Juniper Networks - Pod Lupou - Arrow ECSFILE/Ju… · Juniper Networks - Pod Lupou

Copyright © 2003 Juniper Networks, Inc. www.juniper.net 1

„„Konsolidace systKonsolidace systéémmůů je jasným trendemje jasným trendem““...pod lupou Juniper Networks...pod lupou Juniper Networks

Aleš PopelkaBDM Juniper Networks

[email protected]

Bratislava, 3.10.2006

2Copyright © 2003 Juniper Networks, Inc. www.juniper.net

AGENDA

Juniper Networks, Juniper Networks, PortfolioPortfolioIntroducing the SSG Introducing the SSG SerieSerieJunosJunosIntroducing the J4350 & J6350Introducing the J4350 & J6350IntroducingIntroducing thethe MM--SerieSerie

<<AGENDA SLIDE>>


Juniper Networks

Consistent revenue growth• $2.1B in 2005, up 54% from 2004

Net Qtly Revenues - $567m in Q1• 26% increase Y:Y

4,164 employees worldwide> 70 countriesStrong cash position • Cash and Investments = $2bn

$2BN company in $20BN market

Americas

APAC

EMEA

Americas

EMEA

APAC

Geographic Diversification


EMEA Q4 2005 Service Provider Routing Market Share (non MS-WAN)

Source: Canalys

40%

31%

21%8%

Juniper CiscoAlcatelOthers

Best in Class Technology - SP

Winning in Service Providers


Market Share*1 in SSL VPN1 in High-end Firewall2 in High-end Enterprise Routing2 in WAN Acceleration

Gartner Leadership QuadrantFirewall VPNSSLIntrusion Prevention SystemsApplication Acceleration

Best in Class Technology - Enterprise

* Source: Synergy IDC and Infonetics


Ochrana perimetruRouter/Firewall/IPSecVPN

NetScreenNetworking, RoutingJ-Serie/M-SerieE-Serie/T-Serie

Secure Access SA-SSL VPN

Sercure MeetingAplikačníAkcelerátory- Datacenter DX

VoIP Session Border Controller

Inside LAN IPSNetScreen IDP

Secure

Assured

AAA/802.1x Funk SoftwareOdyssey

Unified Access ControlInfranet Controler

System Solutions - Overview

- WAN WX/WXC


AGENDA

Juniper Networks, Juniper Networks, PortfolioPortfolioIntroducing the SSG Introducing the SSG SerieSerieIntroducing the J4350 & J6350Introducing the J4350 & J6350IntroducingIntroducing thethe MM--SerieSerie

<<AGENDA SLIDE>>


Requirements• Multifunction Security Services

• Advanced Content Security• LAN Segmentation

• Small Packet Performance• High Speed Encryption

• Next Gen WAN Support• Central/Delegated Management

Regional & Branch Office Solution Alternatives

Security

Routing

Security Appliances CP/Nokia, Cisco,

Juniper

Routers Cisco, Nortel,

Juniper

• Internet• Bandwidth

• Segmentation

Juniper Networks Secure Services Gateway

(SSG)


Secure Service Gateway FamilySecurity Services Gateway (SSG) family integrates proven security and WAN connectivity to deliver secured and assured networking

• New levels of price/performance and I/O flexibility• Combines best-in-class security and WAN connectivity

SSG 5 - Six fixed form factor models• 160 Mbps FW / 40 Mbps VPN

SSG 20 – 2 modular models• 160 Mbps FW / 40 Mbps VPN

SSG 140• 350+ Mbps FW / 100 Mbps VPN• 8 FE and 2 GE Interfaces + 4 WAN PIM slots

SSG 520 • 650+ Mbps FW / 300 Mbps VPN

SSG 550• 1+ Gbps FW / 500 Mbps VPN


Juniper Networks SSG 140 Ideal CPE for Larger Branch Offices, Medium Businesses

Key Features• Proven all-in-one security solution

(UTM) • (4) WAN I/O expansion slots

• 2xT1, 2xE1, 2xSerial, 1xISDN BRI S/T

• Dynamic routing – OSPF, BGP, RIPv1/2, virtual routers

• WAN Encapsulations• PPP, MLPPP, FR, MLFR, HDLC

Key Differentiators• Best-in-class threat management

solution (UTM) • Kaspersky - Antivirus, Anti-

Spyware Anti-Phishing• Symantec – Anti-spam• SurfControl - Web filtering

• Performance, security, connectivity options in a single solution

• Only system in its class with GE• Highest I/O density in its class

Juniper Networks SSG 140• 350 Mbps FW / 100 Mbps VPN• (8) 10/100 interfaces + (2)

10/100/1000• (4) PIM expansion slots for I/O

connectivity

FrontView

BackView


WAN Connectivity Serial, T1/E1, DS3

WAN ConnectivitySerial, T1/E1, DS3



LAN or WAN Connectivity 10/100/1000, SFP, FE

Serial, T1/E1, DS3


Serial, T1/E1, DS3

(4) Fixed 10/100/1000 interfacesRJ45 Console & Aux Interface

(4) Fixed 10/100/1000 interfacesRJ45 Console & Aux Interface


Serial, T1/E1, DS3


Serial, T1/E1, DS3


Serial, T1/E1, DS3


Serial, T1/E1, DS3

WAN ConnectivitySerial, T1/E1, DS3


1 Gbps FW @ 600K pps, 500 Mbps VPN500 Mbps Intrusion Prevention (DI)Dual power supplies, DC optional, NEBS optional128K sessions, 1,000 VPN tunnels

SSG 550

600Mbps FW @ 300K pps, 300 Mbps VPN300 Mbps Intrusion Prevention (DI)DC optional64K sessions, 500 VPN tunnels

SSG 520

Secure Services Gateway 500 Series Interface Support


Content Inspection/Security Stop Common and Emerging Threats

Inbound Threats Outbound Threats

Web Filtering

Spyware Site AccessPhishing Site Accesswww.<restricted site>.com

Web Filtering

Viruses, file-based TrojansSpyware/Adware, Keyloggers Viruses, file-based TrojansAV AV

Spam / PhishingAnti Spam

Anti Spam

Worms, TrojansWorms, Trojans, DoS(L4 & L7), Recon, ScansIPS/DI IPS/DI

Stateful Firewall


Multiple Admins, Different Privileges: Domain Control

Regional Office Headquarters

Domain hierarchy separates data:• Assign domain-specific permissions• Allow administrators to manage their own data

Security AdminNetwork AdminOps TechnicianAudit Team

• OS upgrade• Device config

changes

• VPN model• Adjust routing

• Signature updates• Policy adjustment

Upgrade, Adjust

• HW monitoring (interfaces up/down, fan failure, power failure)

• Interface characteristics

• Management access

• Licenses• OS version

• Remote installation

• Initial configuration

Device

• VPN monitoring• Network failure

recognition and response

• HA failover monitoring

• VPN config• Route tables• Routing• VLAN

• VPN modeling• L2/L3

specification• (Routing)

Network

• Attack log monitoring

• Consolidation• Top attacks report• Log Investigation• Reports

• Push device -specific policy out

• RAS user management

• Admin management

• Define security of entire network (all devices)

• Permission definitions

Security

Monitor, MaintainConfigureDesign, Deploy


changes



Upgrade, Adjust







Device







Network




• User management




Security


Device Lifecycle

Man

agem

ent

Leve

l


changes



Upgrade, Adjust







Device







Network




• RAS user management




Security



changes



Upgrade, Adjust







Device







Network




• User management




Security


Device Lifecycle

Man

agem

ent

Leve

l


SSG Summary

Faster Than the Competition• Faster overall performance

More Connectivity• More Ethernet ports than it’s competitors• Only product in it’s class to have Gig E interfaces• Expandable interfaces via modules

Best Price to Performance • Priced lower than competing products and more than twice the

performance

Full Security Suite Available• Antivirus, Anti-Spam, Web filtering and IPS (DI)


AGENDA


<<AGENDA SLIDE>>


Juniper AdvantageIncreased Security, Uptime, Performance, Operational Flexibility

Prot

ocol

s

Inte

rfac

e M

gmt

Chas

sis

Mgm

t

SNM

P

Ser

vice

s

strong Security high UptimeModularity for full router control in attack Next Gen CLI for fast editing of filters while under attackAdd many filter terms without degradation

Minor problems do not lead to system crashesNext Gen CLI prevents operator errorRescue button on J-seriesGraceful restart and M10i hitless recovery

ControlEngine

ForwardingEngine

ServicesEngine

predictable Performance reduced Operations costPredictable performance for voice, video and other time critical appsComprehensive QOS functions to classify, prioritize and schedule traffic

One software trainMultiple management tools, including J-Web Restoration featuresFeature licensing Interoperability One Train!One Train!

6.46.4 7.07.0 7.17.1

% o

f Li

ne R

ate

Complexity of Packet Processing

Addition of Addition of new service new service featuresfeatures

JuniperJuniper

Traditional Traditional RouterRouter


Lowest OPEX - J-Assist Toolkit Remote Tools for Large Scale Operations

OperationsRemote Install Auto configuration

RemoteSupport

Commit check Commit confirmConfiguration rollbackRescue buttonAuto record

RemoteManagement

J-Web interface JUNOScript XML APINetwork management partnerships

RemoteMonitoring

J-Flow accountingReal-time performance monitoring Real-time alerting

RemoteMaintenance

1 image, 1 updateLicensed feature setDownloadable patches


JUNOS Features (Release 7.3)Extensive Routing Feature Set

IPv4 and IPv6 Routing (OSPF, BGP, RIPv2, Static routes, IS-IS)Multicast (IGMPv3, PIM, SDP, DVMRP, Source Specific)MPLS PPPoEEncapsulations

• Ethernet (MAC and tagged)

• PPP (Synch)

• Frame relay

• HDLC

• Serial (RS232, RS449, X.21, V.35, EIA530)

• MLPPP

• MLFR

IP Address Management (Static, DHCP, DHCP Server, DHCP Relay)Advanced QOS

• Policing & shaping• Class-based queuing with prioritization• WRED• Queuing based on VLAN/

DLCI/interface/bundles

Tunneling (GRE, IP in IP, IPSec)NAT/Stateful Firewall FiltersDOS & DDOS protectionJ-Flow flow monitoring and accounting services


Spectrum of Management OptionsLeading Platforms and Tools

Next Generation JUNOS CLI• Structured, hierarchical command set• Integrated aliases and help tools

J-Web (J-series)• Setup wizards - basic setup, NAT, firewall, interfaces,

filters, QoS & IPSEC• Diagnostics wizards - general router health, SLA

services, QoS stats, and Stateful firewall stats

JUNOScript XML• Easy integration into existing apps• Custom application development and integration

OSS partner program• Close work with partners for element management,

provisioning and performance monitoring

Benefits• Enterprise in control of management

methodology

• Solutions for small to large enterprise

J-Web


Network ManagementLeading Platforms and Tools

<rpc><get-configuration/>

</rpc>

<rpc-reply><configuration>

<version>6.0R1</version><system>

<host-name>silver</host-name><domain-name>juniper.net</domain-name><time-zone>Europe/London</time-zone><radius-server>

<name>172.26.3.2</name><port>1812</port><secret>5QD.FA%tM.$8X</secret><timeout>2</timeout><retry>3</retry>

</radius-server>…

</configuration></rpc-reply>

NetworkManagement

ElementManagement

ServiceManagement

ManagementTools

JUNOScriptXML API J-Web

CentralizedConfiguration, Provisioning, Discovery

Configuration, Provisioning, Monitoring

Reporting

ServiceDeployment

System


J-WebConvenient Browser Interface for Management

HTTP server on J-series• HTTPS supported with user

installable certificate

Integrated, powerful “mouse over”help menu Configuration browser with setup wizards - basic setup, NAT, firewall, interfaces, filters, QoS and IPSECMonitoring and reportingManagement – license, software upgrades, etc.Diagnostics wizards - general router health, SLA services, QoS stats, and Stateful firewall stats



J2300

J6350

J4350

J Series Product Family OverviewIntroducing…J-series Fully Loaded

c

•Unmatched Performance with Services-Unmatched performance with services enabled (Firewall, NAT, IPSec, etc.)

•Extensive Connectivity-Four on-board GigE ports on J4350 and J6350 -Expandable WAN and LAN interfaces via modules (including GigE)-Sixteen J2300 models available

•Avaya Voice Ready-Support for Avaya gateway and telephony interface modules (Q1 2007)

•Best Price to Performance30% lower price than similar products and more than 2x faster


J4350 Components

Console2xUSB4X10/100/1000

DRAM (hidden under the cover)

AuxPower Button

4 slots for PIMsonly

2 slots for EPIMs or PIMs

Power Switch

AC or DC power supply

Cooling Fan

•T1, E1, FE, Serial, ISDN BRI, ADSL/2/2+, G.SHDSL, DS3, E3, GE Interfaces

•4 fixed GE LAN ports, 4 PIM slots and 2 EPIM/PIM slots

•Avaya media gateway capable (Q107)

•DC version available

•1 GB or 256 MB DRAM default, expandable to 2 GB DRAM

•256 MB compact flash default, upgradeable to 1 GB CF

•Hardware encryption acceleration(optional)

•NEBS compliant models available


Juniper/Avaya Strategic Alliance

• #1 in SSL VPN• #2 in high end routing• #2 in Firewall/VPN Appliances• 8 of the top 15 Fortune 500

Companies are Juniper Customers • 9 of the top 20 Global 100

Companies are Juniper Customers

• #1 IP Telephony• #2 Enterprise Telephony • #1 Voice Mail, UC & UM• #1 Call Centers• #1 PBX Maintenance Services• Standards based solution

Highly Resilient and Secure Converged Network that Provides the Best Communication Solutions for

Businesses


J4350 & J6350 Summary

Faster Than the Competition• Much faster when running Firewall+NAT and/or IPSEC

More Connectivity• Twice as many GigE ports on board versus Cisco• Expandable WAN and LAN interfaces via modules

Best Price to Performance • 30% lower cost than similar Cisco products and more than twice as

fast

Fore more information • Please visit http://www-

int.juniper.net/marketing/product_marketing/jseries/


J4350 vs. Cisco ISR 2851

300

600

400

600

147143

0

100

200

300

400

500

600

Forwarding (IMIX) FW+NAT (IMIX) IPSec (1400)

J4350ISR 2851

2x the performance

>2x the performance

Thro

ughp

ut


J6350 vs. Cisco ISR 3845

1000

600500

1000

181277

0

100

200

300

400

500

600

700

800

900

1000

Forwarding (IMIX) FW+NAT (IMIX) IPSec (1400)

J6350ISR 3845

>2x the performance

>2x the performance

Thro

ughp

ut


AGENDA


<<AGENDA SLIDE>>


M-series Multiservice Edge Portfolio – continuous innovation combined with platform consistency

M7i

M10i

Sm PoP PE/ Campus

CPE

Small PoP PE Med PoP PE 10G PoP PE

M320

CPE / Core/Peering Med Core/Peering Lg Core/Peering

SDXService Deployment System

Operating SystemOperating System

Pro

toco

ls

Inte

rfac

e M

gmt

Ch

assi

s M

gmt

SN

MP

Sec

uri

ty

M40e

M20

320

Gbps

40

20

10

5

M160

160

4 PIC Slots 8 PIC Slots 16 PIC Slots 32 PIC Slots32 PIC Slots


M10i ComponentsFully Redundant Hardware Architecture in 8 RU

Redundant AC or DCPower Supplies

Redundant Compact Forwarding Engine Boards (CFEB)

5U high 18” deep

RedundantFan Trays

Side-to-sidecooling

8 slots for hot-swappable

M5/M7i/M10/M10i PICs

High AvailabilityChassis ManagementBoards (HCM)

Redundant Routing Engines (RE)• 2 serial aux ports• Ethernet craft interface• Optional PCMCIA adapter& flash memory card


M-series Physical Interface CardsA Diverse Set of Interfaces Are Available

Standard PICs: • ATM, Ethernet, Channelized, SONET,

T1/E1/DS3/E-3• Basic connectivity with 4 or 8 queues per port

IQ PICs (Intelligent Queuing)• ATM2, Channelized, GE, E3• Granular per-logical interface QoS

IP Services PICs• No physical interfaces• Packet processing intensive applications• Stateful firewall, IPSec, J-Flow accounting,

CRTP, MLPPP/MLFR

Relevant PICs to Enterprise4xT1/E1, 10xE1, 2xDS3/E3, 4xChDS3/E3, 2xOC-3, 2xOC-3 ATM, 1xOC-12, 1xOC-12 ATM, Serial, 4/8/12 FE, 1xGE (SFP)


Intelligent Queuing PICsAdvanced QOS Mechanisms for Predictable Performance

ATM2 IQ PICsChannelized IQ PICsGigabit Ethernet IQ PICsDiscrete IQ PICs (e.g. E3, DS3)Granular per-logical interface QoS

• VC, VP, DLCI, VLANDense multi-level channelization to DS0

• With per channel QoSGranular accounting & statisticsExtensive diagnosticsVLAN tagging, deleting, and rewrite

Dedicated Access

Channelization

Fractional

Multilink Services

Accounting

Shaping &Policing

Queuing

PoliceClassify Shape

Strict priorityWRRRED

WREDMarking

Marking


IP Services PICsAdvanced Services Features

Adds a ‘service plane’ to routing & forwarding planesServices with unprecedented scale and performanceModular implementation for success based growthMultiple SW programmable execution engines

Encryption Services PIC• IPsec

Monitoring Services PIC• Cflowd

Multilink Services PIC• MLPPP, MLFR (FRF.15)

Tunnel Services PIC• GRE, IP in IP

Link Services PIC• MLPPP, MLFR(FRF.15, FRF.16), LFI,

FRF.12, TunnelAdaptive Services PIC• NAT, Stateful firewall, J-Flow

accounting, IPSec, Tunnel


Ethernet Control Plane

…Ethernet Alone is not Enough

Native Ethernet Control Plane doesn’t scale to Service Provider deployment requirementsNative Ethernet data planes are not sufficiently resilient for Service Provider deployment

Typical Ethernet elements lack comprehensive QoS features required for poly-play servicesTypical Ethernet elements lack support for legacy interfaces, protocols and services

Edge and CoreAccess and Aggregation

IP/MPLS NetworkMetro Network

Ethernet Data Plane


Advanced QoS FeaturesQoS and Traffic Management mechanisms at both egress and ingress, with 8 queues per VLAN, enables service customization and proper treatment of all traffic typesHierarchical QoS applied at both the physical port and logical VLAN level ensures quality delivery of converged services Q-in-Q implementation supports high VLAN density per port, PIC, system and rackIntelligent Oversubscription offers cost-effective Ethernet aggregation Dynamic Bandwidth Allocation creates efficiency and maximizes throughput

Intelligent Oversubscription

Hierarchical QoS

Hierarchical shaping

Per-VLAN QoS at Egress and Ingress

VLAN stacking & rewrite

Per-VLAN statistics

QoS over 802.3ad

Supports high-value business-class services, differentiated services, and emerging bundled multiplay offerings


Summary

The IQ2 ESE PIC portfolio represents exceptional value and innovation by extending cutting-edge Ethernet features to M- and T-series routers

• Advanced QoS support is ideal for high-value business services and residential multiplay offerings

• Breadth of interface options provides maximum CapEx and OpEx efficiency

• Industry-leading MPLS and VPLS support delivers unmatched service flexibility

• Modular design leverages existing M- and T- series, ensuring non-disruptive migration, and reducing costs

• Affords a seamless migration path to sophisticated Ethernet services without sacrificing current services…or revenues


Market Focused

Best in Class Technology

Clear & Precise Product Strategy

Consistent Go to Market Strategy

Copyright © 2003 Juniper Networks, Inc. www.juniper.net 39

DDěěkuji za pozornost!kuji za pozornost!

[email protected]

Date post:	01-Aug-2018
Category:	Documents
Upload:	lamduong
View:	225 times
Download:	0 times

Juniper Networks - Pod Lupou - Arrow ECSFILE/Ju… · Juniper Networks - Pod Lupou

Documents