Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Hardware

  • New EX4100 and EX4100-F switches—Starting in Junos OS Release 22.2R1, we introduce the EX4100 and EX4100-F family of switches that provide connectivity for high-density environments and scalability for network growth. You can deploy the EX4100 and EX4100-F stackable switches in small, medium, and large campus and branch enterprise networks. We support 24-port and 48-port switch variants with or without PoE+ and with different airflow directions. The switches have dedicated Virtual Chassis ports (VCPs) and uplink ports.

    We support the following switches: EX4100-48P, EX4100-48T, EX4100-48T-AFI, EX4100-48T-DC, EX4100-24P, EX4100-24T, EX4100-24T-DC, EX4100-F-48P, EX4100-F-48T, EX4100-F-24P, and EX4100-F-24T.

    Table 1: Features Supported on EX4100 and EX4100-F Switches

    Feature

    Description

    Access and authentication
    Chassis
    • FRU management and environment monitoring, and chassis support for EX4100 switches only, including:

      • PSU, fan, and temperature sensors monitoring

      • Power management support for two power supply units (PSUs) and two field-eplaceable fans. The system functions with one fan until it reaches shutdown temperature.

      • When temperature reported by various sensors crosses the specified threshold, the fan speed increases or decreases to regulate the temperature. If the temperature exceeds the shutdown threshold, system shutdown is initiated.

      [See Understanding Power Management on EX Series Switches.]

    CoS

    EVPN
    • Support for EVPN-VXLAN group-based policies. EX4100 and EX4100-F switches provide standards-based multilevel segmentation (also called group-based policy, or GBP) on the basis of Layer 3 virtual networks and group-based tags rather than IP-based filters. This support allows for different levels of access control for endpoints and applications even within the same VLAN. The EX4100 and EX4100-F switches also provide GBP support for locally switched traffic on VXLAN access ports.

      [See Micro and Macro Segmentation using Group Based Policy in a VXLAN.]

    • Support for the following Layer 2 VXLAN gateway services in an EVPN-VXLAN network:

      • 802.1X authentication, accounting, central web authentication (CWA) authentication, and captive portal

      • CoS

      • DHCPv4 and DHCPv6 snooping, dynamic ARP inspection (DAI), neighbor discovery inspection, IP source guard and IPv6 source guard, and router advertisement (RA) guard (no multihoming)

      • Firewall filters and policing

      • Storm control, port mirroring, and MAC filtering

      [See EVPN Feature Guide.]

    • Support for Layer 3 VXLAN gateway in EVPN-VXLAN centrally routed bridging (CRB) overlay or edge-routed bridging (ERB) overlay networks on standalone switches or Virtual Chassis. The switch supports the following features:

      The Virtual Chassis doesn’t support EVPN-VXLAN multihoming, but you can use the standalone switch as an EVPN-VXLAN provider edge (PE) device in multihoming use cases. We support the following Layer 2 VXLAN gateway features in an EVPN-VXLAN network:

      • Active/active multihoming

      • Proxy ARP use and ARP suppression, and Neighbor Discovery Protocol (NDP) use and NDP suppression on non-IRB interfaces

      • Ingress node replication for broadcast, unknown unicast, and multicast (BUM) traffic forwarding

      [See EVPN Feature Guide.]

    Flow monitoring

    Hardware

    • New EX4100 and EX4100-F switch models— We introduce the following models of the EX4100 Ethernet Switches:

      • EX4100-24P, EX4100-24T, and EX4100-24T-DC —Twenty-four 10/100/1000-Mbps RJ-45 ports, four 10/25-Gbps SFP28 Virtual Chassis ports (VCPs), and four 1000-Mbps/10-Gbps SFP+ uplink ports on the front panel. Only EX4100-24P has PoE+ enabled ports. EX4100-24T-DC is powered by DC power supplies; the rest of the switch models are powered by AC power supplies. All these switch models have AFO cooling.

      • EX4100-48P, EX4100-48T, EX4100-48T-AFI, EX4100-48T-DC—Forty-eight 10/100/1000-Mbps RJ-45 ports, four 10/25-Gbps SFP28 Virtual Chassis ports, and four 1000-Mbps/10Gbps SFP+ uplink ports on the front panel. Only EX4100-48P has PoE+ enabled ports. EX4100-48T-DC is powered by DC power supplies; the rest of the switch models are powered by AC power supplies. EX4100-48T-AFI has AFI cooling; the other switch models have AFO cooling.

      • EX4100-F-24P and EX4100-F-24T—Twenty-four 10/100/1000-Mbps RJ-45 ports, four 1/10 Gbps SFP+ Virtual Chassis ports, and four 1000-Mbps/10 Gbps SFP+ uplink ports on the front panel. Only EX4100-F-24P has PoE+ enabled ports. The switch models are powered by built-in AC power supplies and built-in AFO cooling.

      • EX4100-F-48P and EX4100-F-48T—Forty-eight 10/100/1000-Mbps RJ-45 ports, four 1/10 Gbps SFP+ Virtual Chassis ports, and four 1000-Mbps/10 Gbps SFP+ uplink ports on the front panel. Only EX4100-F-48P has PoE+ enabled ports. The switch models are powered by built-in AC power supplies and built-in AFO cooling.

    High availability and resiliency

    Interfaces

    • One multi-rate FPC and three multi-rate PICs.

      EX4100-48P, EX4100-48T, EX4100-24P, and EX4100-24T support the following speeds:

      • Downlink ports on PIC 0 (ports 0–47 on EX4100-48P and EX4100-48T, ports 0–23 on EX4100-24P and EX4100-24T) support 10-Mbps, 100-Mbps, and 1-Gbps speeds.

      • VCPs (ports 0–3 on PIC 1) support 4x10-Gbps or 4x25-Gbps speeds. If you convert the VCPs to uplink ports, ports 0 through 3 on PIC1 support 1-Gbps speeds.

      • Uplink ports (ports 0–3 on PIC 2) support 4x10-Gbps or 4x1-Gbps speeds.

      EX4100-F-48P, EX4100-F-48T, EX4100-F-24P, and EX4100-F-24T support the following speeds:

      • Downlink ports on PIC 0 (ports 0–47 for EX4100-F-48P and EX4100-F-48T, ports 0–23 for EX4100-F-24P and EX4100-F-24T) support 10-Mbps, 100-Mbps, and 1-Gbps speeds.

      • VCPs (ports 0–3 on PIC 1) support 4x10-Gbps speeds. If you convert the VCPs to uplink ports, ports 0 through 3 on PIC1 support 1-Gbps speeds.

      • Uplink ports (ports 0–3 on PIC 2) support 4x10-Gbps or 4x1-Gbps speeds.

      [See Port speed.]

    Junos telemetry interface

    • Support for JTI Packet Forwarding Engine and Routing Engine sensor. You can use the Junos telemetry interface (JTI) and remote procedure calls (gRPC) to stream statistics from the switches to an outside collector.

    • Support for secure packet capture to Cloud using JTI. You can use Junos telemetry interface (JTI) to capture packets from a device and send them over a secure channel to an external collector (in the cloud) for monitoring and analysis.

      To use secure packet capture, include the /junos/system/linecard/packet-capture resource path using a Junos remote procedure call (RPC).

    Layer 2 features

    Layer 3 features

    Licensing

    Network management and monitoring

    Software installation and upgrade

    • Support for DHCP option 43 suboption 8 to provide proxy server information in phone-home client. During the bootstrapping process, the phone-home client (PHC) can access the redirect server through a proxy server. The DHCP server uses DHCP option 43 suboption 8 to deliver the details of IPv4 and/or IPv6 proxy servers to the PHC. The DHCP daemon running on the target switch learns about the proxy servers in the initial DHCP cycle and then populates either the phc_vendor_specific_info.xml or the phc_v6_vendor-specific_info.xml file located in the /var/etc/ directory with the vendor-specific information.

    • Support for the phone-home client. The phone-home client (PHC) can securely provision an EX4100 or EX4100-F Virtual Chassis without requiring user interaction. You only need to:

      • Ensure that the Virtual Chassis members have the factory-default configuration.

      • Interconnect the member switches using dedicated or default-configured VCPs.

      • Connect the Virtual Chassis management port or any network port to the network.

      • Power on the Virtual Chassis members.

      The PHC automatically starts up on the Virtual Chassis and connects to the phone-home server (PHS). The PHS responds with bootstrapping information, including the Virtual Chassis topology, software image, and configuration. The PHC upgrades each Virtual Chassis member with the new image and applies the configuration, and the Virtual Chassis is ready to go.

      [See Obtaining Configurations and Software Image Without User Intervention Using Phone-Home Client.]

    • Secure boot support in U-boot phase to authenticate and verify the loaded software image while also preventing software-based attack.

      [See Software Installation and Upgrade Guide.]

    • ZTP with IPv6. You can use either the legacy DHCP-options-based zero-touch provisioning (ZTP) or the phone-home client (PHC) to provision software for the EX4100 and EX4100-F switches. If the switch boots up and receives DHCP options from the DHCP server for ZTP, ZTP resumes. If DHCP options are not present, the switch attempts the PHC method.

      The DHCP server uses DHCPv6 options 59 and 17 and applicable suboptions to exchange ZTP-related information between itself and the DHCP client.

      [See Zero Touch Provisioning Overview.]

    Timing

    Uplink failure detection

    • Support for debounce interval configuration. You can configure the debounce interval, which is the time (in seconds) that elapses before the downlink interfaces are brought up after a state change of the uplink interfaces.

      You configure the debounce-interval statement at the [edit protocols uplink-failure-detection group group-name] hierarchy level.

      [See Uplink Failure Detection.]

    Virtual Chassis

    • Support for Virtual Chassis configuration. You can interconnect an EX4100 or EX4100 Multigigabit or EX4100-F switch with other EX4100 or EX4100-F switches into a Virtual Chassis in non-mixed mode.

      [See Virtual Chassis Overview for Switches.]