Note: Some software features require the purchase of a separate license.

Routing

Open Shortest Path First (OSPF)

Border Gateway Protocol (BGP)

Routing Information Protocol version 1 (RIPv1) and version 2 (RIPv2)

Static routes

Intermediate System-to-Intermediate System (IS-IS)

Connectionless Network Services (CLNS):

• End System-to-Intermediate System (ES-IS) protocol
• IS-IS extensions
• BGP extensions
• Static routes

Note: CLNS is available only in packet-based mode.

Multiprotocol Label Switching (MPLS):

• Layer 2 and Layer 3 virtual private networks (VPNs)
• VPN routing and forwarding (VRF) table labels
• Traffic engineering protocols such as Label Distribution Protocol (LDP) and Resource Reservation Protocol (RSVP)

Note: MPLS is available only in packet-based mode.

Note: Security features cannot be configured when MPLS/IPv6 is used.

Internet protocols

• IPv4
• IPv6 routing and forwarding

IP address management

• Static addresses
• Dynamic Host Configuration Protocol (DHCP) 8

Encapsulation

Ethernet:

• Media access control (MAC) encapsulation
• 802.1p tagging
• Point-to-Point Protocol over Ethernet (PPPoE)
• Circuit cross-connect (CCC)
• Translational cross-connect (TCC)

Synchronous Point-to-Point Protocol (PPP)

Frame Relay

High-level Data Link Control (HDLC)

802.1Q filtering and forwarding

Multilink Frame Relay (MFR)

Multilink PPP

Ethernet switching

Line-rate Ethernet switching provided by XPIMs, including support for VLANs, spanning tree, link aggregation and authentication

Security

IPsec VPN for site-to-site or remote access encrypted tunneling

Antivirus filtering, including full antivirus file-based scanning or Express-AV packet-based scanning

Antispam and anti-phishing filtering

Web filtering

Content filtering based on file types and types of files within HTTP/HTTPS

Unified threat management (UTM)

Network attack detection

Denial-of-service (DoS) and distributed denial-of-service (DDoS) protection

Generic routing encapsulation (GRE), IP-over-IP, and IP Security (IPsec) tunnels

Advanced Encryption Standard (AES) 128-bit, 192-bit, and 256-bit

56-bit Data Encryption Standard (DES) and 168-bit 3DES encryption

MD5 and Secure Hash Algorithm (SHA-1) authentication

Stateful firewall and stateless packet filters

Network Address Translation (NAT)

System management

JUNOScript XML application programming interface (API)

J-Web browser interface—For services gateway configuration and management

JUNOS command-line interface (CLI)—For services gateway configuration and management through the console, Telnet, or SSH

Simple Network Management Protocol version 1 (SNMPv1) and SNMPv2

Network and Security Manager (NSM)

J-Flow flow monitoring and accounting

Traffic analysis

Packet capture (PCAP)

Real-time performance monitoring (RPM)

System log

Activity logging and monitoring

J-Web event viewer

Traceroute

Supports the following external administrator databases:

• RADIUS/AAA
• TACACS+

Administration

Autoinstallation

Configuration rollback

Button-operated configuration rescue (CONFIG)

Confirmation of configuration changes

Software upgrades

Supports the following features for automating network operations and troubleshooting:

• Commit scripts
• Operation scripts
• Event policies

Online Insertion and Removal (OIR)

All GPIMs and XPIMs are Online Insertion and Removal (OIR) capable.