technology breakout: campus...topologies access ring access ring no rings flexible no rewiring to...
TRANSCRIPT
Disclaimer
This statement of product direction sets forth Juniper
Networks’ current intention and is subject to change at
any time without notice. No purchases are contingent
upon Juniper Networks delivering any feature or
functionality depicted on this statement.
Agenda
• Un1te – Junipers Framework
• Trends in the market: new standards on it‘s way; 2,5 and 5 Gbps discussion
• Fusion – a new architectural approach
• New EX switching series
• ND3.0
Open Convergence Framework
wireless security ucc management
Ready to deploy best-of-breed enterprise solutions
Trends in campus LAN
2,5- und 5-Gbit/s-Ethernet
• IEEE 802.3bz
• Purpose: aggregation of IEEE 802.11ac WiFi standard AP
• Probably named 2.5GBASE-T and 5GBASE-T (abbr: 2.5GbE & 5GbE)
• NBASE-T or MGBASE-T, transport over copper
• will work with Category 5e and Category 6 cables up to 100 meters span
Cloud Speed Adoption
2018 2014 2015 2016 2017
0
20
40
60
80
1 GE
10GE
40GE
25GE
50GE
100GEPe
rcen
t o
f serv
er
sh
ipm
en
ts
Source: Dell’Oro 2015
Trends in campus LAN
Power over Ethernet PoE++
• IEEE 802.3bt
• Purpose: augment the capabilities of existing Power Sourcing Equipment (PSE) and Powered Device (PD) specifications with Type 3 (≤ 60W at the PSE) and Type 4 (≤ 100W at the PSE)
• Probably named DTE Power via MDI over 4-Pair
Multi-Gigabit Related Timelines 2015 -
Cisco/Aquantia ship
NBASE-T switch
IEEE merges NBASE-T/MBASE-T
2016 Vendors
announce pre-standard
products
2016 Aruba Wave 2 AP
Early 2017 - 2.5G based Wave 2 APs
2017 IEEE 802.3bz/802.3bt
2017 Juniper Switches FRS
(standards based)
Non-standard based products [draft] standard based products
Non-standards based Standards based (JNPR)
All speeds - 100M/1G/2.5G/5G/10G Some vendors only Yes
Up to 99.9W PoE (IEEE 802.3bt)
Some vendors only Yes
Interop testing with 2.5G APs No Yes
What is Junos Fusion Enterprise? Junos Fusion for Enterprise
Simple • Single management domain
• Plug and play deployment of access switches (ZTP)
• Single configuration with resilient control & data plane
Reliable • Carrier-grade control and data plane resiliency
• High availability and ISSU
• Consistent tooling across data center and campus
Flexible • Built on open protocols (802.1BR)
• Flexible attachment models and scalability
• Mix and match with traditional wiring closet switches
Junos Fusion Enterprise
Campus Building
Aggregation Device (AD):
EX9200
Satellite Devices (SD):
EX4300 (1H 2016), EX3400 (2H 2016),
EX2300 (2H 2016)
On-premise DC
* Subject to verification
Internal control protocols between AD and SD
Satellites management for all traffic related aspects (config / statistics / ports state)
LAG synchronization between Aggregation devices (MC-LAG)
LLDP
802.1BR+
Configuration synchronization between Aggregation devices Netconf
1
2
3
4
Satellites management for non-traffic related aspects (chassis, environment, upgrade ..) json-rpc
5
Devices discovery and auto provisioning
1 2 3
4
5
1 2 3
ICCP
Guest VPN
Sales VPN
Engineering VPN
Finance VPN
Unifying Enterprise Networks Simple Smart Flexible
Boston HQ
Junos Fusion Enterprise
Chicago
Junos Fusion Enterprise
San Francisco
Junos Fusion Enterprise
Cleveland
Junos Fusion Data Center
L3 / EVPN
Junos Fusion Enterprise elegantly unifies the enterprise
Extends EVPN capabilities to the access
Consistent segmentation across all sites
Uniform VLANs, configuration and policies
Junos Fusion Enterprise - Migration
Virtual Chassis
Satellite Cluster
Satellite Cluster
Satellite Cluster
• Hybrid mode supported
– MC-LAG/Access Switches and Fusion/SD
• MC-LAG with EX9200 and EX4300 can
migrate to Fusion
• Script to deploy Fusion ready MC-LAG
• Automate configuration conversion for access
layer switches
– Migrate to Fusion one closet at a time
Junos Fusion Enterprise – Competitive
Cisco
Instant Access
Dell Brocade
SPX
Juniper
Fusion Enterprise
Junos Fusion Benefits
Extended Ports 2,000 2,000 768 6,000 Fewer management points
Design simplicity
Lower cost
Max. VLANs 32 - 16 4,000 No compromise deployment
Topologies Access ring Access
ring
No rings Flexible No rewiring to migrate
Independent ADs No (VSS) No No
(Stacking)
Yes (Independent
Control Plane) Resilient design
SDs in cluster 5 8 N/A 10 Easy migration from stack
Flexible design
Uplinks 1G/10G 10G 10G/40G 1G/10G/40G Design Flexibility
Phased Software
Upgrade/Downgra
de
Possible Possible Entire
SPX
Supported Independent components enable
phased upgrades and easy migration
- EX9200 Series as AD
- EX4300 as SD
- 128 SDs in a Fusion fabric
- PoE/PoE+ on SD
- 10-member Cluster for SD
- LLDP-MED on SD
- Layer 2 forwarding
- IPv4 and IPv6 unicast
forwarding
- ACL features
- Network Director
- EX2300 and EX3400 as SD
- Access Security
- IPv4/v6 multicast forwarding
features
- QoS: L2 and L3 MF/BA
Classifiers
- Network Monitoring features
- Cable Diagnostics
- MACsec support on SD
downlinks
Junos Fusion Enterprise Roadmap
1H 2016 2H 2016
Core/Distribution Evolution EX9200
Scale
(D
en
sit
y a
nd
Ela
sti
cit
y)
2014 2015 2016 2017+ 2013
Juniper Innovations
FRS
Cassis
XF Fabric
XF2 Fabric
EVPN
VXLAN
Eagle PFE
Junos Fusion Enterprise
10G MACsec
Virtualization
Cassis II
1G MACsec
NG Fabric
NG PFE
100G MACsec
IPSec
240G/slot
240G LC
480G/slot
260G/slot LC
10G/40G LC
Modular LC
480G/slot LC
10/40/100GbE
NG RE
1.2T/slot
400G Native
Shipping
Committed
Investigation
EX9200 Linecards Modular Linecard Multi-rate Linecard 40x10G MACsec
• Flexible configuration
• Lower 10GbE entry cost
• Up to 130Gbps throughput
• Interface cards
– 20 1GbE SFP
– 40 1GBASE-T
– 10 10GbE SFP+
• 480Gbps throughput
• Fixed 12 QSFP ports
• 48 10GE SFP+ w/ BO
• 12 40GE QSFP+
• 4 100GE QSFP28 optics
• 400Gbps throughput
• 40 x 10GE ports
• MACSec ready
• MACsec on all 40 ports
• AES 256 support
EA @ 240G
EA @ 240G
Fixed
MIC0
Fixed
MIC1
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
EA @ 240G
EA @ 240G
Fixed
MIC0
with
MACSec
Fixed
MIC1
with
MACSec
20
x S
FP
+
20
x S
FP
+
Access Evolution
Scale
(D
en
sit
y a
nd
Ela
sti
cit
y)
2014 2015 2016 2017+ 2013
Juniper Innovations
FRS
320G VC
1GbE/10GbE
MACsec
IPv6 access
security
Fusion Enterprise
2.5G/5G access
Mixed VC scale
Access control
Integration
Virtualization
EX4300
Virtual Chassis
EX4300 Fiber
EX4600
1/10GbE entry level
1/10/40GbE mid level
Mixed Virtual
Chassis
Fusion Enterprise
802.3bz
802.3bt
Compact
Fusion Enterprise
Aggregation
Shipping
Committed
Investigation
EX2300 Access Switch
Compact & High Performance
1GbE density 10GbE uplinks in 1RU
Standard Compliance
IEEE 802.3at (POE +)
Management Simplification
Junos Virtual Chassis* (4 devices - 10G support)
Operational Simplicity and Automated Config
Juniper Fusion Enterprise (IEEE 802.1BR support)
EX2300 and EX2300-C
*license needed planed for Juni 2016 timeframe
EX2300-C Overview
1Gbps Access Switch
12 x 10/100/1000Base-T ports
2 x 1GbE or 10GbE SFP/SFP+ ports
POE/POE + budget supported
124W 802.3at or 802.3af
Fixed Configuration
EX2300 SKUs* 10/100/1000Base-T
ports 1/10 GbE SFP/SFP+
ports Cooling POE/POE+
EX2300-C-12T 12 2 Fanless 0
EX2300-C-12P 12 2 Fanless 12
***PoE (15.4W) is supported on up to any 8 ports simultaneously ***PoE+ (30W) is supported on up to any 4 ports simultaneously
12 x 10/100/1000 Base-T
2 x 1GbE or 10GbE SFP/SFP+
USB/Console/Mgmt
EX2300 Overview
1Gbps Access Switch
24, 48x10/100/1000Base-T ports
4 x 1GbE or 10GbE fixed SFP/SFP+ ports
POE/POE + budget supported
370W on 24 port SKU
740W on 48 port SKU
Fixed configuration
4 x 1GbE or
4 x 10 GbE SFP/SFP+ 24, 48x10/100/1000Base-T
EX2300 SKUs* 10/100/1000 Base-T ports 10GbE SFP+ ports POE/POE+ ports POE/POE+ Power Budget Cooling AC/DC
EX2300-24T 24 4 0 0 1x Fixed, AFO Fixed AC
EX2300-24P 24 4 ***24 370W 2x Fixed, AFO Fixed AC
*EX2300-24T-DC 24 4 0 0 1x Fixed, AFO Fixed DC
*EX2300-24P-TAA 24 4 ***24 370W 2x Fixed, AFO Fixed AC
EX2300-48T 48 4 0 0 1x Fixed, AFO Fixed AC
EX2300-48P 48 4 ***48 740W 2x Fixed, AFO Fixed AC
*EX2300-48T-DC 48 4 0 0 1x Fixed, AFO Fixed DC
*EX2300-48P-TAA 48 4 ***48 740W 2x Fixed, AFO Fixed AC
*DC and TAA SKU are offered 2H 2016 ***Full PoE (15.4W) is supported on all ports with the fixed PSU (All SKUs) ***PoE+ (30W) is supported on up to 12 ports on -24 port SKU, up to 24 ports on -48 port SKU
Console, Mgmt, USB and Fixed power/Fan
EX2300 Platform Detail
EX2300-C-12T EX2300-C-12P EX2300-24T EX2300-24P EX2300-48T EX2300-48P
CPU ARMv7 Cortex A9 CPU 1.25GHz
DRAM/Flash 2GB/2GB
Performance 64Gbps/47.6Mpps 128Gbps/95.2Mpps
Management
RJ45 10/100/1G Mgmt port on front
One RJ45 Console and RS232 to
Mini USB Console on front panel
RJ45 type 10/100/1G Management port on rear
RJ45 type Console on rear and RS232 to Mini USB Console on front
USB One type-A USB HOST port, support
USB 2.0 (480Mbps) on front panel
One type-A USB HOST port, support USB 2.0 (480Mbps) on rear
panel
Ethernet Port 12 x 10/100/1G RJ45 port 24 x 10/100/1G RJ45 port 48 x 10/100/1G RJ45 port
Virtual Chassis
Port 2 x 10G SFP+ Fixed Fiber port 4 x 10G SFP+ Fixed Fiber port
PSU AC 40W AC 170W AC
65W/DC100W AC 450W AC 90W AC 850W
Cooling Fan less Single FAN Dual FAN Single FAN Dual FAN
System Air
Flow Air Flow Out (AFO – front to back air flow) only
A few software differences
• No IEEE802.1BR support
• No ERSPAN
• IEEE 802.1AG (LFM) Ethernet Link Fault
Management
• IEEE 802.3AH (CFM) Connectivity Fault
Management
• G.8032 (Ethernet Ring Protection Switching)
• IEEE802.1BR support *
• ERSPAN
• No LFM
• No CFM
• No ERPS
• IEEE 802.1X support differences
– No RFC 3576 support
– No Central Web Authentication Support
– No Flexible Auth order of MAC Auth
– No EAP-PAP protocol support for MAB
EX2200 EX2300
* Enterprise Fusion supported FRS +, operates in satellite mode as part of JUNOS Fusion for Enterprise
EX2300 – Transceiver Support Matrix
1GbE 10GbE
EX-SFP-1GE-T
EX-SFP-1GE-SX
EX-SFP-1GE-SX-ET
EX-SFP-1GE-LX
EX-SFP-1GE-LH
EX-SFP-GE10KT13R14
EX-SFP-GE10KT13R15
EX-SFP-GE10KT14R13
EX-SFP-GE10KT15R13
EX-SFP-1GE-LX40K
EX-SFP-GE40KT13R15
EX-SFP-GE40KT15R13
EX-SFP-GE80KCW1470
EX-SFP-GE80KCW1490
EX-SFP-GE80KCW1510
EX-SFP-GE80KCW1530
EX-SFP-GE80KCW1550
EX-SFP-GE80KCW1570
EX-SFP-GE80KCW1590
EX-SFP-GE80KCW1610
EX-SFP-10GE-USR
EX-SFP-10GE-DAC-1M
EX-SFP-10GE-SR
EX-SFP-10GE-LR
EX-SFP-10GE-ER*
EX-SFP-10GE-ZR*
EX-SFP-10GE-DAC-3M
EX-SFP-10GE-DAC-5M
Supported at FRS
*These ER/ZR optics are supported on EX2300 only, not supported on the –C platform, due to thermal requirements
MACsec
Supported on 1G and 10G interfaces
Juniper EX3400 Access Switch
Compact, High Performance, & Built-in Redundancy
1GbE density, 10GbE and 40GbE uplinks in 1RU, Dual
Redundant Power Supplies and Fans
Standard Compliance
Full POE (15.4W) support with a single PSU
Full POE+ (30W) support with dual PSU (1440 W)
Management Simplification
Junos Virtual Chassis (10 Devices - 40G support)
Operational Simplicity and Automated Configuration
Juniper Fusion Enterprise (802.1BR support)
EX3400
planed for Juni 2016 timeframe
EX3400 Overview
Mid Level 1Gbps Access Switch
24, 48x10/100/1000Base-T ports
4 x 10GbE or 1GbE fixed SFP/SFP+ ports
2 x 40GbE fixed QSFP+ ports *
POE/POE + budget supported
370W or 720W on 24 port SKU
740W or 1440W on 48 port SKU
4 dual-mode
1GbE/10GbE SFP/SFP+ 24, 48x10/100/1000Base-T
EX3400 SKUs* 10/100/1000
Base-T ports 10GbE SFP+
ports 40GbE QSFP+
ports POE/POE+
ports POE/POE+ Power
Budget Cooling AC/DC
EX3400-24T 24 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-24P 24 4 2 24 **370W or 720W 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-24T-DC 24 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO DC
EX3400-48T 48 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-48P 48 4 2 48 **740W or 1440W 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-48T-AFI 48 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFI AC
*2 x 40GbE QSFP+ ports used as uplink or VC, breakout of 10-GbE not supported (Same as EX4300)
POE is supported on all ports with a single power supply
POE+ is supported on all ports with dual power supplies
Field Replaceable
Fans Dual Power
supply slots
Console/
Mgmt/USB
2 x 40GbE
QSFP+
EX3400 Platform Detail
EX3400-24T EX3400-24P EX3400-48T EX3400-48P
CPU Dual-core ARM Cortex A9 1GHz
DRAM/FLASH 2GB/2GB
Performance 288Gbps/214.2Mpps 336 Gbps / 250Mpps
Management miniUSB at front panel, RJ45 type RS232 at rear panel, Ethernet management port at rear panel
USB One type-A USB port at rear panel, support USB 2.0 (480Mbps)
Ethernet Port 24 x 10/100/1G RJ45 Copper port 48 x 10/100/1G RJ45 Copper port
Virtual Chassis Port 4 x 10G SFP+ fiber port AND 2 x 40G QSFP+ fiber port
PSU 2 x Hot-swappable (Pluggable) PSU, support 1+1 redundancy & load sharing
150W AC/DC 600W AC 150W AC 920W AC
Cooling 2 x Hot-swappable (Pluggable) FAN Tray 1+1 FAN redundancy
System Air Flow AFO only AFO only AFO & AFI AFO only
A few software differences
• No configurable TCAM support
• No IEEE802.1BR support
• No ERSPAN
• IEEE 802.1AG (LFM) Ethernet Link Fault
Management
• IEEE 802.3AH (CFM) Connectivity Fault
Management
• G.8032 (ERPS) Ethernet Ring Protection
Switching
• BGP v4
• Configurable Unified Forwarding Table
(UFT) FRS +
• IEEE802.1BR support*
• ERSPAN
• No LFM
• No CFM
• No ERPS
• No BGP
• IEEE 802.1X support differences
– No RFC 3576 support
– No Central Web Authentication Support
– No Flexible Auth order of MAC Auth
– No EAP-PAP protocol support for MAB
EX3300 EX3400
* Enterprise Fusion supported FRS +, operates in satellite mode as part of JUNOS Fusion for Enterprise
Hardware Comparison
• Increased uplinks to 10G
• Increased virtual chassis bandwidth
• Added 802.1BR support
From EX2200 to EX2300
• Increased uplinks to 40G
• Increased virtual chassis bandwidth
• Added 802.1BR support
• Added FRUable redundant Fans
• Added FRUable redundant PSU SKUs
• Added MACsec
From EX3300 to EX3400
Feature EX2200 EX2300
Uplinks/VC 4 x 1G 4 x 10G
PoE Budget 405 W 740 W
Fusion SD NO YES
VC license at 10G NO YES
MACsec NO NO
Feature EX3300 EX3400
40G ports 0 2
Hot-swappable PSU NO YES
PoE Budget 740 W 1440 W
Fusion SD NO YES
VC license at 40G NO NO
MACsec license NO YES
!!!
Half Duplex support at FRS • Supported on EX2300
– 24 port SKUs will support up to 16 ports
– 48 port SKUs will support up to 32 ports
– 12 port SKUs will support up to 12 ports
– Ports will not be labeled on the chassis
– Ports are assigned to the initial 16 ports of ASIC
• EX3400 at FRS will not support Half Duplex
Half Duplex first 16 Ports on ASIC
All shipped devices carry a sticker with a QR code, which maps to the device’s serial number/mac address or both.
At the time of physical lab setup,
lab admin puts a sticker with a
QR code on each rack(one time
effort). This QR code captures
the location of rack (Site >
Building > Floor> Aisle)
EX2300 and EX3400 Rack n’ Roll Overview
- EX9200
- EX9200 sFlow for IPv6
- EX9200 LX4, LRM optic
- EX9200 512K FIB
- EX9200 MC-LAG Simple User Experience
- L2VPN
- EX4600
- IPv6 PIM multicast
- VR support on PIM
- L3VPN
- EX9200
- 802.3x*
- EX4600
- EVPN*
- L2PT*
EX Platform Software Roadmap
1H 2016 2H 2016
* Investigating, not committed
Network Director Campus & Branch (2016)
Junos Fusion Enterprise provisioning workflow
Junos Fusion Enterprise cluster management
Network segmentation provisioning workflow
Zero Touch Deployment
Key Management (VPN & MACSEC)
Universal CPE management
Unified visibility; 3rd party WLAN & switches
Under investigation
Unified switching & security UI & workflows
Connectivity management
Microsoft Lync integration
Access control security integration
1H2016 2H2016
Network Director 3.0 highlights
Cloud Enabled Enterprise
• Junos Fusion for Enterprise support
Simplification
•Auto Profile
•Easy Config
• Fusion Data Center support
•Controller-less overlay support: EVPN/VXLAN provisioning
Visibility
• Fusion campus and Data center visibility
• EVPN/VXLAN monitoring
Easy Config
1
2
3
Portal for day to day operations
Allow the network admin or help desk to make quick and point changes
Ability to configure vlans, POE,802.1x
Portal UI
Apps
Data
Finance
Video
Active Directory
/LDAP
Corporate Data Center
WLC
Wireless User
Tablet/smartphone
UAC
SRX
AP
SmartPass
Internet
EX4300 Virtual Chassis
EX9200 MC-LAG
Supported Use Cases
• 802.1X authentication
• MAC authentication
• Guest user authentication*
• BYOD*
• Device profiling
• SRX EX Aruba use cases*
• UserFW
• UserFW query
• Threat detection/mitigation
Access Policy Integration
Clearpass /
ISE/Other
RADIUS
EX
Profiling
Server
* Not supported on Cisco ISE
Ethernet Fabric: Junos Fusion
Virtual Chassis Fabric
Multi-Tier Ethernet IP Fabric
Overlays
(VXLAN, EVPN and
MPLS)
Common Building Block
QFX5K Spine/Leaves Switches
QFX10K
Spine Switches
Juniper Switches Support Diverse Architectures
IT/Cloud Ops Network Ops DevOps
Controller
How to make things easier –
• Network Design and Architecture Center – Data Center Networks
• J-Net Forum TechWiki
• Cloud Labs
What is Juniper Cloud Labs (JCL)?
• Juniper Cloud Labs or JCL is Juniper's self serve portal for SEs and Partner Ingenious Champion to get access to Juniper devices for sandboxes and demonstrations.
• The system itself is comprised of two parts:
• The web pages -- They contain information about the available sandboxes, demonstrations and solution showcases. These are the pages you're viewing now.
• The JCL Portal Pages -- They provide access to the equipment sandboxes, demonstrations and showcases.
This statement of product direction sets forth Juniper
Networks’ current intention and is subject to change at
any time without notice. No purchases are contingent
upon Juniper Networks delivering any feature or
functionality depicted on this statement.
LEGAL STATEMENT
MX Portfolio
MX 2010
10 LC / 34RU
40Tbps
Chotu
10 LC / 24RU
40Tbps
MX 2020
20 LC / 45RU
80Tbps
4Q2016
MX 480
6 LC / 8RU
7.2Tbps
MX 960
11 LC / 16RU
13.2Tbps
MX 240
2 LC / 5RU
2.4Tbps 2RU
80 Gbps
MX 80 MX 104
4RU
80 Gbps
vMX
N x 10Gbps
Physical Characteristics
• 28nm process
• 23.44mm x 23.15 mm die size
• More than 60% power consumption reduction, enabling 0.5W
per gigabit at the system level
Capabilities
• All Trio forwarding features
• High scale flow export, video monitoring
• Ethernet OAM and BFD
• Performance monitoring
• Sophisticated packet parsing, lookup and encapsulation
• Integrated rich queueing
• Improved tunnel performance
• Chip level telemetry and analytics support
Industry’s first 400GE
capable network
processor
Introducing EA (Eagle), 3rd generation Trio ASIC
MX2008 (Chotu) Details
Chotu Details
Slots • 10 I/O Slots
Rack Size • 24RU, Standard 19” Rack
Power • AC/DC : N+1 Redundancy PSM, N+N feed
redundancy, 12KW
Fan and Cooling
• 2 Fantrays
• Front to Back Airflow
• Single Cooling Zone
RE/RP • 1+1 RE Redundancy
Fabric • 7+1 Switch Fabric Redundancy; 2Tb/slot at FRS
BW • Chassis capable of 4Tb/slot at FRS
NEBS • GR-63 NEBS Compliant
FRS and General Availability timelines :
• HW Release: 2H 2016, December 2016 timeframe
• FRS: 15.1F7, forward-port to 16.1R4, Mainline 17.1R1
Investment Protection
• Common MX2K MPCs
• Common MX2K power and cooling FRUs
Same mid plane MX2010 design
• Common features and feature velocity with MX2020/2010
Density
• Unmatched 10G/100G density with Edge feature set
• Roadmap to industry leading 4Tbps/slot for Edge platforms
Environmental
• GR-63 NEBS
• Half-Rack design
• Reduced power footprint option
• Available single phase AC support
Value Proposition
• Chassis
• RE-CB (Mechanical variation of MX NG-RE)
• Fabric (MX2000-SFB2 fabric with one fabric chip depopulated)
What’s new?
Switching Plane (MPC9E with SFB2)
o Each PFE has three lanes to each of
the eight fabric cards = 3 lanes x 8 =
24 lanes
o Each lane capable of 25Gbps, hence
total capacity per slot =
24x4x25Gbps = 2.4 Tbps
Fabric #1
Fabric #2
Fabric #8
LC#0
EA1
EA2
EA3
EA0
LC#9
EA1
EA2
EA3
EA0
***
MPC7E, MPC8E and MPC9E Applications
Rich Services: L3 VPN, VPLS, EVPN, VPLS, MEF-defined services
Traffic Differentiation: Ingress and Egress Queueing, enhanced scheduling priorities
Resiliency: Tail end protection, egress circuit protection, prefix independent convergence
Performance: Highest bandwidth per subscriber at scale
Service Models: PPPoE, DHCP, C-VLAN, S-VLAN
Traffic Insight: Inline Video Monitoring
Peering
Business
Edge
Broadband
Edge
Services: VPLS, EVPN, L3 VPN, Internet Routing
Overlays: VXLAN with VMWare, Juniper Contrail
Various Deployment Scenarios: MC-LAG, Virtual Chassis
Data Center
Gateway
Performance: High FIB Scale for IP Core
Load Balancing: Extensive payload analysis, adaptive techniques Core
Performance: High FIB Scale, Forwarding Performance at small packet sizes
Control Plane Protection: TTL Security, Loopback Filters, Suspicious Flow Detection
Traffic Visibility: Inline IPFIX, Source Class Usage/Destination Class Usage, Filter Counters
Attack Mitigation: FlowSpec, Efficient GRE Encapsulation / Decapsulation
UPGRADE
EA @ 240G
EA @ 240G
Fixed
MIC0
with
MACSec
Fixed
MIC1
with
MACSec
20
x S
FP
+
20
x S
FP
+
MPC7E-10G
EA @ 240G
EA @ 240G
Fixed
MIC0
Fixed
MIC1
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
MPC7E-MRATE
1584
1.4W
MACSec
Universal
Flexible
Smooth
Trio
10GE interfaces per rack
per gigabit at system level at 40C
for confidentiality with AES-256 support (10G card)
multi-rate 10/40/100GE ports to reduce spares
software-enabled queueing options
upgrade. Same hardware and 15.1 with JAM/JUNOS Continuity
feature set, analytics, QoS and performance enhancements
1/3rd of a rack
MX960
All 11 slots
In use
DEPLOY NEW LEVERAGE
Existing chassis and
double capacity to meet
traffic growth demands
Systems at the services
edge, peering sites, in the
metro and in the data
center
Extensive Trio feature set
for service flexibility
MPC7E Line Cards
UPGRADE
MX2K-MPC8E
MX2K-MPC9E
320
0.94W
Modular
Universal
Flexible
Smooth
Trio
100GE interfaces per chassis
per gigabit at system level at 40C
line cards for future 400GE support
multi-rate 10/40/100GE ports to reduce spares
software-enabled queueing options
upgrade. Same hardware and 15.1 with JAM/JUNOS Continuity
feature set, analytics, QoS and performance enhancements
MX2020
DEPLOY NEW LEVERAGE
Existing chassis and
quadruple capacity to
meet traffic growth
demands
Systems at the services
edge, peering sites in the
metro and in the data
center
Extensive Trio feature set
for service flexibility
MIC
-MR
AT
E
8 x QSFP28/
QSFP+
4 x QSFP+
MIC
-MR
AT
E
8 x QSFP28/
QSFP+
4 x QSFP+
EA @ 240G
EA @ 240G
EA @ 240G
EA @ 240G
MIC
-MR
AT
E
4 x QSFP28/
QSFP+
8 x QSFP+
MIC
-MR
AT
E
4 x QSFP28/
QSFP+
8 x QSFP+
EA @ 400G
EA @ 400G
EA @ 400G
EA @ 400G
MPC8E and MPC9E Line Cards
Optics
SOFTWARE
QSFP28: 100GE LR4, SR4
QSFP+: 4 x 10GE LR, SR
QSFP+: 40GE LR,SR
15.1F5-S1 (JAM/JUNOS Continuity)
16.1R1
8 x QSFP28
Ports
Description
12 x QSFP Universal Port MIC for MPC9E and MPC8E
line cards.
• All ports support 4 x 10GE and 40GE
• 8 ports support 100GE QSFP28 when used in MPC9E
• 4 100GE ports supported when used in MPC8E
Connectivity
MIC-MRATE, 12 x QSFP Universal Port MIC
SFB2 MX2010 and MX2020 1.6T Switch Fabric
LINE CARDS
SOFTWARE
All MPCs
15.1F5-S1 (JAM/JUNOS Continuity)
16.1R1
Description
MX2010 and MX2020 Switch Fabric enabling 1.6T
capacity per slot
• 2T per slot with 8 fabrics active
• > 1.6T per slot with 7 fabrics active
Capacity
OTHER Existing Power Supplies / FAN Trays
Node Virtualization
Motivation
Network Convergence for better TCO
Need for network agility and innovation
Flexible risk management
Need to scale up and down
Solution
Partition MX into slices
Each slice is equivalent to an MX
Enable fabric based communication
Enablers
NG-Routing Engine
Virtual RE
MX Trio architecture
Virtual Fabric Interfaces
Modeling & Orchestration
edge router
edge router
edge router
edge router
BNG
PE
VIDEO
EDGE
BNG
PE
VIDEO
EDGE
MULTIPLE PHYSICAL EDGE ROUTERS
SINGLE PHYSICAL EDGE ROUTER WITH
MULTIPLE FUNCTIONS
TODAY
SINGLE PHYSICAL MX PARTITIONED IN SLICES
EACH FOR ONE FUNCTION
SLICE1
BNG1
SLICE2
PE
SLICE3
VIDEO
EDGE
SLICE4
BNG2
NODE VIRTUALIZATION
Introducing the new MX NG-RE
Numbering During Power On Indicates During Power Off Indicates
5
Off Slow Blink RE is powered on Green Fast Blink Button Press
Slow Fast Blink Linux Booted Fast Slow Blink JunOS shutdown
Fast Blink Green JunOS Booted Slow Blink Off Linux Shutdown
Numbering Name Description
2 Auxiliary Port RS232 UART Port
3 Console Port RS232 UART Port
4 Management Port 10/100/1000Base-T Ethernet Port
6 Online/Offline Switch Switch to change the state of RE
7 & 10 SSD LED Status & Compartment Two SSD with respective LED Status
8 USB Port Used for Fresh install of OS.
9 Reset RE Reset
Specification Overview
Specification MX MX2K PTX5K
CPU Intel Haswell 6 Core
@ 2.0Ghz Intel Haswell 8 Core @ 2.3Ghz
Memory 64GB (DDR4)
Storage DUAL 64GB SSD
Virtualization Intel VT-x / VT-d / VT-c
Yocto Linux / KVM / QEMU
RE-CB Interface 10G
Software
15.1F3, 16.1R1
SMP Enabled
64b RPD
15.1F5, 16.1R4,
16.2R1
SMP Enabled
64b RPD
15.1F3, 15.1F4,
16.1R1
SMP Enabled
64b RPD
* Future
*
*
JUNOS KERNEL: (SMP)
Platform Support Matrix
Hardware/Software RE-S-X6-64G-S RE-S-X6 / REMX2K-X8
Chassis: MX960/MX480/MX240 X
Chassis: Chotu/MX2020/MX2010 X
SCB X X
SCBE X X
SCBE2 X
SFB X
SFB2 X
MPC/MS-MIC/MS-MPC
DPCE/MX-FPC/MS-DPC X X
JUNOS (“junos-install”)
JUNOS (“jinstall”) X X
Software Release & Feature Schedule
Feature Target Release Tentative Ship date
FRS – MX960, MX480, MX240 15.1F3 1H2016
FRS – PTX5K NGRE support FPC1 & FPC2 15.1F3 1H2016
FRS – PTX5K NGRE support FPC1, FPC2 & FPC3 15.1F4 1H2016
FRS – MX2020, MX2010 15.1F5 1H2016
15.1R1 Feature Parity 15.1F3 1H2016
ISSU 15.1F5 1H 2016
MX-VC 15.1F5 1H 2016
Subscriber Management 15.1F6 2H 2016
Subscriber Scaling & Performance 15.1F6 2H 2016
Virtualization types
• Guest OS is not modified. Same OS is spun as a VM
• Guest OS is not aware of virtualization. Devices emulated entirely.
• Hypervisor need to trap and translate privileged instructions
Fully Virtualized
• Guest OS is aware that it is running in virtualized environment
• Guest OS and Hypervisor communicate through “hyper calls” for improved
performance and efficiency
• Guest OS uses a front-end driver for I/O operations
• Example : Juniper vRR, vMX (SRIOV)
Para Virtualized
• Virtualization aware hardware (processors, NICs etc)
• Intel VT-x/VT-d/vmdq, AMD-V
• Example: Juniper vMX (VIRTIO)
Hardware
assisted
Virtual and Physical MX
PFE VFP
Microcode cross-
compiled
X86
instructions
CONTROL
PLANE
DATA
PLANE
ASIC/HARD
WARE
Cross compilation creates high leverage of features between Virtual and Physical with minimal re-work
TRIO
UCODE
vMX Product Overview
VCP VFP
Physical NICs MGMT
Guest VM (Linux) Guest VM (FreeBSD)
Hypervisor: KVM, ESXi
Cores Memory
Bridge / vSwitch
Physical layer PC
I P
as
s t
hro
ug
h S
R-I
OV
Vir
tIO
Virtual Control Plane (VCP)
• JUNOS hosted in a VM. Offers all the capabilities
available in JUNOS
• Management remains the same as physical MX
• SMP capable
Virtual Forwarding Plane (VFP)
• Virtualized Trio software forwarding plane. Feature
parity with physical MX. Utilizes Intel DPDK libraries
• Multi-threaded SMP implementation allows for
elasticity
• SR-IOV capable for high throughput
• Can be hosted in VM or bare-metal
Orchestration
• vMX instance can be orchestrated through OpenStack
Kilo HEAT templates
• Package comes with scripts to launch vMX instance *Single Root I/O Virtualization (SR-IOV) is PCI-Express (PCIe) extention that allows a PCI-e device to be virtualized so that many PCU-e
devices are availavel in the guest VM’s
*VirtIO – Virtual IO – Paravirtualized drivers for KVM/Linux. The idea behind it is to have a common framework for hypervisors for IO
virtualization
vMX Host Requirements
Description Value
Sample system configuration Intel Xeon E5-2667 v2 (Ivy Bridge Processors) @ 3.30GHz 25 MB Cache.
NIC: Intel 82599 (for SR-IOV only)
Memory Minimum: 8 GB (2GB for vRE, 4GB for vPFE, 2GB for Host OS)
Storage Local or NAS
Sample system configuration
Sample configuration for number of CPUs
Use-cases Requirement
VMX for up to 100Mbps performance Min # of vCPUs: 4 [1 vCPU for VCP and 3 vCPUs for VFP]. Min # of Cores: 2 [ 1 core
for VFP and 1 core for VCP]. Min memory 8G. VirtIO NIC only.
VMX for up 3G of performance Min # of vCPUs: 4 [1 vCPU for VCP and 3 vCPUs for VFP]. Min # of Cores: 4 [ 3
cores for VFP, 1 core for VCP]. Min memory 8G. VirtIO or SR-IOV NIC.
VMX for 3G and beyond (assuming min 2 ports of 10G) Min # of vCPUs: 5 [1 vCPU for VCP and 4 vCPUs for VFP]. Min # of Cores: 5 [ 4
cores for VFP, 1 core for VCP]. Min memory 8G. SR-IOV only NIC.
vMX Baseline Performance in 14.1 VMX performance in Gbps
# of cores for packet processing *
Frame size (Bytes) 3 4 6 8 10
256 2 3.8 7.2 9.3 12.6
512 3.7 7.3 13.5 18.4 19.8
1500 10.7 20 20 20 20
2 x 10G ports
4 x 10G ports
# of cores for packet processing*
Frame size (Bytes) 3 4 6 8 10
256 2.1 4.2 6.8 9.6 13.3
512 4.0 7.9 13.8 18.6 26
1500 11.3 22.5 39.1 40 40
6 x 10G ports
# of cores for packet processing*
Frame size (Bytes) 3 4 6 8 10
256 2.2 4.0 6.8 9.8
512 4.1 8.1 14 19.0 27.5
1500 11.5 22.9 40 53.2 60
*Number of cores includes cores for packet processing only i.e worker cores. For each 10G port there is a dedicated core i.e I/O core not included in this number.
8 x 10G ports
# of cores for packet processing*
Frame size (Bytes) 4 6 8 10 12
64 2.1 2.8 3.5 4.2 5.3
128 3.9 5.2 6 7.3 8.7
256 5.2 8 10.4 12.6 15
512 12.7 18.3 23 27.7 32
1500 33.6 47 58.5 71.5 79
IMIX 14 20 25.4 31 37
vMX Use-Case: Virtual PE
Central Office,
Hub Site
L3 VPN/IPSec VPN
L2VPN/VPLS/L2Circuit
• Scale-out deployment scenarios
• Low bandwidth, high control plane scale customers
• Dedicated PE per customer
• Small PE in a new market segment or geography with
ability to support secure transport
• vMX is a virtual extension of a physical MX PE with all the
capabilities of a carrier class PE router
• vMX offers IPSec and IPSec VPN capability
• Orchestration and management capabilities inherent to
any virtualized application apply
vMX value proposition Metro Network
vMX
National/Regional
Data Centers vMX
Provider MPLS Network
L2 switch
L2 switch
CPE
CPE
CO Gateway CO Gateway
L3 PE L3 PE
CPE
Enterprise Enterprise
Enterprise
Use-case
vMX Use-Case: DC Gateway/Virtual Private Cloud Gateway
• Service Providers need a gateway router to connect the
virtual networks to the physical network
• Small hosting providers need a gateway route to connect
to the internet
• Gateway should be capable of supporting different DC
overlay, DC Interconnect and L2 technologies in the DC
such as GRE, VXLAN, VPLS and EVPN
• Virtual Private Cloud (VPC) customers need a gateway
router in the cloud to
i. Route between subnets in a VPC instance
ii. Route between VPC instances across
geographies
iii. Secure transport from a public or private network
without scaling restrictions imposed by CSP
• Cloud Service Providers don’t want to create specialized
product offerings to meet these needs
• VMX supports all the overlay, DCI and L2
technologies available on MX
• Scale-out control plane to scale up VRF instances and
number of VPN routes
• Create overlay topologies using IPSec and MPLS
VPN technologies for Hybrid Cloud integration into the
enterprise
vMX value proposition
Use-case
vMX
VTEP
VM VM VM
Virtualized
Server
Non Virtualized
Servers
MPLS Cloud
VPN Cust A VPN Cust B
Internet
VXLAN GW (VTEP),
L3VPN GW, Internet GW ToR
ToR
Virtual
Network A Virtual
Network B
AWS Region
VPC instance
Amazon Direct Connect
vMX VPC GW
VPC instance
vMX VPC GW
AWS Region
vMX Use-Case: Enterprise WAN Router
• Large Enterprises and Government institutions want to
build their own overlay network over a Service Providers
MPLS or Layer 2 network
• Transport for overlay network can be using encapsulation
technologies such as MPLSoGRE, VXLAN and IPSec for
secure transport
• vMX will offer IPSec VPNs using Group VPN technology
for secure overlay transport
• All existing routing functionality available on vMX
makes it a robust Enterprise WAN router
vMX value proposition
Use-case
Provider MPLS network
Overlay: Group VPN,
MPLSoGRE, VXLAN
vMX
CPE
Enterprise
Enterprise
vMX
CPE
vMX
CPE Enterprise
• Service Providers want the ability to bring-up a PE in a
new geography/market with low upfront CAPEX and
shorter time-to-market
• Service Providers don’t always own the end-to-end circuit
to their customers in all geographies/locations. Such use-
cases require secure transport using IPSec from the
customer site.
• vMX offers the capabilities of a physical MX but at
lower bandwidth granularities for new locations and
geographies.
• The addition of IPSec for site-to-site tunnels allows for
secure transport in-case the SP has to utilize a partners
network
vMX+Porter value proposition
Use-case
vMX Use-Case: New Market/Geography PE
Partner MPLS network or
Internet for backhaul Enterprise
vMX PE Interne
t
Physical PE
New Geography/Market Present Market
Local
Providers
MPLS
network
CPE
VPN2
VPN1
AAA & DHCP
Servers ISP X
ISP Z
Edge Core Retailer
Fiber
ADSL
VDSL
vBNG
Ethernet
Aggregation
Metro
vLAC
vLNS
Retail ISP
vLNS
Business
VPN
Core
vBNG and vLAC connect broadband subscribers via L2 from aggregation network, then assign IP and policies for L3 hand to the core or retail ISP vLNS deploys customized configurations for one or more
retails ISPs or Business VPNs per instance
Market Requirement
vBNG and vLAC allow just in time provisioning in small COs (<8K subscribers and <20 Gb/s) close to the access node vLNS deploys optimized instances for each Business VPN or
Retail ISP with dynamic capacity management
vMX + Porter Solution
vMX Use-Case:Distributed vLNS & vBNG
• Port extension on the MX to maximize the chassis
value with better slot utilization, leading to
improved ROI
• Resilience through CPE dual homing and L2/L3
routing in and/or through Fusion HA
• Optimizing the Capex, improved ROI
• Management simplicity
• Plug and Play
• Large scale
Junos Fusion for Edge value proposition
Use-case
What is Junos Fusion for Edge?
Single Aggregation
Device Dual Aggregation Devices
Supports L2 and L3 at the access Supports L2 at the access
AD
SD SD
AD AD
SD SD
Satellites management for all traffic related aspects (config / statistics / ports state)
LLDP
802.1BR+
Configuration synchronization between Aggregation devices Netconf
Protocols Used Internally
1
2
3
4
Satellites management for non-traffic related aspects (chassis, environment, upgrade ..) json-rpc
5
Devices discovery and auto provisioning
1 2 3
4
5
1 2 3
ICCP Interchassis Communication Protocol manages the setup and control of the redundancy groups (active/standby).
What is 802.1BR?
Dataplane Format Control Plane Protocol
Define a packet header to add external ports information between satellite and aggregation devices.
Supported in hardware by Recent Merchant
Silicon
Control and Status Protocol (CSP) define how the aggregation manage the satellite.
Designed to be extended
Embedded capabilities negotiations process as part of the initialization.
Communication protocol
Edge Control Protocol (ECP) define how control packets (CSP) are exchanged and transport between aggregation and satellite devices.
Designed to be point to point
Aggregation Device (AD) MX960/480/240 MX2020
Satellite Device (SD) QFX5100, EX4300
FRS Q2 2015 (14.2R3)
Mode of deployment Single AD
Dual AD (Roadmap)
License per SD Yes
Mode of operation Extended mode
L2 Local Switching on SD Yes
L2 Multicast egress replication on
SD Yes
L3 Multicast Yes
Junos Fusion for Edge HW
Motivaton
• Provide analytical insight • Resource utilization
• Loss and Delay measurements
• Queue Depth
• Ensure high scale • Push versus Pull model
• Thousands of monitoring objects
• Sub-second resolution
• Google RPC Streaming or UDP in Google Proto Buffers (GPB) Format
• Enable New Applications • Dynamic Resource Provisioning
• Router Resource Pooling
• PCE Controller (SDN)
Line Card N
PFE
PFE
uKernel
Router Telemetry Framework Overview Routing Engine
Line Card 1
Application
Network Element
Sensor Configuration: NETCONF, CLI
Provision Sensors
In-band telemetry
information
Queries Data
Co
llecto
r
Query Engine
Database PFE
PFE
Juniper or a 3rd party collector
uKernel
RPD, Other
daemons
Telemetry manager
JUNOS Router Telemetry Integration Options
Data Collection
Data Sources
Visualization / Analytics
Juniper
Collector
Potential integration
Customer
Application
Router
Other
Adapter
Analytics
SPLUNK
Performance
Management
IBM Proviso
Infovista
VistaInsight
PacketDesign
Monitoring
Cacti
MRTG
MX PTX
Northstar
Performance
Management
SevOne
Low level utilization down to an individual hardware / software component
Resource Utilization Monitoring
Network View*
sfo.r1
sea.r1
jfk.r1
den.r1
ord.r1
Device View Component View
RE0
RE1
Line Card 0
Line Card 1
Line Card 2
jfk.r1 jfk.r1: Line Card 2*
PFE 0
* Sample integration into the fault / performance management system
** Sample screenshots from Cacti (cacti.net) shown
NPU Memory (with application breakdown)
Lookup Engine Util (co-processor
breakdown)
Contro
l
Plane
CPU Memory (with application breakdown)
Leveraging Interface Queue Depth High Watermark Statistics for core
Network Congestion Reporting
Network View*
sfo.r1
sea.r1
jfk.r1
den.r1
ord.r1
Interface View
sfo.r1 : et-1/0/0**
* Sample integration into the fault / performance management system
** Sample screenshots from Cacti (cacti.net) shown
Interface Queue Depth High Watermark over Time
How to use this data? Troubleshoot SLA violations, identify maximum latency bound for SLA
contracts, plan and provision new links.
Leveraging Interface Queue Depth High Watermark Statistics for edge
User to Network Interface Congestion Reporting
Sample Enterprise Portal
Interface Queue Depth over Time
With typical 5 minute averaging, the interface may look underutilized,
still microbursts occur and performance degrades
Enterprise VPN Sites •Denver, CO •Los Angeles, CA •London, UK •Rome, Italy •Tokyo, Japan
3 microburst events detected
over last minute,
suggest a capacity upgrade
Selected Site: London, UK
Enabling Aggressive Burstable Billing* Burstable Billing Description
Customers are charged based on the peak traffic consumption ignoring top X percent peaks (X is typically 5%) Each peak is computed as an average rate over sampling interval (typically 5 minutes) Router must support 5 minute interface statistics export, otherwise there will be commercial impact
*For more information: https://en.wikipedia.org/wiki/Burstable_billing
Customer is charged
based on this rate
Commercial requirement quickly becomes a technical challenge both on network element and
collector sides when the number of logical interfaces reaches thousands per network element
or hundreds of thousands per network
Real Time Telemetry for PCE* Controller
Northstar
PCE
Controller
Topology (via BGP-LS)
LSP Events
LSP Statistics
Interface Statistics
Optimized paths
Problem Statement
• Controller computes paths in
real time
• Need to quickly detect
network changes and react
• Existing telemetry export
mechanisms have limited
applicability for centralized
controller applications (delays
and scaling constraints)
*Path Computation Element
Solution
• Network Element reports LSP Events in a structured format
• Network Element provides nearly real-time LSP and Interface statistics