Software Features - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

JUNOS OS 10.4 Release Notes
80
Hardware Features—SRX220 Services Gateway with Power Over Ethernet on page 101
Hardware Features—SRX1400 Services Gateway on page 104
Hardware Features—SRX3400 and SRX3600 Services Gateways on page 107

Software Features

Application Layer Gateways (ALGs)
Rewrite rule for DSCP at VoIP ALGs—This feature is supported on all SRX Series and
J Series devices.
Differentiated Services Code Point (DSCP) is a modification of the type-of-service
byte for class of service (CoS). Six bits of this byte are reallocated for use as the DSCP
field, where each DSCP specifies a particular per-hop behavior that is applied to a
packet.
A rewrite rule modifies the appropriate CoS bits in an outgoing packet to meet the
requirements of the targeted peer. Each rewrite rule reads the current CosS value that
is configured at the voice over IP (VoIP) Application Layer Gateway (ALG) level. Every
packet that hits the VoIP ALG is marked by this CoS value.
You can configure a rewrite rule for a DSCP Differentiated Services (DiffServ) marker
at the VoIP ALG level to address VoIP signaling and its respective Real-Time Transport
Protocol (RTP) streams. You can configure the rewrite rule such that all VoIP traffic
hitting the ALG gets a rewrite marker while its respective RTP/Real-Time Control
Protocol (RTP/RTCP) traffic gets a different rewrite marker.
[Junos OS CLI Reference, Junos OS Integrated Convergence Services Configuration and
Administration Guide]
Chassis Cluster
Increasing the number of zones and virtual routers—This feature is supported on
SRX5600 and SRX5800 devices.
The maximum number of zones, virtual routers, and IFLs (IFLs only for chassis cluster
mode) that can be configured on an SRX5800 device has been increased to 2000.
In a chassis cluster environment, as the number of logical interfaces is scaled upward,
the time before triggering a failover needs to be increased accordingly. At maximum
capacity on an SRX5600 or SRX5800 device, we recommend that you increase the
configured time for failover detection to at least 5 seconds. [Junos OS CLI Reference]
Configuration Wizards
This feature is supported on SRX100, SRX210, SRX240, and SRX650 devices.
The J-Web interface now has a set of wizards that simplify the basic configuration of the
SRX Series devices. The Setup wizard automatically appears when you first start the
device or when it is in factory default mode and you point to the Web management URL.
Three other wizards in the J-Web interface enable you to configure basic firewall policies,
basic IPsec VPN settings, and basic NAT settings.
Copyright © 2010, Juniper Networks, Inc.