Juniper Day 2016 Praha, 25.5.2016 Sergei Gotchev, Juniper Networks

1. Juniper Day 2016
Campus
May 2016 Prague
Sergei Gotchev – sgotchev@juniper.net

2. Disclaimer
This statement of product direction sets forth Juniper
Networks’ current intention and is subject to change at
any time without notice. No purchases are contingent
upon Juniper Networks delivering any feature or
functionality depicted on this statement.

3. Agenda
• Un1te – Junipers Framework
• Trends in the market: new standards on it‘s way; 2,5 and 5 Gbps
discussion
• Fusion – a new architectural approach
• New EX switching series
• ND3.0

4. Open Convergence Framework
Wireless Security UCC Management
Ready to deploy best-of-breed enterprise solutions

5. Campus LAN
Trends

6. Campus LAN Trends
2,5- und 5-Gbit/s-Ethernet
• IEEE 802.3bz
• Purpose: aggregation of IEEE 802.11ac WiFi standard AP
• Probably named 2.5GBASE-T and 5GBASE-T (abbr: 2.5GbE & 5GbE)
• NBASE-T or MGBASE-T, transport over copper
• Will work with Category 5e and Category 6 cables up to 100 meters
span

7. Cloud Speed Adoption
20182014 2015 2016 2017
0
20
40
60
80
1 GE
10GE
40GE
25GE
50GE
100GE
Percentofservershipments
Source: Dell’Oro 2015

8. Campus LAN Trends
Power over Ethernet PoE++
• IEEE 802.3bt
• Purpose: Augment the
capabilities of existing Power
Sourcing Equipment (PSE)
and Powered Device (PD)
specifications with Type 3 (≤
60W at the PSE) and Type 4
(≤ 100W at the PSE)
• Probably named DTE Power
via MDI over 4-Pair

9. Multi-Gigabit Related Timelines
2015 -
Cisco/Aquantia
ship NBASE-T
switch
IEEE
merges
NBASE-
T/MBASE-T
2016 Vendors
announce pre-
standard
products
2016 Aruba
Wave 2 AP
Early 2017 -
2.5G based
Wave 2 APs
2017 IEEE
802.3bz/8
02.3bt
2017 Juniper
Switches FRS
(standards
based)
Non-standard based products [draft] standard based products
Non-standards based Standards based (JNPR)
All speeds - 100M/1G/2.5G/5G/10G Some vendors only Yes
Up to 99.9W PoE
(IEEE 802.3bt)
Some vendors only Yes
Interop testing with 2.5G APs No Yes

10. Junos Fusion

11. What is Junos Fusion Enterprise?
Junos Fusion for Enterprise
Simple
• Single management domain
• Plug and play deployment of access switches (ZTP)
• Single configuration with resilient control & data plane
Reliable
• Carrier-grade control and data plane resiliency
• High availability and ISSU
• Consistent tooling across data center and campus
Flexible
• Built on open protocols (802.1BR)
• Flexible attachment models and scalability
• Mix and match with traditional wiring closet switches
Junos Fusion Enterprise
Campus Building
Aggregation Device (AD):
EX9200
Satellite Devices (SD):
EX4300 (1H 2016), EX3400 (2H 2016),
EX2300 (2H 2016)
On-premise DC
* Subject to verification

12. Internal control protocols between AD and SD
Satellites management for all traffic related
aspects (config / statistics / ports state)
LAG synchronization between Aggregation
devices (MC-LAG)
LLDP
802.1BR+
Configuration synchronization between
Aggregation devicesNetconf
1
2
3
4
Satellites management for non-traffic related
aspects (chassis, environment, upgrade ..)json-rpc
5
Devices discovery and auto provisioning
1 2 3
4
5
1 2 3
ICCP

13. Guest VPN
Sales VPN
Engineering VPN
Finance VPN
Unifying Enterprise Networks Simple Smart Flexible
Boston HQ
Junos Fusion Enterprise
Chicago
Junos Fusion Enterprise
San Francisco
Junos Fusion Enterprise
Cleveland
Junos Fusion Data Center
L3 / EVPN
Junos Fusion Enterprise
elegantly unifies the
enterprise
Extends EVPN capabilities to the
access
Consistent segmentation across all
sites
Uniform VLANs, configuration and
policies

14. Junos Fusion Enterprise - Migration
Virtual
Chassis
Satellite
Cluster
Satellite
Cluster
Satellite
Cluster
• Hybrid mode supported
– MC-LAG/Access Switches and Fusion/SD
• MC-LAG with EX9200 and EX4300 can
migrate to Fusion
• Script to deploy Fusion ready MC-LAG
• Automate configuration conversion for access
layer switches
– Migrate to Fusion one closet at a time

15. New EX Switching
Series

16. Core/Distribution Evolution
EX9200
Scale
(DensityandElasticity)
2014 2015 2016 2017+2013
Juniper Innovations
FRS
Cassis
XF Fabric
XF2 Fabric
EVPN
VXLAN
Eagle PFE
Junos Fusion
Enterprise
10G MACsec
Virtualization
Cassis II
1G MACsec
NG Fabric
NG PFE
100G MACsec
IPSec
240G/slot
240G LC
480G/slot
260G/slot LC
10G/40G LC
Modular LC
480G/slot LC
10/40/100GbE
NG RE
1.2T/slot
400G Native
Shipping
Committed
Investigation

17. EX9200 Linecards
Modular Linecard Multi-rate Linecard 40x10G MACsec
• Flexible configuration
• Lower 10GbE entry cost
• Up to 130Gbps
throughput
• Interface cards
– 20 1GbE SFP
– 40 1GBASE-T
– 10 10GbE SFP+
• 480Gbps throughput
• Fixed 12 QSFP ports
• 48 10GE SFP+ w/ BO
• 12 40GE QSFP+
• 4 100GE QSFP28 optics
• 400Gbps throughput
• 40 x 10GE ports
• MACSec ready
• MACsec on all 40 ports
• AES 256 support
EA @ 240G
EA @ 240G
Fixed
MIC0
Fixed
MIC1
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
QSFP
QSFP
QSFP28
EA @ 240G
EA @ 240G
Fixed
MIC0
with
MACSec
Fixed
MIC1
with
MACSec
20xSFP+20xSFP+

18. Access Evolution
Scale
(DensityandElasticity)
2014 2015 2016 2017+2013
Juniper Innovations
FRS
320G VC
1GbE/10GbE
MACsec
IPv6 access
security
Fusion
Enterprise
2.5G/5G
access
Mixed VC
scale
Access
control
Integration
Virtualization
EX4300
Virtual Chassis
EX4300 Fiber
EX4600
1/10GbE entry level
1/10/40GbE mid level
Mixed Virtual
Chassis
Fusion Enterprise
802.3bz
802.3bt
Compact
Fusion Enterprise
Aggregation
Shipping
Committed
Investigation

19. EX2300 Access Switch
Compact & High Performance
1GbE density 10GbE uplinks in 1RU
Standard Compliance
IEEE 802.3at (POE +)
Management Simplification
Junos Virtual Chassis* (4 devices - 10G support)
Operational Simplicity and Automated Config
Juniper Fusion Enterprise (IEEE 802.1BR support)
EX2300 and EX2300-C
*license neededplaned for Juni 2016 timeframe

20. EX2300-C Overview
1Gbps Access Switch
 12 x 10/100/1000Base-T ports
 2 x 1GbE or 10GbE SFP/SFP+ ports
 POE/POE + budget supported
 124W 802.3at or 802.3af
 Fixed Configuration
EX2300 SKUs*
10/100/1000Base-T
ports
1/10 GbE SFP/SFP+
ports
Cooling POE/POE+
EX2300-C-12T 12 2 Fanless 0
EX2300-C-12P 12 2 Fanless 12
***PoE (15.4W) is supported on up to any 8 ports simultaneously
***PoE+ (30W) is supported on up to any 4 ports simultaneously
12 x 10/100/1000 Base-T
2 x 1GbE or 10GbE SFP/SFP+
USB/Console/Mgmt

21. EX2300 Overview
1Gbps Access Switch
 24, 48x10/100/1000Base-T ports
 4 x 1GbE or 10GbE fixed SFP/SFP+ ports
 POE/POE + budget supported
 370W on 24 port SKU
 740W on 48 port SKU
 Fixed configuration
4 x 1GbE or
4 x 10 GbE SFP/SFP+
24, 48x10/100/1000Base-T
EX2300 SKUs* 10/100/1000 Base-T ports 10GbE SFP+ ports POE/POE+ ports POE/POE+ Power Budget Cooling AC/DC
EX2300-24T 24 4 0 0 1x Fixed, AFO Fixed AC
EX2300-24P 24 4 ***24 370W 2x Fixed, AFO Fixed AC
*EX2300-24T-DC 24 4 0 0 1x Fixed, AFO Fixed DC
*EX2300-24P-TAA 24 4 ***24 370W 2x Fixed, AFO Fixed AC
EX2300-48T 48 4 0 0 1x Fixed, AFO Fixed AC
EX2300-48P 48 4 ***48 740W 2x Fixed, AFO Fixed AC
*EX2300-48T-DC 48 4 0 0 1x Fixed, AFO Fixed DC
*EX2300-48P-TAA 48 4 ***48 740W 2x Fixed, AFO Fixed AC
*DC and TAA SKU are offered 2H 2016
***Full PoE (15.4W) is supported on all ports with the fixed PSU (All SKUs)
***PoE+ (30W) is supported on up to 12 ports on -24 port SKU, up to 24 ports on -48 port SKU
Console, Mgmt, USB and Fixed power/Fan

22. EX2300 Platform Detail
EX2300-C-12T EX2300-C-12P EX2300-24T EX2300-24P EX2300-48T EX2300-48P
CPU ARMv7 Cortex A9 CPU 1.25GHz
DRAM/Flash 2GB/2GB
Performance 64Gbps/47.6Mpps 128Gbps/95.2Mpps
Management
RJ45 10/100/1G Mgmt port on front
One RJ45 Console and RS232 to
Mini USB Console on front panel
RJ45 type 10/100/1G Management port on rear
RJ45 type Console on rear and RS232 to Mini USB Console on front
USB
One type-A USB HOST port, support
USB 2.0 (480Mbps) on front panel
One type-A USB HOST port, support USB 2.0 (480Mbps) on rear
panel
Ethernet Port 12 x 10/100/1G RJ45 port 24 x 10/100/1G RJ45 port 48 x 10/100/1G RJ45 port
Virtual Chassis
Port
2 x 10G SFP+ Fixed Fiber port 4 x 10G SFP+ Fixed Fiber port
PSU AC 40W AC 170W
AC
65W/DC100W
AC 450W AC 90W AC 850W
Cooling Fan less Single FAN Dual FAN Single FAN Dual FAN
System Air
Flow
Air Flow Out (AFO – front to back air flow) only

23. A few software differences
• No IEEE802.1BR support
• No ERSPAN
• IEEE 802.1AG (LFM) Ethernet Link Fault
Management
• IEEE 802.3AH (CFM) Connectivity Fault
Management
• G.8032 (Ethernet Ring Protection Switching)
• IEEE802.1BR support *
• ERSPAN
• No LFM
• No CFM
• No ERPS
• IEEE 802.1X support differences
– No RFC 3576 support
– No Central Web Authentication Support
– No Flexible Auth order of MAC Auth
– No EAP-PAP protocol support for MAB
EX2200 EX2300
* Enterprise Fusion supported FRS +, operates in satellite mode as part of JUNOS Fusion for Enterprise

24. MACsec
Supported on 1G and 10G interfaces
Juniper EX3400 Access Switch
Compact, High Performance, & Built-in Redundancy
1GbE density, 10GbE and 40GbE uplinks in 1RU, Dual
Redundant Power Supplies and Fans
Standard Compliance
Full POE (15.4W) support with a single PSU
Full POE+ (30W) support with dual PSU (1440 W)
Management Simplification
Junos Virtual Chassis (10 Devices - 40G support)
Operational Simplicity and Automated Configuration
Juniper Fusion Enterprise (802.1BR support)
EX3400
planed for Juni 2016 timeframe

25. EX3400 Overview
Mid Level 1Gbps Access Switch
 24, 48x10/100/1000Base-T ports
 4 x 10GbE or 1GbE fixed SFP/SFP+ ports
 2 x 40GbE fixed QSFP+ ports *
 POE/POE + budget supported
 370W or 720W on 24 port SKU
 740W or 1440W on 48 port SKU
4 dual-mode
1GbE/10GbE SFP/SFP+
24, 48x10/100/1000Base-T
EX3400 SKUs*
10/100/1000
Base-T ports
10GbE SFP+
ports
40GbE QSFP+
ports
POE/POE+
ports
POE/POE+ Power
Budget
Cooling AC/DC
EX3400-24T 24 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-24P 24 4 2 24 **370W or 720W 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-24T-DC 24 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO DC
EX3400-48T 48 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-48P 48 4 2 48 **740W or 1440W 2 x Hot-Swappable/Redundant Fans, AFO AC
EX3400-48T-AFI 48 4 2 0 0 2 x Hot-Swappable/Redundant Fans, AFI AC
*2 x 40GbE QSFP+ ports used as uplink or VC, breakout of 10-GbE not supported (Same as EX4300)
POE is supported on all ports with a single power supply
POE+ is supported on all ports with dual power supplies
Field Replaceable
Fans
Dual Power
supply slots
Console/
Mgmt/USB
2 x 40GbE
QSFP+

26. EX3400 Platform Detail
EX3400-24T EX3400-24P EX3400-48T EX3400-48P
CPU Dual-core ARM Cortex A9 1GHz
DRAM/FLASH 2GB/2GB
Performance 288Gbps/214.2Mpps 336 Gbps / 250Mpps
Management miniUSB at front panel, RJ45 type RS232 at rear panel, Ethernet management port at rear panel
USB One type-A USB port at rear panel, support USB 2.0 (480Mbps)
Ethernet Port 24 x 10/100/1G RJ45 Copper port 48 x 10/100/1G RJ45 Copper port
Virtual Chassis Port 4 x 10G SFP+ fiber port AND 2 x 40G QSFP+ fiber port
PSU
2 x Hot-swappable (Pluggable) PSU, support 1+1 redundancy & load sharing
150W AC/DC 600W AC 150W AC 920W AC
Cooling 2 x Hot-swappable (Pluggable) FAN Tray 1+1 FAN redundancy
System Air Flow AFO only AFO only AFO & AFI AFO only

27. A few software differences
• No configurable TCAM support
• No IEEE802.1BR support
• No ERSPAN
• IEEE 802.1AG (LFM) Ethernet Link Fault
Management
• IEEE 802.3AH (CFM) Connectivity Fault
Management
• G.8032 (ERPS) Ethernet Ring Protection
Switching
• BGP v4
• Configurable Unified Forwarding Table
(UFT) FRS +
• IEEE802.1BR support*
• ERSPAN
• No LFM
• No CFM
• No ERPS
• No BGP
• IEEE 802.1X support differences
– No RFC 3576 support
– No Central Web Authentication Support
– No Flexible Auth order of MAC Auth
– No EAP-PAP protocol support for MAB
EX3300 EX3400
* Enterprise Fusion supported FRS +, operates in satellite mode as part of JUNOS Fusion for Enterprise

28. Hardware Comparison
• Increased uplinks to 10G
• Increased virtual chassis bandwidth
• Added 802.1BR support
From EX2200 to EX2300
• Increased uplinks to 40G
• Increased virtual chassis bandwidth
• Added 802.1BR support
• Added FRUable redundant Fans
• Added FRUable redundant PSU SKUs
• Added MACsec
From EX3300 to EX3400
Feature EX2200 EX2300
Uplinks/VC 4 x 1G 4 x 10G
PoE Budget 405 W 740 W
Fusion SD NO YES
VC license at 10G NO YES
MACsec NO NO
Feature EX3300 EX3400
40G ports 0 2
Hot-swappable PSU NO YES
PoE Budget 740 W 1440 W
Fusion SD NO YES
VC license at 40G NO NO
MACsec license NO YES
!!!

29. Half Duplex support at FRS
• Supported on EX2300
– 24 port SKUs will support up to 16 ports
– 48 port SKUs will support up to 32 ports
– 12 port SKUs will support up to 12 ports
– Ports will not be labeled on the chassis
– Ports are assigned to the initial 16 ports of ASIC
• EX3400 at FRS will not support Half Duplex
Half Duplex first 16 Ports on ASIC

30. Network Director 3.0

31. Network Director Campus & Branch (2016)
Junos Fusion Enterprise provisioning workflow
Junos Fusion Enterprise cluster management
Network segmentation provisioning workflow
Zero Touch Deployment
Key Management (VPN & MACSEC)
Universal CPE management
Unified visibility; 3rd party WLAN & switches
Under investigation
Unified switching & security UI & workflows
Connectivity management
Microsoft Lync integration
Access control security integration
1H2016 2H2016

32. Network Director 3.0 highlights
Cloud Enabled Enterprise
• Junos Fusion for Enterprise support
Simplification
• Auto Profile
• Easy Config
• Fusion Data Center support
• Controller-less overlay support: EVPN/VXLAN provisioning
Visibility
• Fusion campus and Data center visibility
• EVPN/VXLAN monitoring

33. Easy Config
1
2
3
Portal for day to day operations
Allow the network admin or help desk to make
quick and point changes
Ability to configure vlans, POE,802.1x

34. Portal UI
Ap
ps
Dat
a
Fina
nce
Vid
eo
Active
Directory
/LDAP
Corporate Data
Center
WLC
Wireless
User
Tablet/smar
tphone
UAC
SRX
AP
Smart
Pass
Internet
EX4300
Virtual
Chassis
EX9200
MC-LAG

35. Supported Use Cases
• 802.1X authentication
• MAC authentication
• Guest user authentication*
• BYOD*
• Device profiling
• SRX EX Aruba use cases*
• UserFW
• UserFW query
• Threat detection/mitigation
Access Policy Integration
Clearpass /
ISE/Other
RADIUS
EX
Profiling
Server
* Not supported on Cisco ISE

36. Additional Useful
Information

37. How to make things easier –
• Network Design and Architecture Center – Data Center Networks
• J-Net Forum TechWiki
• Cloud Labs

40. What is Juniper Cloud Labs (JCL)?
• Juniper Cloud Labs or JCL is Juniper's self serve portal for SEs and
Partner Ingenious Champion to get access to Juniper devices for
sandboxes and demonstrations.
• The system itself is comprised of two parts:
• The web pages -- They contain information about the available
sandboxes, demonstrations and solution showcases. These are the
pages you're viewing now.
• The JCL Portal Pages -- They provide access to the equipment
sandboxes, demonstrations and showcases.

42. Thank youThank you