juniper M系列路由器产品介绍
俊弘网络NSMXpress和NSM3000产品说明书
DATASHEETProduct DescriptionJuniper Networks ® NSMXpress and NSM3000 are purpose built security hardenedappliance versions of Juniper Networks Network and Security Manager (NSM) optimized towards providing a single centralized management solution to effectively manage Juniper Networks family of devices including routers, switches, and firewalls.While the NSMXpress is primarily geared towards small to mid market, the NSM3000 scales to the requirements of large enterprise customers with the capability to manage up to 1,500 devices. These appliances, which install in minutes with high availability (HA) support, not only simplify the complexity of device administration by providing a single integrated management interface that controls every device parameter, but also eliminate the need to have dedicated resources for maintaining the management solution. NSM3000 and NSMXpress have the following features:• Provides an appliance version of NSM with a security hardened OS• Offers centralized, end-to-end device life cycle management for granular control of configuration, network settings and security policies • Allows for delegation of administrative roles, which provides relevant access to those who need it • Offers easy installation with operational efficiency that delivers lower total cost of ownership (TCO)• Provides dedicated HA supportProduct OverviewNow more than ever, networkoperators need the ability to easily manage security policies and tohave visibility into potential security concerns in the network. At thesame time, they need to invest their time in monitoring and operating secure networks. Juniper Networks NSM3000 and NSMXpress enable IT departments not only to control the entire device life cycle with a single, centralized solution, but also provides visibility with a complete set of investigative and reporting tools.NSM3000)Features and BenefitsHardened OSJuniper Networks security team monitors and maintains the OS, which is optimized for performance and ers don’t have to worry about security vulnerabilities, support or patch management for the OS.Firewall/VPN (SSG5, SSG20, SRX100,SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650)3001500NSM3000in HA ModeNSM User InterfaceNSM3000SA SeriesFirewall/VPN EX Series NSM3000AdministrationWeb UIFigure 1: Managed Juniper Networks devicesNSMXPRESSNSM3000SpecificationsJuniper Networks Services and Supporthigh-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizingrisk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit /us/en/products-services.Juniper Networks Device and Software Support• EX Series Ethernet Switches• IC Series Unified Access Control AppliancesIC Series version 2.2 and above• ISG Series Integrated Security Gateways• IDP Series Intrusion Detection and Prevention Appliances IDP Series version 4.0 and above• J Series Services Routers• M Series Multiservice Edge Routers• MX Series 3D Universal Edge Routers• SRX Series Services Gateways• NetScreen Series Security SystemsScreenOS version 5.0.0 and above• SA Series SSL VPN AppliancesSA Series version 6.3 and above• SSG Series Secure Services Gateways• Junos® Operating System SupportJunos OS version 9.0 and above; forward support for Junos OS 9.6 software through schema updateNote: For more information on Network and Security Manager, please refer to the datasheet.About Juniper NetworksJuniper Networks is in the business of network innovation. From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. The company serves customers and partners worldwide. Additional information can be found at .1000204-007-EN Apr 2014Copyright 2014 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos and QFabric are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All othertrademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.APAC and EMEA Headquarters Juniper Networks International B.V. Boeing Avenue 240 1119 PZ Schiphol-RijkAmsterdam, The Netherlands Phone: +31.0.207.125.700 Fax: +31.0.207.125.701Corporate and Sales Headquarters Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USAPhone: 888.JUNIPER (888.586.4737) or +1.408.745.2000 Fax: +1.408.745.2100 To purchase Juniper Networks solutions, please contact your Juniper Networks representative at +1-866-298-6428 or authorized reseller.。
瞻博网络Juniper Networks通用城域网路由器产品说明书
Data Sheet经过环境强化的小型 ACX 系列平台可提供全面的路由和安全服务、应用程序感知和控制，以及可保证业务连续性和弹性的高可用性，因此成为关键任务通信网络的完美之选。
ACX 系列平台可帮助传统 TDM/SONET 无缝迁移至以太网/IP，同时能够对传统服务提供支持。
移动回传不断加快的创新速度正在迫使移动运营商迁移至 LTE-Advanced 和5G 功能。
LTE-Advanced 和 5G 场所对网络基础架构的容量、延迟性、同步性和安全性提出了更严苛的要求。
ACX 系列能够以低至 60 Gbps 的各类小型设备支持 1GbE/10GbE 接口和吞吐量，满足了 LTE-Advanced 和 5G 的容量要求。
除了符合扩展所需的高容量和高密度要求，ACX 系列还以高精度定时、先进的安全功能以及更强的 SLA 管理功能来满足终端用户的质量要求。
ACX 系列支持所有移动服务范围，包括 2G/3G 的高速分组接入(HSPA)、4G LTE、LTE-Advanced 和小型基站。
在典型的回传部署场景中，ACX500 会被用作小型基站路由器和主时钟，而ACX1000 系列、ACX2000 系列或 ACX4000 则是大型基站路由器。
企业网络和户外网络随着企业和政府踏上数字化变革之旅，他们需要部署和升级任务关键型通信网络，而其中一些网络位于严酷恶劣的环境中，例如，提供监测控制和数据采集 (SCADA) 系统连接的户外网络。
电力、油气、采矿、铁路和运输、国防和公共安全行业等领域都面临这种情况。
架构和关键组件ACX 系列路由器采用 Juniper Networks Junos®操作系统，与瞻博网络 MX 系列 3D 通用边缘路由器形成互补；它提供针对服务提供商和企业分支机构进行了优化的灵活且可扩展的路由产品组合，以支持快速增长的移动、视频和云计算应用程序。
ACX 系列平台将瞻博网络在 IP/MPLS 领域从核心到边缘的成熟领先技术引入了网络的接入层。
精选-网络-Juniper-M系列产品分析(锐捷RSR-E系列)
Juniper M Series－基本规格（一）
项目 系统架构
吞吐量（大包）
整机包处理能力（小包） 路由引擎数量
路由引擎CPU
路由引擎接口及存储 转发引擎数量
转发引擎
转发引擎CPU 固定接口 PIC集中器（FPC线卡） 最大PIC接口卡数量 FPC吞吐量
业务模块
HCM部件 模块热插拔 最大重量 电源模块 电源功耗AC/DC/最大 尺寸（高×宽×深）
M7i 集中式转发 8.4Gbps（基本型，3.2Gbps×2＋1Gbps×2） 10Gbps（增强型，4Gbps×2＋1Gbps×2） 16Mpps 1个路由引擎RE 赛扬处理器（400MHz / Intel Pentium III，850MHz 1×FE、1×AUX，1×Console，带20GB~40GB 硬盘 1(CFEB/CFEBE） ASIC Internet Processor II转发(基本型）或I-chip ASIC（增强型） PPC8245，266MHz（增强型为1GHz的CPU） 1×GE或2×FE 集成，1个 4 3.2G全双工(配合CFEB）/ 4G全双工(配合CFEBE） 内置ASM及MSM、外置AS-PIC、MS-PIC、LS-PIC、 Tunnel-PIC、ES－PIC 不支持 支持 17.3Kg 2，“1+1”备份 400W/378W/274W 89mm×445mm×457mm（2U）
Juniper M10i
（锐捷RS-08E)
Juniper M系列产品概述
Juniper M40e Juniper M120（（锐捷RS-16E)
M系列产品概述－关键特征
M7i
吞吐量（带宽） 10Gbps吞吐量 （5Gbps全双工）
Juniper MX产品介绍
Copyright © 2007 Juniper Networks, Inc.
Proprietary and Confidential
‹#›
MX960系统组件如何连接?
A-PEM3 A-PEM2 A-PEM1 A-PEM0 A-FAN0 A-FAN1 A-FPB0
A-RE0 A-SCB0
Proprietary and Confidential
‹#›
MX960平台
整机一共有14个槽位 物理参数
• 高度: 16RU (大约1/3机架), 深度: 小于800mm深
可靠的硬件
• • • • • • • • 无源背板 冗余路由引擎 冗余交换矩阵 (2+1) 冗余风扇和电源 从前向后送风的冷却方式, 多重风扇冷却 容纳2个风扇托盘 (1+1冗余) 容纳4个电源 (2+2直流, 3+1交流) 电源线缆位于机框后部
Proprietary and Confidential
‹#›
MX960 前端控制面板
电源指示灯 风扇托盘指示灯 路由引擎0指示灯 路由引擎1指示灯
黄色告警 红色告警 告警切断装置 告警中继
业务槽位上线/下线按钮
Copyright © 2007 Juniper Networks, Inc.
• 1.3Ghz处理器 /w 2GB内存 • 2Ghz处理器 /w 4GB内存
Copyright © 2007 Juniper Networks, Inc.
Proprietary and Confidential
‹#›
MX960 组件
控制面板
上部风扇托盘 DPC板卡
交换矩阵卡
Juniper MX系列路由器介绍
瞻博网络MX960 3D Universal Edge路由器是高密度的第二层 和第三层以太网平台，设计用于部署在多种企业和电信运营商以 太网环境中。对于电信运营商，MX960支持广泛的通用边缘应 用，包括面向多点连接的VPLS服务、面向点对点业务的虚拟专 线服务、在整个以太网网络上全面支持MPLS VPN、园区/企业 边缘的以太网汇聚服务以及多业务边缘的以太网汇聚服务等。对 于企业，MX960可用于园区与数据中心的核心和汇聚以及WAN 网关。
高密度端口集中器 (DPC) 为提高以太网密度进行了专门的优 化，最多可支持40个千兆以太网端口或4个万兆以太网端口。 DPC将数据包转发和以太网接口以及40 Gbps数据包转发引擎 (PFE) 无缝集成。DPC与电源和交换控制板 (SCB) 相连接。
MPC专为提高灵活性而设计，可以利用Junos Trio芯片组提供 业界密度最高的千兆以太网和万兆以太网端口，并可在所有MX 产品系列上提供灵活的模块化接口。这些先进的能力使客户可以 灵活地混合和匹配接口，获得专用于特定服务的、“随增长随投 资”的配置。MPC配有PFE，可提供高达120 Gbps的全面的第 三层路由 (IPv4和IPv6) 、第二层交换、内联服务以及每MX系 列插槽先进的H-QoS。
企业和电信运营商希望能够提供连接性和智能业务，以太网正迅速成为他们的首选技 术。虽然他们的要求在某些方面可能有所差异，但当前的先进业务正迫使他们构建更高 性能的网络，以满足服务质量 (QoS) 、网络性能和可用性等方面日渐提高的要求。
除了这些基本要求之外，希望为用户提供差异化体验的电信运营商还发现，他们必须扩 展网络以支持日益增长的带宽、业务和用户。在这三方面扩展容量对于确保下一代业务 获得差异化竞争优势至关重要。
(完整版)Juniper产品和销售要点介绍
Juniper新一代防火墙产品SRX3000系列
SRX3400 关键部件冗余 3U/7扩展槽位 防火墙性能 – 10/20 Gbps VPN – 8 Gbps IDP – 6 Gbps Concurrent sessions – 1M New and sustained cps – 120k Concurrent VPN tunnels – 10k
SRX650 SRX240 SRX210
T Series MX Series
TX Matrix Plus
EX8208
EX8216
J Series
M Series
EX2500
EX3200
EX4200
2
Copyright © 2009 JEuXnip2e2r N0e0tworks, Inc.
SRX100
5
SRX210
SRX240
SRX650
Copyright © 2009 Juniper Networks, Inc.
SRX3600 5U, 6+6 CFMs, 8+4 GE, 2 RE*, 2+2 PS, 30/10/10 Gbps, 2M sessions, 175kcps, 20k IPSEC tunnels
▪ 从万兆到100G的应用层 智能防火墙
▪ 无损失集成入侵防御、应 用识别、QoS、VPN
▪ 集成万兆入侵防御与万兆 VPN的防火墙
▪ 简化网络结构、减少设备 数量、简化运维管理
Juniper产品介绍
防火墙报文转发路径
Inbound packet
Existing session? No
Yes
FORWARD PACKET
Destination lookup Yes Crossing zones/ intra-zone block?
Dest. reachable?
No
DROP PACKET
Yes
Policy lookup
300Mbps
远程办公室/中小企业 中小分支机构 远程办公室 中小企业/中小分支机构 中小企业机构 业/€5Ž§ƒÅ‹机构 机业总 /数据 数
集中式与分布式
• 集中式，有一个专门的硬件模块来对数据包进行 转发。Screen OS采用集中式架构。 • 分布式，它不需要一个专门的模块来为整个机箱 服务做包的转发，包转发可以由每个接口模块上 的芯片独立完成。JUNOS采用分布式架构。
At least 8 PoE Ports
OIR-capable uplink module
EX 3200 后部
• • •
1 GB internal Flash
– External USB Flash
512 MB system memory Management
– Console – Out of band
– 每个标准机柜可安装三个机框 – 所有组件在前面板
• LCD控制板
– 轻松的系统识别和监控
• 两种发货选择
– 基本配置:
• 1 SRE, 1 SF, 风扇盘, 2 2kW AC 电源
– 冗余配置:
• 2 SRE, 1SF, 风扇盘, 6 2kW AC 电源
近看EX 8208
LCD Display 8 dedicated 100G line card slots 1+1 redundant Route Engines 2+1 redundant Switch Fabrics (MX960-style)
Juniper路由产品简介
JUNOS Internet软件 RE
转发表
更新
Internet
处理器 II
PFE
转发表
交换结构
I/O 卡
I/O 卡
Juniper路由产品简介
ASIC实现IP高性能转发服务
控制与转发分离的架构, 服务与性能兼得
使用特定ASIC开启多种业务, 同时保持性能的报文过 滤, DDoS识别，限速, CAR, QoS, Differserv, DS-TE
600 300 200Biblioteka J2320J2350
J4350
J6350
小型办公室
中小型分支
中型企业
Juniper路由产品简介
M系列高性能企业路由器
▪ 运营商级的高可靠性满足企业网络高性能的需求 ▪ 依靠IP/MPLS, IPv6, QoS, multicast 以及 VPN 等高级技术，为网络提供服务 ▪ 提供灵活的服务: NAT, stateful firewall, J-Flow accounting, IPSec, Tunnel, cRTP ▪ JUNOS软件确保有效而准确的技术部署
2007 T1600
超过150个用户网络部署了2500台 T-series 路由器
投资保护 ------7-10 年的生命周期
持续的扩展性 持续的扩展能力
Juniper路由产品简介
Juniper M/MX-Series 产品-大中型园区网的选择
Gbps 960
480
所有M系列路由器使用统一的JUNOS系统
1st 40G platform (8) Ports in ½ rack
Optimal Scale 3rd Dimension
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
1GE 10GE 40GE 100GE 400GE 20 320 60 40 80 520
2012
2013
2014
800 960 120
2015
2016
2017+
1920 480 160(80) 320 80 800 160
Shipping MX MPC and client optics summary
1H 2016 1.6T on MX2K
MPC8E, MPC9E, SFB2, MPC7E-10G 100GE DWDM
2H 2016+ (Scoping)
MX Compact Router NG Small/Med - Edge Platforms NG MPCs on MX RPD Multi-core SCG2.5
Per Slot Capacity
Interface 1GE 10GE 40GE 100GE 400GE 1 16 3 2 4 26 2012 2013 2014 40 48 6 8(4) 16 4 96 24 40 8 2015 2016 2017+
Per Chassis Capacity
Interface
NG-MPC2E and MPC3E Line Cards
Universal Supports all types of interfaces JAM First in the Industry to offer Junos Continuity Business Model License based medium scale HQoS option Power Introduces Dynamic Power Management capability Scale & perf Delivers twice the scale as predecessor MPC
MPC3 Modular Line Card Applications 130 GbE Card
WAN Edge Services Full MPLS Features All MX Functionality
Experience, Economics & Ecosystem
Up to 5M IP Routes Full scale L3VPN and VPLS Service Rich Processing
MX UPDATE
MX PLM team
160Tbps 64 Tbps
MX Roadmap
One TRIO CHIPSET Architecture One UNIVERSAL EDGE
15 Tbps 6 Tbps 26 Tbps 10 Tbps 5 Tbps 2 Tbps
80 Tbps 32 Tbps
Software
64bit RPD CPP Hypermode for Web2.0
IPv6 Ready Segment Routing NG vMX
10GE MACSEC vCCAP
Innovation
G.709 OTN Framing
Node Virtualization Scale-out Edge
NEW INSERTION
MPC2E-3D-NG-Q MPC3E-3D-NG
JUNOS Continuity
2nd Generation Trio Higher Scale & Throughput More functionality
MPC3E-3D-NG-Q
MPC3E - 100GE SOLUTION
Characteristics
130Gbps aggregate bandwidth per MPC3 2 MICs per MPC3 slot Modular MPC
MIC Form Factors
New MICS Supported 1x100GE CFP 1x100GE CXP 2x40GE QSFP 10x10GE SFP+ Other MICS Supported 20x1GE SFP – 1H 2012 2x10GE XFP – 2H 2012 Not Supported 4x10GE MIC 40x1GE TX
32x10GE SFPP ports Applications 260G MPC Full Scale Routing VPLS, L3VPN, L2VPN Service Rich
Now Shipping
MPC5E 24 x 10GE or 6 x 40GE
Description
240 Gbps line card with flexible 10GE/40GE interface configuration options, increased scale and OTN support
MIC Slot 0
JAM 14.R4
NG-MPC
XL
XM
MIC Slot 1
XQ
MODEL
BW
HQOS
MPC2E-3D-NG
80G
80G 130G 130G
License
Yes License Yes
IMPROVE ROI Universal MPCs License Based HQoS
SEAMLESS DEPLOYMENT
Per Chassis Capacity
Interface 1GE 2H 2012 1H 2013 2H 2015 440 2016 2017+
10GE
40GE 100GE
176
33 11
256
286
66
528
132 44
1320
22
22
132
MX2010 and MX2020 Line Rate Ports
2 端口10GE XFP光口
MIC-3D-4XGE-XFP
4 端口10GE XFP 光口，only for mpc2
MIC-3D-40GE-TX
40 端口 10/100/1000Mbps 电口
MIC3-3D-10XGE-SFPP
10端口10Gsfp+ 接口，only for mpc3 MIC3-3D-1X100GE-CFP 一口100G CFP接口，only for mpc3 MIC3-3D-2X40GE-QSFPP 两口40G QSPF接口，only for mpc3
ICHIP 10G
Gen 1 TRIO (MQ, LU) 40G MPC1E 80G MPC2E 16x10G MPC
Gen 1.5 TRIO (XM, LU)
240G MPC5E
130G MPC3E 260G MPC4E
480G MPC6E
40G DPC
2007
2010–2011
2012
2014
2015
N x 10Gbps
160Gbps
160 Gbps
vMX
MX 80
MX 104
MX 240
MX 480
MX 960
MX 2010
MX 2020
2017/2018 Target 2015/2016 Target
2H 2014 500G on MX2K
Hardware MPC5: 240G NG HQoS MPC6: 500G MX2K Native Card
2017+
MX240, MX480 and MX960 Line Rate Ports
Per Slot Capacity
Interface 1GE 10GE 40GE 100GE 1 16 3 2 24 1H 2012 2H 2012 2H 2015 40 26 6 2 4 40/48 12 12 120 2016 2017+
MPC4E – Monolithic 10 and 100G MPC
MPC has 260G of bandwidth capacity
2x100G CFP + 8x10G SFPP ports
Line Card 1: 3ne Card 2: 2x100GE CFP & 8x10GE SFP+ ports LAN and WAN PHY on 10GE ports Port based Queuing
NG MX960 MPC
1.2T to 1.5T
TBD
TBD