Deep Dive EX4300 and EX4600 Washid Lootfun Sr. System Engineer

Transcription

1 Deep Dive EX4300 and EX4600 Washid Lootfun Sr. System Engineer 1 Copyright 2012 Juniper Networks, Inc.

2 EX SERIES PRODUCT FAMILY AGGREGATION/ CORE Network Director One JUNOS ACCESS Dense Access/ Aggregation Switch EX8208 EX8216 Core/ Aggregation Switch EX9204 EX9208 EX9214 Programmable Core/Distribution Switch EX6210 Entry Level Access Switches Proven Access Switch Versatile Access Switch Powerful Aggregation Switch MODULAR New EX2200 EX2200-C EX3300 EX4200 EX4300 Powerful Aggregation/C ore Switch FIXED

3 EX4300 product overview

4 EX4300 COPPER SKUS: FRONT & REAR VIEW Console port Front View Rear View 1GbE Management Port USB Fan 1GbE network ports, PoE+ capable 4x40GbE ports Fan USB console LCD Uplink module AC power supply Fixed configuration 1 RU height Front facing modular slot 4xGbE/10GbE uplink module Rear-facing Virtual Chassis ports 4x40GbE QSFP+ 40GbE ports cannot be broken into 10GbE Redundant hot-swappable PSU Environmental ranges Operating Temp: 0 to 45 C Operating Altitude: up to 10K ft Low acoustics: 40-45dB Management interfaces LCD for easy bring up USB & RJ-45 consoles Out-of-band Ethernet (RJ-45) USB

5 EX4300 Fiber SKUs: Front & Rear View 10-member Virtual chassis platform 32x100M/1000M SFP ports Modular slot with Uplink Module 32xGbaseX 4x10GbaseX 2x40GE fixed QSFP+ ports 4x10GbE Fixed uplink ports 1 modular slot with options Power supplies 2x40GbaseX fans 2x40GbE ports 8x10GbE ports License EX-32F-EFL EX-32F-AFL 2x40GbaseX 8x10GbaseX SKU GE ports In-built 10GbE In built 40GbE ports Total 10/40GbE ports Cooling Power supply EX F /4 AFO AC EX F-DC /4 AFO DC Roadmap

6 EX4300 Series switches 1U 24/48 Port 1GbE Switch Wire-rate performance on all ports 4 x 10GbE uplink module 4x40GbE QSFP+ fixed ports (EX4300-T) 2x40GbE QSFP+ fixed ports (EX4300-F) 2x40GbX and 8x10GbX ports module option MacSec and EEE capable Front-back and back-front airflow Extensive Layer 3 (requires license) Virtual Chassis Technology Enhanced 320 Gbps backplane Manage up to 10 as a single device Standard 10GbE/40GbE cables Mix 1GbE and 10GbE with QFX3500 and QFX5100 Industry-only cross-platform Virtual Chassis Geographically distributed Automation & Orchestration Automation with Puppet and Chef Openstack integration Openflow support AFI SKU # Ports PoE/PoE+ Ports PoE power budget EX P W EX T EX P W EX T EX T-AFI EX T-DC EX T-DC-AFI EX F 32 EX F-DC 32 AFO

7 EX4300 Power over Ethernet Plus capability All ports capable of PoE+ (30W) with two power supplies With N+0 redundancy Hot failover supported SKU PoE+ capable Ports PoE+ Power (1 PSU) PoE+ Ports (1 PSU) PoE+ power (2 PSUs) PoE+ Ports (2 PSU) EX P W W 24 EX P W W 48 Power supplies can be changed on 24P/48P for greater flexibility DC with PoE/PoE+ supported SKU* JPSU-350-AC-AFO JPSU-350-AC-AFI JPSU-715-AC-AFO JPSU-1100-AC-AFO JPSU-550-DC-AFO JPSU-550-DC-AFI PoE+ Power (1 PSU) 175W 175W 540W 925W PoE+ Ports (1 PSU) PoE+ Power (2 PSU) 490W 490W 1183W 1915W 870W 870W PoE+ Ports (2 PSU)

8 Software features and licensing Features EX4200/EX4550 EX3300 EX4300 Advanced Layer 3: BGP v4/v6, IS-IS, MPLS Advanced License Advanced License Advanced License Layer 3: IPv4/v6 routing OSPFv4/v6, IGMP v1/v2/v3, PIM- SM/SSM/DM, VRF-Lite, QinQ, OAM (802.1ag) L2 and Basic Layer 3: STP, VLAN, LAG, LLDP/MED, RIP, IPv4/IPv6 Static routes, IGMP snooping, sflow, PVLAN, 802.1x,802.3ah, Virtual Chassis, Network Director, J- Web Base (no License) Enhanced License Base (no License) Enhanced License Base (no License) On EX F, EFL is a $0 upgrade Roadmap

9 Comparison with EX2200, EX3300,EX4200 and EX4300 EX2200 EX3300 EX4200 EX4300 Target Market (Dominant) Branch; small campus access Campus access Campus access; data center TOR Campus access; data center TOR Marketing Name Virtual Chassis-Lite Virtual Chassis Virtual Chassis Virtual Chassis Uplinks Up to 4x1GbE Up to 4x10GbE 128G or 2x10GbE 4x40G or 4x10GbE Backplane Speed Up to 8 Gbps Up to 80 Gbps 128 Gbps Up to 320 Gbps HA Capability No Yes Yes Yes License for Virtual Chassis Base Base Base Base LCD No Yes Yes Yes Virtual Chassis Members Up to 4 Up to 10 Up to 10 mixed Virtual Chassis with EX45xx Up to 10

10 EX4300 Packet Flow

11 EX4300 ARCHITECTURE Port x Octal 1GbE PHY Mini USB USB LCD Front Uplink Module 4x10GbE CPU 48GbE Packet Forwarding Engine 1GbE 4x 10GbE 2G Flash 4x 40GbE Rear 4x40GbE Stacking ports Main Mem MGM Boot T Flash P S U 1 P S U 2 USB CON MGT Single PFE system

12 EX4300 PACKET WALK KNOWN PACKET Front Uplink Module 4x10GbE 4x 10GbE USB CON MGT 1 6 x Octal 1GbE PHY 10 x Dual 8 x Quad 10GbE 10GbE PHY 10 x Dual 10GbE PHY PHY 48GbE Packet Forwarding Engine 2 4x 40GbE 3 Rear 4x40GbE Stacking ports 1GbE Main Mem 2G Flash CPU Boot Flash LCD P S U 1 P S U 2 1 Packet enters a port and its attached PFE 2 PFE performs MAC lookup; If source MAC is known, performs destination MAC lookup 3 Based on the destination MAC lookup result, the PFE forwards the packet out an egress port

13 EX4300 PACKET WALK UNKNOWN PACKET Front Uplink Module 4x10GbE 4x 10GbE 1 6 x Octal 1GbE PHY 10 x Dual 8 x Quad 10GbE 10GbE PHY 10 x Dual 10GbE PHY PHY 48GbE Packet Forwarding Engine 2 USB CON MGT 4x 40GBE Rear 4x40GbE Stacking ports 5 VLAN X VLAN X 1GbE 3 Main Mem 2G Flash CPU Boot Flash 4 LCD P S U 1 P S U Packet enters a port and its attached PFE PFE performs source MAC lookup If source MAC is unknown, PFE sends packet to CPU for learning CPU learns the source MAC and programs the PFE The PFE performs destination MAC lookup and forwards the packet to an egress port; If destination MAC is not found, packet is replicated to all ports in the VLAN

14 Data center Top-of-rack deployment Data center 1/10/40GbE top-of-rack switch Mixed EX4300 copper and EX4300 fiber virtual chassis 1/10/40GbE uplink ports AFO and AFI airflow support

15 EX4600 product overview

16 Compact Distribution SWITCH EX4600 Compact & High Performance 1/10/40G density in 1 RU Non-Stop Operations In-service software upgrades (ISSU) Smart Analytics Insight Technology Network Segmentation MPLS (L3VPN)

17 EX4600-AFL EX4600, Advanced Feature License for IS-IS, BGP, MPLS EX4600 overview 24xGbaseX 4x40GbaseX Modular slots 8x10GbE Or 4x40GbE 10GbaseX platform for Distribution 24x10GbaseX SFP+ ports 4x40GE fixed QSFP+ ports Two slots for uplink modules 8x10GbE 4x40GbE EX4600 SKUs* 10GbaseX ports 40 Gbase-X ports Total 10GbaseX ports Total 40GbaseX ports Cooling AC/DC EX F-AFO 24 4 Up to 40 Up to 12 AFO AC EX F-AFI 24 4 Up to 40 Up to 12 AFI AC EX F-DC-AFO 24 4 Up to 40 Up to 12 AFO DC EX F-DC-AFI 24 4 Up to 40 Up to 12 AFI DC EX4600 supporting SKU s Description EX4600-EM-8F EX-EM-4Q EX port SFP+/SFP expansion module EX port QSFP expansion module

18 EX4600 platform 720Gbps switching performance (1.44Tbps Full Duplex) 1.5GHz Dual Core x86 CPU 8GB Memory, 2x16GB flash disks 24 x 10GbE and 4 x 40GbE fixed configuration 2 x FRU expansion modules supported 4 x 40GbE (P0 and P1 are channelized) 8 x 10 GbE MACsec support on all 10G ports and EM-8F Module Breakout cable supported on fixed 40G ports

19 EX4600 platform Field Replaceable and Hot Swappable Fan Trays 5 x Fan Trays AFI (FRU to port side) or AFO (Port to FRU side) airflow n + 1 redundancy Field Replaceable and Hot Swappable Power Supply Units 2 x PSU redundancy AC PSU 650W AFI/AFO DC PSU 650W AFI/AFO

20 Air Flow Through EX4600 Air In Airflow Through EX4600 Air Out Airflow Through EX4600 Do Not Install Components with Different Airflow or Wattage in the Switch

21 Advanced JUNOS SOFTWARE ARCHITECTURE Provides the foundation for advanced functions ISSU (In-Service Software Upgrade). ENABLE HITLESS UPGRADE Other Juniper applications for additional service in a single switch Third-party application Can bring up the system much faster JunOS VM (Active) JunOS VM (Standby) 3 rd Party Application Juniper Apps Host NW Bridge KVM Linux Kernel (Centos)

22 EX4600 Hitless operations Dramatically Reduces Maintenance Windows Network Performance EX4600 Topology- Independent ISSU Competitive ISSU Approaches Network Resiliency Core or Distribution Efficiency During Switch Software Upgrade High-Level EX4600 Architecture Junos VM (Master) PFE x86 Hardware Junos VM (Backup) (Master) Kernal Based Virtual Machines Linux Kernel PFE Broadcom Trident II II

23 EX4600 Packet Flow

24 Architecture & PFE pipeline Ingress Pipeline: Ingress Parsing Ethertype, VRF etc L2/L3 Lookup L2/L3 forwarding, etc Ingress ACL firewall, policing PFE Packet Management: buffering, rate-limiting, queue scheduling, broadcast/multicast replication (including mirroring) 1/10/40GbE Interfaces MAC Signal receive/transmit Encoding/Decoding Add/check FCS Enforce inter-frame gap Parse Metering counting Tunnel Termination Ingress pipeline L2/L3/MPLS Lookup Egress ACL Egress pipeline Ingress ACL Metering counting Packet modification Egress Pipeline: Parsing Packet modification rewrite headers, CoS, etc Egress ACL firewall MMU (Flexible Queuing Scheduling

25 L2 unicast unknown Packet flow 1 QIC QIC QSFP+ Quad 10G Quad 10G Quad 10G Quad 10G Quad 10G Quad 10G Boot Flash Main Mem CPU Flash PFE Packet enters port and the PFE 2. PFE performs source MAC lookup 3. If source MAC is unknown, MAC is learnt in hardware and notification is sent to the CPU 4. If MAC limit is enabled, then learning notification is sent to the CPU and the CPU learns the MAC 5. Destination MAC lookup is performed 6. If Destination MAC is unknown, packet is forwarded to all ports in the VLAN

26 L2 unicast known packet flow 1 QIC QIC QSFP+ Quad 10G Quad 10G Quad 10G Quad 10G Quad 10G Quad 10G Boot Flash Main Mem CPU Flash 4 PFE Packet enters port and the PFE 2. PFE performs source MAC lookup 3. If source MAC is known, Destination MAC lookup is performed 4. If Destination MAC is known, packet is forwarded to the destination port

27 L2 unknown packet in Virtual chassis 5 RE Backup RE Linecard 1 C P U PFE 1. Packet enters port and the PFE on the linecard 2. PFE performs source MAC lookup and the source MAC is unknown C P U PFE 3. A notification is sent to the local CPU 4. LC CPU encapsulates the packet header info (mac, vlan, port#) in an IPC msg to send to the Master s CPU for learning 5. The IPC msg is routed to the Master s CPU via the shortest path, first via the PCI-e to the 1st PFE en-route, then via the VC backplane arriving at the Master s CPU through its PCI-e connection 4 C P U 3 PFE 2

28 L2 unknown packet in Virtual chassis 7 RE Backup RE Linecard 10 6 C P U PFE C P U 8 PFE 11 C P U 9 PFE 6. Master s CPU decides whether to learn the MAC address or discard it based on configuration (e.g. mac-limiting) 7. If Master s CPU learns the MAC address, It will send IPC msgs to all other CPUs instructing them to program the new MAC address in each PFE s TCAM. Similar to step 5, these IPC messages will traverse both the PCI-e connections and the VC backplane to reach CPUs on each of the switches in the VC 8. Each CPU programs the new learned MAC address in their respective PFEs MAC table 9. The ingress CPU (LC CPU), re-injects the stored original packet back out to the ingress PFE 10. The ingress PFE forwards the packet to the egress PFE based on the lookup result of the packet s destination MAC address 11. The egress PFE forwards the packet to the egress port based on the same lookup result, no additional lookup needed

29 L3 Unicast packet flow RE Backup RE Linecard 1 C P U PFE C P U PFE 5 C P U PFE 1. Packets enters a port on the LC switch and its attached ingress EXPFE 2. Ingress PFE performs MAC address lookup, finds source MAC known, thus subsequently performs lookup on the destination MAC address 3. Destination MAC address matches that of the switch itself which triggers L3 lookup 4. Ingress PFE forwards packet based on L3 lookup result if no entry found in L3 TCAM or if next-hop missing then packet is dropped in hardware 5. The egress PFE forwards the packet to the egress port based on the same L3 lookup result, no additional lookup needed

30 Software features and licensing Features EX4200/ EX4550 EX4300 EX4300 Fiber/ EX4600 Advanced Layer 3 features: BGP v4/v6, ISIS, MPLS Advanced License Advanced License Advanced License Layer 3 features: IPv4/v6 routing OSPFv2/v3, IGMP v1/v2, PIM, vrf-lite, Enhanced License L2 and Basic Layer 3 features: STP, VLAN, LAG, LLDP, LLDP-MED, RIP, IPv4/IPv6 Static routes, IGMP snooping, Managed by Junos Space, Network Director, sflow, 802.1x, Virtual Chassis Base (no license) Base (no License) Base (no License) Roadmap Only two licenses required per Virtual Chassis on all EX Series platforms

31 AUTOMATION* Simple Network Architecture Network Automation Zero-touch provisioning Ops/event scripts Python Network Director API Data Center Automation VMware Puppet, Chef OpenStack CloudStack *Not all features will be available at FRS

32 Virtual Chassis

33 EX virtual chassis Technology Up to 10 Switches VC across closets and buildings Virtual Chassis using any port Add VC ports for more capacity when needed Mixed Virtual Chassis with EX4300, QFX5100 & QFX3500

34 Virtual Chassis support Virtual Chassis Features EX4600 VC Support NSSU Yes GRES Yes NSR Yes NSB Yes ISSU on Virtual Chassis No* VCP Links auto lag Yes Dedicated queue for VCCP traffic Yes QOS on VCP Yes Local Link bias Yes VCP Fast Failover No VC topology (Ring) Yes * In roadmap

35 Deployment Options

36 EX4600 Aggregation Layer Deployment EX9200 Virtual Chassis or MC-LAG EX4600 4x40G EX4600 EX4600 Virtual Chassis or MC-LAG 4x10G 4x10G 4x10G 4x10G EX4300 VC EX4300 VC EX4300 VC EX4300 VC 40G Link 10G Link

37 EX4600 Core Layer Deployment EX4600 EX4600 Single point of management for the entire building Virtual Chassis Closet 1 320G Full Duplex Backplane Up to 80 10G ports 384 Copper ports Closet 2 EX4300 Switches Building 1 EX4300 Switches 40G Link 10G Link

38 Mixed Virtual Chassis Single point of management for the entire building EX4600 EX4600 Mixed Virtual Chassis* Closet 1 320G Full Duplex Backplane Up to 80 10G ports 384 Copper ports Closet 2 EX4300 Switches Building 1 EX4300 Switches * Some of the EX4300 features like PoE, LLDP-MED, 802.1X, etc. not supported in Mixed Virtual Chassis. These features are in roadmap 40G Link 10G Link

39 AUTOMATION Simple Network Architecture Network Automation Zero-touch provisioning Ops/event scripts Python Network Director API Data Center Automation VMware Puppet, Chef OpenStack CloudStack

40 Product positioning

41 Clarify Positioning Roadmap Committed FRS Feature Enhancements 40GbE scale: 4x40GBE in-built Performance EX4550 Current EX4550 Deployments EX4200/EX4550 Virtual Chassis EX4600 Higher Performance Higher Scale Multi Chassis LAG ISSU (Standalone) ISSU (Virtual Chassis) Insight Technology MACsec Certifications Features

42 Comparison with EX4550 Features EX4550 EX4600 Throughput 480Gbps 720Gbps 10GbE Ports Up to 48 Up to 40 40GbE Ports 4 Up to 12 Packet Buffer 4MB 12MB CPU PowerPC 1.2Ghz X86 1.5GHz Dual-Core DRAM 2GB 8GB SSD No 2x16GB L2 MAC 32K 288K max (shared) L3 Host 10K (L3+LPM) 208K max (shared) LPM 10K (L3+LPM) 128K max (shared) Multicast Routes 2K 104K max *Actual number may vary depending on deployment scenarios and test results

43 Comparison with EX4550 Features EX4550 EX4600* ARP 8K 48K ACL (Ingress/Egress) 1.5K 4K/1K ECMP 8 way 64 way AE Port Group 8 members 448/64 VRF 254 1K MPLS Labels K *Actual number may vary depending on deployment scenarios and test results

44 Thank you 44 Copyright 2012 Juniper Networks, Inc.