When buying used Juniper, most people’s first line is “is there an SRX 650 left?”. What actually decides whether the deal is worthwhile is four other things: whether the machine was cleaned before it left its previous hand, which Junos version it stops at, whether Juniper Care can follow you, and whether accessories are complete. These four matter more than the model itself.

Juniper’s used-market risks differ from Cisco

The Cisco used market is large and parts circulate; its risk concentrates mainly on Smart Net and licences. The Juniper used market is smaller, and its risk concentrates on setup and version:

  • Many Juniper units come out of chassis clusters (SRX dual-box) or full-network refreshes; previous-holder setup, cluster ID and root password may still be inside.
  • Junos is a single OS across SRX, EX, QFX and MX, but different platforms run different release families; a mismatched version breaks setup and features.
  • Juniper Care and some software entitlements are bound to serial and original registered customer; transfer must be confirmed unit by unit, and does not take effect automatically just because you bought the hardware.

So this page is not a model list; its focus is “what state this unit is in when it reaches you”.

Four product lines, four procurement logics

SRX: firewalls and VPN

SRX is the firewall／VPN platform for branches and small-to-mid sites, with the most concentrated used demand. Note that older generations (SRX 210／240／650 class) have been end-of-life for years; feature and throughput gaps versus the current SRX 300／340／345／550 series are clear. Buying an older generation usually replaces an identical spare, not to gain performance.

EX: enterprise access and aggregation

The EX 2200／3300／3400／4100／4300／4400／4600 line covers access to aggregation. The key for used EX is power and fan modules: the same chassis can take modules of different wattage and airflow direction; missing one and it cannot be racked. EX 2200／3300 are already end-of-life generations; confirm whether you accept that lifecycle before buying.

QFX: data centre

Data-centre switches such as QFX 5100／5110／5120／5200 are used second-hand mainly for expansion and test environments. The most overlooked point here is airflow direction (front-to-back／back-to-front) and optics speed matching — chassis right, fan direction wrong, and you have an overheating hazard in the room.

MX: edge and service-provider routing

Edge routers such as MX 204／240／480 appear second-hand mostly in labs, PoCs and specific projects. This line is the most complex: MIC／MPC slot generations, DPC and module pairing, even chassis depth and power all need checking item by item. We do not quote “a complete set” without confirmation — an MX “complete” means counting every piece.

Modules, power, fans and accessories

Juniper used trades often stall on accessories: power modules, fan trays, interface modules, rack kits, console cables. These are not on the chassis label and do not appear in the “chassis price”. On the quote we list accessories item by item and state which piece is missing.

How condition is graded

Condition What it usually is What you ask Our warranty
New Sealed or complete packaging, with OEM warranty Serial, warranty start date, whether already registered Under OEM warranty (generally one year, subject to OEM terms)
Refurbished Previously used, tested and cleaned: cleaned, power／fan／interface checked, parts replaced where needed What was replaced, parts source Generally 3–6 months
Used Removed from production network, cluster or room, functional; appearance and accessories may differ Removal source, years in use, whether from a dual-box Generally 3–6 months
Parts unit Only your specified function is warranted; for parts or test use Whether you accept this scope explicitly Per individual quote agreement

Inspection: seven checks specific to Junos gear

  1. Serial and model: chassis label, show version output and quote matched against one another.
  2. Previous-holder setup cleared: confirm no residual hostname, user accounts, cluster setup or management IP remain.
  3. Root password: confirm a deliverable state; factory reset or Junos reinstall where needed, rather than leaving an unknown password.
  4. Junos version: record the actual release, compare with your required version; whether a downgrade to your version is possible is confirmed unit by unit.
  5. Interfaces and ports: per-port link, optical and copper checked separately; modules tested where fitted.
  6. Power and fans: module count, wattage, airflow direction; both power feeds powered on for dual-power units.
  7. Pre-dispatch recheck: power on once more before shipping, count accessories, pack by transport method.

Why check “previous-holder setup”

When an SRX or EX arrives carrying its previous setup, the biggest trouble is not security but you will think it is broken: interfaces disabled, routes pointing at nonexistent subnets, cluster mode not released. Boot looks normal, but connecting to the network does not pass traffic. Such issues are common in the used market and cannot be solved by swapping cables. So we make “clear and reset” a separate step, not something done casually during install.

Form of inspection record

We do not preset a fixed-format test report. How far inspection goes, whether per-port records are kept, and whether photos or video are taken are written into the order at quoting stage and followed through.

Warranty: how the 3–6 months work

  • Used and refurbished gear generally carry 3–6 months; the actual months are written on the quote, not promised verbally.
  • Warranty start date and coverage scope (hardware fault, DOA, freight responsibility) are stated on each quote.
  • New gear follows OEM warranty; start and registration follow OEM terms; we do not promise on the OEM’s behalf.
  • Compatible optics carry one year.
  • No Lifetime warranty: for used gear, “lifetime” is not an executable promise.

Juniper Care, software licences and transfer

OEM support contracts

Juniper OEM support contracts (Juniper Care／Care Plus class) are usually bound to device serial and original registered customer, may not transfer to your name, and may not be renewable on used gear. We raise this at quoting stage, not leave you to discover after purchase.

Junos version and download rights

Whether Junos software and some features can be downloaded and enabled depends on model, version and entitlement state; some situations need a valid support contract or licence. If your design depends on a feature or a release, say so when requesting the quote; we reply on the premise that “this version and this feature work on your unit”, not just “the hardware boots”.

Export controls

Network gear is subject to export controls and destination restrictions; certain models (especially higher-end routing and encryption features) need extra confirmation. Transactions are governed by Hong Kong law; see the terms of service.

When used Juniper makes sense

  • Identical spare: the existing network still runs; a cold spare with same PID and same release.
  • Generation transition: new platform undecided; top up a batch to hold the site.
  • Branch sites: many SRX-class branch firewalls, price-sensitive per unit.
  • Data-centre expansion and test: QFX for temporary expansion or validation environments.
  • Lab and certification practice: real Junos CLI and real interfaces needed; used is a reasonable choice.
  • PoC: validate assumptions first, then decide procurement direction.

Information to provide for a quote

  1. Model and serial (for example SRX 345, EX 4300-24T, QFX 5110), plus power and fan module models.
  2. Quantity and purpose (production, spare, lab).
  3. Interface needs: copper／optical port count and speed, any specific interface module required.
  4. Junos release requirement: whether it must match the existing network, and whether a newer release is acceptable.
  5. Whether Juniper Care or licence is attached (see previous section).
  6. Airflow direction and room conditions (front-to-back／back-to-front, chassis depth).
  7. Expected lead time and delivery location (Hong Kong／Greater Bay Area).

Sourcing, lead time and logistics

For models not on hand, we source globally: confirm availability first, then report condition and lead time. We do not quote a guaranteed slot — whether it can be obtained and when it arrives follows the confirmed result. Logistics are arranged to your delivery point; cross-border transport and clearance responsibilities are stated up front.

Installation setup and remote-hand

On site we can do racking, basic Junos setup and integration with the existing network; where the room does not allow outside access, we do remote-hand: you are on site, we guide you step by step from remote.

Where retired gear goes

Retired Juniper／Cisco／Huawei equipment can be valued for buyback or handled through ITAD clearance (including data disposal and asset records). Units with residual used value are quoted directly; those without are disposed of through compliant channels. Detail on the ITAD and buyback page.

Selection notes (no prices or stock)

  • Older SRX generations (SRX 210／240／650) have been end-of-life for years; in most cases only worth keeping as spares.
  • EX 2200／3300 are end-of-life generations; EX 3400／4300／4400 still serve in many existing networks.
  • QFX 5100／5110／5120 are used in data centres; confirm airflow direction and optics speed first.
  • MX slot and module generations differ widely; copy down MIC／MPC models accurately before buying.
  • Different suffixes in the same series (such as -24T and -24P) may differ only in port power; copying the PID accurately saves the most back-and-forth.

Next step

For a quote, email the seven items above to [email protected]. If you only want to ask about one model, or want us to count through an existing list, you can write in directly.

Warranty and licence: new gear follows OEM warranty; used and refurbished gear generally carry 3–6 months; compatible optics one year. Juniper Care, OEM support contracts and some software licences on used gear may not be transferable; confirm item by item with us before ordering.