Hardware

CoS

• CoS support on EVPN VXLANs.

  [See CoS Support on EVPN VXLANs.]

• Support for priority-based flow control (PFC) of untagged traffic at Layer 3 using Differentiated Services Code Points (DSCP).

  [See Understanding PFC Using DSCP at Layer 3 for Untagged Traffic.]

Ethernet switching and bridging

• Support for Q-in-Q tunneling with a Service Provider Style configuration.

  [See Configuring Q-in-Q Tunneling.]

• LLDP support.

  [See Device Discovery Using LLDP.]

• Support for MAC move limit with EVPN-VXLAN.

  [See Understanding MAC Move Limiting.]

Forwarding options

• Support for port mirroring in EVPN-VXLAN environments.

  [See How to Configure Remote Port Mirroring for EVPN-VXLAN Fabrics.]

High availability

• Support for VRRP on Packet Forwarding Engine.

  [See VRRP Overview].

Interfaces

• Support for BGP flow specification (flowspec).

  [See BGP.]

• Support for 48 SFP-DD and 8 QSFP-DD ports. Each switch also supports two 10-Gbps SFP+ ports. We support the following port configurations on each switch:

  • 48x100-Gbps / 50-Gbps / 25-Gbps / 10-Gbps on SFP-DD ports

  • 8x400-Gbps / 200-Gbps / 100-Gbps / 40-Gbps on QSFP-DD ports

  • 2x10-Gbps on SFP+ ports

  [See Port Settings (Interface Guide for Switches).]

• Support for MACsec on physical interfaces —This platform supports MACsec in dynamic CAK mode with GCM-AES-128, GCM-AES-256, GCM-AES-XPN-128, and GCM-AES-XPN-256 encryption. This feature is supported on physical interfaces for switch-to-host and switch-to-switch links.

  [See Configuring MACsec.]

Junos telemetry interface (JTI)

• JTI streaming support for hardware Routing Engine-based sensors. Subscribe to /components/sensor to stream hardware operational stages. Statistics include Routing Engine, power supply unit (PSU), Control Board, Flexible PIC Concentrator (FPC), and PIC states.

  [See Junos YANG Data Model Explorer.]

Multicast

• Multicast Listener Discovery (MLD) snooping and integrated routing and bridging (IRB) stitching support.

  [See Understanding MLD Snooping.]

• Support for multicast forwarding.

  [See Multicast Overview.]

• IGMP snooping support.

  [See IGMP Snooping Overview .]

• IGMP and MLD multicast snooping and IRB elaboration with make-before-break (MBB).

  [See IGMP Snooping Overview.]

  [See Understanding MLD Snooping.]

Network management and monitoring

• Support for sFlow.

  [See Overview of sFlow Technology.]

• Support for port mirroring and analyzers.

  [See Understanding Port Mirroring and Analyzers.]

• Inband Flow Analyzer (IFA) 2.0 transit node support.

  [See Inband Flow Analyzer (IFA) 2.0 Probe for Real-Time Flow Monitoring.]

• IPsec support for OSPFv2 and OSPFv3.

  [See Overview of IPsec.]

  [See Configuring OSPF Authentication.]

  [See Configuring IPsec Security Associations.]

• DHCP stateless relay MIB support.

  [See Enterprise-Specific MIBs for Junos OS Evolved.]

Protection against DDoS attacks

• Support for distributed denial of service (DDoS) protection, which is enabled by default.

  [See Control Plane Distributed Denial-of-Service (DDoS) Protection Overview.] and protocols (DDoS) (ACX Series, PTX Series, and QFX Series).]

Platform and infrastructure

• Platform resiliency support for hardware components of each FRU.

  If a failure is detected on a hardware component, Junos OS Evolved:

  • Logs the message to give clear indication of failure details, including time stamp, module name, and component name.

  • Raises or clears alarms if applicable.

  • Performs local actions, such as self-healing and taking the component out of service.

Precision Time Protocol

• Transparent clock support:

  • With or without VLAN encapsulation

  • With PTP over IPv4

  • With PTP unicast or multicast

  • On LAG and (multichassis link aggregation) MC-LAG

  • On all physical, IRB, and aggregated Ethernet interfaces

Routing options

• Support for Unified Forwarding Table (UFT).

  [See Understanding the Unified Forwarding Table.]

Routing protocols

• Support for redistribution of IPv4 routes with IPv6 next hop into BGP.

  [See Understanding Redistribution of IPv4 Routes with IPv6 Next Hop into BGP.]

• Support to collect ON_CHANGE BGP routing information base (RIB) telemetry statistics and BGP neighbor telemetry with sharding.

  [See Telemetry Sensor Explorer.]

• Support for maximum reference bandwidth increased to 4 Tbps for IGP protocols.

  [See reference-bandwidth (Protocols IS-IS).]

  [See reference-bandwidth (Protocols OSPF).]

• Support to check for autonomous system (AS) matches in BGP policy AS paths without regular expressions.

  [See Improve the Performance of AS Path Lookup in BGP Policy.]

• Support to strip or replace BGP private AS.

  [See Autonomous Systems for BGP Sessions.]

• BGP Monitoring Protocol (BMP) local RIB monitoring support for all RIBs with sharding.

  [See BGP Monitoring Protocol].

  [See loc-rib.]

  [See rib-list.]

• Support for bootstrapping route-validation database from a local file.

  [See validation (Origin Validation for BGP).]

Routing policy and firewall filters

• Sharding support for conditional route manager.

  [See Routing Policy Match Conditions].

  [See rib-sharding.]

  [See show policy conditions.]

• Support for fast lookup of origin and neighbor ASs.

  [See policy-options.]

  [See policy-statement.]

• Firewall filter support on Layer 3 interfaces.

  [See Firewall Filter Match Conditions and Actions.]

• Support for profiles to improve the firewall filter scale.

  [See Planning the Number of Firewall Filters to Create.]

• EVPN-VXLAN firewall filtering and policing.

  [See Firewall Filter Match Conditions and Actions (QFX and EX Series Switches).]

System management

• Secure boot and secure BIOS support.

  [See Secure Boot.]

• CLI-based hash and ECMP resilient hashing support.

  [See enhanced-hash-key.]

  [See ecmp-resilient-hash].

• Support for dynamic load balancing (DLB).

  [See enhanced-hash-key.]

• Support to configure firewall filters and interfaces programmatically using JET APIs.

  [See Overview of JET APIs.]

Software installation and upgrade

• Zero-touch provisioning (ZTP) support.

  [See Zero Touch Provisioning.]

Services applications

• Support for DHCPv4 and DHCPv6 stateless relay.

  [See DHCP Relay Agent.]

• To view the hardware compatibility matrix for optical interfaces, transceivers, and direct attach copper (DAC) cables supported , see the Hardware Compatibility Tool.

VPNs

• Support for EVPN Type 5 routes.

  [See Understanding EVPN Pure Type-5 Routes.]

• Support for assisted replication (AR) integrated with optimized intersubnet multicast (OISM) in an EVPN-VXLAN edge-routed bridging (ERB) fabric.

  [See Assisted Replication Multicast Optimization in EVPN Networks.]

  [See Optimized Inter-Subnet Multicast in EVPN Networks.]

• EVPN-VXLAN support with MAC-VRF routing instances.

  [See EVPN User Guide.]

• Support for EVPN-VXLAN fabric with an IPv6 underlay.

  [See EVPN-VXLAN with an IPv6 Underlay.]

  [See Example: Configure an IPv6 Underlay for Layer 2 VXLAN Gateway Leaf Devices.]

• Support for symmetric IRB with EVPN Type 2 routes.

  [See Symmetric Integrated Routing and Bridging with EVPN Type 2 Routes in EVPN-VXLAN Fabrics.]

  [See irb-symmetric-routing.]

• Support for MLDv1, MLDv2, and MLD snooping with OISM and AR in EVPN-VXLAN fabrics.

  [See Optimized Intersubnet Multicast in EVPN Networks.]

• Support to determine IRB interface state changes based on local and remote connectivity states in EVPN fabrics.

  [See Determine IRB Interface State Changes from Local and Remote Connectivity States in EVPN Fabrics.]

  [See interface-state.]

  [See network-isolation.]

• Overlay and customer edge IP (CE-IP) address ping utility and traceroute support for EVPN-VXLAN.

  [See Understanding Overlay ping and traceroute Packet Support.]

• Support to block asymmetric EVPN Type 5 routes.

  [See EVPN Type 5 Route with VXLAN encapsulation for EVPN-VXLAN.]

  [See ip-prefix-routes.]

• Support for DHCP relay in an EVPN-VXLAN.

  [See DHCP Relay Agent over EVPN-VXLAN.]

• Support for coexistence of EVPN Type 2 and Type 5 routes.

  [See EVPN Type 2 and Type 5 Route Coexistence with EVPN-VXLAN.]

• Support to interconnect an EVPN-VXLAN in a data center to an EVPN-VXLAN control plane in a WAN using a gateway model.

  [See Understanding the MAC Addresses For a Default Virtual Gateway in an EVPN-VXLAN or EVPN-MPLS Overlay Network.]

• Support for OISM in an EVPN-VXLAN fabric.

  [See Optimized Inter-Subnet Multicast in EVPN Networks.]

• Support for Service Provider Style interface configuration on EVPN-VXLAN Layer 3 gateways.

  [See Using a Default Layer 3 Gateway to Route Traffic in an EVPN-VXLAN Overlay Network.]

• Overlapping VLAN support in EVPN-VXLAN fabrics on ERB overlay leaf devices.

  [See Overlapping VLAN Support Using VLAN Translation in EVPN-VXLAN Networks.]

  [See vlan-rewrite.]