User manual JUNIPER NETWORKS SRX 1400 SERVICES GATEWAY DATASHEET

[. . . ] Instead of binding network traffic and services to specific CPU cores and processing resources in a fixed or rigid manner, as other vendors do, Dynamic Services Architecture balances traffic session processing work load dynamically within a pool formed from all available resources. This avoids an all-too-common situation experienced on general-purpose computing platforms used for security, where a subset of resources operate at or near their maximum limits while other resources are under-used or idle. 1 The Dynamic Services Architecture in SRX Series Services Gateways is what enables Juniper to deliver massive scalability, market-leading throughput, and deterministic performance with multiple security services operating concurrently. wIth the chassis-based SRX Series gateways, additional processing cards can be easily installed adding to the resource pool as your traffic grows over time. SRX1400 Architecture and Key Components Based on the time-tested, proven design of the SRX3000 line, the SRX1400 delivers deterministic performance optimized for 10GbE. A functional SRX1400 system consists of a base configuration together with a Network and Services Processing Card (NSPC) designed specifically for the SRX1400, or a combination of base configuration together with interchangeable SRX3000 line processing cards. [. . . ] The 1000BASE-X ports accept small form-factor pluggable (SFP) transceivers which are available in copper, short reach (SX) multimode (MM fiber) and long reach (LX) single mode (SM fiber). XGE-Base System The XGE-Base System contains three ports of 10GbE and nine ports of GbE. Six of the nine GbE ports are 10/100/1000 copper (RJ45) and three are 1000BASE-X. Two of the three 1000BASE-X ports can be used for either HA cluster control or as data ports. The 1000BASE-X ports accept SFP transceivers which are available in copper, SX (MM fiber) and LX (SM fiber). The three 10GbE ports accept SFP+ transceivers which are available in SR (MM fiber), LR (SM fiber), and ER (SM fiber). In addition to a base system, processing resources--either one integrated NSPC, or the combination of one SRX3000 line NPC, one SRX3000 line SPC, and one double wide tray--must be installed in order to have an operational system. 2 Options Optional modules that can be added include one additional (redundant) power supply (AC or DC ) and one IOC for additional 2 I/O Cards (IOC) Supporting a wide variety of use cases and to accommodate interfacing between different Ethernet standards, the SRX1400 provides for additional front panel I/O to complement the excellent port density provided in the base system. SRX1400 and SRX3000 line of products use the same IOCs interchangeably. Each SRX1400 Services Gateway can accommodate one additional IOC; either 16 gigabit interfaces (16 x 10/100/1000 copper GbE or 16 x 1000BASE-X fiber GbE), or two 10GbE interfaces (2 x 10GbE XFP Ethernet). Ethernet connectivity. The SRX3000 line and SRX1400 use the same interchangeable IOC modules. The SRX1400 is designed for future expansion, including the ability to accommodate nextgeneration silicon from Juniper Networks. SRX1400 NSPC1 Providing the power inside the SRX1400, the integrated NSPC is optimized to perform all packet processing and inspection for all available services on the platform. The Juniper Dynamic Services Architecture manages the multiple cores of processing power on the NSPC as one pool or reservoir of resources, and dynamically allocates resources to services as needed. To ensure maximum processing performance and flexibility, the SRX Series high-end products uses network processors (NPCs) to distribute inbound and outbound traffic to SPCs and IOCs, apply QoS, and enforce protection from DoS/DDoS attack scenarios. Power Supplies The SRX1400 accommodates one or two AC or DC2 power supply modules. Each individual power supply is fully capable of furnishing all of the power the SRX1400 needs. The second power supply is redundant to the first and is used to increase availability in the event of a power supply failure. Power supplies are hotswappable, Network Equipment Building System (NEBS-III) ready, and accessible from the front panel. SRX3000 Line NPC and SPC The SRX1400 will interoperate with the SRX3000 NPC and SPC cards. In order to use the SRX3000 line NPC and SRX3000 SPC in the SRX1400, it is necessary to use the optional double wide tray. Features and Benefits Loaded with features and optimized for 10GbE networks, the SRX1400 has many attributes that make it superior to other products on the market: Table 1: SRX1400 Features and Benefits FEAtuRE DESCRIPtION BENEFIt Professional-grade networking security services · Purpose-built platform for security built from the ground up to provide many years of professionalgrade, high-performance, high-availability networking security services. · One Junos OS release to manage across entire network (routing, switching, security) and proven over time in the most demanding environments. · Powerful command-line interface (CLI) and extensive scripting capability. · Network security solutions you can trust because they work as expected, day in and day out, year after year. · Single source that takes full responsibility for networking security equipment, service and support. · Radically simplifies and reduces total cost of ownership of large scale deployments, particularly Long Term Evolution (LTE). · Reduce latency, performance, and availability impacts from multiple devices. · Reduce operation and maintenance (O&M) costs with single, integrated policy and device management system, common spares, and technical training. [. . . ] If the SRX1400 NSPC is not installed, then separate SRX3000 line NPC and SPC cards mounted on a double-wide tray must be installed in order for the SRX1400 system to function properly. 3 Exceptions: - Section 7. 5A Multimedia Broadcast and Multicast Services (MBMS) messages - Section 7. 5B Mobile Station (MS) information change messages - Section 7. 3. 12 Initiate secondary PDP context from gateway GSN (GGSN) 4 Not supported in Junos OS 10. 4 5 AC power cord for appropriate region is included in base system. 1 About Juniper Networks Juniper Networks, Inc. Juniper offers a high-performance network infrastructure that creates a responsive and trusted environment for accelerating the deployment of services and applications over a single network. Additional information can be found at www. juniper. net. C13 Straight Power Cables5 CBL-JX-PwR-UK CBL-JX-PwR-US CBL-JX-PwR-AU CBL-JX-PwR-CH CBL-JX-PwR-EU CBL-JX-PwR-IT CBL-JX-PwR-JP Power cord, AC, Great Britain and Ireland, C19 at 70-80 mm, 13A/250 v, 2. 5 m Power cord, AC, Japan/US, NEMA 5-15 to C19 at 70-80 mm, 15A/125 v, 2. 5 m Power cord, AC, Australia/New Zealand, C19 at 70-80 mm, 15A/250 v, 2. 5 m Power cord, AC, China, C19, 16A/250 v, 2. 5 m Power cord, AC, Continental Europe, C19, 16A/250 v, 2. 5 m Power cord, AC, Italy, C19 at 70-80 mm, 16A/250 v, 2. 5 m Power cord, AC, Japan, NEMA 6-20 to C19, 16A/250 v, 2. 5 m Corporate and Sales headquarters Juniper Networks, Inc. [. . . ]