Juniper SRX650 - Traffic Management; Specifications

5
SRX100
SRX210
SRX240
Specifications
Protocols
• IPv4, IPv6, ISO Connectionless Network Service (CLNS)
Routing and Multicast
• Static routes
• RIPv2
• OSPF
• BGP
• BGP Router Reflector
1
• IS-IS
• Multicast ((Internet Group Management Protocol (IGMPv3),
PIM, Session Description Protocol (SDP), Distance Vector
Multicast Routing Protocol (DVMRP), source-specific))
7
• MPLS
4
IP Address Management
• Static
• Dynamic Host Configuration Protocol (DHCP) (client and server)
• DHCP relay
Encapsulations
• Ethernet (MAC and tagged)
• Point-to-Point Protocol (PPP) (synchronous)
– Multilink Point-to-Point Protocol (MLPPP)
• Frame Relay
– Multilink Frame Relay (MLFR) (FRF.15, FRF.16)
• High-Level Data Link Control (HDLC)
• Serial (RS-232, RS-449, X.21, V.35, EIA-530)
• 802.1q VLAN support
• Point-to-Point Protocol over Ethernet (PPPoE)
Trac Management
• Marking, policing, and shaping
• Class-based queuing with prioritization
• Weighted random early detection (WRED)
• Queuing based on VLAN, data-link connection identifier (DLCI),
interface, bundles, or filters
Security
• Firewall, zones, screens, policies
• Stateful firewall, ACL filters
• Denial of service (DoS) and distributed denial of service (DDoS)
protection (anomaly-based)
• Prevent replay attack; Anti-Replay
• Unified Access Control
• UTM
2
(SRX650 and high memory versions of SRX240, SRX210,
and SRX100 only)
– Antivirus
2
, antispam
2
, Web filtering
2
, IPS
2
– Content Security Accelerator in SRX210 high memory, SRX240
high memory, and SRX650
2
– ExpressAV option in SRX210 high memory, SRX240 high
memory, and SRX650
2
– Content filtering
VPN
• Tunnels (generic routing encapsulation, IP-in-IP, IPsec)
• IPsec, Data Encryption Standard (DES) (56-bit), triple Data
Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (256-bit) encryption
• Message Digest 5 (MD5) and SHA-1 authentication
• Access Manager: Dynamic VPN Client. Browser based remote
access feature requiring a license.
Voice Transport
• FRF.12
• Link fragmentation and interleaving (LFI)
• Compressed Real-Time Transport Protocol (CRTP)
High Availability
• VRRP
• Stateful failover and dual box clustering via JSRP3
• SRX650:
– Redundant power (optional)
– Future GPIM hot swap (online insertion and removal, OIR)
– Future internal failover and SRE hot swap (OIR)
• Backup link via 3G wireless or other WAN
SRX650