Engineering Simplicity 1996 OS Junos IT 2000NetconfJunos API DNAJunosOS Self-Driving Network SDN Contrail P Sky Enterprise P 50 Contrail Service

Transcription

1 ジュニパーネットワークス製品カタログ Product Guide 月版 セキュリティスイッチルーター自動化 管理オプティカルソリューションサービス & サポート Vol.14

2 Engineering Simplicity 1996 OS Junos IT 2000NetconfJunos API DNAJunosOS Self-Driving Network SDN Contrail P Sky Enterprise P 50 Contrail Service Orchestration P 51 AppFormix P 52 Junos Automation P 53 SRX P 0413 Juniper Sky Advanced Threat Prevention P 06 Junos Space Security Director P 07 vsrx P 09 Advanced Threat Prevention Appliance P SRX Juniper Sky Advanced Threat Prevention P 06 Junos Space Security Director P 07 vsrx P 09 Advanced Threat Prevention Appliance P vmx P

3 Junos Juniper Japan Facebook Juniper Japan Twitter Junos Day One SlideShare VMware P P P MX 3D P vmx P 45 ACX P P P P MX P

4 SRX SRX SRX SRX SRX 300GbpsSRX NFV Network Function Virtualization vsrx SRX Junos SRX IPSec VPNIPS URL UTM SSL Juniper Sky Advanced Threat Prevention Spotlight Secure & Junos Space Security Director SRX UTM 2T IPS Web/ / C&C GEO-IP 1T 500G SRX, APT SRX G NAT VPN SRX G SRX5400 SRX4600 vsrx 2.0 (Virtual SRX) SRX4100 SRX4200 One Junos 10G SRX1500 API SDK Junoscript 1G SRX300 SRX320 SRX340 SRX345 SRX550HM etc Junos 04 SRX

5 SRX300 SRX1500 SRX4600 SRX5600 Web Web PC Spotlight SecureSRX PC C&C SRX PCC&C PCPC SRX ブ一ロ部様ッをなアクツ攻ーン撃攻撃者ルのチでUウフIRイ 初回の攻撃 ァPLイル 標準的メールSフアスウ/ィ( SNS ルォIゲ 掲示板ターーD WEBサイトリトルSンウ功 攻撃基盤構築後の攻撃 グェ 指令サーバーとの交信イ型 新しいウイルスの)ダウンロード 収集した情報をベースにした攻撃 脆弱性修正多Spotlight クラウド IP/URL フィード Security Director IP/URL フィード SRX 社内ネアットンワチースクにパ侵ム入成UTMはこれらの機能の複数を実装 インターネット 多段防御をくぐり抜けて社内ネットワーク 統合セキュリティ管理ツールによるセキュリティ管理 IT 資産管理ツールによる端末管理 アンチウイルス ( エンドポイント型 ) C&C サーバー SRX 1. SRX TCP/UDP IPS WormTrojansexploitsshellcodeScans Trojans SSL Spotlight Secure(GeoIP) 1 Sky ATP TCP/UDP AppSecure Web URL Spotlight Secure(C&C) C&C SRX 05

6 SRX Juniper Sky Advanced Threat Prevention - Juniper Sky Advanced Threat Prevention インターネット外部ネットワークデータフィード配信既知のC&Cサーバー SRX コマンド & GeoIP その他のコントロール脅威情報 Juniper Sky Advanced Threat Prevention Juniper Sky Advanced Threat Prevention & C&C SRX C&C SRX GeoIP SRX 管理者 マルウェア等疑わしいファイル SRX 上でコンテンツ ( ファイル ) 抽出 インラインブロック イベント (C&C 通信に該当 ) 管理設定 キャッシュ Inline Blocking Inspection Pipeline Manager Host Analyzer サービスポータル マルウェア検査 Static Cache Analysis Identified Malware ライセンス管理 複数のアンチウイルス Static Analysis エンジンによる ( ファイル構造等 ) チェック クラウド (AWS/Juniper) Log Hits 構成管理 API Dynamic Analysis (Sandbox) Juniper Sky Advanced Threat Prevention Behavioral Analysis Indicators of Compromise レポーティング API サンドボックス 各フェーズにおいて評価値を割当て 後続のフェーズでより正確な評価値を決定 50 以上の振る舞い検知のトリックにより マルウェアをあぶり出す 機械学習 Deception Software-Defined Secure Network - Software-Defined Secure Network SDSN MAC MAC SDSN Policy Enforcer SRX Sky ATP Sky ATP Policy EnforcerPolicy Enforcer Security Director/Junos Space Junos SpaceIP-MAC MAC MAC SDSN キャンパスネットワーク SRX 検知 対策実施 コアスイッチ アクセススイッチ対策実施 Webサーバー C&Cサーバー インターネット 攻撃者 Sky ATP MAC 検知 検査対象のファイル / 通信 検知 SRX Policy & Feeds スイッチ ACLs ポリシー 脅威フィード 3rd Party フィード SKY ATP Policy Enforcer SD Space 06 SRX

7 AppSecure Web AppSecure2.0 : BitTorrent, Tor 3,500 AppSecure AppID AppTrackAppFW AppQoS SSL Proxy SSL (AppSecure2.0) フロー処理 App Tracking セキュリティリスクの分析 振る舞い分析の改善 App FW リスクのあるアプリをブロック ユーザー独自のポリシー設定 入力 AppID 2.0 飛躍的に進化したアプリケーション可視化エンジン App Routing/APBR アプリ単位でルートを決定 アプリケーション I D App QoS 出力 重要なアプリの優先順位付け 重要性の低いアプリのレートを制限 IPS セキュリティ脅威を緩和 SSL Proxy SSL 通信を含むパケット検査 Junos Space Security Director - CSIRT Security Director SRX CPU RAM Threat Map IPS CSIRT Security Director 3 Security Director / SRX 07

8 SRX シリーズ 次世代ファイアウォール機能とキャリアグレードのルーティング機能を融合させた 高度なアプリケーション制御 APBR/Advanced Policy-Based Routing, AppQoS AppSecure 2.0の一部であるAPBR AppQoSは 識別したアプリケーション単位で通信経路の選択や優先制御といった非常に高度な 制御を実現します APBRはアプリケーション毎に使用するWAN回線を柔軟に選択することで回線の利用効率を最大限に上げ ネットワークに対する過剰な 投資を抑えることが可能になります AppQoSはアプリケーション単位の優先制御を実現します 単純なレートリミットだけでなく アプリケーション毎にマーキングを行った り 異なるキューに振り分けることが可能になります AppQoSを使うことで企業 キャンパス内に流れる音声 ビデオといった遅延やパケット ロスの影響を受けやすいアプリケーションや 基幹システムに関する通信を適切に保護します AppQoSによる高度な優先制御 優先度!""#$% 低 low best-effort AppQoS 制御 オンラインストレージ high ベストエフォート 高 インターネット SRX シリーズ ウェブ閲覧 VoIP Web会議 AppQoSにより必要な帯域が確保され 優先度の高い アプリケーションは安定した通信が保たれる LTE回線に接続できるファイアウォール ジュニパーネットワークスの SRXは LTEモジュールをオプションとして追加することができ ファイアウォールとしてセキュリティを保持し ながらLTE回線に接続することが可能です LTEモジュールに同梱されているSIMアダプターを利用することで標準 micro nanoサイズの SIMに対応します また 日本国内の主要キャリアは勿論 MVNOなどの SIMにも対応しています アンテナとSRXをつなぐケーブルは 3メートルあり 電波を受信し易い位置にアンテナだけを設置でき マグネットベースを利用することで アンテナを壁に垂直に設置させることも可能です SRX LTEモジュール使用例 バックアップ回線 一時的な利用 バックアップ回線 SRX LTE SRX LTE メイン回線 クライアントPC 08 SRX シリーズ インターネット / WAN イベント会場 工事現場

9 vsrx vsrx SRXVMware KVM Hyper-VAWSAzure2vCPU 17Gbps 1vCPUvCPU17 100GbpsAWS DC vsrx UTM/IDS/IPS App VPN NAT IPS Web AppID AppFW AppQoS AppTrack VMware/KVM/Contrail X86 vsrx vsrx CPU 2 VMware KVM VMware ESXi KVM 4 GB 16 GB VMXNET3, SR-IOV Intel 82599NIC VMXNET3, SR-IOV Intel 82599NIC vsrx version Junos OS 15.1X49-D15 Junos OS 15.1X49-D15 (UDP1514) 17 Gbps 13.5 Gbps (IMIX) 4 Gbps 3 Gbps (UDP512) 57 us 70 us IPsec(AES+SHA1) 800 Mbps 700 Mbps AppSecure(APP) 4.5 Gbps 3.5 Gbps IPS 1.8 Gbps 1.4 Gbps 54,000 36, , ,000 Office 365 Office 3651 Proxy SRXAPBR Advanced Policy-Based Routing Office 365 SRXOffice 365 支社 通常のルーティング経路 本社 /DC VPN SRX APBR のルーティング経路 インターネット Office 365 SRX 09

10 SRX SRX300 SRX340 SRX320 SRX345 SRX550HM SRX1500 SRX4100 SRX4200 SRX300/SRX320 SRX340/SRX345 SRX550HM SRX1500 SRX4100 SRX4200,1 RU,1 RU,2 RU, 1 RU,1 RU,1 RU () (IMIX) IPS (NSS 4.2.1) 1 Gbps 3 Gbps / 5 Gbps 7 Gbps 9 Gbps 40 Gbps 80 Gbps 500 Mbps 1.1 Gbps / 1.7 Gbps 2 Gbps 5 Gbps 20 Gbps 40 Gbps 200 Mbps 400 Mbps / 600 Mbps 800 Mbps 3 Gbps 10 Gbps 20 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN 300 Mbps 600 Mbps / 800 Mbps 1.0 Gbps 4 Gbps 10 Gbps 20 Gbps 64 K 256 K / 375 K 375 K 2 M 5 M 10 M / (TCP3) 5,000 10,000 / 15,000 27,000 50, , ,000 1,000 2,000 / 4,000 8,000 16,000 60,000 60,000 WAN/LAN 6 10/100/1000BASE-T + 2 SFP 8 10/100/1000BASE-T + 8 SFP WAN/LAN PIM /2 SRX Series Mini-PIM 4 SRX Series Mini-PIM Security Intelligence Sky Advancded Threat Prevension ( ) (cm) 6 10/100/1000BASE-T 4 SFP 2 SRX Series Mini-PIM, 6 GPIM or multiple GPIM and XPIM combinations 12 10/100/1000BASE-T 4 SFP 4 SFP+ 8 1 GbE/10 GbE 8 1 GbE/10 GbE 2 SRX Series Mini-PIM () () (SRX300) (SRX320) (kg) SRX SRX (PoE )/ 1.55(POE) (1 / ) (2AC)/ 13.06(2DC) 13.15(2AC)/ 13.06(2DC) SRX300 : VAC () : 15.4 W SRX320 : VAC () : 27 W (PoE) 112 W(POE) VAC () : 122 W VAC 645 W(single/dual) () : 1050 W(, PoE) 750 W(, PoE) () : 85 W : VAC () : 150 W : V : 200 W : V : 200 W PoE / 180 W 247 W W() () % % % % 90 % 90 % () 5 95 % 5 95 % 5 95 % 5 95 % 5 95 % 5 95 % 10 SRX

11 SRX4600 SRX5400 SRX5600 SRX5800 SRX4600 SRX5400 SRX5600 SRX5800, 1 RU, 5 RU, 8 RU, 16 RU () 95 Gbps 65 Gbps 130 Gbps 320 Gbps () IMIX 240 Gbps 480 Gbps 75 Gbps 30 Gbps 65 Gbps 130 Gbps 1 Tbps (2 Tbps * Junos 15.1 IOC3) IPS (NSS 4.2.1) 20 Gbps 22 Gbps 50 Gbps 100 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN 38 Gbps 35 Gbps 100 Gbps 200 Gbps 60,000,000 42,000, ,000, ,000,000 / (TCP3 ) 500, ,000 1,000,000 2,000,000 80,000 80,000 80,000 80, G QSFP G QSFP G SFP G SFP Security Intelligence Sky Advancded Threat Prevension LDOM ( )(cm) (AC 69.3/DC 74.1) (kg) (AC 20.6/DC 21.53) 58.1( ) 81.7( ) 151.6( ) V AC V DC ():660W : V AC V DC (): 4,100 W : / V AC V DC (): 4,100 W : / V AC V DC (): 8,200 W : / () 90 % 5 85 % 5 85 % 5 85 % 1 40G100G10G1G 21G SRX 11

12 SRX SRX320/340/345/550HM SRX550HM SRX-MP-1SERIAL-R RoHS compliant 1 port Serial, MPIM form factor supported on SRX300 and SRX550 SRX-GP-8SFP 8-Port GE SFP G/XPIM for SRX Platforms SRX-MP-1T1E1-R SRX-MP-1VDSL2-R RoHS compliant 1 port T1E1, MPIM form factor supported on SRX300 and SRX550 RoHS compliant 1 port VDSL2, MPIM form factor supported on SRX300 and SRX550 SRX-GP-16GE-POE POE Ethernet Switch 16-port 10/100/1000Base-T XGPIM. Supports up to 16 ports POE. Double-High uses 2 GPIM Slots. 20Gbps or 1Gbps Slot Connection. SRX-MP-LTE-AA 4G / LTE MPIM support 1, 3, 5, 7-8, 18-19, 21, 28, LTE bands (for Asia and Australia) SRX-MP-LTE-AE 4G / LTE MPIM support 1-5, 7-8, 12-13, 20, 25-26, 29-30, 41 LTE bands (for Americas and EMEA) SRX300-IPS-X SRX300-CS-BUN-X SPOT-CC-300-ZY SRX320-IPS-X SRX320-CS-BUN-X SRX320-W-EWF-1 SPOT-CC-320-ZY SRX340-IPS-X SRX340-CS-BUN-X SRX340-W-EWF-X SRX340-ATP-X SRX340-ATP-BUN-X SRX340-THRTFEED-X SPOT-CC-340-ZY SRX345-IPS-X SRX345-CS-BUN-X SRX345-W-EWF-X SRX345-ATP-X SRX345-ATP-BUN-X SRX345-THRTFEED-X SPOT-CC-345-ZY SRX550-IDP SRX550-IDP-3 SRX550-IDP-5 SRX550-S2-AS SRX550-S2-AS-3 SRX550-S2-AS-5 SRX550-K-AV SRX550-K-AV-3 SRX550-K-AV-5 SRX550-S-AV SRX550-S-AV-3 SRX550-S-AV-5 SRX550-SMB4-CS SRX550-SMB4-CS-3 SRX550-SMB4-CS-5 SRX550-S-SMB4-CS SRX550-S-SMB4-CS-3 1/3/5 Year Subscription for Intrusion Prevention Signature Updates on SRX300 1/3/5 year subscription for Application Security, IPS, AV, URL filtering and Anti-Spam for SRX300 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX300 (Includes entitlement for 1/3Y to Spotlight Secure Connector) 1/3/5 Year Subscription for Intrusion Prevention Signature Updates on SRX320 1/3/5 year subscription for Application Security, IPS, AV, URL filtering and Anti-Spam for SRX320 1/3/5 YR Subscription for Enhanced Web Filtering on SRX320 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX320 (Includes entitlement for 1/3Y to Spotlight Secure Connector) 1/3/5 Year Subscription for Intrusion Prevention Signature Updates on SRX340 1/3/5 year subscription for Application Security, IPS, AV, URL filtering and Anti-Spam for SRX340 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX340 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX340 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX340 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX340 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX340 (Includes entitlement for 1/3Y to Spotlight Secure Connector) 1/3/5 Year Subscription for Intrusion Prevention Signature Updates on SRX345 1/3/5 year subscription for Application Security, IPS, AV, URL filtering and Anti-Spam for SRX345 1/3/5 YR Subscription for Enhanced Web Filtering on SRX345 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX345 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX345 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX345 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX345 (Includes entitlement for 1/3Y to Spotlight Secure Connector) 1 Year License for IDP Updates for SRX550 3 Year License for IDP Updates for SRX550 5 Year License for IDP Updates for SRX550 One Year Subscription for Juniper-Sophos Anti-Spam Updates on SRX550 Three Year Subscription for Juniper-Sophos Anti-Spam Updates on SRX550 Five Year Subscription for Juniper-Sophos Anti-Spam Updates on SRX550 One Year Subscription for Juniper-Kaspersky AV Updates on SRX550 Three Year Subscription for Juniper-Kaspersky AV Updates on SRX550 Five Year Subscription for Juniper-Kaspersky AV Updates on SRX550 One Year Subscription for Juniper-Sophos AV Updates on SRX550 Three Year Subscription for Juniper-Sophos AV Updates on SRX550 Five Year Subscription for Juniper-Sophos AV Updates on SRX550 One year security subscription for Enterprise - includes Kaspersky AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 Three year security subscription for Enterprise - includes Kaspersky AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 Five year security subscription for Enterprise - includes Kaspersky AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 One year security subscription for Enterprise - includes Sophos AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 Three year security subscription for Enterprise - includes Sophos AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 SRX550-S-SMB4-CS-5 SRX550-W-EWF SRX550-W-EWF-3 SRX550-W-EWF-5 SRX550-APPSEC-A-X SRX550-ATP-X SRX550-THRTFEED-X SPOT-CC-550-XY SPOT-LOCAL-550 SRX1500-IPS-X SRX1500-CS-BUN-X SRX1500-ATP-X SRX1500-ATP-BUN-X SRX1500-THRTFEED-X SRX1500-W-EWF-X SPOT-CC-1500-ZY SRX4100-ATP-X SRX4100-ATP-BUN-X SRX4100-CS-BUN-X SRX4100-IPS-X SRX4100-S-AS-Z SRX4100-S-AV-Z SRX4100-W-EWF-X SRX4100-THRTFEED-X SPOT-CC-4100-Z SPOT-LOCAL-4100 SRX4200-ATP-X SRX4200-ATP-BUN-X SRX4200-CS-BUN-X SRX4200-IPS-X SRX4200-S-AS-Z SRX4200-S-AV-Z SRX4200-W-EWF-X SRX4200-THRTFEED-X SPOT-CC-4200-Z SPOT-LOCAL-4200 X135 Z1 3 Five year security subscription for Enterprise - includes Sophos AV, Enhanced WF, Sophos AS, AppSecure and IDP on SRX 550 One year subscription for Juniper-Websense Enhanced Web Filtering updates on SRX 550 Three year subscription for Juniper-Websense Enhanced Web Filtering updates on SRX 550 Five year subscription for Juniper-Websense Enhanced Web Filtering updates on SRX 550 1/3/5 year Subscription for Application Security and IPS updates for SRX550 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX550 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX550 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3/5 Year Subscription for 1 SRX550(Includes entitlem ent for 1/3/5 Y to Spotlight Secure Connector) Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX550(only required if used without Spotlight Secure cloud -based feed) 1/3/5 year subscription for intrusion prevention signature updates on SRX1500 1/3/5 year subscription for Application Security, IPS, AV, URL filtering and Anti-Spam for SRX1500 1/3/5 year subscription for Sky Advanced Threat Protection on SRX1500 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX1500 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX1500 1/3/5 Year Subscription for Enhanced Web Filtering on SRX1500 1/3 year subscription for Spotlight Secure Command and Control feeds on SRX1500 1/3/5 year subscription for Sky Advanced Threat Protection on SRX4100 1/3/5 year subscription for AppSecure, IPS(IDP), EWF, AV and SkyATP service on SRX4100 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX4100 1/3/5 year subscription for Intrusion Prevention (application security included) on SRX4100 1/3 year subscription for Juniper-Sophos Anti-spam service on SRX4100 1/3 year subscription for Juniper-Sophos AV service on SRX4100 1/3 year subscription for Juniper-Websense Enhanced Web Filtering service on SRX4100 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX4100 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX4100 (Includes entitlement for 1/3Y to Spotlight Secure Connector) Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX4100 (only required if used without Spotlight Secure cloud-based feed) 1/3/5 year subscription for Sky Advanced Threat Protection on SRX4200 1/3 year subscription for AppSecure, IPS(IDP), EWF, AV and SkyATP service on SRX4200 1/3 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX4200 1/3/5 year subscription for Intrusion Prevention (application security included) on SRX4200 1/3 year subscription for Juniper-Sophos Anti-spam service on SRX4200 1/3 year subscription for Juniper-Sophos AV service on SRX4200 1/3 year subscription for Juniper-Websense Enhanced Web Filtering service on SRX4200 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX4200 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3 Year Subscription for 1 SRX4200 (Includes entitlement for 1/3Y to Spotlight Secure Connector) Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX4200 (only required if used without Spotlight Secure cloud-based feed) 12 SRX

13 SRX5400/5600/5800 SRX5K-MPC MPC for 100GE, 40GE, 10GE, 1GE MIC cards, Supported by JUNOS release 12.1X46-D10 onwards SRX-MIC-1X100G-CFP MIC with 1x100GE CFP Interface, Requires SRX5K-MPC, Requires Junos release 12.1X46-D10 or greater, Optics sold separately SRX5K-MPC3-100G10G SRX5K IOC3, 2x100GE and 4x10GE ports, Optics sold separately SRX-MIC-20GE-SFP MIC with 20x1GE SFP Interfaces, Requires SRX5K-MPC, Requires Junos release 12.1X47-D10 or greater, Optics sold separately SRX5K-MPC3-40G10G SRX5K IOC3, 6x40GE and 24x10GE ports, Optics sold separately SRX-MIC-2X40G-QSFP MIC with 2x40GE QSFP+ Interfaces,Requires SRX5K-MPC, Requires Junos release 12.1X46-D10 or greater, Optics sold separately SRX-MIC-10XG-SFPP MIC with 10x10GE SFP+ Interfaces, Requires SRX5K-MPC, Requires Junos release 12.1X46-D10 or greater, Optics sold separately SRX5K-SPC High performance services processing card for SRX5K, Requires high capacity power supplies, fan trays and filters for operation SRX4600-W-EWF-X SRX4600-CS-BUN-X SRX4600-IPS-X SRX4600-ATP-X SRX4600-ATP-BUN-X SRX4600-THRTFEED-X SRX5400-S-AS-X SRX5400-S-AV-X SRX5400-W-EWF-X SRX5400-CS-BUN-X SRX5400-APPSEC-X SRX5400-ATP-X SRX5400-ATP-BUN-X SRX5400-THRTFEED-X SPOT-CC-5400-XY SPOT-LOCAL-5400 SRX5600-S-AS-1 SRX5600-S-AV-1 SRX5600-W-EWF-X SRX5600-CS-BUN-X SRX5600-APPSEC-X SRX5600-ATP-X SRX5600-ATP-BUN-X SRX5600-THRTFEED-X SPOT-CC-5600-XY SPOT-LOCAL-5600 SRX5800-S-AS-1 1/3/5 Year subscription for Enhanced Web Filtering on SRX4600 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX4600 1/3/5 Year subscription for Intrusion Previntion Signature Updates on SRX4600 1/3/5 Year for Juniper Sky ATP on SRX4600 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-virus, and Juniper Sky ATP service on SRX4600 1/3/5 Year Juniper Sky ATP feeds only on SRX4600 1/3/5 year subscription for Juniper-Sophos Anti-spam service on SRX5400 1/3/5 year subscription for Juniper-Sophos AV service on SRX5400 1/3/5 year subscription for Juniper-Websense Enhanced Web Filtering service on SRX5400 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX5400 1/3/5 year Subscription for Application Security and IPS updates for SRX5400 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX5400 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX5400 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX5400 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3/5 Year Subscription for 1 SRX5400 Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX5400 (only required if used without Spotlight Secure cloud-based feed) 1 year subscription for Juniper-Sophos Anti-spam service on SRX year subscription for Juniper-Sophos AV service on SRX5600 1/3/5 year subscription for Juniper-Websense Enhanced Web Filtering service on SRX5600 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX5600 1/3/5 year Subscription for Application Security and IPS updates for SRX5600 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX5600 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX5600 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX5600 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3/5 Year Subscription for 1 SRX5600 Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX5600 (only required if used without Spotlight Secure cloud-based feed) 1 year subscription for Juniper-Sophos Anti-spam service on SRX5800 vsrx VSRX-AAA*-ASCB-Y VSRX-AAA*-ASEC-Y VSRX-AAA*-ATP-X VSRX-AAA*-ATP-B-X VSRX-AAA*-CS-Y VSRX-AAA*-CS-B-Y VSRX-AAA*-AV-Y VSRX-AAA*-SCC-Y VSRX-AAA*-STD-Y VSRX-AAA*THRTFEED-X VSRX-AAA*-W-EWF-Y VSRX-RA1-BBB-Y 10M/100M/1G/2G/4G/10G Throughput, 1/3 year Subscription License for vsrx Application security package - Includes features in standard (STD) package, IPS and Appsecure. 10M/100M/1G/2G/4G/10G vsrx Application Security 1/3 year subscription. Includes AppSecure and IPS on vsrx. 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on vsrx 10M/100M/1G/2G/4G/10G bps 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on VSRX 10M/100M/1G/2G/4G/10G bps 10M100M/1G/2G/4G/10G vsrx Content Security 1/3 year subscription. Enhanced WF, Sophos AV, Anti-spam, Content filtering, AppSecure, IPS on vsrx 10M/100M/1G/2G/4G/10G Throughput, 1/3 year Subscription License for vsrx Content security package - Includes features in Application security (ASEC) package, Anti-virus, Web-filtering, Anti-Spam & Content Filtering vsrx 10M100M/1G/2G/4G/10G throughput, Sophos Antivirus 1/3 year subscription 10M/100M/1G/2G/4G/10G Throughput, Perpetual License or 1/3 year Subscription License for vsrx Secure Cloud Connect package 10M/100M/1G/2G/4G/10G Throughput, Perpetual License or 1/3 year Subscription License for vsrx Standard package 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on vsrx 10M/100M/1G/2G/4G/10G bps 10M/100M/1G/2G/4G/10G vsrx Web Filtering Perpetual License of 1/3 year subscription. Includes Enhanced Web Filtering. Remote Access VPN service: 1/3 year subscription 5/10/25/50/100/150/250/500 concurrent Users with NCP Clients on vsrx VSRX AAA10M/100M/1G/2G/4G/10G bps VSRX BBB10/25/50/100/150/250/500 VSRX Y13 Y Perpetual SRX5800-S-AV-1 SRX5800-W-EWF-X SRX5800-CS-BUN-X SRX5800-APPSEC-X SRX5800-ATP-X SRX5800-ATP-BUN-X SRX5800-THRTFEED-X SPOT-CC-5800-XY SPOT-LOCAL year subscription for Juniper-Sophos AV service on SRX5800 1/3/5 year subscription for Juniper-Websense Enhanced Web Filtering service on SRX5800 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX5800 1/3/5 year Subscription for Application Security and IPS updates for SRX5800 1/3/5 Year Subscription for Juniper Sky Advanced Threat Prevention on SRX5800 1/3/5 year subscription for AppSecure, IDP, EWF, AV and Sky ATP on SRX5800 1/3/5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX5800 Spotlight Secure, Security Intelligence Cloud Service - Command & Control Feed - 1/3/5 Year Subscription for 1 SRX5800 Spotlight Secure Connector, Security Intelligence Aggregation Service - SRX5800 (only required if used without Spotlight Secure cloud-based feed) X135LSYS-X (1,5,25) SRX 13

14 Advanced Threat Prevention Appliance Advanced Threat Prevention Appliance Cyphort) JATP/Juniper Advanced Threat Prevention Appliance Cyphort JATP Web/ /SMB / JATP 15 EndpointFirewall/SWGSIEMCASBNAC/Identity 脅威検知可視化自動対応 他社を含む複数のデータソースをサポート JATP WebMail SMB 自動ポリシー適用 14 Advanced Threat Prevention Appliance

15 Advanced Threat Prevention Appliance 15

16 VMware VMware VMware NSX VMware NSX VMware NSX VMware NSX 仮想ネットワーク VMware NSX VM VM Hypervisor VM VM Hypervisor スパイン層 物理ネットワーク Juniper Networks V X L A N 仮想ネットワーク 従来の VLAN ネットワーク Hardware VTEP 機能によるシームレス接続 リーフ層 仮想サーバー 非仮想サーバー 仮想サーバー Hardware VTEP Hardware VTEPVMware NSX Hardware VTEP 機能概要 VXLAN パケット VLAN パケット NSXHardware VTEP 5000 Hardware NSX 仮想サーバー 5000 シリーズ 同じ L 2 ネットワーク 非仮想サーバー NSX Manager VMware NSX 5000 NSX IP Virtual Chassis/ Virtual Chassis Fabric Clos IP Fabric L 3 ネットワーク 3. IP & Clos IP Fabric & VC/VCF L 3 ネットワーク 1 & 2 16 VMware

17 Hardware VTEP VMware NSXHardware VTEP VLAN 40GE/100GE Virtual ChassisVirtual Chassis Fabric Hardware VTEP S S C VMware NSXvSRX VMware NSX L4Juniper vsrx AppSecure IDS/IPS FW vsrx v S R X に通信をリダイレクト vsrx 仮想ネットワーク VMware NSX VM VM VM VM ポリシーの集中管理 物理ネットワーク Juniper Networks Hypervisor Cluster 単位で vsrx を自動展開 Hypervisor SRX Security Director + Policy Enforcer VMware 17

18 従来の 3 階層ネットワーク コア層 アグリゲーション層 アクセス層 1VLAN L2 L3 他社製スタックスイッチ Master Backup VRRPマスター STPブロッキングポートで使用できないリンク 制御部の切替時にトラフィックやプロトコルが停止する L2 Virtual ChassisVirtual Chassis FabricJunos Fusion ネットワークの規模 要件に応じて柔軟に構成スモールスタートからの移行も可能 2 台構成ループ構成 VC Master Backup 1 Junos L2(VC) L2/L3 スパイン リーフ構成 VC 転送もプロトコルもステートフルに同期 切替時にリセットが発生しない 最大 4 重化まで可能 VCVCF Junos Fusion (5000 ) 1 VCF / Junos Fusion 18

19 Virtual Chassis (VC) SFP+(10G) QSFP+(40G) DAC/AOC (1 SFP+ ) Non-Stop Bridging(NSB) 6F Non-Stop Routing(NSR) 5F Graceful Routing-Engine Switchover(GRES) 4F 3F 2F 1F フロア間接続ビル間接続長距離接続 Virtual Chassis Fabric (VCF) Live MigrationDB Q C Master Backup S/48T/96S S トラフィックを公平にロードバランシングし 大容量化 Junos Fusion Enterprise (JFE) Aggregation Device(AD) 9200Satellite Device(SD) SD AD AD/SD AD リング構成も可能 19

20 TCO LAN 1 STP VRRP コア層 アグリゲーション層 アクセス層 コア層 VRRP STP ループ検知 アクセス層 VC 2 10 OP km 10G-ZR OS Junos OS RE 23 LC L2/L3 RERE Master RE Backup RE Backup LC ルーティングエンジンスイッチ ラインカードスイッチ Master Backup 20

21 C C10GbE GbE VCJunos Fusion EnterpriseJFESD MPCat5e/6/6a PoE+2.5Gbps GbE240GbE 10VCJunos Fusion EnterpriseJFESD C /4810/100/1000BASE-T FSFP 40GbEVC/VCFJunos Fusion MP241G/2.5G/5G/10G Media Access Control Security; MACSec MACSec2 2DCI-- Junos Fusion EnterpriseJFE 暗号化 AES 128/ F 4300 暗号化 AES 128/256 MACsec リンク Junos Fusion Enterprise; JFE 9200Aggregate DeviceAD4300/3400/2300Satellite Device SD 1SD128 AD Zero Touch Provisioning; ZTP /ZTP Junos config AD AD SD 4300/3400/2300 SD 4300/3400/2300 ADシングル構成 ADデュアル構成 / シリーズ 管理ネットワーク 工場出荷状態の /スイッチを管理ネットワークに接続するだけ 管理ネットワーク上のスイッチ DHCPサーバーからIPアドレスを (3400など ) 取得し サーバーから config/junos をダウンロード ZTP DHCP サーバー HTTP サーバー 21

22 10GBase-X - 10GBase-X: 2SFP+ -/ C C C 2300-C 2200 cm U U U 2200-C-12T-2G:2.09kg 2200-C-12P-2G:2.9kg 2300-C-12T:2.47kg 2300-C-12P:3.17kg T-4G:2.7kg T-4G-DC:2.7kg P-4G:3.6kg T-4G:3.6kg P-4G:4.5kg - 40Gbps - 28 Gbps 64 Gbps 21 Mpps 47 Mpps :56Gbps :104Gbps :42Mpps :77Mpps10/100/1000Base-T Base- FX/1000Base-XSFP SFP : SFP : SFP 2SFP 1000Base-X: 2SFP 4SFP PoE V/200240V 2200-C-12T-2G:30W AC V/200240V 2300-C-12T:40W AC V/200240V T-4G: 50W AC T-4G: 76W AC PoE V/200240V 2200-C-12P-2G:180W AC V/200240V 2300-C-12P:170W AC V/200240V P-4G: 470W AC P-4G: 496W AC OS Junos Junos Junos sflow sflow sflow MAC 16,000 16,000 16,000 9,216 9,216 9,216 IPv4 / 6, Prefixes, 4,096 Host Routes / 2,048 Groups, 2048 Multicast Routes 6,500 VLAN 1,024 4,093 1,024 ARP 2,000 1,500 2, % 095% 095% 22

23 40GBase-X:2QSFP+/ cm T/48T U P/48P U U MP U MP U U T:3.29kg T-DC: 3.55kg P:4.49kg MP: 4kg T: 3.76kg P: 5.02kg MP: 6.5kg T:4.6kg T-DC:4.5kg P:5.3kg T:4.9kg T-BF:4.9kg P:5.8kg 3400,FAN: 4.76 kg FAN2:5.74 kg 150 W AC:0.65 kg 600 W AC :0.83 kg 920 W AC:0.85 kg 150 W DC: 0.65 kg Fan: 0.07 kg T/24P/24MP/48T/48P: 80Gbps MP: 120Gbps 80Gbps 160Gbps :128Gbps :176Gbps :128Gbps :176Gbps :288Gbps :336Gbps :250Mpps :95Mpps :130Mpps :95Mpps :130Mpps :214Mpps 10/100/1000Base-T T/24P: SFP : T/48P: SFP SFP MP: :52 164SFP MP: 38 SFP 326SFP : SFP : SFP 100Base- FX/1000Base-XSFP /48T/48P: 1000Base-X: 4 SFP 1000Base-X: 4SFP MP: 1000Base-X: 6 SFP 1000Base-X: 4SFP 10/100/1000/2500Base-T MP: MP: /40GBase-X /48T/48P: 10GBase-X: 4SFP+ 10GBase-X:4SFP MP: 10GBase-X: 6SFP+ 10GBase-X:4SFP+ PoE V/200240V T: 55W AC T: 70W AC V/200240V T/48T/48T-BF:100W AC T-DC: -36V-72V 100W DC V/200240V T/48T/48T-AFI:150W AC T-DC: -36V-72V 150W DC PoE V/200240V P: 450W AC MP: 535W AC P: 840W AC MP: 1005W AC V/200240V P:550W AC P:900W AC V/200240V P:600W AC P:920W AC OS Junos Junos Junos sflow sflow sflow unicast, 4 multicast MAC 16,000 16,000 32,000 9,216 9,216 9,216 IPv4 / 512 Prefixes, 4,096 Host Routes / 2,048 groups, 2,048 Multicast Routes 8,000 14,000 Prefixes, 36,000 Host Routes / 18,000 Groups, 4,000 Multicast routes VLAN 4,093 4,093 4,093 ARP 1,500 4,000 16, % 095% 095% 23

24 F F cm U/ T:7.5kg T-DC:7.5kg PX:8.16kg F:7.3kg F-DC:7.3kg T:7.8kg T-DC:7.8kg PX:8.61kg T/24P/48T/48P/32P: U U MP: U 4300 FAN: 5.9 kg FAN2:7.3 kg 350 W AC:1.1kg 715 W AC :1.1kg 1100 W AC:1.1kg 550 W DC:1.1kg Fan:0.15kg 8.8kg1 128Gbps 320Gbps 320Gbps 10/100/1000Base-T 100Base- FX/1000Base-XSFP 714Mpps10GBase-X 100/1000/10G Base -T P/24T:448Gbps :88Gbps P/48T:496Gbps :136Gbps MP: 960Gbps 960Gbps F:464Gbps P/24T:333Mpps :65Mpps P/48T:369Mpps :101Mpps MP: 714Mpps F: 345Mpps T/24P: :28 244GbE 244Gbps T/48P: F: :52 484GbE SFP 484Gbps F: MP: T/24P/24PX/48: /48T/48P: 1000Base-X: F: 1000Base-X: 48 4Gbps SFP F: F: Base-FX T: 1000Base-X: Gbps 10GBase-X2210Gbps /48:10GBase-X:4 SFP F:10GBase-X:124+8: SFP+ 100/1000/2.5G/5G/10GBase-T MP: 24-40GBase QSFP F: T: T: F: /48T/48P:40GBase-X: 4 QSFP F:40GBase-X: T:4 2+2: QSFP F: MP:40GBase-X: 2 QSFP+ 100GBase MP: 1QSFP28 - / PoE V/200240V T/48T/24F:320W AC T-DC/48T-DC/24F-DC: -36V-72V 190W DC PoE V/200240V PX/48PX:930W AC PoE V/200240V T/48T/48T-AFI/32F:350W AC T-DC/48T-DC-AFI/32F-DC: 550W DC PoE V/200240V P:715W AC P:1100W AC MP: 1400W AC OS Junos Junos Junos sflow sflow sflow unicast and 4 multicast 8 MAC 32,000 64,000 32,000 9,216 9,216 9,216 IPv4 / 16,000 Prefixes 32,000 Host Routers / 16,000/8, Multicast Groups, 16,000 Multicast Routes 14,000/4,000 VLAN 4,093 4,093 4,093 ARP 16,000 64,000 8, % 095% 095% 24 : 650W AC/DC F :175W 1810Gbps SFP+195W 2810Gbps SFP+215W T :330W 2810GT413W

25 cm U 9.9kg 960Gbps 1.44Tbps 9204: U 9251: U 9208: U 9253: U 9214: U 9204 : 31.0kg 58.1kg 9208 : 40.1kg 74.2kg 9214 : 92.3kg 158.8kg 9204:3.2 Tbps 9208:9.6 Tbps 9214:13.2 Tbps T: 40 Gbps F: 40 Gbps XS: 240 Gbps QS: 120 Gbps C-8XS: 260 Gbps QS; 240Gbps F-MMacsec XS: 400 Gbps QS: 480 Gbps 9251: 10.5kg 9253: 54.43kg 9251: 800Gbps/slot (400Gbps/slot full duplex) 9253: 2.4Tbps/slot (1.2Tbps/slot full duplex) Q12C: 2.4Tbps Q12C-M: 2.4Tbps 1.07Bpps - -10/100/1000Base-T 100Base- FX/1000Base-XSFP 10GBase-X 1000Base-T: SFP 1000Base-X: : : : : : : G 9204: G 9208: G Breakout cable 9214: /1000/10000 Base-T GBase QSFP+ 100GBase - / 12440G 10G 10G-USR 810GE 10G-USR 40G40G-SR4 440G40G- SR F-AFO : 279W F-AFI : 285W F-DC-AFO : 392W F-DC-AFI : 320W 9204: : : : : : :-40 to -72 V DC: 2400W per power supply V AC: 1167W per power supply V AC: 2050W per poweer supply 2,199WDC, 2,421WAC 9208: -40 to -72 V DC: 4800W per system V AC: 3501W per system V AC: 4100W per system 2+2 4,388W DC, 4,831W AC 9214:-40 to -72 V DC: 8200W 2+2, two-feed V AC: 8200W 2+2, two-feed, W 3+1, two-feed 9,534WDC, 9,318WAC : 24breakout cable 9253: 144breakout cable 9251: : : : 24 OS Junos Junos Junos sflow IPFIX sflow sflow 128 unicast and 4 multicast 8 8 MAC 288,000 1,000,000 1,000,000 9,216 9,192 9,192 IPv4 / 128,000prefixes, 208,000 host routes / 104, , ,000 with ML license/ 256, : V AC: 300W (1+1) V AC: 300W (1+1) -40 to -72 V DC: 312W (1+1) 9253: V AC: 2692W (1+1) V AC: 2692W (1+1) -40 to -72 V DC: 2692W (1+1) 256, ,000 with ML license/ 256,000 VLAN 4,091 32,000 32,000 ARP 48, , ,000 with ML license 256, ,000 with ML license % 5%95% 5%95% 25

26 ジュニパーファブリック Virtual Chassis Virtual Chassis Fabric Spine Leaf Junos Fusion 10000ToR / 5110 シリーズ オープン技術 Multi-tier MC-LAG IP Fabric IP Fabric + Overlay VXLAN VXLAN L2 L VMware NSXJuniper ContrailSDN EVPN L3 Clos IP FabricL2 ECMP SDN Controller + VXLAN OPEN CONTRAIL EVPN + VXLAN API Automation Ecosystem データベースとテンプレートエンジン Junos シリーズ オーケストレーター 設定情報 API PythonAnsible NAPALM + Juniper プラグイン フィードバックパラメータ テレメトリー データ解析プラットフォーム 26

27 S Q Virtual Chassis Fabric Junos Fusion Multi-tier MC-LAG IP Fabric Overlays Spine Leaf N /A N /A 1 2 L2 /L2+L3/L3 L2+L3 L2+L3 L2 L3 L2+L Spine 10GbE40GbE100GbE 400GbE Q5 ASIC MAC GREVXLANEVPNMPLS L3VPNMPLS L2VPNEVPN-MPLS アクセス データセンター コア + DC 間接続 EVPN データセンターデータセンター (ToR) Leaf GbE10GbE25GbE40GbE50GbE100GbE GREVXLANOVSDBEVPNMPLS L3VPN 5100 VC VCF Junos FusionMulti Chassis-LAGMC-LAG GbE50GbE スパイン リーフ構成 最大 4 重化まで可能 VCF / Junos Fusion Junos Fusion MC-LAG 27

28 Q S Q C S S Y C RU S = 2RU 1RU 1RU 2RU cm S : T : Q : S : S : Q : C : Y : C : S : 9.9kg T : 11.2kg Q : 9.8kg S : 14.74kg S : 10.43kg Q : 11.16kg C : 10.8kg Y : 9.6kg 14.1kg S : 1.08Bpps T : 1.08Bpps Q : 1.44Bpps S : 1.44Bpps S : 1.32Bpps Q : 1.44Bpps C : 2.4Bpps Y : 2.1Bpps 2.1Bpps S : 1.44Tbps T : 1.44Tbps Q : 2.56Tbps S : 2.56Tbps S : 1.76Tbps Q : 2.56Tbps C : 6.4Tbps Y : 3.6Tbps 12.8Tbps S : - 481GbE/10GbE SFP+ 24SFP-T GbE SFP+ Breakout cable - 640GbE QSFP T : M/1GbE/10GbE GbE SFP+ Breakout cable - 640GbE QSFP Q : GbE SFP+ Breakout cable GbE SFP+ Breakout cable GbE QSFP GbE QSFP S : - 481GbE/10GbE SFP+ 24SFP-T GbE SFP+ Breakout cable - 440GbE/100GbE QSFP+/QSFP Q : GbE SFP+ Breakout cable GbE QSFP GbE QSFP C : 12810GbE/25GbE SFP+/SFP28 Breakout cable 13010GbE SFP+ Breakout cable 6450GbE QSFP28 Breakout cable 12825GbE/50GbE SFP28/QSFP GbE/100GbE QSFP+/QSFP28 Breakout cable 6440GbE/100GbE QSFP+/QSFP Y : 4810GbE/25GbE SFP+/SFP28 640GbE/100GbE QSFP+/QSFP S : - 961GbE/10GbE SFP+ 48SFP-T GbE SFP+ Breakout cable - 840GbE QSFP+ : AC100240V / DC V /: S : 230W/365W T : 322W/395W Q : 230W/365W S : 315W/470W : AC100240V / DC V /: S : 195W/300W Q : 290W/340W : AC100240V / DC V /: C : 380W/480W Y : 382W/430W : AC100240V / DC V /: 1 /800W OS JUNOS JUNOS JUNOS JUNOS / LAG VLAN / ACL / L2 over VLAN - : 4 - VLAN : 4 - : 4 - : 4 - VLAN : 4 - : 4 - : 4 - VLAN : 4 - : 4 QoS MAC 288, , , ,000 9,216 9,216 9,216 9,216 IPv4 / 128, , , , , , , ,000 52, , ,750 VLAN 4,093 4,093 4,093 4,093 FCoE/FC - FCoE DCBData Center Bridging FCoE DCBData Center Bridging FCoE DCBData Center Bridging ARP 48,000 48,000 32,000 49, % 0 95% C : 5 95% Y : 5 93% 5 95% 1 : LX4 JNP-QSFP-40G-LX4 40GOM4/LC 40Gbps40G 28

29 Q Q RU 13RU 21RU cm Q : Q : C : Q : 23kg Q : 31kg C : 36.5kg Q : 1Bpps Q : 2Bpps C : 4Bpps Q : 2.88Tbps Q : 5.76Tbps C : 12Tbps Q : GbE SFP+ Breakout cable GbE QSFP GbE QSFP Q : GbE SFP+ Breakout cable GbE QSFP GbE QSFP kg 224kg 16Bpps 48Tbps 1,15210GbE SFP+ Breakout cable 28840GbE QSFP GbE QSFP kg 425kg 32Bpps 96Tbps GbE Breakout cable 57640GbE QSFP GbE QSFP28 Q5 ASIC C : GbE SFP+ Breakout cable GbE/100GbE QSFP+/QSFP28 : AC100240V / DC V /: : AC200240V / DC V Q : 560W1,911BTU/hr/800W2,730BTU/hr : 13,500W46,064BTU/hr Q : 1,050W3,583BTU/hr/1,425W4,862BTU/hr C : 2,000W6,825BTU/hr/2,500W8,530BTU/hr OS JUNOS JUNOS JUNOS 4Analyzer / LAG VLAN / ACL / RSPAN/ERSPAN Q5 Forwarding ASIC Q5 ASIC1TbpsMAC I/O DDR3DDR4I/O Speed200Gbps Hybrid Memory CubeHMC Q5 ASIC HMC DDR417% 84% 4Analyzer / LAG VLAN / ACL / RSPAN/ERSPAN QoS MAC Q : 256, Q : 512, C : 1,000,000 1,000,000 1,000,000 9,216 9,216 9,216 IPv4/ 2,000, ,000 2,000, ,000 VLAN 4,000 4,093 4,093 MPLS IPv4 L3VPNs 4,000 4,096 4,096 VXLANVNID 4,000 4,000 4,000 Data Center Bridging ARP Priority-based flow control PFC IEEE 802.1Qbb Enhanced Transmission Selection ETS IEEE 802.1Qaz Data Center Bridging Exchange Protocol DCBX, DCBx FCoE, and iscsi type, length, and value TLVs FCoE link aggregation group LAGactive/active Q : 192,00064,000/PFE Q : 340,00064,000/PFE C : 340,00064,000/PFE Priority-based flow control PFC IEEE 802.1Qbb Enhanced Transmission Selection ETS IEEE 802.1Qaz Data Center Bridging Exchange Protocol DCBX, DCBx FCoE, and iscsi type, length, and value TLVs FCoE link aggregation group LAGactive/active 510,00064,000/PFE % 5 95% 5 95% HMC The Juniper Q5 ASIC : AC200240V / DC V : 27,304W93,166BTU/hr 4Analyzer / LAG VLAN / ACL / RSPAN/ERSPAN 2,000, ,000 Priority-based flow control PFC IEEE 802.1Qbb Enhanced Transmission Selection ETS IEEE 802.1Qaz Data Center Bridging Exchange Protocol DCBX, DCBx FCoE, and iscsi type, length, and value TLVs FCoE link aggregation group LAGactive/active 510,00064,000/PFE Hybrid Memory Cube DDR4 HMC 90 2 ASIC PIN 2, W 49W 12,750mm 2 1,922mm 2 29

30 (EFL) (AFL) MACSec Virtual Chassis FIB 2200-C-12T-2G 2200-C-12P-2G -12-EFL T-4G P-4G -24-EFL T-DC-4G T-4G P-4G -48-EFL T P 2300-C-12T -24-EFL 2300-VC 2300-C-12P T P -48-EFL 2300-VC T P -24-EFL -24-AFL T-DC T T-BF -48-EFL -48-AFL P T P -24-EFL --MACSEC-ACC T P -48-EFL --MACSEC-ACC T-AFI T P PX -24-AFL --MACSEC-ACC F T P PX -48-AFL --MACSEC-ACC F T P EFL AFL --MACSEC-ACC T T-AFI P EFL AFL --MACSEC-ACC T-DC T-DC-AFI F F-DC F-EFL F-AFL --MACSEC-ACC AFL --MACSEC-AGG F 4600-AFL --MACSEC-AGG AFL 9200-SFL 9204-ML AFL 9200-SFL 9208-ML AFL 9200-SFL 9214-ML AFL 9251-ML AFL 9253-SFL 9253-ML 1 1 : (ARP/FIB: 256K 512K (EFL), (AFL) B: (), E: (EFL), A: (AFL) Q-in-Q tunneling (IEEE 802.1ad) E B E B B B B B B B CFM (IEEE 802.1ag) E B B E B RPM E E E E B E B VRRP E E E E B E B B B B VRRPv6 E E E B B B B B B BFD E E E E B E B B B B Virtual Router E E E B E B B B B Unicast reverse-path forwarding(rpf) E E B E B B B B OSPFv2 E E E E B E B B B B OSPFv3 E E E B E B B B B RIPng E E E B E B B B B IGMPv1/v2/v3 E E E E B E B B B B PIM-DM/SM/SSM E E E E B E B B B B 30

31 MLDv1/v2 E E E B B B B B PIMv6 E E E B B B B B MSDP E E E B E B B B B IS-IS A A A A A A IS-IS for IPv6 A A A A A A BGP A A A A A A A MBGP A A A A A A A IPv6 for BGP/MBGP A A A A A A A VRF(BGP) A A A A A A A MPLS A A A A A Ethernet VPN A A RSVP-based LSP A A A A A MPLS-based CCC A A OVSDB A VXLAN A A Logical systems A 2200, 3300: 2300-C: -RPS-PWR-930-AC -RPS-CBL CBL--PWR-C13-JP JPSU-150-AC-AFI JPSU-150-AC-AFO JPSU-150-DC-AFO (RPS); RPS1, 2, 930W AC1() 2200/ m RPS AC, Japan(12A/125V, 2.5m) 3400: W AC ( ) W AC ( ) W DC 2300-C-MGNT-MNT 2300-C-RMK 2300-C-CBL-GRD -UM-4SFP -UM-2X4SFP -UM-2X4SFP-M 2300-C 2300-C 2300-C 4200:, VCP 4200/320041G SFP( ) 4200/ G SFP+/41G SFP () MACSec G SFP+/41G SFP () JPSU-600-AC-AFO W AC ( ) -UM-2XFP 4200/ G XFP( ) JPSU-920-AC-AFO CBL--PWR-C13-JP W AC ( ) AC, Japan(12A/125V, 2.5m) -CBL-VCP-50CM -CBL-VCP-1M -CBL-VCP-3M 4200/4500/ m VCP() 4200/4500/45501m VCP 4200/4500/45503m VCP 4300: -CBL-VCP-5M 4200/4500/45505m VCP 4550:, VC -UM-4X4SFP -UM-2QSFP -UM-8X8SFP T/24P/48T/48P41GbE/10GbE SFP+ () F240GbE QSFP+( ) F81GbE/10GbE SFP+( ) 9200: 4550-EM-8XFP 4550-EM-8XT 4550-EM-2QSFP 4550-VC-128G -CBL-VCP-50CM -CBL-VCP-1M G SFP+( ) M/1G/10G-Base-T GbE( ) G Virtual Chassis(VCP) 4200/4500/ m VCP 4200/4500/45501m VCP XS F T QS C-8XS F-M QS XS 9200-MPC T-MIC XS-MIC F-MIC 3210GbE SFP+(SFP+ ) 40100FX/1000Base-X SFP(SFP ) 4010/100/1000Base-T RJ GbE QSFP+(QSFP+ ) 2100GbE CFP, 810GbE SFP+(CFP/SFP+ ) 40 MACSec 100FX/1000Base-X SFP(SFP ) 12 10/40/100GbE QSFP+/QSFP28 (QSFP+/QSFP28) 4010GbE SFP+, MACSec(SFP+ ) MPC: (MIC) MIC: : 4010/100/1000Base-T RJ- 45 (full-slot) MIC: : 1010GBase-X (half-slot, SFP+) MIC: : Base-X (half-slot, SFP) -CBL-VCP-3M -CBL-VCP-5M -EM-4Q 4600-EM-8F Q12C Q12C-M 4200/4500/45503m VCP 4200/4500/45505m VCP 4600: 4600/ Q4QSFP+( ) 4600/ Q8SFP+/SFP( ) 9253: 6x40GbE12x40GbE/100GbE(SFP+ ) 6x40GbE12x40GbE/100GbE, MACsec AES256 (SFP+ ) 31

32 2200-C C SFP-1FE-FX Small Form Factor Pluggable 100Base-FX Fast Ethernet Optics -SFP-1FE-FX-ET SFP, 100Base-FX Fast Ethernet, Extended Temp Range Optics SFP (Fast Ethernet) -SFP-1FE-LH SFP 100Base-LH Fast Ethernet Optics, 1550nm for 80 km Transmission on SMF -SFP-1FE-LX SFP 100BASE-LX; LC connector; 1310nm; 10km Reach on Single Mode Fiber -SFP-1FE-LX40K SFP 100Base-LX Fast Ethernet Optics, 1310nm for 40 km Transmission on SMF 2200-C C SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optics -SFP-1GE-SX-ET SFP, 1000Base-SX Gigabit Ethernet, Extended Temp Range Optics -SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optics -SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics -SFP-1GE-LX40K SFP 1000Base-LX Gigabit Ethernet Optics, 1310 nm for 40 km transmission on single mode fiber -SFP-1GE-T Small Form Factor Pluggable 10/100/1000 Copper Transceiver Module 1 -SFP-GE10KT13R14 SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1310nm/ Rx 1490nm for 10km transmission -SFP-GE10KT13R15 SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1310nm/ Rx 1550nm for 10km Transmission -SFP-GE10KT14R13 SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1490nm/ Rx 1310nm for 10km transmission SFP (Gigabit Ethernet) -SFP-GE10KT15R13 -SFP-GE40KT13R15 SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1550nm/ Rx 1310nm for 10km Transmission SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1310nm/ Rx 1550nm for 40km Transmission -SFP-GE40KT15R13 SFP 1000Base-BX Gigabit Ethernet Optics, Tx 1550nm/ Rx 1310nm for 40km Transmission -SFP-GE80KCW1470 SFP, Gigabit Ethernet CWDM Optics, 1470nm for 80 km Transmission on SMF -SFP-GE80KCW1490 SFP, Gigabit Ethernet CWDM Optics, 1490nm for 80 km Transmission on SMF -SFP-GE80KCW1510 SFP, Gigabit Ethernet CWDM Optics, 1510nm for 80 km Transmission on SMF -SFP-GE80KCW1530 SFP, Gigabit Ethernet CWDM Optics, 1530nm for 80 km Transmission on SMF -SFP-GE80KCW1550 SFP, Gigabit Ethernet CWDM Optics, 1550nm for 80 km Transmission on SMF -SFP-GE80KCW1570 SFP, Gigabit Ethernet CWDM Optics, 1570nm for 80 km Transmission on SMF -SFP-GE80KCW1590 SFP, Gigabit Ethernet CWDM Optics, 1590nm for 80 km Transmission on SMF -SFP-GE80KCW1610 SFP, Gigabit Ethernet CWDM Optics, 1610nm for 80 km Transmission on SMF 2200-C C SFP+ (10 Gigabit Ethernet) -SFP-10GE-SR -SFP-10GE-USR -SFP-10GE-LR -SFP-10GE-LRM -SFP-10GE-ER -SFP-10GE-ZR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics SFP+ 10 Gigabit Ethernet Ultra Short Reach; 850 nm; 10m on OM1, 20m on OM2, 100m on OM3 Multi-Mode Fiber Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LRM Optics SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km Transmission SFP+, 10GBase-ZR 10 Gigabit Ethernet Optics, 1550nm for 80km Transmission on SMF 32

33 2200-C C JNP-SFP-10G-BX10D 10G BX optics over SMF,1330nm upto 10KM JNP-SFP-10G-BX10U 10G BX optics over SMF,1270nm upto 10KM SFP+ (10 Gigabit Ethernet) JNP-10G-AOC-1M/-3M/- 5M/-7M/-10M/-15M/- 20M/-30M -SFP-10GE-DAC-1M/- 3M/-5M/-7M 10G SFP to SFP Active Optical Cable,1m/3m/5m/7m/10 m/15m/20m/30m SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1m/3m/5m/7m -SFP-10GE-DAC-7M -SFP-DAC-1MA/- 3MA/-5MA/-7MA SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 7m SFP+ 10 Gigabit Ethernet Direct Attach Copper (active twinax copper cable) 1m/3m/5m/7m -XFP-10GE-SR XFP 10GBase-SR 10 Gigabit Ethernet Optics Module -XFP-10GE-LR XFP 10GBase-LR 10 Gigabit Ethernet Optics Module, Expresso-3200 XFP (10 Gigabit Ethernet) -XFP-10GE-ER XFP 10GBase-ER 10 Gigabit Ethernet Optics Module -XFP-10GE-ZR XFP 10GBase-ZR 10 Gigabit Ethernet Optics Module -XFP-10GE80KDWDM -QSFP-40G-SR4 10GE DWDM XFP, Tunable Across C-band 50 Ghz Channel Spacing (compliant with ITU-T G.698.1) for 80 km Transmission on SMF QSFP+ 40GBase-SR4 40 Gigabit Optics, 850nm for up to 150m transmission on MMF 2200-C C QSFP-40G-ESR4 JNP-QSFP-40G-LR4 JNP-QSFP-40G-LX4 JNP-QSFP-40GE-ER4 JNP-QSFP-40GE-IR4 QSFP+ 40GBase-eSR4 40 Gigabit Optics, 850nm for up to 300m Transmission on MMF, Spares, QSFP+ 40GBase-LR4 40 Gigabit Optics for up to 10km transmission on SMF QSFP+ 40GBASE-LX4 40 Gigabit Optics for up to 150m transmission with OM4 over duplex MMF QSFP+ 40GBase-ER4 40 Gigabit Optics, 1310nm for up to 40km Transmission on SMF QSFP+ 40GBase-IR4 40 Gigabit Optics for up to 2km transmission over SMF QSFP+ (40 Gigabit Ethernet) JNP-QSFP-4X10GE-LR JNP-40G-AOC-1M/-3M/- 5M/-7M/-10M/-15M/- 20M/-30M JNP-QSFP-AOCBO-1M/- 3M/-5M/-7M/-10M QSFP+ 40GBase Optics, up to 10km Transmission on Parallel single mode (4X10GE LR up to 10km) 40G QSFP to QSFP active optical cables,1m/3m/5m/7 m/10m/15m/20m/30m 40G QSFP+ to 4xSFP+ active optical cables, 1m/3m/5m/7m/10m -QSFP-40GE-DAC- 50CM QSFP+ 40 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable) for 50cm Transmission -QSFP-DAC-1M/-3M QSFP+ Cable Assy, 1m/3m, 30AWG, Passive, Programmable ID JNP-QSFP-DAC-5MA QSFP+ 40GBase Direct Attach Copper Cable 5m,active JNP-QSFP-DAC-7MA/- 10MA QSFP+ 40GBase Direct Attach Copper Cable 7m/10m, active -QSFP-DACBO-1M/- 3M QSFP+ to SFP+ 10 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 1m/3m 2200-C C QSFP28 (100 Gigabit Ethernet) QSFP-100GBASE-SR4 QSFP-100GBASE-LR4 JNP-QSFP-100G-PSM4 100GBASE-SR4 QSFP28 pluggable module, support only Ethernet rate 100GBASE-LR4 QSFP28 pluggable module, support only Ethernet rate QSFP28 100GBase-PSM4 Optics for up to 2km transmission over parallel SMF JNP-QSFP-100G-CWDM QSFP28 100GBase-CWDM4 Optics for up to 2km transmission over serial SMF JNP-100G-DAC-1M/-3M CFP-100GBASE-SR10 CFP (100 Gigabit Ethernet) CFP-GEN2-100GBASE- LR4 1 : F QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax copper cable) 1m/3m CFP 100G Pluggable Transceiver,100m with OM3 fiber and 150m with OM4 fiber 100GBASE-LR4 CFP (2nd Generation) Pluggable Module Compliant with IEEE 802.3ba 33

34 Hot-aisleCold-Aisle /AFI AFO xxx (Side-to-Back): /FAN 2200-C-xxx xxx (Front-to-Back): /FAN 2300-C-xxx Back Back Front Front xxx(Front-to-Back):/FAN 3300-xxx-BF(Back-to-Front):/FAN Back BF xxx(Front-to-Back):/FAN 3400-xxx-AFI(Back-to-Front):/FAN Back AFI Front Front xxx (Side-to-Back): /FAN xxx-AFO(Front-to-Back):/FAN 4300-xxx-AFI(Back-to-Front):/FAN Back AFO Back AFI Front Front xxx-AFO(Front-to-Back):/FAN 4550-xxx-AFI(Back-to-Front):/FAN xxx-AFO(Front-to-Back):/FAN 4600-xxx-AFI(Back-to-Front):/FAN AFO Back(PSU side) AFI AFO Back(PSU side) AFI Front(Port side) Front(Port side) 9204/ xxx, 9208-xxx (Side-to-Side): () () Back xxx (Front-to-Back): / Back 9250 Front 9251-xxx, 9253-xxx (Front-to-Back): / Back Front Front 34

35 5100, 5110, Y, C, (PFL): BGP, IS-IS, VXLAN, OVSDB (AFL): BGP, IS-IS, VXLAN, OVSDB, MPLS Virtual Chassis Fabric MACSec FIB: 1 million (IPv4 or IPv6) FIB S T -JSL-EDGE-ADV1 -VCF-LIC S 5100-HDNSE-LIC -VCF-LIC Q 5100-HDNSE-LIC -VCF-LIC 1 --MACSEC-AGG S 5K-C1-PFL 5K-C1-AFL Q 5K-C1-PFL 5K-C1-AFL -VCF-LIC Y 5K-C1-PFL 5K-C1-AFL C 5K-C2-PFL 5K-C2-AFL Q Q-PFL Q-AFL Q-LFIB Q Q-PFL Q-AFL Q-LFIB C C-PFL C-AFL C-LFIB PFL AFL --MACSEC-AGG PFL AFL --MACSEC-AGG C C-M C-LFIB Q Q-LFIB S S-LFIB 1 : 1VCF2 2: 4600-EM-8F 3: 10K-12C-DWDM, C-M C C (JBS) JBS JBS-1YR (JAS): JBS + BGP, IS- IS, VXLAN, OVSDB JAS JAS-1YR (JPS): JBS + BGP, IS-IS, VXLAN, OVSDB, MPLS JPS JPS-1YR C Q, Q-AA: 10008/100016: -PFA-4Q -EM-4Q 4600-EM-8F Q-AA4QSFP+ () Q4QSFP+( ) 4600/ Q8SFP+/SFP( ) Q C S-6Q 36 40GbE QSFP+ or GbE QSFP28 () GbE QSFP28 or 24 40GbE QSFP+, 6 100GbE QSFP28 () 60 1/10GbE SFP/SFP+, 640GbE QSFP+/2 100GbE QSFP28 () 10K-12C-DWDM 6DWDM 1.2Tbps () C-M GbE QSFP28 or 24 40GbE QSFP+, 6 100GbE QSFP28 MACSec() 35

36 C Y C JNP-QSFP-100G-SR4 JNP-QSFP-100G-LR4 JNP-QSFP-100G-PSM4 QSFP28 100GBase-SR4 Optics for up to 100m transmission over parallel MMF QSFP28 100GBase-LR4 Optics for up to 10km transmission over serial SMF QSFP28 100GBase-PSM4 Optics for up to 2km transmission over parallel SMF JNP-QSFP-100G-CWDM QSFP28 100GBase-CWDM4 Optics for up to 2km transmission over serial SMF QSFP-100G-ER4L 100GBASE-ER4-Lite QSFP28 pluggable module, support only Ethernet rate QSFP28 (100 Gigabit Ethernet) JNP-100G-4X25G-1M/- 3M QSFP28 to SFP28 25 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 1m/3m JNP-100G-AOC-1M 100G QSFP28 to QSFP28 active optical cables,1m JNP-100G-AOC-3M/-5M 100G QSFP28 to QSFP28 active optical cables,3m/5m JNP-100G-AOC-7M 100G QSFP28 to QSFP28 active optical cables,7m JNP-100G-AOC-10M 100G QSFP28 to QSFP28 active optical cables,10m JNP-100G-AOC-15M 100G QSFP28 to QSFP28 active optical cables,15m JNP-100G-AOC-20M 100G QSFP28 to QSFP28 active optical cables,20m JNP-100G-AOC-30M 100G QSFP28 to QSFP28 active optical cables,30m JNP-100G-DAC-1M/-3M JNP-100G-DAC-5M QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax copper cable) 1m/3m QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax copper cable) 5m active Y C QSFP-40G-SR4 -QSFP-40G-ESR4 JNP-QSFP-40G-LR4 JNP-QSFP-40G-LX4 JNP-QSFP-40GE-ER4 JNP-QSFP-40GE-IR4 QSFP+ 40GBase-SR4 40 Gigabit Optics, 850nm for up to 150m transmission on MMF QSFP+ 40GBase-eSR4 40 Gigabit Optics, 850nm for up to 300m Transmission on MMF, Spares, QSFP+ 40GBase-LR4 40 Gigabit Optics for up to 10km transmission on SMF QSFP+ 40GBase-LX4 40 Gigabit Optics for up to 150m transmission with OM4 over duplex MMF QSFP+ 40GBase-ER4 40 Gigabit Optics, 1310nm for up to 40km Transmission on SMF QSFP+ 40GBase-IR4 40 Gigabit Optics for up to 2km transmission over SMF QSFPP-4X10GE-SR QSFP+ 4x10GBase-SR Ethernet module JNP-QSFP-4X10GE-IR JNP-QSFP-4X10GE-LR QSFP+ 40GBase-LR4 40 Gigabit Optics for up to 1km transmission over parallel SMF QSFP+ 40GBase Optics, up to 10km Transmission on Parallel single mode (4X10GE LR up to 10km) QSFP+ (40 Gigabit Ethernet) JNP-40G-AOC-1M/-3M/- 5M/-7M/-10M/-15M/- 20M/-30M JNP-QSFP-AOCBO-1M/- 3M/-5M/-7M/-10M -QSFP-40GE-DAC- 50CM -QSFP-DAC-1M/-3M 40G QSFP to QSFP active optical cables,1m/3m/5m/7 m/10m/15m/20m/30m 40G QSFP+ to 4xSFP+ active optical cables, 1m/3m/5m/7m/10m QSFP+ 40 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable) for 50cm Transmission QSFP+ Cable Assy, 1m/3m, 30AWG, Passive, Programmable ID JNP-QSFP-DAC-5M QSFP+ 40GBase Direct Attach Copper Cable 5m, passive JNP-QSFP-DAC-5MA QSFP+ 40GBase Direct Attach Copper Cable 5m,active JNP-QSFP-DAC-7MA/- 10MA QSFP+ 40GBase Direct Attach Copper Cable 7m/10m,active -QSFP-DACBO-1M/- 3M JNP-QSFP-DACBO-5MA QSFP+ to SFP+ 10 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 1m/3m QSFP+ to SFP+ 10 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 5m,active JNP-QSFP-DACBO-7MA JNP-QSFP-DACBO-10M QSFP+ to SFP+ 10 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 7m,active QSFP+ to SFP+ 10 Gigabit Ethernet Direct Attach Break out Copper (twinax copper cable) 10m,active Y C SFP28 (25 Gigabit Ethernet) JNP-SFP-25G-SR 25GBASE-SR SFP28 module for MMF JNP-SFP-25G-DAC-1M/- 3M/-5M SFP 25GBASE DAC cable 1m/3m/5m 36

37 Y C SFP-10GE-USR -SFP-10GE-SR -SFP-10GE-LR -SFP-10GE-ER SFP+ 10 Gigabit Ethernet Ultra Short Reach Optics, 850 nm for 10m on OM1, 20m on OM2, 100m on OM3 Multi- Mode Fiber SFP+ 10GBase-SR 10 Gigabit Ethernet Optics, 850nm for up to 300m Transmission on MMF SFP+ 10GBase-LR 10 Gigabit Ethernet Optics, 1310nm for 10km Transmission on SMF SFP+ 10GBase-ER 10 Gigabit Ethernet Optics, 1550nm for 40km Transmission on SMF SFP+ (10 Gigabit Ethernet) -SFP-10GE-ZR SFP+, 10GBase-ZR 10 Gigabit Ethernet Optics, 1550nm for 80km Transmission on SMF JNP-SFP-10G-BX10D 10G BX optics over SMF,1330nm upto 10km JNP-SFP-10G-BX10U 10G BX optics over SMF,1270nm upto 10km JNP-10G-AOC-1M/-3M/- 5M/-7M/-10M/-15M/- 20M/-30M 10G SFP to SFP Active Optical Cable,1m/3m/5m/7m/10 m/15m/20m/30m -SFP-DAC-1M/-3M/- 5M SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 1m/3m/5m -SFP-DAC-1MA/- 3MA/-5MA -SFP-DAC-7MA/- 10MA SFP+ 10 Gigabit Ethernet Direct Attach Copper (active twinax copper cable) 1m/3m/5m SFP+ 10 Gigabit Ethernet Direct Attach Copper (active twinax copper cable) 7m/10m SFP (Gigabit Ethernet) -SFP-1GE-SX -SFP-1GE-LX -SFP-1GE-T -SFP-1GE-LX40K SFP 1000Base-SX Gigabit Ethernet Optics, 850nm for upto 550m Transmission on MMF SFP 1000Base-LX Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF SFP 1000Base-T Copper Transceiver Module for up to 100m transmission on Cat5 SFP 1000Base-LX Gigabit Ethernet Optics, 1310 nm for 40 km transmission on single mode fiber Y C SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optics : 1GbE SFP Hot-aisleCold-Aisle /AFI AFO xxx-AFO(Front-to-Back):/FAN 5100-xxx-AFI(Back-to-Front):/FAN AFO Back AFI xxx-AFO(Front-to-Back):/FAN 5110-xxx-AFI(Back-to-Front):/FAN AFO Back AFI 5200 Front 5200-xxx-AFO(Front-to-Back):/FAN 5200-xxx-AFI(Back-to-Front):/FAN AFO Back AFI xxx-AFO (Front-to-Back): / 5210-xxx-AFI (Back-to-Front): / AFO Front Back AFI Front xxx (Front-to-Back): / Back 10008/10016 Front xxx, xxx (Front-to-Back): / Back Front Front 37

38 MX 3D SDN 20Gbps80Tbps MX 1.6Tbps MPC9E 100GE 80Tbps QoS Junos OS Trio MPLS/EVPN Logical System, QoS NAT IPsec VPN SDN ready Junos MX10003 MX Tbps GbE 36 40GbE GbE MX10003 MACsec MX204 MX204 3D SDN MX Gbps 10 GbE 40 GbE100 GbE Web MSO MX204 Junos OS Trio Self-Driving Network MX Junos Fusion Provider Edge Junos Fusion Provider Edge MX Junos FusionIEEE 802.1BR Satellites Device Aggregation Device - MX - Junos , Windriver Yocto Linux with LFE OS MX

39 MX5 / MX10 / MX40 / MX80 MX104 MX150 MX204 SDN MX SDN USG SDN VXLANMPLSoverGRENVGREEVPN OVSDBBGP L2L3SDN-to-WANSDN-to-SDN SDN L2 USG - IPSDNSDN L3 USG - IPSDNSDN SDN USG - WAN USG - WAN MX シリーズ VM VM VM vswitch 仮想サーバー VM VM VM VM VM VM WAN USG vswitch vswitch L2 USG 仮想サーバー SDN USG クラウド基盤仮想サーバー L3 USG VM VM VM vswitch ADC IDP ベアメタルサーバー L2 USG クラウド基盤 L3 USG L 4 7 仮想サーバー ネットワーク サービス MX DC PTX ACX Internet MX MX VLAN データセンターゲートウェイ EVPN/VXLAN MX PTX インターネットゲートウェイ EVPN/MPLS PTX データセンターゲートウェイ MX EVPN/VXLAN VLAN VLAN DC IP/MPLS Core DC VLAN VLAN MX MX VLAN MX アクセスゲートウェイ MX L3 Access L2 Access ACX アクセスアグリゲーション ACX オフィス工場モバイル家庭 MX 39

40 MX MX150 MX5 MX10 MX150 MX5 MX10 40Gbps 40Gbps 80Gbps 2.5M pps 55 60Mpps 55 60Mpps MIC G 2 0* 0* 1G cm U U U :4.3kg :13.7kg :13.7kg / V /140W AC V /365W AC V /310W DC V /365W AC V /310W DC MIC MPC MX240 MX480 MX960 MX2008 MX2010 MX2020 MX240 MX480 MX960 MX2008 MX2010 MX2020 MPC-3D-16XGE- SFPP 16x10GE line card, price includes full scale L2/ L2.5 and reduced scale L3 features; requires SFPP optics sold separately * * * MX-MPC2E-3D 2xTrio Chipset Enhanced MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features * * * MPC-3D-16XGE- SFPP-R-B 16x10GE line card bundle, price includes full scale L3, L2 and L2.5 features; requires SFPP optics sold separately * * * MX-MPC2E-3D-EQ 2xTrio Chipset Enhanced MPC, per-ifl HQoS, 512K queues; price includes full scale L2/L2.5 and reduced scale L3 features * * * MX-MPC1E-3D 1xTrio Chipset Enhanced MPC, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features * * * MX-MPC2E-3D- EQ-R-B MX-MPC2E-3D-EQ line card bundle, price includes full scale L3, L2 and L2.5 features * * * MX-MPC1E-3D-P-B MX-MPC1E-3D Line Card Bundle, Port Queuing, price includes 1588v2, Full scale L2/ L2.5 and Reduced Scale L3 Features * * * MX-MPC2E-3D-P 2xTrio Chipset Enhanced MPC, 1588v2, port queuing, price includes full scale L2/L2.5 and reduced scale L3 features * * * MX-MPC1E-3D-P-Q-B MX-MPC1E-3D-Q Line Card Bundle, per IFL HQoS, 128K Queues (Max 64K Egress), price includes 1588v2, Full scale L2/L2.5 and Reduced Scale L3 Features * * * MX-MPC2E-3D-P-Q-B MX-MPC2E-3D-P line card bundle, price includes 1588v2, per-ifl HQoS, 256K queues (max 128K egress), full scale L2/L2.5 and reduced scale L3 features * * * MX-MPC1E-3D-P- Q-R-B MX-MPC1E-3D-P-R-B MX-MPC1E-3D-Q MX-MPC1E-3D-Q Line Card Bundle, per IFL HQoS, 128K Queues (Max 64K Egress), price includes 1588v2, Full Scale L3, L2 and L2.5 Features MX-MPC1E-3D Line Card Bundle, Port Queuing, price includes 1588v2, Full Scale L3, L2 and L2.5 Feature 1xTrio Chipset Enhanced MPC, per-ifl HQoS, 128K queues (max 64K egress); price includes full scale L2/L2.5 and reduced scale L3 features * * * * * * * * * MX-MPC2E-3D-P- Q-R-B MX-MPC2E-3D-P- R-B MX-MPC2E-3D-Q MX-MPC2E-3D-Q-R-B MX-MPC2E-3D-P line card bundle, price includes 1588v2, per-ifl HQoS, 256K queues (max 128K egress), full scale L3, L2 and L2.5 features MX-MPC2E-3D-P line card bundle, price includes 1588v2, full scale L3, L2 and L2.5 features 2xTrio Chipset Enhanced MPC, per-ifl HQoS, 256K queues (max 128K egress); price includes full scale L2/L2.5 and reduced scale L3 features MX-MPC2E-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features * * * * * * * * * * * * MX-MPC1E-3D-Q-R-B MX-MPC1E-3D-Q line card bundle, price includes full scale L3, L2 and L2.5 features * * * MX-MPC2E-3D-R-B MX-MPC2E-3D line card bundle, price includes full scale L3, L2 and L2.5 features * * * MX-MPC1E-3D-R-B MX-MPC1E-3D line card bundle, price includes full scale L3, L2 and L2.5 features * * * MPC2E-3D-NG Next-Gen MPC2E, Port Queue, MX * * * 40 MX

41 MX40 MX80 MX104 MX204 MX40 MX80 MX104 MX Gbps 160Gbps 160 Gbps 800Gbps 55 60Mpps 55 60Mpps 55 60Mpps 423Mpps/PFEHyper mode MIC G 2* 4* 4* 24 1G cm U U U U :13.7kg :13.7kg 14.5 kg :10.5kg / V /365W AC V /310W DC V /365W AC V /310W DC V /600W AC V /625W DC V /260W AC V /260W DC MIC MX240 MX480 MX960 MX2008 MX2010 MX2020 MPC2E-3D-NG- IR-B NG MPC2E,Port Queue,Full Scale,32 L3 VPN * * * MX240 MX480 MX960 MX2008 MX2010 MX2020 MPC4E-3D- 2CGE8XGE-IR-B MPC4E with 2x100GE and 8x10GE ports. Includes full scale L2/L2.5, L3 features and upto 16 L3VPN instances per MPC. Optics sold separately. * * * MPC2E-3D-NG-Q Next-Gen MPC2E, Rich Queue, MX * * * MPC2E-3D-NG-Q- IR-B NG MPC2E,Rich Queue,Full Scale,32 L3 VPN * * * MPC4E-3D- 2CGE8XGE-R-B MPC4E with 2x100GE and 8x10GE ports. Includes full scale L2/L2.5, L3 and L3VPN features. Optics sold separately. * * * MPC2E-3D-NG-Q- R-B Next-Gen MPC2E,Rich Queue,Full Scale,MX * * * MPC4E-3D- 32XGE-IR-B MPC4E with 32x10GE SFPP ports. Includes full scale L2/L2.5, L3 features and upto 16 L3VPN instances per MPC. Optics sold separately. * * * MPC2E-3D-NG- R-B Next-Gen MPC2E,Port Queue,Full Scale,MX * * * MPC4E-3D- 32XGE-R-B MPC4E with 32x10GE SFPP ports. Includes full scale L2/L2.5, L3 and L3VPN features. Optics sold separately. * * * MX-MPC3E-3D MPC3 with support for 100GE, 40GE and 10GE interfaces, L2.5 features, Optics sold separately. * * * MPC4E-3D- 32XGE-SFPP MPC4E with 32x10GE SFPP ports. Price includes full scale L2/L2.5 and reduced scale L3 features. Optics Sold Separately. * * * MX-MPC3E-3D- R-B MPC3E with support for 100GE, 40GE and 10GE interfaces. Includes full scale L2, L3, L3VPN features. Optics sold separately. * * * MPC5E-100G10G Intg. MPC, 2x100GE and 4x10GE ports * * * MPC3E-3D-NG Next-Gen MPC3E, Port Queue, MX * * * MPC5E-100G10G- IRB MPC5E-100G10G bundle with 'IR' license * * * MPC3E-3D-NG- IR-B NG MPC3E,Port Queue,Full Scale,32 L3 VPN * * * MPC5E-100G10G- RB MPC5E-100G10G bundle with 'R' license * * * MPC3E-3D-NG-Q Next-Gen MPC3E, Rich Queue, MX * * * MPC5E-40G10G Intg. MPC, 6x40GE and 24x10GE ports * * * MPC3E-3D-NG-Q-IR-B NG MPC3E,Rich Queue,Full Scale,32 L3 VPN * * * MPC5E-40G10G- IRB MPC5E-40G10G bundle with 'IR' license * * * MPC3E-3D-NG-Q-R-B Next-Gen MPC3E,Rich Queue,Full Scale,MX * * * MPC5E-40G10G- RB MPC5E-40G10G bundle with 'R' license * * * MPC3E-3D-NG-R-B Next-Gen MPC3E,Port Queue,Full Scale,MX * * * MPC5EQ-100G10G Intg. HQoS MPC, 2x100GE and 4x10GE ports * * * MPC4E-3D-2CGE- 8XGE MPC4E with 2x100GE and 8x10GE ports. Price includes full scale L2/L2.5 and reduced scale L3 features. Optics sold separately. * * * MPC5EQ- 100G10G-IRB MPC5EQ-100G10G bundle with 'IR' license * * * MX 41

42 MX MX240 MX480 MX960 MX240 MX480 MX Tbps 5.76Tbps 10.56Tbps 960Gbps 960Gbps 960Gbps DPC/MPC MIC 1 MPC 2 1 MPC 2 1 MPC 2 100G G G G cm U U U :59.0kg :81.6kg :151.6kg V AC V DC V AC V DC V AC V DC MPC/DPC MX240 MX480 MX960 MX2008 MX2010 MX2020 MX240 MX480 MX960 MX2008 MX2010 MX2020 MPC5EQ- 100G10G-RB MPC5EQ-100G10G bundle with 'R' license * * * MPC7E-MRATE- RB 10G/40G/100G QSFP28, FULL L3VPN * * * MPC5EQ-40G10G Intg. HQoS MPC, 6x40GE and 24x10GE ports * * * MPC7EQ-10G-B 40X10GE MPC WITH SFP+, HQOS * * * MPC5EQ- 40G10G-IRB MPC5E-Q-40G10G bundle with 'IR' license * * * MPC7EQ-10G-IRB 40X10GE SFPP, LIMITED L3VPN, HQOS * * * MPC5EQ- 40G10G-RB MPC5E-Q-40G10G bundle with 'R' license * * * MPC7EQ-10G-RB 40X10GE SFPP, FULL L3VPN, HQOS * * * MX2K-MPC6E Mod. MPC, full scale L2/L2.5, reduced L3 MPC7EQ-MRATE-B 12XQSFP+/QSFP28 MPC, HQOS * * * MX2K-MPC6E-IRB MPC6E bundle with 'IR' license MPC7EQ-MRATE- IRB 10G/40G/100G QSFP28, LIMITED L3VPN, HQOS * * * MX2K-MPC6E-RB MPC6E Bundle with 'R' License MPC7EQ-MRATE- RB 10G/40G/100G QSFP28, FULL L3VPN, HQOS * * * MX2000-LC- ADAPTER MX2000 Line Card Adapter, Spare MX2K-MPC8E 960GBPS, 2-SLOT MODULAR LINE CARD MS-MPC-128G Multi Service - MPC with 128G for MX * * * MX2K-MPC8E-IRB 1.6T MODULAR, MX2000, LIMITED L3VPN MPC7E-10G 40X10GE SFPP * * * MX2K-MPC8EQ-B 960G MODULAR, MX2000, HQOS MPC7E-10G-IRB 40X10GE SFPP, LIMITED L3VPN * * * MPC7E-10G-RB 40X10GE SFPP, FULL L3VPN * * * MX2K-MPC8EQ- IRB 1.6T MODULAR, MX2000, LIMITED L3VPN,HQOS MPC7E-MRATE 10G/40G/100G QSFP28 * * * MX2K-MPC8EQ- RB 1.6T MODULAR, MX2000, FULL L3VPN, HQOS MPC7E-MRATE- IRB 10G/40G/100G QSFP28, LIMITED L3VPN * * * MX2K-MPC8E-RB 1.6T MODULAR, MX2000, FULL L3VPN 42 MX

43 MX2008 MX2010 MX2020 MX10003 MX2008 MX2010 MX2020 MX Tbps 40Tbps 80Tbps 4.8Tbps 4Tbps 4Tbps 4Tbps 2.4Tbps DPC/MPC MIC 1 MPC 2 1 MPC 2 1 MPC 2 1 MPC 1 100G G G G cm U U U U :415.04kg :453.59kg :680.39kg :54.43kg V AC V DC V AC V DC V AC V DC 90264V AC V DC MX240 MX480 MX960 MX2008 MX2010 MX2020 MX2K-MPC9E 1.6T MODULAR, MX2000 MX2K-MPC9E-IRB 1.6T MODULAR, MX2000, FULL L3VPN MX2K-MPC9EQ-B 1.6T MODULAR, MX2000, HQOS MX2K-MPC9EQ- IRB 1.6T MODULAR, MX2000, LIMITED L3VPN,HQOS MX2K-MPC9EQ- RB 1.6T MODULAR, MX2000, FULL L3VPN, HQOS MX2K-MPC9E-RB 1.6T MODULAR, MX2000, LIMITED L3VPN * MX2000-LC-ADAPTER MPCMX10003 MX10003-LC2103 JNP10003/MX10003 MPC,6XQSFP+,1 MIC SLOT MX10003-LC2103-IR MX10003 MPC,6XQSFP+,1 MIC SLOT IR MODE MX10003-LC2103-R MX10003 MPC,6XQSFP+,1 MIC SLOT R MODE MX 43

44 MX MIC MX5 MX10 MX40 MX80 MX104 MX240 MX480 MX960 MX2010 MX2020 MIC3-3D-10XGE-SFPP MIC with 10x10GE SFP+ interface, Optics sold separately. MIC3-3D-1X100GE-CFP MIC with 1x100GE CFP interface, Optics sold separately. MIC3-3D-1X100GE-CXP MIC with 1x100GE CXP interface, Optics sold separately. MIC3-3D-2X40GE-QSFPP MIC with 2x40GE QSFP+ interface, Optics sold separately. MIC-3D-16CHE1-T1-CE 16 port channelized T1 / channelized E1 down to DS0MIC, RJ48 connector MIC-3D-16CHE1-T1-CE-H MIC-3D-16CHE1-T1, Circuit emulation, Temperature Hardened MIC-3D-1OC192-XFP 1 port OC192/STM64 MIC, Requires a pluggable XFP optics module, Sold separately MIC-3D-20GE-SFP 20x10/100/1000 MIC for MX, requires optics sold separately MIC-3D-20GE-SFP-E MIC-3D-20GE-SFP, enhanced (MAC SEC & TIMING PHY) MIC-3D-20GE-SFP-EH MIC-3D-20GE-SFP-Enhanced & Temperature hardened MIC-3D-2XGE-XFP 2x10G MIC for MX, requires optics sold separately MIC-3D-40GE-TX 40x10/100/1000 RJ-45 full height MIC fixed optics MIC-3D-4CHOC3-2CHOC12 Low density multirate MIC - Channelized, 4 port channelized OC3 / 2 port channelized OC12 down to DS0MIC, Requires a pluggable SFP optics module; Requires license S-MX80-Q when used on MX80 platform MIC-3D-4COC3-1COC12-CE Multirate Circuit Emulation MIC, 4 port channelized OC3/STM1 down to DS0or 1 port channelized OC12/STM4 down to DS0CE MIC, Port 0 can be configured for OC12 which disables ports 1-3 Requires a pluggable SFP optics module MIC-3D-4OC3OC12-1OC48 Low density multirate MIC, 4 port non-channelized OC3-OC12 / 1 port non-channelized OC48 MIC, Requires a pluggable SFP optics module MIC-3D-4XGE-XFP 4x10G MIC for MX, requires optics sold separately. Only supported on MX-MPC2 line cards MIC-3D-8CHDS3-E3-B 8 port channelized DS3 down to DS0/ non-channelized E3 MIC, 75 ohm minismb Requires CBL-DS3-E3-M-S to be ordered separately; Includes S-MIC-3D-8CHDS3 to support DS3 Channelization down to DS0; Requires license S-MX80-Q when used on MX80 platform MIC-3D-8CHOC3-4CHOC12 High density multirate MIC - Channelized, 8 port channelized OC3 / 4 port channelized OC12 down to DS0MIC, Requires a pluggable SFP optics module; Requires license S-MX80-Q when used on MX80 platform MIC-3D-8DS3-E3 8 port non-channelized DS3 / non-channelized E3 MIC, 75 ohm minismb Requires CBL-DS3-E3-M-S to be ordered separately; Requires S-MIC-3D-8CHDS3 to support DS3 Channelization down to DS0 MIC-3D-8OC3-2OC12-ATM Multirate ATM MIC, 8 port non-channelized OC3/STM1 or 2 port non-channelized OC12/STM4 ATM MIC, Ports 0,4 can be configured for OC12 which disables ports 1-3, 5-7, Requires license S-MX80-Q when this MIC is used on MX80, (Requires a pluggable SFP optics module). MIC-3D-8OC3OC12-4OC48 High density multirate MIC, 8 port non-channelized OC3-OC12 / 4 port non-channelized OC48 MIC, Requires a pluggable SFP optics module MIC-4COC3-1COC12-CE-H MIC-4COC3-1COC12-CE, Temperature Hardened MIC6-100G-CFP2 MPC6 MIC w/2 port 100GE CFP2 with OTN MIC6-100G-CXP MPC6 MIC w/4 port 100GE CXP MIC6-10G MPC6 MIC w/24 port 10GE SFPP MIC6-10G-OTN MPC6 MIC w/24 port 10GE SFPP with OTN MIC3-100G-DWDM 1 x 100G OTU4 DWDM PIC MS-MIC-16G Multi Service - MIC with 16G for MX MIC-MRATE 12 PORT QSFPP MULTIRATE MIC MICMX10003 JNP-MIC1 JNP-MIC1-MACSEC 12X100G/12X40G/48X10G UNIVERSAL MIC 12X100G/12X40G/48X10G UNVRSL MACSEC MIC vmx vmx VMX-100M 100M perpetual license. Includes all features with 256K RIB VMX-100M-1YR 100M 1 Year Subscription License. Includes all Features with 256K RIB VMX-250M 250M perpetual license. Includes all features with 256K RIB VMX-250M-1YR 250M 1 Year Subscription License. Includes all Features with 256K RIB VMX-500M VMX-BASE-1G VMX-BASE-5G VMX-BASE-10G VMX-BASE-40G VMX-ADV-1G VMX-ADV-5G VMX-ADV-10G VMX-ADV-40G VMX-PRM-1G VMX-PRM-5G VMX-PRM-10G VMX-PRM-40G 500M perpetual license. Includes all features with 256K RIB 1G perpetual license. Includes limited IP FIB and basic L2 functionality with 256K RIB. No VPN features 5G perpetual license. Includes limited IP FIB and basic L2 functionality with 256K RIB. No VPN features 10G perpetual license. Includes limited IP FIB and basic L2 functionality with 256K RIB. No VPN features 40G perpetual license. Includes limited IP FIB and basic L2 functionality with 256K RIB. No VPN features 1G perpetual license. Includes full scale L2/L2.5, L3 features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 5G perpetual license. Includes full scale L2/L2.5, L3 features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 10G perpetual license. Includes full scale L2/L2.5, L3 features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 40G perpetual license. Includes full scale L2/L2.5, L3 features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 1G perpetual license. Includes all features in BASE and ADV and L3VPN features and IPSec with 4M RIB 5G perpetual license. Includes all features in BASE and ADV and L3VPN features and IPSec with 4M RIB 10G perpetual license. Includes all features in BASE and ADV and L3VPN features and IPSec with 4M RIB 40G perpetual license. Includes all features in BASE and ADV and L3VPN features and IPSec with 4M RIB VMX-500M-1YR VMX-BASE-1G-1YR VMX-BASE-5G-1YR 500M 1 Year Subscription License. Includes all Features with 256K RIB 1G 1 Year Subscription. Includes Limited IP FIB and Basic L2 Functionality with 256K RIB. No VPN features 5G 1 Year Subscription. Includes Limited IP FIB and Basic L2 Functionality with 256K RIB. No VPN features VMX-BASE-10G-1YR 10G 1 Year Subscription. Includes Limited IP FIB and Basic L2 Functionality with 256K RIB. No VPN features VMX-BASE-40G-1YR VMX-ADV-1G-1YR VMX-ADV-5G-1YR VMX-ADV-10G-1YR VMX-ADV-40G-1YR VMX-PRM-1G-1YR VMX-PRM-5G-1YR VMX-PRM-10G-1YR VMX-PRM-40G-1YR 40G 1 Year Subscription. Includes Limited IP FIB and Basic L2 Functionality with 256K RIB. No VPN features 1G 1 Year Subscription. Includes Full Scale L2/L2.5, L3 Features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 5G 1 Year Subscription. Includes Full Scale L2/L2.5, L3 Features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 10G 1 Year Subscription. Includes Full Scale L2/L2.5, L3 Features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 40G 1 Year Subscription. Includes Full Scale L2/L2.5, L3 Features. Includes EVPN and VXLAN with 2M RIB. Only 16 L3VPN instances 1G 1 Year Subscription. Includes all Features in BASE and ADV and L3VPN features and IPSec with 4M RIB 5G 1 Year Subscription. Includes all Features in BASE and ADV and L3VPN features and IPSec with 4M RIB 10G 1 Year Subscription. Includes all Features in BASE and ADV and L3VPN features and IPSec with 4M RIB 40G 1 Year Subscription. Includes all Features in BASE and ADV and L3VPN features and IPSec with 4M RIB vrr VMX-1G-Q Queueing license for VMX 1G bandwidth licenses S-VRR-V-S VIRTUAL ROUTE REFLECTOR-SMALL (4M Routes) VMX-5G-Q Queueing license for VMX 5G bandwidth licenses S-VRR-V-M S-VRR-V-L VIRTUAL ROUTE REFLECTOR-MEDIUM (10M Routes) VIRTUAL ROUTE REFLECTOR-LARGE (30M Routes) VMX-10G-Q Queueing license for VMX 10G bandwidth licenses S-VRR-UPG-SM VRR UPG SMALL TO LARGE (30 MIL ROUTES) VMX-40G-Q Queueing license for VMX 40G bandwidth licenses S-VRR-UPG-ML VRR UPGRADE FROM MEDIUM TO LARGE VMX-1G-Q-1YR Queueing license for VMX 1G subscription bandwidth licenses S-VRR-V-S-1Y S-VRR-V-M-1Y VRR SMALL ( 4MIL ROUTES)-1Y SUBSCRIPTION VRR MEDIUM(10 MIL ROUTES) -1Y SUBSCR VMX-5G-Q-1YR Queueing license for VMX 5G subscription bandwidth licenses S-VRR-V-L-1Y VRR LARGE( 30 MIL ROUTES) -1Y SUBS VMX-10G-Q-1YR Queueing license for VMX 10G subscription bandwidth licenses S-VRR-V-S-3Y VRR SMALL( 4 MIL ROUTES) -3Y SUB VMX-40G-Q-1YR Queueing license for VMX 40G subscription bandwidth licenses S-VRR-V-M-3Y S-VRR-V-L-3Y VRR MEDIUM(10 MIL ROUTES) -3Y SUB VRR LARGE(30 MIL ROUTES) -3Y SUB 44 MX

45 vmx vmx vmxos1 Junos OS MX Junos Trio x86 Junos OS x86 x86 vmx Virtual PFE Virtual TRIO Intel DPDK Guest OS(Linux) PCI Pass-through SR-IOV LC- Kernel Hypervisor x86 Hardware Virtual RE RPD CHASSISD DCD SNMP Guest OS(Junos) Virtual PE Enterprise Enterprise CPE CPE Central Office, Hub Site Central Office, Hub Site Metro vmx Network L2 switch L2 switch L3 VPN/IPSec VPN L2VPN/VPLS/L2Circuit Metro Network Enterprise Enterprise vmx CPE CPE CO Gateway CO Gateway L2 switch L2 switch National/Regional Data Centers National/Regional Data Centers Provider vmx MPLS Network L3 PE L3 PE vmx CO Gateway L3 PE Provider MPLS Network CPE Enterprise L3 PE Enterprise CO Gateway CPE PE vmx MX PE MPLS VPN IPSec VPN KVM /VMware Intel Nehalem CPU (For low-bandwidth) CPU Intel Ivy-Bridge CPU (For high-bandwidth) 4 (Lite Mode) 8 (Low-bandwidth or High-bandwidth) 7GB (Lite Mode) 18GB (Low-bandwidth or High-bandwidth) Virt IO NIC(For low-bandwidth) [KVM ] NIC VMXNET3(For low-bandwidth) [VMware ] SR IOV NIC(For high-bandwidth) VT-d [KVM ] L3 VPN/IPSec VPN L2VPN/VPLS/L2Circuit KVM OS Ubuntu 14.04LTS Linux generic Virtualization QEMU-KVM Virtual CPE WAN VMware Hypervisor ESXi 5.5 Update 2 Enterprise Enterprise Enterprise Enterprise vmx CPE vmx CPE vmx CPE Overlay: Group VPN, MPLSoGRE, VXLAN Provider MPLS network Overlay: Group VPN, MPLSoGRE, VXLAN Provider MPLS network vmx CPE vmx CPE Enterprise Enterprise MPLS L2 MPLSoGREVXLANIPSec vmx MX WAN Management Client vsphere 5.5 or vcenter Server vmx Perpetual Subscription vmx Base ADVANCE PREMIUM - 256K IP - Layer2 bridge/switching - VPN - BaseIP/MPLS 2M (FIB). - Layer2 ; L2VPN, VPLS, VxLAN, EVPN, L2 Circuit - L3VPN 16 - Base/Advance IP/MPLS/L3VPN4M (FIB) - Layer3 VPN; IP/IP Multicast - IPSec, GroupVPN Queueing HQoS vrr vrr MX 45

46 ACX MEF CE2.0ACX 40GE2.56Tbps Junos OS MPLS T1/E1/STM1/STM4/1GE/10GE/40GE IEEE , SyncEthernetLDP, RSVP, L2VPN, L3VPN, CESoPSN, PoE+, SLARFC2544, Y.1564, TWAMP, IPSec, NATACX500 ACX4000/5048/5096/5448 Mobile Universal Access Residential Business ACX500 ACX1000 ACX2100 ACX500-O ACX1100 ACX2200 ACX4000 ACX500 ACX500-O ACX500-O-POE ACX1000 ACX1100 ACX2100 ACX2200 ACX Gbps 60 Gbps 60 Gbps 60 Gbps ACX500 : ACX500-O : cm ACX500-O-POE : Kg ACX500-DC : 3.9 ACX500-AC : 4.2 ACX500-O-DC : 5.0 ACX500-O-AC : 5.3 ACX500-O-POE-AC : 6.2 ACX500-O-POE-DC : 6.5 ACX500 : 65W ACX500-O : 55W ACX500-O-POE : 55W ACX1000 : 2.94 ACX1100 : 3.54 ACX1000 : 50W ACX1100-AC : 35W ACX1100-DC : 40W ACX2100-AC : 60W ACX2100-DC : 80W ACX2200-AC : 60W ACX2200-DC : 80W 150WMIC % 0 95% 0 95% 0 95% 46 ACX

47 ACX ACX5048 ACX5096 ACX5448 ACX6360 ACX5048 ACX5096 ACX5448 ACX6360 ACX5048 : 1.44 Tbps ACX5096 : 2.56 Tbps 1.76 Tbps 3.6 Tbps ACX5048 : ACX5096 : cm Kg ACX5048 : 9.9 ACX5096 : ACX5048 : 350WSFP+ ACX5096 : 550WSFP+ 450W 756.5W % 5 90% 5 90% ACX T1/E1 OC3(STM1) OC12(STM4) 1GbE (Copper) 1GbE (combo) 1GbE (SFP) 10GbE (SFP+) 40GbE (QSFP) 100GbE (QSFP28) 100/200GbE (CFP2-DCO Coherent DWDM) ACX500 4 PoE+ 3 2 ACX500-O 3 3 ACX500-O-POE 3 PoE+ 3 ACX ACX ACX * ACX * ACX ** 8** 2** 8PoE+ 2 14** 2* ACX * 6 ACX * 8 ACX * 4 4 ACX GbE(SFP) ACX 47

48 SDN Contrail Juniper Networks Contrail SDN ORCHESTRATOR オーケストレータから VM 作成リクエストを受けて変換 翻訳し ネットワークの割当を行う VM のネットワークプロビジョニングや 動作を維持するため ネットワークエレメントと通信 OPENCONTRAIL コントローラ Configuration Control Analytics リアルタイム解析エンジンが ネットワーク構成要素のデータを収集 蓄積 解析 物理ネットワークの構成変更を行うことなく仮想ネットワークを作成可能 VM VM VM VM vrouter Hypervisor が動作している物理サーバー vrouter: 仮想化されたルーティングエレメントがローカルのコントロールプレーン フォワーディングプレーンをサーバーホストに提供 物理ネットワーク WAN Internet ゲートウェイ BMS BMS 5100 など OVSDB/VXLAN が動作する物理スイッチ BMS G W: M X シリーズなどのルーターやスイッチが GW として機能 ソフトウェア GW を必要としないためスケールとパフォーマンスを改善 物理サーバーを仮想ネットワークに動的に参加させることが可能 Contrail ユースケース プロダクト OpenStack や VMWare などと連携する IaaS, SaaS インフラ OpenStack Network Plug-in Cloud Orchestrator プライベートクラウド パブリッククラウド サーバー仮想化環境とベアメタルサーバー間の接続 VM 間通信の可視化とセキュリティ Contrail Contrail Cloud NFV, Service Chaining SDN Controller Gateway ルーター Access Core 動的に仮想アプライアンスとネットワークを接続 物理アプライアンスも含めたチェイニング 物理ルーター (Gateway) と連携したアプリケーションやユーザー単位でのトラフィックステアリング Contrail 仮想アプライアンス vsrx MXシリーズ物理アプライアンス SRXシリーズ Public Cloud Gateway Private Cloud VPN WAN VPN Private Cloud クラウド間接続 MPLS/VPNと連携した複数クラウドサイトの接続 プライベートクラウドとパブリッククラウドの接続 キャンパスネットワークをプライベートクラウドと接続 SDN Controller Contrail Gateway MX シリーズ シリーズ 48 SDN Contrail

49 Contrail Networking クラウドネットワーキング Contrail のネットワーク機能のみをご提供します 仮想ネットワークサービス 各種オーケストレータと連携 OpenStack VMware ESXi / vcenter IBM CO 既に運用中のオーケストレータに仮想ネットワーク機能を追加する場合や オーケストレータはサードパーティ製をご利用いただくようなケースを想定しています オーケストレータとの接続は プロフェッショナルサービスをご利用いただけます Contrail Cloud クラウドオーケストレーション Contrail Networking に加えて オーケストレータ (OpenStack) サーバー管理 分散ストレージをご提供します オーケストレータとインテグレーション済みです セットアップや 他システムとのインテグレーションには プロフェッショナルサービスをご利用いただけます Contrail Contrail Security VLAN 従来方式による個別のポリシー ( 多数のポリシー作成と適用作業が負担に ) Contrail Security による一括適用 ( ポリシーの最適化と一括適用が可能に ) 開発 policy -1 開発 Web App DB Web App DB ステージング policy -2 ステージング policy - A Web App DB Web App DB 商用 policy -3 商用 Web App DB Web App DB Contrail Tungsten Fabric SDN SDN SDN Contrail 49

50 Sky Enterprise Juniper Sky Enterprise Sky EnterpriseSRX 直感的なウェブダッシュボードによる集中管理 自動プロビジョニング (ZTP) 設定モニタリングレポーティング 一元的なアプリケーションの可視化 およびレポーティング機能 ロールベースアクセス制御 (RBAC) によるユーザ管理 S/N 本社 クラウドサービス Sky Enterprise インターネット Primary Branch SRX 専用線 Backup 拠点 VLAN NATIPsec VPN IPSUTM GUI CLI SRXANR( ) 1 3 ANR GROUP A 2300, 3400, SRX300, SRX320 GROUP B 4300*, SRX340, SRX345 SKY-ENT-GROUPA-1YR SKY-ENT-GROUPB-1YR SKY-ENT-GROUPA-3YR SKY-ENT-GROUPB-3YR GROUP C 4600*, SRX1500 SRX4100*, SRX4200* SKY-ENT-GROUC-1YR SKY-ENT-GROUPC-3YR * 50 SKY Enterprise

51 Contrail Service Orchestration Contrail Service Orchestration CPECPE (CPE) SDNNFV 2 CPE VNF vcpe 86 NFX VNF ucpe Contrail Service Orchestration(CSO) CPE CPE VNF CPE Contrail Service Orchestrator VNF VNF クラウド CPE 集中型 vcpe Virtual VNF VNF クラウド CPE 分散型 ucpe Universal CPEEnd-to-End CPE End-to-End CPE サービスオーケストレーション Contrail Service Orchestration Contrail Service Orchestration (MANO) End-to-End MX CPE NFX VNF vsrx CSO CPE Virtual Network Functions vsrx and vmx and Third Party VNFs Universal CPE 装置 NFX150, 250 NEW VNF Infrastructure Orchestration (VIM and VNF managers) VNFs VNF クラウドネットワーク基盤 Series Switches and MX Series Routers Internet CSONFXSD-WAN ucpe SD-WANx86 NFX vsrx CSO CSO 高優先トラフィック MPLS vsrx Internet 低優先トラフィック vsrx 低優先アプリケーション (IPSec でトンネリング ) Contrail Service Orchestration 51

52 AppFormix AppFormix IT SLA SDISoftware-Defined Infrastructure UI AppFormix Ansible playbook GUI VM VM-VN インテント ベースによる運用サイクルの自動化 AppFormix SNMP SLA SDI API Appformix Closed Loop Machine Learning ( 機械学習 ) 2 通知 マルチレイヤ マルチベンダ統合可視化ツール Notification Service Call 1 モニタリング Instance 情報 SNMP Host 情報 JTI/gRPC/GPB MIB 情報 パブリック クラウド オーケストレータ SDNコントローラ等 OpenStack Kubernetes VMWare Contrail 3 3 オーケストレーション 最適化 vrouter オーケストレーション 最適化 VMs (ESXi) vrouter VMs (KVM) Containers Telemetry 情報 AppFormix Agent AgentAppFormix SLA SLA Raw CPU AppFormix Agent 分散型ストリーミング分析 スケーラブルな分散処理 Compute & Storage インフラ 分散データ分析 データストリーム シグナル 1 秒単位リアルタイム メッセージバス リソースオーケストレーションキャパシティプラニングレポートアラーム NoSQL データの最適化 Compute Node リソースを最小化 非常に軽量なAgentによるリアルタイム Metric 監視 分散処理によりスケーラビティが大幅に向上 必要なデータはまとめて最適化され DBへ格納 必要なMetricはNagios 形式で追加可能 Agentは1インスタンスにつき約 0.1% 程度のCPU 使用率 リアルタイム! 52 AppFormix

53 Junos Automation Self-Driving Network) Self-Driving Network5 JuniperSelf- Driving Network Junos Automation Stack NETCONF/YANG Automation workflows/ frameworks JET API OpenConfig. ZTP 手動運用ネットワーク 現在 Junos Telemetry Interface Telemetry collectors 自動化ネットワーク 1 ヘルスモニタ帯域設計リソースモニタセキュリティ より細かなモニタリング 2 より細かいレベルの収集 情報の可視化 イベント駆動 (Event-Driven Infrastructure) サービスデプロイメント自動化セルフヒーリング 情報分析 3 取得した情報からの運用手順 方針の決定 全サイクルの自動化 プロセスの自動化 4 各種イベントへの自動対応 SELF-DRIVING NETWORKSTM 5 オペレータによるインテントベースでの最小限のオペレーション Automation Stack Off-Box OPENCONFIG YANG Python Scripts Ansible SALT Ruby Scripts Puppet Chef JSNAPy CLIRA Junos Automation Stack Junos AnsibleIT JETYANG Automation SDN Simplicity On-Box grpc jvision sensor THRIFT JET API PyEZ Framework RubyEZ Library Python / SLAX NETCONF Junoscript XML-RPC REST CLI SNMP Flexibility Chassis Data Plane (PFE) J-EDI J-EDIJuniper Event-Driven Infrastructure) Juniper syslog, J-EDINMS Agent Policy System (PCRF, AAA) Services (SRX, SDG, SA ) Routers (MX, PTX, T ) Switches (,, Q-Fabric ) Gateways (MX, ) Physical Network Orchestration System NMS/EMS Transport Controller SSDN Controller EDI Controller 1 App 2 App 1 App 2 App N App 1 App 2 App Master App App App N N N Platform Platform Platform Platform Agent Agent Agent Agent Event Bus EDI Proxy(n) Agent Platform pagent pagent pagent Virtualized vrouters Agent Servers vswitches Non-Virtualized (3rd Party) Agent Servers vservices (Juniper or 3rd Party) Agent Storage Compute & Storage Virtual Network Junos Automation 53

54 ROADM & DWDM OpenProgrammable DWDM JuniperTCX1000 DWDM NETCONF/YANG pronx Optical Director Service Activation & Topology Mux pronx Optical Director Optical Control Loop FCAPS NETCONF Telemetry Web User Interface ROADM ILA ILA ROADM Mux Programmable Photonic レイヤー Third-Party Apps TCX1000 DWDM RDM20 20CD-FROADM ILA AMP Fix-Grid968color-less pronx Optical Director optical & NMS 96-Channel Mux-Demux 2-Degree, 8-Channel Mux-Demux TCX1000 RDM20 DWDM フィルター TCX1000 ILA Telemetry NMS GUI Juniper MX//PTX インタグレーションモデル ディスアグリゲーション CFP2-DCO DWDM BTI 200Gbps HW 形状 アーキテクチャー CFP2-DCO CFP2トランシーバ CFP2スロットを持つラインカードに搭載 IPoverDWDM 専用ラインカード DWDM ラインカード IPoverDWDM BTI シリーズ トランスポンダー専用モジュール 従来型 L1 専用装置 DWDM 波長 100Gbps 最大 200Gbps 最大 200Gbps プラットフォーム MX, PTX MX, PTX, BTI 54

55 Analytics pronx Optical Director Optical 制御 NetworkOptimization SDN Orchestrator NMS Optical Control Loop Third-Party Apps Optical コントローラー &NMS トランスポンダー DWDM ラインシステム トランスポンダー Mux ROADM ILA ILA ROADM Mux TCX1000 Disaggregated DWDM CAP OPE NMS NETCONF/YANGproNX Optical Director3rd Party Optical DCI: DataCenter Interconnect JuniperDWDM DCI Pay-as-You-Grow データセンター HWOpen Disaggregate DC 内ネットワーク DWDM データセンター データセンター 100G/200G/400G 対応ラインシステム Openライン対応 Disaggregationアーキテクチャー プログラマブルHWとOpen API コンパクトプラットフォーム 省電力 データセンター データセンター 55