Upload
sergii-liventsev
View
1.031
Download
1
Tags:
Embed Size (px)
DESCRIPTION
Citation preview
2 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
История инноваций Juniper 1998: First separation of control plane & data plane 1998: First implementation of IPv4, v6, MPLS in silicon 1998: First 2.4Gbps forwarding engine 2000: First wire-rate 10Gbps forwarding engine 2002: First implementation of integrated services 2003: First scalable cell-switched fabric 2004: First multi-chassis router 2005: First line-rate 40Gbps forwarding engine 2007: First Ethernet router 2007: First > 160G Firewall 1998-2006: Record quadrupling of capacity every 2 years 2009: Next generation edge silicon: NISP 2010: First 100GE
За 11 лет - 78 микросхем собственной разработки!
3 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Портфель продуктов Juniper Networks
MX-серия
Управление услугами
T/PTX-серии
Магистраль Коммутаторы корпоративных сетей
Динамическое
предоставление услуг
EX-серия
SRX-серия/ Virtual GatewayJUNOS Space/NSM/SRC
Городские сети и оказание услуг
WL-серия
Беспроводный доступ (WiFi)
RingMaster - SmartPass
4 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX Series Services Gateways for the branch
Сергей Ливенцев
5 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Branch srx delivers…Consolidated Security and networking
All-in-One
Single device for routing, switching, and security
Comprehensive security
Easy to activate new layers of security
Next Generation Firewall
VPN
IPS
Anti-Virus
Anti-Spam
Enhanced Web filtering
Routing / WAN
UT
M
WLAN, LAN, Switching
AppSecure
6 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Multi-services Gateway
Branch SRX: Serving Multiple Customer Needs
Secure Router UTMNGFW
Routing and WAN Interfaces
Firewall, VPN, NAT In-line IPS High availability Transparent mode
Ease of use Best-of-breed Anti-Virus,
Anti-Spam, Web filtering New AV offering - Sophos In-line IPS AppSecure
Next generation firewall (AppSecure)
In-line IPS Application visibility,
tracking and enforcement User-role based policies
Branch SRX
7 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
BRANCH SRX FEATURES MATRIX
Security Firewall VPN IPS AppSecure Antivirus Enhanced Web filtering Antispam
Wireless LAN and 3G/4G WAN 802.11n 3G/4G WiMax & LTE
Routing & Switching RIP, OSPF, BGP,
Multicast, IPv6 MPLS; Full BGP table J Flow, RPM L2 Switching POE Options
Physical Interfaces T1/E1, Serial, DS3/E3 VDSL, ADSL, G.SHDSL DOCSIS Cable Modem Ethernet 10/100/1000
& 10G, Copper or Fiber
8 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
BRANCH SRX SERIES GATEWAYSDelivering “No-Compromise” Services with Scale & Performance
Small OfficeSmall to
Medium OfficeLarge Branch/Regional Office
SRX220
+ 2 WAN slots, 8 x GigE, PoE1 GB DRAM
SRX240
+ 4 WAN slots, 16 x GigE, PoE
1 GB DRAM
SRX650
+ More LAN slots, Dual P/S, + Hot Swap I/O
4 GB DRAM
SRX110
SRX100
NEW
SRX210
WAN slot, 2 x GigE, PoE, 1 GB DRAM
Hardware Platforms Scale from 1G to 10G Junos Software across Security, Routing and Switching
1G
10G
Fixed Config8 x FE1
GB DRAM
Fixed Config VDSL2 WAN
8 x FE1 GB DRAM
2mPIM+6GPIM WAN slots, 10 x GigE,
PoE, Dual PS2 GB DRAM
Q1 2012
SRX550
NEW
9 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Announcing SRX550 Services Gateway
Routing Performance 700 Kpps
Firewall Performance1.7 Gbps (IMIX)5.5 Gbps (Large
packets)
AV & IDP HW Acceleration Yes
IPSec Performance 1 Gbps
“No-Compromise Services” with scale and performance for the medium to large branch
Advanced Security Firewall and VPN
UTM: IPS, antivirus, enhanced web-filtering, anti-spam
Application visibility, tracking & enforcement
High Density Switching 10 x GE on board (6 Copper, 4 SFP)
Modular switching with POE
• Comprehensive Routing Wide range of WAN options: 3G/LTE,
T1/E1/DS3/E3, xDSL, Nx1GE, 10 GE
L2/L3 VPN, MPLS, VPLS, IPv6, v4
Business Continuity, Resiliency HA cluster (A/A or A/P)
WAN backup and redundancy
Control plane, data plane separation
GPIM Online-Insertion-Removal*
Optional redundant power supplies (AC and DC)
FRS 12.1
10 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX100
Features SRX100
On-board Ethernet 8 x FE
Power over Ethernet (802.3af, 802.3at) None
WAN slots None
USB ports 1
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention No
JUNOS Software version support JUNOS 11.1
Firewall performance (Large Packets) 700 Mbps
Firewall performance (IMIX) 200 Mbps
Firewall performance (Firewall + Routing PPS 64byte) 70 Kpps
VPN Performance—AES256+SHA-1 3DES+SHA 1 65 Mbps
IPS performance 60 Mbps
Connections Per Second (CPS) 2K CPS
Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K
Antivirus performance 25Mbps
AppSecure Throughput (HTTP) 90Mbps
High Availability N/A
Ideal for small sites and managed telecommuters
Full security features Firewall and VPN UTM: IPS, AppSecure, antivirus,
web-filtering, and anti-spam UTM requires high memory version
11 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX110 – IDEAL SOLUTION FOR SMALL BRANCH
Features SRX 110
On-board Ethernet 8 x FE
Primary WAN VDSL2 with ADSL2 Fallback
Backup WAN USB Port for 3G/4G Modem
Additional USB ports One (total 2)
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention No
Firewall performance (Large Packets) 700 Mbps
Firewall performance (IMIX) 200 Mbps
Firewall performance (Firewall + Routing PPS 64byte) 65 Kpps
VPN Performance(AES256+SHA1 / 3DES+SHA1) 65 Mbps
IPS performance 60 Mbps
Connections Per Second (CPS) 2K CPS
Maximum Concurrent Sessions 16 K / 32K
Antivirus performance 25Mbps
AppSecure Throughput (HTTP) 90 Mbps
High Availability N/A
Additional USB port
Front
Back
Designed for flexibility, investment protection, and lowest total cost of ownership (TCO).
PrimaryWANVDSL
Backup 3G WAN
11.4
12 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Ideal for small branches
Full security features Firewall and VPN UTM: IPS, AppSecure, antivirus,
web-filtering, and anti-spam UTM requires high memory
version
SRX210E
Features SRX210E
On-board Ethernet 2 x GE + 6 x FE
Power over Ethernet (802.3af, 802.3at) 4 ports, 50 W total
WAN slots 1 x mini PIM
USB ports (flash) 2
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention Yes
JUNOS Software version support JUNOS 11.1
Firewall performance (Large Packets) 850 Mbps
Firewall performance (IMIX) 250 Mbps
Firewall performance (Firewall + Routing PPS 64byte) 95 Kpps
IPSec VPN Throughput 85 Mbps
IPS performance 85 Mbps
Connections Per Second (CPS) 2,200 CPS
Maximum Concurrent Sessions (512MB/1GB RAM) 32K / 64K
Antivirus performance 25 Mbps
AppSecure Throughput (HTTP) 250 Mbps
High Availability A/A or A/P
13 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX220
Features SRX220
On-board Ethernet 18x GE
Power over Ethernet (802.3af, 802.3at) 8 ports GE, 120 W
WAN slots 2 x mini PIM
USB ports (flash) 2
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention Yes
JUNOS Software version support JUNOS 11.1
Firewall performance (Large Packets) 950 Gbps
Firewall performance (IMIX) 300 Mbps
Firewall performance (Firewall + Routing PPS 64byte) 125 Kpps
VPN Performance—AES256+SHA-1 3DES+SHA-1 100 Mbps
IPS Performance 100 Mbps
Connections Per Second (CPS) 3K CPS
Maximum Concurrent Sessions (512MB/1GB RAM) 96K
Antivirus performance 34 Mbps
AppSecure Throughput (HTTP) 300 Mbps
High Availability A/A or A/P
Ideal for small and medium branches
Full security features Firewall and VPN UTM: IPS, AppSecure,
antivirus, web-filtering, and anti-spam
14 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX240
Features SRX240
On-board Ethernet 16 x GE
Power over Ethernet (802.3af, 802.3at) 16 ports GE, 150 W
WAN slots 4 x mini PIM
USB ports (flash) 2
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention Yes
JUNOS Software version support JUNOS 11.1
Firewall performance (Large Packets) 1.5 Gbps
Firewall performance (IMIX) 500 Mbps
Firewall performance (Firewall + Routing PPS 64byte) 200 Kpps
VPN Performance—AES256+SHA-1 3DES+SHA-1 300 Mbps
IPS Performance 230 Mbps
Connections Per Second (CPS) 9K CPS
Maximum Concurrent Sessions (512MB/1GB RAM) 64K / 128K
Antivirus performance 85 Mbps
AppSecure Throughput (HTTP) 750 Mbps
High Availability A/A or A/P
Ideal for small and medium branches
Full security features Firewall and VPN UTM: IPS, AppSecure,
antivirus, web-filtering, and anti-spam
UTM requires high memory version
15 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX550 SERVICES GATEWAY SPECIFICATIONS
Features SRX550
On-board Ethernet 10 x GE (6 Copper, 4SFP)
Power over Ethernet (802.3af, 802.3at) 40 ports GE, 500 W
WAN slots 2 mPIM, 6 x GPIM
USB ports (flash) 2
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention Yes
JUNOS Software version support JUNOS 12.1
Firewall performance (Large Packets) 5.5 Gbps
Firewall performance (IMIX) 1.7 Gbps
Firewall performance (Firewall + Routing PPS 64byte) 700 Kpps
VPN Performance—AES256+SHA-1 3DES+SHA-1 1.0 Gbps
IPS Performance 800 Mbps
Connections Per Second (CPS) 27K CPS
Maximum Concurrent Sessions (2 GB RAM) 375 K
Antivirus performance 300 Mbps
AppSecure Throughput (HTTP) 1.5 Gbps
High AvailabilityA/A or A/P
Ideal for enterprise medium to large branch
Ideal office-in-a-box solution for managed services or commercial business
SRX550 offers: Comprehensive Routing and Security
Services High density on-board and modular
switch ports, Copper and SFP Application Awareness and Control Business Continuity and Resiliency
NEW!
16 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX650
Features SRX650
On-board Ethernet 4 x GE
Power over Ethernet (802.3af, 802.3at) 48 ports GE, 250W or 500 W
WAN slots 8 x GPIM
USB ports (flash) 2 per processor
Content Security Accelerator—ExpressAVand Intrusion Detection and Prevention Yes
JUNOS Software version support JUNOS 11.1
Firewall performance (Large Packets) 7.0 Gbps
Firewall performance (IMIX) 2.5 Gbps
Firewall performance (Firewall + Routing PPS 64byte) 850 Kpps
VPN Performance—AES256+SHA-1 3DES+SHA-1 1.5 Gbps
IPS Performance 1 Gbps
Connections Per Second (CPS) 35K CPS
Maximum Concurrent Sessions (512MB/1GB RAM) 512 K
Antivirus performance 350 Mbps
AppSecure Throughput (HTTP) 1.9 Gbps
High AvailabilityA/A or A/P Hot swap GPIMs,
Dual power
Ideal for regional sites and large branches
Full security features Firewall and VPN UTM: IPS, AppSecure, antivirus, web-
filtering, and anti-spam
Modular LAN switching Services Routing Processors with
optional redundancy Power supplies with optional
redundancy (at FRS)
17 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
BRANCH SRX SERIES SPECIFICATION SUMMARY FEATURES SRX100
(110)SRX210E SRX220 SRX240 SRX550 SRX650
On-board Ethernet 8 x FE 2 x GE + 6 x FE 8 x GE 16 x GE 6 x GE + 4 x
SFP 4 x GE
Memory/Flash 1 GB / 1 GB 1 GB / 1 GB 1 GB / 1 GB 1 GB* / 1 GB 2 GB* / 2 GB 2 GB / 2 GB
Power over Ethernet (802.3af, 802.3at) None 4 ports,
50 W total8 ports GE,
120 W16 ports GE,
150 W40 Port GE, 250
W or 500 W48 ports GE,
250 W or 500 W
WAN slots None (1) 1 x mini PIM 2 x mini PIM 4 x mini PIM 2 x mini PIM + 4 x GPIM 8 x GPIM
USB ports (flash) 1 (2) 2 2 2 2 2 per processor
JUNOS Software version support JUNOS 11.1* JUNOS 11.1* JUNOS 11.1* JUNOS 11.1* JUNOS 12.1 JUNOS 11.1*
Routing YES YES YES YES YES YES
Content Security Acceleration (IPS, ExpressAV) No YES YES YES YES YES
Firewall performance (Large Packets) 700 Mbps 850 Mbps 950 Mbps 1.8 Gbps 5.5 Gbps 7.0 Gbps
Firewall performance (IMIX) 200 Mbps 250 Mbps 300 Mbps 600 Mbps 1.7 Gbps 2.5 Gbps
Firewall performance (Firewall + Routing PPS 64byte) 70 Kpps 95 Kpps 125 Kpps 200 Kpps 700 Kpps 850 Kpps
IPSec VPN throughput 65 Mbps 85 Mbps 100 Mbps 300 Mbps 1.0 Gbps 1.5 Gbps
Intrusion Prevention System 60Mbps 85 Mbps 100 Mbps 230 Mbps 800 Mbps 1 Gbps
Connections Per Second (CPS) 2K 2.2K 3K 9K 27K 35K
Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K 32K / 64K 96K 64K / 128K 375K 512 K
Antivirus 25 Mbps 30 Mbps 35 Mbps 85 Mbps 300 Mbps 350 Mbps
High Availability A/A or A/P A/A or A/P A/A or A/P A/A or A/PA/A or A/P,
Hot swap GPIMs,Dual power
A/A or A/P,Hot swap GPIMs,
Dual power
18 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Flexible Physical interfaces- WAN, LAN, WLAN and 3G/4G
MPIMs
T1/E1 Serial 1XGE SFP ADSL G.SHDSL VDSL2 Docsis3.0
Wireless LAN
AX411 dual-radio AP WLA WLC2
GPIMs
16XGE 16XGE POE 24XGE 24XGE POE 2x10GE
SFP+/Copper 4XT1E1 2XT1E1 1xDS3/E3
Wireless WAN
EVDO/HSPA/WIMAX
19 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
JUNIPER’S WIRELESS LAN SOLUTION – AX411
No compromise Leading performance
with high speed 802.11n wireless
Online in record time
Unattended remote configuration and troubleshooting
Radical simplicity
One JUNOS for wired and wireless policy and quality
Fewer boxes, more function
VoiceVideoData
Applications
Smart phonesBar code readers
Laptops
Applications
20 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
JUNIPER’S WIRELESS WAN SOLUTION
Best signal Get the 3G antenna out
of the wiring closet to optimize reception*
More choices Choose 3G/LTE USB modem
or standalone 3G bridge Choose from 70+ modems from
every major manufacturer*
Higher reliability Tightly coupled system speeds
wired to wireless failover Redundant radio hardware and
provider diversity*D
irect
Plu
g-in
US
BM
od
em s
up
po
rt
Carrier’s 3G/4G LTE Network
* Requires bridge solution
Brid
ge
21 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Traffic Anomaly Detection Screens
Protocol Anomaly Detection
Stateful Signatures Synflood Protector
Backdoor Detection
IP Spoof Detection Layer-2 Attack
DetectionMalicious Activ
ities
Proliferation
IPS: Multi-Method Detection & Prevention
Must-haves: Fast response time for new threats Dedicated security research team
Reconnaissance Attacks Proliferation
Malicious Activities
Recon
Malicious Activ
ities
Attack
22 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Application Awareness and Classification Engine
ApplicationView
Application visibility and control is easy with appsecure
Application Enforcement
by User
Threat Mitigation
IPS
Application logs sent to HQ(STRM) for reporting
What application?What user?
User location?User device?
Now on Branch SRX
23 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Monitor & Track ApplicationsAppTrack
APPTRACK VISIBILITY FOR INFORMED RISK ANALYSIS
View application by protocol, Web application, and utilization
Analyze usage and trends
Log and report across security solutions and systems
Customize application monitoring
Web 2.0 application visibility
App usage monitoring
Scalable, flexible logging & reporting
AppTrack
24 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Control & Enforce Web 2.0 AppsAppFW
APPFW: BEYOND JUST FW OR APP CONTROL
Inspect ports and protocols
Control nested apps, chat, file sharing and other Web 2.0 activitiesDynamic application security
Web 2.0 policy enforcement
Threat detection & prevention
HTTPUncover tunneled apps
Stop multiple threat types
AppFW
25 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
Monitor & Mitigate Custom AttacksIPS
IPS FOR CUSTOMIZABLE PROTECTION
Detect and monitor suspicious behavior
Address vulnerabilities instead of ever-changing exploits of the vulnerability
On-going threat protection
Mobile traffic monitoring
Custom attack mitigation
Tune open signatures to detect and mitigate tailored attacks
Uncover attacks exploiting encrypted methods
IPS
Exploits
VULNERABILITY
AppSecure IPS
Other IPS’s
26 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
ENHANCED WEB FILTERING
SRX
Internal network
“In the Cloud” Categorization Server Continuous updates Large number of URLs Category granularity Real time threat score
Productivity
Performance
Security
Internet
NEW
27 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
CUSTOMER CHOICE FOR ANTIVIRUS
On-box option: Kaspersky
Cloud-based option: Sophos
Juniper is the only vendor offering customers a choice between two market proven antivirus solutions.
28 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
NEW AV SERVICE: SOPHOS LIVE PROTECTIONANTI-MALWARE FOR JUNIPER SRX
Cloud-based intelligence delivers high performance malware protection
Effective, instant protection against malware and infected web sites
Target customers that want the performance and ease of a cloud-based antivirus solution
SRX
29 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SRX210
REMOTE ACCESS VPN
Dynamic VPN Service – Access Manager Client
Clientless – dynamic IPSEC client automatically downloaded
Simultaneous tunnel enforcement Automatic client upgrade
capabilities Self-provisioning IPSec with TCP-based fallback
for NAT traversal Windows platform support—XP,
Vista, Win 2000, and Windows 7
WiredWireless
3G/4G Wireless
INTERNET
30 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
The power of one junos
SECURITY ROUTERS
J Series
M Series
T Series
SWITCHES
MX Series
SRXSeries
Reduces time/effort to operate network infrastructure
Simplifies management
One OS One Release Train
Delivers new functionality stably
Reduces OPEX
One Architecture
Ensures available & scalable software for growing needs
Reduces TCO
EX Series
QFX Series
31 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
SPACE - SIMPLE, SMART, OPEN PLATFORM
APPLICATIONS
Juniper Applications
3rd Party Applications
Network Activate, ● Transport Activate ● QoS
Design ● Ethernet Design ● Security Design ●
Virtual Control ● Service Now
OSS ● BSS ● Green/Energy ● End-user Forensics Adapters (MTOSI, OneAPI) ●
… others
Device Management Interface (DMI)
RESTful Web Service API
JUNOS SPACE PLATFORM
Policy
Inven
tor
y Con
fig
s
Traffi
c
Events
Sched
ul
er Data
bas
e Tasks
UI
Wid
gets
Network Widgets Infrastructure Widgets
Open Network Application Platform Network Application
Platform
Open, extensible, standards-based (SOA)
Abstractions for generic service definitions
Purpose-built for network orchestration and automation
Carrier-grade scale
Transparent communication with all Junos devices (any device, any OS version) – total management of Juniper infrastructure
Easy integration with OSS via NBI/SDK
Security Design
32 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
HIGH AVAILABILITY
Features Stateful fail-over Active/Backup Control Plane Active/Active Data Plane Single System View
Benefits Maintains connection
persistence & improves system resiliency for services
Load sharing across systems Optimized for complex
routing environments
33 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
srx series awards – Great Momentum!
SRX1400 Wins Best Security Hardware Product Category
SRX1400
SRX5600
SRX650 Wins Best of Interop Award, Infrastructure Category
SRX210 Wins Tokyo Interop Grand Prix, Highest Honor for SMB Infrastructure
SRX5600 Wins Grand Prix, Highest Honor for Best of Show Awards
SRX210
SRX650
34 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX Серия: Позиционирование продуктов для кампуса
Малый Кампус Средний Кампус Крупный Кампус
Ядро
Агрегац
ия
Доступ
EX4500EX8208 EX8216
EX4200
EX3200 EX3300
EX2200-CEX2200
EX4500
EX4200
EX6200EX3300
EX8208
EX6200EX4200
35 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
ПОЗИЦИОНИРОВАНИЕ КОММУТАТОРОВ ПО КОЛИЧЕСТВУ ПОРТОВ
EX3300
EX2200
EX2200-C
EX 4200
EX8200
EX6200
EX4500
Virtual Chassis
48+ портов12 до 48 портов 200+ портов 300+ портов
10G
bE
Модульные
Аппаратное резервирование
36 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX2200-C• Компактный, без вентиляторный 2/3 уровня GbE коммутатор с PoE+ для микро филиалов, розничной торговли и рабочих групп
12 портов доступа (10/100/1000BASE-T)
2 порта ДН (Двойного назначения) для подключения к магистрали (10/100/1000BASE-T or 100/1000BASE-X)
PoE+ опция модели Energy Efficient Ethernet (EEE)* MACSec (IEEE 802.1AE) поддержка*
• Junos операционная система L2, IPv4/v6 Static, RIP (база)
OSPF, Mcast, CFM (расширенная лицензия)
• Фикс. Встроенный ИП
• Шкаф, Стена, Магнит
*поддержка в ПО запланирована на будущее
Код заказа # портов Тип портов PoE+Порты
Встроенные uplink
Макс. Потребление
питания(PoE Питание)
EX2200-C-12T-2G 12 10/100/1000B-T 0 2 DP 30 W
EX2200-C-12P-2G 12 10/100/1000B-T 12 2 DP 30W (100W)
37 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
RJ-45/USB Консоль
EX2200-C: ВИД СПЕРЕДИ Фиксированная
конфигурация 26.9 x 4.4 x 22.8 (23.8) см. 1 U высота Вес: 4.6 lbs (-T); 6.4 lbs (-P)
Внутреннее питание Встроенные uplinks Условия Эксплуатации:
Рабочая темп.: 0° до 40° C*
Рабочая высота: до 5,000 ft*
Высокая производительность
На скорости среды, не блокируемый
Интерфейсы управления Консоль (RJ45, USB) Выделенный Ethernet (RJ45)
* Диапазон может быть увеличен в случае использования оптики с расширенным температурным режимом
RJ-45/SFPМагистрал
ьные порты
двойного назначени
я
Все портыподдерживают PoE
(PoE код заказа)
ВнешнийUSB
OOB GbEУправление
.
38 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
ДРУГИЕ ЭЛЕМЕНТЫ
Удобство кабельного хозяйства:
Блокировщик кабеля, который крепится спереди коммутатора, предотвращает отключение кабелей
Физическая безопасность:
Разъемы для защиты по обоим сторонам коммутатора позволяют использовать локер, тем самым обеспечивая физическую безопасность устройства
Простота крепления:
Для простоты крепления на металлические поверхности
39 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
МАСШТАБИРУЕМОСТЬ EX2200-C
Функциональность Макс.
VLANs 1023
PACLs 1502
VACLs 1502
Bandwidth Line Rate
Number of Queues Per Port 8 per physical port
MAC addresses 16K
ARP 16K
MST Instances 64
VSTP Groups 1K
Port Mirroring (Local/Remote) (1/0)
Number of Analyzer Sessions 1
IGMP Groups 1K
Number of Policers 512
L2 FWD table size 16K
40 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX3300 ЛИНЕЙКА ETHERNET КОММУТАТОРОВ
24-48 фиксированных порта доступа PoE+ опции моделей 4 SFP/SFP+ uplinks Встроенный ИП (AC/DC) и
вентиляторы Обдув для ЦОД RPS поддержка
Virtual Chassis технология До 6 коммутаторов в
Виртуальном шасси VC поверх 10GbE uplinks VC между коммутаторами до
40Km .
Проверенные Juniper технологии Junos ОС Уровень 3 (OSPF, PIM)
Код заказа Обдув PoE/+ порты
ИП Всего PoE
питания
EX3300-24T F-to-B 0 AC 0
EX3300-48T F-to-B 0 AC 0
EX3300-24P F-to-B 24 AC 405W
EX3300-48P F-to-B 48 AC 740W
EX3300-24T-DC F-to-B 0 DC 0
EX3300-48T-BF B-to-F 0 AC 0
Roadmap
41 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX3300 ВИД СПЕРЕДИ/С ОБРАТНОЙ СТОРОНЫ
Вид спереди
В планах (not available at FRS)
Вид сзади
LCD
1GbE/10GbE SFP+ uplink порты
1GbE порт управления
Консольный порт
Системный вентилятор
AC ИП
USB Выход воздуха
1GbE сетевые порты; PoE+ поддержка
RPS коннектор
Фиксированная модель 17.4Ш x 12Г x 1.75В inches 1 U высота
Встроенный ИП Встроенные порты для
подключения к магистрали Условия эксплуатации
Рабочая темп.: 0° до 45° C
Рабочая высота: до 10K ft
Пониженный шум: 40-45dB
Интерфейсы управления ЖК дисплей Консоль (RJ-45) Выделенный порт Ethernet
(RJ-45)
42 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX3300 ВИРТУАЛЬНОЕ ШАССИ
До 6 участников в конфигурации Virtual Chassis поверх 10GbE каналов
• Два последних порта изначально сконфигурированы как порты Виртуального Шасси по умолчанию
• Все четыре магистральных порта могут быть настроены в качестве портов не участвующих в виртуальном шасси
• Все четыре магистральных порта могут учувствовать в формировании Виртуального шасси
• Производительность 80 Gbps на портах для подключения к магистрали/Виртуальное шасси
Каждый порт для подключения к магистрали может детектировать скорости GbE/10GbE
10GbE DAC кабели рекомендованы для Виртуального шасси (один на EX3300)
• Кабели для Виртуального шасси не поставляются с EX3300 по умолчанию
• Смешанный режим Виртуального Шасси с EX4200 или EX4500 не поддерживается
Поддерживаемые SFP
EX-SFP-10GE-DAC-1M
EX-SFP-10GE-DAC-7M
EX-SFP-10GE-LR
EX-SFP-10GE-LRM
EX-SFP-10GE-SR
EX-SFP-10GE-USR
EX-SFP-1GE-LX
EX-SFP-1GE-SX
43 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX4200 & EX4500 VIRTUAL CHASSIS
64Gbps на Virtual Chassis порт
64 Gbps на Virtual Chassis порт
EX4200 и EX4500 Virtual Chassis До10 EX4200, два EX4500, или
8 EX4200s / 2 х EX4500 смешанный VC До 480 GbE портов До 112 10GbE портов Шина: 128 Gbps
EX4500
EX4200
44 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
МОДУЛЬНЫЕ КОММУТАТОРЫ EX8200 Высокопроизводительные платформы
EX8208 – 8 линейных карт, 960Mpps EX8216 – 16 линейных карт 1.92Bpps Готовность для 100 GbE интерфейсов Резервирование модулей управления 1+1 и фабрик
коммутации N+1 До 256 неблокируемых 10GbE портов в стандартной
стойке 320Gbps на линейную карту
Технология Виртуального шасси До 4-х шасси в Virtual Chassis Требуется внешний Routing Engine (XRE)
Полное резервирование питания и охлаждения Резервирование питания N+1
(AC, DC) Резервирование охлаждения 1+1
Разработки Juniper Фабрики, модули управления Сетевые процессоры (PFE) Система Junos
Тип модуля Макс. Порты
48-port 10/100/1000B-T 384 or 768 RJ-45
48-port 100B/FX/1000B-X 384 or 768 SFP
8-port 10GbE 64 or 128 SFP+
40-port GbE/10GbE 320 or 640 SFP/SFP+
45 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX8200 GbE/PoE+ ЛИНЕЙНЫЕ КАРТЫ ДОСТУПА
EX8200-2X40P, EX8200-2X40T Комбо карта
40 RJ-45 1000T, 4 100/1000 SFP, 2 10GbE SFP+ 2.5:1 O/S на 1G медь, на скорости среды при 1G и
10G оптике 24 Gbps на 1G портах, 20Gbps на 10G портах До 320 PoE портов плюс 16 10GbE на EX8208 Восемь очередей, 21MB буфер на 1G порт, 512MB
на 10G
EX8200-48PL, EX8200-48TL Карта доступа
48 RJ-45 10/100/1000BASE-T или PoE (1st 12 портов PoE+) 2.4:1 переподписка 24 Gbps, 36 млн. пакетов в секунду До 384 PoE портов на EX8208 (3kW ИП) Восемь очередей, 21MB буфер на порт
Спроектированы для конвергентного Доступа с Агрегацией/Ядром: “ЛВС в коробке”
46 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX8200 ЛИНЕЙНЫЕ КАРТЫ РАСШИРЕННОЙ МАСШТАБИРУЕМОСТИ
EX8200-8XS-ES EX8200-48F-ES EX8200-48T-ES EX8200-40XS-ES
11.1 11.4
Функции Стандартные I/O
ES I/O Версия ПО
IPv4 Unicast Routes 360k (500k max) 720k (1M max) 11.1
IPv6 Unicast Routes 120k (250k max) 240k (500k max) 11.1
Caffeine VC (Fixx) Yes 11.4 11.4
MAC Table 160k 320k (11.4) 11.4
IPv4/IPv6 Multicast Routes 120k 240k (11.4) 11.4
VRFs 256 1024 (11.4) 11.4
2x больше FIB/управляющей памяти (без изменений применительно к ACL), 30% быстрее CPU линейной карты
Полная поддержка функций по сравнению с существующими картами (не-ES)
Системы использующие разные типы карт:
Не рекомендовано Juniper : Возможная опция в будущем (TBD)
Система обнуляется до уровня масштабирования обычных карт
47 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
XRE200: ВИД С ОБЕИХ СТОРОН
XRE200 Вид спереди
XRE200 Вид сзади
Резервные, горячей замены,с балансировкой нагрузки модули охлаждения
ЖК дисплей
Фиксированный форм фактор
2RU (17.26 in Ш x 3.5 in В x 17.72 in Г)
Модульные компоненты ИП, модуль охлаждения 2 модуля для
организации интерфейса Virtual Chassis Control Interface (VCCI)
Производительность 2.1GHz двух ядерный
процессор 4GB DRAM 4GB Флешь
VCCI интерфейсы 4 x 10/100/1000BASE-T
RJ-45 4 x 1000BASE-X SFP
Доступность Двойные, резервные
250W AC питание Двойные, горячей
замены модули охлаждения
Управление Консоль Выделенный
VCCI модуль (свободный)
GbEДля управ., Консольные порт и USB
Резервные, горячей замены,с балансировкой нагрузки ИП
VCCI модуль (4 x RJ45)
48 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
ФУНКЦИОНАЛЬНОСТЬ ПО И ЛИЦЕНЗИРОВАНИЕ
ФУНКЦИОНАЛЬНОСТЬ
Расширенный уровень 3:IPv6 маршрутизация, BGP, ISIS,
MPLS
Уровень 3: OSPF, IGMP v1/v2, PIM, vrf-lite,
QinQ, OAM (802.1ag), 1588
Уровень 2 и базовый Уровень 3:STP, VLAN, LAG, LLDP/MED, RIP,
IPv4/IPv6 Static routes, IGMP snooping, managed by Junos
Space, sFlow, PVLAN, 802.1x, 802.3ah,
Технология Virtual Chassis
EX2200
Не поддерживает
ся
Расширенная лицензия
База (лицензия не
требуется)
EX4200/EX6200
Расширенная лицензия
База (лицензия не
требуется)
EX3300
Расширенная лицензия
Расширенная лицензия
База (лицензия не
требуется)
Roadmap
49 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
EX МАСШТАБИРОВАНИЕ
Масштабирование системы
EX2200-C/ EX2200 EX3300 EX4200/
ЕХ4500 EX6210 EX8200/ES QFX3500
Таблица MAC 16K/24K 24K 32K 32K 160K/320K 128K
Таблица маршрутов (IPv4) 6.5K 6.5K 16K/10К 16K 360K/720K 20K
VLANы 1K 1K 4K 4K 4K 4K
QoS очереди на порт 8 8 8 8 8 8
Firewall фильтры 1.5K 1.5K 7K/1.5К 7K 64K 1.5K
Multicast группы 1K 1K 8K/2К 2K 16K 4K
LAG 32 32 64 64 255 64
Каналов на LAG 8 8 8 8 12 8
Анализируемых сессий 1 1 1/7 1 7 4
Q & A
51 Copyright © 2009 Juniper Networks, Inc. www.juniper.net Thank you