DESIGN GUIDE LAN LAN Copyright 2010, Juniper Networks, Inc. 1
- LAN..................................................................................................... 4.......................................................................................... 4..................................................................................................... 5 LAN............................................................................ 5............................................................................ 6.................................................................................. 7........................................................................................... 7........................................................................... 8.......................................................................................... 8......................................................................................... 8......................................................................... 9............................................................................... 9 WLAN.................................................................................. 9 PoE Power over Ethernet............................................................................... 9 LAN VLAN STP................................................. 10 2 3..................................................... 10......................................................................... 11............................................................................................12...........................................................................12.............................................................................. 13..................................... 13....................................................................................... 15..................................................................................... 16................................................................ 16 /...................................................................................... 16........................................................................................ 16.......................................................................17...........................................................17................................................................................................. 19............................................................................... 19................................................................................. 19............................................................. 19..................................................................................... 20..........................................................................................21...............................................................21.............................................................................. 22................................................................................... 22..................................................................................... 22 vs................................................................ 23........................................................................... 23........................................................................... 23..................................................................................... 24.......................................................... 25.......................................................................... 25 2 Copyright 2010, Juniper Networks, Inc.
- LAN................................................................................................. 26................................................................................ 27 IEEE 802.1X............................................................................................ 27....................................................................................... 28............................................................................................ 28................................................................................ 28........................................................................... 29..................................................................................... 30 Network and Security Manager (NSM)............................ 30 NSM.......................................................................................... 33 J-Web...................................... 34 J-Web........................................................................................... 34.................................................................................................... 35............................................................................... 35 1 LAN....................................................................... 7 2......................................................................................... 7 3 LAN.............................................................. 8 4........................................................... 9 5 2/3............................................................... 10 6........................................................................... 13 7CAPEX OPEX.............................................. 14 8 LAN..................................................... 16 9 /.......................................................17 9 LAN...................................................................... 19 11.................................................................................... 20 12...............................................................21 13 vs........................................................ 23 14 LAG.................................................................... 23 15 LAG................................................................................. 24 16.......................................................................... 25 17..................................................................... 26 18............................................. 27 19................................................... 28 20 Dynamic ARP Inspection DAI......................................................................... 29 21 NSM.......................................................... 30 22 NSM................................................................................... 31 23 NSM.......................................................................... 32 24 NSM /................................................................................ 33 25 J-Web............................................................ 34 Copyright 2010, Juniper Networks, Inc. 3
- LAN LAN - IT LAN 1 LAN/WAN WAN LAN LAN LAN LAN3 LAN LAN LAN PDA IP/ LAN LAN - QoS - DoS DDoS - PoE VoIP VOD Web LAN / VoIP QoS 4 Copyright 2010, Juniper Networks, Inc.
- LAN LAN LAN LAN LAN PSTN 99.999% LAN LANVPNIDS/ IPS LAN LAN LAN LAN LAN Forrester Research 2006 46% IP 39% VoIP LAN LAN/WAN VoIP QoS Oracle SAP PeopleSoft Web LAN 10 Copyright 2010, Juniper Networks, Inc. 5
- LAN LAN LAN Information Week 2007 FBI CSI 200672% 1Forrester Research 200657% Wi-Fi Forrester Research 2007 51% Gartner 2007 20% Nemertes Research 200691% 50% 12 12 IT IP AdTM VPN MPLS Multiprotocol Label Switching IPv6 CLNS Connectionless Network Service 6 Copyright 2010, Juniper Networks, Inc.
- LAN EX4200 IC EX8200 M EX4200 EX4200 EX2200/ EX3200 M / WAN EX8200 EX8200 OAC OAC SA ISG SBR 1 LAN LAN LAN 3 10/100/1000BASE-T - 10 GbE WAN ( SPS) GbE and 10 GbE LAG 10 GbE 10 GbE LAG 10/100/1000BASE-T 2 WAN 3 1 Copyright 2010, Juniper Networks, Inc. 7
- LAN 3 1 : 3LAN 2 LAN / LAN LAN IP CCTVLAN WLAN LAN L2 L2 / WAN 3 LAN PoE Power over Ethernet QoS 8 Copyright 2010, Juniper Networks, Inc.
- LAN IP CCTV LAN IP 1 LAN 10 WLAN IP LAN 2 802.1q 2VLAN VLAN VLAN OAC OAC VLANs 4 PoE Power over Ethernet IP IPPoE PoE WLAN PoE PoE IP CCTVWLAN PoE PoE 15.4 3 PoE Copyright 2010, Juniper Networks, Inc. 9
- LAN IEEE802.11n WLAN 15.4 PoE LAN VLAN STP LAN VLAN LAN VLAN VLAN 2 IEEE 802.1Q VLAN VLAN VLAN VLAN VLANLAN VoIP QoS VLAN STP VLAN MAC CPU IEEE 802.1D STP LAN STP LAN 2 1 / VLAN STP STP STP 30 50 STP RSTP802.1s STP MSTP STP 2 3 2 3 WAN 3 3 2 L2 2 2 3 5 2/3 10 Copyright 2010, Juniper Networks, Inc.
- LAN 2 2 2 STP OSPF 2 3 LAN 3 3 VLAN 32 3 2 STP STP BPDU STP OSPF 2 3 2 3 3 Junos OS STP OSPF ECMP EX4200 LAN STPRTG Lake Partners1 2007 29% CAPEX OPEX 1 TCO QoS VoIP LAN/WAN LAN WAN VoIPQoS IP PoE 1. QoS QoSLAN LAN QoSLAN Web IP QoS Copyright 2010, Juniper Networks, Inc. 11
- LAN IP LAN VLAN VLAN QoS QoSMAC IP LAN IP IP VLAN LLDP-MED IP VLAN DSCP LAN/WAN QoS QoS QoS CoS Class of Service Junos OS Junos OS QoSEX 1 8 Junos OS LAN/WANQoS ASIC QoS CPU : VoIP QoS VoIP on the WAN: It s a Matter of Priorities 2005 8 351113-001 2. VoIPLANLAN DoS VoIP VoIP VoIP IDP 802.1X 802.1X VoIP MACEX ALG Application Level Gateway VoIP DDoS QoS LAN 12 Copyright 2010, Juniper Networks, Inc.
- LAN PoE EX4200 pay-as-you-grow 1. EX4200 24100BASE-FX/1000BASE-X 2410/100/1000BASE-T 4810/100/1000BASE-T 10/100/1000BASE-T PoE 8PoE24 48PoE PoE 15.4 0 3 IP EX4200 LLDP-MED PoE EX42004 210 EX4200 EX4200 EX4200 12-15RU 48-288 +4 EX4200 1 48 + 10 2 2. Pay-As-You-Grow EX4200 2 96 + 10 4 6 EX4200 4 192 + 10 8 EX4200 pay-as-you-grow 1 EX4200 1RU 910 128Gbps 10 240100BASE-FX/1000BASE-X 48010/100/1000BASE-T 2 20 10 40 2 1 Pay-As-You-Grow EX3200 EX4200 Copyright 2010, Juniper Networks, Inc. 13
- LAN 3. EX4200 AC/DC Junos OS GRESNSF 10 5 2 4. 1 10 1 1 1 50% EX4200 EX4200 EX4200 1 EX4200 EX 7CAPEX OPEX 14 Copyright 2010, Juniper Networks, Inc.
- LAN 5. CAPEX OPEX EX4200 48 410 6 1 3 1 EX4200 EX4200 3 10 PoE1 Junos OS NOC IT IT : EX4200 Aruba Networks Trapeze Networks Meru Networks WLAN 802.1X Odyssey OAC OAC Odyssey SBR Steel-Belted Radius 802.1X RADIUS WLAN OAC FIPS 140-2 1 OAC 802.1X ID 802.1X Copyright 2010, Juniper Networks, Inc. 15
- LAN LAN L2 L2 / WAN 8 LAN 10 3 / GRE Generic Routing Encapsulation NOC STP 3 STP / 19 16 Copyright 2010, Juniper Networks, Inc.
- LAN LAG LAG LAG EX4200 EX4200 /WAN 9 / / STP 3 STP 2 / / 2 LAN EX4200 EX8200 1. EX4200 EX8200 Junos OS GRES BFD Bidirectional Forwarding Detection EX Junos OS ISSU Copyright 2010, Juniper Networks, Inc. 17
- LAN 2. EX8200 10EX8200 3.2Tbps648128 16 10 EX4200-24F 24 SFP+2 10 128Gbps 10 10 EX4200 1 10 EX4200 10 3. CAPEX OPEX 3 3 EX4200 LAN Junos OS 1000BASE-X EX4200 IT : EX4200 18 Copyright 2010, Juniper Networks, Inc.
- LAN WAN L2 L2 / WAN 9 LAN 10 EX8200 1. EX8200 Junos OS QoS GRES Copyright 2010, Juniper Networks, Inc. 19
- LAN 2. EX8200 3.2Tbps64812816 10 80Gbps EX8200 Junos OS 3. CAPEX OPEX 3 3 EX8200 Junos OS EX8200 IT : EX LAN 2 N N= 11 20 Copyright 2010, Juniper Networks, Inc.
- LAN 3 3 N1 N-1 1000BASE-X OSPF ECMP 10 LAN 10 IT EX2200/ EX3200 EX4200 EX4200 EX8200 EX8200 / 12 Copyright 2010, Juniper Networks, Inc. 21
- LAN EX8200 2 EX8200 10 10 10 OS 1 PSTN EX MX MTTR /2 22 Copyright 2010, Juniper Networks, Inc.
- LAN vs L2 13 vs 1. 3 3 2. 3 ECMP EX4200101 WAN EX4200 Junos OS QoS GRES LAG 14 LAG 1 LAG LAG Copyright 2010, Juniper Networks, Inc. 23
- LAN 1 EX4200 EX4200 LAG LAG 128 Gb/s VCP EX4200 EX4200 15 LAG EX4200 1 EX4200 STP 1 EX4200 RTGEX STP RTG RSTP RSTP 24 Copyright 2010, Juniper Networks, Inc.
- LAN L2 L2 - - 3 / WAN 16 3 WAN Junos OS NSF ISSU BFD IP Junos OS Junos OS Copyright 2010, Juniper Networks, Inc. 25
- LAN LAN IT LAN/WLANLAN LAN SBR IC NetScreen IDP SA ODYSSEY 17 LAN 802.1X LAN QoS QoS 26 Copyright 2010, Juniper Networks, Inc.
- LAN LAN UAC IC UAC LAN IDQoS QoS QoS ID UACIC UAC 802.1X / WLAN LAN UAC OS LAN UAC SA / 18 IEEE 802.1X 802.1X 802.1X IP Copyright 2010, Juniper Networks, Inc. 27
- LAN 7 24 PDA IP/ VPN LAN ISG 19 VLAN ACL ACL ACL RADIUS 28 Copyright 2010, Juniper Networks, Inc.
- LAN DoSMAC DHCP Dynamic ARP Inspection IP 1. MAC MAC 2 MAC IP 2 MAC MAC MAC MAC MAC 2. DHCP 2DHCP DHCPDHCP LAN IP DHCP IP/MAC IP DHCP MAC IPIP DHCP DHCP DHCP DoS DHCP DHCP DHCP DoS DHCP DHCP DHCP 3. Dynamic ARP Inspection DAI 20 Dynamic ARP Inspection DAI ARP Address Resolution ProtocolARPLAN IP IP MAC DoS Copyright 2010, Juniper Networks, Inc. 29
- LAN Dynamic ARP Inspection DAIARP DHCP DoS 4. IP 2 IPIP IPDHCP IP DCHP IP IP IP IP Network and Security Manager (NSM) Network and Security Manager/IP Sec VPN IDP / / / / NSM 21 NSM 30 Copyright 2010, Juniper Networks, Inc.
- LAN NSM 22 NSM NSM CLI NSM & Copyright 2010, Juniper Networks, Inc. 31
- LAN 23 NSM NSM 32 Copyright 2010, Juniper Networks, Inc.
- LAN 24 NSM / NSM NSM GUI / Copyright 2010, Juniper Networks, Inc. 33
- LAN J-Web CLI J-Web Junos OS 25 J-Web J-Web Junos OS J-Web GUI J-WebIT J-Web Junos OS GUI J-WebMicromuse Netcool OMNIbus Dorado RedCell Manager IBM Tivoli HP Openview OSS J-Web [quick configuration] [configuration and QoS] 34 Copyright 2010, Juniper Networks, Inc.
- LAN LAN IT LAN pay-as-you-grow QoS Junos OS OS Junos OS IT URL http://www.juniper.net/jp/ Juniper Networks, Inc. Juniper Networks (Hong Kong) Ltd. Juniper Networks Ireland 163-1035 3-7-1 N 35 03-5321-2600 FAX 03-5321-2700 541-0041 1-1-27 1194 North Mathilda Ave Sunnyvale, CA 94089 USA 888-JUNIPER (888-586-4737) 408-745-2000 FAX 408-745-2100 URL http://www.juniper.net 26/F Cityplaza One 1111 King s Road, Taikoo Shing, Hong Kong 852-2332-3636 FAX 852-2574-7803 Airside Business Park Swords, County Dublin Ireland 35-31-8903-600 FAX 35-31-8903-601 URL http://www.juniper.net/jp/ Copyright 2010, Juniper Networks, Inc. All rights reserved. Juniper Networks Junos NetScreen ScreenOS Juniper Networks Juniper Networks Inc. 8020001-002 JP Aug 2010 Copyright 2010, Juniper Networks, Inc. 35