Juniper Networks M-Series Rich Packet Processing, Highly Reliable, Robust Security, Advantage

M-series Routing Platforms

Page 2

Rich Packet Processing

A broad portfolio of services can be layered on top of VPNs for additional revenue generation. A comprehensive suite of multicast capabilities, including multicast over MPLS VPNs, enables efficient distribution of premium content. Hardware-based IPv6 and a number of IPv6 migration tools such as IPv6 over MPLS ease access to the benefits of this next-generation IP protocol without performance compromise. NAT and stateful firewall can be configured per VRF to enable network-based security for additional revenues and IPSec can be used to support a premium security service for end users with high security requirements. The M-series Service-Built Edge is continuously enhanced with new packet processing capabilities to ensure maximum revenue generation opportunities.

Highly Reliable

The M-series service-built architecture has been fundamentally constructed with scale and stability in mind, including the modular and fault-protected design of JUNOS software along with a rigorous system testing process. Furthermore, all M-series routers offer redundant power and cooling and the M10i, M20, M40e, M160, and M320 offer fully redundant hardware including redundant Routing

Engines and Switching/Forwarding Engine Boards. JUNOS software features enhance this redundant architecture by enabling non-stop forwarding in the event of a routing engine failure via a Hitless Switchover and when a minor software upgrade is required by supporting In-service Software Upgrades. This functionality augments other high availability capabilities that include graceful protocol routing restart, MPLS fast reroute, VRRP, SONET APS, SDH MSP, BFD, and LACP.

Robust Security

All M-series platforms support highly scalable J-Protect filtering capabilities, unicast reverse path forwarding and high performance rate limiting for industry-leading DOS attack protection. The J-Protect security capabilities of the M-series platforms can be further enhanced with the Adaptive Services PIC that accelerates, in hardware, additional network-based security services such as high-speed NAT, stateful firewall with attack detection, and J-Flow accounting. With the rich feature set of JUNOS software combined with industry-leading ASIC technology, the M-series Service-built Edge provides a new level of reliable and secure service delivery at the edge of service provider networks.

Advantage

Features	Benefits		Features	Benefits
New Service	• Industry's most comprehensive VPN portfolio meets the largest		Services	• One feature-rich JUNOS image runs across all M-series
Models	number of customer needs and maximizes provider revenues		Everywhere	platforms, ensuring consistent services and enabling
	•	Run Layer 2 Virtual Circuit, Layer 2 VPN, Layer 2.5		providers to market all services to all users regardless of
		Interworking VPNs, Layer 3 2547 VPN, VPLS, IPSec, IP over		connection or serving area density
		IP, GRE simultaneously		•	From the smallest PoPs to the largest PoPs
	•	Highly scalable, supporting thousands of VPNs		•	Over virtually any access technology including ATM,
	• Granular QoS with low latency and jitter performance to support
					FR, Ethernet, and TDM connections
	voice, video, and other real time applications			•	At any speed from DS0 to OC-192/STM-64
	•	Per DLCI, per VP, per VC, per VLAN, per channel (DS0),
				• Lowers operational costs
		and per port QoS
	•	Classification, rate limiting, shaping, weighted round robin		• Seamless migration to larger platforms to meet network
		scheduling, strict priority scheduling, weighted random		growth
		early detection, random early detection, and packet
		marking	More from	• Service-built architecture provides clean separation between
	•	Mapping Layer 2 (802.1p, CLP, DE) to Layer 3 QoS (IP	Less	control plane, forwarding plane, and services plane to
			Infrastructure	support multiple services on a single platform
		DSCP, MPLS EXP)
				•	Maximum revenue with the lowest possible capex and
	• Hardware-based IPv6 performance, IPv6 over MPLS, IPv6 over
					opex
	IPv4 GRE tunnels, and IPv6/IPv4 dual stack functionality
				•	Consolidate functions previously performed by discrete
	• Robust multicast support including IGMP v1/v2/v3, PIM-SM, PIM-
					devices such as NAT, stateful firewall, IPSec, and QoS
	DM, MLD, SSM, RP, MSDP, BSR, multicast in MPLS/BGP VPNs to
					into a single M-series platform
	support resource-efficient delivery of high-value content
				•	Multiple services on a single platform allows customers
	• Network-based security services including NAT and stateful
					to trial many different services without capital
	firewall, and NAT and stateful firewall per VRF
					investment and then to scale successful services to
	• MLPPP, MLFR .15 and MLFR .16, 802.3ad (including LACP) for				large user populations
	aggregated links			• Robust Layer 2 VPNs, Layer 2.5 Interworking VPNs, and
	• J-Flow accounting, source class usage, and destination class			Layer 2 to Layer 3 QoS mapping for transparently
	usage for flexible billing on a per application or per CoS resource			consolidating multiple networks to a common IP/MPLS
	usage basis and for distance-based billing.			infrastructure
	• Multivendor network management solution through partnerships			• Logical routers enables providers to segment a router into
	•	Industry-leading, XML-based JUNOScript API facilitates		multiple administrative and routing domains, so that two
				completely different organization can share infrastructure
		third-party and in-house OSS development