Recommendations

The Secure Data Center Fabric with Juniper SRX4600 JVDE follows an industry-standard ERB design. It simplifies security integration in data centre and secures data center EVPN/VXLAN fabric with Juniper SRX4600/SRX4700. As described in the document, the SRX firewall devices should be configured as MNHA cluster that offers high resiliency in case of node failures. This JVDE uses an industry-standard ERB design, which simplifies security integration and makes it easier to apply security policies to both East-West and North-South traffic. Junos OS Release 24.4R2 is the minimum recommended software version for this JVDE on SRX4600/SRX4700, and has been tested with data center devices recommended in the 3-Stage Data Center Design with Juniper Apstra (JVD) with 23.4R2 and Apstra 6.0 release.

The Juniper hardware listed in the Validated Platforms and Software section in this document are the best-suited switch platforms in terms of features, performance, and the roles that are specified in this JVDE.