THE POWER OF A CONNECTED WORLD Javier Grizzuti

THE POWER OF A CONNECTED WORLD Javier Grizzuti System Engineer Juniper Networks Mayo 2016 1 Copyright © 2014 Juniper Networks, Inc.

Our Strategy Vision: To Be the Worldwide Leader of Network Innovation Go to Market Vertical Focus Alliance, Channel and Commercial Engines AUTOMATION TECHNOLOGY ROUTING SWITCHING SECURITY PERFORMANCE 2 Copyright © 2014 Juniper Networks, Inc.

Innovation Matters Across the Network 3 Campus/ Branch Data Center Edge/ Access & Aggregation Core Copyright © 2014 Juniper Networks, Inc.

WHY JUNIPER? PERFORMANCE 4 HIGH AVAILABILITY SIMPLICITY § Line-rate performance § Carrier-class platform § Collapsed architectures § Wire-speed security § Scale § Redundant hardware and software options § One Junos OS across routing portfolio § Density § Virtual Chassis technology § Platform for innovation § Rich service provider feature set § In-service software upgrades § Service Now/Service Automation Copyright © 2014 Juniper Networks, Inc.

ARCHITECTING NETWORKS SILICON SOFTWARE SYSTEMS FOCUS ON ROUTING, SWITCHING AND SECURITY 5 Copyright © 2014 Juniper Networks, Inc.

JUNOS 6 ARCHITECTURE Copyright © 2014 Juniper Networks, Inc.

JUNOS: THE POWER OF ONE § Deployed since 1998 § First high-performance network operating system § 16 years of innovation and development § Spans routing, switching, and security platforms § Simplify operations and deliver operational excellence § Evolutionary architecture expands and extends to tomorrow § Serving the most demanding customers § Top 100+ service providers § High-performance enterprise and public sector customers 7 Copyright © 2014 Juniper Networks, Inc.

JUNOS SOFTWARE ARCHITECTURE Data Plane Kernel m. Kernel HAL Physical Interfaces 8 Daemon X Switching Routing Management Control Plane Open Management Interfaces § Separation of Control & Data Plane § Independent modules § Protected memory for stability § Well-defined interfaces for expansion of functions/platforms § Scales performance, enhances resiliency, enables redundancy § Open Management & Development Interfaces § NETCONF/XML/DMI § Junos API § Automation Copyright © 2014 Juniper Networks, Inc.

Operating Junos 9 Copyright © 2014 Juniper Networks, Inc.

COMMIT MODEL 1 candidate configuration 3 commit confirmed active configuration validated configuration commit scripts commit validations 1 rollback load 2 49 • Separation of configuration, edit and activation • Validation checks, version control, automated rollback Benefits • Avert downtime caused by configuration errors • Reduce time for configuration and changes • Enforce compliance to policies • Avoid risks of transient configuration state • Compare configurations • Easily roll back to past configurations 10 Copyright © 2014 Juniper Networks, Inc.

HIERARCHICAL COMMAND STRUCTURE • Logical structure organizes device features and functions – Deeper levels are more and more specific – User-defined variables for consistent re-use – Configuration groups minimize changes across hierarchies • Eases movement and command entry 11 Top level node . . . 2 nd level nodes 3 rd level nodes . . Copyright © 2014 Juniper Networks, Inc.

JUNOS AUTOMATION API • Many customers now investing in workflow applications that drive up business revenue, in addition to on-box automation that drive down operational expenses • Junos can do both The key is the common Junos automation API On the device: Lower Risk & Op. Ex 12 "on-box" operations commits events Across the network: JUNOS XML API "off-box" OSS integration & Increase Business Revenue Workflow automation Net. Eng. Tools Copyright © 2014 Juniper Networks, Inc.

NETCONF/DMI Management System NETCONF XML PROTOCOL (RFC 4741) Secure TCP/IP Automate config changes, connections via remote invocation of SSHv 2 (RFC 4742) Security Routing Switching operational commands, collection of logs NETCONF client libraries exist for a number of programming languages such as Java, Perl, Ruby, Python, and even SLAX ! XML • Secure and connection oriented with SSHv 2 as transport • Structured and transaction-based with XML as RPC request / response • User-class privilege aware 13 Copyright © 2014 Juniper Networks, Inc.

JUNOS SCRIPTS Scripts Utilize XML Operational Scripts Event Scripts Output Input Blank XML document XML instructions on what to display Commit Scripts Input XML event description XML instructions on what to display (if anything) Output Input XML Junos configuration XML instructions on actions to take (make changes, issue warnings, errors, etc. ) Junos Infrastructure 14 Copyright © 2014 Juniper Networks, Inc.

JUNOS “ON-BOX” AUTOMATION On-box automation is used to automate configuration, operations, and respond to network event conditions. These programs use the same XML core OS infrastructure as the off-box programs. This ensures that as new Junos features are released they become immediately available to both on-box and offbox automation. commit configuration events operations § Instructs Junos as prompted by the command-line, OSS, or other programs § Create custom commands for specific solution/user needs § Combine a series of iterative steps to diagnose network problems § Perform controlled configuration changes § Key Benefits § Reduce risk and improve productivity § Automate troubleshooting § Controlled configuration § Instructs Junos of actions to take in response to events § Gather relevant troubleshooting information and correlate events from the first leading indicators § Automate event responses with a set of actions § Key Benefits § Automate time-of-day configuration changes (e. g. “green” power-saving actions) § Speed time-to-resolve to reduce the downtime and cost of events § Automate response to leading indicators to minimize the impact of events 15 § Instructs Junos during the configuration/commit process § Abstracts a complex configuration into a simple set of base commands § Options to provide warnings, post logs, prevent the configuration, selfcorrect the configuration § Key Benefits § Assure compliance to business rules and network/security policies § Provide change management to avert and even correct errors § Simplify and speed setup of complex configuration Copyright © 2014 Juniper Networks, Inc.

JUNIPER SYSTEMS 16 Copyright © 2014 Juniper Networks, Inc.

Recent Network Innovations Revolutionizing Routing. Again. NEW SILICON: First 500 G performance (1 tbps) 400 GE pipeline ready PTX 5000 & PTX 3000: 81% more power efficient than nearest competitor NORTHSTAR: First SDN controller to automate control of multiple network layers 17 Meta. Fabric and UN 1 TE Switching JUNOS FUSION: Centralized point of management; “Virtual buffer” technology QFX 10000 LINE: Market leading 100 G density; seamless 10/40/100 GE transition JUNOS DEVOPS SUITE: Unparalleled automation; cloud analytics engine Software Defined Secure Networks. SKY ATP WITH SPOTLIGHT SECURE: Centralized threat detection and mitigation; adaptable real-time policy enforcement SECURITY DIRECTOR: Industry breakthrough design; consolidated security management; open policy engine foundation PHYSICAL & VIRTUAL SRX: Consistent firewall capabilities; policy enforcement points; deploy with agility Copyright © 2014 Juniper Networks, Inc.

MX Strategy Pillars of Strategy Continuous Product Innovation Scale, Performance, Convergence Virtualization v. PE, SDN, Analytics Programmability & Automation New Deployment Models Agile, Simple, Open 18 18 JUNIPER NETWORKS CONFIDENTIAL • • • Metro, DC, Colo optimized platforms Multi-Terabit scale line cards on MX 960 & MX 2 K Virtualized Routing Engine SMP, RPD modularity; RSVP hyper-scaling High Availability - LFA, Service mirroring • v. MX, v. RR, v. CPE • v. BNG, v. LNS • JET, g. RPC, Thrift, REST APIs • Open. Config • • Scale out, Chassis virtualization EVPN, VXLAN SPRING JUNOS Telemetry Interface, Northstar © 2016 Juniper Networks, Inc. All rights reserved. © Copyright 2014 Juniper Networks, Inc.

MX ASIC Evolution – MPC Per Slot Capacity MX 240/480/960 system Gen 4 TRIO (ZT) MX 2 K system Gen 3 TRIO (EA) ICHIP 10 G 40 G DPC 2007 19 Gen 1 TRIO (MQ, LU) 40 G MPC 1 E 80 G MPC 2 E 16 x 10 G MPC 2010– 2011 Gen 1. 5 TRIO (XM, LU) 130 G MPC 3 E 260 G MPC 4 E 2012 Gen 2 TRIO (XM, XL) 480 G MPC 7 E 240 G MPC 5 E 960 G MPC 8 E 1. 6 T MPC 9 E 1. 5 T MPC 10 4. 0 T MPC 11/12 480 G MPC 6 E 2014 2015 2017+ Copyright © 2014 Juniper Networks, Inc.

80 Tbps 32 Tbps MX Roadmap Colo and DC CO & NEBS 2017/2018 2015/2016 40 Tbps 16 Tbps One TRIO Architecture One UNIVERSAL EDGE 15 Tbps N x 10 Gbps 24 Tbps 13 Tbps 8 Tbps 3 Tbps 1 Tbps 6. 0 T 2. 4 T 80 Gbps 400 G v. MX Hardware MPC 5: 240 G NG HQo. S MPC 6: 500 G MX 2 K Native Card Software 64 bit RPD CPP Hypermode Innovation G. 709 OTN Framing 2014 20 20 JUNIPER NETWORKS CONFIDENTIAL Summit/Vale MX 2000 MX 960 Power Optimized MX 2020/MX 2010 NG Universal MPC 7 E-MRATE : 480 GE on MX 960 EVPN, VXLAN: MX NG SDN GW SCG Junos SMP Junos Continuty Junos Fusion v. MX 2015 100 GE DWDM MPC 8 E/9 E: 1. 6 T on MX 2 K NG-RE ½ rack MX 2 K Summit/Vale-8 IPv 6 Ready SPRING NG v. MX RPD Multi-core SCG 2. 5 10 GE MACSEC JUNOS Telemetry Interface Programmability/Automation JET (Junos Programmability) 1 H 2016 2 H 2016/2017 © 2016 Juniper Networks, Inc. All rights reserved. © Copyright 2014 Juniper Networks, Inc.

UN 1 TE Cloud Enabled Enterprise 21 Copyright © 2014 Juniper Networks, Inc.

Cloud Enabled Enterprise Juniper’s Cloud Enabled Enterprise is Juniper’s vision in transforming Enterprise IT from a business necessity to a powerful business asset -- by evolving the enterprise network into an agile, secure services platform 1 Simplify management, deployment, and operations of the infrastructure increasing flexibility while reducing cost and time 22 2 Secure across points and layers in the network with dynamically updated policy protecting users and assets 3 Open Convergence Framework Integrate best of breed capabilities from WLAN and security partners to offer customers a comprehensive solution Copyright © 2014 Juniper Networks, Inc.

Junos Fusion One Technology / multiple products Junos Fusion Provider Edge Junos Fusion Datacenter • Maximize MX value, optimize Capex Better slot utilization leads to improved ROI • Simplified management, Plug and play provisioning • Simple Management, reduced network layers • Large scale and features rich aggregation devices • Reduce Opex by simplifying operation • Distributed forwarding 23 Junos Fusion Enterprise • Simplified Management of Wiring closet for Campus Network • Zero Touch deployment of entire campus infrastructure • Reduce Opex by simplifying operation Copyright © 2014 Juniper Networks, Inc.

JUNOS FUSION - Terminology Aggregation Device (AD) Cascade Port Linux Forwarding Operating System LFOS Upstream Port … Satellite Device (SD) Yocto Linux Extended port Satellite Device Cluster AP 24 Copyright © 2014 Juniper Networks, Inc.

Junos Fusion Use Cases In details Simplicity, Flexibility and Reliability at Scale Datacenter (JFD) Provider Edge (JFE) Campus (JFC) QFX 5100 LAG MX Aggregation Satellite 25 EX 4300 MX series EX 4300, QFX 5100 QFX 10, 000 EX 4300, QFX 5100 EX 9200 EX 4300, EX 3400, EX 2300, EX 4600, QFX 5100 Copyright © 2014 Juniper Networks, Inc.

Supported Devices Aggregation Device EX 9200 26 Satellite Devices EX 4300: EX 3400, EX 2300 Copyright © 2014 Juniper Networks, Inc.

Family EX 9200 27 Copyright © 2014 Juniper Networks, Inc.

EX 9200 Overview Programmable § Programmable ASIC (Junos) § Programmable control and management planes via open APIs § Automation Flexible EX 9204 EX 9208 EX 9214 Juniper One Custom Silicon 28 § § Campus- and data center-optimized Extensive protocol support Feature rich Future ready Scalable § § Logical scale High density Up to 13. 2 Tbps chassis capacity 1 Gb. E, 10 Gb. E, 40 Gb. E and 100 Gb. E Copyright © 2014 Juniper Networks, Inc.

EX 9200 Line Cards 1 Gb. E Line Cards 10 Gb. E Line Card 40 Gb. E Line Card 100 Gb. E Line Card 1 GBE/10 GBE Line Card § 40 x 10/1000 BASE-T § 40 x 100 FX/1000 BASE-X SFP MACsec § 32 x 10 Gb. E SFP+ § Up to 260 G throughput § 6 x 40 G Gb. E QSFP+ or 24 x 10 G SFP+ combo § Up to 260 G throughput § 2 x 100 G CFP + 8 x 10 Gb. E SFP+ § Up to 260 G throughput EX 9200 -MPC § EX 9200 -20 F-M-MIC § EX 9200 -40 GT-MIC § EX 9200 -10 XS-MIC 29 Copyright © 2014 Juniper Networks, Inc.

Access Layer Update Juniper’s Innovation in Enterprise Networks 30 Copyright © 2014 Juniper Networks, Inc.

EX Series Portfolio Aggregation Performance EX 9200 100 Gb. E Core EX 4600 EX 8200 EX 4500 Access EX 2300 -C EX 2200 -C EX 4300 EX 2200 EX 3400 Logical Scale EX 3300 Modular Hardware Resiliency 10 Gb. E40 Gb. E EX 4550 EX 6200 Ports 31 Virtual Chassis Multi-Chassis LAG Copyright © 2014 Juniper Networks, Inc.

EX 2300 Access Switch EX 2300 and EX 2300 -C Compact & High Performance 1 Gb. E density 10 Gb. E uplinks in 1 RU Standard Compliance IEEE 802. 3 at (POE +) Management Simplification Junos Virtual Chassis (4 devices - 10 G support) Operational Simplicity and Automated Config Juniper Fusion Enterprise (IEEE 802. 1 BR support) 32 Copyright © 2014 Juniper Networks, Inc.

Juniper EX 3400 Access Switch EX 3400 Compact, High Performance, & Built-in Redundancy 1 Gb. E density, 10 Gb. E and 40 Gb. E uplinks in 1 RU, Dual Redundant Power Supplies and Fans Standard Compliance Full POE (15. 4 W) support with a single PSU Full POE+ (30 W) support with dual PSU (1440 W) Management Simplification Junos Virtual Chassis (10 Devices - 40 G support) Operational Simplicity and Automated Configuration Juniper Fusion Enterprise (802. 1 BR support) MACsec Supported on 1 G and 10 G interfaces 33 Copyright © 2014 Juniper Networks, Inc.

EX 4300 OVERVIEW 1 U 24/48 Port 1 Gb. E Switch § § § Wire-rate performance on all ports 4 x 10 Gb. E uplink module 4 x 40 Gb. E QSFP+ fixed ports Mac. Sec and EEE capable Front-back and back-front airflow Extensive Layer 3 (requires license) Virtual Chassis Technology § § § Enhanced 320 Gbps backplane Manage up to 10 as a single device Standard 10 Gb. E/40 Gb. E cables Mix 1 Gb. E and 10 Gb. E with QFX 3500 Industry-only cross-platform Virtual Chassis Geographically distributed Automation & Orchestration § § § 34 Automation with Puppet and Chef Openstack integration Openflow support Copyright © 2014 Juniper Networks, Inc.

SRX 300 Series and SRX 550 Services Gateways For Branch Firewall and Secure Router 35 Copyright © 2014 Juniper Networks, Inc.

New SRX Product Line Branch 2 T Edge Data Center Up to 2 Tbps FW throughput and 258 M concurrent sessions scaling SRX 5800 SRX 5600 1 T SRX 5400 SRX 3600 SRX 3400 100 G v. SRX (Virtual SRX) 10 G 1 G SRX 1500 SRX 550 -M SRX 320 SRX 345 SRX 300 Integrated Routing, Switching and Security Unprecedented Scale Single Junos 36 Copyright © 2014 Juniper Networks, Inc.

SRX Series Services Gateways for Branch All in one routing, switching and security in a single platform Security at a every layer with MAC-sec, IPSec and application security Best end-user application experience and operational efficiency 37 Copyright © 2014 Juniper Networks, Inc.

Portfolio Summary Retail Office Up to 50 Users Small Branch Up to 50 Users Mid Branch Up to 100 Users Mid-Large Branch Up to 200 Users Large Branch Up to 500 Users SRX 300 SRX 320 SRX 345 SRX 550 Routing* 500 Mbps 1 Gbps 2 Gbps 3 Gbps App Firewall* 500 Mbps 1 Gbps 1. 7 Gbps 2. 5 Gbps IPSec VPN* 100 Mbps 200 Mbps 350 Mbps NGFW** 100 Mbps 200 Mbps 350 Mbps *Performance numbers for the IMIX packet size **NGFW = IPS + App. FW + External Logging 38 Copyright © 2014 Juniper Networks, Inc.

Juniper Security Services Overview Next Generation Firewall Services Unified Threat Management (Known Threats) Threat Intelligence Platform Advanced Threat Prevention (Zero Day) Application Control & Visibility Anti-virus Botnets/C&C Sandboxing Intrusion Prevention Anti-spam GEO-IP Evasive Malware User-based Firewall Web Filtering Custom Feeds, APT Rich Reporting & Analytics SRX Foundation Services 39 Firewall NAT VPN Routing Management Reporting Analytics Automation Copyright © 2014 Juniper Networks, Inc.

Preguntas? Contact: Javier Grizzuti jgrizzuti@juniper. net

GRACIAS