Hardware

QFX5241-32OD (QFX Series)—The Juniper Networks® QFX5241-32OD switches are fixed-configuration devices with 32 octal small form-factor pluggable (OSFP) ports that support speeds of up to 800 gigabits per second (Gbps). Features such as 25.6 terabits per second (Tbps) throughput and 1-U shallow buffer design make these switches optimal as end-of-row, leaf, or spine devices in IP fabric architectures. The switches support 2400-watt (W) AC power supply units (PSUs) and front-to-back airflow.

To install the QFX5241-32OD switch and perform initial configuration, routine maintenance, and troubleshooting, see the QFX5241-32OD Switch Hardware Guide. See Feature Explorer for the complete list of features for any platform.

Table 1: QFX5241-32OD Feature Support
Feature	Description
CoS	Support for CoS features on Layer 2 and Layer 3 interfaces, including: IPv4 and IPv6 unicast routing Classification and rewrite rules for Differentiated Services code point (DSCP) and IEEE-802.1p Port scheduling Shared buffer Priority-based flow control (PFC) based on IEEE-802.1p for VLAN-tagged traffic. Protocols such as remote direct memory access (RDMA) over converged Ethernet version 2 (RoCEv2) require DSCP-based PFC at Layer 3 for untagged traffic. Weighted random early detection (WRED) and explicit congestion notification (ECN) Telemetry support for CoS queue statistics exported using the sensor `/junos/system/linecard/qmon-sw/`. [See Traffic Management User Guide (QFX Series Switches and EX4600 Switches).]
EVPN	Support for Layer 2 gateway and Address Resolution Protocol (ARP) suppression on EVPN-VXLAN. [See Understanding EVPN with VXLAN Data Plane Encapsulation, EVPN Proxy ARP and ARP Suppression, and overlay (Packet Forwarding Options).] Support for CoS and firewall filtering and policing on EVPN-VXLAN. [See CoS Support on EVPN VXLANs and Firewall Filter Match Conditions and Actions (QFX and EX Series Switches).] Support for Wake-on-LAN (WOL) targeted broadcast on EVPN-VXLAN. [See Targeted Broadcast and targeted-broadcast.] Support for EVPN-VXLAN Layer 2 gateway, including: Multihoming ARP suppression Layer 3 IPv4 underlay with integrated routing and bridging (IRB) and LAG Core isolation Broadcast, unknown unicast, and multicast (BUM) traffic forwarding by ingress replication only MAC move limits [See Understanding EVPN with VXLAN Data Plane Encapsulation, EVPN Proxy Arp and Arp Suppression, and Proxy NDP and NDP Suppression, IP Fabric Underlay Network Design and Implementation, overlay-ecmp, Edge-Routed Bridging Overlay Design and Implementation, Layer 2 Interface Status Tracking and Shutdown Actions for EVPN Core Isolation Conditions, and mac-move-limit.] Support for EVPN-VXLAN Layer 3 gateway, including: Layer 3 VXLAN gateway in edge-routed bridging (ERB) fabric Up to 256 VLANs with IRB enabled Layer 3 underlay that supports IRB and LAG ECMP in the underlay IPv4 and IPv6 virtual gateway MAC address support for IRB interfaces In-service software upgrade (ISSU) for Layer 3 gateway functionality [See Understanding EVPN with VXLAN Data Plane Encapsulation, Example: Configuring an EVPN-VXLAN Edge-Routed Bridging Fabric with a Virtual Gateway, Understanding the MAC Addresses For a Default Virtual Gateway in an EVPN-VXLAN or EVPN-MPLS Overlay Network, and IP Fabric Underlay Network Design and Implementation.] Support for EVPN-VXLAN Type 5 stitching, including: Overlay and underlay ECMP Type 5 stitching Type 2 and Type 5 route coexistence Symmetric IRB In-service software upgrade (ISSU) [See Understanding EVPN with VXLAN Data Plane Encapsulation, IP Fabric Underlay Network Design and Implementation, overlay-ecmp, Understanding EVPN Type 5 Routes, EVPN Type 2 and Type 5 Route Coexistence with EVPN-VXLAN, NSR and Unified ISSU Support for EVPN, and irb-symmetric-routing.] Support for sFlow technology on EVPN-VXLAN. [See Overview of sFlow Technology.] Support for port mirroring and analyzers on EVPN-VXLAN. [See Port Mirroring and Analyzers in an EVPN-VXLAN Environment.] Support for forwarding EVPN data traffic on the spine device without any traffic loss while the leaf device performs a unified ISSU in spine-and-leaf topologies with external BGP (EBGP) connections. [See Understanding Unified ISSU.]
Features optimized for AI-ML fabrics	Support for priority-based flow control (PFC) watchdog. [See PFC Watchdog and congestion-notification-profile.] Telemetry support for streaming IPv4 and IPv6 transit statistics using the native resource paths /state/interfaces/interface[name=' ']/counters/ipv4/ and /state/interfaces/interface[name=' ']/counters/ipv6/. [See Junos YANG Data Model Explorer and route-accounting.] Support for enabling or disabling dynamic load balancing (DLB). You can use the `dynamic-load-balance` statement to selectively enable or disable DLB based on rdma-opcode match or any match available in firewall filters. The optimal link is determined based on the modified port load and port queue metrics when DLB is enabled. [See rdma-opcode, dynamic-load-balance-selective, and egress-quantization.] Support for PFC using DSCPs at Layer 3 for untagged IPv6 traffic. DSCP-based PFC is required to support remote direct memory access (RDMA) over converged Ethernet version 2 (RoCEv2). [See Understanding PFC Using DSCP at Layer 3 for Untagged Traffic.] Support for global load balancing (GLB). [See Global Load Balancing (GLB).] Support for reactive path rebalancing. [See Reactive Path Rebalancing.] SNMP and telemetry support for PFC, explicit congestion notification (ECN), and CoS ingress packet drops due to ingress port congestion. [See SNMP MIBs and Traps Supported by Junos OS and Junos OS Evolved, show snmp mib, and Guidelines for gRPC and gNMI Sensors (Junos Telemetry Interface). For sensors, see Junos YANG Data Model Explorer.] Support for PFC XON threshold. [See xon (Input Congestion Notification).] Extended sFlow monitoring functionality support to export sFlow sample packets through the mgmt_junos interface and nondefault virtual routing and forwarding (VRF) WAN ports. [See collector, show sflow collector, and System Logging and Routing Instances.] Support for configuring per-queue alpha value to limit the buffer each queue can consume from the shared pool. [See buffer-dynamic-threshold.] Support for increased global shared buffer pool of up to 147 MB. [See Configuring Ingress and Egress Dedicated Buffers.] Support for Inband Flow Analyzer (IFA) 2.0 transit node. [See Inband Flow Analyzer (IFA) 2.0 Probe for Real-Time Flow Monitoring.]
Layer 2 features	Support for Layer 2 unicast forwarding and VRRP. [See Understanding VRRP.] Support for IGMP snooping, including: IGMPv1, IGMPv2, and IGMPv3 IGMP proxy IGMP querier at Layer 2 Any-source multicast (ASM) and source-specific multicast (SSM) modes Virtual router (VRF-lite) support Integrated routing and bridging (IRB) support [See IGMP Snooping Overview, Multicast Overview, and Integrated Routing and Bridging.]
Layer 3 features	Support for Layer 3 unicast forwarding and generic routing encapsulation (GRE) tunneling. We support both IPv4 and IPv6 unicast routing. [See Generic Routing Encapsulation (GRE).] Support for Layer 3 (L3) multicast forwarding, including: PIM first-hop router rendezvous point (RP) functionality Multicast Source Discovery Protocol (MSDP) Make-before-break (MBB) support for multicast receivers on existing Layer 3 aggregated Ethernet (aex) or link aggregation group (LAG) interfaces. Support includes member addition, member deletion, link up, and link down events. PIM source-specific multicast (SSM) PIM sparse mode (PIM SM) PIM dense mode (PIM DM) L3 multicast forwarding on integrated routing and bridging (IRB) interfaces functionality, including: IPv4 and IPv6 multicast IGMPv1, IGMPv2, and IGMPv3 Multicast Listener Discovery (MLD) versions 1 and 2 Any-source multicast (ASM) and source-specific multicast (SSM) modes [See Multicast Routing Protocols and PIM Overview.] Support for DHCP stateless relay on IRB interfaces and bridge domains. Support includes DHCPv4 and DHCPv6. [See DHCP Relay Agent.]
Network management and monitoring	Support for sFlow technology. [See Overview of sFlow Technology.] Support for port mirroring and analyzers. The switch supports a maximum of seven port mirroring sessions. [See Understanding Port Mirroring and Analyzers.]
Platform and infrastructure	Support to configure firewall filters and interfaces programmatically using the Juniper Extension Toolkit (JET) APIs. [See Overview of JET APIs.]
Protection against DDoS attacks	Support for configuration and installation of policers at the Packet Forwarding Engine (PFE) level for defense from distributed denial of service (DDoS) attacks. By default, DDoS protection is enabled for many protocols on the switch. [See Configuring Control Plane DDoS Protection Aggregate or Individual Packet Type Policers, show ddos-protection statistics, and show ddos-protection version.]
Routing policy and firewall filters	Firewall filter support on Layer 2 and Layer 3 interfaces. [See Firewall Filter Match Conditions and Actions and Configuring Enhanced Egress Firewall Filters.]
Services applications	Support for generic routing encapsulation (GRE) features, including: GRE tunnels over Gigabit Ethernet, LAG, and VLAN Tagged subinterfaces Payload protocol for IPv4 and IPv6 Delivery protocol for IPv4 Multicast over GRE tunnels Tunnel statistics VRF with GRE Time-to-live (TTL) [See Generic Routing Encapsulation (GRE).]
Software installation and upgrade	Support for zero-touch provisioning (ZTP) over IPv4 and IPv6 on the management and WAN interfaces. [See Zero Touch Provisioning.]

QFX5241-64OD and QFX5241-64QD (QFX Series)—The QFX5241-64OD and QFX5241-64QD switches are fixed-configuration devices with 64 octal small form-factor pluggable (OSFP) or QSFP-DD ports that support speeds of up to 800 gigabits per second (Gbps). Features such as 51.2 terabits per second (Tbps) throughput and 2-U shallow buffer design make these switches optimal as end-of-row, leaf, or spine devices in IP fabric architectures. The switches support 3000-watt (W) AC and DC power supply units (PSUs) and front-to-back airflow.

To install the QFX5241-64OD and QFX5241-64QD switches and perform initial configuration, routine maintenance, and troubleshooting, see the QFX5241-64OD and QFX5241-64QD Switches Hardware Guide. See Feature Explorer for the complete list of features for any platform.

Table 2: QFX5241-64OD and QFX5241-64QD Feature Support
Feature	Description
CoS	Support for CoS features on Layer 2 and Layer 3 interfaces, including: IPv4 and IPv6 unicast routing Classification and rewrite rules for Differentiated Services code point (DSCP) and IEEE-802.1p Port scheduling Shared buffer Priority-based flow control (PFC) based on IEEE-802.1p for VLAN-tagged traffic. Protocols such as remote direct memory access (RDMA) over converged Ethernet version 2 (RoCEv2) require Differentiated Services code point (DSCP)-based PFC at Layer 3 for untagged traffic. Weighted random early detection (WRED) and explicit congestion notification (ECN) Telemetry support for CoS queue statistics exported using the sensor `/junos/system/linecard/qmon-sw/`. [See Traffic Management User Guide (QFX Series Switches and EX4600 Switches).]
EVPN	Support for Layer 2 gateway and Address Resolution Protocol (ARP) suppression on EVPN-VXLAN. [See Understanding EVPN with VXLAN Data Plane Encapsulation, EVPN Proxy ARP and ARP Suppression, and overlay (Packet Forwarding Options).] Support for CoS and firewall filtering and policing on EVPN-VXLAN. [See CoS Support on EVPN VXLANs and Firewall Filter Match Conditions and Actions (QFX and EX Series Switches).] Support for Wake-on-LAN (WOL) targeted broadcast on EVPN-VXLAN. [See Targeted Broadcast and targeted-broadcast.] Support for EVPN-VXLAN Layer 2 gateway, including: Multihoming ARP suppression Layer 3 IPv4 underlay with integrated routing and bridging (IRB) and LAG Core isolation Broadcast, unknown unicast, and multicast (BUM) traffic forwarding by ingress replication only MAC move limits [See Understanding EVPN with VXLAN Data Plane Encapsulation, EVPN Proxy Arp and Arp Suppression, and Proxy NDP and NDP Suppression, IP Fabric Underlay Network Design and Implementation, overlay-ecmp, Edge-Routed Bridging Overlay Design and Implementation, Layer 2 Interface Status Tracking and Shutdown Actions for EVPN Core Isolation Conditions, and mac-move-limit.] Support for EVPN-VXLAN Layer 3 gateway, including: Layer 3 VXLAN gateway in edge-routed bridging fabric Up to 256 VLANs with IRB enabled Layer 3 underlay that supports IRB and LAG ECMP in the underlay IPv4 and IPv6 virtual gateway MAC address support for IRB interfaces In-service software upgrade (ISSU) for Layer 3 gateway functionality [See Understanding EVPN with VXLAN Data Plane Encapsulation, Example: Configuring an EVPN-VXLAN Edge-Routed Bridging Fabric with a Virtual Gateway, Understanding the MAC Addresses For a Default Virtual Gateway in an EVPN-VXLAN or EVPN-MPLS Overlay Network, and IP Fabric Underlay Network Design and Implementation.] Support for EVPN-VXLAN Type 5 stitching, including: Overlay and underlay ECMP Type 5 stitching Type 2 and Type 5 route coexistence Symmetric IRB In-service software upgrade (ISSU) [See Understanding EVPN with VXLAN Data Plane Encapsulation, IP Fabric Underlay Network Design and Implementation, overlay-ecmp, Understanding EVPN Type 5 Routes, EVPN Type 2 and Type 5 Route Coexistence with EVPN-VXLAN, NSR and Unified ISSU Support for EVPN, and irb-symmetric-routing.] Support for sFlow technology on EVPN-VXLAN. [See Overview of sFlow Technology.] Support for port mirroring and analyzers on EVPN-VXLAN. [See Port Mirroring and Analyzers in an EVPN-VXLAN Environment.] Support for forwarding EVPN data traffic on the spine device without any traffic loss while the leaf device performs a unified ISSU in spine-and-leaf topologies with external BGP (EBGP) connections. [See Understanding Unified ISSU.]
Features optimized for AI-ML fabrics	Support for priority-based flow control (PFC) watchdog. [See PFC Watchdog and congestion-notification-profile.] Telemetry support for streaming IPv4 and IPv6 transit statistics using the native resource paths /state/interfaces/interface[name=' ']/counters/ipv4/ and /state/interfaces/interface[name=' ']/counters/ipv6/. [See Junos YANG Data Model Explorer and route-accounting.] Support for enabling or disabling dynamic load balancing (DLB). You can use the `dynamic-load-balance` statement to selectively enable or disable DLB based on rdma-opcode match or any match available in firewall filters. The optimal link is determined based on the modified port load and port queue metrics when DLB is enabled. [See rdma-opcode, dynamic-load-balance-selective, and egress-quantization.] Support for PFC using DSCPs at Layer 3 for untagged IPv6 traffic. DSCP-based PFC is required to support remote direct memory access (RDMA) over converged Ethernet version 2 (RoCEv2). [See Understanding PFC Using DSCP at Layer 3 for Untagged Traffic.] Support for global load balancing (GLB). [See Global Load Balancing (GLB).] Support for reactive path rebalancing. [See Reactive Path Rebalancing.] SNMP and telemetry support for PFC, explicit congestion notification (ECN), and CoS ingress packet drops due to ingress port congestion. [See SNMP MIBs and Traps Supported by Junos OS and Junos OS Evolved, show snmp mib, and Guidelines for gRPC and gNMI Sensors (Junos Telemetry Interface). For sensors, see Junos YANG Data Model Explorer.] Support for PFC XON threshold. [See xon (Input Congestion Notification).] Extended sFlow monitoring functionality support to export sFlow sample packets through the mgmt_junos interface and non-default virtual routing and forwarding (VRF) WAN ports. [See collector, show sflow collector, and System Logging and Routing Instances.] Support for configuring per-queue alpha value to limit the buffer each queue can consume from the shared pool. [See buffer-dynamic-threshold.] Support for increased global shared buffer pool of up to 147 MB. [See Configuring Ingress and Egress Dedicated Buffers.] Support for Inband Flow Analyzer (IFA) 2.0 transit node. [See Inband Flow Analyzer (IFA) 2.0 Probe for Real-Time Flow Monitoring.]
Layer 2 features	Support for Layer 2 unicast forwarding and VRRP. [See Understanding VRRP.] Support for IGMP snooping, including: IGMPv1, IGMPv2, and IGMPv3 IGMP proxy IGMP querier at Layer 2 Any-source multicast (ASM) and source-specific multicast (SSM) modes Virtual router (VRF-lite) support Integrated routing and bridging (IRB) support [See IGMP Snooping Overview, Multicast Overview, and Integrated Routing and Bridging.]
Layer 3 features	Support for Layer 3 unicast forwarding and generic routing encapsulation (GRE) tunneling. We support both IPv4 and IPv6 unicast routing. [See Generic Routing Encapsulation (GRE).] Support for Layer 3 (L3) multicast forwarding, including: PIM first-hop router rendezvous point (RP) functionality Multicast Source Discovery Protocol (MSDP) Make-before-break (MBB) support for multicast receivers on existing Layer 3 aggregated Ethernet (aex) or link aggregation group (LAG) interfaces. Support includes member addition, member deletion, link up, and link down events. PIM source-specific multicast (SSM) PIM sparse mode (PIM SM) PIM dense mode (PIM DM) L3 multicast forwarding on integrated routing and bridging (IRB) interfaces functionality, including: IPv4 and IPv6 multicast IGMPv1, IGMPv2, and IGMPv3 Multicast Listener Discovery (MLD) versions 1 and 2 Any-source multicast (ASM) and source-specific multicast (SSM) modes [See Multicast Routing Protocols and PIM Overview.] Support for DHCP stateless relay on IRB interfaces and bridge domains. Support includes DHCPv4 and DHCPv6. [See DHCP Relay Agent.]
Network management and monitoring	Support for sFlow technology. [See Overview of sFlow Technology.] Support for port mirroring and analyzers. The QFX5240-64OD and QFX5240-64QD switches can support a maximum of seven port mirroring sessions. [See Understanding Port Mirroring and Analyzers.]
Platform and infrastructure	Support to configure firewall filters and interfaces programmatically using the Juniper Extension Toolkit (JET) APIs. [See Overview of JET APIs.]
Protection against DDoS attacks	Support for configuration and installation of policers at the Packet Forwarding Engine (PFE) level for defense from distributed denial of service (DDoS) attacks. By default, DDoS protection is enabled for many protocols on these switches. [See Configuring Control Plane DDoS Protection Aggregate or Individual Packet Type Policers, show ddos-protection statistics, and show ddos-protection version.]
Routing policy and firewall filters	Firewall filter support on Layer 2 and Layer 3 interfaces. [See Firewall Filter Match Conditions and Actions and Configuring Enhanced Egress Firewall Filters.]
Services applications	Support for generic routing encapsulation (GRE) features, including: GRE tunnels over Gigabit Ethernet, LAG, and VLAN Tagged subinterfaces Payload protocol for IPv4 and IPv6 Delivery protocol for IPv4 Multicast over GRE tunnels Tunnel statistics VRF with GRE Time-to-live (TTL) [See Generic Routing Encapsulation (GRE).]
Software installation and upgrade	Support for zero-touch provisioning (ZTP) over IPv4 and IPv6 on the management and WAN interfaces. [See Zero Touch Provisioning.]