Juniper JSA7800 User manual

Juniper Secure Analytics 7800 Hardware

Guide

Published

2020-06-29

Juniper Networks, Inc.

1133 Innovation Way

Sunnyvale, California 94089

USA

408-745-2000

www.juniper.net

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in

the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks

are the property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right

to change, modify, transfer, or otherwise revise this publication without notice.

Juniper Secure Analytics 7800 Hardware Guide

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related

limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with)

Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement

(“EULA”) posted at https://support.juniper.net/support/eula/. By downloading, installing or using such software, you

agree to the terms and conditions of that EULA.

ii

Table of Contents

About the Documentation | vii

Documentation and Release Notes | vii

Documentation Conventions | vii

Documentation Feedback | x

Requesting Technical Support | x

Self-Help Online Tools and Resources | xi

Creating a Service Request with JTAC | xi

Overview

1

JSA7800 System Overview | 13

JSA7800 Appliance Description | 13

Benefits of the JSA7800 Appliance | 13

JSA7800 Appliance Transceiver Interface | 14

Field-Replaceable Units on the JSA7800 Appliance | 15

JSA7800 Chassis | 15

JSA7800 Appliance Front Panel Description | 16

JSA7800 Appliance Back Panel Description | 18

Cooling System and Airflow in a JSA7800 Device | 21

Fan Module Status | 21

Site Planning, Preparation, and Specifications

2

JSA7800 Site Guidelines and Requirements | 24

General Site Installation Guidelines for the JSA7800 Appliance | 24

JSA7800 Appliance Physical Specifications | 25

JSA7800 Appliance Rack Requirements | 26

Additional Hardware Requirements | 27

iii

Initial Installation and Configuration

3

JSA7800 Installation Overview | 30

Overview of Installing the JSA7800 Appliance in a Rack | 30

Tools and Parts Required for Installing the JSA7800 Appliance | 30

Installing the JSA7800 in a Rack | 31

Installing the JSA7800 Appliance | 31

Installing the JSA7800 Appliance Using Front-and-Rear-Mounting Flush to a Rack | 34

Connecting the JSA7800 to Power | 38

Connecting the JSA7800 Appliance to Ground | 38

Connecting the JSA7800 Appliance to a DC Power Source | 39

Connecting the JSA7800 Appliance to a Management Device | 40

Configuring the JSA7800 | 42

Configuring Basic Settings on the JSA7800 Appliance | 43

Accessing the JSA Interface | 45

Maintaining Components

4

Maintaining the JSA7800 RAID Array | 48

Maintaining JSA7800 Power System | 48

Maintaining the JSA7800 Power Supply | 49

Replacing an AC Power Supply on the JSA7800 Appliance | 50

Replacing AC Power Supply Cables on the JSA7800 Appliance | 50

Replacing a DC Power Supply on the JSA7800 Appliance | 51

Replacing DC Power Supply Cables on the JSA7800 Appliance | 52

Troubleshooting Hardware

5

Contacting Juniper Networks Technical Assistance Center | 55

Safety and Compliance Information

6

Definitions of Safety Warning Levels | 58

General Safety Guidelines and Warnings | 61

Restricted Access Warning | 63

iv

Qualified Personnel Warning | 66

Prevention of Electrostatic Discharge Damage | 66

Warning Statement for Norway and Sweden | 68

Fire Safety Requirements | 68

Fire Suppression | 68

Fire Suppression Equipment | 68

Installation Instructions Warning | 70

Chassis Lifting Guidelines for the JSA7800 Appliance | 70

Ramp Warning | 71

Rack-Mounting and Cabinet-Mounting Warnings | 72

Grounded Equipment Warning | 78

Laser and LED Safety Guidelines and Warnings | 78

General Laser Safety Guidelines | 79

Class 1 Laser Product Warning | 80

Class 1 LED Product Warning | 81

Laser Beam Warning | 82

Radiation from Open Port Apertures Warning | 83

Maintenance and Operational Safety Guidelines and Warnings | 84

Battery Handling Warning | 85

Jewelry Removal Warning | 86

Lightning Activity Warning | 88

Operating Temperature Warning | 89

Product Disposal Warning | 91

Action to Take After an Electrical Accident | 92

General Electrical Safety Guidelines and Warnings | 92

AC Power Electrical Safety Guidelines | 93

AC Power Disconnection Warning | 95

DC Power Electrical Safety Guidelines | 96

v

DC Power Disconnection Warning | 98

DC Power Grounding Requirements and Warning | 100

DC Power Wiring Sequence Warning | 102

Multiple Power Supplies Disconnection Warning | 105

TN Power Warning | 106

Agency Approvals for the JSA7800 Appliance | 106

Compliance Statements for EMC Requirements for the JSA7800 Appliance | 107

Canada | 108

European Community | 108

Japan | 109

Korea | 109

United States | 109

FCC Part 15 Statement | 110

Compliance Statements for Acoustic Noise for the JSA7800 Appliance | 110

vi

About the Documentation

IN THIS SECTION

Documentation and Release Notes | vii

Documentation Conventions | vii

Documentation Feedback | x

Requesting Technical Support | x

Use this guide to install hardware and perform initial software configuration, routine maintenance, and

troubleshooting for JSA7800.

After completing the installation and basic configuration procedures covered in this guide, refer to the

JSA software documentation for information about further software configuration. See Juniper Secure

Analytics.

Documentation and Release Notes

To obtain the most current version of all Juniper Networks

®

technical documentation, see the product

documentation page on the Juniper Networks website at https://www.juniper.net/documentation/.

If the information in the latest release notes differs from the information in the documentation, follow the

product Release Notes.

Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts.

These books go beyond the technical documentation to explore the nuances of network architecture,

deployment, and administration. The current list can be viewed at https://www.juniper.net/books.

Documentation Conventions

Table 1 on page viii defines notice icons used in this guide.

vii

Table 1: Notice Icons

DescriptionMeaningIcon

Indicates important features or instructions.Informational note

Indicates a situation that might result in loss of data or hardware

damage.

Caution

Alerts you to the risk of personal injury or death.Warning

Alerts you to the risk of personal injury from a laser.Laser warning

Indicates helpful information.Tip

Alerts you to a recommended use or implementation.Best practice

Table 2 on page viii defines the text and syntax conventions used in this guide.

Table 2: Text and Syntax Conventions

ExamplesDescriptionConvention

To enter configuration mode, type

the configure command:

user@host> configure

Represents text that you type.Bold text like this

user@host> show chassis alarms

No alarms currently active

Represents output that appears on

the terminal screen.

Fixed-width text like this

•

A policy term is a named structure

that defines match conditions and

actions.

•

Junos OS CLI User Guide

•

RFC 1997, BGP Communities

Attribute

•

Introduces or emphasizes important

new terms.

•

Identifies guide names.

•

Identifies RFC and Internet draft

titles.

Italic text like this

viii

Table 2: Text and Syntax Conventions (continued)

ExamplesDescriptionConvention

Configure the machine’s domain

name:

[edit]

root@# set system domain-name

domain-name

Represents variables (options for

which you substitute a value) in

commands or configuration

statements.

Italic text like this

•

To configure a stub area, include

the stub statement at the [edit

protocols ospf area area-id]

hierarchy level.

•

The console port is labeled

CONSOLE.

Represents names of configuration

statements, commands, files, and

directories; configuration hierarchy

levels; or labels on routing platform

components.

Text like this

stub <default-metric metric>;Encloses optional keywords or

variables.

< > (angle brackets)

broadcast | multicast

(string1 | string2 | string3)

Indicates a choice between the

mutually exclusive keywords or

variables on either side of the symbol.

The set of choices is often enclosed

in parentheses for clarity.

| (pipe symbol)

rsvp { # Required for dynamic MPLS

only

Indicates a comment specified on the

same line as the configuration

statement to which it applies.

# (pound sign)

community name members [

community-ids ]

Encloses a variable for which you can

substitute one or more values.

[ ] (square brackets)

[edit]

routing-options {

static {

route default {

nexthop address;

retain;

}

Identifies a level in the configuration

hierarchy.

Indention and braces ( { } )

Identifies a leaf statement at a

configuration hierarchy level.

; (semicolon)

GUI Conventions

ix

Table 2: Text and Syntax Conventions (continued)

ExamplesDescriptionConvention

•

In the Logical Interfaces box, select

All Interfaces.

•

To cancel the configuration, click

Cancel.

Represents graphical user interface

(GUI) items you click or select.

Bold text like this

In the configuration editor hierarchy,

select Protocols>Ospf.

Separates levels in a hierarchy of

menu selections.

> (bold right angle bracket)

Documentation Feedback

We encourage you to provide feedback so that we can improve our documentation. You can use either

of the following methods:

•

Online feedback system—Click TechLibrary Feedback, on the lower right of any page on the Juniper

Networks TechLibrary site, and do one of the following:

•

Click the thumbs-up icon if the information on the page was helpful to you.

•

Click the thumbs-down icon if the information on the page was not helpful to you or if you have

suggestions for improvement, and use the pop-up form to provide feedback.

•

E-mail—Send your comments to [email protected]. Include the document or topic name,

URL or page number, and software version (if applicable).

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC).

If you are a customer with an active Juniper Care or Partner Support Services support contract, or are

x

covered under warranty, and need post-sales technical support, you can access our tools and resources

online or open a case with JTAC.

•

JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User

Guide located at https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.

•

Product warranties—For product warranty information, visit https://www.juniper.net/support/warranty/.

•

JTAC hours of operation—The JTAC centers have resources available 24 hours a day, 7 days a week,

365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called

the Customer Support Center (CSC) that provides you with the following features:

•

Find CSC offerings: https://www.juniper.net/customers/support/

•

Search for known bugs: https://prsearch.juniper.net/

•

Find product documentation: https://www.juniper.net/documentation/

•

Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/

•

Download the latest versions of software and review release notes:

https://www.juniper.net/customers/csc/software/

•

Search technical bulletins for relevant hardware and software notifications:

https://kb.juniper.net/InfoCenter/

•

Join and participate in the Juniper Networks Community Forum:

https://www.juniper.net/company/communities/

•

Create a service request online: https://myjuniper.juniper.net

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool:

https://entitlementsearch.juniper.net/entitlementsearch/

Creating a Service Request with JTAC

You can create a service request with JTAC on the Web or by telephone.

•

Visit https://myjuniper.juniper.net.

•

Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

For international or direct-dial options in countries without toll-free numbers, see

https://support.juniper.net/support/requesting-support/.

xi

1

CHAPTER

Overview

JSA7800 System Overview | 13

JSA7800 Chassis | 15

Cooling System and Airflow in a JSA7800 Device | 21

JSA7800 System Overview

IN THIS SECTION

JSA7800 Appliance Description | 13

Benefits of the JSA7800 Appliance | 13

JSA7800 Appliance Transceiver Interface | 14

Field-Replaceable Units on the JSA7800 Appliance | 15

JSA7800 Appliance Description

The Juniper Secure Analytics 7800 (JSA7800) is an enterprise and carrier-class appliance that provides a

scalable network security management solution for medium-sized companies up to large global organizations.

JSA7800 collects, processes, aggregates, and stores network data in real-time and uses this data to manage

network security by providing real-time information and monitoring, alerts and offenses, and responses

to network threats. The appliance uses a modular architecture that provides real-time centralized visibility

of your IT infrastructure that you can use for threat detection and prioritization. As JSA7800 interacts

with crucial network devices and servers, it is normally placed in a trusted or highly secured LAN segment.

The JSA7800 appliance is a 2-rack-unit (2-U), rack-mountable. It supports hot-swappable dual-AC (or

optional dual-DC) power supplies with redundant configuration, sixteen hot-swappable hard drives that

support RAID, 128-GB memory, and two 10-Gigabit SFP+ interfaces and four 1-Gigabit Ethernet interfaces.

SEE ALSO

General Site Installation Guidelines for the JSA7800 Appliance | 24

JSA7800 Installation Overview | 30

Benefits of the JSA7800 Appliance

•

Risk management and threat mitigation—Provides real-time surveillance to identify environmental

anomalies in the network, attack paths, and sources of a threat through effective analysis of networks,

events, and audit log files. The appliance proactively quantifies and minimizes risks from vulnerabilities,

13

configuration errors, and anomalous network activity, preventing attacks that target high value assets

and data.

•

Compliance monitoring and reporting—Provides predefined templates or compliance rules that brings

in accountability, transparency, and measurability to an IT security program. Any deviations from regulatory

mandates are reported.

•

Log analytics—Provides scalable log analytics by enabling distributed log collection across an organization,

and a centralized view of the information. JSA7800 and maintains logs and flow information from crucial

network devices and servers such as Intrusion Detection System (IDS) and Intrusion Prevention System

(IPS), firewalls, routers, switches, database servers, Active Directory (AD) servers, DNS and DHCP servers,

and so on.

SEE ALSO

General Site Installation Guidelines for the JSA7800 Appliance | 24

JSA7800 Installation Overview | 30

JSA7800 Appliance Description | 13

JSA7800 Appliance Transceiver Interface

Table 3 on page 14 lists the different types of transceiver interfaces available on the JSA7800 appliance.

Table 3: JSA7800 Appliance Transceiver Interface Types

DescriptionCard ModelTransceiver Type

Dual Rate 10GBASE-LR/1000BASE-LXUNIV-SFPP-DUAL-SRSFP+

Dual Rate 10GBASE-SR/1000BASE-SXUNIV-SFPP-DUAL-LR

SEE ALSO

JSA7800 Appliance Description | 13

JSA7800 Appliance Physical Specifications | 25

JSA7800 Appliance Back Panel Description | 18

14

Field-Replaceable Units on the JSA7800 Appliance

Field-replaceable units (FRUs) are hardware components that can be replaced at the customer site.

Hot-swappable FRUs are the components that you can remove and replace without powering off the

device or disrupting the functions of the device.

FRUs supported by the JSA7800 appliance includes the power supply and RAID array.

SEE ALSO

Replacing an AC Power Supply on the JSA7800 Appliance | 50

Replacing AC Power Supply Cables on the JSA7800 Appliance | 50

Replacing a DC Power Supply on the JSA7800 Appliance | 51

Replacing DC Power Supply Cables on the JSA7800 Appliance | 52

SEE ALSO

JSA7800 Appliance Description | 13

JSA7800 Appliance Back Panel Description | 18

JSA7800 Appliance Back Panel Description

Figure 3 on page 19 shows the back panel components of the JSA7800 appliance.

18

Figure 3: JSA7800 Back Panel

Table 6 on page 19 lists the back panel components of the JSA7800 appliance.

Table 6: JSA7800 Back Panel Components

DescriptionComponentsCallout

Provides power to all components.Power supply1

1 RJ-45 dedicated IPMI LAN port.Dedicated IPMI LAN port2

4 RJ-45 Gigabit Ethernet LAN ports.

Top left: eno3; top right: eno4

Bottom left: eno1; bottom right: eno2

NOTE: You can choose any GB ports as

the management port.

GB ports3

2 SFP+ 10GbE LAN ports. The top port is

enp4s0f0 and the bottom port is enp4s0f1.

10 GbE SFP+ ports4

1 VGA port.

NOTE: This port is not supported.

VGA port5

4 USB ports.

Top left: port 1; top right: port 3

Bottom left: port 0; bottom right: port 2

USB ports6

1 DB-9 COM port.COM port7

Figure 4 on page 20 shows the back panel Ethernet port LEDs of the JSA7800 appliance.

19

Figure 4: JSA7800 Ethernet Port LEDs

Table 7 on page 20 lists the JSA7800 Ethernet port LEDs.

Table 7: JSA7800 Ethernet Port LEDs

DefinitionColor/ StatusLED

ActiveAmber blinkingLink/ Activity (Left)

Link detectedAmber steady

No trafficOff

100 MbpsGreen OnSpeed (Right)

1 GbpsOrange On

No Connection or 10 MbpsOff

SEE ALSO

JSA7800 Appliance Description | 13

JSA7800 Appliance Front Panel Description | 16

Juniper JSA7800 User manual

Juniper JSA7800 User manual

Related papers

Other documents