Junos 11.1 Release Highlights

Juniper introduces new ALGs; Layer 2, subscriber access management and IPv4 to IPv6 functionality; 64-bit Junos OS on M and MX Series Routers; and more.

Application-level Gateways (ALG)
ALGs intercept and analyze specified traffic, allocate resources and define dynamic policies to permit traffic to pass securely through a device. M and MX Series Routers with Multiservices PICs now support ALGs using Junos Services Framework (JSF) for Stateful firewall and NAT.

Layer 2
Layer 2 traffic policing is now available at the pseudowire in MX Series 3D Universal Edge Routers as a way to limit the traffic sent over the core. Additionally, Trio MPC/MIC interfaces now support new Layer 2 functionality, including Ethernet OAM and trunk port features.

Subscriber Access Management
New subscriber access management capabilities for MX Series 3D Universal Edge Routers include event tracing, preservation of subscriber sessions, DHCPv6 Layer 3 wholesale configuration, and idle timeouts for subscriber sessions.

Softwire Support for IPv4 to IPv6 Transition
Softwire tunnels enable a phased transition from IPv4 to IPv6. Junos 11.1 provides support for both 6rd and Dual-Stack Lite technologies for different transition scenarios.

64-bit Junos OS
Extension of support of 64-bit Junos OS features to M and MX Series Routers.

Juniper introduces chassis clustering on the SRX 1400, AppSecure application firewall on additional devices, heuristic detection of encrypted P2P applications, Sophos antivirus, Dynamic VPN access through the Junos Pulse client, a DS3/E3 GPIM, extended support for Layer 2 transparent mode, NAT support for multicast, IPv6 features, and more.

Chassis Clustering
Chassis clustering support is now available on the SRX1400 Services Gateways. To form a chassis cluster, two of the same kind of supported SRX1400 devices are combined to act as a single system that enforces the same overall security.

AppSecure Application Firewall
The application firewall functionality enforces policies based on the results of the application identification process (pattern matching, protocol decoding, and heuristics). AppSecure application firewall is available on the SRX3400, SRX3600, SRX5600 and SRX5800 devices. 

Heuristic Detection of Encrypted P2P Applications
Peer-to-peer applications such as Skype contain encrypted data packets, which prevent the SRX Series devices from identifying these packets with current application signatures. Heuristics improve the detection rate. This feature is supported on SRX1400, SRX3400, SRX3600, SRX5600 and SRX5800 devices.

Sophos Antivirus
Sophos antivirus is now available as an in-the-cloud antivirus solution that provides scalability while using a small amount of system resources. This feature is available on SRX100, SRX210, SRX220, SRX240 and SRX650 devices.

Dynamic VPN Access through the Junos Pulse Client
Junos Pulse supports remote virtual private network tunnel connectivity to theSRX100, SRX210, SRX220, SRX240, and SRX650 devices over LANs and WANs.

1-Port Clear Channel DS3/E3 GPIM
This new interface module provides physical connections to a WAN in the SRX650 Services Gateway.

Layer 2 Transparent Mode
SRX Series devices provide Layer 2 transparent mode, which provides security policies enforced on the packets before switching functions are enforced. Support of this feature is now added for the SRX100, SRX210, SRX220, SRX240 and SRX650 devices.

NAT Support for Multicast
NAT support for multicast flows is now available for all SRX Series and J Series devices.

IPv6
IDP now supports IPv6 inspection. Additionally, IPv6 IKE and IPv6 IPsec packet processing support is extended to the SRX100, SRX210, SRX240 and SRX650 Services Gateways.

Juniper introduces the QFX3500 Switch; support for Virtual Chassis technology on the EX4500 switches; new extra-scale line cards, optical transceivers and MPLS-based VPN support for the EX8200 switches; Layer 2 and Layer 3 protocol support for the EX200 switches; resilient dual-route partitions, uplink failure detection, and more.

QFX3500 Switch
This high-performance, ultra-low latency, feature-rich L2/L3 switch delivers wire-speed 10GbE throughput and standards-based Fibre Channel I/O convergence capabilities for the most demanding data center environments while providing a fabric-ready solution for Juniper's QFabric architecture. Learn more.

Virtual Chassis
Virtual Chassis technology is now available on the EX4500 switches to interconnect multiple physical switches and create a single logical device that simplifies the L2 network along with its management. A Virtual Chassis module is necessary to form a Virtual Chassis by connecting EX4500 switches to other EX4500 switches or to EX4200 switches in a common Virtual Chassis configuration. Learn more.

New Extra Scale Line Cards and Optical Transceivers
Three new extra-scale line cards for the EX8200 switches provide larger route table sizes to store more IPv4 and IPv6 unicast routes. in addition, the SFP+ uplink modules on EX4500 switches now support the new EX-SFP-10GE-ER optical transceiver (10GBASE-ER, 40 km), and the 40-port SFP+ line cards in EX8200 switches now support many additional optical transceivers.

High Availability
Nonstop software upgrade (NSSU) is now supported on EX8200 switches with Virtual Chassis technology. NSSU upgrades the software running on all Routing Engines in an EX8200 Virtual Chassis configuration with minimal disruption to traffic. Additionally, EX8200 switches with Virtual Chassis technology now support Virtual Router Redundancy Protocol (VRRP), redundant trunk groups, and other HA capabilities.

MPLS-based Layer 2 VPNs and Layer 3 VPNs
New support for MPLS-based Layer 2 and Layer 3 virtual private networks (VPNs) and MPLS Layer 2 Circuits on the EX8200 switches allows for secure connection of geographically diverse sites across an MPLS network. Learn more.

Layer 2 and Layer 3 Protocols
EX2200 switches now support Ethernet OAM link fault management (LFM); Layer 2 protocol tunneling (L2PT); Q-in-Q tunneling; VLAN ID translation; and OSPF, IGMP, and PIM protocols. Junos OS 11.1 also adds various Layer 2 and Layer 3 protocol support to EX8200 switches.

Resilient Dual-Root Partitions
Resilient dual-root partitions offer additional resiliency to switches by providing a preinstalled Junos image in the second root partition of the file system, and by allowing the switch to boot transparently from the second root partition if the system fails to boot from the primary root partition, and also by providing separation of the root Junos file system from the file system.

Uplink Failure Detection
Uplink failure detection on EX Series switches allows a switch to detect link failure on uplink interfaces and to propagate the failure to the downlink interfaces so that servers connected to those downlinks can switch over to secondary interfaces.