EX4600-40F-AFO Juniper EX4600 Ethernet Switchs

EX4600-40F-AFO Juniper EX4600 Ethernet Switchs

24 SFP+/SFP ports, 4 QSFP+ ports, 2 expansion slots, redundant fans, 2 AC power supplies, 2 power cords, 4-post rack mount kit, and front to back airflow

Hardware

• Switching capacity: 720 Gbps (unidirectional)/1.44 Tbps (bidirectional)
• Layer 2/Layer 3 throughput (maximum with 64 byte packets): 1,071 Mpps (wire speed)
• Weight: 21.7 lb (9.84 kg) with PSUs and fans installed
• Dimensions (HxWxD): 1.72 x17.36 x 20.48 in (4.37 x 44.09 x 52.02 cm)
• Switching mode: Cut-through and store-and-forward
• Front-to-back or back-to-front airflow (for hot aisle/cold aisle deployment)
• Management and rear console port connections
• Predicted mean time between failures (MTBF): 150,000 hours
• Predicted FIT rate: 4,987

Interface Options

• 1GbE SFP: 24(40) (with 10GbE expansion modules)
• 10GbE SFP+: 24(40/72) (with 10GbE expansion modules/with fixed 40GbE ports using breakout cables)
• 40GbE QSFP+: 4(12) (with expansion modules)
  • Each fixed QSFP+ port can be configured as a 4x10GbE interface
  • Each QSFP+ port can be configured as a 40 Gbps port
  • USB port
  • Console port
  • 2 management ports: 1 RJ-45 and 1 SFP
  • Supported transceiver and direct attach cable
  • SFP+ 10GbE optical modules
  • SFP+ DAC cables: 1/3/5 m direct-attached copper and
    1/3/5/7/10 m active direct-attached copper
  • SFP GbE optical and copper module
  • QSFP+ to SFP+ 10GbE direct attach break-out copper
    (1/3 m direct-attached copper cable)

Rack Installation Kit

• Versatile four post mounting options for 19-in server rack or datacom rack

Airflow

• Front-to-back and back-to-front cooling
• Redundant variable-speed fans to reduce power draw

Power Supply and Fan Modules

• Dual redundant (1+1) and hot-pluggable power supplies
• 110-240 V single phase AC power
• -36 to -72 V DC power
• Redundant (N+1) and hot-pluggable fan modules for front-to-back and back-to-front airflow

Performance Scale (Unidimensional)

• MAC addresses per system: 288,000^*
• VLAN IDs: 4,091
• Number of ports per LAG: 32
• FCoE scale:
  • Number of FCoE VLANs/FC virtual fabrics: 4,095
• Firewall filters: 4,000
• IPv4 unicast routes: 128,000 prefixes; 208,000 host routes
• IPv4 multicast routes: 104,000
• IPv6 multicast routes: 52,000
• IPv6 unicast routes: 64,000 prefixes
• Address Resolution Protocol (ARP) entries: 48,000
• Jumbo frame: 9,216 bytes

^* MAC address table uses a hash-based scheme to program entries; therefore, some entries may not be programmed due to hash index collision.

Access Control Lists (ACLs)

• Port-based ACL (PACL): Ingress and egress
• VLAN-based ACL (VACL): Ingress and egress
• Router-based ACL (RACL): Ingress and egress
• ACL entries (ACE) in hardware per system:
  • Ingress ACL: 1,536
  • Egress ACL: 1,024
• ACL counter for denied packets
• ACL counter for permitted packets
• Ability to add/remove/change ACL entries in middle of list (ACL editing)
• L2-L4 ACL
• IPv6 ACL
• Firewall filter on loopback interface
• Firewall filter on management interface

Spanning Tree Protocol (STP)

• Multiple Spanning Tree Protocol (MSTP) instances: 64
• VLAN Spanning Tree Protocol (VSTP) instances: 253

Traffic Mirroring

• Mirroring destination ports per switch: 4
• Maximum number of mirroring sessions: 4
• Mirroring destination VLANs per switch: 4

Layer 2 Features

• STP—IEEE 802.1D (802.1D-2004)
• Rapid Spanning Tree Protocol (RSTP) (IEEE 802.1w); MSTP (IEEE 802.1s)
• Bridge protocol data unit (BPDU) protect
• Loop protect
• Root protect
• RSTP and VSTP running concurrently
• VLAN—IEEE 802.1Q VLAN trunking
• Routed VLAN interface (RVI)
• Port-based VLAN
• MAC address filtering
• GRE tunneling
• QinQ
• VLAN translation
• Static MAC address assignment for interface
• Per VLAN MAC learning (limit)
• MAC learning deactivate
• Link Aggregation and Link Aggregation Control Protocol (LACP) (IEEE 802.3ad)
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
• MAC notification
• MAC address aging configuration
• MAC address filtering
• Persistent MAC (sticky MAC)

Link Aggregation

• Multichassis link aggregation (MC-LAG) - Layer 2, Layer 3, VRRP, STP
• Redundant trunk group (RTG)
• LAG load sharing algorithm—bridged or routed (unicast or multicast) traffic:
• IP: SIP, Dynamic Internet Protocol (DIP), TCP/UDP source port, TCP/UDP destination port
• Layer 2 and non-IP: MAC SA, MAC DA, Ethertype, VLAN ID, source port
• FCoE packet: Source ID (SID), destination ID (DID), originator exchange ID (OXID), source port

Layer 3 Features (IPv4)

• Static routing
• Routing policy
• Routing protocols (RIP, OSPF, IS-IS, BGP, MBGP)
• Virtual Router Redundancy Protocol (VRRP)
• Bidirectional Forwarding Detection (BFD) protocol
• Virtual router
• Dynamic Host Configuration Protocol (DHCP) relay
• Proxy Address Resolution Protocol (ARP)
• Multicast Features
• Internet Group Management Protocol (IGMP): v1, v2, v3
• IGMP snooping: v1, v2, v3
• IGMP filter
• PIM-SM
• Multicast Source Discovery Protocol (MSDP)
• Security and Filters
• Secure interface login and password
• RADIUS
• TACACS+
• Ingress and egress filters: Allow and deny, port filters, VLAN filters, and routed filters, including management port filters
• Filter actions: Logging, system logging, reject, mirror to an interface, counters, assign forwarding class, permit, drop, police, mark
• SSH v1, v2
• Static ARP support
• Storm control, port error deactivate, and autorecovery
• Control plane denial-of-service (DoS) protection
• Dynamic ARP inspection (DAI)
  • Sticky MAC address
• DHCP snooping
• Filter based forwarding
• IP directed broadcast traffic forwarding
• IPv4 over GRE (encap and decap)

Layer 3 Features (IPv6)

• Static routing
• Routing protocols (RIPng, OSPF v3, IS-IS v6, BGP v6)
• Virtual Router Redundancy Protocol (VRRP v3)
• IPv6 CoS (BA, MF classification and rewrite, scheduling based on TC)
• IPv6 over MPLS LSPs (6PE)
• IPv6 ping
• IPv6 traceroute
• Neighbor discovery protocol
• Path MTU discovery
• SNMP, NTP, DNS, RADIUS, TACACS+, AAA
• Virtual router support for IPv6 unicast

Quality of Service (QoS)

• L2 and L3 QoS: Classification, rewrite, queuing
• Rate limiting:
  • Ingress policing: 1 rate 2 color, 2 rate 3 color
  • Egress policing: Policer, policer mark down action
  • Egress shaping: Per queue, per port
• 12 hardware queues per port (8 unicast and 4 multicast)
• Strict priority queuing (LLQ), smoothed deficit weighted round-robin (SDWRR), weighted random early detection (WRED), weighted tail drop
• 1p remarking
• L2 classification criteria: Interface, MAC address, Ethertype, 802.1p, VLAN
• Congestion avoidance capabilities: WRED
• Trust IEEE 802.1p (ingress)
• Remarking of bridged packets
• Priority-based flow control (PFC)—IEEE 802.1Qbb
• Data Center Bridging Exchange Protocol (DCBX), DCBx FCoE, and iSCSI type, length, and value (TLVs)
• Fibre Channel over Ethernet (FCoE)
• FCoE transit switch (FIP snooping ACL installation)
• Virtual fiber channel gateway
• FCoE session path learning
• FCoE session health monitoring
• Graceful restart for FIP snooping
• FC-BB-6 VN2VN snooping

Virtual Chassis

• 40GbE and 10GbE as Virtual Chassis port
• Virtual Chassis Routing Engine (RE) election
• Virtual Chassis pre-provisioning (plug and play)
• Auto-LAG formation of Virtual Chassis ports
• Mixed Virtual Chassis support between EX4300-EX4600 (in data center only)
• FCoE transit across Virtual Chassis members
• QoS on Virtual Chassis ports
• Local designated forwarding
• Graceful RE switchover (GRES)
• Nonstop routing (NSR)
• Nonstop bridging (NSB)
• Monitor distributed aggregate interface
• Control plane protection for virtual RE

High Availability

• ISSU (in standalone and MC-LAG configuration)
• Bidirectional Forwarding Detection (BFD)
• Uplink failure detection (UFD)
• Graceful Routing Engine switchover (GRES) in Virtual Chassis configuration
• Non-stop bridging (NSB) in Virtual Chassis configuration
• Non-stop routing (NSR) in Virtual Chassis configuration
• Non-stop software upgrade (NSSU) in Virtual Chassis configuration

MPLS

• VRF-Lite
• 2-label stack
• Static label-switched paths (LSPs)
• RSVP-based signaling of LSPs
• LDP-based signaling of LSPs
• LDP tunneling (LDP over RSVP)
• MPLS class of service (CoS)
• MPLS access control list (ACL)/policers
• MPLS LSR support
• Push, swap, pop, IP lookup
• IPv6 tunneling (6PE) (via IPv4 MPLS backbone)
• MPLS Operation, Administration, and Maintenance (OAM)
• LSP ping
• IPv4 L3VPN (RFC 2547, 4364)
• Ethernet-over-MPLS (L2 circuit)
• Layer 3 VPN (L3VPN)
• Layer 2 VPN (L2VPN)
• Link protection
• MPLS fast reroute (FRR)- 1:1 Protection
• Node-link protection

Management and Analytics Platforms

• Juniper Mist Wired Assurance for Campus
• Junos Space Network Director for Campus
• Junos Space^®Management 

Device Management and Operations

• Junos Web Software (J-Web)
• Role-based CLI management and access
• CLI via console, telnet, or SSH
• Extended ping and traceroute
• Junos OS configuration rescue and rollback
• Image rollback
• SNMP v1/v2/v3
• Junos XML management protocol
• sFlow v5
• DHCP server
• DHCP relay on L2 VLAN & L3 interfaces (with option 82)
• DHCP local server support
• High frequency statistics collection
• Beacon LED for port and system
• Automation and orchestration
• Zero touch provisioning (ZTP)
• OpenStack Neutron Plug-in
• Puppet
• Chef
• Junos OS event, commit, and operations scripts
• Ability to execute scripts written in Python/TCL/Perl

Traffic Mirroring

• Port-based
• LAG port
• VLAN-based
• Filter-based
• Mirror to local
• Local/L2 remote analyzer (SPAN, RSPAN for IPv4 and IPv6 frames)
• Mirror to remote destinations (L2 over VLAN)
• Insight Technology (microburst monitoring and statistics reporting)