Junos Product Guide 2014 Juniper : F FAX URL: ht

Transcription

1 Junos Product Guide 2014 Juniper : F FAX URL: Copyright 2013, Juniper Networks, Inc. All rights reserved. Juniper NetworksJunosNetScreenScreenOSJuniper Networks Juniper Networks, Inc. Ent_Product_JP Jan 2014 Vol.7 SDN/Contrail QFX VC/QFabric MX SRX MAG WL Junos Space &

2 CONTENTS Juniper SDN SDN/Contrail 10 Junos Space Contrail Spotlight Secure WebApp Secure 12 Junos SDK WebApp Secure DDoS Secure QFX 22 VC/QFabric 24 Junos Space SDK Junos Pulse DDoS Secure FireFly-Series MX 26 SRX-Series vwlc-series SRX 30 VSE-Series MX-Series FireFly-Series SSL VPN-VA 36 MAG 38 JunosV App Engine VXA-Series MAG-Series UAC-VA WL 40 / ACX-Series JSA-Series Junos Space 44 Junos Space 45 -Series LN-Series Netscreen/SSG JSA-VA & 46 QFX-Series T-Series 47 WLx-Series M-Series QFabric PTX-Series 02 Juniper Networks Contents Juniper Networks 03

3 Juniper SDN:6-4-1 SDNSoftware Defined Network Juniper MetaFabric IT JuniperMetaFabric 6 Any Orchestration and App/Software SDN, Contrail and OpenContrail SDN, Contrail and OpenContrail 4 Any Physical Network Switching QFX Series Series SRX Series Routing MX Series Virtual and Physical Security Primary Data Center - Private Cloud Single Pane of Glass Management Routing MX Series QFX Series Series Switching EVPN VPLS MPLS Routing MX Series SRX Series Switching QFX Series Series Virtual and Physical Security SRX Series Virtual and Physical Security Public Cloud MetaFabric TM Architecture Secondary Data Center Any Virtual Network Any Server, AnyStorage, Any Hypervisor MetaFabric 1 / Connect Everything, Empower Everyone Connect Everything. Empower Everyone. OS Junos OSJunos TrioJunos Express / Web 04 Juniper Networks Juniper Juniper Juniper Networks 05

4 ネットワーク ダイアグラム ジュニパー製品で実現します 堅牢性と柔軟な可用性を両立する企業ネットワーク データセンター をバーチャルシャーシ構成で使用することにより 従来 の多階層型ネットワークよりもシンプルでより柔軟な効率の 高いネットワークを実現しています データセンター QFABRIC (QFX Series) WAN 企業ネットワーク まずは E Xによるシンプルなネットワークを構 築し トラ データセンターファブリック MX Series フィックの状況により QFABRICシステムへの移行も可能 P22 です QFABRICによる 真のデータセンター ファブリック E POD は フラットな 1階層のネットワークを実現し beネット 外部ネットワークとの玄関口として MXルーターを ワークの管理運用を劇的に効率化します また 仮想サー 配置し シームレスな外部接続を実現 外部から バーを採用しているデータセンター内では vgwによるセ のセキュリティ脅威には SRXがファイアウォール として企業内ネットワークを守ります 企業内は がシンプルで遅延の少ないスイッチ Viritual SSL VPN 企業ネットワーク A P12 Series 社内のユーザーは WLCや WLAによるワイヤレス キュリティ対策を施すことができます Series スイッチング ネットワークにより 会議などの移動の際にもスト 理環境と仮想環境を統合的に保護し 費用対効果の高いセ 仮想化セキュリティ ソリューション SRX Series ネットワークを実現しています キュリティをハイパーバイザー上に適用することにより 物 vgw Series WLA Series BUILDING B レスフリーなネットワーク接続を享受できます ま vgw Series た PCやタブレット スマートフォンなどのユーザー 仮想化セキュリティ ソリューション MAG Series/UAC 端末はJUNOS PULSE/MAGによりセキュリティ 1GE/E POD が確保されており BYOD BRING YOUR OWN DEVICE 対策やワイヤレス環境と共に顧客やビ Series ジネス パートナーへのゲストアクセス サービス BUILDING B1 無線LAN アクセスポイント の 提 供も万全です 拠 点ネットワークでは SRX WLA Series BUILDING A がセキュリティサービスを提供しつつ 外部ネット P40 ワークとの玄関口の役割を担います BUILDING C MAG Series (UAC/SSL VPN) 大規模/データセンター向け ファイアウォール SRX Series BUILDING A1 MX Series P30 無線LANコントローラー MX Series WLC Series WLC Series WLA Series SRX Series MX Series WLC Series 大規模向け ルーティング MX Series P26 MX Series Series 企業ネットワーク B WAN MX Series SSL-VPN リモートアクセス MAG Series P40 P38 Series SRX Series 中小規模向 けルーティング ファイ アウォール 大規模拠点 SRX S eries WLA Series P30 WAN WLA Series Series ルーティング スイッチング 06 Juniper Networks ネットワーク ダイアグラム 小規模拠点 大 量データの 複 雑 なル ーティングトラフィックを 効 率良 く処理する高機能ルータ MX MXを拠点間ネットワーク の中心に据えることにより シームレスで 遅 延のない セ キュアなネットワークを実現します 増加するデータやトラ SRX Series 中規模拠点 フィック リッチメディアを高速に転送し パブリッククラウ ドとプライベートクラウドおよび拠点ネットワークの高速な 相互接続を実現します ネットワーク ダイアグラム Juniper Networks 07

5 DC QFabric A TCO S 1G MX MPLS/VPLS QFabric /1G QFabric 1G 3300 QFabric 13001G150 QFabric S VPLSL2 bps4200 T K LAN bps A T MX M T LAN LAN LAN LAN MX480 MX480 MX480 MPLS M320 M320 M320 M320 WDM M320 M320 M120 M120 M120 L A N 1U4200 EPS RICD 4200 B 4200 LAN LAN MX480 M320 M320 M120 L A N 08 Juniper Networks Juniper Networks 09

6 Product Guide: 01 SDN / Contrail Juniper Networks Contrail CONTRAIL Juniper Networks ContrailSDN VPC AUTOMATION, ANALYTICS COMPUTE, ANALYTICS OSS/BSS DC ORCHESTRATION SYSTEM REST APIs CONTROL/POLICY CONFIGURATION MANAGEMENT, AUTOMATION CONTROL PLANE CONTROL PLANE CONTROL PLANE CONTROL PLANE VIRTUAL SERVICE OVERLAY NFV(NETWORK FUNCTION VIRTUALIZATION) PHYSICAL NETWORK NFV SDN Juniper Networks Contrail OpenContrail SDN SDNhttp:// 10 Juniper Networks SDN/Contrail SDN/Contrail Juniper Networks 11

7 Product Guide: 02 TCO 2200-C P P F Virtual Chassis:VC L3 VRRP STP L3 101 L LAG 4200 BOX C Series 2200 Series 3200 Series 3300 Series 4200 Series 4300 Series 4500 Series 4550 Series 10/100/1000+2G 10/100/1000+4G 10/100/ /100/ /100/1000+ SFP+ 10/100/ G SFP/SFP+ SFP/SFP C-12T-2G 2200-C-12P-2G T-4G P-4G T P VC T P VC T PX VC F VC 40G T/24P VC F VC G 48080Km * 24/48Po A 4200 B D 4200 C ChassisSwitch T-4G P-4G T P VC T P VC T PX VC 40G T/48P * XFP-E-ZROptics Junos HA Junos OSL2/L3 GRESGraceful Routing Engine SwitchoverNSB, NSR / RE RE 4200 GRES Graceful Routing Engine Switchover 15 Tbps 10 Tbps 5 Tbps 2 Tbps Tbps MaxbE:8 Max1GbE: Tbps MaxbE:64 Max1GbE: Tbps MaxbE: Tbps MaxbE:128 Max1GbE: Tbps MaxbE: Tbps MaxbE: be 12 Juniper Networks Juniper Networks 13

8 F C C cm) U U U cm) U U/ U 2200-C-12T-2G:2.09kg 2200-C-12P-2G:2.9kg T-4G:2.7kg T-4G-DC:2.7kg P-4G:3.6kg T-4G:3.6kg P-4G:4.5kg Gbps :56Gbps :104Gbps T:6.8kg T-DC:6.8kg P:7.1kg T:7.1kg T-DC:7.1kg P:7.6kg :88Gbps :136Gbps 21Mpps :42Mpps :65Mpps :77Mpps :28 10/100/1000Base-T :101Mpps :24 244Gbps : :52 100Base- 2SFP FX/1000Base-X(SFP) 4SFP 44Gbps 484Gbps Base-X bps/PoE PoE V/200240V 2200-C-12T-2G: 30W AC 2200-C-12P-2G: 30W AC V/200240V 2200-C-12P-2G: 180W AC V/200240V T/48T-4G: 100W AC V/200240V P/48P :550W AC OS Junos Junos Junos sflow sflow sflow MAC 16,000 16,000 32,000 9,216 9,216 9, V/200240V T/48T: 320W AC T/48T-DC: -36V-72V,190W DC V/200240V T/48T :130W AC P: 600W AC P: 930W AC T:4.6kg T-DC:4.5kg P:5.3kg T:4.9kg T-BF:4.9kg P:5.8kg T:7.5kg T-DC:7.5kg PX:8.16kg F:7.3kg F-DC:7.3kg T:7.8kg T-DC:7.8kg PX:8.61kg 4300 (,FAN): 5.9 kg 4300 (1FAN2):7.3 kg 350 W AC:1.1 kg 715 W AC :1.1 kg 1100 W AC:1.1 kg 550 W DC: 1.1 kg Fan: 0.15 kg 80Gbps 128Gbps 320Gbps 10/100/1000Base-T :369Mpps100Base- FX/1000Base-X(SFP) 40GBase-X: 4 (QSFP+/10/40GBase-X PoE PoE :128Gbps :176Gbps :95Mpps :130Mpps : : SFP Base-X: 4SFP V/200240V T/48T/48T-BF: 100W AC T-DC: -36V-72V 100W DC V/200240V P: 550W AC P: 900W AC :88Gbps :136Gbps :65Mpps :101Mpps :448Gbps :496Gbps :333Mpps : : Gbps : : Gbps Gbps Base-X: 4 (SFP) Base-X22bps Base-X:4 Base-X SFP V/200240V T/48T/24F: 320W AC T-DC/48T-DC/24F-DC: -36V-72V 190W DC V/200240V PX/48PX: 930W AC OS Junos Junos Junos V/200240V T/48T/48T-AFI: 350W AC T-DC/48T-DC-AFI: 550W AC V/200240V P: 715W AC P: 1100W AC IPv4/ 6,500 6,500 / 0 16,000 / 8,000 sflow sflow sflow VLAN 1,024 1,024 4,096 ARP 2,000 2,000 16,000 MAC 16,000 32,000 64,000 9,216 9,216 9, IPv4/ 8,000 16,000/8,000 8,000*/8, % 0%95% 0% 95% VLAN 4,096 4,096 4,093 ARP 4,000 16,000 64, % 0%95% 095% 14 Juniper Networks Juniper Networks 15

9 S XRE cm) U (1U) (14U) 17kg 8.8kg(1 72kg 98kg 480Gbps 480Gbps 4.4Tbps 960Gbps 960Gbps 714Mpps 714Mpps 690Mpps10/100/1000Base-T 100Base- FX/1000Base-X(SFP) Base-X 100/1000/10000 Base -T 40GBase QSFP+ - 48( B-T 48(40 48( F: F: T: F: T: T: F: T: F: 4 100GBase CFP / 1200W AC/DC :328W 4bps SFP+346W 8bps SFP+364W 650W AC/DC F :174W 18bps SFP+195W 28bps SFP+215W T :330W 28T413W OS Junos Junos Junos sflow sflow sflow MAC 32,000 32,000 32,000 9,216 9,216 9,216 IPv4/ 10,000/4,000 10,000/4,000 10,000/4,000 VLAN 4,096 4,096 4,096 ARP 8,000 8,000 8, % 0%95% 095% 2SRE,1128Gbps 1SRE,164Gbps 432 (384I/O48SRE 81/bps SFP/SFP+ SRE 81/bps SFP/SFP+ SRE V/200240V : 2,500W AC/5,000W AC(1 10,000W20,000W 2,100W: DC XRE200 cm) - 10/100/1000Base-T 100Base- FX/1000Base-X(SFP) -Base-X / 8208: (14U) 8216: (21U) 8208 :41kg 68kg 85kg 129kg 8216 :73kg 123kg 126kg 220kg 8208: 6.2Tbps 8216: 12.4Tbps 9204: (5u) 9208: (8U) 9214: (16U) 9204 : 23.6kg 58.1kg 9208 : 29.7kg 74.2kg 9214 : 68.0kg 158.8kg 9204:1.6 Tbps 9208:4.8 Tbps 9214:13.2 Tbps T: 40 Gbps PL/ TL:40 Gbps F: 40 Gbps XS-40P/8200-2XS-40T:80 Gbps XS: 240 Gbps T/48T-ES/48F/48F-ES:96Gbps QS: 120 Gbps XS/8XS-ES/40XS/40XS-ES:160 Gbps 240 Gbps 8208: 960Mpps 8216: 1.92Bpps PoE/Non-PoE 96 PoE : PoE/Non-PoE 9208: PoE+ 9214: T) 2.4: TL/48PL) 8208 : : : : F) 9214: : : XS) 8208 : : XS) V/200240V : 1,200W AC/2,000W AC(1 6,000W10,000W -48V: 3,000W DC/ 200V-240V: 3000W AC(115,000W 9204: : : /1000/10000 Base -T GBase QSFP : : : GBase CFP :6 9208: : : -40 to -72 V DC: 2400W V AC: 1167W V AC: 2520W Maximum power draw 2,199W (DC), 2,421W (AC) 9208: -40 to -72 V DC: 2400W V AC: 1167W V AC: 2520W Maximum power draw 4,388W (DC), 4,831W (AC) 9214: -40 to -72 V DC: 2400W V AC: 1167W V AC: 2520W Maximum power draw 9,534W (DC), 9,318W (AC) OS Junos Junos Junos sflow IPFIX sflow (future) MAC 160,000 1,000,000-9,216 9,216 - IPv4/ 500,000/100,000 1,000,000/100, ,000 - VLAN 4,096 32,000 - ARP 100, , %95% 0%95% 595% (2U) 13.15kg SFP V,5060Hz,250W, AC -3872V, 560W DC/156W 22I/O 16 Juniper Networks Juniper Networks 17

10 SFP/SFP+/XFP 2200-C XRE C XRE SFP-1FE-FX - SFP-1FE-FX-ET - SFP-1FE-LH - SFP-1FE-LX - SFP-1FE-LX40K - SFP-FE20KT13R15 - SFP-FE20KT15R13 - SFP-1GE-LH - SFP-1GE-LX - SFP-1GE-LX40K - SFP-1GE-SX - SFP-1GE-SX-ET - SFP-1GE-T - SFP-GE10KT13R14 - SFP-GE10KT13R15 - SFP-GE10KT14R13 - SFP-GE10KT15R13 - SFP-GE40KT13R15 - SFP-GE40KT15R13 - SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-GE80KCW SFP-E-DAC-1M - SFP-E-DAC-3M - SFP-E-DAC-5M - SFP-E-DAC-7M - SFP-E-ER - SFP-E-LR - SFP-E-LRM - SFP-E-SR - SFP-E-USR - SFP-E-ZR - XFP-E80KDWDM - XFP-E-ER - XFP-E-LR - XFP-E-SR - XFP-E-ZR - QSFP-40GE-DAC-50CM JNP-QSFP-40G-LR4 SFP100Base-FX1310nm2km MMF SFP100Base-FX1310nm2km MMFLC2200-C SFP100Base-LH1550nm80km SMF SFP100Base-LX1310nm10km SMF SFP100Base-LX1550nm40km SMF SFP100Base-BXTX1310nm/RX1550nm 20kmSMF SFP100Base-BXTX1550nm/RX1310nm 20kmSMF SFP1000Base-LHGbE1550nm 70kmSMF SFP1000Base-LXGbE1310nm 10kmSMF SFP1000Base-LXGbE1310nm 40kmSMF SFP1000Base-SXGbE850nm 550mMMF SFP1000Base-SXGbE850nm 550mMMFLC2200-C SFP1000Base-T10/ 100/ 1000CAT5 100m SFP1000Base-BXGbETX1310nm/ RX1490nm10kmSMF SFP1000Base-BXGbETX 1310nm/ RX1550nm10kmSMF SFP1000Base-BXGbETX1490nm/ RX1310nm10kmSMF SFP1000Base-BXGbETX1550nm/ RX1310nm10kmSMF SFP1000Base-BXGbETX1310nm/ RX1550nm40kmSMF SFP1000Base-BXGbETX1550nm/ RX1310nm40kmSMF SFPCWDM1470nm80km SMF SFPCWDM1490nm80km SMF SFPCWDM1510nm80km SMF SFPCWDM1530nm80km SMF SFPCWDM1550nm80km SMF SFPCWDM1570nm80km SMF SFPCWDM1590nm80km SMF SFPCWDM16100nm80km SMF SFP+bEtwinax1m SFP+bEtwinax3m SFP+bEtwinax5m SFP+bEtwinax7m SFP+Base-ERbE1550nm 40kmSMF SFP+Base-LRbE1310nm 10kmSMF SFP+Base-LRMbE1310nm 220mMMF SFP+Base-SRbE850nm 300mMMF SFP+Base-USRUltraShortReachbE 850nmOM110mOM220mOM3100m SFP+Base-ZRbE1550nm 80kmSMF XFPBaseDWDMC-band50GhzITU-T G km SMF XFPBase-ERbE 1550nm40kmSMF XFPBase-LRbE 1310nm10kmSMF XFPBase-SRbE 850nm300mMMF XFPBase-ZRbE 1550nm80kmSMF QSFP+40twi nax50cm passive QSFP+40GBase-LR nm10km(SMF) JNP-QSFP-DAC-5M QSFP+40twinax5m passive QFX-QSFP-40G-SR4 QSFP+40GBase-SR nm150m(SMF) QFX-QSFP-DAC-1M QSFP+40twinax1m passive QFX-QSFP-DAC-3M QSFP+40twinax3m passive -12-EFL 2200-C -24-AFL T/P T/P T/P/F/PX SKU -24-EFL T/P T/P SKU 4550-AFL 4550 IS-IS, BGP, MPLS -48-AFL T/P T/P T/P/F/PX F SKU -48-EFL T/P T/P SKU EFL T/24P EFL T/48P AFL T/24P AFL T/48P -QFX-MACSEC-ACC MACsec -QFX-MACSEC-AGG 4550MACsec 6200-AFL AFL AFL AFL AFL AFL XRE200-AFL 8200 XRE200 CBL--PWR-C13-JP AC Japan12A/125V2.5m CBL--PWR-C19-JP AC - Japan16A/250V m CBL--PWR-C19-JP110V AC - JP 110VNEMA A/125V2.5m CBL--PWR-C19-JPL AC - Japan Locking16A/250VL m CBL-M-PWR-RA-JP AC Power Cord, JapanNEMA LOCKING, C19, 20A/250V, 2.5m, Right Angle CBL-PWR-C19S-162-JP Power Cord, AC, Japan, NEMA 6-20 to C19, 16A/250V, 2.5m, Straight 9214 CBL-PWR-C19S-162-JPL Power Cord, AC, Japan/US, C19 at 70-80mm, 16A/250V, 2.5m, Straight, Locking Plug 9214 CBL-PWR-RA-JP15 AC Power Cable: JIS A/125V 2.5m length for Japan, Right Angle 9204/ PWR1-AC-BF 4500-PWR1-AC-FB 4500-PWR1-DC W AC W AC W DC PWR-AC W AC 220V1250W/110V 6200-PWR-AC W AC 220V2500W/110V 6200-PWR-DC W DC 8200-PWR-AC2K AC 2000W/220V1200W/110VAC 8200-PWR-AC3K AC 3000W/220VAC 8200-PWR-DC2KR DC 2000W/-48V 8200-PWR-DC3KR DC 3000W/-48V -PWR-190-DC 4200/ W DC -PWR-320-AC 4200/ W AC -PWR-600-AC 4200/ W AC -PWR3-930-AC -RPS-PWR-930-AC RPS-PWR-930-AC 930W AC PoE+ RPS; RPS W AC 1 JPSU-350-AC-AFO W AC JPSU-350-AC-AFI W AC JPSU-715-AC-AFO W AC JPSU-1100-AC-AFO W AC JPSU-550-DC-AFO W DC JPSU-550-DC-AFI W DC -XRE200-PWR-250-AC XRE200 AC 250W -XRE200-PWR-560-DC XRE200 DC 560W JPSU-650W-AC-AFI JPSU-650W-AC-AFO JPSU-650W-DC-AFI JPSU-650W-DC-AFO Juniper 650W AC Power Supply for 4550, QFX3500 and QFX3600PSUside airflow intake Juniper 650W AC Power Supply for 4550, QFX3500 and QFX3600PSUside airflow exhaust Juniper 650W DC Power Supply for 4550, QFX3500 and QFX3600PSUside airflow intake Juniper 650W DC Power Supply for 4550, QFX3500 and QFX3600PSUside airflow exhaust PWR-MX DC-R 2400W DC Power Supply, Redundant 9204/9208 PWR-MX AC-R PWR-MX AC-R 2520W AC Power Supply, RedundantNote: AC power cords are sold separately 4100W AC Power Supply, Redundant,Note: AC power cords are sold separately 9204/ PWR-MX DC-R 4100W DC Power Supply, Redundant Juniper Networks Juniper Networks 19

11 -UM-4SFP 4200/ G SFP 2200-C UM-2X4SFP 4200/ SFP+/41G SFP -UM-2XFP 4200/ XFP -UM-4X4SFP GbE/bE SFP UM-4XSFP SFP EM-8XSFP Port SFP+ Expansion Moduleoptics sold separately 4550-EM-8XT port 100M/1G/ BaseT Expansion Module 4550-EM-2QSFP port 40GbE Expansion module (optics sold separately 4500-VC1-128G 4500, 128G Virtual Chassis modulevc Cables sold separately VC -CBL-VCP-50CM 4200/ m VCP -CBL-VCP-1M 4200/4500 1m VCP -CBL-VCP-3M 4200/4500 3m VCP -CBL-VCP-5M 4200/4500 5m VCP 3200-FANTRAY FANTRAY FANTRAY-BF FANTRAY-FB FANMODULE-AFI 4550 PSU side to Built in Port Side air flow 4550-FANMODULE-AFO 4550 Built in Port Side to PSU side air flow 6210-FAN FAN-S FAN-S FFANTRAY-MX240-HC-S MX240 High Capacity fantray, Spare 9204 FFANTRAY-MX480-HC-S MX480 High Capacity fantray, Spare 9208 FFANTRAY-MX960-HC-S MX960 High Capacity fantrayupper or lower, Spare XRE200-FANTRAY XRE200 USB RE-USB-1G-S RE USB / RE-USB-2G-S RE 2GB USB / RE-USB-4G-S RE 4GB USB / P /100/1000BASE-T PoE T /100/1000BASE-T RJ XS-40P XS-40T XS 40PoE+ 1000Base-T RJ BASE-X SFP 2bE SFP+ 40Gbps Base-T RJ BASE-X SFP 2bE SFP+ 40Gbps 401GbE/bE SFP/SFP+ SFP/SFP XS-ES 40bE SFP F F-ES 48100FX/1000Base-X SFP SFP 48100FX/1000Base-X SFP SFP PL 48PoE+ 10/100/1000Base-T RJ-45 20Gbps T 4810/100/1000Base-T RJ T-ES 4810/100/1000Base-T RJ TL 4810/100/1000Base-T RJ-45 20Gbps XS 8bE SFP+ SFP XS-ES 8bE SFP+ SFP XS 32-port be SFP+ line card; requires SFP+ optics sold separately F 40-port 100FX/1000Base-X SFP line card; requires SFP optics sold separately T 40-port 10/100/1000Base-T RJ-45 line card QS 4-port 40GbE QSFP+ line card; optics sold separately -XRE200-1GE-4F XRE200 41G SFP -XRE200-1GE-4T XRE /100/1000 Base-T RJ-45 IO XRE 200 Hot-aisleCold-aisle /FANAFIAFO xxx-AFO(Front-to-Back): /FAN 4300-xxx-AFI (Back-to-Front): /FAN AFO 4500 AFI 4500-xxx-FB(Front-to-Back): /FAN 4500-xxx-BF(Back-to-Front): /FAN FB 4550 BF 4550-xxx-AFO(Front-to-Back): /FAN 4550-xxx-AFI (Back-to-Front): /FAN AFO Front Front Back FrontPort side Back BackPSU side AFI QFX3500 QFX3500-xxx-AFO(Back-to-Front): /FAN QFX3500-xxx-ACRB(Back-to-Front)/FAN QFX3500-xxx-AFI (Front-to-Back): /FAN QFX3500-xxx-ACR(Front-to-Back): /FAN AFO ACRB QFX3600 QFX3600-xxx-AFO(Front-to-Back): /FAN QFX3600-xxx-ACRB(Front-to-Back): /FAN QFX3600-xxx-AFI (Back-to-Front): /FAN QFX3600-xxx-ACR (Back-to-Front): /FAN AFO ACRB QFX5100 Back(Port BackPort side side) Front(FRU side) AFI ACR QFX3500AFI/AFO Front-to-Back/Back-to-Front ACRAFIMBACRBAFOMB AFI ACR ACRAFIACRBAFO QFX5100-xxx-AFO(Front-to-Back): /FAN QFX5100-xxx-AFI (Back-to-Front): /FAN AFO FrontPort side Front FrontFRU side BackFRU side Back AFI 20 Juniper Networks Juniper Networks 21

12 Product Guide: 03 QFX 1Fabric QFX QFX5100 QFabric Node QFX3500 QFabric Node QFX3600 QFabric Node QFX5100 QFabric Node QFX3600-I QFabric Interconnect QFX3008-I QFabric Interconnect QFX3100 QFablic Director QFX3500 QFabric Node QFX3600 QFabric Node QFX5100 QFabric Node QFX3600-I QFabric Interconnect QFX3008-I QFabric Interconnect QFX3100 QFabric Director cm QFX S: QFX Q: * QFX S: * *roadmap QFabric Junos OS LANSAN QFabric QFabric Director QFX3100 QFabric Interconnect QFX3008-IQFX3600-I I/OQFabric Node QFX3500QFX3600 QFX5100 any-to-any 40TbpsbE n/sInterconnect 3/s 5/s TCO 1/3 TCO 2/338 90% 90% L3 L2 TRILL like Architecture QFabric Interconnect QFabric Node QFabric Director L2 & L3 TCO % 45% : $28K/Yr 50% 74% 3-6x 1 vs QFabric ports 1 ports 1 ports 2 ports 2 22% 46% : $33K/Yr 50% 80% 3-6x 1 vs % 73%: $180K/Yr 85% 82% 12-16x 1 vs. 98 L2 & L3* 33% 77%: $360K/Yr 90% 85% 12-16x 1 vs. 193 L2 & L3* 13.95kg 14kg 960 Mpps 960 Mpps 1.28 Tbps 1.28 Tbps Default: 36x 1GbE/bE SFP+ 18x SFP-T 12x be or 2/4/8Gbps FC 4x 40GbE QSFP+ Breakout cable40gbe to 4xbE : 63x be36x 1GbE/bE, 12x 15x breackout Default: 16x 40GbE QSFP+ Breakout cable40gbe to 4xbE : 64x be64x breackout QFX S: 9.9kg QFX Q: 9.8kg QFX S: 14.74kg QFX S: 1.07Bpps QFX Q: 1.44Bpps QFX S: 1.44Bpps QFX S: 1.44Tbps QFX Q: 2.56Tbps QFX S: 2.56Tbps QFX S: 481/bE SFP 24x SFP-T 640GbE QSFP Breakout cablebe 72bE SFP QFX Q: 24 40GbE QSFP 840GbE QSFP module 2 Breakout cablebe 96bE SFP 104bE SFP module QFX S: 961/bE SFP 48 SFP-T 840GbE QSFP Breakout cablebe 104xbE SFP+ 14kg kg 8.69kg QFX3000-M: 5.12 Tbps 16 40Gbps QSFP+ QFX3500/3600 QFX3000-G: 40 Tbps Gbps QSFP+ QFX3500/3600 mgmt AC100240V 50/60 Hz DC V AC100240V 50/60Hz AC100240V 50/60 Hz QFX S AC100240V 50/60Hz AC200240V / AC100240V DC V DC V 215W DC4072V 240V 476W 365W 345W 150W 345W 6,420W 220W 230W 255W QFX Q 255W 4,620W 295W 161W OS Junos Junos Junos Junos Junos Junos LAG LAG LAG VLAN VLAN VLAN ACL ACL ACL / / / L2 over VLAN L2 over VLAN L2 over VLAN QoS MAC 128, , , ,000-1,536,000 9,216 9,216 9,216 IPv4/ 16,000 16, ,000 8,000 8, ,000 VLAN 4,095 4,095 4,095 Qfabric: FCoE Interfaces: 6,144 max FC Interfaces: 1,536 max FCoE/FC Transit switch / FIP snooping FCoE sessions:48,000 max VF_Ports: 384,000 max ARP 8,000 8,000 48, C 0 40 C 0 40 C 0 40 C 5 40 C 5 40 C C C C C C C 0 95% 0 95% 0 95% 0 95% 5 95% 5 95% QFabric QFX3000-M QFX3000-G QFX3000-M beqfabric InterconnectQFX3000-G QFabric QFabric QFabric QFX3000-M QFX3100 QFX3600-I QFX3500 QFX3600 QFX3008-I 16,000 QFX3000-G QFX3100 QFX3500 QFX3600 be 768 be 6, : Multi chassis LAG like 2: TRILL like *: Non-Blocking 22 Juniper Networks QFX QFX Juniper Networks 23

13 Product Guide: 04 VC/QFabric Virtual Chassis QFX/QFabric Fabric Virtual Chassis QFX QFabric QFX3500, QFX3600 Virtual ChassisQFX5100 Virtual ChassisQFabricVirtual Chassis Fabric 20 Virtual Chassis Fabric4300 Virtual Chassis(VC) Virtual Chassis Fabric(VCF) QFabric Scale QFX3000-G 92002VC Virtual Chassis QFabric Spine-Leaf irctr 4300QFX3500QFX3600 QFX5100 QFabric Spine-Leaf10/40G tr cct 82004VC i 128QFX3000-G QFX3500 QFX3000-M QFX360010VC a irctr 20memberVCF tr cct C 4VC Spine: QFX5100 Leaf: 4300, QFX3500, QFX3600, QFX QFX3000-M Virtual Chassis In-Band Virtual Chassis In-Band RingVC Leaf member4300qfx3500 QFX3600QFX5100 QFX3500QFX3600QFX5100 Inter connect1hopany-to-any 24 Juniper Networks VC/QFabric VC/QFabric Juniper Networks 25

14 Product Guide: 05 MX MX5 MX80 MX104 MX240 MX 260Gbps 100GE MX 8.8Tbps QoS 8.8Tbps 4.8Tbps 1.6 Tbps 160Gbps 160Gbps 120Gbps 80Gbps 40Gbps MX5 MX10 MX40 MX80 MX104 MX240 MX480 MX960 SDN MX SDN(USG) SDNVXLANMPLSoverGRENVGREEVPN OVSDBBGPL2L3SDN-to-WANSDN-to-SDN SDN L2 USG - IPSDNSDN L3 USG - IPSDNSDN SDN-to-SDN USG SDN-to-WAN USG WAN JUNOS Trio IC JUNOS Trio JUNOS Trio QoS MX MX OS ISSU In Service Software Upgrade 23 2 / 2 Web 2.0 WAN DMZ / 26 Juniper Networks MX MX Juniper Networks 27

15 MX MX5 MX10 MX40 MX80 MX104 MX240 MX480 MX960 MX5 MX10 MX40 MX80 40Gbps 80Gbps 120Gbps 160Gbps 55 60Mpps 55 60Mpps 55 60Mpps 55 60Mpps SCBE2 DPC/MPC MIC G cm U U U U :13.7kg :13.7kg :13.7kg :13.7kg / V /376W AC V /320W DC V /376W AC V /320W DC V /376W AC V /320W DC V /376W AC V /320W DC MX104 MX240 MX480 MX Gbps 1.6Tbps 4.8Tbps 8.8Tbps 55 60Mpps 660Mpps 1.32Bpps 2.64Bpps 260Gbps 260Gbps 260Gbps SCBE2 1.6Tbps 4.8Tbps 8.8Tbps DPC/MPC MIC 4 1 MPC 2 1 MPC 2 1 MPC 2 100G G G cm U U U U 14.5 kg :59.0kg :81.7kg :151.6kg / V /450W AC V /400W DC V /2,006W AC V /1,821W DC V /3,955W AC V /3,592W DC V /7,341W AC V /7,512W DC C Enhanced Switch Control Boards SCBE MIC MPCDPC MX5 MX10 MX40 MX80 MX104 MX240 MX480 MX960 MIC3-3D-10XGE-SFPP MIC with 10xE SFP+ interface, Optics sold separately. MIC3-3D-1X100GE-CFP MIC with 1x100GE CFP interface, Optics sold separately. MIC3-3D-1X100GE-CXP MIC with 1x100GE CXP interface, Optics sold separately. MIC3-3D-2X40GE-QSFPP MIC with 2x40GE QSFP+ interface, Optics sold separately. MIC-3D-16CHE1-T1-CE 16 port channelized T1 / channelized E1 down to DS0MIC, RJ48 connector MIC-3D-1OC192-XFP 1 port OC192/STM64 MIC, Requires a pluggable XFP optics module, Sold separately MIC-3D-20GE-SFP 20x10/100/1000 MIC for MX, requires optics sold separately MIC-3D-2XGE-XFP 2x MIC for MX, requires optics sold separately MIC-3D-40GE-TX 40x10/100/1000 RJ-45 full height MIC fixed optics MIC-3D-4CHOC3-2CHOC12 MIC-3D-4COC3-1COC12-CE MIC-3D-4OC3OC12-1OC48 Low density multirate MIC - Channelized, 4 port channelized OC3 / 2 port channelized OC12 down to DS0MIC, Requires a pluggable SFP optics module; Requires license S-MX80-Q when used on MX80 platform Multirate Circuit Emulation MIC, 4 port channelized OC3/STM1 down to DS0or 1 port channelized OC12/STM4 down to DS0CE MIC, Port 0 can be configured for OC12 which disables ports 1-3 Requires a pluggable SFP optics module Low density multirate MIC, 4 port non-channelized OC3-OC12 / 1 port non-channelized OC48 MIC, Requires a pluggable SFP optics module MIC-3D-4XGE-XFP 4x MIC for MX, requires optics sold separately. Only supported on MX-MPC2 line cards MIC-3D-8CHDS3-E3-B MIC-3D-8CHOC3-4CHOC12 MIC-3D-8DS3-E3 MIC-3D-8OC3-2OC12-ATM MIC-3D-8OC3OC12-4OC48 8 port channelized DS3 down to DS0/ non-channelized E3 MIC, 75 ohm minismb Requires CBL-DS3-E3-M-S to be ordered separately; Includes S-MIC-3D-8CHDS3 to support DS3 Channelization down to DS0; Requires license S-MX80-Q when used on MX80 platform High density multirate MIC - Channelized, 8 port channelized OC3 / 4 port channelized OC12 down to DS0MIC, Requires a pluggable SFP optics module; Requires license S-MX80-Q when used on MX80 platform 8 port non-channelized DS3 / non-channelized E3 MIC, 75 ohm minismb Requires CBL-DS3-E3-M-S to be ordered separately; Requires S-MIC-3D-8CHDS3 to support DS3 Channelization down to DS0 Multirate ATM MIC, 8 port non-channelized OC3/STM1 or 2 port non-channelized OC12/STM4 ATM MIC, Ports 0,4 can be configured for OC12 which disables ports 1-3, 5-7, Requires license S-MX80-Q when this MIC is used on MX80, Requires a pluggable SFP optics m High density multirate MIC, 8 port non-channelized OC3-OC12 / 4 port non-channelized OC48 MIC, Requires a pluggable SFP optics module MS-MIC-16G Multi Service - MIC with 16G for MX MX240 MX480 MX960 2xTrio Chipset MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 MX-MPC2-3D features 2xTrio Chipset MPC, per-ifl HQoS, 512K queues; price includes full scale L2/L2.5 and MX-MPC2-3D-EQ reduced scale L3 features MX-MPC2-3D-EQ-R-B MX-MPC2-3D-EQ line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC2-3D-Q 2xTrio Chipset MPC, per-ifl HQoS, 256K queues (max 128K egress); price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC2-3D-Q-R-B MX-MPC2-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC2-3D-R-B MX-MPC2-3D line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC2E-3D MX-MPC2E-3D-EQ MX-MPC2E-3D-P MX-MPC2E-3D-P-Q-B MX-MPC2E-3D-P-R-B MX-MPC2E-3D-Q 2xTrio Chipset Enhanced MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features 2xTrio Chipset Enhanced MPC, per-ifl HQoS, 512K queues; price includes full scale L2/ L2.5 and reduced scale L3 features MX-MPC2E-3D-EQ line card bundle, price includes full scale L3, L2 and L2.5 features 2xTrio Chipset Enhanced MPC, 1588v2, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC2E-3D-P line card bundle, price includes 1588v2, per-ifl HQoS, 256K queues (max 128K egress), full scale L2/L2.5 and reduced scale L3 features MX-MPC2E-3D-P line card bundle, price includes 1588v2, per-ifl HQoS, 256K queues (max 128K egress), full scale L3, L2 and L2.5 features MX-MPC2E-3D-P line card bundle, price includes 1588v2, full scale L3, L2 and L2.5 features 2xTrio Chipset Enhanced MPC, per-ifl HQoS, 256K queues (max 128K egress); price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC2E-3D-Q-R-B MX-MPC2E-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC2E-3D-R-B MX-MPC2E-3D line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC3E-3D MX-MPC3E-3D-R-B MPC4E-3D-32XGE-R-B MX240 MX480 MX960 DPCE-R-20GE-2XGE 20 Port GE + 2 port E DPC with L2+L3 features, Requires Optics Sold Separately DPCE-R-40GE-SFP 40x1GE Enhanced DPC for MX, requires optics sold separately DPCE-R-40GE-TX 40 Port 10/100/1000 RJ-45 DPC with L2+L3 Features. DPCE-R-4XGE-XFP 4xE Enhanced DPC for MX, requires optics sold separately DPCE-R-Q-20GE-2XGE 20 Port GE + 2 port E Enhanced Queuing DPC with L2+L3 Features, Requires Optics Sold Separately DPCE-R-Q-20GE-SFP 20x1G Enhanced Queuing DPC for MX with full L2/L3 features & VLAN-HQoS, requires optics sold separately DPCE-X-40GE-SFP 40x1GE DPC for MX with L2/L2.5 features, requires optics sold separately DPCE-X-4XGE-XFP 4xE DPC for MX with L2/L2.5 features, requires optics sold separately DPCE-X-Q-40GE-SFP 40x1G Enhanced Queuing DPC for MX with L2/L2.5 features & VLAN-HQoS, requires optics sold separately DPCE-X-Q-4XGE-XFP 4x Enhanced Queuing DPC for MX with L2/L2.5 features & VLAN-HQoS, requires optics sold separately MPC-3D-16XGE-SFPP 16xE line card, price includes full scale L2/L2.5 and reduced scale L3 features; requires SFPP optics sold separately MPC- 16xE line card bundle, price includes full scale L3, L2 and L2.5 features; requires SFPP 3D-16XGE-SFPP-R-B optics sold separately MPC-SEPTUM-S Removable MPC septum to for 1/2 height MIC, Spare MS-DPC MultiServices MPC for the MX platforms MX-FPC2 MX Flexible PIC Concentrator (accepts Type 2 PICs) MX-FPC3 MX Flexible PIC Concentrator (accepts Type 3 PICs) MX-MPC1-3D 1xTrio Chipset MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC1-3D-Q 1xTrio Chipset MPC, per-ifl HQoS, 128K queues (max 64K egress); price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC1-3D-Q-R-B MX-MPC1-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC1-3D-R-B MX-MPC1-3D line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC1E-3D 1xTrio Chipset Enhanced Enhanced MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC1E-3D-P-B MX-MPC1E-3D Line Card Bundle, Port Queuing, price includes 1588v2, Full scale L2/L2.5 and Reduced Scale L3 Features MX-MPC1E-3D-P-Q-B MX-MPC1E-3D-Q Line Card Bundle, per IFL HQoS, 128K Queues (Max 64K Egress), price includes 1588v2, Full scale L2/L2.5 and Reduced Scale L3 Features MX- MX-MPC1E-3D-Q Line Card Bundle, per IFL HQoS, 128K Queues (Max 64K Egress), price MPC1E-3D-P-Q-R-B includes 1588v2, Full Scale L3, L2 and L2.5 Features MX-MPC1E-3D-P-R-B MX-MPC1E-3D Line Card Bundle, Port Queuing, price includes 1588v2, Full Scale L3, L2 and L2.5 Feature MX-MPC1E-3D-Q 1xTrio Chipset Enhanced MPC, per-ifl HQoS, 128K queues (max 64K egress); price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC1E-3D-Q-R-B MX-MPC1E-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features MX-MPC1E-3D-R-B MX-MPC1E-3D line card bundle, price includes full scale L3, L2 and L2.5 features MX- MPC2E-3D-EQ-R-B MX- MPC2E-3D-P-Q-R-B MPC4E- 3D-2CGE-8XGE MPC4E- 3D-2CGE8XGE-IR-B MPC4E- 3D-2CGE8XGE-R-B MPC4E- 3D-32XGE-IR-B MPC4E- 3D-32XGE-SFPP MPC3 with support for 100GE, 40GE and E interfaces, L2.5 features, Optics sold separately. MPC3E with support for 100GE, 40GE and E interfaces. Includes full scale L2, L3, L3VPN features. Optics sold separately. MPC4E with 2x100GE and 8xE ports. Price includes full scale L2/L2.5 and reduced scale L3 features. Optics sold separately. MPC4E with 2x100GE and 8xE ports. Includes full scale L2/L2.5, L3 features and upto 16 L3VPN instances per MPC. Optics sold separately. MPC4E with 2x100GE and 8xE ports. Includes full scale L2/L2.5, L3 and L3VPN features. Optics sold separately. MPC4E with 32xE SFPP ports. Includes full scale L2/L2.5, L3 features and upto 16 L3VPN instances per MPC. Optics sold separately. MPC4E with 32xE SFPP ports. Includes full scale L2/L2.5, L3 and L3VPN features. Optics sold separately. MPC4E with 32xE SFPP ports. Price includes full scale L2/L2.5 and reduced scale L3 features. Optics Sold Separately. AS-MCC Application Services - Modular Carrier Card for MX AS-MSC-6.4TB Application Services - Modular Storage Card w/ 6.4 TB Capacity AS-MXC40-64G Application Services - Modular Processing Card with 64G for MX MS-MPC-128G Multi Service - MPC with 128G for MX 28 Juniper Networks MX MX Juniper Networks 29

16 Product Guide: 06 SRX SRX100 SRX650 SRX3400 SRX SRX 200Gbps SRX OSJUNOS OS FireWallVPNIPSURL UTM SRXUTM SRXUTM IPS DoS Web90Web Web SRX (AppSecure) Web AppSecure FireWall 50G 1G 200G 100G Performance UTM Next Gen Firewall VPN IPS, AppSecure Anti-Virus Anti-Spam Web filtering Routing / WAN WLAN, LAN, Switching 2GB SRX DC SRX DC Scale OSJunoeOS DC Next Gen Firewall VPN IPS, AppSecure Routing / WAN WLAN, LAN, Switching JSA Secure Analytics SRX(1400) SRX (SPC) SRX Gbps IO(IOC) SRX SRX(1400)1 SRX (LSYS) 1SRX JSA Secure Analytics () 30 Juniper Networks SRX SRX Juniper Networks 31

17 SRX SRX SRX100 SRX210 SRX220 SRX240 SRX550 SRX650 SRX100 SRX210 SRX220 SRX240 SRX550 SRX650 JUNOS Junos OS 12.1X44 D15 Junos OS 12.1X44 D15 Junos OS 12.1X44 D15 JUNOS Junos OS 11.4R5 Junos OS 12.1 Junos OS 11.4R5,1RU,1RU,1RU,1RU,2RU,2RU 700 Mbps 850 Mbps 950 Mbps 1.8 Gbps 5.5 Gbps 7 Gbps IMIX 200 Mbps 250 Mbps 300 Mbps IMIX 600 Mbps 1.7 Gbps 2.5 Gbps IPSNSS Mbps 65 Mbps 80 Mbps IPSNSS Mbps 800 Mbps 1 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN 65 Mbps 85 Mbps 100 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN 300 Mbps 1.0 Gbps 1.5 Gbps 32 K 32 K 96K 256K 375 K 512 K / TCP3 1,800 2,200 2,800 / TCP3 8,500 27,000 35, ,048 WAN/LAN 8 10/100BASE-T 2 10/100/1000 BASE-T /100BASE-T CX111 3G/4G 8 10/100/1000 BASE-T WAN/LAN PIM N/A 1 SRX Series Mini-PIM 2 SRX Series Mini-PIM AppSecureOS Junos OS 11.4 Junos OS 11.4 Junos OS 11.4 (cm) kg VAC, 30 W 30 W 10 W 1.5 PoE/ 2PoE / VAC, 60 W (PoE) / 150 W PoE 50 W 27 W Low Memory (LM) 28 W High Memory (HM) 84 W (PoE) PoE - 50W 120W PoE / VAC, 60 W (PoE)/ 200 W PoE 120 W 28 W % 10 90% 10 90% 5 95% 5 95% 5 95% H2 H2 H2 4,096 7,256 8,192 WAN/LAN 16 10/100/1000 BASE-T 6 10/100/1000 BASE-T 4 SFP CX111 3G/4G WAN/LAN PIM 4 SRX Series Mini-PIM 2 SRX Series Mini-PIM, 6 GPIM or multiple GPIM and XPIM combinations 4 10/100/1000 BASE-T 8 GPIM or multiple GPIM and XPIM combinations AppSecureOS Junos OS 11.4 Junos OS 12.1 Junos OS 11.4 (cm) kg 5.1 PoE/ 5.6 PoE / VAC, 150 W PoE/ 350 W PoE 150 W 71 W (B) 72 W (H-DC) 74 W (H) 86 W (H-PoE) / VAC 645W (single/dual) 247W 494W 85W PoE 150W 247W 247W / VAC, 645W (single/dual) 247 W 494 W 122 W % 10 90% 10 90% 5 95% 595% 5 95% 32 Juniper Networks SRX SRX Juniper Networks 33

18 SRX SRX SRX1400 SRX3400 SRX3600 SRX5600 SRX5800 SRX1400 SRX3400 SRX3600 SRX5600 SRX5800 JUNOS Junos 12.1X44 Junos 12.1X44 Junos 12.1X44 JUNOS Junos 12.1X44 Junos 12.1X44, 3RU, 3RU, 5RU, 8RU, 16RU 10 Gbps 30 Gbps 55 Gbps 100 Gbps 200 Gbps IMIX 5 Gbps 10 Gbps 20 Gbps IMIX 65 Gbps 130 Gbps IPSNSS Gbps 8 Gbps 15 Gbps IPSNSS Gbps 100 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN 4 Gbps 8 Gbps 15 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN 75 Gbps 150 Gbps 1,500, /3,000,000 * *3,000, /6,000,000 * *6,000,000 60,000, ,000,0001 / TCP3 70, , ,000 / TCP3 400, ,000 40,000 40,000 40, /3 6/6 80,000 80, /100/1000-T 6SFP GE 610/100/1000-T 3SFP 3SFP+ XGE 810/100/1000-T 4SFP 810/100/1000-T 4SFP AppSecure AppDoS: AppTrack: AppQoS: AppFW: AppDoS: AppTrack: AppQoS: AppFW: AppDoS: AppTrack: AppQoS: AppFW: AppSecure AppDoS: AppTrack: AppQoS: AppFW: AppDoS: AppTrack: AppQoS: AppFW: LSYS cm LSYS cm kg ) () kg 81.7 () () V AC V DC : 485W (AC power) 485W (DC power) : V AC V DC : 1,100W (AC power) 1,050W (DC power) : V AC V DC : 1,750W (AC power) 1,850W (DC power) : / V AC V DC : 2,800 W : / V AC V DC : 5,100 W : / % 90% 5 90% 5 90% 5% 90% 5 90% 5 90% % 5 90% 5 90% 5 90% x45 34 Juniper Networks SRX SRX Juniper Networks 35

19 Product Guide: 07 Intrusion Deception ()DDoS IP Spotlight Secure Spotlight Secure WebApp Secure200 WebApp Secure Spotlight Secure Web Web DoS/DDoSWeb DDoS SecureWeb WebApp SecureSpotlight Secure SRX WebApp Secure Web WebApp Secure Web IP IP WebApp Secure WAF Spotlight Secure はカウンターセキュリティソリューションと連携を取り 攻撃者の情報を既存の攻撃者と同定することを可能にしているため 違う目標に攻撃を行った攻撃者がいたとしても 攻撃態勢に入った時点で 既に防御側は脅威度を把握できることとなります また SRXシリーズでは これらの情報に基づいてネットワークベースでのトラフィック遮断を提供することが可能です ジュニパーはこのようにバックエンドのセキュリティインテリジェンスとしてとしてSpotlight Secure サービスを提供し 次世代のデータセンターセキュリティソリューションを提供していきます WebApp Secure IP CAPTCH/IP Web Application Firewall IP IP CAPTCHA IP DDoS Secure DDoS Secure DDoS DDoS SecureCHARM 2 Firefly Host Firefly Host Firefly Firefly Host IDS VM VM VM 3/4 Firefly Host IDS VM DDoS SECURE CHARM テクノロジーによるリソースコントロール 1 パケットの正当性をチェック 設定したフィルターでチェック RFCに照らし合わせてチェック TCPステータスをチェック パケットシーケンスをチェック CHARM 3 振る舞いを記録 4 CHARMしきい値 3200 万 IPテーブルを記録の作成 あふれた場合は通信頻度 ターゲットリソースのの低い物から破棄レスポンスタイムから判断 CHARM CHARM 2 パケットに対する CHARM 値を付与 IP 振る舞いテーブルを参照 タイミングとそれまでの IPアドレスの振る舞いをチェック より人間っぽい動作 =より高 CHARM 値 CHARM 5 通すか通さないか プロファイル ( I P アドレスの )C H A R M 値と CHARMしきい値を比較して判断 36 Juniper Networks Juniper Networks 37

20 Product Guide: 08 MAG MAG2600 MAG MAG2600 MAG4610 MAG6610 MAG6611 Junos Pulse Junos PulseMAG BYOD LAN/WAN Junos Pulse MAG2600 MAG4610 MAG6610 MAG6611 SSL-VPN UAC cm SM-MAG160: 1000 SM-MAG360: SM-MAG160: 5000 SM-MAG360: SM-MAG160: 1000 SM-MAG360: SM-MAG160: 5000 SM-MAG360: kg SSL-VPN MAG Junos Pulse SSL-VPN SA PC LED VAC, 1A Hz, 30 W HDD RJ45 2 X 10/100/1000 BASE-T USB VAC, 1A Hz, 70 W HDD RJ45 3 X 10/100/1000 BASE-T USB MAG-PS VAC, 8A 50-60Hz, 560W HDD MAG RJ45 3 X 10/100/1000 BASE-T USB MAG MAG-PS VAC 10A 50-60Hz 750W HDD MAG RJ45 3 X 10/100/1000 BASE-T USB MAG UAC SSL-VPN LAN / SSL-VPN /SRX BYOD % 5 95% 5 95% 5 95% EN nd EditionCAN/ CSA-C22.2 No UL nd Ed. EN nd EditionCAN/ CSA-C22.2 No UL nd Ed. EN nd EditionCAN/ CSA-C22.2 No UL nd Ed. EN nd EditionCAN/ CSA-C22.2 No UL nd Ed. EN 55022CISPR A12007 EN 55022CISPR A12007 EN 55022CISPR A12007 EN 55022CISPR A12007 ACMAAS/NZS ACMAAS/NZS ACMAAS/NZS ACMAAS/NZS CISPR FCC Part 15 Subpart CISPR FCC Part 15 Subpart CISPR FCC Part 15 Subpart CISPR FCC Part 15 Subpart BIndustry Canada BIndustry Canada BIndustry Canada BIndustry Canada ICES-003 Issue 4February 2004 ICES-003 Issue 4February 2004 ICES-003 Issue 4February 2004 ICES-003 Issue 4February 2004 VCCi V-3/ V-4/ VCCI V-3/ VCCI V-3/ VCCI V-3/ ETSi EN V1.4.1 ( ) ( B V-4/ ETSI EN V A V-4/ ETSI EN V A V-4/ ETSI EN V A Juniper Networks MAG MAG Juniper Networks 39

21 Product Guide: 09 WL LAN WLA532 WLC100 LAN LAN < 50msec Non Stop 1 AP QoS, ACL AP WEB VLAN 802.1x)QoSACL Gigabit WiFi802.11acJunosV vwlc RingMaster RingMaster: LAN GUI WLC/WLA/ Adaptive Channel PlannerACP LAN BluetoothAP 802.1x SmartPass SmartPass Connect SmartPass WEB802.1x ID/ SMSWiFi RingMaster リングマスター Adaptive Chanel Planner(APC) レポート 障害対応 APC は 無線 LAN の干渉だけでなく 無線 LAN 以外の干渉波を検知 分析し 干渉を自動回避 無線 LAN 環境を最適化 プラン 設定モニタ SmartPass Connect 802.1x BYOD iphoneandroidos Windows Mac VLAN ACLQos BYOD IT JunosV Wireless LAN Controller vwlc VM vwlc SmartPass による統合認証 /sms による通知 Varnish Wizard による証明書自動インストールと自動設定 40 Juniper Networks WL WL Juniper Networks 41

22 WL WLA321 WLA322 WLA522 WLA532 WLA532E WLA632 WLC100 WLC800 WLC880 WLC2800 WLM1200 WLA321-WW WLA322-WW WLA522-WW WLA532-WW WLA532E-WW WLA632-WW a, b, g, n a, b, g, n a, b, g, n a, b, g, n ( ) a, b, g, n SSID a, b, g, n vwlc WLC100 WLC800 WLC880 WLC2800 WLM1200 cm PSU8.1 kg VM ware 1.27 kg 5.2 kg 5.2 kg 2PSU8.77 kg ESXi kg CPU; 2GHz ; 2GB ; 16GB ; 1GE % % % % % N/A VAC Hz 97W VAC Hz 93.4W VAC Hz VAC Hz 108W VAC Hz 520W WINDS/WIPS ActiveScan SentryScan ActiveScan SentryScan ActiveScan SentryScan ActiveScan SentryScan ActiveScan SentryScan ActiveScan SentryScan AP AP /100/1000 PoE RJ /100/1000 PoE RJ /100/1000 PoE RJ /100/1000 PoE RJ /100/1000 PoE RJ /100/ pin DIN AP 10/ /32 16/32 64/ n 2 2 MIMO, MIMO, 2 2 x 2 MIMO, MIMO, MIMO, MIMO, 2 AAA 802.1xAAA N/A N/A AAAAAA 1 N/A N/A WLA522: N/A WLA522E: 4R-SMA jack WLA532: N/A RP-SMA ports af PoE 802.3af PoE 802.3af PoE 802.3af PoE 802.3af PoE 6 x N-type jack 8DIN DSU48VDC cm g 196 g 205 g 567g g 714 g 4.44 Kg % - 95% 10% - 95% 10% - 95% 5% - 95% 5% - 95% 10% - 95% X.509 AAA / IEEE802.1xEAPTLSPEAP/MSCHAPTTLS WebAAAMACOpen WLA AES 7W 2x2 MIMO2SS 8W 2x2 MIMO2SS 11.3W 2x2 MIMO2SS 10W3x3 MIMO:3SS 12.95W3x3 MIMO:3SS) VAC, VDC, 30W 10 2 LED LED:3 LED:3 LED:3 LED:3 LED:3 LED:3 SFP/RJ45 8 SFP X, WPA,WPA2, i, PMK, AES, TKIP 802.1X, WPA,WPA2, i, PMK, AES, TKIP 802.1X, WPA,WPA2, i, PMK, AES, TKIP 802.1X, WPA,WPA2, i, PMK, AES, TKIP 802.1X, WPA,WPA2, i, PMK, AES, TKIP 802.1X, WPA,WPA2, i, PMK, AES, TKIP 10/100/1000MbpsRJ45 2+2PoE/PoE PoE 10/100 QoS e, WMM, TSPEC, U-APSD e, WMM, TSPEC, U-APSD e, WMM, TSPEC, U-APSD e, WMM, TSPEC, U-APSD e, WMM, TSPEC, U-APSD e, WMM, TSPEC, U-APSD PoE 10/ Juniper Networks WL WL Juniper Networks 43

23 Product Guide: 10 Product Guide: 11 JUNOS Space SDN J u n o s V A p p Engine(JVAE) JVAEVSE Juniper 3rd SDN Controller Contrail Controller JUNOS Network Management Platform / JUNOS Space SDKRESTful API NMS/OSS/BSS Security Director SRXFirewallNATVPNIPS AppSecure GUI Endto-End Firefly FirewallFirewall Firefly PerimeterVM Firewall Firefly Host Network Director Virtual Director TCO VMware LinuxKarnel-based Virtual Machine(KVM) Firefly Perimeter P.30 Firefly Host VM P.37 DDoS Secure DDoS P.37 WebApp Secure Web P.36 Junos Pulse SSL Secure SSL VPN P.38 Junos Pulse UAC Secure P.38 Security Analytics P.31 LANLAN Firefly Perimeter/ Firefly Perimeter Junos Space PlatformSecurity Director JunosV Wireless LAN Controller LAN P.40 Junos Space P Juniper Networks JUNOS Space Juniper Networks 45

24 & Juniper JP J-NET /bd-p/japan-forum JP Facebook JuniperJapan! PARTNER EDUCATION bg-p/japan-blog Facebook JuniperNetworks LIKE US SEe web Juniper junipernetworks SEE MORE JP Twitter Japan JNCP Juniper Networks Certification ProgramJunos TeckWiki LEARN MORE Twitter FOLLOW US SERVICE LinkedIn juniper-networks GET UPDATES YouTube JuniperNetworks WATCH MORE PS AS & JTAC, Logistics ES OpenContrail OpenContrail OpenContrail Facebook opencontrail LEARN MORE LIKE US OpenContrail Twitter OpenContrail Google+ com/ /posts FOLLOW US FOLLOW US 46 Juniper Networks & Juniper Networks 47