IOC or Flex IOC types.
You can install IOCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.

Description |
|
Software release |
|
Cables and connectors | Four 10-Gbps XFP ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET 10GBASE-SR (model numbers SRX-XFP-10GE-SR and SRX-XFP-10GE-SR-ET ) |
Controls | None |
Supported Slots |
|
Power Requirement | 312 W typical, 365 W maximum |
Weight | Approximately 13 lb (5.9 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 34. ![]() |
Flex I/O Card (SRX5K-FPC-IOC) Specifications
The SRX5K-FPC-IOC Flex I/O card (Flex IOC) (Figure 35) is an IOC with two slots that accept port modules that add Ethernet ports to your services gateway. A Flex IOC with installed port modules functions in the same way as a regular IOC, but allows greater flexibility in adding different types of Ethernet ports to your services gateway.
Each Flex IOC has a processor subsystem, which includes a 1.2-GHz CPU, a system controller, 1 GB SDRAM, and two Packet Forwarding Engines with a maximum throughput of 10 Gbps each.
You must install at least one IOC in the services gateway. The IOC can be of any of the available IOC or Flex IOC types.
You can install Flex IOCs in any of the slots that are not reserved for Switch Control Boards (SCBs). If a slot is not occupied by a card, you must install a blank panel to shield the empty slot and to allow cooling air to circulate properly through the services gateway.

Description |
|
Software release |
|
Cables and connectors | Slots for two port modules |
Controls | None |
Supported Slots |
|
Power Requirement | 312 W typical, 365 W maximum (includes port modules) |
Weight | Approximately 10 lb (4.5 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 36. ![]() |
Flex I/O Card Port Module SRX-IOC-16GE-SFP Specifications
You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network. The SRX-IOC-16GE-SFP port module (Figure 37) installs into a Flex IOC to add sixteen 10/100/1000 Ethernet SFP ports.

Description |
|
Software release |
|
Cables and connectors | 16 Gigabit Ethernet SFP ports Supported SFP transceivers: 1000BASE-LH (model numbers SRX-SFP-1GE-LH, SRX-SFP-1GE-LH-ET) 1000BASE-LX (model numbers SRX-SFP-1GE-LX, SRX-SFP-1GE-LX-ET) 1000BASE-SX (model numbers SRX-SFP-1GE-SX, SRX-SFP-1GE-SX-ET) 1000BASE-T (model numbers SRX-SFP-1GE-T, SRX-SFP-1GE-T-ET) |
Controls |
|
Supported Slots | Either slot in SRX5K-FPC-IOC Flex IOC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 38. ![]() |
Flex I/O Card Port Module SRX-IOC-16GE-TX Specifications
You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network. The SRX-IOC-16GE-TX port module (Figure 39) installs into a Flex IOC to add sixteen 10/100/1000 Ethernet RJ-45 copper ports.

Description |
|
Software release |
|
Cables and connectors | Sixteen RJ-45 1-Gbps ports |
Controls |
|
Supported Slots | Either slot in SRX5K-FPC-IOC Flex IOC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 40. ![]() |
Flex I/O Card Port Module SRX-IOC-4XGE-XFP Specifications
You use port modules and Flex I/O Cards (Flex IOCs) to add different combinations of small form-factor pluggable transceiver (SFP), 10-gigabit SFP transceiver (XFP), and copper ports to your services gateway to suit the specific needs of your network. The SRX-IOC-4XGE-XFP port module (Figure 41) installs into a Flex IOC to add four 10-Gigabit Ethernet XFP ports.

Description |
|
Software release |
|
Cables and connectors | 4 XFP Ethernet ports Supported XFP transceivers: 10GBASE-ER (model numbers SRX-XFP-10GE-ER and SRX-XFP-10GE-ER-ET ) 10GBASE-LR (model numbers SRX-XFP-10GE-LR and SRX-XFP-10GE-LR-ET 10GBASE-SR (model numbers SRX-XFP-10GE-SR and SRX-XFP-10GE-SR-ET ) |
Controls |
|
Supported Slots | Either slot in SRX5K-FPC-IOC Flex IOC |
Weight | Approximately 1.6 lb (0.7 kg) |
LEDs |
|
Serial Number Location | The serial number label is located as shown in Figure 42. ![]() |