Documente Academic
Documente Profesional
Documente Cultură
Michael Capuano
June 2004
Private Networks
Ethernet FR/ATM TDM Secure Infranet Infranet
VPNs Voice & Assured Profitable
private line FR/ATM
Private IP New Scaling challenges Private IP/ VPNs Service versatile
Service New Parallel investment New Secure
VPNs Assured
Service-specific Internet TDM Service
Service Scalable
GRID Services Low cost
Voice
Global connectivity
On-demand
Gaming
Computing
Commoditized Internet
Global connectivity
Public Internet Low quality
Unprofitable Global connectivity of the Internet
Unsecured with the security and service
assurance of private networks
SNI
Public Internet Public Internet
I-
Policy
I-CNI Policy ICI Engine
Engine
Provider 1 Provider 2
Operator 1 Operator 2
IP/MPLS
FR/ATM TDM
IP/MPLS
Private Line
VPNs
Ethernet
Private IP
VPNs FR/ATM
Private IP
TDM VPNs VPNs
EthernetVoice/PL
M-series Voice
J-series E-series M/T-series
Chassis Mgmt
Protocols
Security
SNMP
Operating
Operating System
System Programmable ASIC(s)
Packet
Forwarding
Forwarding Table
Engine
Flexible, high performance forwarding Switch Fabric
(aka “PFE”)
plane
PIC PIC
Deployed
Deployedinin600+
600+networks
networksworldwide
worldwide
M20
Interface Mgmt
10
Chassis Mgmt
Protocols
Security
SNMP
M10i
5
M7i
Operating
Operating System
System
• Hitless Switchover
Forwarding
GRPR continues
forwarding
J-Protect Security
ZERO Packet Loss
• Consistent security across all interfaces
• Robust DOS protection with thousands of
filters per customer
• Firewall protected control plane
• Stateful firewall, NAT, high speed IPSEC,
MD5
• Netscreen technology
Total Protection
160 M320
40 M160
M40e
20
M20
Interface Mgmt
Chassis Mgmt
Protocols
Security
SNMP
10
M10i
5 M7i
Operating
Operating System
System
4 PIC Slots 8 PIC Slots 16 PIC Slots 32 PIC Slots 32 PIC Slots
PIC 1 x OC-48c
PIC 4 x OC-12c
FPC
PIC 2 x GE
PIC Tunnel
M320
Accounting
Fractional
3
/E
IPSec encrypted access
S3
M-series
Multicast
D
1,
IPv6 H
/E
Provider /S D
T1
E T
J-Flow accounting Edge SO
N
x
N
DOS protection zed
Channeli
VRF-aware NAT/Firewall M-series Core M-series
FR/ATM
Bandwidth on demand
Et h
And more….. ern
et
Peering M-series
Core Hosting
Hosting/Data Center
M7i
Enterprise Network Locations
• Head office branch aggregation
w/ DS3/E3 links & above Converged
Backbone
• Datacenter
• Backbone
• Extranet / Partner VPN connectivity M7i
Head Office
• Campus border / edge locations
Service
Provider
Enterprise Applications M7i
J-series
• QoS for voice & video over IP
• Dual homing w/ superior BGP
• Converged MPLS backbone
• MPLS/IPSec intra/extranet VPNs Real time IP-enabled Branch Offices
72xx
10008
73xx
120xx
75xx
124xx
76xx
Secondary competitors
Site 1 A
Interprovider
or CoC
Factory A
Site 1 B FE T1
Provider Y
M-series
T1 FR Provider X
M-series
Site 1 C
PE PE
P
T1 PE NxT1
Site 2 A
HQ A
M-series
M-series
FE P P PE GE
OC-3
T1 FR ATM
Ethernet
VPN (TLS)
M-Series PE
IP/MPLS L2/L3-
Metro Metro VPN IW
Access Core
Internet
& ISP
Access
Ethernet
Ethernet HQ
Private Line & DIA 2 x 7609
To IP
T1s
Core BO
T1 DIA 5 x 7513
Frame Relay
DIA & 2547 Ethernet
HQ
Ethernet 7609 as L2 switch only
Private Line & DIA
To IP
T1 DIA & 2547 T1s
Core M320
BO
BRAS Aggregation
Stability =
ATM via L2 VPN
“priceless”
ATM OC-12
BRAS
To ATM Core
ATM OC-12
ATM HQ
Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of
Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP,G1, G10, Internet Processor, JUNOS, JUNOScript,
M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and
Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or
registered service marks are the property of their respective owners.