Juniper EX3200 Series User manual

Datasheet
Juniper Networks EX 3200
Series Fixed-Configuration
Ethernet Switches
Product Description
The EX 3200 series fixed-configuration switches from Juniper Networks offer a high-
performance standalone solution for access-layer deployments in branch and remote
offices as well as campus networks.
Featuring complete Layer 2 and Layer 3 switching capabilities, the EX 3200 series
switches satisfy the wiring closet connectivity requirements of today’s high-
performance businesses. Four platform configurations are available offering 24 and 48
10/100/1000BASE-T ports with either full or partial Power over Ethernet (PoE). The base
24- and 48-port EX 3200 series switches deliver a full 15.4 watts of Class 3 PoE on the
first eight ports for supporting IP-enabled devices such as telephones, video cameras
and wireless LAN (WLAN) access points in converged networks. The EX 3200 series
switches with full PoE deliver 15.4 watts on all 24 or 48 ports to support high-density IP
telephony and other converged network environments.
The EX 3200 series Ethernet switches also support optional four-port Gigabit Ethernet
(GbE) and two-port 10GbE uplink modules with pluggable optics to provide high-
speed connectivity to aggregation-layer switches or other upstream devices. A field-
replaceable power supply and fan tray minimize mean time to repair (MTTR) for the EX
3200 series switches, ensuring maximum availability. When deployed with an optional
external redundant power supply unit, the EX 3200 series switch’s power supply
becomes hot-swappable.
The EX 3200 series switches offer an integrated Route Engine (RE) that runs the
same modular JUNOS™software as Juniper router products to ensure the consistent
implementation and operation of each control plane feature across an entire Juniper
infrastructure.
Each EX 3200 series switch includes an integrated application-specific integrated
circuit (ASIC)-based packet forwarding engine, the EX-PFE, to consistently deliver
wire-rate forwarding even with all control-plane features enabled. Based on existing
field-proven Juniper technology, the EX-PFE and RE bring the same level of carrier-class
performance and reliability to the EX 3200 series switches that Juniper routers bring to
the world’s largest service provider networks.
High-performance businesses demand high-
performance networking solutions. The Juniper
Networks EX 3200 series xed-conguration
Ethernet switches offer a compact, high-
performance solution for supporting today’s
converged network access deployments.
Standalone solution offering conguration exibility and eld serviceability
• OptionalGbEand10GbEuplinksreducecapitalcostsforremoteofce
deployments
• FieldreplaceablepowersupplyandfantraylowerMTTRandincrease
serviceability
• SinglereleasetrainforJUNOSsoftwareensuresconsistentcontrolplane
featureimplementation
• ModularJUNOSsoftwarepreventsaswitchrebootifasingleprotocol
featurefails
• LCDpanelprovidesasimpliedinterfacefordevicebring-up,recoveryand
healthcheckingwithoutrequiringaconsole
• Singlemanagementinterface
• Upto37percentlowerpowerconsumptionthancomparableswitches

2
Architecture and Key Components
The EX 3200 series switches occupy a single rack unit and deliver
a compact solution for crowded wiring closets and access locations
where space and power are at a premium.
Each EX 3200 series switch supports optional front-panel uplink
modules offering either four GbE ports or two 10GbE ports with
pluggable optics for high-speed backbone or link-aggregation
connections between wiring closets and upstream aggregation
switches. Uplink modules can be installed without powering down
the switch, enabling users to add high-speed connectivity at any
time or to migrate from GbE to 10GbE uplinks, delivering the
ultimate in flexible, high-performance interconnectivity.
The EX 3200 series switches also feature a front-panel LCD display
that offers a flexible interface for performing device bring-up and
configuration rollbacks, for reporting switch alarm and LED status,
or for restoring the switch to its default settings.
A dedicated rear-panel RJ-45 Ethernet port is available for out-of-
band management, while a rear-panel USB port can be used to
easily upload JUNOS software and configuration files.
Figure 1: The EX 3200 series Ethernet switches provide a high-performance
solution for converged networks in branch ofces as well as campus wiring
closets.
Features and Benefits
High Availability Features
• Field-replaceablepowersupplies:TheEX3200seriesxed-
congurationswitchessupporteld-replaceableACpower
supplies,reducingMTTR.Whendeployedwithanoptional
externalredundantpowersupplyunit,thereplaceablepower
supplyontheEX3200seriesswitchbecomeshot-swappable.
ThankstotheirhighlyintegratedASICdesign,theEX3200series
switchesalsorequiresignicantlylesspowerthanchassis-based
switchesdeliveringequivalentportdensities.
• Hot-swappablefantray:TheEX3200seriesxed-conguration
switchesincludeahot-swappable,eld-replaceablefantray,
reducingMTTR.
• Carrier-classhardware:TheEX3200seriesxed-conguration
switchesleverageapurpose-builtpacketforwardingengine
ASIC—theEX-PFE—whichintegratesmuchofthesame
intellectualpropertyusedinJuniperNetworkscarrierrouters.
Asaresult,theEX3200seriesswitchesdeliverthesame
predictable,scalablefunctionalityfoundintheworld’slargest
networks.
• RedundantTrunkGroup(RTG):Toavoidthecomplexitiesof
theSpanningTreeProtocol(STP)withoutsacricingnetwork
resiliency,theEX3200seriesswitchesemployaredundanttrunk
grouptoprovidethenecessaryportredundancyandsimplify
switchconguration.
Carrier-Class Operating System
The EX 3200 series switches run the same JUNOS operating system
software used by Juniper routers to power some of the world’s
largest and most complex networks.
By utilizing a common operating system, Juniper delivers a
consistent implementation and operation of control-plane features
across all products—functions ranging from chassis management
to spanning tree to OSPF. To maintain that consistency, the JUNOS
software adheres to a highly disciplined development process that
utilizes a single source code, follows a single quarterly release train,
and employs a highly available modular architecture that prevents
isolated failures from bringing an entire system down.
These attributes are fundamental to the core value of the software,
enabling all products powered by the JUNOS software—routers and
switches—to be updated simultaneously with the same software
release. All features, new and old, are fully regression-tested, making
each new release a true superset of the previous version. Customers
can deploy a new JUNOS software release with complete confidence
that all existing capabilities will operate in the same way and be
compatible on all Juniper switches and routers in the network.
Figure 2: The JUNOS software utilizes a single source code, adheres to a
consistent and predictable release train, and employs a single modular
architecture.
Access
Point
Access
Point
Branch/Regional Office
Campus Wiring Closet
To Aggregation
Layer
EX 3200
Series
EX 3200
Series
J-series
One OS One Release One Architecture
9.1
Q208
9.0
Q108
8.5
Q407 Module
X
— API —
J-series
TX
Matrix

3
Converged Environments
The EX 3200 series fixed-configuration switches provide the
highest levels of availability in their class for the most demanding
converged data, voice and video environments, delivering a reliable
platform for unifying enterprise communications.
By providing full 15.4 watts of Class 3 PoE to power voice over
IP (VoIP) telephones, closed-circuit security cameras, wireless
access points and other IP-enabled devices, the EX 3200 series
switches deliver a future-proofed solution for converging disparate
networks onto a single IP infrastructure. The base system,
which offers eight PoE ports, lowers the cost and complexity of
designing the access layer by supporting a small number of WLAN
access points or IP phones rather than requiring the purchase of
PoE on all 24 or 48 ports.
To ease deployment, the EX 3200 series switches support the
industry-standard link-layer discovery protocol (LLDP) and LLDP-
Media Endpoint Detection (LLDP-MED) protocol, enabling the
switches to automatically discover Ethernet-enabled devices,
determine their power requirements, and assign virtual LAN
(VLAN) membership.
In addition, the EX 3200 series switches support rich quality of
service (QoS) functionality for prioritizing data, voice and video
traffic. The switches support eight class-of-service (CoS) queues
on every port, enabling them to maintain multi-level, end-to-end
traffic prioritizations. The EX 3200 series switches also support a
wide range of policy options, including strict priority, low-latency,
weighted random early drop (WRED) and shaped deficit weighted
round-robin (SDWRR) queuing.
Security
The EX 3200 series Ethernet switches fully integrate with the
Juniper Networks Unified Access Control (UAC) solution, which
consolidates all aspects of a user’s identity, device and location.
This enables administrators to enforce access control and security
down to the individual port or user levels.
Working as an enforcement point within the UAC solution, the
EX 3200 series switches provide both standards-based 802.1X
port-level access control for multiple devices per port as well as
Layer 2-4 policy enforcement based on user identity, location and/
or device. A user’s identity, device type, machine posture check
and location can be used to determine whether access should be
granted and for how long. If access is granted, the switch assigns
the user’s device to a specific VLAN based on authorization policy.
The switch can also apply security and/or QoS policies, or it can
mirror user traffic to a central location for logging, monitoring or
threat detection by intrusion prevention systems.
The EX 3200 series switches also provide a full complement of
integrated port security and threat detection features, including
DHCP (Dynamic Host Configuration Protocol) snooping, DAI
(Dynamic ARP Inspection), MAC limiting and IP Source Guard to
defend against internal and external spoofing, man-in-the-middle
and Denial of Service (DoS) attacks.
Figure 3: The EX 3200 series switches work with the Juniper UAC solution
to enforce access control down to the individual port level.
Simplied Management and Operations
The EX 3200 series switches include port profiles that allow
network administrators to automatically configure ports with
security, QoS and other parameters based on the type of device
connected to the port. Six preconfigured profiles are available,
including default, desktop, desktop plus IP phone, WLAN access
point, routed uplink and Layer 2 uplink. Users can select from the
existing profiles or create their own and apply them through the
Command Line Interface (CLI), J-Web or management system.
Four system management options are available for the EX 3200
series switches. The standard JUNOS CLI management interface
offers the same granular capabilities and scripting parameters
found in any JUNOS-powered router. The EX 3200 series switches
also include the integrated J-Web management tool, an embedded
Web-based device manager that allows users to configure, monitor,
troubleshoot and perform system maintenance on individual
switches via a browser-based graphical interface.
When managing a group of EX 3200 series switches, the Juniper
NetScreen-Security Manager (NSM) provides system-level
management across all Juniper switches in the network from a
single console.
Finally, EX 3200 series switch configuration, fault and performance
data can be exported to leading third-party management systems
such as HP OpenView, IBM Tivoli and Computer Associates
Unicenter, to provide a complete, consolidated view of network
operations.
Product Options
Four EX 3200 models are available (see Table 1 below).
Table 1: EX 3200 Series Ethernet Switches
SKU Access Port Configuration PoE
Ports
Height Power
Supply
EX3200-24T 24-port 10/100/1000BASE-T 8 1RU 320 W AC PSU
EX3200-24P 24-port 10/100/1000BASE-T 24 1RU 600 W AC PSU
EX3200-48T 48-port 10/100/1000BASE-T 8 1RU 320 W AC PSU
EX3200-48P 48-port 10/100/1000BASE-T 48 1RU 930 W AC PSU
Steel-Belted
Radius
Infranet
Controller
FW/VPN
UAC Agent Firewall
Enforcer Protected
Servers
Policy Manager
• Access granted
• VLAN assigned
• QoS policies applied
AAA
EX 3200
Series

4
Physical Specifications
• 24-portswitches:
– 2410/100/1000BASE-Tports:8PoE@15.4W;320WPSU
– 2410/100/1000BASE-Tports:24PoE@15.4W;600WPSU
• 48-portswitches:
– 4810/100/1000BASE-Tports:8PoE@15.4W;320WPSU
– 4810/100/1000BASE-Tports:48PoE@15.4W;930WPSU
• Uplinkmoduleoptions:
– 4-port 1GbE module with pluggable SFP optics
– 2-port 10GbE module with pluggable XFP optics
Power Options
• Powersupplies:Autosensing;100-120V/200-240V;AC320W,
600Wand930W
• ExternalRPSoption
• Fieldreplaceable
Dimensions (W x H x D)
17.41x 1.82x16.43in
(44.21x 4.52x 41.73cm)
1Desktop installation width noted above, rack-mount width is
17.5 in (44.5 cm)
2Height:1RU
3Depth with 320 W PSU noted above, 18.8 in (47.8 cm) with
600/930WPSU
Environmental Ranges
• Operatingtemperature:32ºto131ºF(0ºto55ºC)
• Operatingaltitude:upto10,000ft(3,049m)
• Relativehumidityoperating:10to85%(noncondensing)
Cooling
• Field-replaceablefantray
Hardware Specifications
• SwitchingEngineModel:Storeandforward
• DRAM–512MB
• Flash–1GB
• CPU–600MHzPowerPCCPU
• 10/100/1000BASE-Tconnectortype:RJ-45
• GbESFPoptic/connectortype:RJ-45orLCSFPbersupporting
1000BASE-T SFP, SX (multimode), LX (single-mode) or ZX (single-
mode)
• GbElong-haulSFPoptic/connectortype/distance:1000-ZX
(single-mode), LC connector, 80km
• GbEportdensitypersystem
– 24P/24T:28(24hostports+four-portGbEuplinkmodule)
– 48P/48T:52(48hostports+four-portGbEuplinkmodule)
• 10GbEXFPoptic/connectortype:10GEXFP,SR(multimode),LR
(single-mode), ER (single-mode) or ZR (single-mode)
• 10GbEportdensitypersystem(allmodels):
2 (uplink module)
• IPv6,MPLSandGREtunnelhardwaresupport
Physical Layer
• Physicalportredundancy:Redundanttrunkgroup(RTG)
• TimeDomainReectometry(TDR)fordetectingcablebreaks
and shorts
• AutoMDI/MDIXsupport
• Portspeeddownshift/settingmaxadvertisedspeedon
10/100/1000BASE-T ports
Packet Switching Capacities
• 24P/24T:88Gbps
• 48P/48T:136Gbps
Layer 2 Throughput (Mpps)
• 24P/24T:65Mpps(wirespeed)
• 48P/48T:101Mpps(wirespeed)
Layer 2 Switching
• MaxMACaddressespersystem:32,000
• StaticMACentries:32,000
• Jumboframes:9216Bytes
• NumberofVLANs:4,000
• Port-basedVLAN
• MAC-basedVLAN
• GVRP
• VLANtagging:802.1Q
• VoiceVLAN
• STP(802.1D-2004)
• CompatiblewithPVST+
• STPenable/disableperportandperVLAN
• Rapid-SpanningTree(802.1w)
• MST(802.1s)
• Numberof802.1sinstancessupported:64
• LLDP
• LLDP-MEDwithVoIPintegration
• RVI(RoutedVLANInterface)
Layer 3 Features: IPv4
• MaxnumberofARPentries:16,000
• MaxnumberofIPv4unicastroutesinhardware:12,000
• MaxnumberofIPv4multicastroutesinhardware:2,000
• Routingprotocols:RIPv1/v2,OSPF,BGP,ISIS
• Staticrouting
• Routingpolicy
• BidirectionalForwardingDetection
• Layer3redundancy:VRRP
EX 3200 Series Fixed-Configuration Ethernet Switch Specifications

5
Security
• MAClimiting
• AllowedMACaddresses–congurableperport
• DynamicARPInspection(DAI)
• LocalproxyARP
• StaticARPsupport
• DHCPsnooping
Access Control Lists (ACLs) (JUNOS rewall lters)
• Port-basedACL(PACL)–Ingress
• VLAN-basedACL(VACL)–IngressandEgress
• Router-basedACL(RACL)–IngressandEgress
• ACLentries(ACE)inhardwarepersystem:7,000
• ACLcounterfordeniedpackets
• ACLcounterforpermittedpackets
• Abilitytoadd/remove/changeACLentriesinmiddleoflist
(ACL editing)
• Layer2–L4ACL
• 802.1Xport-based
• 802.1Xmultiplesupplicants
• 802.1XwithVLANassignment
• 802.1Xwithauthenticationbypassaccess(basedonhostMAC
address)
• 802.1XwithVoIPVLANsupport
• 802.1XdynamicACLbasedonRADIUSattributes
• 802.1XSupportedEAPtypes:MD5,TLS,TTLS,PEAP
• MACAuthentication(local)
• ControlPlaneDoSprotection
High Availability
• Field-replaceablepowersupply;hotswappablewhendeployed
with external power supply
• Redundantexternalpowersupplyoption
• Field-replaceablefan
• Gracefulprotocolrestart—OSPF,BGP
Link Aggregation
• 802.3ad(LACP)support:
– NumberofLAGgroupssupported:111
– MaxnumberofportsperLAGgroup:8
• LAGload-sharingalgorithm—BridgedUnicastTrafc:
– IP:S/DMAC,S/DIP
– TCP/UDP:S/DMAC,S/DIP,S/DPort
– Non-IP:S/DMAC
• LAG-sharingalgorithm—RoutedUnicastTrafc:
– IP:S/DMAC,S/DIP
– TCP/UDP:S/DMAC,S/DIP,S/DPort
– Non-IP:S/DMAC
• LAGload-sharingalgorithm–BridgedMulticastTrafc:
– IP:S/DMAC,S/DIP
– TCP/UDP:S/DMAC,S/DIP,S/DPort
– Non-IP:S/DMAC
• LAG-sharingalgorithm–RoutedMulticastTrafc:
– IP:S/DMAC,S/DIP
– TCP/UDP:S/DMAC,S/DIP,S/DPort
– Non-IP:S/DMAC
• TaggedportssupportinLAGgroup
Quality of Sevice (QoS)
• Layer2QoS
• Layer3QoS
• Ingresspolicing:1rate2color
• Hardwarequeuesperport:8
• Schedulingmethods(egress):Strictpriority(SP),ShapedDecit
Weighted Round-Robin (SDWRR)
• 802.1p,DSCP/IPPrecedencetrustandmarkingL2-L4
Classicationcriteria:Interface,MACaddress,Ethertype,
802.1p, VLAN, IP address, DSCP/IP Precedence, TCP/UDP port
numbers, etc.
• Congestionavoidancecapabilities:TailDrop
Multicast
• IGMP:v1,v2,v3
• IGMPsnooping
• PIM-SM
• IPv4Multicasthardwareentries:2,000
Services and Manageability
• CLI
• Webinterface
• Out-of-bandmanagement:Serial;10/100/1000BASE-TEthernet
• ASCIIconguration
• Rescueconguration
• Congurationrollback
• Imagerollback
• LCDmanagement
• Elementmanagementtools:NetScreen-SecurityManager(NSM)
• SNMP:v1,v2c,v3
• RMON/RMONv2:RFC1757Groups1,2,3,9
• NTP
• DHCPserver
• DHCPclientandDHCPproxy
• DHCPrelayandhelper
• RADIUS
• TACACS+
• SSHv2
• Securecopy
• HTTPs
• DNSresolver
• Sysloglogging
• Temperaturesensor
• Cong-backupviaTFTP/FTP/securecopy

6
Troubleshooting
• Debugging:CLIviaconsole,telnetorSSH
• Diagnostics:Showanddebugcmd,statistics
• Trafcmirroring(port)
• Trafcmirroring(VLAN)
• ACL-basedmirroring
• Mirroringdestinationportspersystem:1
• LAGportmonitoring
• Multipledestinationportsmonitoredto1mirror(N:1)
• Maxnumberofmirroringsessions:1
• Mirroringtoremotedestination(overL2):1destinationVLAN
• IPtools:Extendedping&trace
Safety and Compliance
Safety Certications
• UL-UL60950-1(FirstEdition)
• C-ULtoCAN/CSA22.2No.60950-1(FirstEdition)
• TUV/GStoEN60950-1,AmendmentA1-A4,A11
• CB-IEC60950-1,allcountrydeviations
Electromagnetic Compatibility Certications
• FCC47CFRPart15ClassA
• EN55022ClassA
• ICES-003ClassA
• VCCIClassA
• AS/NZSCISPR22ClassA
• CISPR22ClassA
• EN55024
• EN300386
• CE
Environmental
Reduction of Hazardous Substances (ROHS) 5
Noise Specications
• OfceProductSpec:48dBAat30°C(refertoISO7779)
Telco
• CLEIcode
Warranty
Limited lifetime warranty
Ordering Information
Model Number Description
Switches and Software Licences
EX 3200-24T 24-port 10/100/1000BASE-T (8 PoE ports) –
320 W AC PSU
EX 3200-24P 24-port 10/100/1000BASE-T (24 PoE ports) –
600 W AC PSU
EX 3200-48T 48-port 10/100/1000BASE-T (8 PoE ports) –
320 W AC PSU
EX 3200-48P 48-port 10/100/1000BASE-T (48 PoE ports) –
930 W AC PSU
EX 3200-24F 24-port 100BASE-FX/1000BASE-X SFP –
320 W AC PSU
EX-AFL-24* Advanced Feature License for EX 3200-24T,
EX 3200-24P
EX-AFL-48* Advanced Feature License for EX 3200-48T and
EX 3200-48P switches
Uplink Modules
EX-UM-2XFP 2-port 10GbE XFP Uplink Module
EX-UM-4SFP 4-port GbE SFP Uplink Module
Power Supplies**
EX-PWR-320-AC 320 W AC Power Supply Unit (PSU)
EX-PWR-600-AC 600 W AC Power Supply Unit (PSU)
EX-PWR-930-AC 930 W AC Power Supply Unit (PSU)
Pluggable Optics
EX-SFP-1GE-SX Small Form Factor Pluggable 1000BASE-SX Gigabit
Ethernet Optics
EX-SFP-1GE-LX Small Form Factor Pluggable 1000BASE-LX Gigabit
Ethernet Optics
EX-SFP-1GE-LH Small Form Factor Pluggable 1000BASE-LH Gigabit
Ethernet Optics
EX-SFP-1GE-T Small Form Factor Pluggable 10/100/1000
Copper Transceiver Module
EX-SFP-1FE-FX Small Form Factor Pluggable 100BASE-FX Fast
Ethernet Optics
EX-XFP-10GE-SR XFP, 10GE-SR, 850nm, 300m Reach,
EX-XFP-10GE-LR XFP, 10GE-LR / OC-192-SR1, 1310nm, 10Km
Reach, Multi Rate
EX-XFP-10GE-ER XFP, 10GE-ER / OC-192-IR2, 1550nm, 40Km
Reach, Multi Rate
EX-XFP-10GE-ZR XFP, 10GE-ZR / OC-192-LR2, 1550nm, 80Km
Reach, Multi Rate
*AFLincludingIPv6Routing,IS-IS,BGP,MBGP,MPLS,EnhancedGRETunnels(>7)
availableforpurchasewithJUNOS9.1inQ2’08.
**Eachswitchcomeswithonepowersupply;powersupplySKUsareforsparing

7
About Juniper Networks
Juniper Networks, Inc. is the leader in high-performance networking. Juniper offers a high-performance network infrastructure that
creates a responsive and trusted environment for accelerating the deployment of services and applications over a single network.
This fuels high-performance businesses. Additional information can be found at www.juniper.net.

Copyright 2007 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper
Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. JUNOS and JUNOSe are trademarks of Juniper
Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service
marks are the property of their respective owners. Juniper Networks assumes no responsibility
for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
CORPORATE HEADQUARTERS
AND SALES HEADQUARTERS FOR
NORTH AND SOUTH AMERICA
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089 USA
Phone: 888.JUNIPER (888.586.4737)
or 408.745.2000
Fax: [phone]
www.juniper.net
EAST COAST OFFICE
Juniper Networks, Inc.
10 Technology Park Drive
Westford, MA 01886-3146 USA
Phone: [phone]
Fax: [phone]
ASIA PACIFIC REGIONAL SALES HEADQUARTERS
Juniper Networks (Hong Kong) Ltd.
26/F, Cityplaza One
1111 King’s Road
Taikoo Shing, Hong Kong
Phone: [phone]
Fax: [phone]
EUROPE, MIDDLE EAST, AFRICA
REGIONAL SALES HEADQUARTERS
Juniper Networks (UK) Limited
Building 1
Aviator Park
Station Road
Addlestone
Surrey, KT15 2PG, U.K.
Phone: [phone]
Fax: [phone]
To purchase Juniper Networks solutions, please
contact your Juniper Networks sales representative
at 1-866-298-6428 or authorized reseller.
100216-001 Dec 2007