QFX5120 Ethernet Switch

Download Datasheet

Product Overview

The QFX5120 Switch delivers rich, low latency Layer 2/Layer 3 features and advanced EVPN-VXLAN capabilities, making it an ideal data center top-of-rack and aggregation switch for campus enterprise deployments.

Featuring L3 gateway capabilities for routing between virtualized and bare-metal servers, the QFX5120 is designed for extremely agile data centers that require support for overlay/underlay network architectures. Native 25GbE with 100GbE uplink ports on the QFX5120-48Y and QFX5120-48YM, 10GbE/1GbE copper with 100GbE uplink ports on the QFX5120-48T, and 32 100GbE ports on the QFX5120-32C make the QFX5120 family ideal for spine-and-leaf network deployments.

Product Description

The Juniper Networks® QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments. The QFX5120 switch is a versatile routing and switching platform addressing higher server access speed and campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE uplinks for collapsed spine data center or campus core deployments.

Product Options

The QFX5120 Switch includes four compact 1 U platforms—the QFX5120-48Y, the QFX5120-48YM, the QFX5120-48T, and the QFX5120-32C—that provide wire-speed packet performance, very low latency, and a rich set of Junos® operating system features.

QFX5120-48Y

The QFX5120-48Y is a 25GbE/100GbE data center leaf and campus distribution switch featuring:

  • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
  • Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
  • Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550 nanoseconds
  • A 2.2 GHz quad-core Intel CPU with 16 GB memory and 50 GB SSD storage

Using breakout cables, each of the eight 100GbE QSFP28 ports can be broken into four 25GbE SFP28 ports, while each 40GbE quad small form-factor pluggable plus (QSFP+) transceiver ports can be broken into four 10GbE small form-factor pluggable plus (SFP+) transceiver ports, increasing the total number of supported 25GbE and 10GbE ports per switch to 80.

QFX5120-48YM

The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution switch featuring:

  • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
  • Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
  • Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550 nanoseconds
  • Media Access Control Security (MACsec) AES-256 support across all ports
  • A 2.9 GHz quad-core Intel CPU with 16 GB memory and 100 GB SSD storage

When using breakout cables, two of the 100GbE QSFP28 ports (ports 50 and 52) can be broken into four 25GbE SFP28 or four 10GbE SFP+ ports, increasing the maximum number of 10GbE/25GbE ports supported to 56. When using breakouts, the total number of all ports on the switch, including 6x100GbE ports and 56x10/25GbE, is 62.

QFX5120-48T

The QFX5120-48T is a 10GbE/100GbE data center leaf and campus distribution switch featuring:

  • 48 dual-speed 1GbE/10GbE RJ-45 copper downlink ports
  • Six dual-speed 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
  • Up to 2.16 Tbps L2 and L3 performance (bidirectional), with latency as low as 550 nanoseconds
  • A 2.2 GHz quad-core Intel CPU with 16 GB memory and 100 GB SSD storage

Using breakout cables, each 100GbE QSFP28 port can be broken into four 25GbE SFP28 ports, while each 40GbE QSFP+ port can be broken into four 10GbE SFP+ ports, increasing the total number of 25GbE and 10GbE ports per switch to 72.

QFX5120-32C

The QFX5120-32C is a compact 100GbE data center leaf-and-spine and campus distribution switch featuring:

  • 32 100GbE (QSFP28) or 40GbE (QSFP+) uplink ports
  • A 2.2 GHz quad-core Intel CPU with 16 GB memory and 64 GB SSD storage
  • Up to 6.4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550 nanoseconds

Using breakout cables, each 100GbE QSFP28 port can be broken into four 25GbE SFP28 ports and each 40GbE QSFP+ port can be broken into four 10GbE SFP+ ports, increasing the total number of 25GbE and 10GbE ports per switch to 128.

In addition, all QFX5120 switch models include:

  • Support for VXLAN as an L2 or L3 gateway
  • Advanced Junos OS features such as Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN), BGP add-path, L3 VPN, and MPLS
  • Feature-rich automation capabilities with support for Python and zero-touch provisioning (ZTP)

Junos OS

The high-performance QFX5120 Switch runs Junos OS, Juniper’s powerful and robust network operating system that powers all Juniper switches, routers, and firewalls. Key Junos OS features that enhance the functionality and capabilities of the QFX5120 include:

  • Software modularity, with process modules running independently in their own protected memory space and with the ability to do process restarts
  • Uninterrupted routing and forwarding, with features such as nonstop active routing (NSR) and nonstop bridging (NSB)
  • Commit and rollback functionality that ensures error-free network configurations
  • A powerful set of scripts for on-box problem detection, reporting, and resolution

Data Center Deployments

Data centers demand high-speed, low-latency, storage- and I/O-converged networking solutions that maximize performance for physical servers, virtual servers, and storage. The QFX5120 Switch addresses these issues with low-latency, lossless, high-density 10GbE, 25GbE, and 100GbE interfaces on a compact 1 U platform. In addition, the QFX5120 offers EVPN-VXLAN L2 and L3 gateway support, making it an ideal solution for either edge routed or centrally routed overlay deployments in the data center. The QFX5120 also supports flexible back-to-front and front-to-back airflow cooling options, ensuring consistency with server designs for hot-aisle or cold-aisle deployments.

Data Center Server Access

The QFX5120-48Y and QFX5120-48YM support tri-speed 1GbE/10GbE/25GbE, making them a perfect fit for top-of-rack deployments. The 48 ports of native 10GbE/25GbE for server connectivity, plus up to eight 40GbE or 100GbE ports for uplink connectivity, provide very low oversubscription of 1.5:1 from access to aggregation.

The QFX5120-48T supports dual-speed 1GbE/10GbE, also making it a perfect fit for top-of-rack deployments. The 48 native 10GbE RJ-45 copper ports for server connectivity, plus up to six 40GbE or 100GbE ports for uplink connectivity, provide unsubscribed (0.8:1) access-to-aggregation ratio.

The QFX5120-32C can also be used for high-density 25GbE server connectivity, with an option to break out the 100GbE ports into four 25GbE ports.

In Figure 1, the QFX5120 is deployed as a leaf acting as an edge-routed gateway. In this topology, the VXLAN tunnel encapsulation and decapsulation take place on the QFX5120 leaf switches, while Juniper Networks QFX5200-32C or Juniper Networks QFX5210-64C spine switches are used for IP transit. Juniper Networks QFX5110-32Q switches can also be used in the spine to build a 40GbE fabric.

 

Figure 1: Edge-routed bridging at the leaf with QFX5200-32C/QFX5210-64C as spine switches

In Figure 2, the QFX5120-48YM leaf and Juniper Networks QFX10008 Switch spine are deployed as EVPN-VXLAN switches acting as centrally routed gateways or distributed edge routed gateways. If centrally routed bridging is used, the VXLAN tunnel encapsulation and decapsulation occur on the spine switches for inter-IRB (integrated routing and bridging) symmetric routing purposes. If edge routed bridging is used, the IP first hop gateways are distributed at the leaf-level QFX5120-48YM switches using Type 5 symmetric inter-IRB routing. When using a QFX10000-30C-M MACsec line card installed in a spine QFX10008 Switch working with a leaf QFX5120-48YM switch, the leaf-to-spine architecture offers end-to-end MACsec AES-256 capabilities.

Figure 2: QFX5120-48T and QFX5120-48Y/48YM in a leaf-and-spine deployment

Data Center Spine

The QFX5120-32C, with 32 ports of 100GbE, can serve as the spine in small to medium-sized enterprise data centers. The QFX5120-32C can be deployed in a three-stage IP Clos with EVPN-VXLAN overlay to support as many as 1500 server access ports. The QFX5120-48Y/QFX5120-48YM and QFX5120-32C can also be used as a collapsed spine data center deployment, offering Ethernet segment identifier-link aggregation group (ESI-LAG) connectivity to the rest of the network infrastructure blocks.

All QFX5120 switches can operate in both cut-through and store-and-forward modes, delivering sustained wire-speed switching with sub-microsecond latency and low jitter for any packet size (including jumbo frames) in either mode. With features such as multichassis link aggregation (MC-LAG), the QFX5120 supports active/active server dual-homing and can use full bisectional bandwidth from server to switch.

Equipped with Junos OS, the QFX5120 supports the most advanced and robust routing capabilities in the industry, OSPF for both IPv4 and IPv6, as well as advanced routing capabilities such as IS-IS and BGP. With additional capabilities such as 64-way equal-cost multipath (ECMP) and BGP add path, the QFX5120 is an ideal building block for deploying the most robust L3 underlay for SDN.

Campus Deployments

The QFX5120-48Y and QFX5120-48YM are ideal as campus distribution switches with 10GbE/25GbE downlinks and 40GbE/100GbE uplinks supporting technologies like MC-LAG and EVPN multihoming.

The QFX5120-32C is ideal as a campus core switch with 32 ports of 100GbE and support for technologies like campus fabric core-distribution.

The QFX5120-48T supports dual-speed 1GbE/10GbE, also making it a perfect fit for top-of-rack deployments in campus environments for server connectivity.

MC-LAG and EVPN Multihoming (Collapsed Core/Distribution)

A pair of interconnected QFX5120 switches can be deployed to provide EVPN multihoming (ESI-LAG) or multichassis link aggregation (MC-LAG) in a collapsed core/distribution configuration. This eliminates the need for Spanning Tree Protocol (STP) across the campus network by providing multihoming capabilities from the access to the distribution layer, while distribution to the core is an L3 IP fabric. ESI-LAG also supports horizontal scaling with more than two devices in the distribution layer and can extend EVPN to the core.

Figure 3: QFX5120 as a campus collapsed core/distribution switch with EVPN multihoming (ESI-LAG) and MC-LAG support.

Figure 4: QFX5120 as a campus distribution switch with EVPN-VXLAN L2/L3 gateway support.

Campus Fabric Core-Distribution

A pair of interconnected QFX5120 switches can provide EVPN L2 and L3 VXLAN gateway support. This eliminates the need for STP across the campus network by providing a multihoming capability from the access to the distribution layer, while distribution to the core is an L3 IP fabric using EVPN technology. The IP fabric can also extend to connect multiple enterprise buildings, while VXLAN allows stretching L2 across buildings. An IP Clos network between the distribution and the core layers can exist in two modes, both of which are supported by the QFX5120:

  • Centrally routed bridging overlay: An IRB interface placed at a central location in the fabric (in this case, a core device)
  • Edge routed bridging overlay: An IRB interface placed at the edge of the fabric (in this case, a distribution device)

Features and Benefits

  • Automation: The QFX5120 supports a number of network automation and plug-and-play operational features, including ZTP and event scripts, automatic rollback, and Python scripting.
  • Flexible forwarding table: The QFX5120 includes a unified forwarding table, which allows the hardware table to be carved into configurable partitions of L2 media access control (MAC), L3 host, and longest prefix match (LPM) tables. In a pure L2 environment, the QFX5120 supports 288,000 MAC addresses. In L3 mode, the table can support 208,000 host entries. In LPM mode, it can support 351,000 prefixes. Junos OS provides configurable options through a CLI that can optimize the QFX5120 for various deployment scenarios.
  • Intelligent buffer management: The QFX5120 features a total of 32 MB of shared buffers. While 25% of the total buffer space is dedicated, the rest is shared among all ports and is user configurable. The intelligent buffer mechanism in the QFX5120 effectively absorbs traffic bursts while providing deterministic performance, significantly increasing performance over static allocation.
  • MPLS: A broad set of MPLS features, including L3 VPN, IPv6 provider edge router (6PE), RSVP traffic engineering, and LDP allow standards-based network segmentation and virtualization, enabling the QFX5120 to be deployed as a low latency MPLS label-switching router (LSR).
  • VXLAN overlays: The QFX5120 switch is capable of both L2 and L3 gateway services. Customers can deploy overlay networks to provide L2 adjacencies for applications over L3 fabrics. The overlay networks use VXLAN in the data plane and EVPN or Open vSwitch Database (OVSDB) for programming the overlays.
  • MACsec and hop-by-hop encryption: The QFX5120-48YM supports IEEE 802.1AE MACsec AES-256, providing link-layer data confidentiality, data integrity, and data origin authentication. The MACsec feature enables the QFX5120-48YM to support 2 Tbps of near line-rate hardware-based traffic encryption on all 100GbE, 40GbE, 25GbE, 10GbE, and 1GbE ports. Defined by IEEE 802.1AE, MACsec provides secure, encrypted communication at the link layer that is capable of identifying and preventing threats from denial-of-service (DoS) and intrusion attacks, as well as man-in-the-middle, masquerading, passive wiretapping, and playback attacks launched from behind the firewall. When MACsec is deployed on switch ports, all traffic is encrypted on the wire, but traffic inside the switch is not. This allows the switch to apply network capabilities such as quality of service (QoS) and sFlow to each packet without compromising the security of packets on the wire.

Figure 5: Juniper HealthBot overview

In addition, Ethernet-based WAN networks can use MACsec to provide link security over long haul connections. MACsec is transparent to Layer 3 and higher layer protocols and is not limited to IP traffic; it works with any type of wired or wireless traffic carried over Ethernet links.

  • Virtual Chassis: The QFX5120 supports Juniper Networks unique Virtual Chassis technology, which enables up to two interconnected switches to operate as a single, logical device with a single IP address. This technology allows campus enterprises to eliminate STP and efficiently utilize network links. QFX5120-48Y (starting Junos 19.3), QFX5120-32C (staring Junos 20.3) and QFX5120-48T (starting Junos 20.2) support Virtual chassis. Note: QFX5120-48YM does not support Virtual Chassis at this time, this feature is reserved for future release.

Junos Telemetry Interface

The QFX5120 supports Junos telemetry interface (JTI), a modern telemetry streaming tool designed for performance monitoring in complex, dynamic data centers. Streaming data to a performance management system enables network administrators to measure trends in link and node utilization and troubleshoot such issues as network congestion in real time. JTI delivers the following features:

  • Application visibility and performance management by provisioning sensors to collect and stream data and analyze application and workload flow paths through the network
  • Capacity planning and optimization by proactively detecting hotspots and monitoring latency and microbursts
  • Troubleshooting and root cause analysis via high-frequency monitoring and correlation of overlay and underlay networks

Monitoring and Analytics with Juniper HealthBot Software

Juniper® HealthBot software delivers the following features and benefits for enhanced monitoring and analytics:

  • Key performance indicator collection and visualization
  • Anomaly detection
  • Root cause analysis
  • Automated remediation
  • Multivendor support
  • Customizable playbooks
  • JTI telemetry

QFX5120 Switch Specifications

Hardware

Switching Capacity

  • QFX5120-48Y: 4 Tbps (bidirectional)/1.31 Bpps
  • QFX5120-48YM: 4 Tbps (bidirectional)/1.31 Bpps
  • QFX5120-48T: 2.16 Tbps (bidirectional)/1001.7 Mpps
  • QFX5120-32C: 6.4 Tbps (bidirectional)/2 Bpps
  • Switching mode (all models): Cut-through and store-and-forward

Weight

  • QFX5120-48Y: 23.7 lb (10.75 kg)
  • QFX5120-48YM: 24.8 lb (11.25 kg)
  • QFX5120-48T: 24.25 lb (11 kg)
  • QFX5120-32C: 21.12 lb (9.58 kg)

Dimensions (H x W x D)

  • QFX5120-48Y: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x 52.02 cm)
  • QFX5120-48YM: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x 52.02 cm)
  • QFX5120-48T: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x 52.02 cm)
  • QFX5120-32C: 1.7 x 17.26 x 20.27 in. (4.32 x 43.84 x 51.5 cm)

Power Consumption

  • QFX5120-48Y
    • Max load: 450 W
    • Typical load: 260 W
  • QFX5120-48YM
    • Max load: 650 W
    • Typical load: 550 W
  • QFX5120-48T
    • Max load: 450 W
    • Typical load: 300 W
  • QFX5120-32C
    • Max load: 515 W
    • Typical load: 380 W

Airflow

  • Front-to-back (airflow out) for hot aisle deployment
  • Back-to-front (airflow in) for cold aisle deployment

Interface Options

  • QFX5120-48Y
    • 2 management ports: 2 x RJ-45 ports
    • 1GbE SFP: 48 (24 copper 1GbE)
    • 10GbE SFP+: 48/80(with breakout cable)
    • 25GbE SFP: 48/80 (with breakout cable)
    • 40GbE QSFP+: 8 (each QSFP+ port can be configured as a 4 x 10GbE interface or as a 40 Gbps port)
    • 100GbE QSFP28: 8 (each QSFP28 port can be configured as a 4 x 25GbE interface or as a 100 Gbps port)
    • SFP GbE optical and copper module
    • SFP+ 10GbE optical modules
    • SFP+ direct attach copper (DAC) cables: 1/3/5 m twinax copper and 1/3/5/7 m active twinax copper
    • SFP28 DAC cables: 1/3 m twinax copper
    • SFP28 optics: Short reach (SR), long reach (LR)
    • QSFP+ to SFP+: 10GbE direct attach breakout copper (1/3 m twinax copper cable)
  • QFX5120-48YM
    • 2 management ports: 2 x RJ-45 ports
    • 1GbE SFP: 48
    • 10GbE SFP+: 48/56 (total of 56 ports with breakout cable on port 50 and 52)
    • 25GbE SFP: 48/56 (total of 56 ports with breakout cable on port 50 and 52)
    • 40GbE QSFP+: 8 (QSFP+ port 50 and 52 can be configured as a 4 x 10GbE interface or as a 40 Gbps port)
    • 100GbE QSFP28: 8 (QSFP28 port 50 and 52 can be configured as a 4 x 25GbE interface or as a 100 Gbps port)
    • SFP GbE optical
    • SFP+ 10GbE optical modules
    • SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m active twinax copper
    • SFP28 DAC cables: 1/3 m twinax copper
    • SFP28 optics: Short reach (SR), long reach (LR)
    • QSFP+ to SFP+: 10GbE direct attach breakout copper (1/3 m twinax copper cable)
  • QFX5120-48T
    • 1 management port: 1 x RJ-45 port
    • 1GbE RJ45 (copper): 48 (each port is dual-speed supporting 1GbE/10GbE)
    • 40GbE QSFP+: 6 (ports 50 and 51 can be configured as a 4 x 10GbE interface or as 40 Gbps interfaces)
    • 100GbE QSFP28: 6 (ports 50 and 51 can be configured as a 4 x 25GbE interface or as 100 Gbps interfaces)
  • QFX5120-32C
    • 1 RJ-45 in-band management port
    • 10GbE SFP+: 2 native ports plus 124 (with 4 x 10GbE breakout cable)
    • 25GbE SFP: 124 (with breakout cable)
    • 40GbE QSFP+: 32 (ports 0-31 can be configured as a 4 x 10GbE interface)
    • 100GbE QSFP28: 32 (ports 0-31 can be configured as a 4 x 25GbE interface)
    • SFP GbE optical and copper module
    • SFP+ 10GbE optical modules
    • SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m active twinax copper
    • SFP28 DAC cables: 1/3 m twinax copper
    • SFP28 optics: SR, LR
    • QSFP+ to SFP+: 10GbE direct attach breakout copper (1/3 m twinax copper cable)

Common to All Models

  • 1 USB 2.0 port
  • 1 RS-232 console port
  • Supported transceiver and direct attach cable
    • QSFP+ DAC cables: 1/3 m twinax copper
    • QSFP+ optics: SR4, LX4, ESR4, ER4, LR4
    • QSFP28 optics: SR4, ER4, PSM4, CWDM4, LR4
  • Rack installation kit
  • Versatile four post mounting options for 19-in server rack or datacom rack

Airflow

  • Redundant (N+1) and hot-pluggable fan modules for front-to-back and back-to-front airflow
  • Redundant variable-speed fans to reduce power draw

Power Supply and Fan Modules

  • Dual redundant (1+1) and hot-pluggable 650 W AC/DC power supplies
  • 100-240 V single phase AC power
  • -48 to -60 V DC power supply
  • Redundant 4+1 (QFX5120-48Y/YM and QFX5120-48T) or 5+1 (QFX5120-32C) and hot-pluggable fan modules for front-to- back or back-to-front airflow

Performance Scale (Unidimensional)

  • MAC addresses per system: 288,000
  • VLAN IDs: 4093
  • Number of link aggregation groups (LAGs):
    • 80 (QFX5120-48Y/YM, QFX5120-32C)
    • 64 (QFX5120-48T)
  • Number of ports per LAG: 64
  • IPv4 unicast routes: 351,000 prefixes; 208,000 host routes; 64 ECMP paths
  • IPv4 multicast routes: 104,000
  • IPv6 unicast routes: 168,000 prefixes; 104,000 host routes
  • IPv6 multicast routes: 52,000
  • Address Resolution Protocol (ARP) entries: 64,000
  • Jumbo frame: 9216 bytes
  • Spanning Tree Protocol (STP)
  • Multiple Spanning Tree Protocol (MSTP) instances: 64
  • VLAN Spanning Tree Protocol (VSTP) instances: 509
  • Traffic mirroring
    • Mirroring destination ports per switch: 4
    • Maximum number of mirroring sessions: 4
    • Mirroring destination VLANs per switch: 4

Software Features Supported

Layer 2 Features

  • STP—IEEE 802.1D (802.1D-2004)
  • Rapid Spanning Tree Protocol (RSTP) (IEEE 802.1w); MSTP (IEEE 802.1s)
  • Bridge protocol data unit (BPDU) protect
  • Loop protect
  • Root protect
  • RSTP and VSTP running concurrently
  • VLAN—IEEE 802.1Q VLAN trunking
  • Routed VLAN interface (RVI)
  • Port-based VLAN
  • Private VLAN (PVLAN)
  • VLAN translation
  • Static MAC address assignment for interface
  • Per VLAN MAC learning (limit)
  • MAC learning disable
  • Link Aggregation and Link Aggregation Control Protocol (LACP) (IEEE 802.3ad)
  • MACsec with AES256 (QFX5120-48YM only)
  • Virtual Chassis—up to 2 members on QFX5120-48Y, QFX5120-32C and QFX5120-48T

Link Aggregation

  • MC-LAG
  • LAG load sharing algorithm—bridged or routed (unicast or multicast) traffic
  • IP: Session Initiation Protocol (SIP), Dynamic Internet Protocol (DIP), TCP/UDP source port, TCP/UDP destination port
  • Layer 2 and non-IP: MAC SA, MAC DA, Ethertype, VLAN ID, source port

Layer 3 Features (IPv4)

  • Static routing
  • Routing protocols (RIP, OSPF, IS-IS, BGP)
  • Virtual Router Redundancy Protocol (VRRP)
  • Virtual router
  • Dynamic Host Configuration Protocol (DHCP) relay
  • Proxy Address Resolution Protocol (ARP)

EVPN-VXLAN Features

  • MAC virtual routing and forwarding (MAC-VRF) multiple EVPN instances (EVI) with service-types vlan-based, vlan-aware, vlan-bundle
  • Symmetric inter-IRB routing with anycast gateway and EVPN type-5 instances
  • Proxy IGMPv2—EVPN route types 6/7/8
  • ARP/ND proxy/suppression
  • ESI-LAG A/A multihoming using Enterprise and SP-style interfaces
  • Enhanced Ethernet loop detection
  • Filter-based forwarding on IRB.VGA
  • EVPN advanced route policing
  • VLAN-id overlapping using SP-style interfaces

Multicast Features

  • Internet Group Management Protocol (IGMP): v1, v2, v3
  • IGMP snooping: v1, v2, and v3 (Layer 2 only)
  • IGMP filter
  • Protocol Independent Multicast-Sparse Mode (PIM-SM), PIM-Source-Specific Multicast (PIM-SSM), PIM-Dense Mode (PIM-DM) in pure IP fabric use case
  • Multicast Source Discovery Protocol (MSDP)

Security and Filters

  • Secure interface login and password
  • RADIUS
  • TACACS+
  • Ingress and egress filters: Allow and deny, port filters, VLAN filters, and routed filters, including management port filters
  • Filter actions: Logging, system logging, reject, mirror to an interface, counters, assign forwarding class, permit, drop, police, mark
  • SSH v1, v2
  • Static ARP support in pure IP fabric
  • Storm control, port error disable, and autorecovery
  • Source MAC address filtering on the port
  • DHCP snooping in pure IP fabric use case

Quality of Service (QoS)

  • L2 and L3 QoS: Classification, rewrite, queuing
  • Rate limiting:
    • Ingress policing: Single-rate two-color policer, two-rate three-color policer
    • Egress policing: Policer, policer mark down action
    • Egress shaping: Per queue on each port
  • 10 hardware queues per port (8 unicast and 2 multicast)
  • Strict-priority queue (SPQ), shaped-deficit weighted round-robin (SDWRR), weighted random early detection (WRED), weighted tail drop
  • 802.1p remarking
  • Layer 2 classification criteria: Interface, MAC address, Ethertype, 802.1p, VLAN
  • Congestion avoidance capabilities: WRED
  • Trust IEEE 802.1p (ingress)
  • Remarking of bridged packets
  • Default inner to outer DiffServ code point (DSCP) copy for EVPN-VXLAN

IP Storage

  • Priority-based flow control (PFC)—IEEE 802.1Qbb, DCBX
  • PFC using DSCP and explicit congestion notification (ECN) for ROCEv2

High Availability

  • Bidirectional Forwarding Detection (BFD)
  • Uplink failure detection

MPLS

  • Static label-switched paths (LSPs)
  • RSVP-based signaling of LSPs
  • LDP-based signaling of LSPs
  • LDP tunneling (LDP over RSVP)
  • MPLS class of service (CoS)
  • MPLS LSR support
  • IPv6 tunneling (6PE) (via IPv4 MPLS backbone)
  • IPv4 L3 VPN (RFC 2547, RFC 4364)

Management and Operations

  • Role-based CLI management and access
  • CLI via console, telnet, or SSH
  • Extended ping and traceroute
  • Junos OS configuration rescue and rollback
  • Image rollback
  • SNMP v1/v2/v3
  • Junos XML management protocol
  • sFlow v5
  • Beacon LED for port and system
  • ZTP
  • OpenStack Neutron Plug-in
  • Python
  • Junos OS event, commit, and OP scripts
  • JTI

Traffic Mirroring

  • Port-based
  • LAG port
  • VLAN-based
  • Filter-based
  • Mirror to local
  • Mirror to remote destinations (L2 over VLAN)

Standards Compliance

IEEE Standard

  • IEEE 802.1D
  • IEEE 802.1w
  • IEEE 802.1
  • IEEE 802.1Q
  • IEEE 802.1p
  • IEEE 802.1ad
  • IEEE 802.3ad
  • IEEE 802.1AB
  • IEEE 802.3x
  • IEEE 802.1Qbb
  • IEEE 802.1Qaz

T11 Standards

  • INCITS T11 FC-BB-5

Supported RFCs

  • RFC 768 UDP
  • RFC 783 Trivial File Transfer Protocol (TFTP)
  • RFC 791 IP
  • RFC 792 ICMP
  • RFC 793 TCP
  • RFC 826 ARP
  • RFC 854 Telnet client and server
  • RFC 894 IP over Ethernet
  • RFC 903 RARP
  • RFC 906 TFTP Bootstrap
  • RFC 951 1542 BootP
  • RFC 1058 Routing Information Protocol
  • RFC 1112 IGMP v1
  • RFC 1122 Host requirements
  • RFC 1142 OSI IS-IS Intra-domain Routing Protocol
  • RFC 1256 IPv4 ICMP Router Discovery Protocol (IRDP)
  • RFC 1492 TACACS+
  • RFC 1519 Classless Interdomain Routing (CIDR)
  • RFC 1587 OSPF not-so-stubby area (NSSA) Option
  • RFC 1591 Domain Name System (DNS)
  • RFC 1745 BGP4/IDRP for IP—OSPF Interaction
  • RFC 1772 Application of the Border Gateway Protocol in the Internet
  • RFC 1812 Requirements for IP Version 4 Routers
  • RFC 1997 BGP Communities Attribute
  • RFC 7348 VXLAN—Virtual extensible Local Area Network
  • RFC 8365 NVO—Network Virtualization Overlay Solution Using Ethernet VPN (EVPN-VXLAN)
  • RFC 2030 SNTP, Simple Network Time Protocol
  • RFC 2068 HTTP server
  • RFC 2131 BOOTP/DHCP relay agent and Dynamic Host
  • RFC 2138 RADIUS Authentication
  • RFC 2139 RADIUS Accounting
  • RFC 2154 OSPF with Digital Signatures (Password, MD-5)
  • RFC 2236 IGMP v2
  • RFC 2267 Network ingress filtering
  • RFC 2328 OSPF v2 (edge mode)
  • RFC 2338 VRRP
  • RFC 2362 PIM-SM (edge mode)
  • RFC 2370 OSPF Opaque LSA Option
  • RFC 2385 Protection of BGP Sessions via the TCP MD5 Signature Option
  • RFC 2439 BGP Route Flap Damping
  • RFC 2453 RIP v2
  • RFC 2474 Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers
  • RFC 2597 Assured Forwarding PHB (per-hop behavior) Group
  • RFC 2598 An Expedited Forwarding PHB
  • RFC 2697 A Single Rate Three Color Marker
  • RFC 2698 A Two Rate Three Color Marker
  • RFC 2796 BGP Route Reflection—An Alternative to Full Mesh IBGP
  • RFC 2918 Route Refresh Capability for BGP-4
  • RFC 3065 Autonomous System Confederations for BGP
  • RFC 3376 IGMP v3 (source-specific multicast include mode only)
  • RFC 3392 Capabilities Advertisement with BGP-4
  • RFC 3446 Anycast RP
  • RFC 3569 SSM
  • RFC 3618 MSDP
  • RFC 3623 Graceful OSPF Restart
  • RFC 4271 Border Gateway Protocol 4 (BGP-4)
  • RFC 4360 BGP Extended Communities Attribute
  • RFC 4456 BGP Route Reflection: An Alternative to Full Mesh Internal BGP (IBGP)
  • RFC 4486 Subcodes for BGP Cease Notification Message
  • RFC 4724 Graceful Restart Mechanism for BGP
  • RFC 4812 OSPF Restart Signaling
  • RFC 4893 BGP Support for Four-octet AS Number Space
  • RFC 5176 Dynamic Authorization Extensions to RADIUS
  • RFC 5396 Textual Representation of Autonomous System (AS) Numbers
  • RFC 5668 4-Octet AS Specific BGP Extended Community
  • RFC 5880 Bidirectional Forwarding Detection (BFD) Dynamic Host Configuration Protocol (DHCP) server

Supported MIBs

  • RFC 1155 SMI
  • RFC 1157 SNMPv1
  • RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-Like MIB and TRAPs
  • RFC 1850 OSPFv2 MIB
  • RFC 1901 Introduction to Community-based SNMPv2
  • RFC 2011 SNMPv2 for Internet Protocol using SMIv2
  • RFC 2012 SNMPv2 for the Transmission Control Protocol using SMIv2
  • RFC 2013 SNMPv2 for the User Datagram Protocol using SMIv2
  • RFC 2233 The Interfaces Group MIB using SMIv2
  • RFC 2287 System Application Packages MIB
  • RFC 2570 Introduction to Version 3 of the Internet-standard Network Management Framework
  • RFC 2571 An Architecture for describing SNMP Management Frameworks (read-only access)
  • RFC 2572 Message Processing and Dispatching for the SNMP (read-only access)
  • RFC 2576 Coexistence between SNMP Version 1, Version 2, and Version 3
  • RFC 2578 SNMP Structure of Management Information MIB
  • RFC 2579 SNMP Textual Conventions for SMIv2
  • RFC 2580 Conformance Statements for SMIv2
  • RFC 2665 Ethernet-like Interface MIB
  • RFC 2787 VRRP MIB
  • RFC 2790 Host Resources MIB
  • RFC 2819 RMON MIB
  • RFC 2863 Interface Group MIB
  • RFC 2932 IPv4 Multicast MIB
  • RFC 3410 Introduction and Applicability Statements for Internet Standard Management Framework
  • RFC 3411 An Architecture for Describing SNMP Management Frameworks
  • RFC 3412 Message Processing and Dispatching for the SNMP
  • RFC 3413 Simple Network Management Protocol (SNMP) Applications (all MIBs are supported except the Proxy MIB)
  • RFC 3414 User-based Security Model (USM) for version 3 of SNMPv3
  • RFC 3415 View-based Access Control Model (VACM) for the SNMP
  • RFC 3416 Version 2 of the Protocol Operations for the SNMP
  • RFC 3417 Transport Mappings for the SNMP
  • RFC 3418 Management Information Base (MIB) for the SNMP
  • RFC 3584 Coexistence between Version 1, Version 2, and Version 3 of the Internet-standard Network Management Framework
  • RFC 3826 The Advanced Encryption Standard (AES) Cipher Algorithm in the SNMP User-based Security Model
  • RFC 4188 Definitions of Managed Objects for Bridges
  • RFC 4318 Definitions of Managed Objects for Bridges with Rapid Spanning Tree Protocol
  • RFC 4363b Q-Bridge VLAN MIB

Approvals

Safety

  • CAN/CSA-C22.2 No. 62368-1-14 Information Technology Equipment—Safety
  • UL 62368-1 Information Technology Equipment—Safety
  • EN 62368-1: 2014 Information Technology Equipment—Safety
  • IEC 62368-1: 2014 2nd Edition Information Technology Equipment—Safety (All country deviations): CB Scheme
  • IEC 60950-1:2005/A2:2013 Information Technology Equipment—Safety (All country deviations): CB Scheme

EMC

  • EN 300 386 V1.6.1 (2012-09) Electromagnetic compatibility and radio spectrum matters (ERM) Telecommunication network equipment
  • EN 300 386 V2.1.1 (2016-07) Telecommunication network equipment; EMC requirements; Harmonized Standard covering the essential requirements of the Directive 2014/30/EU
  • EN 55032:2012 (CISPR 32:2012) Electromagnetic compatibility of multimedia equipment—Emission requirements
  • EN 55024:2010 (CISPR 24:2010) Information technology equipment—immunity characteristics—limits and methods of measurement
  • IEC/EN 61000 Immunity Test
  • AS/NZS CISPR 32:2015 Australia/New Zealand Radiated and Conducted Emissions
  • FCC 47 CFR Part 15 USA Radiated and Conducted Emissions
  • ICES-003 Canada Radiated and Conducted Emissions
  • VCCI-CISPR 32:2016 Japanese Radiated and Conducted Emissions
  • BSMI CNS 13438 Taiwan Radiated and Conducted Emissions (at 10 meters)
  • KN32/KN35 Korea Radiated Emission and Immunity Characteristics (at 10 meters)
  • KN61000 Korea Immunity Test
  • TEC/SD/DD/EMC-221/05/OCT-16 India EMC standard

Environmental Compliance

  Restriction of Hazardous Substances (ROHS) 6/6

      80 Plus Silver PSU Efficiency

      Recycled material

  Waste Electronics and Electrical Equipment (WEEE)

  Registration, Evaluation, Authorisation and Restriction of Chemicals (REACH)

     China Restriction of Hazardous Substances (ROHS)

Telco

  • Common Language Equipment Identifier (CLEI) code

Environmental Ranges

  • Operating temperature: 32° to 104° F (0° to 40° C)
  • Storage temperature: -40° to 158° F (-40° to 70° C)
  • Operating altitude: Up to 6000 ft (1829 m)
  • Relative humidity operating: 5% to 90% (noncondensing)
  • Relative humidity nonoperating: 0% to 95% (noncondensing)

Juniper Networks Services and Support

Juniper Networks leads the market in performance-enabling services designed to accelerate, extend, and optimize your deployments. Our services enable you to maximize operational efficiency, reduce costs, and minimize risk while achieving a faster time-to-value for your network.

By leveraging best practices from across the industry, you get the maximum levels of system performance, designed and delivered by the world’s leading professional technology experts.

For more information, please visit www.juniper.net/us/en/products-services.

Installation and Implementation Service

Juniper Professional Services offers a Data Center Switching QuickStart program to ensure that the solution is operational and the customer has a complete understanding of areas such as configuration and ongoing operations. The QuickStart service provides an onsite consultant who works with the client team to quickly develop the initial configuration and deployment of a small Juniper Networks data center switching environment. A knowledge transfer session, which is intended as a review of local implementation and configuration options, is also included, but is not intended as a substitute for formalized training.

Ordering Information

Product Description
Switch Hardware
QFX5120-48Y-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC airflow in
QFX5120-48Y-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC airflow out
QFX5120-48Y-DC-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC airflow in
QFX5120-48Y-DC-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC airflow out
QFX5120-48YM-AFI 48x25GbE+8x100GbE MACsec AES256 switch, AC, back-to-front air flow
QFX5120-48YM-AFO 48x25GbE+8x100GbE MACsec AES256 switch, AC, front-to-back air flow
QFX5120-48YM-DC-AI 48x25GbE+8x100GbE MACsec AES256 switch, DC, back-to-front air flow, DC power
QFX5120-48YM-DC-AO 48x25GbE+8x100GbE MACsec AES256 switch, AC, front-to-back air flow, DC power
QFX5120-48T-AFI QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC airflow in
QFX5120-48T-AFO QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC airflow out
QFX5120-48T-DC-AFI QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC airflow in
QFX5120-48T-DC-AFO QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC airflow out
QFX5120-32C-AFI QFX5120-32C, 32x100GbE, 1 U, AC airflow in
QFX5120-32C-AFO QFX5120-32C, 32x100GbE, 1 U, AC airflow out
QFX5120-32C-DC-AFI QFX5120-32C, 32x100GbE, 1 U, DC airflow in
QFX5120-32C-DC-AFO QFX5120-32C, 32x100GbE, 1 U, DC airflow out
QFX5110-FANAFI FANAFI fan model, back-to-front airflow
QFX5110-FANAFO FANAFO fan model, front-to-back airflow
EX-4PST-RMK 4 post rack mount
MACsec Encryption
S-QFX5KC1-MACSEC-3 Class C1 QFX5000, MACsec AES 256 Encryption Sub Software, Term: 3 Yrs
S-QFX5KC1-MACSEC-5 Class C1 QFX5000, MACsec AES 256 Encryption Sub Software, Term: 5 Yrs
S-QFX5KC1-MACSEC-P Class C1 QFX5000, MACsec AES 256 Encryption Software, Perpetual
Flex Software
S-QFX5K-C1-A1-3 Flex Sub Software, Class 1 QFX5000 line, Adv 1, Term: 3 Yrs
S-QFX5K-C1-A1-5 Flex Sub Software, Class 1 QFX5000 line, Adv 1, Term: 5 Yrs
S-QFX5K-C1-A1-P Flex Software, Class 1 QFX5000 line, Adv 1, Perpetual
S-QFX5K-C1-A2-3 Flex Sub Software, Class 1 QFX5000 line, Adv 2, Term: 3 Yrs
S-QFX5K-C1-A2-5 Flex Sub Software, Class 1 QFX5000 line, Adv 2, Term: 5 Yrs
S-QFX5K-C1-A2-P Flex Software, Class 1 QFX5000 line, Adv 2, Perpetual
S-QFX5K-C1-P1-3 Flex Sub Software, Class 1 QFX5000 line, Prem 1, Term: 3 Yrs
S-QFX5K-C1-P1-5 Flex Sub Software, Class 1 QFX5000 line, Prem 1, Term: 5 Yrs
S-QFX5K-C1-P1-P Flex Software, Class 1 QFX5000 line, Adv 3, Perpetual
Services
SVC-COR-QFX51-48M Juniper Care Core Support for QFX5120-48YM Switches 
SVC-ND-QFX51-48M Juniper Care Next Day Support for QFX5120-48YM
SVC-COR-QFX5KC1-MS Juniper Care Core Support for S-QFX5KC1-MACSEC-P
Optics and Transceivers
JNP-SFP-25G-SR SFP28 25GBASE-SR Optics for up to 100 m transmission over serial multimode fiber-optic (MMF) OM4 fiber (QFX5120-48Y)
JNP-SFP-25G-LR SFP28 25GBASE-SR Optics for up to 10 km transmission over serial single-mode fiber-optic (SMF) (QFX5120-48Y)
JNP-SFP-25G-DAC-1M 25GbE SFP to SFP copper cable, 1 m (QFX5120-48Y)
JNP-SFP-25G-DAC-3M 25GbE SFP to SFP copper cable, 3 m (QFX5120-48Y)
JNP-QSFP-100G-SR4 QSFP28 100GbE, SR4, 100 m (all models)
JNP-QSFP-100G-PSM4 QSFP28 100GBASE-PSM4 optics for up to 500 m transmission over parallel SMF (all models)
JNP-QSFP-100G-CWDM QSFP28 100GbE, CWDM4, 2 km (all models)
JNP-QSFP-100G-LR4 QSFP28 100GbE, LR4, 10 km (all models)
JNP-100G-DAC-1M QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax copper cable), 1 m (all models)
JNP-100G-DAC-3M QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax copper cable), 3 m (all models)
JNP-100G-4X25G-1M QSFP28 to SFP+ 25GbE Direct Attach Breakout Copper (twinax copper cable), 1 m (all models)
JNP-100G-4X25G-3M QSFP28 to SFP+ 25GbE Direct Attach Breakout Copper (twinax copper cable), 3 m (all models)
Software Feature Licenses
S-QFX5K-C1-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), three-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C1-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN), three-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C1-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C1-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), five-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C1-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN), five-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C1-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year term license with support (QFX5120-48Y, QFX5120-48T)
S-QFX5K-C2-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), three-year term license with support (QFX5120-32C)
S-QFX5K-C2-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN), three-year term license with support (QFX5120-32C)
S-QFX5K-C2-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year term license with support (QFX5120-32C)
S-QFX5K-C2-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), five-year term license with support (QFX5120-32C)
S-QFX5K-C2-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN), five-year term license with support (QFX5120-32C)
S-QFX5K-C2-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year term license with support (QFX5120-32C)
Table 1. QFX5120-48YM Optics Support.
1GbE 10GbE 25GbE 40GbE 100GbE
EX-SFP-GE10KT15R13 EX-SFP-10GE-LRM JNP-25G-AOC-10M JNP-40G-AOC-10M JNP-100G-DAC-1M
EX-SFP-GE40KT13R15 EX-SFP-10GE-SR JNP-25G-AOC-20M JNP-40G-AOC-20M JNP-100G-DAC-3M
EX-SFP-GE40KT15R13 EX-SFP-10GE-USR JNP-25G-AOC-30M JNP-40G-AOC-30M JNP-QSFP-100G-CWDM
EX-SFP-1GE-SX EX-SFP-10GE-DAC-1M JNP-SFP-25G-SR JNP-QSFP-AOCBO-10M JNP-QSFP-100G-LR4
EX-SFP-1GE-SX-ET JNP-10G-AOC-10M JNP-SFP-25G-DAC-3M JNP-QSFP-AOCBO-1M JNP-QSFP-100G-SR4
EX-SFP-GE80KCW1490 JNP-10G-AOC-15M JNP-SFP-25G-DAC-5M JNP-QSFP-AOCBO-3M QSFP-100G-ER4L
EX-SFP-GE80KCW1510 JNP-10G-AOC-1M JNP-SFP-25G-LR JNP-QSFP-AOCBO-5M  
EX-SFP-GE10KT13R15 JNP-10G-AOC-20M   JNP-QSFP-AOCBO-7M  
EX-SFP-GE80KCW1530 JNP-10G-AOC-30M   JNP-QSFPP-40G-BXSR  
EX-SFP-GE80KCW1550 JNP-10G-AOC-3M   QFX-QSFP-40G-ESR4  
EX-SFP-GE80KCW1570 JNP-10G-AOC-5M   QFX-QSFP-DAC-1M  
EX-SFP-GE80KCW1590 JNP-10G-AOC-7M   QFX-QSFP-DACBO-1M  
  JNP-SFP-10G-BX10D   QFX-QSFP-DACBO-3M  
  JNP-SFP-10G-BX10U   QSFPP-40GBASE-SR4  
  SRX-SFPP-10G-SR-ET      

About Juniper Networks

Juniper Networks brings simplicity to networking with products, solutions and services that connect the world. Through engineering innovation, we remove the constraints and complexities of networking in the cloud era to solve the toughest challenges our customers and partners face daily. At Juniper Networks, we believe that the network is a resource for sharing knowledge and human advancement that changes the world. We are committed to imagining groundbreaking ways to deliver automated, scalable and secure networks to move at the speed of business.