EX4300 Line of Ethernet Switches Datasheet

The fixed-configuration EX4300 switches include a number of high availability features typically associated with chassis-based solutions, including the following:

• Hot-swappable fans
• Modular Juniper Networks Junos^® operating system (consistent with chassis systems)
• Dual Routing Engines (REs) with graceful Routing Engine switchover (GRES) in a Virtual Chassis configuration
• Single management interface
• Easy, centralized software upgrades
• Scalability from 24 to 480 10/100/1000BASE-T ports and 24 to 240 100/1000/2500/5000/10000BASE-T ports, with up to 40 10GbE uplinks and 40 40GbE uplinks (up to 40 10GbE uplinks, 20 40GbE uplinks, or 20 100GbE uplinks on multigigabit models, in addition to four dedicated 40 Gbps Virtual Chassis ports per switch)

Each EX4300 switch includes a single ASIC-based Packet Forwarding Engine, the EX-PFE. The integrated Routing Engine (RE) delivers all control plane functionality. The EX4300 also leverages the same modular Junos OS as other Juniper Networks switches, routers, and security devices, ensuring a consistent implementation and operation of control plane features across the Juniper Networks infrastructure.

The EX4300 switches are single rack unit (1 U) devices that deliver a compact solution for crowded wiring closets and access switch locations where space and power are at a premium. Each EX4300 supports standard 40GbE QSFP+ ports which are preconfigured to support high-speed Virtual Chassis backplane connections; on the 1GbE access switches, these ports can also serve as uplinks to upstream aggregation devices. In addition, each EX4300 supports an optional front panel uplink module offering 1GbE or 10GbE ports for high-speed backbone or link aggregation connections between wiring closets and upstream aggregation switches; the multigigabit model offers a choice between a 4-port 10GbE SFP+ uplink module or a 2-port 40GbE QSFP+/2-port 100GbE QSFP28 uplink module. Uplink modules can be installed without powering down the switch, enabling users to add high-speed connectivity at any time or migrate from one uplink type to the other, delivering the ultimate in flexible, high-performance interconnectivity.

The 1GbE access EX4300 models also feature a front panel LCD that offers a flexible interface for performing device bring-up and configuration rollbacks, reporting switch alarm and LED status, or restoring the switch to its default settings. When deployed as a member of a Virtual Chassis configuration, the LCD also displays the switch’s chassis “slot number” and RE status for rapid identification and problem resolution.

The four integrated rear panel 40GbE QSFP+ ports support EX4300 Virtual Chassis deployment over a 320 Gbps virtual backplane. When deployed in close proximity such as in wiring closets or in top-of-rack data center applications, the EX4300 switches can be securely connected using standard 40GbE QSFP+ direct attach copper (DAC) cables (available in 50 cm, 1 m, 3 m, and 5 m lengths).

Switches deployed in Virtual Chassis configurations spread over larger areas can be interconnected using optical QSFP+ transceivers such as the QSFP+ SR4, which supports distances up to 150 m.

A dedicated rear panel RJ-45 port is available for out-of-band management, while a rear panel USB port can be used to easily upload Junos OS and configuration files. In addition, a dedicated front panel USB console port and a rear panel RJ-45 console port offer flexible out-of-band console options.

Juniper Mist Wired Assurance, a cloud-based service driven by Mist AI to claim, configure, manage, and troubleshoot the EX4300, delivers AI-powered automation and service levels to ensure a better experience for connected devices. Wired Assurance leverages rich Junos switch telemetry data to simplify operations, reduce mean time to repair, and improve visibility. Wired Assurance offers the following features:

• Day 0 operations—Onboard switches seamlessly by claiming a greenfield switch or adopting a brownfield switch with a single activation code for true plug-and-play simplicity. 
• Day 1 operations—Implement a template-based configuration model for bulk rollouts of traditional and campus fabric deployments, while retaining the flexibility and control required to apply custom site- or switch-specific attributes. Automate provisioning of ports via Dynamic Port Profiles. 
• Day 2 operations—Leverage the AI in Juniper Mist Wired Assurance to meet service-level expectations such as throughput, successful connects, and switch health with key pre- and post-connection metrics (see Figure 1). Add the self-driving capabilities in Marvis Actions to detect loops, add missing VLANs, fix misconfigured ports, identify bad cables, isolate flapping ports, and discover persistently failing clients (see Figure 2). And perform software upgrades easily through Juniper Mist cloud. 

The addition of Marvis, a complementary Virtual Network Assistant driven by Mist AI, lets you start building a self-driving network that simplifies network operations and streamlines troubleshooting via automatic fixes for EX Series switches or recommended actions for external systems.

For more information see Juniper Mist^™ Wired Assurance.

The EX4300-48MP embraces open standards and extends the industry-standard Ethernet VPN (EVPN)-Virtual Extensible LAN (VXLAN) technology already supported for campus fabric IP Clos networks. An IP Clos network between the distribution and the core layers can exist in two modes: centrally routed bridging overlay or edge routed bridging overlay.

With enterprise applications moving to the cloud, it has become necessary to deploy IP fabrics as enterprise fabrics with L2 extensions using VXLAN. The EX4300-48MP is capable of both L2 and L3 VXLAN gateway services, allowing you to deploy networks that provide L2 adjacencies for applications over L3 fabrics. EVPN-VXLAN offers a scalable way to build and interconnect multiple campuses, delivering:

• Greater network efficiency
• Compliance with industry standards
• Scalability across all network layers
• Faster convergence
• Flexible and secure architecture

Juniper campus fabrics support these validated architectures with the EX4300 switch playing the role of access switch:

• EVPN multihoming (collapsed core or distribution): A collapsed core architecture combines the core and distribution layers into a single switch, turning the traditional three-tier hierarchal network into a two-tier network. This eliminates the need for STP across the campus network by providing multihoming capabilities from the access to the core layer.  EVPN multihoming can be deployed and managed using the Juniper Mist cloud.
• Core/distribution: A pair of interconnected EX Series core or distribution switches provide L2 EVPN and L3 VXLAN gateway support. The IP Clos network between the distribution and core layers offers two modes: centrally or edge routed bridging overlay.

In all these EVPN-VXLAN deployment modes, EX4300 switches can be used in Virtual Chassis configurations.

Up to 10 EX4300 switches can be interconnected using Virtual Chassis technology, creating a single logical device supporting up to 480 10/100/1000BASE-T ports, plus up to 40 10GbE or 40 40GbE uplink ports. For mixed 1GbE and 10GbE access environments, the EX4300 can be interconnected with the EX4600 enterprise campus and QFX5100 high-performance data center access switches. EX4300 Virtual Chassis configurations can be created to support a variety of port and density options for data center, campus, and branch deployments. Virtual Chassis connections can be formed using any of the 40GbE ports or 10GbE ports using standard DAC cables and optics. The EX4300 does not support Virtual Chassis technology on the GbE copper or fiber ports.

With the EX4300 multigigabit model, up to 10 switches can be interconnected using dedicated 40GbE ports through Virtual Chassis technology, creating a single logical device supporting up to 240 10/100/1000BASE-T ports and 240 100/1000/2500/5000/10000BASE-T ports, with up to 40 10GbE uplinks, 20 40GbE uplinks, or 20 100GbE uplinks. The multigigabit EX4300 can also participate in a 10-member mixed-mode Virtual Chassis configuration with other 1GbE EX4300 access switches.

In campus wiring closets, flexible topologies can be created usingstandard QSFP+ optics on the 40GbE ports to extend the VirtualChassis configuration across long distances spanning multiple wiringclosets, floors, or even buildings while using 10GbE or 40GbE foruplink connectivity. EX4300 fiber-based switches can also be usedfor campus aggregation or small core deployments.

When deployed in a Virtual Chassis configuration in the data center, all EX4300 switches are monitored and managed as a single device, enabling enterprises to separate physical topology from logical groupings of endpoints and allowing more efficient resource utilization. Highly resilient topologies can also be created using the 40GbE DAC cables.

In data center top-of-rack deployments, a full mesh five-switch Virtual Chassis configuration can be created where every switch member is just one hop away from every other member, delivering the lowest possible latency. A mesh spanning distances of up to 150 meters can be created using standard QSFP+ optics on the 40GbE ports (DAC cables up to 3 m in length are available for shorter distances), while 10GbE ports can be used as uplinks to connect to upstream aggregation or core devices.

Existing Virtual Chassis technology is further scaled and enhanced to support a spine-and-leaf topology that is ideal for high-performance and low-latency data center deployments. In its first instance, this topology, called Virtual Chassis Fabric, enables up to 20 switches to be deployed in a spine-and-leaf configuration, with two to four QFX5100 switches in the spine and up to 18 QFX5100 or EX4300 switches as leaf nodes. This architecture provides any-rack-to-any-rack deterministic throughput and low latency, while significantly simplifying network operations through a single point of management. A Virtual Chassis Fabric configuration supports mixed 1GbE, 10GbE, and 40GbE servers¹.

Juniper Mist Wired Assurance brings cloud management and Mist AI to campus fabric. It sets a new standard moving away from traditional network management towards AI-driven operations, while delivering better experiences to connected devices.  The Juniper Mist cloud streamlines deployment and management of campus fabric architectures by allowing:

• Automated deployment and zero touch deployment
• Anomaly detection 
• Root cause analysis

The EX4300 line of Ethernet switches delivers high availability through redundant power supplies and fans, GRES, and nonstop bridging and routing when deployed in a Virtual Chassis configuration.

In a Virtual Chassis configuration, each EX4300 switch is capable of functioning as a Routing Engine. When two or more EX4300 switches are interconnected, a single control plane is shared among all Virtual Chassis member switches. When two EX4300 switches are interconnected, Junos OS automatically initiates an election process to assign a primary (active) and backup (hot-standby) RE. An integrated L2 and L3 GRES feature maintains uninterrupted access to applications, services, and IP communications in the unlikely event of a primary RE failure.

When more than two switches are interconnected in a Virtual Chassis configuration, the remaining switch elements act as line cards and are available to assume the backup RE position should the designated primary fail. Primary, backup, and line card priority status can be assigned to dictate the order of ascension; this N+1 RE redundancy, coupled with the GRES, nonstop routing (NSR), and nonstop bridging (NSB) capabilities of Junos OS, assures a smooth transfer of control plane functions following unexpected failures.

The EX4300 implements the same slot/module/port numbering schema as other Juniper Networks chassis-based products when numbering Virtual Chassis ports, providing true chassis-like operations. By using a consistent operating system and a single configuration file, all switches in a Virtual Chassis configuration are treated as a single device, simplifying overall system maintenance and management.

In a mixed Virtual Chassis configuration with both EX4300 1GbE access and multigigabit switches, the EX4300 multigigabit switches must assume the role of the RE, while the 1GbE access EX4300 switches can only act as line cards.

Individually, the EX4300 offers a number of HA features that are typically associated with modular chassis-based switches. When combined with the field-proven Junos OS and L2/L3 failover capabilities, these features provide the EX4300 with true carrier-class reliability.

• Redundant power supplies: The EX4300 line of Ethernet switches supports internal redundant, load-sharing, hot-swappable, and field-replaceable power supplies to maintain uninterrupted operations. Thanks to its compact footprint, the EX4300 requires significantly less power than chassis-based switches delivering equivalent port densities. The EX4300 1GbE access switches offer both AC and DC options, while the EX4300 multigigabit switch supports only AC power supplies.
• Hot-swappable fans: The EX4300 includes hot-swappable fans, providing sufficient cooling even if one of the fans were to fail.

• Nonstop bridging and nonstop routing: NSB and NSR on the EX4300 ensure that control plane protocols, states, and tables are synchronized between primary and standby REs to prevent protocol flaps or convergence issues following a Routing Engine failover.

• Redundant trunk group (RTG): To avoid the complexities of Spanning Tree Protocol (STP) without sacrificing network resiliency, the EX4300 employs redundant trunk groups to provide the necessary port redundancy and simplify switch configuration.
• Cross-member link aggregation: Cross-member link aggregation allows redundant link aggregation connections between devices in a single Virtual Chassis configuration, providing an additional level of reliability and availability.
• Carrier-class hardware: The EX4300 leverages a purpose-built packet forwarding engine ASIC, the EX-PFE, which integrates much of the same intellectual property used in Juniper’s carrier-class routers. As a result, the EX4300 delivers the same predictable, scalable functionality found in the world’s largest networks.
• IPv4 and IPv6 routing support: IPv4 and IPv6 Layer 3 routing (OSPF and BGP) is available with an Enhanced license, enabling highly resilient networks.

The EX4300 runs on Junos OS, the same operating system software used by other Juniper Networks switches, routers, and security devices.

By utilizing a common operating system, Juniper delivers a consistent implementation and operation of control plane features across all products. To maintain that consistency, Junos OS adheres to a highly disciplined development process that uses a single source code, follows a single quarterly release train, and employs a highly available modular architecture that prevents isolated failures from bringing an entire system down.

These attributes are fundamental to the core value of the software, enabling all products powered by Junos OS to be updated simultaneously with the same software release. All features are fully regression tested, making each new release a true superset of the previous version. Customers can deploy the software with complete confidence that all existing capabilities will be maintained and operate in the same way.

The EX4300 line of Ethernet switches provides the highest levels of availability for the most demanding converged data, voice, and video environments, delivering the most reliable platform for unifying enterprise communications.

The EX4300 supports rich quality of service (QoS) functionality for prioritizing data, voice, and video traffic. The switches support 12 QoS queues on every port, enabling them to maintain multilevel, end-to-end traffic prioritizations. The EX4300 also supports a wide range of policy options, including priority and weighted deficit round-robin (WDRR) queuing.

By providing 15.4 watts of Class 3 802.3af PoE on all ports to power voice over IP (VoIP) telephones, closed-circuit security cameras, wireless access points, and other IP-enabled devices, the EX4300 delivers a future-proofed solution for converging disparate networks onto a single IP infrastructure. The EX4300 switches also support standards-based 802.3at PoE+, which delivers up to 30 watts per port for powering networked devices such as multiple radio IEEE 802.11n wireless access points and video phones that may require more power than available with IEEE 802.3af. The EX4300 multigigabit switch supports pre-standard IEEE 802.3bt PoE++, which delivers up to 95 watts per port for powering devices requiring more than the 30 watts of power provided by PoE+.

Link Layer Discovery Protocol–Media Endpoint Discovery (LLDP-MED)-based granular PoE/PoE+ management allows the EX4300 to negotiate PoE/PoE+ usage down to a fraction of a watt on powered devices, enabling more efficient PoE utilization across the switch.

To ease deployment, the EX4300 supports the industry-standard LLDP and LLDP-MED, which enable the switches to automatically discover Ethernet-enabled devices, determine their power requirements, and assign virtual LAN (VLAN) parameters.

The EX4300 supports the IEEE 802.3az standard for Energy Efficient Ethernet (EEE) functionality, reducing power consumption of copper physical layers (PHY) during periods of low link utilization.

The EX4300 provides a full complement of port security features, including Dynamic Host Configuration Protocol (DHCP) snooping, dynamic ARP inspection (DAI), IP source guard, and media access control (MAC) limiting (per port and per VLAN) to defend against internal and external spoofing, man-in-the-middle and denial-of-service (DoS) attacks.

EX4300 switches support IEEE 802.1AE MACsec, providing support for link-layer data confidentiality, data integrity, and data origin authentication. The MACsec feature enables the EX4300 to support 88 Gbps of near line-rate hardware-based traffic encryption on all GbE and 10GbE ports, including the base unit and optional uplink modules. The multigigabit EX4300 model supports the MACsec AES 256 standard for encrypting traffic on all access and uplink ports.

Defined by IEEE 802.1AE, MACsec provides secure, encrypted communication at the link layer that is capable of identifying and preventing threats from denial of service (DoS) and intrusion attacks, as well as man-in-the-middle, masquerading, passive wiretapping, and playback attacks launched from behind the firewall. When MACsec is deployed on switch ports, all traffic is encrypted on the wire but traffic inside the switch is not. This allows the switch to apply all network policies such as QoS, deep packet inspection, and sFlow to each packet without compromising the security of packets on the wire.

Hop-by-hop encryption enables MACsec to secure communications while maintaining network intelligence. In addition, Ethernet-based WAN networks can use MACsec to provide link security over long haul connections. MACsec is transparent to Layer 3 and higher layer protocols and is not limited to IP traffic; it works with any type of wired or wireless traffic carried over Ethernet links.

When employing Virtual Chassis technology, the EX4300 dramatically simplifies network management. Up to 10 interconnected EX4300 switches can be managed as a single device. Each Virtual Chassis group uses a single Junos OS image file and a single configuration file, reducing the overall number of units to monitor and manage. When Junos OS is upgraded on the primary switch in a Virtual Chassis configuration, the software is automatically upgraded on all other member switches at the same time.

The EX4300 also includes port profiles that allow network administrators to automatically configure ports with security, QoS, and other parameters based on the type of device connected to the port. Six preconfigured profiles are available, including default, desktop, desktop plus IP phone, wireless access point, routed uplink, and L2 uplink. Users can select from the existing profiles or create their own and apply them through the command line interface (CLI), Junos Web interface, or management system.

Juniper Flex licensing offers a common, simple, and flexible licensing model for EX Series access switches, enabling customers to purchase features based on their network and business needs.

Flex licensing is offered in Standard, Advanced, and Premium tiers. Standard tier features are available with the Junos OS image that ships with EX Series switches. Additional features can be unlocked with the purchase of a Flex Advanced or Flex Premium license.

The Flex Advanced and Premium licenses for the EX Series platforms are class based, determined by the number of access ports on the switch. Class 1 (C1) switches have 12 ports, Class 2 (C2) switches have 24 ports, and Class 3 (C3) switches have 32 or 48 ports.

The EX4300 switches support both subscription and perpetual Flex licenses. Subscription licenses are offered for three- and five-year terms. In addition to Junos features, the Flex Advanced and Premium subscription licenses include Juniper Mist Wired Assurance. Flex Advanced and Premium subscription licenses also allow portability across the same tier and class of switches, ensuring investment protection for the customer.

For a complete list of features supported by the Flex Standard, Advanced, and Premium tiers, or to learn more about Junos EX Series licenses, please visit https://www.juniper.net/documentation/us/en/software/license/licensing/topics/topic-map/understanding_software_licenses.html.

For warranty information, please visit https://support.juniper.net/support/warranty/.

• 320 Gbps Virtual Chassis interconnect to combine up to 10 units as a single logical device

• EX4300-32F/EX4300-32F-DC: 8-port dual-mode 10GbE/1GbE module with pluggable SFP+/SFP optics
• EX4300-32F/EX4300-32F-DC: 2-port dual-mode 40GbE module with pluggable QSFP+ optics
• EX4300-48MP: 4-port dual-mode 10GbE/1GbE module with pluggable SFP+/SFP optics or 2-port QSFP+/1-port QSFP28 module
• Others: 4-port dual-mode 10GbE/1GbE module with pluggable SFP+/SFP optics

• Power supplies: Autosensing; 100-120 V/200-240 V; AC 350 W AFO, 350 W AFI, 715 W AFO, and 1100 W AFO dual load-sharing hot-swappable internal redundant power supplies
• Maximum current inrush: 50 amps
• EX4300-48MP: 100-120 V/200-240 V; AC 715 W AFO, 1100 W AFO, 1400 W AFO dual load-sharing hot-swappable internal redundant power supplies
• DC power supply: 550 W DC AFO and 550 W DC AFI; input voltage range 43.5-60 V max (+/- 0.5 V); dual input feed, dual load-sharing hot-swappable internal redundant power supplies
• Minimum number of PSUs required for fully loaded chassis: 1 per switch

• EX4300-24P, -24T, -48P, -48T:
  • Base unit: 17.36 x 1.72 x 16.38 in (44.1 x 4.37 x 41.6 cm)
  • With power supply installed: 17.36 x 1.72 x 17.51 in (44.1 x 4.37 x 44.47 cm)
  • With power supply and front module installed: 17.36 x 1.72 x 18 in (44.1 x 4.37 x 45.73 cm)
• EX4300-32F:
  • Base unit: 17.36 x 1.72 x 17.87 in (44.1 x 4.37 x 45.4 cm)
  • With power supply installed: 17.36 x 1.72 x 19 in (44.1 x 4.37 x 48.28 cm)
  • With power supply and front module installed: 17.36 x 1.72 x 19.31 in (44.1 x 4.37 x 49.1 cm)
• EX4300-48MP:
  • Base unit: 17.36 x 1.72 x 18.39 in (44.1 x 4.37 x 46.7 cm)
  • With power supply installed: 17.36 x 1.72 x 19.63 in (44.1 x 4.37 x 49.99 cm)
  • With power supply and front module installed: 17.36 x 1.72 x 20.06 in (44.1 x 4.37 x 50.96 cm)

• EX4300 switch (with no power supply or fan module): 13 lb (5.9 kg)
• EX4300 switch (with single power supply and two fan modules): 16.1 lb (7.3 kg)
• 350 W AC power supply: 2.4 lb (1.1 kg)
• 715 W AC power supply: 2.4 lb (1.1 kg)
• 1100 W AC power supply: 2.4 lb (1.1 kg)
• 550 W DC power supply: 2.4 lb (1.1 kg)
• SFP+ uplink module: 0.44 lb (0.2 kg)
• Fan module: 0.33 lb (0.15 kg)

• Operating temperature:
  • AFO models: 32° to 113° F (0° to 45° C)
  • AFI models: 32° to 95° F (0° to 35° C)
• Storage temperature: -40° to 158° F (-40° to 70° C)
• Operating altitude: up to 10,000 ft (3,049 m)
• Non-operating altitude: up to 16,000 ft (4,877 m)
• Relative humidity operating: 10% to 85% (noncondensing)
• Relative humidity non-operating: 0% to 95% (noncondensing)

• Field-replaceable fans: 2
• Airflow: PSU-7.5 cubic feet per minute (CFM); fan-22 CFM
• Total maximum airflow throughput with two power supplies: 59 CFM

• Store and forward

• DRAM: 8 GB with Error Correcting Code (ECC) on EX4300-48MP, 3 GB with ECC on EX4300-32F and EX4300-32F-DC; 2 GB with ECC on all other EX4300 switches
• Storage: 50 GB on EX4300-48MP, 4 GB on EX4300-32F and EX4300-32F-DC; 2 GB on all other EX4300 switches

• EX4300-48MP: 2.2 GHz Dual-Core Intel Broadwell CPU
• Other EX4300s: 1.5 GHz Dual-Core PowerPC CPU

• 24P/24T: 32 (24 host ports + four 40GbE ports + optional four-port 1/10GbE uplink module)
• 32F: 46 (32 host ports + four 10GbE ports + two 40GbE ports + optional eight-port 1/10GbE uplink module or two-port 40GbE uplink module)
• 48P/48T/48MP: 56 (48 host ports + four 40GbE ports + optional four-port 1/10GbE uplink module)
• 10GbE port density per system:
  • 32F: 4 (fixed) + 8 (uplink module)
  • 48MP: 24 (fixed) = 4 (uplink module)
  • All others: 4 (uplink module)
• 40GbE port density per system:
  • 32F: 2 (fixed) + 2 (uplink module)
  • 48MP: 4 (fixed) + 2 (uplink module)
  • All others: 4 (fixed)
• 100GbE port density per system:
  • 48MP: 2 (uplink module)

• GbE SFP optic/connector type: LC SFP fiber supporting SX (multimode), LX (single-mode)
• 10GbE SFP+ optic/connector type: 10GbE SFP+ LC connector, SR (multimode), USR (multimode), LR (single-mode), ER (single-mode), LRM (multimode), and DAC (direct-attach copper)
• 40 GbE QSFP+ optic/connector type: 40GbE QSFP+ LC connector type, SR (multimode), DAC (direct-attach copper)
• 100 GbE QSFP28 optic type: 100GbE QSFP SR4, LR4, DAC (direct-attach copper)

• Time domain reflectometry (TDR) for detecting cable breaks and shorts: 24P/24T and 48P/48T only
• Auto medium-dependent interface/medium-dependent interface crossover (MDI/MDIX) support: 24P/24T and 48P/48T/48MP only (all ports)
• Port speed downshift/setting maximum advertised speed on 10/100/1000BASE-T ports: 24P/24T and 48P/48T/48MP only, on all ports
• Digital optical monitoring for optical ports

• 24P/24T: 224 Gbps (unidirectional)/448 Gbps (bidirectional)
• 48P/48T: 248 Gbps (unidirectional)/496 Gbps (bidirectional)
• 48MP: 464 Gbps (unidirectional)/928 Gbps (bidirectional)
• 32F: 232 Gbps (unidirectional)/464 Gbps (bidirectional)

• MAC limiting (per port and per VLAN)
• Allowed MAC addresses configurable per port
• Dynamic ARP inspection (DAI)
• IP source guard
• Local proxy ARP
• Static ARP support
• DHCP snooping
• Captive portal
• Persistent MAC address configurations
• Distributed denial of service (DDoS) protection (CPU control path flooding protection)

• EX4300-24P/24T: 333 Mpps (wire speed)
• EX4300-48P/48T: 369 Mpps (wire speed)
• EX4300-48MP: 714 Mpps
• EX4300-32F: 345 Mpps (wire speed)

• Maximum MAC addresses per system: 64,000
• Jumbo frames: 9216 Bytes
• Number of VLANs supported: 4093
• Range of possible VLAN IDs: 1 to 4094
• Virtual Spanning Tree (VST) instances: 510
• Port-based VLAN
• Voice VLAN
• Physical port redundancy: Redundant trunk group (RTG)
• Compatible with Per-VLAN Spanning Tree Plus (PVST+)
• Routed VLAN Interface (RVI)
• Uplink Failure Detection (UFD)
• ITU-T G.8032: Ethernet Ring Protection Switching
• IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
• LLDP-MED with VoIP integration
• Default VLAN and multiple VLAN range support
• MAC learning deactivate
• Persistent MAC learning (sticky MAC)
• MAC notification
• Private VLANs (PVLANs)
• Explicit congestion notification (ECN)
• Layer 2 protocol tunneling (L2PT)
• IEEE 802.1ak: Multiple VLAN Registration Protocol (MVRP)
• IEEE 802.1p: CoS prioritization
• IEEE 802.1Q: VLAN tagging
• IEEE 802.1X: Port Access Control
• IEEE 802.1ak: Multiple Registration Protocol
• IEEE 802.3: 10BASE-T
• IEEE 802.3u: 100BASE-T
• IEEE 802.3ab: 1000BASE-T
• IEEE 802.3z: 1000BASE-X
• IEEE 802.3ae: 10-Gigabit Ethernet
• IEEE 802.3ba: 40-Gigabit Ethernet
• IEEE 802.3af: Power over Ethernet
• IEEE 802.3at: Power over Ethernet Plus
• IEEE 802.3x: Pause Frames/Flow Control
• IEEE 802.3ah: Ethernet in the First Mile

• IEEE 802.1D: Spanning Tree Protocol
• IEEE 802.1s: Multiple instances of Spanning Tree Protocol (MSTP)
• Number of MST instances supported: 64
• Number of VLAN Spanning Tree Protocol (VSTP) instances supported: 510
• IEEE 802.1w: Rapid reconfiguration of Spanning Tree Protocol

• IEEE 802.3ad: Link Aggregation Control Protocol
• 802.3ad (LACP) support:
  • Number of LAGs supported: 128
  • Maximum number of ports per LAG: 16
• LAG load-sharing algorithm bridged or routed (unicast or multicast) traffic:
  • IP: S/D IP
  • TCP/UDP: S/D IP, S/D Port
  • Non-IP: S/D MAC
• Tagged ports support in LAG

• Maximum number of ARP entries: 64,000
• Maximum number of IPv4 unicast routes in hardware: 16,000 prefixes; 32,000 host routes
• Maximum number of IPv4 multicast routes in hardware: 8000 multicast groups; 16,000 multicast routes
• Routing protocols: RIPv1/v2, OSPF, BGP, IS-IS
• Static routing
• Routing policy
• Bidirectional Forwarding Detection (BFD)
• L3 redundancy: Virtual Router Redundancy Protocol (VRRP)
• VRF-Lite

• Maximum number of Neighbor Discovery (ND) entries: 32,000
• Maximum number of IPv6 unicast routes in hardware: 4000 prefixes; 15,000 host routes
• Maximum number of IPv6 multicast routes in hardware: 8000 multicast groups; 16,000 multicast routes
• Routing protocols: RIPng, OSPFv3, IPv6, ISIS
• Static routing

• Port-based ACL (PACL): Ingress and egress
• VLAN-based ACL (VACL): Ingress and egress
• Router-based ACL (RACL): Ingress and egress
• ACL entries (ACE) in hardware per system:
  • Port-based ACL (PACL) ingress: 3072
  • VLAN-based ACL (VACL) ingress: 3500
  • Router-based ACL (RACL) ingress: 7000
  • Egress shared across PACL and VACL: 512
  • Egress across RACL: 1024
  • ACL counter for denied packets
• ACL counter for permitted packets
• Ability to add/remove/change ACL entries in middle of list (ACL editing)
• L2-L4 ACL

• 802.1X port-based
• 802.1X multiple supplicants
• 802.1X with VLAN assignment
• 802.1X with authentication bypass access (based on host MAC address)
• 802.1X with VoIP VLAN support
• 802.1X dynamic ACL based on RADIUS attributes
• 802.1X Supported Extensible Authentication Protocol (EAP types): Message Digest 5 (MD5), Transport Layer Security (TLS), Tunneled TLS (TTLS), Protected Extensible Authenticated Protocol (PEAP)
• MAC authentication (RADIUS)
• Control plane DoS protection
• Radius functionality over IPv6 for authentication, authorization, and accounting (AAA)
• DHCPv6 snooping
• IPv6 neighbor discovery
• IPv6 source guard
• IPv6 RA guard
• IPv6 Neighbor Discovery Inspection
• Media Access Control security (MACsec)

• Redundant, hot-swappable power supplies
• Redundant, field-replaceable, hot-swappable fans
• Graceful Routing Engine switchover (GRES) for Layer 2 hitless forwarding and Layer 3 protocols on RE failover
• Graceful protocol restart (OSPF, BGP)
• Layer 2 hitless forwarding on RE failover
• Nonstop bridging: LACP, xSTP
• Nonstop routing: PIM, OSPF v2 and v3, RIP v2, RIPnG, BGP, BGPv6, ISIS, IGMP v1, v2, v3
• Online insertion and removal (OIR) uplink module

• L2 QoS
• L3 QoS
• Ingress policing: 1 rate 2 color
• Hardware queues per port: 12
• Scheduling methods (egress): Strict priority (SP), WDRR
• 802.1p, DiffCode (DSCP)/IP precedence trust and marking
• L2-L4 classification criteria: Interface, MAC address, Ethertype, 802.1p, VLAN, IP address, DSCP/IP precedence, TCP/UDP port numbers, and more
• Congestion avoidance capabilities: Tail drop, weighted random early detection (WRED)

• IGMP: v1, v2, v3
• IGMP snooping
• Multicast Listener Discovery (MLD) snooping
• PIM-SM, PIM-SSM, PIM-DM

• Juniper Mist Wired Assurance for Campus
• Junos Space^®Network Director for Campus
• Junos Space^® Management 

• Junos OS CLI
• Junos Web interface (J-Web)
• Out-of-band management: Serial; 10/100/1000BASE-T Ethernet
• ASCII configuration
• Rescue configuration
• Configuration rollback
• Image rollback
• LCD management
• Element management tools: Juniper Networks Network and Security Manager (NSM)
• Remote performance monitoring
• Proactive services support via Advanced Insight Solutions (AIS)
• SNMP: v1, v2c, v3
• RMON (RFC 2819) Groups 1, 2, 3, 9
• Network Time Protocol (NTP)
• DHCP server
• DHCP client and DHCP proxy
• DHCP relay and helper
• DHCP local server support
• RADIUS
• TACACS+
• SSHv2
• Secure copy
• HTTP/HTTPs
• Domain Name System (DNS) resolver
• System logging
• Temperature sensor
• Configuration backup via FTP/secure copy

• RFC 768 UDP
• RFC 783 TFTP
• RFC 791 IP
• RFC 792 ICMP
• RFC 793 TCP
• RFC 826 ARP
• RFC 854 Telnet client and server
• RFC 894 IP over Ethernet
• RFC 903 RARP
• RFC 906 TFTP Bootstrap
• RFC 951, 1542 BootP
• RFC 1027 Proxy ARP
• RFC 1058 RIP v1
• RFC 1112 IGMP v1
• RFC 1122 Host Requirements
• RFC 1195 Use of OSI IS-IS for Routing in TCP/IP and Dual Environments (TCP/IP transport only)
• RFC 1256 IPv4 ICMP Router Discovery (IRDP)
• RFC 1492 TACACS+RFC 1519 CIDR
• RFC 1587 OSPF NSSA Option
• RFC 1591 DNS
• RFC 1812 Requirements for IP Version 4 Routers
• RFC 1981 Path MTU Discovery for IPv6
• RFC 2030 SNTP, Simple Network Time Protocol
• RFC 2068 HTTP server
• RFC 2080 RIPng for IPv6
• RFC 2131 BOOTP/DHCP relay agent and DHCP server
• RFC 2138 RADIUS Authentication
• RFC 2139 RADIUS Accounting
• RFC 2154 OSPF w/Digital Signatures (password, MD-5)
• RFC 2236 IGMP v2
• RFC 2267 Network Ingress Filtering
• RFC 2328 OSPF v2 (edge-mode)
• RFC 2338 VRRP
• RFC 2362 PIM-SM (edge-mode)
• RFC 2370 OSPF Opaque LSA Option
• RFC 2453 RIP v2
• RFC 2460 Internet Protocol, Version 6 (IPv6) Specification
• RFC 2461 Neighbor Discovery for IP Version 6 (IPv6)
• RFC 2463 Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification
• RFC 2464 Transmission of IPv6 Packets over Ethernet Networks
• RFC 2474 DiffServ Precedence, including 12 queues/port
• RFC 2475 DiffServ Core and Edge Router Functions
• RFC 2526 Reserved IPv6 Subnet Anycast Addresses
• RFC 2597 DiffServ Assured Forwarding (AF)
• RFC 2598 DiffServ Expedited Forwarding (EF)
• RFC 2740 OSPF for IPv6
• RFC 2925 MIB for Remote Ping, Trace
• RFC 3176 sFlow
• RFC 3376 IGMP v3
• RFC 3484 Default Address Selection for Internet Protocol Version 6 (IPv6)
• RFC 3513 Internet Protocol Version 6 (IPv6) Addressing Architecture
• RFC 3569 draft-ietf-ssm-arch-06.txt PIM-SSM PIM Source Specific Multicast
• RFC 3579 RADIUS EAP support for 802.1x
• RFC 3618 Multicast Source Discovery Protocol (MSDP)
• RFC 3623 OSPF Graceful Restart
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers
• RFC 4291 IPv6 Addressing Architecture
• RFC 4443 ICMPv6 for the IPv6 Specification
• RFC 4541 IBMP and MLD snooping services
• RFC 4552 OSPFv3 Authentication
• RFC 4861 Neighbor Discovery for IPv6
• RFC 4862 IPv6 Stateless Address Autoconfiguration
• RFC 4915 MT-OSPF
• RFC 5095 Deprecation of Type 0 Routing Headers
• RFC 5176 Dynamic Authorization Extensions to RADIUS
• RFC 5798 VRRPv3 for IPv6
• Draft-ietf-bfd-base-05.txt Bidirectional Forwarding Detection
• Draft-ietf-idr-restart-10.txt Graceful Restart Mechanism
• Draft-ietf-isis-restart-02 Restart Signaling for IS-IS
• Draft-ietf-isis-wg-multi-topology-11 Multi Topology (MT) Routing in IS-IS for BGP
• Internet draft-ietf-isis-ipv6-06.txt, Routing IPv6 with IS-IS
• LLDP Media Endpoint Discovery (LLDP-MED), ANSI/TIA-1057, draft 08
• PIM-DM Draft IETF PIM Dense Mode draft-ietf-idmr-pim-dm-05.txt, draft-ietf-pim-dm-new-v2-04.txt

• RFC 1155 SMI
• RFC 1157 SNMPv1
• RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-Like MIB and TRAPs
• RFC 1493 Bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1657 BGP-4 MIB
• RFC 1724 RIPv2 MIB
• RFC 1850 OSPFv2 MIB
• RFC 1905 RFC 1907 SNMP v2c, SMIv2 and Revised MIB-II
• RFC 2011 SNMPv2 for Internet Protocol using SMIv2
• RFC 2012 SNMPv2 for transmission control protocol using SMIv2
• RFC 2013 SNMPv2 for user datagram protocol suing SMIv2
• RFC 2096 IPv4 Forwarding Table MIB
• RFC 2287 System Application Packages MIB
• RFC 2570–2575 SNMPv3, user based security, encryption, and authentication
• RFC 2576 Coexistence between SNMP Version 1, Version 2, and Version 3
• RFC 2578 SNMP Structure of Management Information MIB
• RFC 2579 SNMP Textual Conventions for SMIv2
• RFC 2665 Ethernet-like interface MIB
• RFC 2787 VRRP MIB
• RFC 2819 RMON MIB
• RFC 2863 Interface Group MIB
• RFC 2863 Interface MIB
• RFC 2922 LLDP MIB
• RFC 2925 Ping/Traceroute MIB
• RFC 2932 IPv4 Multicast MIB
• RFC 3413 SNMP Application MIB
• RFC 3414 User-based Security model for SNMPv3
• RFC 3415 View-based Access Control Model for SNMP
• RFC 3621 PoE-MIB (PoE switches only)
• RFC 4188 STP and Extensions MIB
• RFC 4363 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and VLAN extensions
• RFC 5643 OSPF v3 MIB support
• Draft – blumenthal – aes – usm - 08
• Draft – reeder - snmpv3 – usm - 3desede -00
• Draft-ietf-bfd-mib-02.txt
• Draft-ietf-idmr-igmp-mib-13
• Draft-ietf-idmr-pim-mib-09
• Draft-ietf-idr-bgp4-mibv2-02.txt – Enhanced BGP-4 MIB
• Draft-ietf-isis-wg-mib-07

• Debugging: CLI via console, Telnet, or SSH
• Diagnostics: Show and debug command, statistics
• Traffic mirroring (port)
• Traffic mirroring (VLAN)
• IP tools: Extended ping and trace
• Juniper Networks commit and rollback

• ACL-based mirroring
• Mirroring destination ports per system: 4
  • LAG port monitoring
  • Multiple destination ports monitored to 1 mirror (N:1)
• Maximum number of mirroring sessions: 4
• Mirroring to remote destination (over L2): 1 destination VLAN

• UL-UL_60950-1 (First Edition)
• +UL_62368-1
• CAN/CSA C22.2 No. 60950-1
• +CAN/CSA C22.2 No. 62368-1
• EN 60950-1 Information Technology Equipment—Safety
• IEC 60950-1 Information Technology Equipment—Safety
• +IEC 62368-1 Audio/video, information and communication technology equipment – Part 1: Safety requirements 

• FCC 47CFR Part 15 Class A
• EN 55022 Class A
• ICES-003 Class A
• VCCI Class A
• AS/NZS CISPR 22 Class A
• CISPR 22 Class A
• EN 55024
• EN 300386
• CE

• GR-1089-Core: EMC and Electrical Safety for Network Telecommunications Equipment

• Reduction of Hazardous Substances (ROHS) 6/6

• CLEI code

• Noise measurements based on operational tests taken from bystander position (front) and performed at 23° C in compliance with ISO 7779.

uniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/en/products.html.

At Juniper Networks, we are dedicated to dramatically simplifying network operations and driving superior experiences for end users. Our solutions deliver industry-leading insight, automation, security and AI to drive real business results. We believe that powering connections will bring us closer together while empowering us all to solve the world’s greatest challenges of well-being, sustainability and equality.