Home

Juniper J2320

1. and IDP J4350 SMB2 CS 3 Three year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP Interface Modules Various choices see page 14 JXH HC2 S Cryptographic Acceleration Module to be used with J2350 JB SC only J2350 Base Systems and Options MODEL NUMBER DESCRIPTION J2350 Base System J2350 JB SC J2350 Junos OS base memory 512 MB 5 PIM slots SW security AC power supply 19 rack mount J2350 JB SC DC J2350 Junos OS base memory 512 MB DRAM 512 MB Flash 5 PIM slots SW encryption DC power supply 19 rack mount J2350 JH J2350 Junos OS high memory 1 GB DRAM 512 MB Flash 3 PIM slots HW encryption AC power supply 19 rack mount J2350 JH DC J2350 Junos OS high memory 1 GB 5 PIM slots HW Crypto DC power supply fan filter 19 rack mount J2350 JB SC DC N J2350 Junos OS base memory 512 MB 5 PIM slots TAA SW Crypto DC power supply fan filter NEBS TAA 19 rack mount J2350 JB SC TAA J2350 Junos OS base memory 512 MB 5 PIM slots SW Crypto AC power supply TAA 19 rack mount J2350 JH DC N TAA J2350 Junos OS high memory 1 GB 5 PIM slots HW Crypto DC power supply fan filter NEBS TAA 19 rack mount J2350 JH TAA J2350 Junos OS high memory 1 GB 5 PIM slots HW Crypto AC power supply TAA 19 rack mount J2350 Options Additional DRAM for J2350 without encryption acceleration DRAM upgrades must be insta
2. 512 MB 1GB Yes Dimensions W x H x D Weight Rack mountable Power supply AC Average power consumption Input frequency Maximum current consumption Maximum inrush current 17 5 x1 75x15 1in 445 x 44 x 383 mm 15 lb 6 8 kg No interface modules 16 6 lb 7 6 kg 3 interface modules Yes 1 RU 100 240 VAC 275 W 80 W 47 63 Hz 3 2 A 100 VAC 30A 175x175x15 1i 445 x 44 x 383 mm 16 lb 73 kg No interface modules 19 lb 8 6 kg 5 interface modules Yes 1 5 RU 100 240 VAC 300 W 80 W 47 63 Hz 3 5 A 100 VAC 32A 17 5 x 3 5 x 21 5 in 445 x 89 x 546 mm 23 lb 10 4 kg No interface modules 25 3 lb 11 5 kg 6 interface modules Yes 2 RU 100 240 VAC 350 W 143 W 47 63 Hz 5 7A 100 VAC 32A 17 5 x 3 5x21 5in 445 x 89 x 546 mm 25 lb 11 3 kg No interface modules 1 power supply 30 7 lb 13 9 kg 6 interface modules 2 power supplies Yes 2 RU 100 240 VAC 420 W 166 W 47 63 Hz 5 7A 100 VAC 42A SPECIFICATION J2320 J2350 J4350 J6350 Dimensions and Power continued Average heat dissipation Maximum heat dissipation Power supply DC Redundant power supply hot swappable Acoustic noise level Note Per ISO 7779 Standard Environment Operational temperature Nonoperational temperature Humidity Mean time between failures Telcordia model 273 BTU hour 1091 BTU hour NA No 40 0 dB 32 to 1229 F 0 to 50
3. C 4 to 158 F 20 to 70 C 10 90 noncondensing 7 2 years Certifications and Network Homologation Safety certifications EMC certifications Network homologation Canada Safety certifications EMC certifications Network homologation Australia Safety certifications EMC certifications Network homologation New Zealand Safety certifications EMC certifications Network homologation Japan Safety certifications EMC certifications Network homologation European Union Safety certifications EMC certifications Network homologation UL 60950 1 FCC Class B TIA 968 CSA 60950 1 ICES class B CS 03 AS NZS 60950 1 AS NZS CISPR22 Class B AS ACIF S 002 S 016 S 043 1 S043 2 AS NZS 60950 1 AS NZS CISPR22 Class B PRICAM PME 278 CB Scheme VCCI Class B Certificate for Technical Conditions EN 60950 1 EN 55022 Class B EN 300386 CTR 12 13 CTR 21 DoC 273 BTU hour 1195 BTU hour 48 to 60 VDC 300 W No 59 2 dB 32 to 1229 F 0 to 50 C 40 to 158 F 20 to 70 C 10 90 noncondensing 6 8 years UL 60950 1 FCC Class B TIA 968 CSA 60950 1 ICES class B CS 03 AS NZS 60950 1 AS NZS CISPR22 Class Blo AS ACIF S 002 S 016 S 043 1 S043 2 AS NZS 60950 1 AS NZS CISPR22 Class Blo PTC 217 PTC 273 CB Scheme VCCI Class B Certificate for Technical Conditions EN 60950 1 EN 55022 Class B EN 300386 CTR 12
4. RSA Keon iPLanet Netscape Baltimore DoD PKI 256 512 512 MB 1GB DRAM 256 512 512 MB 1GB DRAM Yes Yes Yes 125 Yes yes Yes Yes RADIUS RSA SecurelD LDAP Yes Yes Yes VeriSign Entrust Microsoft RSA Keon iPLanet Netscape Baltimore DoD PKI 256 512 512 MB 1GB DRAM 256 512 512 MB 1GB DRAM Yes Yes Yes 125 Yes Yes Yes Yes RADIUS RSA SecurelD LDAP Yes Yes Yes VeriSign Entrust Microsoft RSA Keon iPLanet Netscape Baltimore DoD PKI 512 1024 1GB 2GB DRAM 512 1024 1GB 2GB DRAM Yes Yes Yes 125 Yes No Yes Yes RADIUS RSA SecurelD LDAP Yes Yes Yes VeriSign Entrust Microsoft RSA Keon iPLanet Netscape Baltimore DoD PKI Maximum number of security zones Maximum number of virtual routers Maximum number of VLANs 256 256 512 1024 SPECIFICATION J2320 J2350 J4350 J6350 Encapsulations Ao ee E T E E E E ET z perira aE naciai ear MLPPP maximum physical interfaces 6 10 12 12 Frame Relay Yes Yes Yes Yes MLFR FRF 15 FRF 16 Yes Yes Yes Yes MLFR maximum physical interfaces 6 10 12 12 HDLC ves Yes Yes Yes Address Translation oe ive F T 3 Sey rote sah ae 2a PENNAT E POEST TOENE O TEA E pics NEREIS E z EL P E E EDE OUES EEIN EREN PAT Static NAT Yes Yes Yes Yes Destination NAT with PAT Yes Yes Yes Yes IP Address Assignment i T E E a E E E TEE AE TE T ih EE EAE EE os
5. 1GB 256 MB 256 MB 1GB 512 MB 2GB 512 MB 512 MB 256 MB 256 MB 256 MB 512 MB 512 MB 512 MB Specifications Protocols IPv4 IPv6 ISO Connectionless Network Service CLNS Routing and Multicast Static routes RIPv2 OSPF BGP BGP Router Reflector IS IS Multicast Internet Group Management Protocol IGMPv3 PIM Session Description Protocol SDP Distance Vector Multicast Routing Protocol DVMRP source specific MPLS IP Address Management Static Dynamic Host Configuration Protocol DHCP client and server DHCP relay Encapsulations Ethernet MAC and tagged Point to Point Protocol PPP synchronous Multilink Point to Point Protocol MLPPP Frame Relay Multilink Frame Relay MLFR FRF 15 FRF 16 High Level Data Link Control HDLC Serial RS 232 RS 449 X 21 V 35 EIA 530 802 1q VLAN support Point to Point Protocol over Ethernet PPPoE Traffic Management Marking policing and shaping Class based queuing with prioritization Weighted random early detection WRED Queuing based on VLAN data link connection identifier DLCI interface bundles or filters Security Firewall zones screens policies Stateful firewall ACL filters Denial of service DoS and distributed denial of service DDoS protections anomaly based Prevent replay attack Anti Replay Unified Access Control Dynamic Remote Unified Threat Management Licensed on high memory products only Antivirus antispam Web fi
6. BGP JX JFlow LTU J Flow Accounting J6350 K AV One year subscription for Juniper Kaspersky AV updates J6350 K AV 3 Three year subscription for Juniper Kaspersky AV updates J6350 S2 AS One year subscription for Juniper Sophos Antispam J6350 S2 AS 3 Three year subscription for Juniper Sophos Antispam J6350 W WF One year subscription for Juniper Websense Integrated Web Filtering J6350 W WF 3 Three year subscription for Juniper Websense Integrated Web Filtering J6350 IDP One year subscription for IDP updates J6350 IDP 3 Three year subscription for IDP updates J6350 SMB2 CS One year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP J6350 SMB2 CS 3 Three year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP Interface Modules Various choices see page 14 J4350 Base Systems and Options MODEL NUMBER DESCRIPTION J4350 Base System J 4350 JB J4350 Hw encryption high memory 1GB DRAM 512 MB Flash O PIM cards AC PSU wJunos OS J 4350 JB DC J4350 512 MB CF 1 GB RAM Hw encryption O PIM cards DC PSU J 4350 JB SC J4350 software encryption low memory 512 MB DRAM 512 MB Flash O PIM cards AC PSU w JJunos OS Software Crypto J 4350 JB SC DC J4350 software encryption low memory 512 MB DRAM 512 MB Flash O PIM cards DC PSU w Junos OS Software Crypto J4350 256 MB CF 1GB RAM Hw encryption O PIM cards DC PSU NEBS w Junos OS NEB
7. PE EEE AE EES y E TEOST DHCP PPPoE client Yes Yes Yes Yes Internal DHCP server Yes Yes Yes Yes DHCP relay Yes Yes Yes Yes L2 Switching a ne P EE N E E EANES Pa PEE E EEE EAT ae ERE AEE EEATT EAAS Link Aggregation 802 3ad LACP Yes Yes Yes Yes Jumbo Frame 9216 Byte Yes Yes Yes Yes Spanning Tree Protocol STP 802 1D RSTP Yes Yes Yes Yes 802 1w MSTP 802 1s Authentication 802 1x Port based and multiple Yes Yes Yes Yes supplicant Traffic Management Quality of Service QoS Guaranteed bandwidth Yes Yes Yes Yes Maximum bandwidth Yes Yes Yes Yes Ingress traffic policing Yes Yes Yes Yes Priority bandwidth utilization Yes Yes Yes Yes DiffServ marking Yes Yes Yes Yes High Availability een a ET AE ATT sib anpedn PAEA ess E Ee E EOE T EEEE E EET AERE E EA Active passive L3 mode Yes Yes Yes Yes Configuration synchronization Yes Yes Yes Yes VRRP Yes Yes Yes Yes Session synchronization for firewall and VPN Yes Yes Yes Yes Session failover for routing change Yes Yes Yes Yes Device failure detection Yes Yes Yes Yes Link failure detection Yes Yes Yes Yes Firewall z a E a EE LAEE E SA pdpeieadncahieaden decgaeaest nee tes sa ip ENE EEE E a EP O E RS T R A caseteapasts DoS and DDos protection Yes Yes Yes Yes TCP reassembly for fragmented packet Yes Yes Yes Yes protection Brute force attack mitigation Yes Yes Yes Yes SYN cookie protection Yes Yes Yes Yes Zone based IP spoofing Yes Yes Yes Yes Malformed packet protection Yes
8. Services Routers To run the Advanced BGP features order Advanced BGP JX BGP ADV LTU Each license is good for one chassis On the high memory versions of the J Series you can run Unified Threat Management consisting of antivirus antispam Web filtering and IPS These licenses are good for one chassis and available as single features bundles single year and multi year ordering options Unified Threat Management is only supported on high memory versions of J Series and requires a license See ordering information J2320 Product Comparison SPECIFICATION J2320 J2350 J4350 J6350 Maximum Performance and Capacity Junos OS version tested Firewall performance large packets Firewall performance IMIX Firewall routing PPS 64 Byte AES256 SHA 1 3DES SHA 1 VPN performance IPsec VPN Tunnels IPS intrusion prevention system Antivirus Connections per second Maximum concurrent sessions DRAM options Maximum security policies Maximum users supported Network Connectivity Junos OS 9 6 600 Mbps 400 Mbps 150 Kpps 125 Mbps 512 MB GB DRAM 256 512 115 Mbps 25 Mbps 5 000 64K 128K 512 MB 1GB DRAM 2048 1GB DRAM Unrestricted Junos OS 9 6 750 Mbps 500 Mbps 175 Kpps 150 Mbps 512 MB GB DRAM 256 512 130 Mbps 30 Mbps 5 000 64 K 128K 512 MB 1GB DRAM 2048 1GB DRAM Unrestricted Junos OS 9 6 2 Gbps 600 Mbps 225 Kpps 400 Mbps 512 MB GB DRAM 256 512
9. Yes Yes Yes SPECIFICATION J2320 J2350 J4350 J6350 Unified Threat Management Intrusion Prevention System IPS Protocol anomaly detection Stateful protocol signatures Intrusion prevention system IPS attack pattern obfuscation Customer signatures creation Frequency of updates Antivirus Express AV packet based AV File based antivirus Signature database Protocols scanned Antispyware Antiadware Antikeylogger Antispam Integrated Web filtering Redirect Web filtering Content filtering Based on MIME type file extension and protocol commands System Management Yes Daily and emergency No Yes Yes POP3 HTTP SMTP IMAP FTP Yes Yes Yes Yes Yes Yes Yes Yes Yes Daily and emergency Yes Yes Yes POP3 HTTP SMTP IMAP FTP Yes Yes Yes Yes Yes Yes yes Yes Yes Yes Yes Daily and emergency Yes Yes Yes POP3 HTTP SMTP IMAP FTP Yes Yes Yes Yes Yes Yes Yes Yes Yes Daily and emergency Yes Yes Yes POP3 HTTP SMTP IMAP FTP Yes Yes yes Yes Yes Yes Yes Yes Command line interface Network and Security Manager STRM Series Flash and Memory Yes Memory minimum and maximum DRAM Memory slots Standard and Maximum Flash memory USB port for external storage Dimensions and Power 512 MB 1GB 4 DIMM 512 MB 1GB Yes 512 MB 1GB 4 DIMM 512 MB 1GB Yes 512 MB 2 GB 4 DIMM 512 MB 1GB Yes 1GB 2 GB 4 DIMM
10. an MPLS or IP network the J Series offers a mix of features that excel at both By leveraging Junos OS the J Series can be deployed at medium to large sites and the wide range of interfaces scales the bandwidth as necessary for today s real time communications Key Hardware Features of the J Series Services Routers PRODUCT DESCRIPTION J2320 J2350 J4350 J6350 Support for T1 El Synchronous Serial ISDN Basic Rate Interface ADSL2 ADSL2 G SHDSL and Gigabit Ethernet interfaces Support for integrated IP telephony using the Avaya IG550 Integrated Gateway Support for application acceleration using the Juniper Networks ISM200 Integrated Services Module 4 fixed Gigabit Ethernet LAN ports and 3 PIM slots 512 MB DRAM default expandable to 1GB DRAM 512 MB compact flash default upgradeable to 1 GB Hardware encryption acceleration optional Full UTM antivirus antispam Web filtering intrusion prevention system with high memory version Unified Access Control UAC and content filtering Support for T1 E1 Synchronous Serial ISDN BRI ADSL 2 2 G SHDSL and Gigabit Ethernet interfaces Support for integrated IP telephony using the Avaya IG550 Integrated Gateway Support for application acceleration using the Juniper Networks ISM200 Integrated Services Module 4 fixed Gigabit Ethernet LAN ports and 5 PIM slots 512 MB DRAM default expandable to 1GB DRAM 512 MB compact flash default upgradeable to 1GB Hardware encryption ac
11. information As a result during failover synchronization of the following information is shared connection session state and flow information IPsec security associations Network Address Translation NAT traffic address book information configuration changes and more In contrast to the typical router active standby resiliency protocols such as Virtual Router Redundancy Protocol VRRP all dynamic flow and session information is lost and must be reestablished in the event of a failover Some or all applications sessions will have to restart depending on the convergence time of the links or nodes By maintaining state not only is the session preserved but security is intact In an unstable network this active active configuration also mitigates link flapping affecting session performance Session Based Forwarding Without the Performance Hit In order to optimize the throughput and latency of the combined router and firewall Junos OS implements session based forwarding an innovation that combines the session state information of a traditional firewall and the next hop forwarding of a classic router into a single operation With Junos OS a session that is permitted by the forwarding policy is added to the forwarding table along with a pointer to the next hop route Established sessions have a single table lookup to verify that the session has been permitted and to find the next hop This efficient algorithm improves throughput and low
12. 250 Mbps 65 Mbps 10 000 64K 128K 512 MB 1GB DRAM 5192 1 GB DRAM Unrestricted Junos OS 9 6 3 5 Gbps 1 Gbps 400 Kpps 900 Mbps 1GB 2 GB DRAM 512 1024 500 Mbps 130 Mbps 20 000 256 K7256K 512 MB 1 GB DRAM 10384 2 GB DRAM Unrestricted Fixed I O I O slots Services and Routing Engine slots ExpressCard slot 3G WAN WAN LAN interface options Optional maximum number of PoE ports USB Routing 4 x 10 100 1000BASE T 3x PIM N A N A See ordering information N A 4 x 10 100 1000BASE T 5x PIM N A N A See ordering information N A 4 x 10 100 1000BASE T 4xPIM 2 x EPIM PIM N A N A See ordering information N A 4 x 10 100 1000BASE T 2xPIM 4 x EPIM PIM N A N A See ordering information N A BGP instances BGP peers BGP routes OSPF instances OSPF routes RIP v1 v2 instances 512 MB 1GB DRAM 64 64 512 MB 1GB DRAM 64K 400K 512 MB 1GB DRAM 32732 512 MB 1GB DRAM 5K 10K 512 MB 1 GB DRAM 32 32 512 MB 1 GB DRAM 64 64 512 MB 1 GB DRAM 64K 400K 512 MB 1 GB DRAM 327 32 512 MB 1 GB DRAM 5K 10K 512 MB 1 GB DRAM 32 32 512 MB 1 GB DRAM 64 64 512 MB 1GB DRAM 64K 400K 512 MB 1GB DRAM 32 32 512 MB 1GB DRAM 5K 10K 512 MB 1 GB DRAM 32 32 GB 2 GB DRAM 64 64 GB 2 GB DRAM 400 K 1000 K GB 2GBDRAM 64 64 GB 2 GB DRAM OK 20K 1GB 2GBDRAM 64 64 SPECIFICATION J2320 J2350 J4350 J6350 Routing continued RIP v2 r
13. 7 S CTRA Doc 488 BTU hour 1070 BTU hour 48 to 60 VDC 420 W No 59 3 dB 32 to 122 F 0 to 50 C 4 to 158 F 20 to 70 C 10 90 noncondensing 7 6 years UL 60950 1 FCC Class A TIA 968 CSA 60950 1 ICES class A CS 03 AS NZS 60950 1 AS NZS CISPR22 Class A AS ACIF S 002 S 016 S 043 1 S043 2 AS NZS 60950 1 AS NZS CISPR22 Class A PIC AVE PICS CB Scheme VCCI Class A Certificate for Technical Conditions EN 60950 1 EN 55022 Class A EN 300386 CTR 12 13 CTR 21 DoC 566 BTU hour 1145 BTU hour 48 to 60 VDC 420 W Yes 61 2 dB 32 to 1229 F 0 to 50 C 4 to 158 F 20 to 70 C 10 90 noncondensing 12 years with redundant power UL 60950 1 FCC Class A TIA 966 CSA 60950 1 ICES class A CS 03 AS NZS 60950 1 AS NZS CISPR22 Class A AS ACIF S 002 S 016 S 043 1 S043 2 AS NZS 60950 1 AS NZS CISPR22 Class A PTE 217 PTE 273 CB Scheme VCCI Class A Certificate for Technical Conditions EN 60950 1 EN 55022 Class A EN 300386 CTR12713 CiR 21 Doc Juniper Networks Services and Support Juniper Networks is the leader in performance enabling services and support which are designed to accelerate extend and optimize your high performance network Our services allow you to bring revenue generating capabilities online faster so you can realize bigger productivity gains and faster rollouts of new business models and venture
14. DRAM 512 MB Flash 3 PIM slots SW security AC power supply TAA 19 rack mount J2320 Junos OS high memory 1 GB DRAM 512 MB Flash 3 PIM slots Hw encryption AC power supply 19 rack mount Additional DRAM for J2320 without encryption acceleration DRAM upgrades must be installed in matching pairs J MEM 512M S 1 GB 2 x J MEM 512M S replaces default Primary Compact Flash Replaces default JX CF 512M S JX CF IG S 1GB Additional Software Feature Licenses JX BGP ADV LTU Advanced BGP JX JFlow LTU J Flow Accounting J2320 K AV One year subscription for Juniper Kaspersky AV updates J2320 K AV 3 Three year subscription for Juniper Kaspersky AV updates J2320 S2 AS One year subscription for Juniper Sophos Antispam J2320 S2 AS 3 Three year subscription for Juniper Sophos Antispam J2320 W WF One year subscription for Juniper Websense Integrated Web Filtering J2320 W WF 3 Three year subscription for Juniper Websense Integrated Web Filtering J2320 IDP One year subscription for IDP updates J2320 IDP 3 Three year subscription for IDP updates J2320 SMB2 CS J2320 SMB2 CS 3 One year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP Three year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP Interface Modules Various choices see page 14 JXH HC2 S Cryptographic Acceleration Module to be used with J2320 JB SC only WAN
15. IM J2320 32350 J4350 J6350 JX ISM 200 WXC ISM200 Integrated Services Module Junos OS 9 1 Junos OS 9 1 Avaya Telephony Gateway Modules and Telephony Interface Modules AVAYA MINIMUM JUNOS OS DESCRIPTION PART NUMBER J2320 J2350 J4350 J6350 700406978 TGM550 Media Gateway Module Junos OS 9 1 Junos OS 9 1 700396138 TIM510 T1 E1 Media Module Junos OS 9 1 Junos OS 9 1 700396146 TIM514 Analog 4 4 Media Module Junos OS 9 1 Junos OS 9 700396153 TIM 521 BRI Media Module Junos OS 9 1 Junos OS 9 1 700436645 TGM550 20 Media Gateway Module Junos OS 9 1 Junos OS 9 1 700436652 TGM550 10 Media Gateway Module Junos OS 9 1 Junos OS 9 1 700426786 TIM508 Analog 8FXS Media Module Junos OS 9 1 Junos OS 9 1 700426794 TIM516 Analog 16FXS Media Module Junos OS 9 1 Junos OS 9 1 700426786 TIM518 Analog 8FXS 8FXO Media Module Junos OS 9 1 Junos OS 9 Avaya Telephony Gateway Modules and Telephony Interface Modules are available through Avaya resellers and partners Small Form Pluggable SFP Modules The one port 100 Mbps or Gigabit Ethernet Universal PIM and the six port SFP Gigabit Ethernet Universal PIM require an SPF module to provide the physical interface The SFP must be ordered separately from the UPIM PART NUMBER DESCRIPTION JX SFP 1GE LX SFP 1OOOBASE LX Gigabit Optical Transceiver SFP Module JX SFP I1GE SX SFP 1O00BASE SX Gigabit Optical Transceiver SFP Module JX SFP 1GE T SFP 1000BASE T Gigabit Copper Transceiver SFP Module JX SFP 1IFE FX SFP 100BA
16. JUNIPET NETWORKS Juniper Networks J Series Services Routers extend enterprise applications and deliver reliable connectivity to remote offices with a powerful blend of high performance network protection and advanced services J Series Services Routers leverage the modular Junos OS and Juniper s rich product and partner portfolio to consolidate market leading security application optimization and voice capabilities onto a single easy to manage platform Our innovative security approach inseparably integrates routing and firewalls for exceptional performance Available options including integrated Juniper Networks WX application acceleration and integrated voice gateway technology from Avaya make the J Series the ideal choice for closing the distance between central resources and remote locations DATASHEET J SERIES SERVICES ROUTERS J2320 J2350 J4350 AND J6350 Product Description Enterprises are faced with a number of challenges and opportunities by converging voice video and data to one network This consolidation of network elements reduces cost by easing deployment of SIP enabled VoIP real time high definition Telepresence and standardizing on a consistent infrastructure network operating system like Juniper Networks Junos operating system These new technologies improve customer relations interactions with suppliers and employee productivity This mission critical multi media network must be alway
17. Phone 852 2332 3636 EMEA Sales 00800 4586 4737 Fax 408 745 2100 Fax 852 2574 7803 Fax 35 31 8903 601 www juniper net Copyright 2010 Juniper Networks Inc All rights reserved Juniper Networks the Juniper Networks logo Junos NetScreen and ScreenOS are registered trademarks of Juniper Networks Inc in the United States and other countries All other trademarks service marks registered marks or registered service marks are the property of their respective owners Juniper Networks assumes no responsibility for any inaccuracies in this document Juniper Networks reserves the right to change modify transfer or otherwise revise this publication without notice 1000206 005 EN Jan 2010 To purchase Juniper Networks solutions please contact your Juniper Networks representative at 1 866 298 6428 or authorized reseller Printed on recycled paper
18. S and TAA compliant J4350 256 MB CF 1GB RAM Hw encryption O PIM cards AC PSU w Junos OS NEBS and TAA compliant J 4350 JB DC N TAA J 4350 JB N TAA J4350 Options Additional DRAM for J4350 without encryption acceleration DRAM upgrades must be installed in matching pairs JXX50 MEM 256M S 512 MB JXX50 MEM 256I S added to default 1 GB 2 x JXX50 MEM 512M S replaces default 2 GB 4 x JXX50 MEM 512M S replaces default Additional DRAM for J4350 with encryption acceleration DRAM upgrades must be installed in matching pairs JXX50 MEM 512M S 2 GB 4 x JXX50 MEM 512M S replaces default JXX50 MEM 512M S Primary Compact Flash Replaces default Ba a eect oeemeat timadiachctnetie JX CF 1G S 1GB Additional Software Feature Licenses JX BGP ADV LTU Advanced BGP JX JFlow LTU J Flow Accounting J4350 K AV One year subscription for Juniper Kaspersky AV updates J4350 K AV 3 Three year subscription for Juniper Kaspersky AV updates J4350 S2 AS One year subscription for Juniper Antispam J4350 S2 AS 3 Three year subscription for Juniper Antispam J4350 W WF One year subscription for Juniper Websense Integrated Web Filtering J4350 W WF 3 Three year subscription for Juniper Websense Integrated Web Filtering J4350 IDP One year subscription for IDP updates J4350 IDP 3 Three year subscription for IDP updates J4350 SMB2 CS One year security subscription for Enterprise includes Kaspersky AV WF Sophos AS
19. SE FX Optical Transceiver Module JXU 1SFP S only Serial Interface Cables The two port Serial PIM requires separate purchase of serial cables PART NUMBER CABLE TYPE LENGTH CONNECTOR TYPE JX CBL EIA530 DCE EIA530 cable DCE Oft 3m Female JX CBL EIA530 DTE EIA530 cable DTE O ft 3m Male JX CBL RS232 DCE RS232 cable DCE Oft 3m Female JX CBL R5232 DTE RS232 cable DTE O ft 3m Male JX CBL RS449 DCE RS449 cable DTE Oft 3m Female JX CBL RS449 DTE RS449 cable DTE 0 ft 3m Male JX CBL V35 DCE V 35 cable DTE Oft 3m Female JX CBL V35 DTE V 35 cable DTE O ft 3m Male JX CBL X21 DCE X 21 cable DCE O ft 3m Female JX CBL X21 DTE X 21 cable DTE 0 ft 3m Male About Juniper Networks Juniper Networks Inc is the leader in high performance networking Juniper offers a high performance network infrastructure that creates a responsive and trusted environment for accelerating the deployment of services and applications over a single network This fuels high performance businesses Additional information can be found at www juniper net Corporate and Sales Headquarters APAC Headquarters EMEA Headquarters Juniper Networks Inc Juniper Networks Hong Kong Juniper Networks Ireland 1194 North Mathilda Avenue 26 F Cityplaza One Airside Business Park Sunnyvale CA 94089 USA 1111 King s Road Swords County Dublin Ireland Phone 888 JUNIPER 888 586 4737 Taikoo Shing Hong Kong Phone 35 31 8903 600 or 408 745 2000
20. and LAN Module Part Numbers PART NUMBER DESCRIPTION SUPPORTED ON J2320 J2350 SUPPORTED ON J4350 J6350 Physical Interface Module PIM JX 1DS3 S l port DS3 PIM No Yes JX 1E3 S l port E3 PIM No Yes JX 2T1 RJ48 S 2 port T1 PIM Yes Yes JX 2E1 RJ48 S 2 port El PIM Yes Yes JX 2CTIEI RJ45 S 2 port Channelized T1 E1 PIM Yes Yes JX 2Serial ISL S 2 port Synchronous Serial PIM Yes Yes JX 2FE TX S 2 port FE PIM No Yes JX 4BRI S S 4 port ISDN BRI S Interface Yes Yes JX 4BRI U S 4 port ISDN BRI U Interface Yes Yes JX IADSL A S l port ADSL Annex A PIM Yes Yes JX 1ADSL B S l port ADSL Annex B PIM Yes Yes JX 2SHDSL S 2 port 2 wire or l port 4 wireG SHDSL Yes Yes Interface JX 1DS3 S 1 port DS3 PIM No Yes Enhanced Physical Interface Module EPIM e E a Fedo lai piGee Son eben pases tas Aiea ep ae ee r cay EET donaaa dean a EEEE EA T 5 EEIE T achiedonepedesdnaad JXE IGE SFP S l port Gigabit SFP EPIM No Yes JXE 4FE TX S 4 port FE EPIM No Yes Universal Physical Interface Module UPIM a oe Flak AESAAT TA ASY a ne nares nae ae iinet o A E E E T EI I AA AA IEA ce en Sea PIM SFPs sold separately JXU 8GE TX S 8 port Gigabit Ethernet 10 100 1000 Yes Yes Copper Universal PIM JXU 16GE TX S 16 port Gigabit Ethernet 10 100 1000 Yes Yes Copper Universal PIM JXU 1SFP S l port SFP 100 Mbps or Gigabit Yes Yes Ethernet Universal PIM SFP sold separately Integrated Services Modules PIM INTEGRATED SERVICES MINIMUM JUNOS OS DESCRIPTION MODULE P
21. celeration optional DC version available NEBS compliant models available Full UTM antivirus antispam Web filtering intrusion prevention system with high memory version Unified Access Control UAC and content filtering Support for T1 El Fast Ethernet Synchronous Serial ISDN BRI ADSL2 ADSL2 G SHDSL DS3 E3 Gigabit Ethernet interfaces Support for integrated IP telephony using the Avaya IG550 Integrated Gateway Support for application acceleration using the Juniper Networks ISM200 Integrated Services Module 4 fixed Gigabit Ethernet LAN ports 4 PIM slots and 2 EPIM PIM slots DC version available 512 MB or 1 GB DRAM default expandable to 2 GB DRAM 512 MB compact flash default upgradeable to 1 GB Hardware encryption acceleration optional NEBS compliant models available Full UTM antivirus antispam Web filtering intrusion prevention system with high memory version Unified Access Control UAC and content filtering Support for T1 El Fast Ethernet Synchronous Serial ISDN BRI ADSL2 ADSL2 G SHDSL DS3 E3 Gigabit Ethernet interfaces Support for integrated IP telephony using the Avaya IG550 Integrated Gateway Support for application acceleration using the Juniper Networks ISM200 Integrated Services Module 4 fixed Gigabit Ethernet LAN ports 2 PIM slots and 4 EPIM PIM slots DC version available 1GB DRAM default expandable to 2 GB DRAM 512 MB compact flash default upgradeable to 1GB Hardware encryption acc
22. eleration standard NEBS compliant models available Redundant AC or DC power supplies Full UTM antivirus antispam Web filtering intrusion prevention system with high memory version Unified Access Control UAC and content filtering Features and Benefits Secure Routing Should you use a router and a firewall to secure your network By building the branch J Series Services Routers with best in class routing and firewall capabilities in one product enterprises don t have to make that choice Why forward traffic if it s not legitimate J Series for the branch checks the traffic to see if it is legitimate and only forwards it on when it is This reduces the load on the network allocates bandwidth for all other mission critical applications and secures the network from hacking The main purpose of a secure router is to provide firewall protection and apply policies The firewall zone functionality inspects traffic flows and state to ensure that originating and returning information in a session is expected and permitted for a particular zone The security policy determines if the session can originate in one zone and traverse to another zone This architectural choice receives packets from a wide variety of clients and servers and keeps track of every session of every application and of every user It allows the enterprise to make sure that only legitimate traffic is on its network and that traffic is flowing in the expected di
23. ers latency for session traffic when compared with a classic router that performs multiple table lookups to verify session information and then to find a next hop route SMALL OFFICE Figure 3 shows the session based forwarding algorithm Whena new session is established the session based architecture within Junos OS verifies that the session is allowed by the forwarding policies If the session is allowed Junos OS will look up the next hop route in the routing table It then inserts the session and the next hop route into the session and forwarding table and forwards the packet Subsequent packets for the established session require a single table lookup in the session and forwarding table and are forwarded to the egress interface Security Policy Evaluation and Next Hop Lookup Session Initial Packet Processing Session and Forwarding Table Forwarding for ___ Permitted Traffic Ingress Interface 7 Disallowed by Policy Dropped _ Egress Interface Figure 3 Session based forwarding algorithm FIXED MOBILE SITE Mobile 3G PAA D SRX100 Mobile EX4200 EX2200 EX3200 EX2200 CO e i CCD E SRX240 EX4200 EX4200 E MO e a a CCC CD a n SRX650 HEAD QUARTERS Wireless Service Provider SIP Softswitch Service Provider SIP Softswitch PSTN PEN a eN g3 cMIIne oM s gt co 0 UO Co 50 co o
24. ility By using the Web interface or CLI enterprises can create a series of security policies that will control the traffic from within and in between zones by defining policies At the broadest level all types of traffic can be allowed from any source in security zones to any destination in all other zones without any scheduling restrictions At the narrowest level policies can be created that allow only one kind of traffic between a specified host in one zone and another specified host in another zone during a scheduled time period High Availability Junos OS Services Redundancy Protocol JSRP is a core feature of the J Series for the branch JSRP enables a pair of security systems to be easily integrated into a high availability network architecture with redundant physical connections between the systems and the adjacent network switches With link redundancy Juniper Networks can address many common causes of system failures such as a physical port going bad or a cable getting disconnected to ensure that a connection is available without having to fail over the entire system This is consistent witha typical active standby nature of routing resiliency protocols When J Series routers for the branch are configured as an active active pair traffic and configuration will be mirrored automatically to provide active firewall and VPN session maintenance in case of a failure The J Series will now synchronize both configuration and runtime
25. lled in matching pairs JXX50 MEM 512M S 1 GB 2 x JXX50 MEM 512M S replaces default Primary Compact Flash Replaces default JX CF 512M S 512 MB JX CF 1G S 1GB Additional Software Feature Licenses JX BGP ADV LTU Advanced BGP JX JFlow LTU J Flow Accounting J2350 K AV One year subscription for Juniper Kaspersky AV updates J2350 K AV 3 Three year subscription for Juniper Kaspersky AV updates J2350 S2 AS One year subscription for Juniper Sophos Antispam J2350 S2 AS 3 Three year subscription for Juniper Sophos Antispam J2350 W WF One year subscription for Juniper Websense Integrated Web Filtering J2350 W WF 3 Three year subscription for Juniper Websense Integrated Web Filtering J2350 IDP One year subscription for IDP updates J2350 IDP 3 Three year subscription for IDP updates J2350 SMB2 CS One year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP J2350 SMB2 CS 3 Three year security subscription for Enterprise includes Kaspersky AV WF Sophos AS and IDP Interface Modules Various choices see page 14 JXH HC2 S Cryptographic Acceleration Module to be used with J2350 JB SC only J2320 Base Systems and Options MODEL NUMBER DESCRIPTION J2320 Base System J2320 JB SC J2320 JB SC TAA J2320 JH J2320 Options J2320 Junos OS base memory 512 MB DRAM 512 MB Flash 3 PIM slots SW security AC power supply 19 rack mount J2320 Junos OS base memory 512 MB
26. ltering IPS Voice Transport FRF 12 Link fragmentation and interleaving LFI Compressed Real Time Transport Protocol CRTP BGP Route Reflector see ordering information High Availability VRRP Stateful failover and dual box clustering via JSRP Redundant power optional IPv6 OSPFv3 IPv6 Multicast Listener Discovery MLD BGP Quality of service QoS SLA and Measurement Real time performance monitoring RPM Sessions packets bandwidth usage J Flow flow monitoring and accounting services Logging and Monitoring Syslog Traceroute Administration Juniper Networks Network and Security Manager support Juniper Networks STRM Series Security Threat Response Managers support Juniper Networks Advanced Insight Solutions support External administrator database RADIUS LDAP SecurelD Auto configuration Configuration rollback Rescue configuration with button Commit confirm for changes Auto record for diagnostics Software upgrades J Web Operating System All J Series Services Routers ship with the worldwide version of Junos OS which has standard encryption as opposed to the US and Canada version which has strong encryption You can download the strong encryption version at no charge so long as you can certify eligibility The download is available from Juniper s Customer Support Center Web site www juniper net customers csc software Feature Licenses Licenses are required for advanced functionality on the J Series
27. oje U U EX3200 EX2200 BRANCH Figure 4 The distributed enterprise Product Options Juniper Networks J2320 J2350 J4350 and J6350 Services Routers offer a number of options in terms of LAN and WAN ports hardware encryption acceleration power supplies DRAM compact flash and feature licenses LAN Ports All J2320 J2350 J4350 and J6350 Services Routers ship with four fixed 10 100 1000 Ethernet ports You can add more modular LAN interfaces by ordering the appropriate PIMs Enhanced PIMs EPIMs or Universal PIMs UPIMs For more information see the J Series WAN and LAN modules Ordering Information section on page 14 WAN Ports All J2320 J2350 J4350 and J6350 Services Routers ship without fixed WAN ports The customer can add modular WAN interfaces by ordering the appropriate PIMs For more information see the J Series WAN and LAN Modules Part Numbers in the Ordering Information section on page 14 Hardware Encryption Acceleration The J2320 J2350 and J4350 are available with optional hardware encryption acceleration All J6350 models include hardware encryption acceleration by default If you purchase a J2320 J2350 or J4350 without hardware encryption you can add it later by ordering the appropriate encryption card Power Supply All J2350 J4350 and J6350 Services Routers ship with either a DC power supply or an AC power supply and include a region specific power cord The J2320 is available with AC po
28. outes Static routes Source based routing Policy based routing Equal cost multipath ECMP Reverse path forwarding RPF 512 MB 1GB DRAM 5K 10K 512 MB 1GB DRAM Sky 10s Yes Yes Yes Yes 512 MB 1GB DRAM 5K 10K 512 MB 1GB DRAM 5K 10K Yes Yes Yes Yes 512 MB 1GB DRAM 5K 10K 512 MB 1GB DRAM 5K 10K Yes Yes Yes Yes 1GB 2GB DRAM 10K 20K 1GB 2GBDRAM 10K 20K Yes Yes Yes Yes Layer 2 VPN VPLS Layer 3 VPN LDP RSVP Circuit Cross connect CCC Translational Cross connect TCC Multicast Yes IGMP v1 v2 v3 PIM SM PIM source specific multicast SSM Multicast inside IPsec tunnel IPsec VPN Yes Yes Concurrent VPN tunnels Tunnel interfaces DES 56 bit 3DES 168 bit and AES 256 bit MD 5 and SHA authentication Manual key Internet Key Exchange IKE public key infrastructure PKI X 509 Perfect forward secrecy DH Groups Prevent replay attack Dynamic remote access VPN IPsec NAT traversal Redundant VPN gateways 256 512 512 MB 1GB DRAM 256 512 512 MB 1GB DRAM Yes Yes Yes 125 Yes Yes Yes Yes User Authentication and Access Control Third party user authentication RADIUS accounting XAUTH VPN Web based 802 X authentication PKI certificate requests PKCS 7 and PKCS 10 Certificate Authorities supported Virtualization RADIUS RSA SecurelD LDAP Yes Yes Yes VeriSign Entrust Microsoft
29. rection Untrust Zone A N INTERNET Trust Zone E au Intranet Guest Zone Figure 1 Firewalls zones and policies To ease the configuration of a firewall J Series for the branch uses two features zones and policies While these can be user defined the default shipping configuration contains at a minimum a trust and an untrust zone The trust zone is used for configuration and attaching the LAN to the branch J Series routers The untrust zone is used for the WAN or Internet interface To simplify installation and make configuration easier a default policy is in place that allows traffic originating from the trust zone to flow to the untrust zone This policy blocks all traffic originating from the untrust zone to the trust zone A traditional router forwards all traffic without regard to a firewall session awareness or policy origination and destination of a session High Availability Active Standby Active Standby N wet INTERNET inne L NAK J Series Pi Nu Series sser 7 J Series Active SEn E Standby Failure ESE Active es ER EX Series EX Series fins Bs th T x ig 3 B MHE mHE E E EHE EHE aA aA Active Active Active Active INTERNET a J Series JSeries M Scris J Series Active E EEE Active Failure EPA E active EX EX Series EX Series DL EX Series Cee a i ts i i ae ala am aa Be 2B Figure 2 High availab
30. s At the same time Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance reliability and availability For more details please visit www juniper net us en products services Ordering Information The following tables outline part numbers for J6350 J4350 J2350 and J2320 base systems and options associated WAN and LAN modules and additional accessories J6350 Base Systems and Options MODEL NUMBER DESCRIPTION J6350 Base System J 6350 JB J6350 Hw encryption high memory 1GB DRAM 512 MB Flash O PIM cards 1 AC PSU w Junos OS J 6350 JB DC J6350 512 MB CF 1 GB RAM Hw encryption O PIM cards 1 DC PSU J6350 512 MB CF 1 GB RAM Hw encryption O PIM cards 1 DC PSU w Junos OS NEBS and TAA compliant J6350 512 MB CF 1 GB RAM Hw encryption O PIM cards 1 AC PSU w Junos OS NEBS and TAA J 6350 JB DC N TAA J 6350 JB N TAA compliant J6350 Options Redundant Power Supply o a rete Ae a eed ai SSG PS AC AC power supply Region Specific AC Power Cables for SSG PS AC CBL JX PWR AU Australia CBL JX PWR CH China CBL JX PWR EU Europe CBL JX PWR IT Italy CBL JX PWR JP CBL JX PWR UK United Kingdom CBL JX PWR US USA Additional DRAM JXX50 MEM 512M S 2 GB 2 x JXX50 MEM 512M S added to default Japan Primary Compact Flash Replaces default JX CF 512M S IX CF IG S 1GB Additional Software Feature Licenses JX BGP ADV LTU Advanced
31. s on and always available To accomplish this fully integrated stateful security is a key requirement not merely forwarding packets without regard to the intended application or individual user session Junos OS provides the high performance networking infrastructure that helps enterprises implement key initiatives that Integrates routing firewalling and VPN into one best in class secure router By securing an enterprise s mission critical information and protecting the network from vulnerabilities and attack the Juniper Networks J Series Services Router offers a combination of features that increases productivity and reduces costs With Junos OS release 9 6 the J Series enhances these features with Unified Threat Management consisting of antivirus antispam Web filtering and intrusion prevention system These advanced security features can eliminate a standalone appliance and be applied witha software key Minimizes the cost of installing and operating a network by deploying J Series With the modular protected mode design of Junos OS and the rigorous Junos OS development and testing process there are fewer system process failures The single code source of Junos OS makes the qualification of new releases across the network much simpler In addition superior configuration management reduces human errors that could lead to network downtime Whether you have an enterprise network or a service provider looking for customer premise equipment for
32. wer only The J6350 supports a second redundant AC or DC power supply which can be added by ordering SSG PS DC or SSG PS AC The region specific AC power cable for SSG PS AC must be ordered separately Table 2 J4350 and J6350 Supported Memory Configurations DRAM The J2320 and J2350 are upgradeable to a maximum of 1 GB DRAM The J2320 and J2350 models without hardware encryption acceleration J2320 JB SC and J2350 JB SC come with 512 MB DRAM All other models come with 1 GB of DRAM All J4350 models are upgradeable to a maximum of 2 GB DRAM The J4350 model that ships without hardware encryption acceleration J 4350 JB SC ships with 512 MB of DRAM All other J4350 models ship with 1 GB of DRAM All J6350 Services Routers ship with 1 GB of DRAM and are upgradeable to 2 GB of DRAM Order and install two additional JXX50 MEM 512M S DIMMs Note that when upgrading DRAM DIMMs should always be installed in pairs for example to upgrade to 1 GB DRAM order two JXX50 MEM 512M S DIMMs To upgrade to 2 GB DRAM order four JXX50 MEM 512M S DIMMs With Junos OS Release 9 1 and later all J Series Services Routers J2320 J2350 J4350 J6350 must run at least 512 MB of DRAM Compact Flash All J2320 J2350 J4350 and J6350 Services Routers ship with 512 MB of primary compact flash You can replace that with a larger compact flash by ordering one either JX CF 512M S for 512 MB or JX CF 1G S for 1 GB 512 MB 512 MB 512 MB 256 MB

Juniper J2320

Contents

Download Pdf Manuals

Related Search

Related Contents