Page 2 SOFTWARE, AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS. The Parties. The parties to this Agreement are (i) Juniper Networks, Inc. (if the Customer’s principal office is located in the Americas) or Juniper Networks (Cayman) Limited (if the Customer’s principal office is located outside the Americas) (such applicable entity being referred to herein as “Juniper”), and (ii) the person or organization that originally purchased from Juniper or an authorized Juniper reseller the applicable license(s) for use...
Page 3 United States government is subject to restrictions set forth in this Agreement and as provided in DFARS 227.7201 through 227.7202-4, FAR 12.212, FAR 27.405(b)(2), FAR 52.227-19, or FAR 52.227-14(ALT III) as applicable. Copyright © 2010, Juniper Networks, Inc.
Page 8 Aggregate Rate-Limit Hierarchical Policies........... . 105 Example: Aggregate Marking with Oversubscription Rate-Limiting Hierarchical Policy ..105 viii Table of Contents Copyright © 2010, Juniper Networks, Inc.
Page 9: Release 11.1.1
Complete procedures for installing the system software are available in JunosE System Basics Configuration Guide, Chapter 3, Installing JunosE Software. New software releases are available for download from the Juniper Networks website at http://www.juniper.net/customers/support. You can use the downloaded image bundle to create your own software CDs.
Page 10: Moving Line Modules Between Releases
SRP Module Memory Requirements For Release 5.3.0 and higher-numbered software releases on ERX14xx models, ERX7xx models, and the Juniper Networks ERX310 Broadband Services Router, see ERX Module Guide, Table 1, ERX Module Combinations, for detailed information about memory requirements.
Page 11: Hardware And Software Compatibility
7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: http://www.juniper.net/customers/support/...
Page 12: Opening A Case With Jtac
JunosE 11.1.1 Release Notes Join and participate in the Juniper Networks Community Forum: http://www.juniper.net/company/communities/ Open a case online in the CSC Case Manager: http://www.juniper.net/cm/ To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool located at https://tools.juniper.net/SerialNumberEntitlementSearch/...
Page 13: Release Overview
The 11.1.x documentation set consists of several manuals and is available only in electronic format. You can print your own documentation using the PDF and HTML formats available at the Juniper Networks Technical Documentation Web site at www.juniper.net/techpubs. Refer to the following table to help you decide which document to use.
Page 14: Release Highlights
RADIUS server from AAA. DHCP Local Server now includes the DHCP options returned by RADIUS, along with other default or requested DHCP options, in DHCP OFFER and ACK responses. This feature is only supported in DHCP Standalone Authentication Mode. Release Highlights Copyright © 2010, Juniper Networks, Inc.
Page 15 Change in existing behavior: Existing feature extended as described here. In lower-numbered releases, DHCP Local Server did not include DHCP options returned from the RADIUS server as part of OFFER and ACK responses. This is no longer the case. Copyright © 2010, Juniper Networks, Inc. Release Highlights...
Page 16: Ipv6
The following command has been modified to support this feature: radius include The output of the following command has been modified to support this feature: show radius attribute-included Change in existing behavior: New feature added as described here. Release Highlights Copyright © 2010, Juniper Networks, Inc.
Page 17: Early Field Trial Features
The features described in this section are present in the code but have not yet been fully qualified by Juniper Networks. These features are available only for field test purposes in this release. If you use any of these features before they have been fully qualified, it is your responsibility to ensure that the feature operates correctly in your targeted configuration.
Page 18: Unsupported Features
The JunosE Release 11.1.x documentation set describes some features that are present in the code but that have not yet been fully qualified by Juniper Networks. If you use any of these features before they have been fully qualified, it is your responsibility to ensure that the feature operates correctly in your targeted configuration.
Page 19: Network Management Protocols
Extensible Authentication Protocol (EAP) Frame Relay Layer 2 Tunneling Protocol (L2TP) Multilink Frame Relay (MLFR) Multilink Point-to-Point Protocol (MLPPP) Packet over SONET (POS) Point-to-Point Protocol (PPP) PPP over Ethernet (PPPoE) Transparent bridging Copyright © 2010, Juniper Networks, Inc. Release Software Protocols...
Page 20: Security Protocols
The JunosE Software does not support accounting for ATM 1483 subscribers. The atm1483 keyword for the aaa accounting default command is present in the CLI, but it is not supported. SRC Software and SDX Software Compatibility Matrix Copyright © 2010, Juniper Networks, Inc.
Page 21: Atm
This behavior is compliant with RFC 2545 but might have interoperability issues with other implementations that depend on a link-local IPv6 address in the next-hop field on a directly connected external BGP peering. Work-around: Enable EBGP multihop configuration on the remote (non–Juniper Networks) peer. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 22: Bgp/Mpls Vpns
Any references to synchronization that appear in command output or system messages do not apply to the ERX310 router, which does not support SRP module redundancy. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 23 Interface Configuration ignore dcd Interface Configuration ignore link-state-signals Interface Configuration [ no ] ike crl Global Configuration [ no ] ipsec crl interface hssi Global Configuration invert tx clock Global Configuration Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 24 Group Configuration mode [ no ] next-interface Policy List Configuration forward interface in Classifier Group Configuration mode nrzi-encoding Interface Configuration no ospf enable Router Configuration ospf shutdown policy-list Global Configuration ip policy-list Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 26: Dhcp
− Release 8.2.3 and all 8.2.3 patch releases − Release 9.0.0 and all 9.0.0 patch releases − Release 9.0.1 and all 9.0.1 patch releases − Release 9.1.0 and all 9.1.0 patch releases Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 27: Dynamic Interfaces
When a member link is removed from a LAG bundle, traffic rate is disrupted and traffic flow is reduced. When the link goes down and then comes back up, the traffic flow is automatically redistributed. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 28: Flash
This integrity check is an expected side effect of the enhanced firmware available in this release. The integrity check does not indicate a problem with the flash card or its contents. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 29: Forwarding
350-00094-01 Rev. A01 or later. Spare R-Mid OCX I/O modules with an earlier assembly number are not supported for 1:5 redundancy configurations that use either the 4XOC3 APS MULTIMODE or 4XOC3 APS SINGLE MODE I/O module. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 30: Hdlc
#ip vrf 123 host1(config) #description 45678 host1(config-vrf) Examples of descriptions that are retained across the upgrade: #ip description longdescription host1(config-if) #ip vrf longername host1(config) #description 45678 host1(config-vrf) #ip vrf 123 host1(config) #description longdescription host1(config-vrf) Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 31 − Unnumbered interfaces that refer to nonloopback interfaces (for example, ip unnumbered fastEthernet 3/0.2) and that appear in the show configuration output before the interface referred to might generate similar no such interface errors. Work-around: Run the script twice. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 32: Ipsec
(P2P) connections on a broadcast circuit when only two routers (or, in this case, two VRs) are on the circuit. Issuing this command tears down the current existing IS-IS adjacency in that link and reestablishes a new adjacency. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 33: L2Tp
LNS session creation rate. The LNS session creation rate returns to its normal rate when NAT dynamic translations are no longer being generated. [Defect ID 53191] Work-around: When signaling performance must be optimal, avoid the simultaneous configuration of NAT and LNS. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 34: Line Module Redundancy
#mpls host1(config-if) If you do not explicitly configure MPLS on the links, the inter-AS feature will not work properly. You cannot use an underscore character (_) in an MPLS tunnel name. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 35: Multicast
The ip dipe sg-cache-miss and ipv6 dipe commands are not intended or supported for customer use, although they are visible in the User Exec and Privileged Exec modes respectively. These commands are intended to be used in a Juniper Networks internal lab environment for testing without a traffic generator.
Page 36: Packet Mirroring
CLI, override and remove any existing secure polices that were attached by a trigger action. If the interface-specific secure polices are subsequently deleted, the original trigger-based secure policies are not restored. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 37: Policy Management
The rule action that was applied was in the order (from highest to lowest preference): next interface, filter, next hop, forward. The applied rule was the rule whose behavior was seen by forwarded packets. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 38 The new Release 5.2.0 configuration behavior is applied—the last policy rule configured for a given classifier list that specifies a forwarding behavior is the only rule remaining. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 39: Ppp
Release 8.0.x or higher-numbered releases, remove the QoS profile from the Ethernet interface. When you have successfully upgraded to JunosE Release 8.0.x or higher-numbered releases, reattach the QoS profile to the LAG interface. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 40: Radius
JunosE Software provides extended commands for configuring the formats of the RADIUS NAS-Port attribute (attribute 5) and the RADIUS Calling-Station-ID attribute (attribute 31) when the physical port value is greater than 7. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 41: Snmp
SNMPv1-Trap-PDU enterprise field (...x.y.z) and specific trap number field (n); the zero is unused. The SNMPv1-formatted versions of the following Juniper Networks traps incorrectly contain ...x.y.z.0 in the SNMPv1-Trap-PDU enterprise field. That is, a zero is mistakenly appended to the correct enterprise OID value.
Page 42: Src Software And Sdx Software
IP tunnel relocation and for the tunnels to become operational again on the SM. If an SRP switchover occurs while in the pending state, the router performs a cold restart. Work-around: None. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 43: Subscriber Interfaces
ERX routers report a module as inactive when either: − The I/O module is not present − The primary line module is fully booted and ready to resume operation. In this case, the standby is currently providing services. Copyright © 2010, Juniper Networks, Inc. Known Behavior...
Page 44: System Logging
0.5 Gbps per module. In releases numbered lower than Release 7.3.0, a dynamic tunnel-server port was located on port 8 of the GE-HDE line module and GE-8 I/O module. Known Behavior Copyright © 2010, Juniper Networks, Inc.
Page 45: Known Problems And Limitations
Unified ISSU is not supported when ILMI is configured on ATM interfaces. [Defect ID 176007/177297/177122] ATM line modules reset after unified ISSU completes at the LAC when an MLPPP bundle with three links are tunneled to the LNS. [Defect ID 178821] Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 46: Bfd
− Do not use the ip auto-detect ip-subscriber command to enable packet triggering and to create dynamic subscriber interfaces − Ensure that DHCP external server is configured in the virtual router. Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 47: Dhcp External Server
/32 value matching the IP address of an ARP entry in order to validate the MAC address against that ARP entry. [Defect ID 79641] Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 48: Icr
.scr file is placed before the ICR partition configuration. However, this problem does not occur if you used a system configuration (.cnf) file to set up the router. [Defect ID 183913] Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 49: Igmp
The ES2 4G LM can reset during a unified ISSU after you issue the issu start command on a router configured with 8000 dynamic VCs and 8000 packet-triggered dynamic subscriber interfaces. [Defect ID 86761] Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 50: Ipsec
IPSec tunnels created over Fast Ethernet interfaces fail to come up. [Defect ID 179256] Work-around: After you create the tunnel, bounce the tunnel interface by issuing the shutdown/no shutdown command sequence. The tunnel comes up successfully. Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 51: Is-Is
[Defect ID 178653] Work-around: You can use the user@realm syntax instead to display the binding for a specific user, as in this example: host1#show ip mobile binding nai xyz@example.com Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 52: Mpls
(32 flows per VR). [Defect ID 74477] Work-around: After the cold switchover is completed, reissue the ip flow-sampling-mode packet-interval 10 command on each VR, even though the command is present in the configuration. Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 53: Policy Management
Referenced by interfaces field in the output of the show policy-parameter command does not change from the previously configured value to implicit. [Defect ID 183957] Work-around: To correct this problem, remove the entire interface configuration. Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 54: Pppoe
The no qos-parameter-define definition command does not delete the specified QoS parameter definition. [Defect ID 176844] Work-around: Remove the interface and add the desired QoS parameters when you re-create the interface instead of deleting the definition. Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 55: Rsvp-Te
Acct-Terminate-Cause value of 10. This value remains unchanged even after you use the terminate-code command to configure a custom mapping between application terminate reasons and RADIUS Acct-Terminate-Cause attributes. [Defect ID 181043] Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 56: Sonet
Subscriber Management When a dynamic GRE tunnel interface for Mobile IP relocates between SM modules because the original SM reloads, Mobile IP deletes the relocated tunnel interface. [Defect ID 178399] Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 57: System
Telnet session. − When the client that has the 5000 ANCP clients resets or an intermediate switch resets. − When you reload the line module. Copyright © 2010, Juniper Networks, Inc. Known Problems and Limitations...
Page 58: Unified Issu
Although the standby SRP module reloads for the second time when it is synchronized with the upgraded release, normal router operations, such as handling of subscriber sessions and forwarding of traffic, remain unaffected. [Defect ID 185517] Known Problems and Limitations Copyright © 2010, Juniper Networks, Inc.
Page 59: Resolved Known Problems
1" [Defect ID 90425] Forwarding Dynamic vlan sub-interfaces fail to be created after shutdown & mofidy vlan bulk-config vlan-range. [Defect ID 89962] LM10 handling of an SEL event. [Defect ID 89972] Copyright © 2010, Juniper Networks, Inc. Resolved Known Problems...
Page 60: Hardware
Line card redundancy is broken when a primary line card is STUCK IN BOOTING state and the router is reloading. [Defect ID 90898] LM4: reset type: panic; task: scheduler; file: vsm.cc - Vsm::addAciData [Defect ID 90723] Resolved Known Problems Copyright © 2010, Juniper Networks, Inc.
Page 61: Igmp
IPv6 PIM Data MDT Configuration mode but are unsupported in the current release: ipv6 pim join-filter mdt-data-timeout ipv6 pim query-interval route map mdt-data-delay tunnel group-address-pool mdt-data-holdown tunnel source Copyright © 2010, Juniper Networks, Inc. Resolved Known Problems...
Page 62: Ospf
Bad packets from LC corrupting fabric-PIF and congesting fabric [Defect ID 89896] Second reset of the linecard is attempted only after checking if the first Cbus panic didnt cause a reset. [Defect ID 90113] Resolved Known Problems Copyright © 2010, Juniper Networks, Inc.
Page 63: Vrrp
In this release, the L2TP failover protocol method for resynchronizing a failed L2TP endpoint with its non-failed peer is not supported. When L2TP is configured on the router, only the L2TP silent failover method is supported for unified ISSU. [Defect ID 179281] Copyright © 2010, Juniper Networks, Inc. Resolved Known Problems...
Page 64: Errata
(EOL) modules, which can no longer be ordered for ERX routers, E120 routers, and E320 routers: Module Name Module Type cOC3/STM1multimode cOC3/STM1 single-mode intermediate reach cOC3/STM1 single-mode long reach Errata Copyright © 2010, Juniper Networks, Inc.
Page 65 Guide, Chapter 6, Configuring IS-IS, the default time for the restarting router to wait for the LSP database to synchronize and to reset the overload bit is incorrectly mentioned as 30 seconds. The correct value is 100 seconds for both the instances. Copyright © 2010, Juniper Networks, Inc. Errata...
Page 66 1 icr-partition svlan-list 100 102 105 108 control-interface host1(config-if)# advertise-mac ip vrrp 1 icr-partition svlan-range 100 110 control-interface host1(config-if)# advertise-mac #ip vrrp 1 icr-partition svlan-list-explicit 120 1 120 2 control-interface host1(config-if) advertise-mac Errata Copyright © 2010, Juniper Networks, Inc.
Page 67 PIM sparse-mode interfaces tied to the loopback interface, Lp. host1(config)#virtual-router PE2 host1: PE2(config)#interface tunnel gre:MTI-21.mdt host1:PE2(config-if)#ip unnumbered loopback 0 host1:PE2(config-if)#ip pim sparse-mode host1:PE2(config-if)#exit host1:PE2(config)# host1:PE2(config)#interface tunnel gre:MTI-22.mdt host1:PE2(config-if)#ip unnumbered loopback 0 host1:PE2(config-if)#ip pim sparse-mode host1:PE2(config-if)#exit host1:PE2(config)# Copyright © 2010, Juniper Networks, Inc. Errata...
Page 68 (a value in the range 0–255). See Appendix B, Applying a ToS Mark to Color-Coded Packets in Aggregate Rate-Limit Hierarchical Policies, in these Release Notes for updated information. Errata Copyright © 2010, Juniper Networks, Inc.
Page 69 The correct syntax of the no version of this command is as follows: no ethernet oam lfm link-monitor frame-seconds [ threshold { high { highFrames | none } | low lowFrames } | window period ] Copyright © 2010, Juniper Networks, Inc. Errata...
Page 70 Using this syntax, you are not required to specify a threshold value or a time period. Both the threshold and window keywords are optional when you use the no form of this command. Errata Copyright © 2010, Juniper Networks, Inc.
Page 71 Error field incorrectly includes the following errors: − Internal allocation error of base RADIUS server table − Invalid virtual router for user's context These errors were never implemented in any version of JunosE Software. Copyright © 2010, Juniper Networks, Inc. Errata...
Page 73: Appendix A System Maximums
For some entries, early field trial (EFT) values are presented in addition to supported values. These values have not been fully qualified by Juniper Networks and are mentioned only for field test purposes in this release. EFT values are enclosed within parentheses with an EFT designation;...
Page 74: Erx310, Erx7Xx, And Erx14Xx System Maximums
Virtual routers per chassis 1000 1000 1000 1000 Virtual routers per line module ASIC 1000 1000 1000 1000 ICR Partitions per chassis ICR Partitions per line module ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 75: Physical And Logical Density Maximums
(CT3/T3 12 I/O modules) Fast Ethernet (10/100) ports per chassis 32/40 32/96 (FE-8 I/O and FE-8 SFP I/O modules) Gigabit Ethernet ports per chassis 4/12 (GE I/O modules) Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 76 (specified line module and all supported I/O modules) Logical E1s per cOCx/STMx F0 line module 63 per 63 per 63 per 63 per OC3/STM1 OC3/STM1 OC3/STM1 OC3/STM1 Logical E3s per COCX-F3 line module ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 77 Logical T3s per cOCx/STMx F0 line module 3 per OC3/STM1 3 per OC3/STM1 3 per OC3/STM1 3 per OC3/STM1 Logical T3s per CT3/T3-F0 Logical T3s per OCx/STMx/DS3-ATM line module with 4xDS3 ATM I/O module Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 78: Link Layer Maximums
OCx/STMx/DS3-ATM 32,000 32,000 32,000 32,000 OC3/STM1 GE/FE 32,000 32,000 32,000 32,000 ATM bulk configuration overriding profile assignments per chassis ATM VCs per chassis (active/configured) 16,000/32,000 32,000/64,000 32,000/64,000 48,000/96,000 ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 79 16,384 GE I/O 16,384 16,384 16,384 16,384 GE-2 SFP I/O 16,384 – – 16,384 GE-8 I/O 16,384 – – 16,384 OC3-2 GE APS I/O 16,384 16,384 16,384 16,384 Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 80 COCX-F3 cOCx/STMx F0 2000 2000 2000 2000 CT3/T3 F0 1992 1992 1992 1992 OCx/STMx/DS-3 ATM 8000 8000 8000 8000 OCx/STMx POS OC48 (ERX1440 router only) – – – ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 81 16,000 32,000 32,000 48,000 (See Note 1 on page 70.) Subinterfaces per GE/FE line module 8000 8000 8000 8000 Subinterfaces per GE-2 line module 8000 – – 8000 Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 82 Bridge interfaces per chassis in bridge groups or 16,000 32,000 32,000 32,000 VPLS instances Learned MAC address entries combined for all bridge groups 64,000 64,000 64,000 64,000 and VPLS instances on a chassis ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 83: Routing Protocol Maximums
The maximum number of interfaces can be achieved by any combination; for example, two streams each being replicated to 32,768 interfaces; 16,384 streams each being replicated four times; or any other combination. Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 84 MPLS forwarding entries 64,000 64,000 64,000 64,000 IS-IS adjacencies IS-IS routes 20,000 20,000 20,000 20,000 MPLS LDP LSPs 10,000 10,000 10,000 10,000 MPLS RSVP-TE LSPs 10,000 10,000 10,000 10,000 ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 85 (See Notes 10 and 11 on page 76.) Response Time Reporter simultaneous operations per VR on page 72 VRRP VRIDs per line module ASIC See Ethernet VRRP VRIDs per line module ASIC Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 86: Policy And Qos Maximums
(See Note 1 on page 78.) Unique hardware policy assignments per line 8127/16,255 8127/16,255 8127/16,255 8127/16,255 module for modules other than the GE-2, GE-HDE, and OC48/STM16 (See Note 2 on page 78.) ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 87 Software lookup blocks Per ASIC line module 16,383 16,383 16,383 16,383 Secure policies (for packet mirroring) Per ASIC line module 1022 1022 1022 1022 Per chassis 2400 2400 2400 2400 Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 88: Tunneling Maximums
IPSec transform sets per chassis 1000 1000 1000 1000 IPSec transforms per transform set IPSec tunnels per chassis 10,000 10,000 10,000 20,000 IPSec tunnels per IPSec Service Module 5000 5000 5000 5000 ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 89 – – 8000 GE-HDE with shared tunnel-server ports provisioned 8000 – – 8000 IPSec Service Module (L2TP/IPSec tunnels) 5000 5000 5000 5000 Service Module 8000 8000 8000 8000 Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 90: Subscriber Management Maximums
Client interfaces per chassis 16,000 32,000 32,000 48,000 Local address pools per virtual router 4000 4000 4000 4000 IP addresses per local address pool 32,000 32,000 32,000 32,000 ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 91 COPS client instances SRC clients SRC interfaces 16,000 32,000 32,000 48,000 Subscriber interfaces (See Note 2 on page 82.) Dynamic subscriber interfaces per chassis 16,000 32,000 32,000 48,000 Copyright © 2010, Juniper Networks, Inc. ERX310, ERX7xx, and ERX14xx System Maximums...
Page 92 Dynamic subscriber interfaces per line module 8000 8000 8000 8000 Static subscriber interfaces per chassis 16,000 32,000 32,000 48,000 Static subscriber interfaces per line module 8000 8000 8000 8000 ERX310, ERX7xx, and ERX14xx System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 93: E120 And E320 System Maximums
(See Notes 1 and 2 on page 85.) Virtual routers and VRFs per line module, combined 3000 3000 (See Notes 1 and 2 on page 85.) ICR Partitions per chassis ICR Partitions per line module Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 94: Physical And Logical Density Maximums
OC12/STM-4 ATM ports per chassis (ES2-S1 OC12-2 STM4 ATM IOAs) OC12/STM-4 POS ports per chassis (ES2-S1 OC12-2 STM4 POS IOAs) OC48/STM16 ports per chassis (ES2-S1 OC48 STM16 POS IOAs) E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 95 Table 9: Physical and Logical Density MaximumsTable continued on next page Feature E120 E320 Logical density per chassis Logical OC3/STM1 per chassis Logical OC12/STM4 per chassis Logical OC48/STM16 per chassis Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 96: Link Layer Maximums
No more than 8192 VLAN major interfaces are supported per line module. Table 10: Link Layer Maximums Feature E120 E320 ARP entries per line module Dynamic entries per LM 32,768 32,768 Static entries per ES2 4G LM 32,768 32,768 E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 97 ATM VP tunnels per port, all supported modules Bridged Ethernet interfaces per chassis 64,000 96,000 (See Notes 2 and 3 on page 88.) Bridged Ethernet interfaces per line module 16,000 16,000 (OCx/STMx ATM) Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 98 (with ES2 4G LM or ES2 10G LM) (See Note 5 on page 88.) ES2-S1 GE-8 IOA 32,768 32,768 (with ES2 10G ADV LM) (See Note 5 on page 88.) E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 99 MLPPP bundles supported per chassis or of the maximum number of interfaces supported on the line module. For more information, see the JunosE Link Layer Configuration Guide. Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 100 Bridge interfaces per chassis in bridge groups or VPLS 32,000 32,000 instances Learned MAC address entries combined for all bridge groups 64,000 64,000 and VPLS instances on a chassis E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 101: Routing Protocol Maximums
Sessions per line module for all modules other than ES2 4G ECMP maximum paths to a destination BGP, IS-IS, MPLS, OSPF, RIP IPv4 forwarding table entries per chassis 1,048,576 1,048,576 (See Note 1 on page 93.) Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 102 IPv6 routing table entries 100,000 100,000 (See Note 3 on page 93.) J-Flow statistics J-Flow–enabled VRs and VRFs, in any combination Sampled interfaces per VR or VRF Total sampled Interfaces per chassis E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 103 (SRP-100 or SRP-320) VRRP VRIDs per line module See Ethernet VRRP VRIDs per line See Ethernet VRRP VRIDs per line on page 91 on page 91 module module Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 104: Policy And Qos Maximums
QoS profile attachments per chassis 96,000 96,000 QoS profile attachments per line module ES2 4G LM 16,000 16,000 ES2 10G LM 16,000 16,000 ES2 10G ADV LM 32,000 32,000 E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 105 16,383 16,383 combined ATM, GRE, L2TP (LAC only), MPLS, and VLAN interface attachments ES2 10G LM 16,383 16,383 IP interface attachments ES2 10G LM 16,383 16,383 VLAN interface attachments Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 106 ES2 10G LM 8191 8191 (internal parent groups only) ES2 10G ADV LM 8191 8191 (internal parent groups only ES2 10G Uplink LM 8191 8191 (internal parent groups only) E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 107 ES2 10G ADV LM 32,000 32,000 ES2 10G Uplink LM 16,383 16,383 Secure policies (for packet mirroring) Per chassis 2400 2400 Per line module 1022 1022 (See Note 3 on page 96.) Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 108: Tunneling Maximums
L2TP tunnels per chassis for SRP-320 with ES2 4G 32,000 32,000 L2TP tunnels per line module with shared 8000 8000 tunnel-server ports provisioned (See Note 2 on page 100.) E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 109 Appendix A: System Maximums Table 13: Tunneling MaximumsTable continued on next page Feature E120 E320 L2TP tunnels per ES2-S1 Service IOA 16,000 16,000 (See Note 1 and Note 2 on page 100.) Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 110: Subscriber Management Maximums
DHCP relay proxy clients (per chassis for all virtual routers; 100,000 100,000 and per virtual router) Interfaces (per chassis for all virtual routers; and per virtual 64,000 96,000 router) E120 and E320 System Maximums Copyright © 2010, Juniper Networks, Inc.
Page 111 96,000 Static subscriber interfaces per ES2 4G LM 16,000 16,000 Static subscriber interfaces per ES2 10G LM 16,000 16,000 Static subscriber interfaces per ES2 10G ADV LM 32,000 32,000 Copyright © 2010, Juniper Networks, Inc. E120 and E320 System Maximums...
Page 113: Aggregate Rate-Limit Hierarchical Policies
S is color-aware so these Y packets do not take away G tokens, leaving them reserved only for the G packets coming from A, B, and C. Copyright © 2010, Juniper Networks, Inc. Example: Aggregate Marking with Oversubscription Rate-Limiting Hierarchical Policy...
Page 114 #yellow-mark 20 host1(config-color-mark-profile) #red-mark 20 host1(config-color-mark-profile) #exit host1(config-color-mark-profile) #ip color-mark-profile BC host1(config) #green-mark 10 host1(config-color-mark-profile) #yellow-mark 30 host1(config-color-mark-profile) #red-mark 30 host1(config-color-mark-profile) #exit host1(config-color-mark-profile) #policy-list TOS10_oversubscribed host1(config) Example: Aggregate Marking with Oversubscription Rate-Limiting Hierarchical Policy Copyright © 2010, Juniper Networks, Inc.
Page 115 #mark profile BC host1(config-policy-list-classifier-group) #exit host1(config--classifier-group) #classifier-group C parent-group S host1(config-policy-list) #rate-limit-profile indiv host1(config-policy-list-classifier-group) #mark profile BC host1(config-policy-list-classifier-group) #exit host1(config-policy-list-classifier-group) #parent-group S host1(config-policy-list) #rate-limit-profile S host1(config-policy-list-classifier-group) #exit host1(config-policy-list-classifier-group) Copyright © 2010, Juniper Networks, Inc. Example: Aggregate Marking with Oversubscription Rate-Limiting Hierarchical Policy...

This manual is also suitable for:

Junose 11.1.1

Juniper JUNOSE FOR E SERIES BROADBAND SERVICES ROUTERS - RELEASE NOTES 11.1.1 Release Note

Quick Links

Related Manuals for Juniper JUNOSE FOR E SERIES BROADBAND SERVICES ROUTERS - RELEASE NOTES 11.1.1

Summary of Contents for Juniper JUNOSE FOR E SERIES BROADBAND SERVICES ROUTERS - RELEASE NOTES 11.1.1

This manual is also suitable for:

Table of Contents