MX2000 Universal Routing Platforms Datasheet

Switch Fabric Boards (SFBs) create a highly scalable and resilient “all-active” centralized switch fabric that delivers up to 4 Tbps of full-duplex switching capacity to each MPC slot in an MX2000 router.

Dual redundant Control Board and Routing Engines (CB-REs) run the 64-bit Junos OS and support routing protocol processing, router interface control, and control plane functions such as chassis component, system management, and user access to the router. These processes run on top of a kernel that interacts with the Packet Forwarding Engine (PFE) on Modular Port Concentrators (MPCs) via dedicated high-bandwidth management channels, providing a clean separation of the control and forwarding planes.

The MX2000 power and thermal subsystems use advanced technology to optimize power efficiency without sacrificing scale or features. The power subsystem has a highly resilient architecture for full power supply and power cable feed redundancy. MX2000 routers are available with -48 V DC or AC power (in Delta or Wye 3-phase configuration) along with HVDC and HVAC power, allowing power to be added to the rack as needed.

Modular Port Concentrators (MPCs) provide comprehensive routing, switching, inline services, subscriber management, and advanced hierarchical quality of service (HQoS) to address the widest set of network and service applications. Some MPCs provide network connectivity directly; others host Modular Interface Cards (MICs) that allow users to mix-and-match interfaces.

The MPC11E, powered by the Trio 5 chipset, delivers 4 Tbps per slot and provides near-infinite hardware programmability that addresses future innovative protocols. Optimized for 100GbE speeds and above, the MPC11E provides 400GbE-ready ports with multi-rate QSFP56DD interfaces for seamless 100GbE to 400GbE upgrades. The MPC11E offers industry-first support of native MACsec with no impact on performance (throughput or latency). The technology recalibrates network economics, keeping up with increasing bandwidth demands while being backward-compatible with all prior functionality.

The MPC6E, MPC8E and MPC9E are specifically designed to take advantage of the ultra-high fabric capacity of the MX2000 line. Powered by the programmable Junos Trio chipset, these MPCs offer extremely high 10GbE, 40GbE and 100GbE port densities with line-rate performance. These MPCs also stream telemetry for performance management and billing purposes.

An adapter card⁴ allows the use of the MPC1 through MPC5, as well as the MPC7E, in the MX2000 line, protecting existing MPC investments. The MX2000 platforms provide per-port line-rate MACsec encryption and decryption at 10GbE, 40GbE, and 100GbE speeds with no fragmentation impact, providing an inexpensive and simple mechanism for securing L2 communications. The MX2K-MPC11E line card delivers 4 Tbps per slot throughput, and MACsec can be selectively enabled on each interface at 10GbE, 40GbE, and 100GbE speeds. The MX2K-MPC9E and MX2K-MPC8E line cards with the MIC-MACSEC-MRATE pluggable MIC can selectively provide MACsec encryption on 10GbE, 40GbE, and 100GbE speeds. The MPC7E-10G line card offers another option for achieving native 10GbE density with MACsec capability on the MX2000 line of routers.

MS-MPCs, which also require an adapter card for use in the MX2000 line, provide dedicated processing for Network Edge Services (CGN, IPsec, stateful firewall, deep packet inspection [DPI], monitoring, and other compute-intensive services) and efficiently integrate these services directly on the MX2000 platforms at scale and without impacting forwarding performance. MS-MPCs also reduce dependence on appliances and the layers of complexity they add to the operations environment.

Junos is a reliable, high-performance, modular network operating system that is supported across all of Juniper Networks physical and virtual routing, switching, and security platforms, reducing the cost, complexity, and resources required to implement and maintain the network. With secure programming interfaces, the Juniper Extension Toolkit and versatile scripting support, and integration with popular orchestration frameworks, Junos OS offers flexible options for continuous delivery and DevOps style management that helps service providers of all types unlock more value from the network.

For more details on Junos OS, please visit www.juniper.net/us/en/products/network-operating-system/junos-os.html

The MX2000 line offers extremely high capacity (see Table 1).

The MPC11E, powered by the Trio 5 chipset, delivers dense 100GbE aggregation in a monolithic cost-optimized design. Taking advantage of the SFB3 switch fabric card that enables 4 Tbps per slot, the MX2000 line with the MPC11E provides industry-leading 100GbE and 400GbE port density (see Table 2).

The MPC11E line card comes with Flex licensing, which allows for flexible deployment of software features on an as-needed basis. For applications not requiring extremely high throughput, the MPC9E line card leverages the high fabric capacity of the MX2000 to offer dense 10GbE and 40GbE ports with line-rate performance (see Table 3).

The MX2000 line of Universal Routing Platforms offers a broad set of hardware and software features that together ensure nonstop network availability. The MX2000 line supports N+1 fabric redundancy, control plane redundancy, N+N power feed redundancy, and even N+1 power supply module redundancy. In addition, Virtual Chassis technology supports chassis-level redundancy while allowing users to manage two routers as a single element. Juniper’s link aggregation group (LAG) implementation also supports stateful card and port redundancy, as well as subscriber and session persistence.

From a software perspective, Junos OS runs each program independently in its own protected memory space, ensuring individual processes do not interfere with one another. Unified ISSU permits non-disruptive OS upgrades, while Junos Continuity allows new hardware to be added to an MX Series router with the addition of a simple plug-in package, which is installed fully in service without any interruption.

The programmable Trio chipsets provide the power to monitor and collect data at the component level, and use the Junos Telemetry Interface to stream this data in a scalable manner into monitoring, analytics, and performance management applications (see Figure 1), and to Path Computation Elements such as Juniper Networks NorthStar Controller.

This information will help identify current and trending congestion, resource utilization, traffic volume, latency and delay, which network operators can use to detect issues, make informed decisions on network design, optimization, and investment.

Hosting Network Edge Services directly on MX2000 routers—without impacting routing or forwarding performance—helps streamline operations and reduce TCO by consolidating and eliminating service-specific appliances as well as their operating systems and management systems.

Juniper’s Network Edge Services portfolio includes:

• Junos Subscriber Aware, which allows per-subscriber traffic steering, policy enforcement, and accounting
• Junos Application Aware, which allows L4-L7 traffic identification, policy-based traffic handling, and accounting
• Junos Address Aware, which conserves the IPv4 address pool, ensures IPv4/IPv6 coexistence, and aids in the transition to IPv6
• Junos Network Secure, which provides stateful firewall services for network protection and managed security
• Junos VPN Site Secure, which uses standard encryption modes to secure communications over access networks, and for added security over L3 VPNs
• Junos Traffic Vision, which provides the granular traffic visibility needed to improve network efficiency, increase security, and support operational tasks
• Junos Video Focus, which provides standards-based video monitoring and automatic issue mitigation to ensure high-quality customer experiences
• Junos Web Aware, a powerful application that tracks HTTP requests and responses, and enables tag insertion and header enrichment
• Junos L4 Load Balancer, a hybrid traffic load balancer based on advanced Junos OS capabilities that increases network efficiency

Network Edge Services are optional and licensed individually; the MX2000 routers can host multiple services concurrently.

For more details on network edge services, see www.juniper.net/us/en/products/routers/mx-series/network-edge-services.html

The MX2000 line sets the bar for edge router power design and efficiency, increasingly important considerations for Cloud-Grade Networks.

At the system level, power can be flexibly provisioned to meet site-specific environmental conditions, and less power can be provisioned in facilities that consistently operate at < 25C, providing significant operational savings. Power consumption is also dynamically managed based on actual hardware configuration; additional power is only allocated when a MIC is installed versus pre-provisioning power for worst-case scenarios. Additionally, fan speed is dynamically governed by actual temperature monitoring; at ambient temperature, fans consume only 20 percent of their maximum power.

Juniper has also implemented power optimizations at the silicon level. “Clock gating” reduces dynamic power dissipation by disabling unused logic circuitry; unused memory is also dynamically placed in “sleep mode” to conserve power.

These optimizations, when coupled with Juniper’s most advanced MPCs and optics, enable the MX2000 line to achieve an incredible power-to-throughput efficiency ratio of 0.25W/GbE; this means the MX2020 consumes just one quarter of a watt to forward 1 GB of traffic.

The MX2000 line offers powerful Broadband Network Gateway (BNG) features that allow broadband services to be provisioned for today and tomorrow. The MX2000 line supports the highest subscriber density and the most sophisticated broadband edge features, including hierarchical quality of service (HQoS), support for Point-to-Point Protocol (PPP) subscriber termination, Dynamic Host Configuration Protocol (DHCP), IPv4/IPv6 local server, and relay proxy for subscriber migration to DHCP access models. Juniper’s BNG also supports hierarchical queuing, granular QoS, and dynamic multilayer service activation, RADIUS, and diameter support for backend server integration to facilitate authentication, policy control, and accounting, as well as support for flexible L2/L3 wholesale models.

The MX2000 line of routers includes a comprehensive VPN toolkit to support feature-rich, standards-based, secure internetworking for innovative business services. In addition to basic L2/L3 VPN and VPLS support, the MX2000 line offers enhanced VPN services such as QoS-prioritized VPN traffic for voice and video, VPN-aware multicast and firewall services that leverage technologies such as LDP-BGP / VPLS internetworking, point-to-multipoint label-switched paths (P2MP LSPs), BGP-based multicast L3VPN, L2 VPN internetworking to connect dissimilar L2 access networks, MPLS plug-and-play, and IPsec/generic routing encapsulation (GRE) VPNs.

The feature-rich MX2000 line of routers is ideal for core, consolidated edge/core, and peering applications. Key features include high system capacity, high FIB scale, high-density 400GbE interfaces as well as DWDM and IP/optical support, inline video monitoring, and node virtualization. Additionally, Junos OS supports Source Packet Routing in Networking (SPRING, RFC 7855), which enables a trusted source node to specify a forwarding route other than the normal shortest path that a particular packet will traverse.

The MX2000 line of routers provides outstanding support for metro and aggregation networks by offering a full suite of routing and switching features, allowing network operators to choose a deployment model that fits their business and technical needs. The MX2000 line can be deployed as IP/IP VPN edge routers, Ethernet VPN (E-VPN) and VPLS provider edge routers (VPLS–PE), MPLS label-switching routers (LSR), and as Layer 2 Ethernet switches or Layer 3 IP routers.

The MX2000 routers are ideal universal SDN gateways, interconnecting virtual and physical networks and virtual networks operating with different technologies. Key enabling features include support for Multiprotocol BGP (MBGP), dynamic tunnels using MPLS-over-GRE or VXLAN encapsulation, virtual routing and forwarding (VRF) tables or E-VPNs, and Netconf, as well as mechanisms to send traffic between VRF and global routing tables based on configuration and policy.

The MX2000 line provides an excellent foundation for the Service Control Gateway, an advanced solution that considers network state, application type, subscriber privilege, and operator policy to deliver networked services. Leveraging Junos Application Aware, which uses deep-packet inspection techniques to identify and classify traffic on a per application basis, and Junos Subscriber Aware, which associates traffic flows with the subscriber that generated them, the Service Control Gateway supports differentiated service creation and delivery, and when used with Contrail Cloud Platform, can create and dynamically direct traffic into complex service chains.

For more information on the Service Control Gateway, see https://www.juniper.net/content/dam/www/assets/datasheets/us/en/services/service-control-gateway-solution.pdf.

This section lists basic specifications by platform. For full details, please refer to the hardware installation manuals at www.juniper.net/documentation/product/us/en/junos-os.

Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/en/products.html.

One Subscriber Access (SA) license is required per chassis, and provides:

• Per-subscriber RADIUS accounting (time- and volume-based)
• RADIUS-based authentication and authorization
• Subscriber configuration via client profiles at subscriber login RADIUS and/or SDX-based address (pool) management
• Static and dynamic IP management
• Dynamic auto-sensed VLANs

Subscriber Services Management licenses are optional additions to Subscriber Access licenses that offer:

• Per-service RADIUS accounting (time- and volume-based)
• Service profile activation/deactivation at subscriber login via RADIUS grants/access accepts (services activation/deactivation VSAs) or to change existing sessions via RADIUS COA/RID, or SRC
• Parameterization of service profiles
• ANCP QoS adjustment based on sync rate via ANCP

Other optional Subscriber Services Management licenses support (excluding the MPC11E) Inline L2TP LNS Tunneling, Subscriber-Based Lawful Intercept, Virtual Chassis, and interface with policy management systems, as indicated in the table below.

These tiered licenses support from 4,000 to 256,000 sessions⁵ and are bound to one chassis⁶ and do not apply to the MPC11E.

These tiered licenses support from 4,000 to 256,000 sessions and are bound to one chassis.

The Flex license on the MPC11E allows a customer to only pay for features they intend to use. These licenses are as shown in the table below.

Juniper Networks brings simplicity to networking with products, solutions and services that connect the world. Through engineering innovation, we remove the constraints and complexities of networking in the cloud era to solve the toughest challenges our customers and partners face daily. At Juniper Networks, we believe that the network is a resource for sharing knowledge and human advancement that changes the world. We are committed to imagining groundbreaking ways to deliver automated, scalable and secure networks to move at the speed of business.

1000417 - 026 - EN DEC 2021