Hardware

Class of service

CoS support on EVPN-VXLAN.

[See CoS Support on EVPN VXLANs.]

Ethernet switching and bridging

• Support for Q-in-Q tunneling with a service-provider-style configuration.

  [See Configuring Q-in-Q Tunneling.]

• LLDP support.

  [See Device Discovery Using LLDP.]

• Support for MAC move limit with EVPN-VXLAN.

  [See Understanding MAC Move Limiting.]

Forwarding options

• Support for port mirroring in EVPN-VXLAN environments.

  [See How to Configure Remote Port Mirroring for EVPN-VXLAN Fabrics.]

High availability

• VRRP support on Packet Forwarding Engine.

  [See VRRP Overview].

Interfaces

• Support for BGP flowspec.

  [See BGP.]

Junos Telemetry Interface (JTI)

• JTI streaming support for hardware Routing Engine-based sensors. Subscribe to the /components/sensor to stream hardware operational stages. Statistics include Routing Engine, power supply units (PSUs), Control Boards, FPCs, and PICs states.

  [See Junos YANG Data Model Explorer.]

Multicast

• MLD snooping and IRB stitching support .

  [See Understanding MLD Snooping.]

• Support for multicast forwarding.

  [See Multicast Overview.]

• IGMP snooping support.

  [See PIM Overview.]

• IGMP, MLD multicast snooping, and IRB elaboration with MBB.

  [See IGMP Snooping Overview.]

  [See Understanding MLD Snooping.]

Network management and monitoring

• Support for sFlow.

  [See Overview of sFlow Technology.]

• Support for analyzers and port mirroring.

  [See Understanding Port Mirroring and Analyzers.]

• Inband Flow Analyzer (IFA) 2.0 transit node support.

  [See Inband Flow Analyzer (IFA) 2.0 Probe for Real-Time Flow Monitoring.]

• IPsec support for OSPFv2 and OSPFv3.

  [See Overview of IPsec.]

  [See Configuring OSPF Authentication.]

  [See Configuring IPsec Security Associations.]

• DHCP stateless relay MIB support.

  [See Enterprise-Specific MIBs for Junos OS Evolved.]

Protection against DDoS attacks

• Supports DDoS protection, which is enabled by default.

  [See Control Plane Distributed Denial-of-Service (DDoS) Protection Overview.] and protocols (DDoS) (ACX Series, PTX Series, and QFX Series).]

Platform and infrastructure

• Platform resiliency support for hardware components of each FRU.

  If a failure is detected on a hardware component, Junos OS Evolved:

  • Logs the message to give clear indication of failure details, including time stamp, module name, component name & failure details.

  • Raises or clears alarms if applicable.

  • Performs local action, such as self-healing and taking the component out of service.

Precision Time Protocol

• Transparent Clock support

  • With or without VLAN encapsulation

  • With PTP over IPv4

  • With PTP unicast or multicast

  • On LAG and MC-LAG

  • On all physical, IRB, and AE interfaces

Routing options

• Support for Unified Forwarding Table (UFT).

  [See Understanding the Unified Forwarding Table.]

Routing protocols

• Support for redistribution of IPv4 routes with IPv6 next hop into BGP.

  [See Understanding Redistribution of IPv4 Routes with IPv6 Next Hop into BGP.]

• Support for collect ON_CHANGE BGP RIB telemetry statistics and BGP neighbor telemetry with sharding.

  [See Telemetry Sensor Explorer.]

• Support for maximum reference bandwidth increased to 4 TB for IGP protocols.

  [See reference-bandwidth (Protocols IS-IS).]

  [See reference-bandwidth (Protocols OSPF).]

• Support for check for AS matches in BGP policy AS paths without regular expressions.

  [See Improve the Performance of AS Path Lookup in BGP Policy.]

• Support for stripping or replacing BGP private AS.

  [See Autonomous Systems for BGP Sessions.]

• BMP local RIB monitoring support for all RIBs with sharding.

  [See BGP Monitoring Protocol].

  [See loc-rib.]

  [See rib-list.]

• Support for bootstrapping route-validation database from a local file.

  [See validation (Origin Validation for BGP).]

Routing policy and firewall filters

• Sharding support for conditional route manager.

  [See Routing Policy Match Conditions].

  [See rib-sharding.]

  [See show policy conditions.]

• Support for fast lookup of origin and neighbor autonomous systems (ASs).

  [See policy-options.]

  [See policy-statement.]

• Firewall filter support on Layer 3 interfaces.

  [See Firewall Filter Match Conditions and Actions.]

• Support for profiles to improve the firewall filter scale.

  [See Planning the Number of Firewall Filters to Create.]

• EVPN-VXLAN firewall filtering and policing.

  [See Firewall Filter Match Conditions and Actions (QFX and EX Series Switches).]

System management

• Secure boot and secure BIOS support.

  [See Secure Boot.]

• CLI-based hash and ECMP resilient hashing support.

  [See enhanced-hash-key.]

  [See ecmp-resilient-hash].

• Support for dynamic load balancing (DLB).

  [See enhanced-hash-key.]

• Support for configuring firewall filters and interfaces programmatically using JET APIs.

  [See Overview of JET APIs.]

Software installation and upgrade

• ZTP support.

  [See Zero Touch Provisioning.]

Services applications

• Support for DHCPv4 and DHCPv6 stateless relay.

  [See DHCP Relay Agent.]

• To view the hardware compatibility matrix for optical interfaces, transceivers, and DACs supported , see the Hardware Compatibility Tool.

VPNs

• Support for EVPN Type 5 routes.

  [See Understanding EVPN Pure Type-5 Routes.]

• Assisted replication (AR) integrated with optimized intersubnet multicast (OISM) in an EVPN-VXLAN edge-routed bridging (ERB) fabric support.

  [See Assisted Replication Multicast Optimization in EVPN Networks.]

  [See Optimized Inter-Subnet Multicast in EVPN Networks.]

• EVPN-VXLAN support with MAC-VRF routing instances.

  [See EVPN User Guide.]

• Support for EVPN-VXLAN fabric with an IPv6 underlay.

  [See EVPN-VXLAN with an IPv6 Underlay.]

  [See Example: Configure an IPv6 Underlay for Layer 2 VXLAN Gateway Leaf Devices.]

• Support for symmetric IRB with EVPN Type 2 routes.

  [See Symmetric Integrated Routing and Bridging with EVPN Type 2 Routes in EVPN-VXLAN Fabrics.]

  [See irb-symmetric-routing.]

• Support for MLDv1, MLDv2, and MLD snooping with OISM and AR in EVPN-VXLAN fabrics.

  [See Optimized Intersubnet Multicast in EVPN Networks.]

• Support for determining IRB interface state changes based on local and remote connectivity states in EVPN fabrics.

  [See Determine IRB Interface State Changes from Local and Remote Connectivity States in EVPN Fabrics.]

  [See interface-state.]

  [See network-isolation.]

• Overlay and CE-IP ping and traceroute support for EVPN-VXLAN.

  [See Understanding Overlay ping and traceroute Packet Support.]

• Support for blocking asymmetric EVPN Type 5 routes.

  [See EVPN Type 5 Route with VXLAN encapsulation for EVPN-VXLAN.]

  [See ip-prefix-routes.]

• Support for DHCP relay in EVPN-VXLAN.

  [See DHCP Relay Agent over EVPN-VXLAN.]

• Support for coexistence of EVPN Type 2 and Type 5 routes .

  [See EVPN Type 2 and Type 5 Route Coexistence with EVPN-VXLAN.]

• Support for Interconnecting EVPN-VXLAN in a data center to an EVPN-VXLAN control plane in a WAN using a gateway model.

  [See Understanding the MAC Addresses For a Default Virtual Gateway in an EVPN-VXLAN or EVPN-MPLS Overlay Network.]

• Support for OISM in an EVPN-VXLAN fabric.

  [See Optimized Inter-Subnet Multicast in EVPN Networks.]

• Support for service-provider-style interface configuration on EVPN-VXLAN Layer 3 gateways.

  [See Using a Default Layer 3 Gateway to Route Traffic in an EVPN-VXLAN Overlay Network.]

• Overlapping VLAN support in EVPN-VXLAN fabrics on edge-routed bridging (ERB) overlay leaf devices.

  [See Overlapping VLAN Support Using VLAN Translation in EVPN-VXLAN Networks.]

  [See vlan-rewrite.]

Chassis

• Support for inbuilt Routing Engine, Control Board, power supply unit, fan trays, Flexible PIC Concentrators (FPCs), and PICs on the QFX5230-64CD switch.

• We have extended the Junos environment monitoring (EM) policy to include optics temperature sensors for QFX5230-64CD switches. It includes the following features:

  • The optics EM policy incorporates periodically polled temperature readings of optical modules in the system to automatically manage the fan speed.

  • 100GbE and 400GbE optics firmware automatically triggers optics shutdown when the high-temperature threshold is breached.

  • EM policy is enabled by default on all 100GbE and 400GbE optics interfaces, except for loopback optics and direct attach copper (DAC) cables.

  You can use the set chassis fpc fpc_slot pic pic_slot port port_no no-temperature-monitoring command to explicitly disable the EM policy on specific WAN ports. Use the show chassis environment command to view the optics temperature.

  [See temperature-sensor.]

CoS

• Support for CoS features on Layer 2 and Layer 3 interfaces. Both IPv4 and IPv6 unicast routing are supported. Other supported CoS features include:

  • Classification and rewrite rules for Differentiated Services code point (DSCP) and IEEE-802.1p.

  • Port scheduling

  • Shared buffer

  • Priority-based Flow Control (PFC) based on IEEE-802.1p. DSCP-based PFC is required to support Remote Direct Memory Access (RDMA) over converged Ethernet version 2 (RoCEv2).

  • Weighted Random Early Drop (WRED) and Explicit Congestion Notification (ECN)

  • Telemetry support for CoS queue statistics exported using the sensor /junos/system/linecard/qmon-sw/.

    [See Traffic Management User Guide (QFX Series Switches and EX4600 Switches).]

EVPN

• Support for firewall filtering and policing on the Ethernet VPN–Virtual Extensible LAN (EVPN-VXLAN) network.

  [See Firewall Filter Match Conditions and Actions (QFX and EX Series Switches).]

• Support for sFlow on EVPN-VXLAN network.

  [See Overview of sFlow Technology.]

• Support for port mirroring and analyzers on EVPN-VXLAN network.

  [See Port Mirroring and Analyzers in an EVPN-VXLAN Environment.]

Forwarding and sampling

• Support for dynamic load balancing (DLB) and resilient hashing (RH) for equal-cost multipath (ECMP) routes. DLB and RH are not supported on Link Aggregation Group (LAG).

  [See Dynamic Load Balancing, Use of Resilient Hashing to Minimize Flow Remapping, and ecmp-resilient-hash.]

High availability

• Support for Fast Fast Boot (FFB)-enabled in-service software upgrade (ISSU).

  [See Understanding In-Service Software Upgrade (ISSU).]

Interfaces

• QFX5230-64CD has 64 QSFP56-DD ports and 2 SFP+ ports. The QSFP56-DD ports support the following speeds:

  • 400GbE

  • 200GbE

  • 100GbE

  • 50GbE

  • 40GbE

  The QSFP-DD ports also support the following speeds (with breakout cables):

  • 50GbE

  • 25GbE

  • 10GbE

  The SFP+ ports support 10GbE.

  QFX5230-64CD supports 1x400GbE, 2x200GbE, 4x100GbE, 2x100GbE, 1x100GbE, 2x50GbE, 1x50GbE, 1x40GbE, 4x25GbE, and 4x10GbE channelizations.

  [See Port Settings.]

Layer 2 features

• Support for Layer 2 unicast forwarding and VRRP.

  [See Understanding VRRP.]

• Support for IGMP snooping. This includes:

  • IGMP snooping with IGMPv1, IGMPv2, and IGMPv3

  • IGMP proxy

  • IGMP querier at Layer 2

  • Any-source multicast (ASM) and source-specific multicast (SSM) modes

  • Virtual router (VRF-lite) IGMP snooping

  • IGMP snooping with integrated routing and bridging (IRB)

  [See IGMP Snooping Overview, Multicast Overview, and Integrated Routing and Bridging. ]

Layer 3 features

• Support for DHCP stateless relay on IRB interfaces and bridge domains. Support includes DHCPv4 and DHCPv6.

  [See DHCP Relay Agent.]

• Support for Layer 3 unicast forwarding and generic routing encapsulation (GRE) tunneling. We support both IPv4 and IPv6 unicast routing .

  [See Generic Routing Encapsulation (GRE).]

• Support for Layer 3 multicast forwarding includes:

  • PIM first hop router (FHR) Rendezvous point (RP) functionality

  • MSDP

  • Make-before-break (MBB) support for multicast receivers on existing Layer 3 aggregated Ethernet (aex) or link aggregation group (LAG) interfaces. Support includes member addition, member deletion, link up, and link down events.

  • PIM source-specific multicast (SSM)

  • PIM sparse mode (SM)

  • PIM dense mode (DM)

  • L3 multicast forwarding on integrated routing and bridging (IRB) interfaces:

    • IPv4 and IPv6 multicast

    • IGMP v1/v2/v3

    • Multicast Listener Discovery (MLD) v1/v2

    • Any-source multicast (ASM) and source-specific multicast (SSM) modes

  [See Multicast Routing Protocols and PIM Overview.]

Network management and monitoring

• Support for sFlow.

  [See Overview of sFlow Technology.]

• Support for port mirroring and analyzers. The QFX5230-64CD switches can support a maximum of eight port mirroring sessions.

  [See Understanding Port Mirroring and Analyzers.]

Platform and infrastructure

• Platform resiliency support for hardware components of each FRU in a QFX5230-64CD switch. If a failure is detected on a hardware component, Junos OS Evolved:

  • Logs the message to give clear indication of failure details, including time stamp, module name, and component name.
  • Raises and clears alarms, if applicable.
  • Raises SNMP trap.
  • Makes the LED glow to indicate FRU fault, if an LED is present.
  • Performs local actions such as self-healing or taking the component out of service.

• Support to configure firewall filters and interfaces programmatically using the Juniper Extension Toolkit (JET) APIs.

  [See Overview of JET APIs.]

Protection against DDoS attacks

• Supports configuration and installation of policers at the Packet Forwarding Engine (PFE) level for defense from DDoS attacks. By default, DDoS protection is enabled for many protocols on the QFX5230-64CD switches.

  [See Configuring Control Plane DDoS Protection Aggregate or Individual Packet Type Policers, show ddos-protection statistics, and show ddos-protection version.]

Routing policy and firewall filters

• Firewall filter support on Layer 2 and Layer 3 interfaces.

  [See Firewall Filter Match Conditions and Actions and Configuring Enhanced Egress Firewall Filters.]

Services applications

• Support for generic routing encapsulation (GRE) features:

  • GRE tunnels over GigE, LAG, and VLAN

  • Tagged sub-interfaces

  • Payload protocol for IPv4 and IPv6

  • Delivery protocol for IPv4

  • Multicast over GRE tunnels

  • Tunnel statistics

  • VRF with GRE

  • Time-to-live (TTL)

  [See Generic Routing Encapsulation (GRE).]

Software installation and upgrade

• Firmware upgrade support. The following commands are supported:

  • request system firmware upgrade fpc slot 0 bcm-pfe

  • request system firmware upgrade fpc slot 0 dpll

  • request system firmware upgrade fpc slot 0 dpll-cfg

  • request system firmware upgrade fpc slot 0 opticscpld<0|1|2>

  • request system firmware upgrade psm slot <0|1>

  • request system firmware upgrade re bios

  • request system firmware upgrade re fancpld

  • request system firmware upgrade re fpga

  • request system firmware upgrade re i210

  • request system firmware upgrade re ssd <disk1|disk2>

  • request system firmware upgrade re xmcfpga

  [See request system firmware upgrade.]

• Support for secure BIOS and secure boot implementation based on the UEFI 2.4 standard.

  [See Secure Boot.]

• Zero Touch Provisioning (ZTP) support for WAN interfaces and DHCPv6 options.

  [See Zero Touch Provisioning.]

• Select your product in the Hardware Compatibility Tool to view supported transceivers, optical interfaces, and DAC cables for your platform or interface module. We update the HCT and provide the first supported release information when the optic becomes available.

Chassis

• Support for inbuilt Routing Engine, Control Board, power supply units, fan trays, Flexible PIC Concentrators (FPCs), and PICs on QFX5240-64OD and QFX5240-64QD switches.

CoS

• Support for CoS features on Layer 2 and Layer 3 interfaces. Supported CoS features include:

  • IPv4 and IPv6 unicast routing.
  • Classification and rewrite rules for Differentiated Services code point (DSCP) and IEEE-802.1p
  • Port scheduling
  • Shared buffer
  • Priority-based Flow Control (PFC) based on IEEE-802.1p. DSCP-based PFC is required to support remote direct memory access (RDMA) over converged Ethernet version 2 (RoCEv2).
  • Weighted Random Early Drop (WRED) and Explicit Congestion Notification (ECN)
  • Telemetry support for CoS queue statistics exported using the sensor /junos/system/linecard/qmon-sw/.

  [See Traffic Management User Guide (QFX Series Switches and EX4600 Switches).]

Forwarding and sampling

• Support for dynamic load balancing (DLB) (for port speeds over 50Gbps) and resilient hashing (RH) for ECMP routes. DLB and RH are not supported on Link Aggregation Group (LAG) or when an LAG is one of the egress ECMP members.

  [See Dynamic Load Balancing, Use of Resilient Hashing to Minimize Flow Remapping, and ecmp-resilient-hash.]

Interfaces

• The QFX5240 switches have 64x800GbE OSFP ports on QFX5240-64OD and 64x800GbE QSFP-DD ports on QFX5240-64QD. The last two ports (64 and 65) are 2x10GbE SFP on both the QFX5240 variants.

  The QFX5240-64OD and QFX5240-64QD ports support the following speeds:

  • 1x800 Gbps

  • 2x400 Gbps

  • 4x200 Gbps

  • 8x100 Gbps

  Note:

  On the QFX5240 switches, the runts (under Input errors) and fragment frames (under MAC statistics) counters do not increment in the output of the show interfaces extensive command. These counters are not supported due to a hardware limitation.

  [See Port Settings.]

Layer 2 features

• Support for Layer 2 unicast forwarding and VRRP.

  [See Understanding VRRP.]

• Support for IGMP snooping includes:

  • IGMP snooping with IGMPv1, IGMPv2, and IGMPv3
  • IGMP proxy
  • IGMP querier at Layer 2
  • Any-source multicast (ASM) and source-specific multicast (SSM) modes
  • Virtual router (VRF-lite) IGMP snooping
  • IGMP snooping with integrated routing and bridging (IRB)

  [See IGMP Snooping Overview, Multicast Overview, and Integrated Routing and Bridging.]

Layer 3 features

• Support for DHCP stateless relay on IRB interfaces and bridge domains. Support includes DHCPv4 and DHCPv6.

  [See DHCP Relay Agent.]

• Support for Layer 3 unicast forwarding and generic routing encapsulation (GRE) tunneling. We support both IPv4 and IPv6 unicast routing.

  [See Generic Routing Encapsulation (GRE).]

• Support for Layer 3 multicast forwarding includes:

  • PIM first hop router (FHR) Rendezvous point (RP) functionality
  • Multicast Source Discovery Protocol (MSDP)
  • Make-before-break (MBB) support for multicast receivers on existing Layer 3 aggregated Ethernet (aex) or link aggregation group (LAG) interfaces. Support includes member addition, member deletion, link up, and link down events.
  • PIM source-specific multicast (SSM)
  • PIM sparse mode (SM)
  • PIM dense mode (DM)
  • L3 multicast forwarding on integrated routing and bridging (IRB) interfaces:
    • IPv4 and IPv6 multicast
    • IGMP v1/v2/v3
    • Multicast Listener Discovery (MLD) v1/v2
    • Any-source multicast (ASM) and source-specific multicast (SSM) modes

  [See Multicast Routing Protocols and PIM Overview.]

Network management and monitoring

• Support for sFlow.

  [See Overview of sFlow Technology.]

• Support for port mirroring and analyzers. The QFX5240-64OD and QFX5240-64QD switches can support a maximum of seven port mirroring sessions.

  [See Understanding Port Mirroring and Analyzers.]

Platform and infrastructure

• Support to configure firewall filters and interfaces programmatically using the Juniper Extension Toolkit (JET) APIs.

  [See Overview of JET APIs.]

• Platform resiliency support on QFX5240-64OD and QFX5240-64QD switches for hardware components of each FRU. If a failure is detected on a hardware component, Junos OS Evolved:

  1. Logs the message to give clear indication of failure details, including time stamp, module name, and component name.
  2. Raises SNMP trap.
  3. Makes the LED glow to indicate FRU fault.
  4. Performs local actions such as self-healing or taking the component out of service.

  [See QFX5240 Switch Hardware Guide and Chassis-Level User Guide.]

Protection against DDoS attacks

• Supports configuration and installation of policers at the Packet Forwarding Engine (PFE) level for defense from distributed denial of service (DDoS) attacks. By default, DDoS protection is enabled for many protocols on the QFX5240-64OD and QFX5240-64QD switches.

  [See Configuring Control Plane DDoS Protection Aggregate or Individual Packet Type Policers, show ddos-protection statistics, and show ddos-protection version.]

Routing policy and firewall filters

• Firewall filter support on Layer 2 and Layer 3 interfaces.

  [See Firewall Filter Match Conditions and Actions and Configuring Enhanced Egress Firewall Filters.]

Services applications

• Support for generic routing encapsulation (GRE) features:

  • GRE tunnels over GigE, LAG, and VLAN
  • Tagged sub-interfaces
  • Payload protocol for IPv4 and IPv6
  • Delivery protocol for IPv4
  • Multicast over GRE tunnels
  • Tunnel statistics
  • VRF with GRE
  • Time-to-live (TTL)

  [See Generic Routing Encapsulation (GRE).]

Software installation and upgrade

• Firmware upgrade support. The following commands are supported:

  • request system firmware upgrade re bios

  • request system firmware upgrade re fpga

  • request system firmware upgrade re gfpga (QFX5240-64OD FPGA)

  • request system firmware upgrade re ssd

  • request system firmware upgrade fpc opticscpld<0/1/2>

  • request system firmware upgrade re fancpld

  • request system firmware upgrade re i210

  • request system firmware upgrade fpc bcm-pfe

  [See request system firmware upgrade.]

• Support for zero-touch provisioning (ZTP) over IPv4 and IPv6 on the management and WAN interfaces.

  [See Zero Touch Provisioning.]

• Support for USB booting.

  Note:

  On QFX5240 switches, only UEFI boot media (UEFI USB, UEFI NVME, UEFI network, and so on) is supported. You must select USB (UEFI USB) manually from the BIOS menu or use the request node reboot re0 usb command to boot from USB.

• Select your product in the Hardware Compatibility Tool to view supported transceivers, optical interfaces, and DAC cables for your platform or interface module. We update the HCT and provide the first supported release information when the optic becomes available.