CÔNG TY TNHH SIÊU SIÊU NHỎ

Thông số kỹ thuật Juniper EX3400-48T

Additional Feature Specifications:

• 250 Mpps

Layer 2 Features

• Maximum MAC addresses in hardware: 32,000
• Jumbo frames: 9216 bytes
• Number of VLANs supported: 4,096
• Range of possible VLAN IDs: 1-4094
• Port-based VLAN
• MAC-based VLAN
• Voice VLAN
• Compatible with Per-VLAN Spanning Tree Plus (PVST+)
• RVI (Routed VLAN Interface)
• Persistent MAC (sticky MAC)
• - RSTP and VSTP running concurrently
• IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
• LLDP-MED with VoIP integration
• IEEE 802.1ae Media Access Control Security (MACsec)
• IEEE 802.1ak Multiple VLAN Registration Protocol (MVRP)
• IEEE 802.1br: Bridge Port Extension
• IEEE 802.1D: Spanning Tree Protocol
• IEEE 802.1p: CoS prioritization
• IEEE 802.1Q-in-Q: VLAN stacking
• IEEE 802.1Q: VLAN tagging
• IEEE 802.1s: Multiple Spanning Tree Protocol (MSTP)
• Number of MST instances supported: 64
• Number of VSTP instances supported: 510
• IEEE 802.1w: Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1X: Port access control
• IEEE 802.3: 10BASE-T
• IEEE 802.3ab: 1000BASE-T
• IEEE 802.3ad: Link Aggregation Control Protocol (LACP)
• IEEE 802.1ad Q-in-Q tunneling
• IEEE 802.3ae: 10-Gigabit Ethernet
• IEEE 802.3af: PoE
• IEEE 802.3at: PoE+
• IEEE 802.3u: 100BASE-T
• IEEE 802.3z: 1000BASE-X
• Layer 3 VLAN-tagged subinterface
• PVLAN support
• Multicast VLAN routing
• Adding/removing single tag
• Filter-based SVLAN tagging
• Flexible CoS (outer .1P marking)

Layer 3 Features: IPv4

• Maximum number of ARP entries: 16,000
• Maximum number of IPv4 unicast routes in hardware: 14,000 prefixes; 36,000 host routes
• Maximum number of IPv4 multicast routes in hardware: 18,000 groups; 4,000 multicast routes
• Routing Protocols: RIP v1/v2, OSPF v2
• Static routing
• Layer 3 redundancy: VRRP
• IP directed broadcast—traffic forwarding
• Virtual router (VRF-Lite) supporting RIP, OSPF
• Routing policy
• Filter-based forwarding (FBF)
• Unicast reverse-path forwarding

Layer 3 Features: IPv6

• Maximum number of Neighbor Discovery entries: 8,000
• Maximum number of IPv6 unicast routes in hardware: 3,500 prefixes; 18,000 host routes
• Maximum number of IPv6 multicast routes in hardware: 9,000 groups; 2,000 multicast routes
• Neighbor discovery, system logging, Telnet, SSH, Junos Web, SNMP, Network Time Protocol (NTP), Domain Name System (DNS)
• Routing protocols: RIPng, OSPF v3
• Static routing
• IPv6 ACL (PACL, VACL, RACL)
• IPv6 CoS (BA, MF classification and rewrite, scheduling based on TC)
• MLDv1/v2 snooping
• IPv6 ping, traceroute
• IPv6 stateless auto-configuration
• IPv6 Layer 3 forwarding in hardware
• IPv6 Layer 3 redundancy: VRRP v6
• Virtual Router support for IPv6 unicast
• PIM for IPv6 multicast

Access control lists (ACLs) (Junos OS firewall filters)

• Port-based ACL (PACL)—ingress and egress
• VLAN-based ACL (VACL)—ingress and egress
• Router-based ACL (RACL)—ingress and egress
• ACL entries (ACE) in hardware per system: 1500
• ACL counter for denied packets
• ACL counter for permitted packets
• Ability to add/remove/change ACL entries in middle of list (ACL editing)
• L2-L4 ACL
• Trusted Network Connect (TNC) certified
• Static MAC authentication
• MAC-RADIUS
• Control plane denial-of-service (DoS) protection
• Firewall filter on me0 interface (control plane protection)
• Captive portal—Layer 2 interfaces
• Fallback authentication
• Media Access Control Security (MACsec)

Access Security

• MAC limiting
• Allowed MAC addresses, configurable per port
• Dynamic ARP inspection (DAI)
• Proxy ARP
• Static ARP support
• DHCP snooping
• 802.1X port-based
• 802.1X multiple supplicants
• 802.1X with VLAN assignment
• 802.1X with authentication bypass access (based on host MAC address)
• 802.1X with VoIP VLAN support
• 802.1X dynamic access control list (ACL) based on RADIUS attributes
• 802.1X supported EAP types: MD5, Transport Layer Security (TLS), Tunneled Transport Layer Security (TTLS), Protected Extensible Authentication Protocol (PEAP)
• IPv6 RA Guard
• IPv6 Neighbor Discovery Inspection
• Media Access Control security (MACsec)

High Availability

• Link aggregation: 802.3ad (LACP) support
• Number of link aggregation groups (LAGs) supported: 128
• Maximum number of ports per LAG: 16
• Tagged ports support in LAG
• Graceful Route Engine switchover (GRES) for IGMP v1/v2/ v3 snooping
• Nonstop routing (OSPF v1/v2/v3, RIP/RIPng, PIM)
• Nonstop software upgrade (NSSU)

Quality of Service (QoS)

• Layer 2 QoS
• Layer 3 QoS
• Ingress policing: two-rate three-color
• Hardware queues per port: 12 (8 unicast, 4 multicast)
• Scheduling methods (egress): Strict Priority (SP), SDWRR
• 802.1p, DiffServ code point (DSCP/IP) precedence trust and marking
• L2-L4 classification criteria, including Interface, MAC address, EtherType, 802.1p, VLAN, IP address, DSCP/IP precedence, and TCP/UDP port numbers
• Congestion avoidance capabilities: Tail drop

Multicast

• IGMP snooping entries: 1000
• IGMP snooping
• IGMP v1/v2/v3
• PIM SM, PIM SSM, PIM DM
• VRF-Lite support for PIM and IBMP
• MLD v1/v2 snooping
• IGMP filter
• Multicast Source Discovery Protocol (MSDP)
• PIM for IPv6 multicast