Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Port Speed on SRX Series Firewalls

SUMMARY Learn about port speeds, support for multiple port speeds, and how to configure port speed on SRX Series Firewalls.

SRX380 Port Speed Overview

To view the supported transceivers, optical interfaces, and DAC cables on SRX380, see Hardware Compatibility Tool (HCT).

Table 1 presents the details of SRX380 speeds.

Table 1: Port Speed Details and Description for SRX380
Port Location Number and Type of Ports Supported Speeds
FPC0, PIC0 16 RJ-45 ports 1 Gbps
FPC0, PIC0 4 SFP ports 10 Gbps

Follow the guideline given below when you configure the speed of a port:

  • Use the speed (Chassis Cluster) configuration to set 1-Gbps speed on PIC 1 ports. 1-Gbps speed is supported only in non-autonegotiation mode. If autonegotiation mode is enabled by default at the remote end, then you must disable it.

SRX1600 Port Speed Overview

To view the supported transceivers, optical interfaces, and DAC cables on SRX1600, see Hardware Compatibility Tool (HCT).

SRX1600 includes three PICs with different supported speeds:

  • PIC 0 with 1 GbE default speed

  • PIC 1 with 25 GbE default speed

  • PIC 2 with 10 GbE default speed

See Table 2 for details.

Table 2: Port Speed Details and Description for SRX1600
PIC Port Port Speed Supported Default Speed

PIC 0

0-15

 16x1-GbE interface 1GbE

PIC 1

0-1

2x1-GbE Interface

2x10-GbE Interface

2x25-GbE Interface

 25GbE

PIC 2

 0-3

4x1-GbE Interface

4x10-GbE Interface

 10GbE

Interface Naming Conventions

Table 3 lists the interface naming conventions for the SRX1600 devices.

Table 3: Interface Naming Conventions for SRX1600
PIC Interface Type Interfaces

PIC 0

1-Gigabit Ethernet interface (16 RJ45 ports)

ge-0/0/0 – ge-0/0/15

PIC 1

1 GbE/10 GbE/25 GbE (2 SFP28 ports)

et-0/1/0 – et-0/1/1

PIC 2

1 GbE/10 GbE (4 SFP+ ports)

xe-0/2/0 – xe-0/2/3

Follow these guidelines when you configure the speed of the port:

  • To view the port speeds on each PIC, execute the show chassis pic command.

  • The Junos OS creates PIC 0 interfaces by default. It creates PIC1 and PIC2 interfaces only if you use supported transceivers.

  • PIC 1 supports 3 different speed modes: 1 GbE, 10 GbE, and 25 GbE.

    Use the following command to configure the port speed:

    set chassis fpc 0 pic 1 pic-mode

    You can select any one from the three PIC modes and all the SFP ports run on the speed corresponding to the selected mode. For example, if you select 1GbE mode, the two SFP28 ports run 1GbE speed.

    Starting in Junos OS Release 24.2R1, you have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:

    • If you select 1GbE/10GbE mode, the SFP28 ports can choose either 1GbE or 10GbE.

    • If you select 25GbE mode, the SFP28 ports run on 25GbE.

  • PIC 2 supports mixed speed, 1GbE or 10GbE. PIC 2 creates the interface that is based on the plugged-in transceiver.

    See Port Speed Overview to configure speed step-by-step.

  • Use the show interface diagnostics optics <interface-name> command to display diagnostic data and alarms.

SRX2300 Port Speed Overview

To view the supported transceivers, optical interfaces, and DAC cables on SRX2300, see Hardware Compatibility Tool.

SRX2300 includes four PICs with the following properties:

  • PIC 0 with default speed of 10 GbE

  • PIC 1 default speed of 10 GbE

  • PIC 2 with default speed of 25 GbE

  • PIC 3 with default speed of 100 GbE

Table 4: Port Speed Details and Description for SRX2300
Port Location Number and Type of Ports Supported Speeds Default Speed

PIC 0 (ports 0–7)

8 RJ45 ports

1 GbE, 2.5 GbE, 5 GbE, and 10 GbE

10 GbE

PIC 1 (ports 0–7)

8 SFP+ ports

1 GbE, 10 GbE

10 GbE

PIC 2 (ports 0–3)

4 SFP28 ports

1 GbE, 10 GbE, and 25 GbE

25 GbE

PIC 3 (ports 0–1)

2 QSFP28 ports

40 GbE, 100 GbE

100 GbE
Table 5: Interface Naming Conventions for SRX2300

PIC

Interface Type

Interfaces

PIC 0

RJ45

mge-0/0/0 – mge-0/0/7

PIC 1

SFP+

xe-0/1/0 – xe-0/1/7

PIC 2

SFP28

et-0/2/0 – et-0/2/3

PIC 3

QSFP28

et-0/3/0 – et-0/3/1

Follow these guidelines when you configure the port speed:

  • The Junos OS creates the copper interfaces of PIC 0 (mge interfaces) by default.

  • PIC 0 supports the following speeds:

    • 1 GbE

    • 2.5 GbE

    • 5 GbE

    • 10 GbE

    Use the following command to configure the speed:

    set interfaces <mge-x/y/z> speed

  • PIC 1 supports mixed speed: 1 GbE and 10 GbE. PIC 1 creates the interface that is based on the plugged-in transceiver. You need not configure the speed.

  • PIC 2 supports 3 different speeds: 1 GbE, 10 GbE, and 25 GbE. PIC 2 creates the interface that is based on the plugged-in transceiver. If the transceiver and the configured speed mode do not match, PIC 2 does not create the interface.

    Use the following command to configure the port speed:

    set chassis fpc 0 pic 2 pic-mode

    You can select any one from the three PIC modes and all the SFP ports run on the speed corresponding to the selected mode. For example, if you select 1 GbE mode, the four SFP28 ports run 1 GbE speed.

    See Port Speed Overview to configure speed step-by-step.

    Starting in Junos OS Release 24.2R1, you have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:

    • If you select 1GbE/10GbE mode, the SFP28 ports can choose either 1GbE or 10GbE.

    • If you select 25GbE mode, all the SFP28 ports run on 25GbE.

  • PIC 3 supports mixed speed, 40 GbE or 100 GbE. PIC 3 creates the interface that is based on the plugged-in transceiver. You need not configure the speed.

  • Use the show interface diagnostics optics <interface-name> command to display diagnostic data and alarms.

  • Based on transceiver that you select, you can set one QSFP28 port to 40 GbE and the other to 100 GbE in PIC 3. 

Channelization

You can channelize QSFP28 ports into:

  • 4x25 GbE with 100 GbE SFP

  • 4x10 GbE with 40 GbE SFP

set chassis fpc <fpc slot> pic <pic slot> port <port number> channel-speed <10G | 25G>

Example:

set chassis fpc 0 pic 3 port 4 channel-speed 25G

set chassis fpc 0 pic 3 port 4 channel-speed 10G

SRX4300 Port Speed Overview

To view the supported transceivers, optical interfaces, and DAC cables on SRX4300, see Hardware Compatibility Tool.

SRX4300 includes four PICs with default speeds as given below:

  • PIC 0 with 10 GbE

  • PIC 1 with 10 GbE

  • PIC 2 with 25 GbE

  • PIC 3 with 100 GbE

Table 6: Port Speed Details and Description for SRX4300

Port Location

Number and Type of Ports

Supported Speeds

Default Speed

PIC 0

Eight RJ45 ports

1 GbE, 2.5 GbE, 5 GbE, and 10 GbE

10 GbE

PIC 1

Eight SFP+ ports

1 GbE and 10 GbE

10 GbE

PIC 2

Four SFP28 ports

1 GbE, 10 GbE, and 25 GbE

25 GbE

PIC 3

Six QSFP28 ports

40 GbE and 100 GbE

100 GbE
Table 7: Interface Naming Conventions for SRX4300

PIC

Interface Type

Naming Format

PIC 0

RJ45

mge-0/0/0 - mge-0/0/7

PIC 1

SFP+

xe-0/1/0 - xe-0/1/7

PIC 2

SFP28

et-0/2/0 - et-0/2/3

PIC 3

QSFP28

et-0/3/0 - et-0/3/5

Follow the guidelines below to configure the port speed:

  • The Junos OS creates the copper interfaces of PIC 0 (mge interfaces) by default.

  • You can create the PIC 1, PIC 2, and PIC 3 (SFP+, SFP28, and QSFP28) interfaces based on the plugged-in transceivers.

  • You need not configure the speed for PIC 1. For example:

  • PIC 2 supports three different speed modes: 1 GbE, 10 GbE, and 25 GbE.

    Configure the speed:

    You can select any one from the three PIC modes and all the SFP ports run on the speed corresponding to the selected mode. For example, if you select 1GbE mode, the four SFP28 ports run 1GbE speed.

    Starting in Junos OS Release 24.2R1, you have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:

    • If you select 1GbE/10GbE mode, the SFP28 ports can choose either 1GbE or 10GbE.

    • If you select 25GbE mode, all the SFP28 ports run on 25GbE.

  • Based on the transceiver that you select, you can set first three QSFP28 ports to 40 GbE and the remaining three ports to 100 GbE.

SRX4600 Port Speed Overview

Table 8 presents the details of SRX4600 port speeds.

For information about interface-naming formats for channelized and nonchannelized interfaces and how to configure SRX Series Firewalls at port level and PIC level, see Port Speed.

For information on how to configure the speed at the PIC level, see Table 2 of port speed. For information on how to configure the speed at the port level, see Table 3 of port speed.

For more information about SRX4600 devices, see SRX4600 Services Gateway Hardware Guide.

For information about platforms support, see hardware compatibility tool (HCT).

To view the port speeds on each PIC, execute the show chassis pic command.

Table 8: Port Speed Details and Description

Port Location

Number and Type of Ports

Supported Speeds

FPC0, PIC0 (ports 0–3)

4 chassis cluster ports:

  • 2 fabric (FAB)

  • 2 control (CTL)

  • 10 Gbps (default)

  • 1 Gbps (only on CTL ports)

FPC1, PIC0 (ports 0–3)

4 100GbE QSFP28 ports or 40GbE QSFP+ ports

At port or PIC level:

  • 40 Gbps (default), with QSFP+ optics

  • 100 Gbps, with QSFP28 optics

FPC1, PIC1 (ports 0–7)

8 10GbE SFP+ ports

  • 10 Gbps (default)

  • 1 Gbps

Follow these guidelines when you configure the speed of a port:

  • You need to reboot the chassis cluster for configuration changes (from 10 Gbps to 1 Gbps) to take effect. For more details, see No link title.

  • To configure all 40GbE ports, use the set chassis fpc 1 pic 0 pic-mode 40G command.

  • To set only the first two 40GbE ports, use the set chassis fpc 1 pic 0 pic-mode 40G number-of-ports 2 command. This configuration sets only the first two 40GbE ports and disables the last two ports. You need to reboot the device for the configuration to take effect.

  • You can channelize each 40GbE port into four 10GbE interfaces by using QSFPP-4X10-GE optics, suitable breakout cables, and the speed configuration statement.

  • Use the speed (Gigabit Ethernet interface) configuration to set 1-Gbps speed on PIC 1 ports. 1-Gbps speed is supported only in non-autonegotiation mode. If autonegotiation mode is enabled by default at the remote end, then you must disable it.

  • You can configure the interface that is already operating in 10GbE mode to operate in 1GbE mode.

  • To prevent oversubscription, configure the number of active ports operating at the configured speed by using the number-of-ports statement. The SRX4600 supports a maximum speed of 400 Gbps; the speed cannot be oversubscribed.

  • To configure 4x100GbE, use the following commands:

    set chassis fpc 1 pic 0 port 0 speed 100g​

    set chassis fpc 1 pic 0 port 1 speed 100g​

    set chassis fpc 1 pic 0 port 2 speed 100g​

    set chassis fpc 1 pic 0 port 3 speed 100g​

    set chassis fpc 1 pic 1 number-of-ports 0 ​

    or

    set chassis fpc 1 pic 0 pic-mode 100G

    set chassis fpc 1 pic 1 number-of-ports 0

  • If you try to commit an invalid configuration, the configuration gets committed, but the port is not activated. This is because Junos OS allows you to configure a port before a line card is inserted. You will get an error message in the output of the show chassis alarms command and also in the log messages. For example, if you configure four 100GbE interfaces with eight 10GbE interface, then the configuration is invalid.

  • SRX4600 supports HA cluster. You need to reboot the system after changing port speed from 40G to 100G. The reboot is to make sure that the system returns to a stable HA cluster after the port speed change.

  • The SRX4600 does not support copper SFP transceivers.

Interface Naming Conventions

Table 9 describes the interface naming convention for a 40GbE interface channelized as four 10GbE interfaces:

Table 9: SRX4600 Interface Naming Convention

Interface Type

Example

4x10GbE

When the 40GbE port et-1/0/0 is channelized into four 10GbE interfaces, the channelized interfaces are named as follows::

xe-1/0/0:0

xe-1/0/0:1

xe-1/0/0:2

xe-1/0/0:3

Supported Active Physical Ports on SRX4600 to Prevent Oversubscription

You can use the number-of-ports statement to configure a port as an active port.

Table 10 summarizes the SRX4600 active ports with number-of-ports and port speed configured at PIC level.

Table 10: SRX4600 Port Speed at PIC level

PIC

Number of Active Ports

Active Port Number at PIC Level

10-Gigabit Ethernet

40-Gigabit Ethernet

100-Gigabit Ethernet

PIC 0

0

-

-

-

1

0

0

0

2

0, 1

0, 1

0, 1

3

0, 1, 2

0, 1, 2

0, 1, 2

4

0, 1, 2, 3

0, 1, 2, 3

0, 1, 2, 3

PIC 1

0

-

-

-

1

0

-

-

2

0, 1

-

-

3

0, 1, 2

-

-

4

0, 1, 2, 3

-

-

5

0, 1, 2, 3, 4

-

-

6

0, 1, 2, 3, 4, 5

-

-

7

0, 1, 2, 3, 4, 5 ,6

-

-

8

0, 1, 2, 3, 4, 5, 6, 7

-

-

To prevent oversubscription, you can configure the maximum number of active ports that can operate at the configured speed. Table 11 summarizes the maximum number of Gigabit Ethernet ports at PIC and port levels:

Table 11: Maximum Number of Gigabit Ethernet Ports at PIC and Port Level

Port Type

Maximum Number of Ports at PIC Mode (on PIC0 and PIC1)

Maximum Ports Configurable at Port Mode (on PIC0 and PIC1)

10GbE

24

16 ports from PIC 0 and 8 ports from PIC 1.

20

Refers to 12 ports from PIC 0 and 8 ports from PIC 1.

40GbE

4

Only 4 ports from PIC 0. PIC 1 supports only 10-Gbps speed.

4

100GbE

4

Only 4 ports from PIC 0. PIC 1 supports only 10-Gbps speed.

Note:

If you configure all four PIC 0 ports as 100GbE interfaces then, the PIC 1 ports are disabled. If you then try to configure any PIC 1 port and commit your configuration, the configuration will be invalid.

4

For information about oversubscription, see Port Speed.

See Also

Port Speed on SRX5K-IOC4-MRATE

Each of the twelve ports of PIC 0 and PIC 1 of an SRX5K-IOC4-MRATE supports port speeds of 10 Gbps and 40 Gbps. However, only ports 2 and 5 of both the PICs support port speed of 100 Gbps. You can choose to configure all supported ports of the SRX5K-IOC4-MRATE to operate at the same supported speed or configure all the ports at different supported speeds.

You can configure port speed at the PIC level, to operate all the ports of the SRX5K-IOC4-MRATE at the same speed. That is, you can choose to configure the PIC to operate at a supported speed, and then all the supported ports of the PIC to operate at the configured speed. For example, if you choose to configure PIC 0 at 100-Gbps speed, only ports 2 and 5 of PIC 0 operate at 100-Gbps speed, while the other ports of the PIC are disabled. Similarly, if you choose to configure PIC 0 at 10-Gbps or 40-Gbps speed, all the ports of the PIC are enabled to operate at those speeds. Additionally, you can prevent oversubscription by specifying the number of active physical ports that operate at 10-Gbps, 40-Gbps, and 100-Gbps speeds.

You cannot configure 1-Gbps speed at PIC level and port level. You can configure the port that is configured at 10-Gbps speed to operate at 1-Gbps speed by using the speed statement. After you commit the configuration, the operating speed of the 10-Gbps port changes to 1-Gbps speed, but the show interface command displays the speed configuration (operating port speed) as 1 GbE. If you configure the interface with 1-Gbps speed, then the Speed Configuration field displays 1 GbE; if you configure the interface with 10-Gbps speed, Speed Configuration displays AUTO.

You can configure port speed at the port level, to operate different ports of the SRX5K-IOC4-MRATE at different supported speeds. That is, you configure each port to operate at a supported speed.

The SRX5K-IOC4-MRATE supports an aggregate bandwidth of 480 Gbps, and each of the two PICs supports a bandwidth limit of 240 Gbps. If the aggregate port capacity configured exceeds 240 Gbps per PIC, the configuration is not supported.

Configuring Port Speed at PIC Level

To configure port speed at the PIC level:

  1. In configuration mode, navigate to the [edit chassis fpc fpc-slot pic pic-number] hierarchy level.

    For example:

  2. Configure the pic-mode statement to set the operating speed for the PIC's ports. According to your requirements, you can choose from the options 10G, 40G, or 100G.

    For example:

  3. (Optional) To prevent oversubscription, you can choose to configure the number of ports that operate at the mode that is configured in Step 2.

    For example:

  4. Verify the configuration.
  5. Commit your configuration changes.

If the number-of-ports statement is not configured, all the ports that support the speed configured in Step 2 are enabled. That is, depending on that selection, ports 0 through 5 are enabled for speeds of 10 GbE or 40 GbE, while ports 2 and 5 are enabled for 100 GbE. You can also use the number-of-ports statement to disable certain ports. Table 1 below, lists the physical ports that are enabled when the number-of-ports statement is configured.

Table 12: Active Physical Ports on SRX5K-IOC4-MRATE Based on the number-of-ports Configuration

Ports Configured (number-of-ports Statement)

Active Physical Ports for Different Configured Speeds

10-Gigabit

40-Gigabit

100-Gigabit

1

0

0

2

2

0, 1

0, 1

2, 5

3

0, 1, 2

0, 1, 2

2, 5

4

0, 1, 2, 3

0, 1, 2, 3

2, 5

5

0, 1, 2, 3, 4

0, 1, 2, 3, 4

2, 5

6

0, 1, 2, 3, 4, 5

0, 1, 2, 3, 4, 5

2, 5

Configuring Port Speed at Port Level

To configure port speed at the port level:

  1. In configuration mode, navigate to the [edit chassis fpc fpc-slot pic pic-number] hierarchy level.

    For example:

  2. To indicate the speed at which the ports operate, configure the speed statement for the desired ports. According to your requirements, you can choose the 10g, 40g, or 100g speed options.

    For example:

    All the twelve ports of PIC 0 and PIC 1 of an SRX5K-IOC4-MRATE support 10-Gbps and 40-Gbps port speeds. However, only ports 2 and 5 of both the PICs support 100-Gbps speed.

  3. Verify the configuration.

    You can verify the 40-Gbps and 100-Gbps ports configured as 10-Gbps by using the show interfaces terse command.

  4. Commit your configuration changes.

Note the following when configuring port speed on an SRX5K-IOC4-MRATE:

  • If port speed is not configured, all ports of the SRX5K-IOC4-MRATE operate as four 10-Gigabit Ethernet interfaces by default. Therefore, when booting the MPC:

    • If port speed is not configured or if invalid port speeds are configured, each port operates as four 10-Gigabit Ethernet interfaces. An alarm is generated to indicate that the ports of the SRX5K-IOC4-MRATE are operating as four 10-Gigabit Ethernet interfaces.

    • If valid port speeds are configured, the MPC PICs operate at the configured speed.

  • • When you change an existing port speed configuration at the port level, you must reset the SRX5K-IOC4-MRATE PIC for the configuration to take effect. An alarm is generated indicating the change in port speed configuration.

  • • When you change an existing port speed configuration with an invalid port speed configuration, an alarm is generated indicating that the port speed configuration is invalid. The MPC continues to operate using the previously configured valid port speed configuration. However, if the MPC or PIC is restarted with the committed invalid port configuration, all ports of the MPC operate as four 10-Gigabit Ethernet interfaces by default.

  • • You cannot configure port speed at the PIC level and the port level simultaneously. Error messages are displayed when you try to commit such configurations.

  • • When you configure port speed at the port level, only the configured ports are enabled. Other ports are disabled.

  • Logical interfaces can be created only on ports that are enabled.

  • You must restart the chassis when you change the port profile configuration.