Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Maintaining the SRX5800 Line Cards and Modules

Maintaining Interface Cards and SPCs on the SRX5800 Services Gateway

Purpose

For optimum services gateway performance, verify the condition of the Services Processing Cards (SPCs) and interface cards (IOCs, Flex IOCs and MPCs). The services gateway can have up to 11 SPCs and interface cards. To maintain SPCs and interface cards, perform the following procedures regularly.

Action

On a regular basis:

  • Check the LEDs on the craft interface corresponding to the slot for each SPC and interface card. The green LED labeled OK lights steadily when a card is functioning normally.

  • Check the OK/FAIL LED on the faceplate of each SPC and interface card. If the card detects a failure, it sends an alarm message to the Routing Engine.

  • Issue the CLI show chassis fpc command to check the status of installed cards. As shown in the sample output, the value Online in the column labeled State indicates that the card is functioning normally:

    For more detailed output, add the detail option. The following example does not specify a slot number, which is optional:

  • Issue the CLI show chassis fpc pic-status command. The slots are numbered 0 through 5, bottom to top:

    For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

Replacing SRX5800 Services Gateway IOCs

To replace an IOC, perform the following procedures:

Removing an SRX5800 Services Gateway IOC

Before you begin to remove an IOC:

Ensure that you have the following available:

  • ESD grounding strap

  • Replacement IOC or IOC blank panel

  • Antistatic mat for the IOC

  • Rubber safety caps for the transceivers

  • Dust covers to cover the ports

An IOC weighs up to 13.1 lb (5.9 kg). Be prepared to accept its full weight.

To remove an IOC (see Figure 1):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Label the cables connected to each port on the IOC so that you can later reconnect the cables to the correct ports.
  3. Use one of the following methods to take the IOC offline:
    • Press and hold the corresponding IOC online button on the craft interface. The green OK LED next to the button begins to blink. Hold the button down until the LED goes off.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at https://www.juniper.net/documentation/.

  4. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  5. Physically turn off the power and remove the power cables from the chassis.
  6. Remove the cables from the IOC.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  7. Immediately cover each optical transceiver and the end of each fiber-optic cable with a rubber safety cap.
  8. Cover the ports on the IOC with dust covers if you remove the optical transceivers from the IOC.
  9. Arrange the disconnected cables in the cable manager to prevent the cables from developing stress points.
  10. Simultaneously turn both of the ejector handles counterclockwise to unseat the IOC.
  11. Grasp the handles and slide the IOC straight out of the card cage halfway.
  12. Place one hand around the front of the IOC and the other hand under it to support it. Slide the IOC completely out of the chassis, and place it on the antistatic mat or in the electrostatic bag.
    CAUTION:

    The weight of the IOC is concentrated in the back end. Be prepared to accept the full weight—up to 13.1 lb (5.9 kg)—as you slide the IOC out of the chassis.

    When the IOC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors. They cannot support its weight.

    Do not stack IOC on top of one another after removal. Place each one individually in an electrostatic bag or on its own antistatic mat on a flat, stable surface.

  13. If you are not reinstalling an IOC into the empy slot within a short time, install a blank IOC panel over the slot to maintain proper airflow in the card cage.
    CAUTION:

    After removing an IOC from the chassis, wait at least 30 seconds before reinserting it, removing an IOC from a different slot, or inserting an IOC into a different slot.

Figure 1: Removing an IOCRemoving an IOC

Installing an SRX5800 Services Gateway IOC

Before you begin to install an IOC:

Ensure that you have the following available:

  • ESD grounding strap

  • Antistatic mat for the IOC

  • Rubber safety caps for the transceivers

An IOC weighs up to 13.1 lb (5.9 kg). Be prepared to accept its full weight.

To install an IOC (see Figure 2):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  3. Physically turn off the power and remove the power cables from the chassis.
  4. Place the IOC on an antistatic mat or remove it from its electrostatic bag.
  5. Identify the slot on the services gateway where it will be installed.
  6. Verify that each transceiver is covered by a rubber safety cap. If it is not, cover the transceiver with a safety cap.
  7. Orient the IOC so that the faceplate faces you.
  8. Lift the IOC into place and carefully align the top and bottom edges of the IOC with the guides inside the card cage.
  9. Slide the IOC all the way into the card cage until you feel resistance.
  10. Grasp both ejector handles and rotate them clockwise simultaneously until the IOC is fully seated.
  11. Remove the rubber safety cap from each fiber-optic transceiver and cable.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

  12. Insert the cables into the cable connector ports on each IOC (see Figure 3).
  13. Arrange the cable in the cable manager to prevent it from dislodging or developing stress points. Secure the cable so that it is not supporting its own weight as it hangs to the floor. Place excess cable out of the way in a neatly coiled loop. Placing fasteners on the loop helps to maintain its shape.
    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  14. Connect the power cables to the chassis.
  15. Power on the services gateway.
  16. Use one of the following methods to bring the IOC online:
    • Press and hold the corresponding IOC online button on the craft interface until the green OK LED next to the button lights steadily, in about 5 seconds.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at https://www.juniper.net/documentation/.

      CAUTION:

      After the OK LED turns green, wait at least 30 seconds before removing the IOC again, removing an IOC from a different slot, or inserting an IOC in a different slot.

      You can also verify that the IOC is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands.

Figure 2: Installing an IOCInstalling an IOC
Figure 3: Attaching a Cable to an IOCAttaching a Cable to an IOC

Replacing SRX5800 Services Gateway Flex IOCs

To replace a Flex IOC, perform the following procedures:

Removing an SRX5800 Services Gateway Flex IOC

Before you begin to remove a Flex IOC:

Ensure that you have the following available:

  • ESD grounding strap

  • Replacement Flex IOC or Flex IOC blank panel

  • Antistatic mat for the Flex IOC

A Flex IOC weighs up to 13.1 lb (5.9 kg). Be prepared to accept the full weight of the card as you remove it.

To remove a Flex IOC (see Figure 4):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Use one of the following methods to take the Flex IOC offline:
    • Press and hold the corresponding online button on the craft interface. The green OK LED next to the button begins to blink. Hold the button down until the LED goes off.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

  3. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  4. Physically turn off the power and remove the power cables from the chassis.
  5. If you have not already done so, remove the port modules installed in the Flex IOC. See Removing an SRX5800 Services Gateway Port Module.
  6. Simultaneously turn both of the ejector handles counterclockwise to unseat the Flex IOC.
  7. Grasp the handles and slide the Flex IOC straight out of the card cage halfway.
  8. Place one hand around the front of the Flex IOC and the other hand under it to support it. Slide the Flex IOC completely out of the chassis, and place it on the antistatic mat or in the electrostatic bag.
    CAUTION:

    The weight of the Flex IOC is concentrated in the back end. Be prepared to accept the full weight—up to 13 lb (5.9 kg)—as you slide the Flex IOC out of the chassis.

    When the Flex IOC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors. They cannot support its weight.

    Do not stack Flex IOCs on top of one another after removal. Place each one individually in an electrostatic bag or on its own antistatic mat on a flat, stable surface.

  9. If you are not reinstalling a replacement card into the empty slot within a short time, install a blank panel over the slot to maintain proper airflow in the card cage.
    CAUTION:

    After removing an IOC from the chassis, wait at least 30 seconds before reinserting it, removing an IOC from a different slot, or inserting an IOC into a different slot.

Figure 4: Removing a Flex IOCRemoving a Flex IOC

Installing an SRX5800 Services Gateway Flex IOC

Before you begin to install a Flex IOC:

Ensure that you have the following available:

  • ESD grounding strap

  • Antistatic mat for the Flex IOC

Note:

Your services gateway must be running Junos version 9.5R1 or later in order to recognize Flex IOCs and port modules.

To install a Flex IOC (see Figure 5):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  3. Physically turn off the power and remove the power cables from the chassis.
  4. Place the Flex IOC on an antistatic mat or remove it from its electrostatic bag.
  5. Identify the slot on the services gateway where you will install the Flex IOC.
  6. If you have not already done so, remove the blank panel from the slot where you are installing the Flex IOC.
  7. Orient the Flex IOC so that the faceplate faces you, the text on the card is right-side up, and the EMI strip is on the right-hand side.
  8. Lift the Flex IOC into place and carefully align first the bottom and then the top of the card with the guides inside the card cage.
  9. Slide the Flex IOC all the way into the card cage until you feel resistance.
    Figure 5: Installing a Flex IOCInstalling a Flex IOC
  10. Grasp both ejector handles and rotate them clockwise simultaneously until the Flex IOC is fully seated.
  11. Connect the power cables to the chassis.
  12. Power on the services gateway.
  13. Use one of the following methods to bring the Flex IOC online:
    • Press and hold the corresponding online button on the craft interface until the green OK LED next to the button lights steadily, in about 5 seconds.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

    CAUTION:

    After the OK LED turns green, wait at least 30 seconds before removing the card again, removing a card from a different slot, or inserting a card in a different slot.

Replacing SRX5800 Services Gateway Port Modules

To replace a port module, perform the following procedures:

Removing an SRX5800 Services Gateway Port Module

Before you begin to remove a port module:

Ensure that you have the following available:

  • ESD grounding strap

  • Phillips (+) number 1 screwdriver

  • Replacement port module or blank panel

  • Antistatic mat for the port module

  • Rubber safety caps for the transceivers

  • Dust covers to cover the ports

Port modules are installed in Flex IOCs in the services gateway card cage. A port module weighs up to 1.6 lb (0.7 kg). Be prepared to accept its full weight when you remove or install a port module.

To remove a port module (see Figure 6):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Label the cables connected to each port on the port module so that you can later reconnect the cables to the correct ports.
  3. Use one of the following methods to take the port module offline:
    • Insert a pointed tool into the ONLINE pinhole on the front panel of the port module to press the button behind it. Hold the button down until the OK/FAIL LED goes off.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

  4. Power off the services gateway.
  5. Disconnect the cables from the port module. If the port module uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap. Arrange the disconnected cables in the cable management system to prevent the cables from developing stress points.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  6. Cover the ports on the port module with dust covers, if you remove the optical transceivers from the IOC.
  7. Using the Phillips (+) number 1 screwdriver loosen the captive screws that retain the port module in its slot in the Flex IOC.
  8. Grasp the captive screws and slide the port module straight out of the Flex IOC halfway.
  9. Place one hand around the front of the port module and the other hand under it to support it. Slide the port module completely out of the Flex IOC, and place it on the antistatic mat or in the electrostatic bag.
    Figure 6: Removing a Port ModuleRemoving a Port Module
  10. If you are not reinstalling a port module into the empty slot within a short time, install a blank panel over the slot to maintain proper airflow in the card cage.
    CAUTION:

    After removing a port module from the chassis, wait at least 30 seconds before reinserting it, removing a port module from a different slot, or inserting a port module into a different slot.

Installing an SRX5800 Services Gateway Port Module

Before you begin to install a port module:

Ensure that you have the following available:

  • ESD grounding strap

  • Phillips (+) number 1 screwdriver

  • Rubber safety caps for transceivers

To install a port module into a Flex IOC (see Figure 7):

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Power off the services gateway.
  3. Place the port module on an antistatic mat or remove it from its electrostatic bag.
  4. Verify that each fiber-optic transceiver is covered with a rubber safety cap. If it is not, cover the transceiver with a safety cap.
  5. If necessary, remove the blank panel covering the slot in the Flex IOC where you are installing the port module.
  6. Orient the port module so that the faceplate faces you.
  7. Lift the port module into place and carefully align the top and bottom edges of the port module with the guides inside the Flex IOC.
  8. Slide the port module all the way into the Flex IOC until it is fully seated.
  9. Using the Phillips (+) number 1 screwdriver tighten both captive screws to secure the port module in the Flex IOC.
    Figure 7: Installing a Port ModuleInstalling a Port Module
  10. If the port module uses fiber-optic interfaces, remove the rubber safety cap from each transceiver and cable.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

  11. Insert the appropriate cables into the cable connector ports on each port module. Secure the cables so that they are not supporting their own weight. Place excess cable out of the way in a neatly coiled loop, using the cable management system. Placing fasteners on a loop helps to maintain its shape.
    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  12. Power on the services gateway.
  13. Use one of the following methods to take the port module online:
    • Insert a pointed tool into the ONLINE pinhole on the front panel of the port module to press the button behind it. Hold the button down until the OK/FAIL LED at the opposite end of the front panel lights green steadily, in about 5 seconds.

    • Issue the following CLI command:

      For more information about the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

    CAUTION:

    After the OK/FAIL LED turns green, wait at least 30 seconds before removing the port module again, removing a port module from a different slot, or inserting a port module in a different slot.

You can also verify that the port module is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands.

Replacing SRX5800 Services Gateway SPCs

To replace an SPC, perform the following procedures:

Removing an SRX5800 Services Gateway SPC

Before you begin to remove a SPC:

Ensure that you have the following available:

  • ESD grounding strap

  • Replacement SPC or blank panel

  • Antistatic mat

  • Rubber safety caps for transceivers

An SPC weighs up to 18.3 lb (8.3 kg). Be prepared to accept its full weight.

To remove an SPC (see Figure 8):

  1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
  2. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  3. Physically turn off the power and remove the power cables from the chassis.
  4. Label the cables connected to each port on the SPC so that you can later reconnect the cables to the correct ports.
  5. Disconnect the cables from the SPC. If the SPC uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap. Arrange the disconnected cables in the cable management system to prevent the cables from developing stress points.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

  6. Simultaneously turn both of the ejector handles counterclockwise to unseat the SPC.
  7. Grasp the handles and slide the SPC straight out of the card cage halfway.
  8. Place one hand around the front of the SPC and the other hand under it to support it. Slide the SPC completely out of the chassis, and place it on the antistatic mat or in the electrostatic bag.
    CAUTION:

    The weight of the SPC is concentrated in the back end. Be prepared to accept the full weight—up to 18.3 lb (8.3 kg)—as you slide the SPC out of the chassis.

    When the SPC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors. They cannot support its weight.

    Do not stack SPCs on top of one another after removal. Place each one individually in an electrostatic bag or on its own antistatic mat on a flat, stable surface.

  9. If you are not reinstalling an SPC into the empty slot within a short time, install a blank panel over the slot to maintain proper airflow in the card cage.
Figure 8: Removing an SPCRemoving an SPC

Installing an SRX5800 Services Gateway SPC

Before you begin to install a SPC:

Ensure that you have the following available:

  • ESD grounding strap

  • Antistatic mat

  • Rubber safety caps for transceivers

To install an SPC (see Figure 9):

  1. Attach an ESD grounding strap to your bare wrist, and connect the strap to one of the ESD points on the chassis.
  2. Power off the services gateway using the command request system power-off.
    Note:

    Wait until a message appears on the console confirming that the services stopped.

  3. Physically turn off the power and remove the power cables from the chassis.
  4. Place the SPC on an antistatic mat or remove it from its electrostatic bag.
  5. Identify the slot on the services gateway where it will be installed.
  6. Verify that each fiber-optic transceiver is covered with a rubber safety cap. If it does not, cover the transceiver with a safety cap.
  7. Orient the SPC so that the faceplate faces you, the text on the card is right-side up, and the EMI strip is on the right-hand side.
  8. Lift the SPC into place and carefully align first the bottom and then the top of the card with the guides inside the card cage.
  9. Slide the SPC all the way into the card cage until you feel resistance.
  10. Grasp both ejector handles and rotate them clockwise simultaneously until the SPC is fully seated.
  11. If the SPC uses fiber-optic cable, remove the rubber safety cap from each transceiver and cable.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

  12. Insert the appropriate cables into the cable connector ports on each SPC (see Figure 10). Secure the cables so that they are not supporting their own weight. Place excess cable out of the way in a neatly coiled loop, using the cable management system. Placing fasteners on a loop helps to maintain its shape.
    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  13. Connect the power cables to the chassis.
  14. Power on the services gateway.
  15. Verify that the SPC is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands.
Figure 9: Installing an SPCInstalling an SPC
Figure 10: Attaching a Cable to an SPCAttaching a Cable to an SPC
Note:

To install additional SPCs in a services gateway that is part of a chassis cluster, it must meet the following conditions.

  • Each services gateway must already have at least two SPCs installed in it.

  • To add first-generation SRX5K-SPC-2-10-40 SPCs, both of the services gateways in the cluster must be running Junos OS Release 11.4R2S1, 12.1R2, or later.

  • To add second-generation SRX5K-SPC-4-15-320 SPCs, both of the services gateways in the cluster must be running Junos OS Release 12.1X44-D10, or later.

  • To add next-generation SRX5K-SPC3 SPCs, both of the services gateways in the cluster must be running Junos OS Release 18.2R1-S1, or later.

  • You must install SPCs of the same type and in the same slots in both of the services gateways in the cluster. Both services gateways in the cluster must end up with the same physical configuration of SPCs.

  • If you are only adding first-generation SRX5K-SPC-2-10-40 SPCs to the chassis, you must install them so that the new SPCs are not the SPCs with the lowest-numbered slots in the chassis. For example, if the chassis already has two SPCs with one SPC each in slots 2 and 3, you cannot install additional SPCs in slots 0 or 1 using this procedure.

  • If you are adding second-generation SRX5K-SPC-4-15-320 SPCs to the chassis, you must install the new SPCs so that a second-generation SRX5K-SPC-4-15-320 SPC is the SPC in the original lowest-numbered slot. For example, if the chassis already has two first-generation SPCs installed in slots 2 and 3, you must install SRX5K-SPC-4-15-320 SPCs in slots 0 or 1. You will need to make sure that an SRX5K-SPC-4-15-320 SPC is installed in the slot providing central point (CP) functionality so that the CP functionality is performed by an SRX5K-SPC-4-15-320 SPC.

  • If you are adding next-generation SRX5K-SPC3 SPCs to the chassis, you must install the new SPCs so that a next-generation SRX5K-SPC3 SPC is the SPC in the original lowest-numbered slot. For example, if the chassis already has two second-generation SPCs installed in slots 2 and 3, you must install SRX5K-SPC3 SPCs in slots 0 or 1. You will need to make sure that an SRX5K-SPC3 SPC is installed in the slot providing central point (CP) functionality so that the CP functionality is performed by an SRX5K-SPC3 SPC.

    Note:

    Your services gateway cannot have a mix of SRX5K-SPC-2-10-40 SPCs and SRX5K-SPC3 SPCs, but starting with Junos OS release 18.2R2 and then 18.4R1 but not 18.3R1 you can have a mix of SRX5K-SPC-4-15-320 SPCs and SRX5K-SPC3 SPCs.

  • If you are adding the second-generation SRX5K-SPC-4-15-320 SPCs or the next-generation SRX5K-SPC3 SPCs to a services gateway, the services gateway must already be equipped with high-capacity power supplies and fan trays, and the high-capacity air filters. See Upgrading an SRX5800 Services Gateway from Standard-Capacity to High-Capacity Power Supplies for more information.

During this installation procedure, you must shut down both devices, one at a time.

Replacing SPCs in an Operating SRX5400, SRX5600, or SRX5800 Services Gateways Chassis Cluster

If your Services Gateway is part of an operating chassis cluster, you can replace the first-generation SRX5K-SPC-2-10-40 SPCs with the second generation SRX5K-SPC-4-15-320 SPCs by incurring a minimum downtime on your network. But when you are replacing the SRX5K-SPC-2-10-40 or SRX5K-SPC-4-15-320 SPCs with the SRX5K-SPC3 SPCs, there will be no downtime in your network.

Note:

SRX5K-SPC-2-10-40 SPC is not supported on SRX5400 Services Gateway.

To replace SPCs in a services gateway that is part of a chassis cluster, it must meet the following conditions:

  • Each services gateway must have at least one SPC installed. The installation may warrant additional SPCs if the number of sessions encountered is greater than the session limit of one SPC.

  • If the chassis cluster is operating in active-active mode, you must transition it to active-passive mode before using this procedure. You transition the cluster to active-passive mode by making one node primary for all redundancy groups.

  • To replace first-generation SRX5K-SPC-2-10-40 SPCs, both of the services gateways in the cluster must be running Junos OS Release 11.4R2S1, 12.1R2, or later.

  • To replace second-generation SRX5K-SPC-4-15-320 SPCs, both of the services gateways in the cluster must be running Junos OS Release 12.1X44-D10, or later.

  • To replace next-generation SRX5K-SPC3 SPCs, both of the services gateways in the cluster must be running Junos OS Release 18.2R1-S1, or later.

  • You must install SPCs of the same type and in the same slots in both of the services gateways in the cluster. Both services gateways in the cluster must have the same physical configuration of SPCs.

  • If you are replacing an existing first-generation SRX5K-SPC-2-10-40 SPC with a second-generation SRX5K-SPC-4-15-320 SPC, you must install the new SPC so that the second-generation SRX5K-SPC-4-15-320 SPC is the SPC with the lowest-numbered slot. For example, if the chassis has SPCs installed in slots 2 and 3, then you must replace the SPC in slot 2 first. This ensures that the central point (CP) functionality is performed by an SRX5K-SPC-4-15-320 SPC.

  • If you are adding next-generation SRX5K-SPC3 SPCs to the chassis, you must install the new SPCs so that a next-generation SRX5K-SPC3 is the SPC in the original lowest-numbered slot. For example, if the chassis already has two second-generation SPCs installed in slots 2 and 3, you must install SRX5K-SPC3 SPCs in slots 0 or 1. You will need to make sure that an SRX5K-SPC3 SPC is installed in the slot providing central point (CP) functionality so that the CP functionality is performed by an SRX5K-SPC3 SPC.

    Note:

    Your services gateway cannot have a mix of SRX5K-SPC-2-10-40 SPCs and SRX5K-SPC3 SPCs, but starting with Junos OS release 18.2R2 and then 18.4R1 but not 18.3R1 you can have a mix of SRX5K-SPC-4-15-320 SPCs and SRX5K-SPC3 SPCs.

  • If you are adding the second-generation SRX5K-SPC-4-15-320 SPCs or the next-generation SRX5K-SPC3 SPCs to a services gateway, the services gateway must already be equipped with high-capacity power supplies and fan trays, and the high-capacity air filters. See Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies or Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies for more information.

If your installation does not meet these criteria, use the procedure in Installing an SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or Installing an SRX5800 Services Gateway SPC to install SPCs in your services gateway.

Note:

During this installation procedure, you must shut down both devices, one at a time. During the period when one device is shut down, the remaining device operates without a backup. If that remaining device fails for any reason, you incur network downtime until you restart at least one of the devices.

To replace SPCs in an Services Gateway cluster without incurring downtime:

  1. Use the console port on the Routing Engine to establish a CLI session with one of the devices in the cluster.
  2. Use the show chassis cluster status command to determine which services gateway is currently primary, and which services gateway is secondary, within the cluster.
  3. If the device with which you established the CLI session in Step 2 is not the secondary node in the cluster, use the console port on the device that is the secondary node to establish a CLI session.
  4. Use the show chassis fpc pic-status command to check the status of all the cards on both the nodes.
  5. In the CLI session for the secondary services gateway, use the request system power off command to shut down the services gateway.
  6. Wait for the secondary services gateway to shut down completely and than remove the power cables from the chassis.
  7. Remove the SPC from the powered-off services gateway using the procedure in Removing an SRX5400 Services Gateway SPC, or Removing an SRX5600 Services Gateway SPC, or Removing an SRX5800 Services Gateway SPC.
  8. Install the new SPC or SPCs in the powered-off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or Installing an SRX5800 Services Gateway SPC.
  9. Insert the power cables to the chassis and power on the secondary services gateway and wait for it to finish starting.
  10. Reestablish the CLI session with the secondary node device.
  11. Use the show chassis fpc pic-status command to make sure that all of the cards in the secondary node chassis are back online.
  12. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero.
  13. Use the console port on the device that is the primary node to establish a CLI session.
  14. In the CLI session for the primary node device, use the request chassis cluster failover command to fail over each redundancy group that has an ID number greater than zero.
  15. In the CLI session for the primary node device, use the request system power off command to shut down the services gateway. This action causes redundancy group 0 to fail over onto the other services gateway, making it the active node in the cluster.
  16. Repeat Step 7 and Step 8 to replace or install SPCs in the powered-off services gateway.
  17. Power on the services gateway and wait for it to finish starting.
  18. Use the show chassis fpc pic-status command on each node to confirm that all cards are online and both services gateways are operating correctly.
  19. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero.

In-Service Hardware Upgrade for SRX5K-SPC3 in a Chassis Cluster

If your device is part of a chassis cluster, you can install SRX5K-SPC3 (SPC3), using the In-Service Hardware Upgrade (ISHU) procedure and avoid network downtime.

Note:

This ISHU procedure will not replace any existing Services Processing Cards (SPC), it will guide you to install an additional SPC3 card in a chassis cluster.

Note:

We strongly recommend that you perform the ISHU during a maintenance window, or during the lowest possible traffic as the secondary node is not available at this time.

To install SPC3s in a services gateway that is part of a chassis cluster using the ISHU procedure, the following conditions have to be met:

  • Each services gateway must have at least one SPC3 installed. ISHU is not supported if you want to add SPC3s into a node that only contains SRX5K-SPC-4-15-320s (SPC2).

  • Starting in Junos OS Release 19.4R1, ISHU for SRX5K-SPC3 is supported on all SRX5000 line of devices chassis cluster:

    • If the chassis has only one SPC3, you can only install one more SPC3 by using the ISHU procedure.

    • If the chassis already has two SPC3 cards, you cannot install any more SPC3 cards by using the ISHU procedure.

    • If the chassis already has three or more SPC3 cards, you can install additional SPC3 cards by using the ISHU procedure.

  • Installing SPC3s to the chassis cluster must not change the central point (CP) functionality mode from Combo CP mode to Full CP mode.

    When there are two or less than two SPC3s in the chassis, the CP mode is Combo CP mode. More than two SPC3s in the chassis, the CP mode is Full CP mode.

  • If the chassis cluster is operating in active-active mode, you must transition it to active-passive mode before using this procedure. You transition the cluster to active-passive mode by making one node primary for all redundancy groups.

  • When you are adding a new SPC3 to a chassis, it must be installed in the higher-numbered slot than any other installed SPCs in the chassis.

  • The services gateway must already be equipped with high-capacity power supplies and fan trays, and the high-capacity air filters. See Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies or Upgrading an SRX5600 Services Gateway from Standard-Capacity to High-Capacity Power Supplies for more information.

During this installation procedure, you must shut down both devices, one at a time. During the period when one device is shut down, the other device operates without a backup. If that other device fails for any reason, you incur network downtime until you restart at least one of the devices.

To add SPC3s in an Services Gateway cluster without incurring downtime:

  1. Use the console port on the Routing Engine to establish a CLI session with one of the devices in the cluster.
  2. Use the show chassis cluster status command to determine which services gateway is currently primary, and which services gateway is secondary, within the cluster.
  3. If the device with which you established the CLI session in Step 2 is not the secondary node in the cluster, use the console port on the device that is the secondary node to establish a CLI session.
  4. Use the show chassis fpc pic-status command to check the status of all the cards on both the nodes.
  5. In the CLI session for the secondary services gateway, use the request system power off command to shut down the services gateway.
  6. Wait for the secondary services gateway to shut down completely and than remove the power cables from the chassis.
  7. Install the new SPC3 or SPC3s in the powered-off services gateway using the procedure in Installing an SRX5400 Services Gateway SPC, or Installing an SRX5600 Services Gateway SPC, or Installing an SRX5800 Services Gateway SPC.
  8. Insert the power cables to the chassis and power on the secondary services gateway and wait for it to finish starting.
  9. Reestablish the CLI session with the secondary node device.
  10. Use the show chassis fpc pic-status command to make sure that all of the cards in the secondary node chassis are back online.
  11. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero.
  12. Use the console port on the device that is the primary node to establish a CLI session.
  13. In the CLI session for the primary node device, use the request chassis cluster failover command to fail over each redundancy group that has an ID number greater than zero.
  14. In the CLI session for the primary node device, use the request system power off command to shut down the services gateway. This action causes redundancy group 0 to fail over onto the other services gateway, making it the active node in the cluster.
  15. Repeat Step 7 to install SPC3s in the powered-off services gateway.
  16. Power on the services gateway and wait for it to finish starting.
  17. Use the show chassis fpc pic-status command on each node to confirm that all cards are online and both services gateways are operating correctly.
  18. Use the show chassis cluster status command to make sure that the priority for all redundancy groups is greater than zero.

Maintaining MICs and Port Modules on the SRX5800 Services Gateway

Purpose

For optimum services gateway performance, verify the condition of the MICs installed in MPCs, and port modules installed in Flex IOCs.

Action

On a regular basis:

  • Check the LEDs on MIC and port modules faceplates. The meaning of the LED states differs for various port modules. If the Flex IOC that houses the port modules detects a port modules failure, the Flex IOC generates an alarm message to be sent to the Routing Engine.

  • Issue the CLI show chassis fpc pic-status command. The port module and MIC slots in an FPC are numbered from 0 through 1, bottom to top:

    For further description of the output from the command, see Junos OS System Basics and Services Command Reference at www.juniper.net/documentation/.

Replacing SRX5800 Services Gateway MICs

To replace an MIC, perform the following procedures:

Removing an SRX5800 Services Gateway MIC

The MICs are located in the MPCs installed in the front of the services gateway. A MIC weighs less than 2 lb (0.9 kg).

Before you begin to remove a MIC:

Ensure that you have the following available:

  • ESD grounding strap

  • Antistatic mat

  • Replacement MIC or blank panel

  • Rubber safety caps for transceivers

To remove a MIC:

  1. Place an electrostatic bag or antistatic mat on a flat, stable surface to receive the MIC.
  2. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  3. Power off the services gateway.
  4. Label the cables connected to the MIC so that you can later reconnect each cable to the correct MIC.
  5. Disconnect the cables from the MIC. If the MIC uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

  6. Arrange the cable to prevent it from dislodging or developing stress points. Secure the cable so that it is not supporting its own weight as it hangs to the floor. Place excess cable out of the way in a neatly coiled loop.
    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  7. On the MPC, pull the ejector knob that is adjacent to the MIC you are removing away from the MPC faceplate. The ejector knob is located between the MIC and the rotational knob that retains the MPC in the services gateway card cage. Pulling the ejector knob unseats the MIC from the MPC and partially ejects it. See Figure 11.
    Figure 11: Removing a MICRemoving a MIC
  8. Grasp the handles on the MIC faceplate, and slide the MIC out of the MPC card carrier. Place it in the electrostatic bag or on the antistatic mat.
  9. If you are not reinstalling a MIC into the emptied MIC slot within a short time, install a blank MIC panel over the slot to maintain proper airflow in the MPC card cage.

Installing an SRX5800 Services Gateway MIC

Before you begin to install a MIC:

Ensure that you have the following available:

  • ESD grounding strap

  • Rubber safety caps for transceivers

Note:

If your services gateway is part of a chassis cluster, you may be able to install MICs in the services gateways in the cluster without incurring downtime on your network. See Installing MPCs and MICs in an Operating SRX5800 Services Gateway Chassis Cluster for more information.

To install a MIC:

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. If you have not already done so, power off the services gateway.
  3. If the MIC uses fiber-optic cable, verify that a rubber safety cap is over each transceiver on the faceplate. Install a cap if necessary.
  4. On the MPC, pull the ejector knob that is adjacent to the MIC you are installing away from the MPC faceplate. The ejector knob is located between the MIC and the rotational knob that retains the MPC in the services gateway card cage. See Figure 12.
    Figure 12: Installing a MICInstalling a MIC
  5. Align the rear of the MIC with the guides located at the corners of the MIC slot.
  6. Slide the MIC into the MPC until it is firmly seated in the MPC. The ejector knob will automatically move in towards the faceplate to lock the MIC in position as it seats.

    If the MIC does not seat properly in the slot, pull the ejector knob all the way out and try again to seat the MIC. The MIC will not seat properly unless the ejector knob is all the way when you start to insert the MIC.

    CAUTION:

    Slide the MIC straight into the slot to avoid damaging the components on the MIC.

  7. After the MIC is seated in its slot, verify that the ejector knob is engaged by pushing it all the way in toward the MPC faceplate.
  8. If the MIC uses fiber-optic cable, remove the rubber safety cap from each transceiver and the end of each cable.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when you are inserting or removing cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

  9. Insert the appropriate cables into the cable connectors on the MIC.
  10. Arrange each cable to prevent the cable from dislodging or developing stress points. Secure the cable so that it is not supporting its own weight as it hangs to the floor. Place excess cable out of the way in a neatly coiled loop.
    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  11. Power on the services gateway. The OK LED on the power supply faceplate should blink, then light steadily.
  12. Verify that the MPC and MICs are functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands.

Replacing SRX5800 Services Gateway MPCs

To replace an MPC, perform the following procedures:

Removing an SRX5800 Services Gateway MPC

An MPC installs vertically in the front of the services gateway. A fully configured MPC can weigh up to 18.35 lb (8.3 kg). Be prepared to accept its full weight.

Before you begin to remove a MPC:

Ensure that you have the following available:

  • ESD grounding strap

  • Replacement MPC or blank panel

  • Antistatic mat

  • Rubber safety caps for transceivers

To remove an MPC:

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. Power off the services gateway.
  3. Label the cables connected to each MIC on the MPC so that you can later reconnect the cables to the correct MICs.
  4. Disconnect the cables from the MICs installed in the MPC.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

    CAUTION:

    Do not leave a fiber-optic transceiver uncovered except when inserting or removing a cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  5. If a MIC uses fiber-optic cable, immediately cover each transceiver and the end of each cable with a rubber safety cap.
  6. Arrange the disconnected cables in the cable management brackets to prevent the cables from developing stress points.
  7. Simultaneously turn both the ejector handles counterclockwise to unseat the MPC.
  8. Grasp the handles, and slide the MPC straight out of the card cage halfway. See Figure 13.
    Figure 13: Removing an MPCRemoving an MPC
  9. Place one hand around the front of the MPC (the MIC housing) and the other hand under it to support it. Slide the MPC completely out of the chassis, and place it on the antistatic mat or in the electrostatic bag.
    CAUTION:

    The weight of the MPC is concentrated in the back end. Be prepared to accept the full weight—up to 18.35 lb (8.3 kg)—as you slide the MPC out of the chassis.

    When the MPC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors. They cannot support its weight.

    Do not stack MPCs on top of one another after removal. Place each one individually in an electrostatic bag or on its own antistatic mat on a flat, stable surface.

  10. If necessary, remove each installed MIC from the MPC. See Removing an SRX5800 Services Gateway MIC.
  11. After you remove each MIC, immediately place it on an antistatic mat or in an electrostatic bag.
  12. If you are not reinstalling an MPC into the emptied line card slots within a short time, install a blank panel over each slot to maintain proper airflow in the card cage.

Installing an SRX5800 Services Gateway MPC

An MPC installs vertically in the front of the services gateway. A fully configured MPC can weigh up to 18.35 lb (8.3 kg). Be prepared to accept its full weight.

Note:

If your services gateway is part of a chassis cluster, you may be able to install MPCs in the services gateways in the cluster without incurring downtime on your network. See Installing MPCs and MICs in an Operating SRX5800 Services Gateway Chassis Cluster for more information.

Before you begin to install a MPC:

Ensure that you have the following available:

  • ESD grounding strap

  • Antistatic mat

  • Rubber safety caps for transceivers

To install an MPC:

  1. Attach an ESD grounding strap to your bare wrist, and connect the other end of the strap to an ESD grounding point.
  2. If you have not already done so, power off the services gateway.
  3. Place the MPC on an antistatic mat.
  4. Take each MIC to be installed in the replacement MPC out of its electrostatic bag, and identify the slot on the MPC where it will be connected.
  5. Verify that each fiber-optic MIC has a rubber safety cap covering the MIC transceiver. If it does not, cover the transceiver with a safety cap.
  6. Install each MIC into the appropriate slot on the MPC. See Installing an SRX5800 Services Gateway MIC.
  7. Locate the slot in the card cage in which you plan to install the MPC.
  8. Orient the MPC so that the faceplate faces you.
  9. Lift the MPC into place, and carefully align the sides of the MPC with the guides inside the card cage. See Figure 14.
    CAUTION:

    When the MPC is out of the chassis, do not hold it by the ejector handles, bus bars, or edge connectors. They cannot support its weight.

    Figure 14: Installing an MPCInstalling an MPC
  10. Slide the MPC all the way into the card cage until you feel resistance.
  11. Grasp both ejector handles, and rotate them clockwise simultaneously until the MPC is fully seated.
  12. If any of the MICs on the MPC connect to fiber-optic cable, remove the rubber safety cap from each transceiver and cable.
    Laser Warning:

    Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cables connected to a transceiver emit laser light that can damage your eyes.

  13. Insert the appropriate cable into the cable connector ports on each MIC on the MPC. Secure the cables so that they are not supporting their own weight. Place excess cable out of the way in a neatly coiled loop, using the cable management system. Placing fasteners on a loop helps to maintain its shape.
    CAUTION:

    Do not let fiber-optic cables hang free from the connector. Do not allow the fastened loops of a cable to dangle, which stresses the cable at the fastening point.

    CAUTION:

    Avoid bending a fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.

  14. Power on the services gateway. The OK LED on the power supply faceplate should blink, then light steadily.
  15. Verify that the MPC is functioning correctly by issuing the show chassis fpc and show chassis fpc pic-status commands.