DATA CENTER LAN MIGRATION GUIDE

Transcription

1 DATA CENTER LAN MIGRATION GUIDE

2 Table of Contents Chapter 1: Why Migrate to Juniper... 5 Introduction to the Migration Guide... 6 Audience... 6 Data Center Architecture and Guide Overview... 6 Why Migrate?... 9 Scaling Is Too Complex with Current Data Center Architectures...10 The Case for a High Performing, Simplified Architecture...11 Why Juniper?...13 Other Considerations Chapter 2: Pre-Migration Information Requirements...15 Pre-Migration Information Requirements...16 Technical Knowledge and Education...16 QFX Chapter 3: Data Center Migration -Trigger Events and Deployment Processes How Migrations Begin...28 Trigger Events for Change and Their Associated Insertion Points...28 Considerations for Introducing an Alternative Network Infrastructure Provider...29 Trigger Events, Insertion Points, and Design Considerations...30 IOS to Junos OS Conversion Tools...31 Data Center Migration Insertion Points: Best Practices and Installation Tasks New Application/Technology Refresh/Server Virtualization Trigger Events Network Challenge and Solutions for Virtual Servers...38 Network Automation and Orchestration...38 Data Center Consolidation Trigger Event Best Practices: Designing the Upgraded Aggregation/Core Layer...40 Best Practices: Upgraded Security Services in the Core...41 Aggregation/Core Insertion Point Installation Tasks...41 Consolidating and Virtualizing Security Services in the Data Center: Installation Tasks...44 Business Continuity and Workload Mobility Trigger Events...46 Best Practices Design for Business Continuity and HADR Systems...46 Best Practices Design to Support Workload Mobility Within and Between Data Centers...48 Best Practices for Incorporating MPLS/VPLS in the Data Center Network Design...49 Six Process Steps for Migrating to MPLS...50 Completed Migration to a Simplified, High-Performance, Two-Tier Network Juniper Professional Services Copyright 2012, Juniper Networks, Inc.

3 Chapter 4: Troubleshooting...55 Troubleshooting...56 Introduction...56 Troubleshooting Overview...56 OSI Layer 1: Physical Troubleshooting OSI Layer 2: Data Link Troubleshooting...58 Virtual Chassis Troubleshooting...58 OSI Layer 3: Network Troubleshooting...59 OSPF...59 VPLS Troubleshooting...60 Multicast...61 Quality of Service/Class of Service (CoS)...61 OSI Layer 4-7: Transport to Application Troubleshooting...62 Tools...62 Troubleshooting Summary...62 Chapter 5: Summary and Additional Resources...63 Summary...64 Additional Resources...64 Data Center Design Resources...64 Training Resources...65 Juniper Networks Professional Services...65 About Juniper Networks...66 Copyright 2012, Juniper Networks, Inc. 3

4 Table of Figures Figure 1: Multitier legacy data center LAN...7 Figure 2: Simpler two-tier data center LAN design... 8 Figure 3: Data center traffic flows...10 Figure 4: Collapsed network design delivers increased density, performance, and reliability...11 Figure 5: Juniper Networks 3:2:1 Data Center Network Architecture...14 Figure 6: Junos OS - The power of one...17 Figure 7: The modular Junos OS architecture...18 Figure 8: Junos OS lowers operations costs across the data center...19 Figure 9: Troubleshooting with Service Now...26 Figure 10: Converting IOS to Junos OS using I2J...31 Figure 11: The I2J input page for converting IOS to Junos OS Figure 12: Inverted U design using two physical servers...34 Figure 13: Inverted U design with NIC teaming...34 Figure 14: EX4200 top-of-rack access layer deployment...36 Figure 15: Aggregation/core layer insertion point...43 Figure 16: SRX Series platform for security consolidation...44 Figure 17: Workload mobility alternatives...48 Figure 18: Switching across data centers using VPLS...50 Figure 19: Transitioning to a Juniper two-tier high-performance network Copyright 2012, Juniper Networks, Inc.

5 Copyright 2010, Juniper Networks, Inc. Chapter 1: Why Migrate to Juniper

6 Introduction to the Migration Guide IT has become integral to business success in virtually all industries and markets. Today s data center is the centralized repository of computing resources enabling enterprises to meet their business objectives. Today s data center traffic flows and performance requirements have changed considerably from the past with the advent of cloud computing and service-oriented architecture (SOA)-based applications. In addition, increased mobility, unified communications, compliance requirements, virtualization, the sheer number of connecting devices, and changing network security boundaries present new challenges to today s data center managers. Architecting data centers based on old traffic patterns and outdated security models is inefficient and results in lower performance, unnecessary complexity, difficulty in scaling, and higher cost. A simplified, cloud-ready, two-tier data center design is needed to meet these new challenges without any compromise in performance. Migrating to such a data center network can theoretically take place at any time. Practically speaking, however, most enterprises will not disrupt a production data center except for a limited time window to perform scheduled maintenance and business continuity testing. Luckily and within this context, migration to a simpler two-tier design can begin at various insertion points and proceed in controlled ways in an existing legacy data center architecture. Juniper s Data Center LAN Migration Guide identifies the most common trigger events at which migration to a simplified design can take place together with design considerations at each network layer for a successful migration. The guide is segmented into two parts. For the business decision maker, Chapter 1: Why Migrate to Juniper will be most relevant. The technical decision maker will find Chapters 2 and 3 most relevant, particularly Chapter 3, which covers the data center trigger events that can stimulate a transition and the corresponding insertion points, designs, and best practices associated with pre-install, install, and post-install tasks. Audience While much of the high-level information presented in this document will be useful to anyone making strategic decisions about a data center LAN, this guide is targeted primarily to: Data center network and security architects evaluating the feasibility of new approaches in network design Data center network planners, engineers, and operators designing and implementing new data center networks Data center managers, IT managers, network and security managers planning and evaluating data center infrastructure and security requirements Data Center Architecture and Guide Overview One of the primary ways to increase data center efficiency is to simplify the infrastructure. Most data center networks in place today are based on a three-tier architecture. A simplified two tier design, made possible by the enhanced performance and more efficient packaging of today s Ethernet switches, reduces cost and complexity, and increases efficiency without compromising performance. During the 1990s, Ethernet switches became the basic building block of enterprise campus network design. Networks were typically built in a three-tier hierarchical tree structure to compensate for switch performance limitations. Each tier performed a different function and exhibited different form factors, port densities, and throughputs to handle the workload. The same topology was deployed when Ethernet moved into the data center displacing Systems Network Architecture (SNA), DECnet, and token ring designs. 6 Copyright 2012, Juniper Networks, Inc.

7 3-TIER LEGACY NETWORK Data Center Interconnect WAN Edge Ethernet Core Aggregation Layer Access Layer Servers NAS FC Storage FC SAN Figure 1: Multitier legacy data center LAN This multitiered architecture, shown in Figure 1, worked well in a client/server world where the traffic was primarily north and south, and oversubscription ratios at tiers of the network closest to the endpoints (including servers and storage) could be high. However, traffic flows and performance requirements have changed considerably with the advent of applications based on SOA, increased mobility, Web 2.0, unified communications, compliance requirements, and the sheer number of devices connecting to the corporate infrastructure. Building networks today to accommodate 5 to 10 year old traffic patterns is not optimal, and results in lower performance, unnecessary complexity, and higher cost. A new data center network design is needed to maximize IT investment and easily scale to support the new applications and services a high-performance enterprise requires to stay competitive. According to Gartner, Established LAN design practices were created for an environment of limited switch performance. Today s highcapacity switches allow new design approaches, thus reducing cost and complexity in campus and data center LANs. The three-tier concept can be discarded, because all switch ports can typically deliver rich functionality without impacting performance. 1 1 Neil Rikard Minimize LAN Switch Tiers to Reduce Cost and Increase Efficiency, Gartner Research ID Number: G November 17, 2009 Copyright 2012, Juniper Networks, Inc. 7

8 MX Series Core Layer SRX5800 EX8216 QFX3500 Switch GbE Servers FC NAS FC Storage FC SAN Figure 2: Simpler two-tier data center LAN design Juniper Networks offers a next-generation data center solution, shown in Figure 2, which delivers: Simplified design for high performance and ease of management Scalable services and infrastructure to meet the needs of a high-performance enterprise Virtualized resources to increase efficiency This two-tier data center LAN architecture provides a more elastic and more efficient network that can also easily scale. This guide covers the key considerations in migrating an existing three-tier data center network to a simplified, cloudready, two-tier design. From a practical perspective, most enterprises won t initiate a complete data center redesign for an existing, operational data center. However, there are several events, such as bringing a new application or service online or a data center consolidation, which require an addition to the existing data center infrastructure. We call these common events at which migration can begin trigger events. Trigger events generate changes in design at a given network layer, which we call an insertion point. In Chapter 3 of this guide, we cover the best practices and steps involved for migration at each of the insertion points presented by a specific trigger event. By following these steps and practices, it is possible to extend migration to other legacy network tiers and continue towards a simplified two-tier Juniper infrastructure over time. In summary, this Data Center LAN Migration Guide describes: Pre-migration information requirements Migration process overview and design considerations Logical migration steps and Juniper best practices for transitioning each network layer insertion point Troubleshooting steps Additional resources 8 Copyright 2012, Juniper Networks, Inc.

9 Why Migrate? IT continues to become more tightly integrated with business across all industries and markets. Technology is the means by which enterprises can provide better access to information in near or real time to satisfy customer needs, while simultaneously driving new efficiencies. However, today s enterprise network infrastructures face growing scalability, agility, and security challenges. This is due to factors such as increased collaboration with business partners, additional workforce mobility, and the sheer proliferation of users with smart mobile devices requiring constant access to information and services. These infrastructure challenges are seriously compounded when growth factors are combined with the trend towards data center consolidation. What is needed is a new network infrastructure that is more elastic, more efficient, and can easily scale. Scalability is a high priority, as it is safe to predict that much of the change facing businesses today is going to come as a requirement for more storage, more processing power, and more flexibility. Recent studies by companies such as IDC suggest that global enterprises will be focusing their investments and resources in the next 5 to 10 years on lowering costs while continuing to look for new growth areas. Industry analysts have identified several key data center business initiatives that align with these directions: Data center consolidation: Enterprises combine data centers as a result of merger or acquisition to reduce cost as well as centralize and consolidate resources. Virtualization: Server virtualization is used to increase utilization of CPU resources, provide flexibility, and deliver on-demand services that easily scale (currently the most prevalent virtualization example). Cloud computing: Pooling resources within a cloud provides a cost-efficient way to reconfigure, reclaim, and reuse resources to deliver responsive services. I/O convergence or consolidation: Ethernet and Fibre Channel are consolidated over a single wire on the server side. Virtual Desktop Infrastructure (VDI): Applications are run on centralized servers to reduce operational costs and also provide greater flexibility. These key initiatives all revolve around creating greater data center efficiencies. While meeting these business requirements, it is vital that efficient solutions remain flexible and scalable systems are easy to manage to maximize all aspects of potential cost savings. In today s data center, applications are constantly being introduced, updated, and retired. Demand for services is unpredictable and ever changing. Remaining responsive, and at the same time cost efficient, is a significant resource management challenge, and adding resources needs to be a last resort since it increases the cost basis for service production and delivery. Having the ability to dynamically reconfigure, reclaim, and reuse resources positions the data center to effectively address today s responsiveness and efficiency challenges. Furthermore, existing three-tier architectures are built around a client/server model that is less relevant in today s application environment. Clearly, a new data center LAN design is needed to adapt to changing network dynamics, overcome the complexity of scaling with the current multitiered architecture, as well as capitalize on the benefits of high-performance platforms and a simplified design. Copyright 2012, Juniper Networks, Inc. 9

10 Network topologies should mirror the nature of the traffic they transport N S W UP TO 70% E Figure 3: Data center traffic flows Applications built on SOA architecture and those delivered in the software as a service (SaaS) model require an increasing number of interactions among servers in the data center. These technologies generate a significant amount of server-to-server traffic; in fact, up to 70% of data center LAN traffic is between servers. Additional server traffic may also be produced by the increased adoption of virtualization, where shared resources such as a server pool are used at greater capacity to improve efficiency. Today s network topologies need to mirror the nature of the traffic being transported. Existing three-tier architectures were not designed to handle server-to-server traffic without going up and back through the many layers of tiers. This is inherently inefficient, adding latency at each hop, which in turn impacts performance, particularly for real-time applications like unified communications, or in industries requiring high performance such as financial trading. Scaling Is Too Complex with Current Data Center Architectures Simply deploying ever more servers, storage, and devices in a three-tier architecture to meet demand significantly increases network complexity and cost. In many cases, it isn t possible to add more devices due to space, power, cooling, or throughput constraints. And even when it is possible, it is often difficult and time-consuming to manage due to the size and scope of the network. Or it is inherently inefficient, as it s been estimated that as much as 50% of all ports in a typical data center are used for connecting switches to each other as opposed to doing the more important task of interconnecting storage to servers and applications to users. Additionally, large Layer 2 domains using Spanning Tree Protocol (STP) are prone to failure and poor performance. This creates barriers to the efficient distribution of resources in the DC and fundamentally prevents a fast and flexible network scale out. Similarly, commonly deployed data center technologies like multicast don t perform at scale across tiers and devices in a consistent fashion. Legacy security services may not easily scale and are often not efficiently deployed in a data center LAN due to the difficulty of incorporating security into a legacy,multitiered design. Security blades which are bolted into switches at the aggregation layer consume excessive power and space, impact performance, and don t protect virtualized resources. Another challenge of legacy security service appliances is the limited performance scalability, which may be far below the throughput requirements of most high-performance enterprises consolidating applications or data centers. The ability to cluster together firewalls as a single logical entity to increase scalability without added management complexity is another important consideration. Proprietary systems may also limit further expansion with vendor lock-in to low performance equipment. Different operating systems at each layer may add to the complexity to operate and scale the network. This complexity is costly, limits flexibility, increases the time it takes to provision new capacity or services, and restricts the dynamic allocation of resources for services such as virtualization. 10 Copyright 2012, Juniper Networks, Inc.

11 The Case for a High Performing, Simplified Architecture Enhanced, high-performance LAN switch technology can help meet these scaling challenges. According to Network World, Over the next few years, the old switching equipment needs to be replaced with faster and more flexible switches. This time, speed needs to be coupled with lower latency, abandoning spanning tree and support for the new storage protocols. Networking in the data center must evolve to a unified switching fabric. 2 New switching technology such as that found in Juniper Networks EX Series Ethernet Switches has caught up to meet or surpass the demands of even the most high-performance enterprise. Due to specially designed applicationspecific integrated circuits (ASICs) which perform in-device switching functions, enhanced switches now offer high throughput capacity of more than one terabit per second (Tbps) with numerous GbE and 10GbE ports, vastly improving performance and reducing the number of uplink connections. Some new switches also provide built-in virtualization that reduces the number of devices that must be managed, yet can rapidly scale with growth. Providing much greater performance, enhanced switches also enable the collapsing of unnecessary network tiers moving towards a new, simplified network design. Similarly, scalable enhanced security devices can be added to complement such a design, providing security services throughout the data center LAN. A simplified, two-tier data center LAN design can lower costs without compromising performance. Built on highperformance platforms, a collapsed design requires fewer devices, thereby reducing capital outlay and the operational costs to manage the data center LAN. Having fewer network tiers also decreases latency and increases performance, enabling wider support of additional cost savings and high bandwidth applications such as unified communications. Despite having fewer devices, a simplified design still offers high availability (HA) with key devices being deployed in redundant pairs and dual homed to upstream devices. Additional HA is offered with features like redundant switching fabrics, dual power supplies, and the other resilient capabilities available in enhanced platforms. MULTI-TIER LEGACY NETWORK 2-TIER DESIGN Density Performance Reliability Figure 4: Collapsed network design delivers increased density, performance, and reliability 2 Robin Layland/Layland Consulting 10G Ethernet shakes Net Design to the Core/Shift from three- to two-tier architectures accelerating, Network World September 14, 2009 Copyright 2012, Juniper Networks, Inc. 11

12 Two-Tier Design Facilitates Cloud Computing By simplifying the design, by sharing resources, and by allowing for integrated security, a two-tier design also enables the enterprise to take advantage of the benefits of cloud computing. Cloud computing delivers on-demand services to any point on the network without requiring the acquisition or provisioning of location-specific hardware and software. These cloud services are delivered via a centrally managed and consolidated infrastructure that has been virtualized. Standard data center elements such as servers, appliances, storage, and other networking devices can be arranged in resource pools that are shared securely across multiple applications, users, departments, or any other way they should be logically shared. The resources are dynamically allocated to accommodate the changing capacity requirements of different applications and improve asset utilization levels. This type of on-demand service and infrastructure simplifies management, reduces operating and ownership costs, and allows services to be provisioned with unprecedented speed. Reduced application and service delivery times mean that the enterprise is able to capitalize on opportunities as they occur. Achieving Power Savings and Operating Efficiencies Fewer devices require less power, which in turn reduces cooling requirements, thus adding up to substantial power savings. For example, a simplified design can offer more than a 39% power savings over a three-tier legacy architecture. Ideally, a common operating system should be used on all data center LAN devices to reduce errors, decrease training costs, ensure consistent features, and thus lower the cost of operating the network. Consolidating Data Centers Due to expanding services, enterprises often have more than one data center. Virtualization technologies like server migration and application load balancing require multiple data centers to be virtually consolidated into a single, logical data center. Locations need to be transparently interconnected with LAN interconnect technologies such as virtual private LAN service (VPLS) to interoperate and appear as one. All this is possible with a new, simplified data center LAN design from Juniper Networks. However, as stated earlier, Juniper recognizes that it is impractical to flash migrate from an existing, operational, three-tier production data center LAN design to a simpler two-tier design, regardless of the substantial benefits. However, migration can begin as a result of any of the following trigger events: Addition of a new application or service Refresh cycle Server virtualization migration Data center consolidation Business continuity and workload mobility initiatives Data center core network upgrade Higher performance and scalability for security services The design considerations and steps for initiating migration from any of these trigger events is covered in detail in Chapter 3: Data Center Migration Trigger Events and Deployment Processes. 12 Copyright 2012, Juniper Networks, Inc.

13 Why Juniper? Juniper delivers high-performance networks that are open to and embrace third-party partnerships to lower total cost of ownership (TCO) as well as to create flexibility and choice. Juniper is able to provide this based on its extensive investment in software, silicon, and systems. Software: Juniper s investment in software starts with Juniper Networks Junos operating system. Junos OS offers the advantage of one operating system with one release train and one modular architecture across the enterprise portfolio. This results in feature consistency and simplified management throughout all platforms in the network. Silicon: Juniper is one of the few network vendors that invests in ASICs which are optimized for Junos OS to maximize performance and resiliency. Systems: The combination of the investment in ASICs and Junos OS produces high-performance systems that simultaneously scale connectivity, capacity, and the control capability needed to deliver new applications and business processes on a single infrastructure that also reduces application and service delivery time. Juniper s strategy for simplifying the data center network is called the Data Center Network Architecture, which eliminates layers of switching to flatten and collapse the network from today s three-tier tree structure to two layers, and in the future just one (see Figure 5). A key enabler of this simplification is achieved by deploying Juniper s Virtual Chassis fabric technology, which interconnects multiple physical switches to create a single, logical device that combines the performance and simplicity of a switch with the connectivity and resiliency of a network. Organizations can migrate from a three-tier to a two-tier network beginning with a Trigger Event such as adding a new POD or a technology refresh. Migration Trigger Events will be presented in more detail in Chapter 3. Alternatively, they can move directly into a Juniper-enabled data center fabric as it becomes available. Creating a simplified infrastructure with shared resources and secure services delivers significant advantages over other designs. It helps lower costs, increase efficiency, and keep the data center agile enough to accommodate any future business changes or technology infrastructure requirements. The steps to migrate from an existing three-tier network to a flatter design, as articulated by the Juniper Networks Data Center Network Architecture, is built on four core principles: Simplify the architecture: Consolidating legacy siloed systems and collapsing inefficient tiers results in fewer devices, a smaller operational footprint, and simplified management from a single pane of glass. Share the resources: Segmenting the network into simple, logical, and scalable partitions with privacy, flexibility, high performance, and quality of service (QoS) enables network agility to rapidly adapt to an increasing number of users, applications, and services. Secure the data flows: Integrating scalable, virtualized security services into the network core provides benefits to all users and applications. Comprehensive protection secures data flows into, within, and between data centers. It also provides centralized management and the distributed dynamic enforcement of application and identity-aware policies. Automate network operations at each step An open, extensible software platform reduces operational costs and complexity, enables rapid scaling, minimizes operator errors, and increases reliability through a single network operating system. A powerful network application platform with innovative applications enables network operators to leverage Juniper or third-party applications for simplifying operations and scaling application infrastructure to improve operational efficiency. Copyright 2012, Juniper Networks, Inc. 13

14 3. Legacy three-tier data center 2. Juniper two-tier data center 1. Juniper s data center fabric W Up to 75% of traffic E W Up to 75% of traffic E Figure 5: Juniper Networks 3:2:1 Data Center Network Architecture Juniper s data center LAN architecture embodies these principles and enables high-performance enterprises to build next-generation, cloud-ready data centers. For information on Building the Cloud-Ready Data Center, please refer to: Other Considerations It is interesting to note that even as vendors introduce new product lines, the legacy three-tier architecture remains as the reference architecture for Data Centers. This legacy three-tier architecture retains the same limitations in terms of scalability and increased complexity. Additionally, migrating to a new product line, even with an incumbent vendor, may require adopting a new OS, modifying configurations, and replacing hardware. The potential operational impact of introducing new hardware is a key consideration for insertion into an existing data center infrastructure, regardless of the platform provider. Prior to specific implementation at any layer of the network, it is sound practice to test interoperability and feature consistency in terms of availability and implementation. When considering an incumbent vendor with a new platform, any Enterprise organization weighing migration to a new platform from their existing one, should also evaluate moving towards a simpler high performing Juniper-based solution, which can deliver substantial incremental benefits. (See Chapter 3: Data Center Migration Trigger Events and Deployment Processes for more details about introducing a second switching infrastructure vendor into an existing single vendor network.) In summary, migrating to a simpler data center design enables an enterprise to improve the end user experience and scale without complexity, while also driving down operational costs. 14 Copyright 2012, Juniper Networks, Inc.

15 Chapter 2: Pre-Migration Information Requirements Copyright 2012, Juniper Networks, Inc. 15

16 Pre-Migration Information Requirements Migrating towards a simplified design is based on a certain level of familiarity with the following Juniper solutions: Juniper Networks Junos operating system Juniper Networks EX Series Ethernet Switches and MX Series 3D Universal Edge Routers Juniper Networks SRX Series Services Gateways Juniper Networks Network and Security Manager, STRM Series Security Threat Response Managers, and Junos Space network management solutions Juniper Networks Cloud-Ready Data Center Reference Architecture communicates Juniper s conceptual framework and architectural philosophy in creating data center and cloud computing networks robust enough to serve the range of customer environments that exist today. It can be downloaded from: data-center/simplify/#literature. Technical Knowledge and Education This Migration Guide assumes some experience with Junos OS and its rich tool set, which will not only help simplify the data center LAN migration but also ongoing network operations. A brief overview of Junos OS is provided in the following section. Juniper also offers a comprehensive series of Junos OS workshops. Standardization of networking protocols should ease the introduction of Junos OS into the data center since the basic constructs are similar. Juniper Networks offers a rich curriculum of introductory and advanced courses on all of its products and solutions. Learn more about Juniper s free and fee-based online and instructor-led hands-on training offerings at: Additional education may be required for migrating security services such as firewall and intrusion prevention system (IPS). If needed, Juniper Networks Professional Services can provide access to industry-leading IP experts to help with all phases of the design, planning, testing, and migration process. These experts are also available as training resources, to help with project management, risk assessment, and more. The full suite of Juniper Networks Professional Services offerings can be found at: Junos OS Overview Enterprises deploying legacy-based solutions today are most likely familiar with the number of different operating systems (OS versions) running on switching, security, and routing platforms. This can result in feature inconsistencies, software instability, time-consuming fixes and upgrades. It s not uncommon for a legacy data center to be running many different versions of a switching OS, which may increase network downtime and require greater time, effort, and cost to manage the network. From its beginning, Juniper set out to create an operating system that addressed these common problems. The result is Junos OS, which offers one consistent operating system across all of Juniper s routing, switching, and security devices. 16 Copyright 2012, Juniper Networks, Inc.

17 T Series EX8216 Junos Space EX8208 Junos Pulse NSM SRX5000 Line NSMXpress SRX3000 Line EX4500 Line SRX100 SRX650 MX Series SRX240 SRX210 J Series M Series LN1000 EX4200 Line EX3200 Line EX2200 Line QFX3500 SECURITY ROUTERS SWITCHES Branch Core Frequent Releases Module X API One OS One Release Track One Architecture Figure 6: Junos OS - The power of one Junos OS serves as the foundation of a highly reliable network infrastructure and has been at the core of the world s largest service provider networks for over 10 years. Junos OS offers identical carrier-class performance and reliability to any sized enterprise data center LAN. Also through open, standards-based protocols and an API, Junos OS can be customized to optimize any enterprise-specific requirement. What sets Junos OS apart from other network operating systems is the way it is built: one operating system (OS) delivered in one software release train, and with one modular architecture. Feature consistency across platforms and one predictable release of new features ensure compatibility throughout the data center LAN. This reduces network management complexity, increases network availability, and enables faster service deployment, lowering TCO and providing greater flexibility to capitalize on new business opportunities. Junos OS consistent user experience and automated tool sets make planning and training easier and day-to-day operations more efficient, allowing for faster changes. Further, integrating new software functionality protects not just hardware investments, but also an organization s investment in internal systems, practices, and knowledge. Junos OS Architecture The Junos OS architecture is a modular design conceived for flexible yet stable innovation across many networking functions and platforms. The architecture s modularity and well-defined interfaces streamline new development and enable complete, holistic integration of services. Copyright 2012, Juniper Networks, Inc. 17

18 OPEN MANAGEMENT INTERFACES CLI Scripts NSM/ Junos Space J-Web Toolkit CONTROL PLANE Management Routing Interfaces Kernel Module n Services Interfaces Service App 1 Service App 2 Service App 3 SERVICES PLANE DATA PLANE Packet Forwarding Physical Interfaces Service App n Figure 7: The modular Junos OS architecture The advantages of modularity reach beyond the operating system software s stable, evolutionary design. For example, the Junos OS architecture s process modules run independently in their own protected memory space, so one module cannot disrupt another. The architecture also provides separation between control and forwarding functions to support predictable high performance with powerful scalability. This separation also hardens Junos OS against distributed denial-of-service (DDoS) attacks. Junos operating system s modularity is integral to the high reliability, performance, and scalability delivered by its software design. It enables unified in-service software upgrade (ISSU), graceful Routing Engine switchover (GRES), and nonstop routing. Automated Scripting with Junoscript Automation With Junoscript Automation, experienced engineers can create scripts that reflect their own organization s needs and procedures. The scripts can be used to flag potential errors in basic configuration elements such as interfaces and peering. The scripts can also automate network troubleshooting and quickly detect, diagnose, and fix problems as they occur. In this way, new personnel running the scripts benefit from their predecessors long-term knowledge and expertise. Networks using Junoscript Automation can increase productivity, reduce OpEx, and increase high availability (HA), since the most common reason for a network outage is operator error. For more detailed information on Junos Script Automation, please see: 18 Copyright 2012, Juniper Networks, Inc.

19 A key benefit of using Junos OS is lower TCO as a result of reduced operational challenges and improved operational productivity at all levels in the network. Critical Categories of Enterprise Network Operational Costs Switch and Router Downtime Costs Switch and Router Maintenance and Support Costs Switch and Router Deployment Time Costs Unplanned Switch and Router Events Resolution Costs Overall Switch and Router Network Operations Costs Baseline for all network operating systems 27%* Lower with Junos 54%* Lower with Junos 25%* Lower with Junos 40%* Lower with Junos 41%* Lower with Junos (Based on reduction in frequency and duration of unplanned network events) (A planned events category) (The adding infrastructure task) (The time needed to resolve unplanned network events) (The combined total savings associated with planned, unplanned, planning and provisioning, and adding infrastructure tasks) Multiple network operating systems diminish efficiency 3 Figure 8: Junos OS lowers operations costs across the data center An independent commissioned study conducted by Forrester Consulting 3 ( found that the use of Junos OS and Juniper platforms produced a 41% reduction in overall operations costs for network operational tasks including planning and provisioning, deployment, and planned and unplanned network events. Juniper Platform Overview The ability to migrate from a three-tier network design to a simpler two-tier design with increased performance, scalability, and simplicity is predicated on the availability of hardware-based services found in networking platforms such as the EX Series Ethernet Switches, MX Series 3D Universal Edge Routers, and the SRX Series Services Gateways. A consistent and unified view of the data center, campus, and branch office networks is provided by Juniper s single pane of glass management platforms, including the recently introduced Junos Space. The following section provides a brief overview of the capabilities of Juniper s platforms. All of the Junos OS-based platforms highlighted provide feature consistency throughout the data center LAN and lower TCO. EX4200 Switch with Virtual Chassis Technology Typically deployed at the access layer in a data center, Juniper Networks EX4200 Ethernet Switch provides chassisclass, high availability features, and high-performance throughput in a pay as you grow 1 rack unit (1 U) switch. Depending on the size of the data center, the EX4200 may also be deployed at the aggregation layer. Offering flexible cabling options, the EX4200 can be located at the top of a rack or end of a row. There are several different port configurations available with each EX4200 switch, providing up to 48 wire-speed, non-blocking, 10/100/1000 ports with full or partial Power over Ethernet (PoE). Despite its small size, this high-performance switch also offers multiple GbE or 10Gbe uplinks to the core, eliminating the need for an aggregation layer. And because of its small size, it takes less space, requires less power and cooling, and it costs less to deploy and maintain sparing. Up to 10 EX4200 line switches can be connected, configured, and managed as one single logical device through built-in Virtual Chassis technology. The actual number deployed in a single Virtual Chassis instance depends upon the physical layout of your data center and the nature of your traffic. Connected via a 128 Gbps backplane, a Virtual Chassis can be comprised of EX4200 switches within a rack or row, or it can use a 10GbE connection anywhere within a data center or across data centers up to 40 km apart. 3 The Total Economic Impact of Junos Network Operating Systems, a commissioned study conducted by Forrester Consulting on behalf of Juniper Networks, February 2009 Copyright 2012, Juniper Networks, Inc. 19

20 Juniper s Virtual Chassis technology enables virtualization at the access layer, offering three key benefits: 1. It reduces the number of managed devices by a factor of 10X. 2. The network topology now closely maps to the traffic flow. Rather than sending inter-server traffic up to an aggregation layer and then back down in order to send it across the rack, it s sent directly east-to-west, reducing the latency for these transactions. This also more easily facilitates workload mobility when server virtualization is deployed. 3. Since the network topology now maps to the traffic flows directly, the number of uplinks required can be reduced. The Virtual Chassis also delivers best-in-class performance. According to testing done by Network World (see full report at the EX4200 offers the lowest latency of any Ethernet switch they had tested, making the EX4200 an optimal solution for high-performance, low latency, real-time applications. There has also been EX4200 performance testing done in May 2010 by Network Test which demonstrates the low latency high performance and high availability capabilities of the EX 4200 series, viewable at When multiple EX4200 platforms are connected in a Virtual Chassis configuration, they offer the same software high availability as traditional chassis-based platforms. Each Virtual Chassis has a master and backup Routing Engine preelected with synchronized routing tables and routing protocol states for rapid failover should a master switch fail. The EX4200 line also offers fully redundant power and cooling. To further lower TCO, Juniper includes core routing features such as OSFP and RIPv2 in the base software license, providing a no incremental cost option for deploying Layer 3 at the access layer. In every deployment, the EX4200 reduces network configuration burdens and measurably improves performance for server-to-server communications in SOA, Web services, and other distributed application designs. For more information, refer to the EX4200 Ethernet Switch data sheet for a complete list of features, benefits, and specifications at: QFX3500 QFabric consists of edge, interconnect, and control devices that work together to create a high-performance, low latency fabric that unleashes the power of the data center. QFabric represents the 1 in Juniper Networks architecture, dramatically reducing complexity in the data center by delivering any-to-any connectivity while lowering capital, management, and operational expenses. The first QFabric product, the Juniper Networks QFX3500 represents a new level of integration and performance for top of rack switches by being the first to combine all of the following in 1 RU. Ultra Low Latency - matching industry best latency for a 48+ port Ethernet switch L2 full L2 switching functionality L3 routing and IP addressing functions (Future) Storage convergence Ethernet storage (NAS, iscsi, FCoE)and Fibre Channel gateway 40G high capacity uplinks (Future) Refer to the QFX3500 data sheet for more information at: EX GbE Switch The Juniper Networks EX4500 Ethernet Switch delivers a scalable, compact, high-performance platform for supporting a mix of GbE and high-density 10 gigabit per second (10 Gbps) data center top-of-rack, as well as data center, campus, and service provider aggregation deployments. The QFX3500 is the preferred platform for 10 Gigabit per second Top of Rack Deployments. The Junos OS-based EX4500 is a 48 port wire-speed switch whose ports can be provisioned as either gigabit Ethernet (GbE) or 10GbE ports in a two rack unit (2 U) form factor. The 48 ports are allocated with BaseT ports in the base unit and 8 optional uplink module ports. The EX4500 delivers 960 Gbps throughput (full duplex) for both Layer 2 and Layer 3 protocols. The EX4500 also supports Virtual Chassis technology. 20 Copyright 2012, Juniper Networks, Inc.