Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Services Applications

  • Full reassembly of IPv4 and IPv6 packets for MAP-T (MX Series routers)—The line cards on MX Series routers support full reassembly of IPv4 and IPv6 packets for Mapping of Address and Port with Translation (MAP-T). We are introducing the following enhancements:

    • Maximum supported IP fragment size is increased to 9000 bytes.

    • Maximum IP packet size that can be fully reassembled is increased to 9000 bytes.

    [See Understanding Mapping of Address and Port with Translation (MAP-T).]

  • SecIntel support (MX204, MX304, MX10003, MX10004, MX10008, and MX10016)—We have integrated Juniper Advanced Threat Prevention Cloud (Juniper ATP Cloud) with MX204, MX304, and MX10K routers to protect all hosts in your network against security threats.

    The Security Intelligence (SecIntel) process (IPFD) downloads the SecIntel feeds and parses them from the feed connector or ATP Cloud cloud feed server. The web filtering process (URL-filterd) reads the file contents that are fetched from the IPFD and configures the filters on the Packet Forwarding Engine accordingly.

    For the threats configured with log action, the threat-level and the tenant or the VRF information are embedded in the outgoing syslogs. The CoS policy maps are enhanced with a new user-attribute integer keyword to store and indicate the threat level.

    [See Integration of Juniper ATP Cloud and Web Filtering on MX Series Routers.]

  • Support for inline services (MX304)—You can use the following inline services on the Packet Forwarding Engine when it is offline or online due to line-card MICs (LMIC) online insertion and removal (OIR):

    • Inline 6rd

    • Network Address Translation (NAT)

    • Mapping of Address and Port with Encapsulation (MAP-E) with IPv4/IPv6 reassembly
    • Mapping of Address and Port with Translation (MAP-T) with IPv4/IPv6 reassembly.

    [See Configuring Inline 6rd, Mapping of Address and Port with Encapsulation (MAP-E), and Mapping of Address and Port with Translation (MAP-T).]

  • Inline IPsec multipath forwarding with UDP encapsulation (MX304, MX10004, and MX10008))—You can enable the UDP encapsulation of the IPsec traffic which appends a UDP header after the ESP header. The encapsulation provides entropy to the intermediate routers, which helps ECMP. The IPsec packets to be forwarded over multiple paths, thus increasing the throughput.

    [See Inline IPsec Multipath Forwarding with UDP Encapsulation.]

  • Port based si- interface support (MX304, MX10004, and MX10008)—Create four si- interfaces per PIC in the format si-fpc/pic/port for inline IPsec configuration. If both FPC and PIC are 0, you can have four si interfaces: si-0/0/0, si-0/0/1, si-0/0/2, and si-0/0/3.

    [See Inline IPsec -Overview.]