Juniper EX3300 Hardware Guide

• Troubleshooting Unicast RPF on page 331
• Understanding Unicast RPF on page 19
Disabling Unicast RPF (CLI Procedure)
Unicast reverse-path forwarding (RPF) can help protect your LAN from denial-of-service
(DoS) and distributed denial-of-service (DDoS) attacks on untrusted interfaces. Unicast
RPF filters traffic with source addresses that do not use the incoming interface as the
best return path back to the source. If the network configuration changes so that an
interface that has unicast RPF enabled becomes a trusted interface or becomes
asymmetrically routed (the interface that receives a packet is not the best return path
to the packet’s source), disable unicast RPF.
To disable unicast RPF on an EX3200, EX4200, or EX4300 switch, you must delete it
from every interface on which you explicitly configured it. If you do not disable unicast
RPF on every interface on which you explicitly enabled it, it remains implicitly enabled
on all interfaces. If you attempt to delete unicast RPF from an interface on which it was
not explicitly enabled, the warning: statement not found message appears. If you do not
disable unicast RPF on every interface on which you explicitly enabled it, unicast RPF
remains implicitly enabled on all interfaces of the EX3200, EX4200, or EX4300 switch.
On EX8200, EX6200, and QFX Series switches, the switch does not apply unicast RPF
to an interface unless you explicitly enable that interface for unicast RPF.
To disable unicast RPF, delete its configuration from the interface:
[edit interfaces]
user@switch# delete ge-1/0/10 unit 0 family inet rpf-check
NOTE: On EX3200, EX4200, and EX4300 switches, if you do not disable
unicast RPF on every interface on which you explicitly enabled it, unicast RPF
remains implicitly enabled on all interfaces.
Related
Documentation
Example: Configuring Unicast RPF on an EX Series Switch•
• Verifying Unicast RPF Status on page 239
• Configuring Unicast RPF (CLI Procedure) on page 97
• Understanding Unicast RPF on page 19
99Copyright © 2015, Juniper Networks, Inc.
Chapter 2: Configuration Tasks

Juniper EX3300 Specifications

General

Ethernet LAN	Yes
Authentication method	RADIUS, TACACS+
Connectivity technology	Wired
Ethernet interface type	Gigabit Ethernet
Number of VLANs	4096
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3x, IEEE 802.3z
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Copper ethernet cabling technology	1000BASE-T, 100BASE-TX, 10BASE-T
Console port	-
ExpressCard slot	No
Fiber ports quantity	4
USB 2.0 ports quantity	0
Basic switching RJ-45 Ethernet ports quantity	48
Throughput	130 Mpps
Number of queues	8
MAC address table	16000 entries
Maximum data transfer rate	176 Gbit/s
Supported data transfer rates	10, 100, 1000Mbps
Switch type	Managed
Switch layer	L2
Security algorithms	SSH-2
Power source	AC
AC input voltage	100 - 240 V
Power consumption (typical)	100 W
Form factor	1U
Product color	Black
Flash memory	1024 MB
Processor frequency	1000 MHz
Compatible operating systems	Junos
Operating altitude	0 - 3049 m
Non-operating altitude	0 - 4877 m
Storage temperature (T-T)	-40 - 70 °C
Operating temperature (T-T)	0 - 45 °C
Storage relative humidity (H-H)	0 - 95 %
Operating relative humidity (H-H)	10 - 85 %
Supported network protocols	IPv6

Weight and Dimensions

Depth	310 mm
Width	437 mm
Height	44 mm
Weight	4900 g