Juniper SRX5K MPC, MIC, and IOC Guide
The Juniper SRX5400, SRX5600, and the SRX5800 gateways support a wide range of modular port concentrators (MPCs), modular interface cards (MICs), and I/O cards (IOCs). To help you figure out which line cards may make the most sense for your specific networking needs, we’ve put together this in-depth guide to Juniper SRX5K MPCs, MICs, and OICs that includes detailed specifications for every card.
Juniper SRX5K MPC Gateway Devices
The Juniper SRK5K series of gateways include three high-end security and high-performance devices, designed specifically for intensive data center and service provider applications. All three SRXK devices are designed as modular chassis. Customization options are determined by interoperability standards.
The smallest Juniper SRX5000 MPC model is the SRX5400. Some baseline specifications include:
- Measures 5 rack units (RUs), meaning a single rack will fit up to eight SRX5K400 devices.
- Has a firewall performance of 65 Gbps and IPS performance of 22 Gbps.
- Supports 42 million concurrent sessions and 420,000 new sessions.
The SRX5400 has a total of four line card slots, but one is for a dedicated switch control board (SCB), which controls all essential functions, such as power, on the device. The other three slots support a combination of services processing cards (SPCs), which provide processing power for all security-related services on the device, and MPCs/IOCs, but at least one of each must be installed in the chassis.
The SRX5600 is the mid-size model of the Juniper SRX5000 series. Some baseline specifications include:
- Measures 8 RUs, which means a single server rack can house up to 5 devices.
- Has a firewall performance of 130 Gbps, IPS performance of 50 Gbps, and VPN performance of 100 Gbps.
- Supports 114 million concurrent sessions and 1,000,000 new sessions.
The SRX5600 has eight total line card slots. Two slots are dedicated SCB slots. The remaining six slots can be equipped with any combination of SPCs, MPCs, IOCs, and Flex IOCs, but at least one MPC — fixed-configuration or modular — and one IOC — fixed-configuration or Flex IOC — must be installed.
The SRX5800 is the largest Juniper SRX5000 series device. Some baseline specifications include:
- Measure 16 RUs, which means a single server rack can fit only two devices.
- Has a firewall performance of 320 Gbps, IPS performance of 100 Gbps, and VPN performance of 200 Gbps.
- Supports 230 million concurrent sessions and 2,000,000 new sessions.
The SRX5800 has 14 total line card slots, two of which are dedicated SCB slots. The remaining 12 can be populated with any combination of SPCs, MPCs, IOCs, and Flex IOCs. But, again, at least one MPC — fixed-configuration or modular — and one IOC — fixed-configuration or Flex IOC — must be installed.
Juniper MPCs and MICs Supported On SRX5400, SRX5600, and SRX5800 Firewall Devices
All three SRX5000 devices support both fixed-configuration MPCs and modular MPCs that require MICs. And while your configuration will depend on your specific networking needs, it’s important to keep in mind that modular Juniper MPC cards offer greater flexibility than fixed-configuration MPC cards.
The Juniper MX MPCs supported on all three SRX5000 devices include:
The Juniper MX MICs supported on all three SRX5000 devices include:
It should be noted that any unused slots on an SRX5K gateway device should be occupied with a blank panel shield to allow for better circulation of cooling air throughout the device. Below are detailed specifications for all the MPCs and MICs supported on SRX5400, SRX5600, and SRX5800 devices.
The Juniper SRX5K-MPC is the sole modular MPC for SRX5000 gateway devices. It requires MICs to operate. Each MIC slot on the SRX5K-MPC has a throughput of 75 Gbps on older versions of Juniper OS and 120 Gbps on more recent versions of Juniper OS, specifically from release 12.1×47-D15.
The SRX5K-MPC3-40G10G is one of two fixed-configuration line cards supported on all SRX5000 devices. It does not support MICs. It has 24 SFP+ ports that support up to 10G Ethernet and six QSFP+ ports that support up to 40G Ethernet. The maximum throughput on the SRX5K-MPC3-40G10G is 240 Gbps.
The SRX5K-MPC3-100G10G is the second fixed-configuration line card that’s supported on all SRX5000 gateways. It includes four SFP+ ports that support up to 10G Ethernet and two QSFP28 ports that support up to 100G Ethernet. The maximum throughput on the SRX5K-MPC3-100G10G is 240 Gbps.
The SRX-MIC-20GE-SFP is an MIC that can be installed into the SRX5K-MPC. It includes 20 SFP ports that support up to 1G Ethernet. The maximum capacity on the SRX-MIC-20GE-SFP is 20Gbps.
The SRX-MIC-10XG-SFPP is another MIC that can be installed into the SRX5K-MPC. This particular MIC includes 10 SFP+ ports that support up to 10G Ethernet and has a throughput of 100 Gbps.
The SRX-MIC-1X100G-CFP is a low-density, yet high-speed MIC that can be inserted into the SRX5K-MPC. It provides one CFP port that supports up to 100G Ethernet. And, because there is only one port, the maximum capacity is 100 Gbps. The SRX-MIC-1X100G-CFP is the only SRX5000 MIC with a CFP slot.
The SRX-MIC-2X40G-QSFP is the final MIC supported across all three SRX5000 devices. Just like all other supported MICs, the SRX-MIC-2X40G-QSFP is inserted into the SRX5K-MPC. It includes two QSFP+ ports that each support up to 40G Ethernet. The maximum capacity is 80 Gbps.
Juniper IOCs Supported On SRX5400, SRX5600, and SRX5800 Firewall Devices
IOCs and Flex IOCs operate similarly to fixed-configuration MPCs and modular MPCs, respectively, but use different form factors. However, you cannot install port modules in an MPC, and similarly, you can’t install MICs in a Flex IOC. While there are several IOCs and Flex IOCs that are compatible with SRX5000 devices, only two — both of which are designed with a fixed-configuration — work across all three.
Those IOCs are:
Below are detailed specifications for the two fixed-configuration IOCs supported on SRX5000 devices.
The SRX5K-IOC4-10G is a fixed-configuration IOC that includes forty SFP+ ports that support up to 10G Ethernet. The maximum capacity on the SRX5K-IOC4-10G is 400 Gbps.
The SRX5K-IOC4-MRAT is another fixed-configuration IOC. It includes 12 ports, all of which support up to 40G Ethernet. Four of the ports support up to 100G Ethernet, but require QSFP28 transceivers to do so. All 12 ports support QSFP+ transceivers that can even be separated into four 10G Ethernet connections using breakout cables. The total throughput — regardless of configuration — for the device is 480 Gbps.
However, the capacity is divided into 240 Gbps for two groups of six ports. Each group contains two 100G Ethernet ports, which means if both 100G Ethernet ports in a group are used, only one of the remaining four ports will support 40G Ethernet. Another potential combination would be one 100G Ethernet port in a group and three 40G Ethernet ports, leaving 20G of throughput between the last two ports.
Juniper IOCs Only Supported on SRX5400 and SRX5600 Firewall Devices
There are several high-performance IOCs that are supported only on the SRX5600 and SRX5800 gateways. Additionally, only the SRX5600 and SRX5800 support Juniper’s Flex IOCs, which are similar to MPCs in the sense they support smaller cards in the form of port modules versus MICs, so if you require a configuration that’s only supported on a Flex IOC, you’ll require a SRX5600 or SRX5800 chassis.
The fixed-configuration IOCs supported only on the SRX5600 and SRX5800 are as follows:
There is only one Flex IOC available for SRX5600 and SRX5800 devices: the SRX5K-FPC-IOC. That device houses up to two port modules, of which there are three available. Those are as follows:
Below are detailed specifications for the IOCs, the Flex IOC, and the Flex IOC port modules supported on SRX5600 and SRX5800 devices.
The SRX5K-40GE-SFP IOC is the simplest of the IOCs exclusive to the SRX5600 and SRX5800 gateways. It includes 40 SFP ports that support up to 1G Ethernet, and the maximum throughput is 40 Gbps.
The SRX5K-4XGE-XFP IOC is another fixed-configuration card that includes four XFP ports that support up to 10G Ethernet. And, much like the maximum throughput on the SRX5K-40GE-SFP, the SRX5k-4XGE-XFP has a maximum throughput of 40 Gbps, which is exactly what’s needed to utilize every single port.
The SRX5K-FPC-IOC is a Flex IOC that includes two port module slots. This Flex IOC works almost exactly like an MPC by allowing greater flexibility in terms of configurations — i.e. mixing and matching multiple port types within the same slot. There are three available port modules supported on this device. Any combination of those three modules can be utilized, including two of the same module.
The SRX-IOC-16GE-SFP is a Flex IOC port module that includes 16 SFP ports that support up to 1G Ethernet. Note, however, that the maximum throughput is only 10 Gbps, so not all 16 ports can be maxed out at one time — i.e. running all 16 ports at max capacity would require 16 Gbps of throughput.
The SRX-IOC-16GE-TX is another Flex IOC port module that includes 16 RJ45 ports, which support up to 1G Ethernet. The maximum capacity on the SRX-IOC-16GE-TX is also 10 Gbps.
The SRX-IOC-4XGE-XFP is the final Flex IOC port module supported on SRX5600 and SRX5800 devices. Much like the fixed configuration SRX5K-4XGE-XFP IOC, the SRX-IOC-4XGE-XFP includes four XFP ports that support up to 10G Ethernet. However, because this is a port module, you can essentially double the number of available ports — eight versus four — in one slot within the gateway chassis.
Work WIth BrightStar Systems for All Your Juniper MPC, MIC, and IOC Needs
Brightstar System’s Juniper SRX5K expertise comes from our vast experience with buying and selling pre-owned networking equipment in bulk from large-scale hosting companies, service providers and cable operators. This allows us to offer great prices on all of our products, including all the MPCs for SRX Series gateways, and all the MICs, IOCs, and Flex IOCs addressed in this guide.
Not only that, but each device we purchase goes through a rigorous testing process before it’s sold to ensure that the hardware you purchase is in peak operating condition. Furthermore, we offer a 1-year In-house Warranty to back up all of our products, protecting your purchase for a full year.
We purchase from all over the world, and will even set up freight pickup for bulk orders. Contact us today if you are interested in purchasing or selling Juniper SRX5K gateway devices. You can also view our Juniper manufacturer page for a complete list of all the Juniper hardware we stock and sell.
BrightStar Systems is not an authorized Juniper partner and we have no affiliation with Juniper Networks. BrightStar Systems is an independent used Juniper networking hardware reseller.