The real risk with used gear is rarely “the machine broke”; it is what you thought you bought and what you actually received are not the same: a PID off by one suffix, a licence you must buy separately, a support contract that does not follow the unit, a return window of only seven days. This guide runs five gates, each checkable before payment.

Three buyers, three answers

Your situation Is used reasonable Watch out
Lab expansion, certification practice, branch office Usually reasonable Practice gear need not chase the latest generation, but must boot stably
Production cold spare, same-model expansion Reasonable, but conditions are strict Spec, version and accessories must match the live network; one missing part makes the purchase wasted
Short-term project transition, replacement later Reasonable Work out the disposal method after the transition ends
Core production gear, no redundancy Not recommended Without redundancy, any used risk becomes downtime risk

Classify your situation first, then read the gates below. The same unit is a bargain for the first buyer and a hazard for the fourth.

Gate 1: Does the PID match

Under one name such as “Catalyst 9300” or “SRX”, there may be a dozen configurations: port count, PoE or not, power direction, fan module, optics generation. All these differences hide in the PID (Part Number) suffix.

Three things to do:

  1. Ask the seller for the full PID, not the series name. A quote saying “9300 series” says nothing.
  2. Match the PID to your needs: port count right, PoE needed or not, dual power, airflow direction (front-to-back／back-to-front) compatible with your rack.
  3. Check the chassis label against the quote. If label and quote differ, ask first; do not assume “they should match”.

The same applies on the Juniper side: EX／QFX port and power options, SRX interface modules, all sit in the model suffix and option list.

Gate 2: The three licence states

This is where used transactions most often go wrong. Three states, and prices can differ widely:

  • Perpetual licence already on the unit: feature enabled and licence bound to this machine; usable on arrival.
  • Perpetual licence to be bought separately: the machine itself is fine, but a feature (for example advanced licence, a specific port count) needs a separate licence; this cost is often missed.
  • Subscription or term licence: has an expiry date. The seller used it three years; when you take over there may be only months left, or it has already expired.

How to check:

  1. Look up by serial number, not model (same model, different serial, licence state can be completely different).
  2. Ask the seller for a screenshot or OEM query result of the licence state, not a verbal “should have”.
  3. Verify again yourself. It is your money; do not rely only on the seller’s word.

Gate 3: Why support contracts usually do not follow the unit

OEM support contracts for Cisco and Juniper are registered under the original buyer. On used or secondary-market resale:

  • Standard warranty and service contracts usually do not transfer with the unit automatically. Cisco’s public Hardware Inspection and Software Relicensing notes make clear that such contracts (pages still answer whether Smart Net Total Care transfers: no) generally do not follow used gear; placing a new contract usually requires valid software entitlement and Cisco inspection. Re-open the current OEM page when writing or buying — wording changes.
  • Cisco also announced that from 2025-06-15 some contract branding moves to Cisco Support; a rename does not mean a used unit can be auto-attached to a new contract.
  • Juniper Care likewise must not be assumed to transfer with a used unit.
  • Even where a transfer is possible case-by-case, there may be a time gap with the machine in a “no support” state.
  • A machine without a support contract still runs, but you cannot get OEM firmware downloads and hardware replacement — in production that often matters more than price.

Keep two paths distinct: OEM Refresh／official channel versus open-market used are not the same condition. Infraplus can write the risk into quote terms, but does not promise to complete OEM relicensing for you; the current vendor text wins.

So when quoting, ask clearly: does this unit currently have a support contract, can it transfer, and when does the transfer take effect. If all three cannot be answered, treat it as “none”.

Gate 4: The seven tests to run

The words “tested” mean nothing; ask what was tested. These are the seven we consider the minimum:

  1. Boot and POST: completes startup, no repeated reboot.
  2. All ports: every port passes, not a sample.
  3. Optics and optical ports: where optical ports exist, insert a module and test link.
  4. Fans and power: dual power tested separately; fan speed and alarms normal.
  5. Temperature and load: run for a period, watch for overheating or throttling.
  6. Firmware version: whether the actual version number matches what the quote states.
  7. syslog and alarms: any residual abnormal alarms after boot.

What you ask for is a record, not a promise. With a record, an incident can be compared; a verbal “tested” equals no test.

Gate 5: Returns and contract — five clauses to write in

On the quote or contract, these five are best present:

  1. Full PID and serial: listed per unit, not “same series”.
  2. Accessories list: power, fans, modules, rack parts; any missing part stated.
  3. Test items and record form: which seven tests, and in what form delivered.
  4. Return window and conditions: within how many days returnable, on what reason, who pays freight.
  5. Actual licence and support state: honestly written as “no support contract” or “licence to be bought separately”; do not leave a blank for imagination.

Of the five, the fourth is most often fudged. In practice, the return window is the only real insurance in a used transaction — without it, no matter how well the first four gates are checked, there is no fallback when something goes wrong.

Five cases where you should not buy used

  1. Core gear with no redundancy: one machine holding up the whole office; the money saved on used gear does not cover one downtime.
  2. Bought the wrong generation only to save money: a generation older than the live network, so setup, licence and compatibility all need redoing.
  3. Seller unwilling to provide serial and PID: that is not confidentiality; it is not wanting you to check.
  4. Support contract state unclear: saying “should be transferable” usually means it is not.
  5. No return terms: a “sold as-is” transaction puts all risk on you.

EOS／EOL: when end-of-sale and end-of-support change the buy

End-of-Sale (EOS) and End-of-Life／End-of-Support (EOL／EOSup) are not the same date. Check separately:

  1. Can you still buy new units or spares?
  2. Are OEM software／security updates and hardware RMA still available?
  3. Do your compliance or customer contracts forbid platforms past support?

OEM Refresh／official channel and open-market used are different conditions. Gear near or past EOSup only fits redundant designs that can accept higher failure and security risk and do not depend on OEM downloads. Verify against current OEM bulletins and PID／serial lookups; we can note known state on the quote and do not guarantee lookups stay current forever.

HK and GBA practical differences

  • Voltage and plug: some gear comes from other regions; power cord and plug need changing; confirm the PSU input range itself.
  • Transport and packing: rack-mounted gear is drop-prone; keep OEM box and foam if possible; without an OEM box, confirm how the seller packs.
  • Customs and documents: cross-border shipping needs invoice and packing list; some models additionally need an export licence.
  • Export controls: resale and cross-border shipping of some encrypted or high-performance models are controlled; this is written in the terms; confirm before transacting.
  • Local handoff: Hong Kong local handoff allows on-site inspection; cross-border adds a layer of risk, so return terms must be written more clearly.

Supplementary notes on Juniper SRX and firewalls

Firewalls carry one extra layer of risk over switches: the previous owner’s leftover setup and licence state. When buying SRX-class gear, additionally ask:

  • Whether existing setup (including admin accounts and credentials) was cleared before dispatch.
  • Whether licence and subscription features (for example advanced security features) come with the unit or need re-registration.
  • Whether OEM support and software download rights are still held by the original registrant.

This section is not to scare you; it is to make you ask three more questions on the quote. A seller who can answer them is one you can talk to.

Next step

This guide contains no per-item quote; quotes are given item by item against your list.

Note: this article is a procurement method and risk explanation; it does not constitute a guarantee of any model, licence state or support contract. Actual warranty, licence transferability and export-control requirements follow the quote, the terms of service and OEM terms. Used／refurbished gear generally carries 3–6 months’ warranty; OEM support contracts and licences on used gear may not transfer.