Port Speed on SRX Series Firewalls
Learn about port speeds, support for multiple port speeds, and how to configure port speed on SRX Series Firewalls.
Port Speed on SRX380 Firewall
For information about SRX380 firewall, see SRX380 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX380, see Hardware Compatibility Tool (HCT).
| Port Location | Number and Type of Ports | Supported Speeds |
|---|---|---|
| FPC0, PIC0 | 16 RJ45, 4 SFP ports | 1 Gbps |
| FPC0, PIC0 | 4 SFP ports | 10 Gbps |
Follow the guideline given below when you configure the speed of a port:
Use the speed configuration to set 1-Gbps speed on PIC 1 ports. 1-Gbps speed is supported only in non-autonegotiation mode. If autonegotiation mode is enabled by default at the remote end, then you must disable it.
Port Speed on SRX1600 Firewall
For more information about SRX1600 firewall, see SRX1600 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX1600, see Hardware Compatibility Tool (HCT).
SRX1600 includes three PICs with different supported speeds:
-
PIC 0 with 1 GbE default speed
-
PIC 1 with 25 GbE default speed
-
PIC 2 with 10 GbE default speed
| PIC | Port | Port Speed Supported | Default Speed |
|---|---|---|---|
|
PIC 0 |
0-15 |
16x1-GbE interface | 1 Gbps |
|
PIC 1 |
0-1 |
2x1-GbE Interface 2x10-GbE Interface 2x25-GbE Interface |
25 Gbps |
|
PIC 2 |
0-3 |
4x1-GbE Interface 4x10-GbE Interface |
10 Gbps |
Interface Naming Conventions
| PIC | Interface Type | Interfaces |
|---|---|---|
|
PIC 0 |
1-Gigabit Ethernet interface (16 RJ45 ports) |
ge-0/0/0 – ge-0/0/15 |
|
PIC 1 |
1 GbE/10 GbE/25 GbE (2 SFP28 ports) |
et-0/1/0 – et-0/1/1 |
|
PIC 2 |
1 GbE/10 GbE (4 SFP+ ports) |
xe-0/2/0 – xe-0/2/3 |
Follow these guidelines when you configure the speed of the port:
-
To view the port speeds on each PIC, execute the
show chassis piccommand. -
The Junos OS creates PIC 0 interfaces by default. It creates PIC1 and PIC2 interfaces only if you use supported transceivers.
-
PIC 1 supports 3 different speed modes: 1 GbE, 10 GbE, and 25 GbE.
Use the following command to configure the port speed:
set chassis fpc 0 pic 1 pic-moderoot@host# set chassis fpc 0 pic 1 pic-mode ? Possible completions: 1G 1GE mode 10G 10GE mode 25G 25GE mode [edit] root@host#
You can select any one from the three PIC modes and all the SFP ports run on the speed corresponding to the selected mode. For example, if you select 1GbE mode, the two SFP28 ports run 1GbE speed.
You have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:
-
If you select 1GbE/10GbE mode, the SFP28 ports can choose either 1GbE or 10GbE.
-
If you select 25GbE mode, the SFP28 ports run on 25GbE.
root@host# set chassis fpc 0 pic 1 pic-mode ? Possible completions: 1G10G 1/10GE mode 25G 25GE mode [edit] root@host#
-
-
PIC 2 supports mixed speed, 1GbE or 10GbE. PIC 2 creates the interface that is based on the plugged-in transceiver. See Table 1 to configure speed step-by-step.
-
Use the
show interface diagnostics optics <interface-name>command to display diagnostic data and alarms.
If you insert:
-
1 GbE SFP, then the devices show the interfaces as
ge. -
10 GbE SFP, then the devices show the interfaces as
xe.
Port Speed on SRX2300 Firewall
For more information about SRX2300 firewall, see SRX2300 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX2300, see Hardware Compatibility Tool.
SRX2300 includes four PICs with the following properties:
-
PIC 0 with default speed of 10 Gbps
-
PIC 1 default speed of 10 Gbps
-
PIC 2 with default speed of 25 Gbps
-
PIC 3 with default speed of 100 Gbps
| Port Location | Number and Type of Ports | Supported Speeds | Default Speed |
|---|---|---|---|
|
PIC 0 (ports 0–7) |
8 RJ-45 ports |
1 Gbps, 2.5 Gbps, 5 Gbps, and 10 Gbps |
10 Gbps |
|
PIC 1 (ports 0–7) |
8 SFP+ ports |
1 Gbps, 10 Gbps |
10 Gbps |
|
PIC 2 (ports 0–3) |
4 SFP28 ports |
1 Gbps, 10 Gbps, and 25 Gbps |
25 Gbps |
|
PIC 3 (ports 0–1) |
2 QSFP28 ports |
40 Gbps, 100 Gbps |
100 Gbps |
|
PIC |
Interface Type |
Interfaces |
|---|---|---|
|
PIC 0 |
RJ-45 |
mge-0/0/0 – mge-0/0/7 |
|
PIC 1 |
SFP+ |
xe-0/1/0 – xe-0/1/7 |
|
PIC 2 |
SFP28 |
et-0/2/0 – et-0/2/3 |
|
PIC 3 |
QSFP28 |
et-0/3/0 – et-0/3/1 |
Follow these guidelines when you configure the port speed:
-
The copper interfaces of PIC 0 (mge interfaces) are created by default.
-
When using the mge interfaces as fabric interfaces to form chassis clusters, avoid changing the speed.
-
PIC 0 supports 1 Gbps, 2.5 Gbps, 5 Gbps, and 10 Gbps speeds.
Use the following command to configure the speed:
set interfaces <mge-x/y/z> speed -
PIC 1 supports mixed speed: 1 Gbps and 10 Gbps. The interface is created based on the plugged-in transceiver. You need not configure the speed.
user@host# set chassis fpc 0 pic 1 pic-mode ? No valid completions
-
PIC 2 supports 3 different speeds: 1GbE, 10GbE, and 25GbE. Starting in Junos OS Release 24.2R1, you have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:
-
If you select 1GbE/10GbE mode, the SFP28 ports can choose either 1GbE or 10GbE.
-
If you select 25GbE mode, the SFP28 ports run on 25GbE.
user@host# set chassis fpc 0 pic 2 pic-mode ? Possible completions: 1G10G 1/10GE mode 25G 25GE mode
-
-
See Configure Port Speed at Chassis Level to configure speed step-by-step.
-
PIC 3 supports mixed speed, 40 Gbps or 100 Gbps. The interface is created based on the plugged-in transceiver. You need not configure the speed.
user@host# set chassis fpc 0 pic 3 pic-mode ? No valid completions
-
Use the
show interface diagnostics optics <interface-name>command to display diagnostic data and alarms.
Channelization
You can channelize QSFP28 ports into:
-
4x25 Gbps with 100GbE SFP
-
4x10 Gbps with 40GbE SFP
set chassis fpc <fpc slot> pic <pic slot> port <port number>
channel-speed <10G | 25G>
Example:
set chassis fpc 0 pic 3 port 4 channel-speed 25G
set chassis fpc 0 pic 3 port 4 channel-speed 10G
If you insert:
-
1 GbE SFP, then the devices show the interfaces as
ge. -
10 GbE SFP, then the devices show the interfaces as
xe.
Port Speed on SRX4120 Firewall
For more information about SRX4120 firewall, see SRX4120 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX4120, see Hardware Compatibility Tool.
SRX2300 includes four PICs with the following properties:
-
PIC 0 with default speed of 10 Gbps
-
PIC 1 default speed of 10 Gbps
-
PIC 2 with default speed of 25 Gbps
-
PIC 3 with default speed of 100 Gbps
| Port Location | Number and Type of Ports | Supported Speeds | Default Speed |
|---|---|---|---|
|
PIC 0 (ports 0–7) |
8 RJ-45 ports |
1 Gbps, 2.5 Gbps, 5 Gbps, and 10 Gbps |
10 Gbps |
|
PIC 1 (ports 0–7) |
8 SFP+ ports |
1 Gbps, 10 Gbps |
10 Gbps |
|
PIC 2 (ports 0–3) |
4 SFP28 ports |
1 Gbps, 10 Gbps, and 25 Gbps |
25 Gbps |
|
PIC 3 (ports 0–1) |
2 QSFP28 ports |
40 Gbps, 100 Gbps |
100 Gbps |
|
PIC |
Interface Type |
Interfaces |
|---|---|---|
|
PIC 0 |
RJ-45 |
mge-0/0/0 – mge-0/0/7 |
|
PIC 1 |
SFP+ |
xe-0/1/0 – xe-0/1/7 |
|
PIC 2 |
SFP28 |
et-0/2/0 – et-0/2/3 |
|
PIC 3 |
QSFP28 |
et-0/3/0 – et-0/3/1 |
Follow these guidelines when you configure the port speed:
-
The Junos OS creates the copper interfaces of PIC 0 (mge interfaces) by default.
-
When using mge interfaces as fabric interfaces to form chassis clusters, avoid changing the speed.
-
PIC 0 supports 1 Gbps, 2.5 Gbps, 5 Gbps, and 10 Gbps speeds.
Use the following command to configure the speed:
set interfaces <mge-x/y/z> speed -
PIC 1 supports mixed speed: 1 Gbps and 10 Gbps. The interface is created based on the plugged-in transceiver. You need not configure the speed.
user@host# set chassis fpc 0 pic 1 pic-mode ? No valid completions
-
PIC 2 supports 3 different speeds: 1 Gbps, 10 Gbps, and 25 Gbps. Starting in Junos OS Release 24.2R1, you have two configuration options in PIC mode: 1 Gbps/10 Gbps combined and 25 Gbps. You can configure the SFP28 ports in two ways:
-
If you select 1 Gbps/10 Gbps mode, the SFP28 ports can choose either 1 Gbps or 10 Gbps.
-
If you select 25 Gbps mode, the SFP28 ports run on 25 Gbps.
user@host# set chassis fpc 0 pic 2 pic-mode ? Possible completions: 1G10G 1/10GE mode 25G 25GE mode
-
-
PIC 3 supports mixed speed, 40 Gbps or 100 Gbps. The interface is created based on the plugged-in transceiver. You need not configure the speed.
user@host# set chassis fpc 0 pic 3 pic-mode ? No valid completions
-
Use the
show interface diagnostics optics <interface-name>command to display diagnostic data and alarms.
Channelization
You can channelize QSFP28 ports into:
-
4x25 Gbps with 100GbE SFP
-
4x10 Gbps with 40GbE SFP
set chassis fpc <fpc slot> pic <pic slot> port <port number>
channel-speed <10G | 25G>
Example:
set chassis fpc 0 pic 3 port 4 channel-speed 25G
set chassis fpc 0 pic 3 port 4 channel-speed 10G
If you insert:
-
1 GbE SFP, then the devices show the interfaces as
ge. -
10 GbE SFP, then the devices show the interfaces as
xe.
Port Speed on SRX4300 Firewall
For more information about SRX4300 firewall, see SRX4300 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX4300, see Hardware Compatibility Tool.
SRX4300 includes four PICs with default speeds as given below:
-
PIC 0 with 10 GbE
-
PIC 1 with 10 GbE
-
PIC 2 with 25 GbE
-
PIC 3 with 100 GbE
|
Port Location |
Number and Type of Ports |
Supported Speeds |
Default Speed |
|---|---|---|---|
|
PIC 0 |
Eight RJ45 ports |
1 GbE, 2.5 GbE, 5 GbE, and 10 GbE |
10 GbE |
|
PIC 1 |
Eight SFP+ ports |
1 GbE and 10 GbE |
10 GbE |
|
PIC 2 |
Four SFP28 ports |
1 GbE, 10 GbE, and 25 GbE |
25 GbE |
|
PIC 3 |
Six QSFP28 ports |
40 GbE and 100 GbE |
100 GbE |
|
PIC |
Interface Type |
Naming Format |
|---|---|---|
|
PIC 0 |
RJ45 |
mge-0/0/0 - mge-0/0/7 |
|
PIC 1 |
SFP+ |
xe-0/1/0 - xe-0/1/7 |
|
PIC 2 |
SFP28 |
et-0/2/0 - et-0/2/3 |
|
PIC 3 |
QSFP28 |
et-0/3/0 - et-0/3/5 |
Follow the guidelines below to configure the port speed:
-
The copper interfaces of PIC 0 (mge interfaces) are created by default.
-
You can create the PIC 1, PIC 2, and PIC 3 (SFP+, SFP28, and QSFP28) interfaces based on the plugged-in transceivers.
-
You need not configure the speed for PIC 1. For example:
root@srx4300# set chassis fpc 0 pic 1 pic-mode ? No valid completions
-
PIC 2 supports three different speed modes: 1 GbE, 10 GbE, and 25 GbE.
Configure the speed:
root@srx4300# set chassis fpc 0 pic 2 pic-mode ? Possible completions: 10g Sets the interface mode to 10Gbps 1g 1GE-Gigabit Ethernet 25g Sets the interface mode to 25Gbps
You can select any PIC mode and all the SFP ports run on the speed corresponding to the selected mode. For example, if you select 1GbE mode, the four SFP28 ports run 1GbE speed.
You have two configuration options in PIC mode: 1GbE/10GbE combined and 25GbE. You can configure the SFP28 ports in two ways:
-
If users select 1GbE/10GbE mode, the SFP28 ports support either 1GbE or 10GbE.
-
If you select 25GbE mode, all the SFP28 ports run on 25GbE.
root@host# set chassis fpc 0 pic 2 pic-mode ? Possible completions: 1G10G 1/10GE mode 25G 25GE mode [edit] root@host#
-
-
PIC 3 supports mixed speed, 40 Gbps or 100 Gbps. The interface is created based on the plugged-in transceiver. You need not configure the speed.
user@host# set chassis fpc 0 pic 3 pic-mode ? No valid completions
-
Use the
show interface diagnostics optics <interface-name>command to display diagnostic data and alarms.
If you insert:
-
1 GbE SFP, then the devices show the interfaces as
ge. -
10 GbE SFP, then the devices show the interfaces as
xe.
Channelization
You can channelize QSFP28 ports into:
-
4x25 Gbps with 100GbE SFP
-
4x10 Gbps with 40GbE SFP
set chassis fpc <fpc slot> pic <pic slot> port <port number>
channel-speed <10G | 25G>
Example:
set chassis fpc 0 pic 3 port 4 channel-speed 25G
set chassis fpc 0 pic 3 port 4 channel-speed 10G
Port Speed on SRX4600 Firewall
For more about SRX4600 firewall, see SRX4600 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX4600, see Hardware Compatibility Tool.
See Configure Port Speed at Chassis Level for information about the following:
-
Interface naming formats for channelized and non-channelized interfaces
-
How to configure SRX Series Firewalls at port level and PIC level
For more information about SRX4600 devices, see SRX4600 Services Gateway Hardware Guide.
For information about platforms support, see Hardware Compatibility Tool (HCT).
To view the port speeds on each PIC, execute the show chassis pic command.
|
Port Location |
Number and Type of Ports |
Supported Speeds |
|---|---|---|
|
FPC0, PIC0 (ports 0–3) |
4 chassis cluster ports:
|
|
|
FPC1, PIC0 (ports 0–3) |
4 100GbE QSFP28 ports or 40GbE QSFP+ ports |
At port or PIC level:
|
|
FPC1, PIC1 (ports 0–7) |
8 10GbE SFP+ ports |
|
Follow these guidelines when you configure the speed of a port:
-
You need to reboot the chassis cluster for configuration changes (from 10 Gbps to 1 Gbps) to take effect. For more details, see speed (Chassis Cluster).
-
To configure all ports in a PIC with 40 Gbps speed, use the
set chassis fpc 1 pic 0 pic-mode 40Gcommand. -
To set only the first two 40GbE ports, use the
set chassis fpc 1 pic 0 pic-mode 40G number-of-ports 2command. This configuration sets only the first two 40GbE ports and disables the last two ports. You need to reboot the device for the configuration to take effect. -
You can channelize each 40GbE port into four 10GbE interfaces by using QSFPP-4X10-GE optics, suitable breakout cables, and the speed configuration statement.
-
Use the speed (Gigabit Ethernet interface) configuration to set 1-Gbps speed on PIC 1 ports. 1-Gbps speed is supported only in non-autonegotiation mode. If autonegotiation mode is enabled by default at the remote end, then you must disable it.
-
You can configure the interface that is already operating in 10GbE mode to operate in 1GbE mode.
-
To prevent oversubscription, configure the number of active ports operating at the configured speed by using the number-of-ports statement. The SRX4600 supports a maximum speed of 400 Gbps; the speed cannot be oversubscribed.
-
To configure 4x100GbE, use the following commands:
set chassis fpc 1 pic 0 port 0 speed 100gset chassis fpc 1 pic 0 port 1 speed 100gset chassis fpc 1 pic 0 port 2 speed 100gset chassis fpc 1 pic 0 port 3 speed 100gset chassis fpc 1 pic 1 number-of-ports 0 Or
set chassis fpc 1 pic 0 pic-mode 100Gset chassis fpc 1 pic 1 number-of-ports 0 -
If you try to commit an invalid configuration, the configuration gets committed, but the port is not activated. This is because Junos OS allows you to configure a port before a line card is inserted. You will get an error message in the output of the show chassis alarms command and also in the log messages. For example, if you configure four 100GbE interfaces with eight 10GbE interface, then the configuration is invalid.
-
SRX4600 supports high availability cluster. You need to reboot the system after changing port speed from 40 Gbps to 100 Gbps. The reboot is to make sure that the system returns to a stable high availability cluster after the port speed change.
-
The SRX4600 does not support copper SFP transceivers.
Interface Naming Conventions
|
Interface Type |
Example |
|---|---|
|
4x10GbE |
When the 40GbE port et-1/0/0 is channelized into four 10GbE interfaces, the channelized interfaces are named as follows: xe-1/0/0:0 xe-1/0/0:1 xe-1/0/0:2 xe-1/0/0:3 |
Supported Active Physical Ports on SRX4600 to Prevent Oversubscription
You can use the number-of-ports statement to configure a port as an active port.
|
PIC |
Number of Active Ports |
Active Port Number at PIC Level |
||
|---|---|---|---|---|
|
10-Gigabit Ethernet |
40-Gigabit Ethernet |
100-Gigabit Ethernet |
||
|
PIC 0 |
0 |
- |
- |
- |
|
1 |
0 |
0 |
0 |
|
|
2 |
0, 1 |
0, 1 |
0, 1 |
|
|
3 |
0, 1, 2 |
0, 1, 2 |
0, 1, 2 |
|
|
4 |
0, 1, 2, 3 |
0, 1, 2, 3 |
0, 1, 2, 3 |
|
|
PIC 1 |
0 |
- |
- |
- |
|
1 |
0 |
- |
- |
|
|
2 |
0, 1 |
- |
- |
|
|
3 |
0, 1, 2 |
- |
- |
|
|
4 |
0, 1, 2, 3 |
- |
- |
|
|
5 |
0, 1, 2, 3, 4 |
- |
- |
|
|
6 |
0, 1, 2, 3, 4, 5 |
- |
- |
|
|
7 |
0, 1, 2, 3, 4, 5 ,6 |
- |
- |
|
|
8 |
0, 1, 2, 3, 4, 5, 6, 7 |
- |
- |
|
To prevent oversubscription, you can configure the maximum number of active ports that can operate at the configured speed.
|
Port Type |
Maximum Number of Ports at PIC Mode (on PIC0 and PIC1) |
Maximum Ports Configurable at Port Mode (on PIC0 and PIC1) |
|---|---|---|
|
10GbE |
24 16 ports from PIC 0 and 8 ports from PIC 1. |
20 Refers to 12 ports from PIC 0 and 8 ports from PIC 1. |
|
40GbE |
4 Only 4 ports from PIC 0. PIC 1 supports only 10-Gbps speed. |
4 |
|
100GbE |
4 Only 4 ports from PIC 0. PIC 1 supports only 10-Gbps speed. If you configure all four PIC 0 ports as 100GbE interfaces then, the PIC 1 ports are disabled. If you then try to configure any PIC 1 port and commit your configuration, the configuration will be invalid. |
4 |
For information about oversubscription, see Port Speed.
Port Speed on SRX4700 Firewall
For more information about SRX4700 firewall, see SRX4700 Firewall Hardware Guide.
To view the supported transceivers, optical interfaces, and DAC cables on SRX4700 firewalls, see Hardware Compatibility Matrix.
SRX4700 Series Firewalls have two identical logical PICs with 14 front panel ports consisting of 1x400G, 5x100G, and 8x50G ports.
| PIC | Port Number | Port Speeds Supported | Default Speed |
|---|---|---|---|
| PIC 0 | 0 (QSFP56-DD) |
400 Gbps |
The default speed of port 0 on both PICs depends on the PIC mode. For example: If you select PIC mode A, the default speed is 400 Gbps. If you select PIC mode C, the default speed is 100 Gbps. See Configuration of PIC Mode for more details. |
|
100 Gbps |
|||
|
1-5 (QSFP28) |
100 Gbps |
100 Gbps |
|
|
6-13 (SFP56) |
50 Gbps |
50 Gbps |
|
|
PIC 1 |
0 (QSFP56-DD) |
400 Gbps |
The default speed of port 0 on both PICs depends on the PIC mode. For example: If you select PIC mode A, the default speed is 400 Gbps. If you select PIC mode C, the default speed is 100 Gbps. See Configuration of PIC Mode for more details. |
|
100 Gbps |
|||
|
1-5 (QSFP28) |
100 Gbps |
100 Gbps |
|
|
6-13 (SFP56) |
50 Gbps |
50 Gbps |
| Speed/Port | 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 400 G | Y | |||||||||||||
| 100 G | Y | Y | Y | Y | Y | Y | ||||||||
| 40 G | Y | |||||||||||||
| 50 G | Y | Y | Y | Y | Y | Y | Y | Y | ||||||
| 25 G | Y | Y | Y | Y | Y | Y | Y | Y | ||||||
| 10 G | Y | Y | Y | Y | Y | Y | Y | Y | ||||||
| 1 G | Y | Y | Y | Y | Y | Y | Y | Y |
| PIC | Transceiver Type | Speeds Supported | Example |
|---|---|---|---|
| PIC 0/PIC 1 |
QSFP56-DD |
1x400G |
|
|
1x100G |
|||
|
QSFP28 |
1x100G |
et-1/0/1 to
et-1/0/5or
|
|
|
SFP56 |
1x50G |
et-1/0/6 to
et-1/0/13or
|
- Configuration of PIC Mode
- Configuration of Port Profile Mode
- 4x10G Channelization on SRX4700 Firewall
Configuration of PIC Mode
The PIC mode allows ports to be configured with default speeds. The PIC mode allows the following five port speed combinations:
-
A-1x400G-1x100G-4x50G
-
B-1x400G-2x100G-2x50G
-
C-6x100G-2x50G
-
D-3x100G-8x50G
-
E-4x100G-6x50G
When the SRX4700 system does not have any PIC mode configuration, the system creates ports and port speeds based on the PIC mode configuration C (6x100G-2x50G).
Use the following command to configure the PIC mode:
set chassis fpc <fpc-slot> pic
<pic-slot > pic-mode
<possible-mode>Example:
[edit] user@host# set chassis fpc 1 pic 0 pic-mode ? Possible completions: A-1X400G-1X100G-4X50G Port0(400G) Port2(100G) Port6-9(50G) B-1X400G-2X100G-2X50G Port0(400G) Port2,4(100G) Port6,8(50G) C-6X100G-2X50G Port0-5(100G) Port10,12(50G) D-3X100G-8X50G Port0-2(100G) Port6-13(50G) E-4X100G-6X50G Port0-3(100G) Port7,9-13(50G) [edit]
Reboot the device using the request vmhost reboot
command as soon as you configure, delete, or change PIC mode on a PIC.
Configuration of Port Profile Mode
Port profile mode allows you to activate a set of ports based on predefined profiles (A to E). Each profile includes default port speeds. Port profile allows ports to be configured with all the supported speeds other than the default speed. You can adjust the speed of individual ports after activation, enhancing the flexibility compared with the PIC mode.
The following are the pre-defined port profiles:
- A: 1x400G (QSFP56-DD), 1x100G (QSFP28), 4x50G (SFP56)
- B: 1x400G (QSFP56-DD), 2x100G (QSFP28), 2x50G (SFP56)
- C: 6x100G (QSFP28), 2x50G (SFP56)
- D: 3x100G (QSFP28), 8x50G (SFP56)
- E: 4x100G (QSFP28), 6x50G (SFP56)
| Port Number | Profile A | Profile B | Profile C | Profile D | Profile E |
|---|---|---|---|---|---|
| Default Speed | Configurable Speed | Configurable Speed | Configurable Speed | Configurable Speed | Configurable Speed |
| 0 (400 G) | (400 G/100 G/40 G) | (400 G/100 G/40 G) | (100 G) | (100G) | (100G) |
| 1 (100 G) | (100G) | (100G) | (100G) | ||
| 2 (100 G) | (100G) | (100G) | (100G) | (100G) | (100G) |
| 3 (100 G) | (100G) | (100G) | |||
| 4 (100 G) | (100G) | (100G) | |||
| 5 (100 G) | (100G) | ||||
| 6 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1G) | (50 G/25 G/10 G/1 G) | ||
| 7 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | ||
| 8 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | ||
| 9 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | ||
| 10 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | ||
| 11 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | |||
| 12 (50 G) | (50 G/25 G/10 G/1 G) | (50 G/25 G/10 G/1 G) | (50 GbE/25 GbE/10 GbE/1 G) | ||
| 13 (50 G) | (50 GbE/25 GbE/10 GbE/1 G) | (50 GbE/25 GbE/10 GbE/1 G) |
Configure the port profile from A to E:
set chassis fpc < fpc-slot > pic < pic-slot > port-profile < A-E profile >user@host# set chassis fpc 1 pic 0 port-profile ? Possible completions: A-1X400G-1X100G-4X50G Port0(400G/100G/40G) Port2(100G) Port6-9(50G/25G/10G/1G) B-1X400G-2X100G-2X50G Port0(400G/100G/40G) Port2,4(100G) Port6,8(50G/25G/10G/1G) C-6X100G-2X50G Port0-5(100G) Port10,12(50G/25G/10G/1G) D-3X100G-8X50G Port0-2(100G) Port6-13(50G/25G/10G/1G) E-4X100G-6X50G Port0-3(100G) Port7,9-13(50G/25G/10G/1G)
user@host# set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50Guser@host# show chassis fpc 1 { pic 0 { port-profile A-1X400G-1X100G-4X50G; } }-
Configure port profile and specific port speed:
set chassis fpc < fpc-slot > pic < pic-slot > port-profile < A-E profile > port-num <port-number> speed <port-speed>user@host# set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num ? Possible completions: <slot> Refer 'show chassis pic port-profile' for valid port. Commit port-profile change first (0..13) user@host# run show chassis pic port-profile fpc-slot 1 pic-slot 0 Port profile speed information: Current port profile: A-1X400G-1X100G-4X50G Port Current Speed Default Speed Configurable Speed 0 400GE 400GE 40GE, 100GE, 400GE 2 100GE 100GE 100GE 6 50GE 50GE 1GE, 10GE, 25GE, 50GE* 7 50GE 50GE 1GE, 10GE, 25GE, 50GE* 8 50GE 50GE 1GE, 10GE, 25GE, 50GE* 9 50GE 50GE 1GE, 10GE, 25GE, 50GE*
Paired ports (6,8) and (7,9) must be configured to the same speed.
user@host# set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 6 speed 10guser@host# set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 8 speed 10g - Delete speed of port
delete chassis fpc < fpc-slot > pic < pic-slot > port-profile < A-E profile > port-num <port-number>user@host# show chassis | display set set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 6 speed 10g set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 8 speed 10g set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 7 speed 25g set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 9 speed 25g user@host# delete chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 6 user@host# delete chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 8 [edit] user@host# show chassis | display set set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 7 speed 25g set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 9 speed 25g user@host# show chassis fpc 1 { pic 0 { port-profile A-1X400G-1X100G-4X50G { port-num 7 { speed 25g; } port-num 9 { speed 25g; } } } } -
Delete port profile and configured port speed
delete chassis fpc < fpc-slot > pic < pic-slot > port-profile < A-E profile >user@host# show chassis | display set set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 7 speed 25g set chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G port-num 9 speed 25g user@host# delete chassis fpc 1 pic 0 port-profile A-1X400G-1X100G-4X50G user@host# show chassis /* delete profile and ports, speed under the port-profile */
-
To show the current port profile:
show chassis pic port-profile fpc-slot <1> pic-slot < 0/1 >user@host# show chassis fpc 1 pic 1 | display set set chassis fpc 1 pic 1 port-profile A-1X400G-1X100G-4X50G port-num 6 speed 1g set chassis fpc 1 pic 1 port-profile A-1X400G-1X100G-4X50G port-num 8 speed 1g set chassis fpc 1 pic 1 port-profile A-1X400G-1X100G-4X50G port-num 7 speed 10g set chassis fpc 1 pic 1 port-profile A-1X400G-1X100G-4X50G port-num 9 speed 10g
user@host> show chassis pic port-profile fpc-slot 1 pic-slot 1 Port profile speed information: Current port profile: A-1X400G-1X100G-4X50G Port Current Speed Default Speed Configurable Speed 0 400GE 400GE 40GE, 100GE, 400GE 2 100GE 100GE 100GE 6 1GE 50GE 1GE, 10GE, 25GE, 50GE* 7 10GE 50GE 1GE, 10GE, 25GE, 50GE* 8 1GE 50GE 1GE, 10GE, 25GE, 50GE* 9 10GE 50GE 1GE, 10GE, 25GE, 50GE* * Note: Paired ports (6,8), (7,9) must be configured to the same speed.
Follow the guidelines below while configuring the port profile mode on a PIC:
-
Restart chassis-control using the operational mode command
restart chassis-controlas soon as you configure, delete, or switch to the port profile or PIC mode on a PIC. -
You can configure only one port profile on a PIC at a time.
-
You need not reboot or restart chassis-control when a port speed is configured, switched, or deleted within a port profile.
-
PIC and port profile modes are mutually exclusive. You cannot configure both PIC mode and port profile mode on a PIC simultaneously.
4x10G Channelization on SRX4700 Firewall
SRX4700 firewall supports channelization on port 0 in port-profile configuration D. Channelization support is with a fixed configuration of 1-4 subport range.
Note the following about port channelization on port 0 of 1x400G/4x100G/8x50G PIC:
-
4x10G port channelization is supported only on port 0 in port-profile D.
-
Port channelization is supported with a fixed configuration of range 1-4 subports.
-
Perform a single commit for:
-
Configuration or deletion of port 0 to 4x10G, 3x10G, 2x10G, or 1x10G.
-
Configuration or deletion of port unused port on port 1.
-
Use the following command to configure channelization:
-
To configure the port-profile and specific port speed and number of subports:
set chassis fpc < fpc-slot > pic < pic-slot > port-profile < D profile > port-num <port-number> speed <port-speed> number-of-subports < number-of-sub-ports> -
To configure the port-profile and port unused:
set chassis fpc < fpc-slot > pic < pic-slot > port-profile < D profile > port <port-number> unused
-
To delete the port-profile and its configured port speed:
delete chassis fpc < fpc-slot > pic < pic-slot > port-profile < D profile > port <port-number>
Example:
-
Port profile configuration
root@srx4700> show chassis pic port-profile fpc-slot 1 pic-slot 0 Port profile speed information: Current port profile: D-3X100G-8X50G Port Current Speed Default Speed Configurable Speed 0 10GE 100GE 4x10GE*, 100GE 1 Unused 100GE 100GE 2 100GE 100GE 100GE 6 50GE 100GE 1GE, 10GE, 25GE, 50GE* 7 50GE 100GE 1GE, 10GE, 25GE, 50GE* 8 50GE 100GE 1GE, 10GE, 25GE, 50GE* 9 50GE 100GE 1GE, 10GE, 25GE, 50GE* 10 50GE 100GE 1GE, 10GE, 25GE, 50GE* 11 50GE 100GE 1GE, 10GE, 25GE, 50GE* 12 50GE 100GE 1GE, 10GE, 25GE, 50GE* 13 50GE 100GE 1GE, 10GE, 25GE, 50GE*
Paired ports (6,8), (7,9), (10,12), (11,13) must be configured to the same speed.
-
4x10G port channelization
root@srx4700 # set chassis fpc 1 pic 0 port-profile D-3X100G-8X50G port-num 1 unused root@srx4700 # set chassis fpc 1 pic 0 port-profile D-3X100G-8X50G port-num 0 speed 10g number-of-sub-ports 4 root@srx4700 # commit
root@srx4700# show chassis fpc 1 { pic 0 { port-profile D-3X100G-8X50G { port-num 1 { unused; } port-num 0 { speed 10g; number-of-sub-ports 4; } } } -
Configuration deletion
root@srx4700 # delete chassis fpc 1 pic 0 port-profile D-3X100G-8X50G port-num 0 root@srx4700 # delete chassis fpc 1 pic 0 port-profile D-3X100G-8X50G port-num 1 root@srx4700 #commit root@srx4700 # show chassis
Port Speed on SRX5K-IOC4-MRATE
To view the supported transceivers, optical interfaces, and DAC cables on SRX5K-IOC4-MRATE, see Hardware Compatibility Tool.
Each of the twelve ports of PIC 0 and PIC 1 of an SRX5K-IOC4-MRATE supports port speeds of 10 Gbps and 40 Gbps. However, only ports 2 and 5 of both the PICs support port speed of 100 Gbps. You can choose to configure all supported ports of the SRX5K-IOC4-MRATE to operate at the same supported speed or configure all the ports at different supported speeds.
| PIC | Ports | Supported Speeds |
|---|---|---|
| PIC 0 | QSFP+ (0, 1, 3, 4, 6, 7, 8, 9, 10, 11) | 10 Gbps, 40 Gbps |
| QSFP+ (2 and 5) | 10 Gbps, 40 Gbps, and 100 Gbps | |
| PIC 1 | QSFP+ (0, 1, 3, 4, 6, 7, 8, 9, 10, 11) | 10 Gbps, 40 Gbps |
| QSFP+ (2 and 5) | 10 Gbps, 40 Gbps, and 100 Gbps |
Follow the guidelines below while configuring port speed:
You can configure port speed at the PIC level to set all SRX5K-IOC4-MRATE ports to the same speed. Configure the PIC to operate at a supported speed, and all its ports will match the configured speed. For example:
Configuring PIC 0 at 100-Gbps enables ports 2 and 5 to operate at 100-Gbps, while other ports are disabled.
Configuring PIC 0 at 10-Gbps or 40-Gbps enables all ports to operate at those speeds.
To prevent oversubscription, specify the number of active physical ports operating at 10-Gbps, 40-Gbps, and 100-Gbps speeds.
You cannot configure 1 Gbps speed at PIC and port levels. Use the
speedstatement to set a 10-Gbps port to operate at 1 Gbps speed. After committing the configuration, the port operates at 1 Gbps speed. However, theshow interfacecommand displays the speed as 1 Gbps. Configuring 1-Gbps speed shows 1 Gbps in the Speed Configuration field, while 10-Gbps speed displays AUTO.You can configure port speed at the port level for the SRX5K-IOC4-MRATE. Each port operates at a different supported speed.
The SRX5K-IOC4-MRATE supports 480 Gbps aggregate bandwidth. Each of its two PICs has a bandwidth limit of 240 Gbps. Configurations exceeding 240 Gbps per PIC are not supported.
Configure Port Speed at PIC Level
To configure port speed at the PIC level:
In configuration mode, navigate to the
[edit chassis fpc fpc-slot pic pic-number]hierarchy level.[edit ] user@host# edit chassis fpc fpc-slot pic pic-number
For example:
[edit ] user@host# edit chassis fpc 4 pic 0
- Configure the
pic-modestatement to set the operating speed for the PIC's ports. According to your requirements, you can choose from the options10G,40G, or100G.[edit chassis fpc fpc-slot pic pic-number] user@host# set pic-mode pic-speed
For example:
[edit chassis fpc 4 pic 0] user@host# set pic-mode 10G
- (Optional) To prevent oversubscription, you can choose to configure the number of ports that operate at the mode that is configured in Step 2.
[edit chassis fpc fpc-slot pic pic-number] user@host# set number-of-ports number-of-active-physical-ports
For example:
[edit chassis fpc 4 pic 0] user@host# set number-of-ports 6
Verify the configuration.
[edit chassis fpc 4 pic 0] user@host# show pic-mode 10G; number-of-ports 6;
Commit your configuration changes.
If the number-of-ports statement is not configured, ports supporting the speed in Step 2 are enabled. For 10 GbE or 40 GbE, ports 0–5 are enabled. For 100 GbE, ports 2 and 5 are enabled. Use the number-of-ports statement to disable specific ports.
Ports Configured ( |
Active Physical Ports for Different Configured Speeds |
||
|---|---|---|---|
10-Gigabit |
40-Gigabit |
100-Gigabit |
|
1 |
0 |
0 |
2 |
2 |
0, 1 |
0, 1 |
2, 5 |
3 |
0, 1, 2 |
0, 1, 2 |
2, 5 |
4 |
0, 1, 2, 3 |
0, 1, 2, 3 |
2, 5 |
5 |
0, 1, 2, 3, 4 |
0, 1, 2, 3, 4 |
2, 5 |
6 |
0, 1, 2, 3, 4, 5 |
0, 1, 2, 3, 4, 5 |
2, 5 |
Configure Port Speed at Port Level
In configuration mode, navigate to the
[edit chassis fpc fpc-slot pic pic-number]hierarchy level.[edit ] user@host# edit chassis fpc fpc-slot pic pic-number
For example:
[edit ] user@host# edit chassis fpc 4 pic 0
- To indicate the speed at which the ports operate, configure the
speedstatement for the desired ports. According to your requirements, you can choose the10g,40g, or100gspeed options.[edit chassis fpc fpc-slot pic pic-number] user@host# set port port-number speed (10g | 40g | 100g)
For example:
[edit chassis fpc 4 pic 0] user@host# set port 0 speed 10g user@host# set port 1 speed 10g user@host# set port 2 speed 100g user@host# set port 3 speed 40g
- Verify the configuration.
[edit chassis fpc 4 pic 0] user@host# show port 0 { speed 10g; } port 1 { speed 10g; } port 2 { speed 100g; } port 3 { speed 40g; }You can verify the 40-Gbps and 100-Gbps ports configured as 10-Gbps by using the
show interfaces tersecommand.[edit chassis fpc 10 pic 0 port 0] + speed 10g; user@host# show interfaces terse .. xe-10/0/0:0 up down xe-10/0/0:1 up down xe-10/0/0:2 up down xe-10/0/0:3 up down
Commit your configuration changes.
Note the following when configuring port speed on an SRX5K-IOC4-MRATE:
If port speed is not configured, all ports of the SRX5K-IOC4-MRATE operate as four 10-Gigabit Ethernet interfaces by default. Therefore, when booting the MPC:
If port speed is not configured or if invalid port speeds are configured, each port operates as four 10-Gigabit Ethernet interfaces. An alarm is generated to indicate that the ports of the SRX5K-IOC4-MRATE are operating as four 10-Gigabit Ethernet interfaces.
If valid port speeds are configured, the MPC PICs operate at the configured speed.
When you change an existing port speed configuration at the port level, you must reset the SRX5K-IOC4-MRATE PIC for the configuration to take effect. An alarm is generated indicating the change in port speed configuration.
When you change an existing port speed configuration with an invalid port speed configuration, an alarm is generated indicating that the port speed configuration is invalid. The MPC continues to operate using the previously configured valid port speed configuration. However, if the MPC or PIC is restarted with the committed invalid port configuration, all ports of the MPC operate as four 10-Gigabit Ethernet interfaces by default.
You cannot configure port speed at the PIC level and the port level simultaneously. Error messages are displayed when you try to commit such configurations.
When you configure port speed at the port level, only the configured ports are enabled. Other ports are disabled.
Logical interfaces can be created only on ports that are enabled.
You must restart the chassis when you change the port profile configuration.