Juniper Networks EX3300-48T-BF
Support for converged data, voice, and video.

Virtual Chassis Technology

The EX3300 supports Juniper Networks Virtual Chassis technology, allowing up to 10 switches to be interconnected over uplink ports and be managed as a single logical device, delivering a scalable, pay-as-you-grow solution for expanding network environments.

When deployed in a Virtual Chassis configuration, the EX3300 switches elect a master and backup switch based on a set of criteria or preconfigured policies. The master switch automatically creates and updates the switching and optional routing tables on all switches in the Virtual Chassis configuration. Virtual Chassis technology allows switches to be added or removed without service disruption. An EX3300 Virtual Chassis configuration operates as a highly resilient unified system, providing simplified management using a single IP address, single telnet session, single command-line interface (CLI), automatic version checking, and automatic configuration. The EX3300 switches are also capable of local switching, so that packets coming into a port destined for another port on the same switch do not have to traverse the Virtual Chassis, increasing the forwarding capacity of the switch.

The EX3300 implements the same slot/module/port numbering schema as other Juniper Networks chassis-based products when numbering Virtual Chassis ports, providing true chassis-like operations. By using a consistent operating system and a single configuration file, all switches in a Virtual Chassis configuration are treated as a single device, simplifying overall system maintenance and management.

The last two uplink ports on the EX3300 front panel are configured by default as Virtual Chassis ports, automating Virtual Chassis deployments when these ports are connected using standard 10GbE SFP+ or GbE SFP transceivers (sold separately). These two ports can also be configured as GbE or 10GbE uplinks to aggregation devices by disabling Virtual Chassis technology.

Data Center Gigabit Ethernet Server Access

The EX3300 switches are optimized for GbE server access deployments in the data center, with front-to-back and backto-front cooling. The four SFP+ uplink ports on the EX3300 can operate at 10 Gbps simultaneously, offering up to 20GbE of uplink connectivity to each of the dual aggregation switches.

Features & Benefits:

Features	Benefits
Carrier-class reliability	EX Series switches leverage the same field-proven Juniper technology - including high-performance ASICs, a carrier-class system architecture, and JUNOS Software -- that powers the world's largest service provider networks.
Security risk management	EX Series switches tightly integrate with Juniper's Unified Access Control (UAC) solution, dynamically delivering network protection, guest access and identity-based QoS based on user, device, and location.
Performance	Each of the EX Series switches deliver wire-speed performance on all ports for any packet size.
Application control	The EX Series switches support eight QoS queues per port, ensuring proper prioritization of control plane, voice, video, and multiple levels of data traffic—with room to converge other networks, such as building automation and video security systems.
Lower total cost of ownership	The innovations of the EX Series switches enable new architectures that reduce cost and complexity. Unified management and automation tools consolidate system monitoring and maintenance and save time and money.

Converged LAN Environments

The EX3300 switches provide a flexible solution for demanding converged data, voice, and video environments. The EX3300-24P and EX3300-48P support the IEEE 802.3at Power over Ethernet (PoE) standard, also known as PoE+, delivering up to 30 watts of power per port to support networked devices such as telephones, video cameras, IEEE 802.11n wireless LAN (WLAN) access points, and video phones. The PoE+ standard provides nearly double the

The EX3300-48P includes a total PoE power budget of 740 watts, enabling the switch to provide the full 15.4 watts of 802.3af Class 3 PoE to all 48 ports, or the full 30 watts of PoE+ to 24 ports. The switch can support any combination of PoE and PoE+ ports until the maximum PoE power budget of 740 watts is exhausted.

The EX3300-24P includes a total power budget of 405 watts, enabling the switch to provide the full 15.4 watts of PoE power to all 24 ports, or the full 30 watts of PoE+ to 13 attached devices. The switch can support any combination of PoE and PoE+ ports until the maximum PoE power budget of 405 watts is exhausted.

There are two PoE power mode settings on the EX3300 switches:

• Static mode, which allows customers to specify the maximum PoE power setting on an individual port
• Class mode, which allows end devices to specify PoE class and negotiate whether the switch can provide PoE power to the device

The EX3300 also supports the industry-standard Link Layer Discovery Protocol (LLDP) and LLDP-Media Endpoint Discovery (LLDP-MED), which enable the switches to automatically discover Ethernet-enabled devices, determine their power requirements, and assign virtual LAN (VLAN) parameters.

In addition, the EX3300 supports rich quality-of-service (QoS) functionality for prioritizing data, voice, and video traffic. The switches support eight QoS queues on every port, enabling them to maintain multilevel, end-to-end traffic prioritization. The EX3300 also supports a wide range of scheduling options, such as priority and shaped deficit weighted round-robin (SDWRR) scheduling.

An optional enhanced license for supporting additional L3 protocols such as OSPF, Internet Group Management Protocol (IGMP v1/v2/v3), and Protocol Independent Multicast (PIM) will be supported in future. An external redundant power system (RPS) delivering additional power resiliency is also available.

Security

The EX3300 switches fully interoperate with Juniper Networks Unified Access Control, which consolidates all aspects of a user's identity, device, and location, enabling administrators to enforce access control and security down to the individual port or user levels. Working as an enforcement point within the UAC, the EX3300 provides both standards-based 802.1X port-level access control and Layer 2-4 policy enforcement based on user identity, location, and/or device. A user's identity, device type, machine posture check, and location can be used to not only grant or deny access but also to determine the duration of access. If access is granted, the switch assigns the user to a specific VLAN based on authorization levels. The switch can also apply QoS policies or mirror user traffic to a central location for logging, monitoring, or threat detection by intrusion prevention systems (IPS).

The EX3300 also provides a full complement of port security features, including Dynamic Host Configuration Protocol (DHCP) snooping, dynamic ARP inspection (DAI), and media access control (MAC) limiting to defend against internal and external spoofing, man-in-the-middle, and denial-of-service (DoS) attacks.

In addition, the EX3300 switches are hardware ready (with software support available in a future release) to support IEEE 802.1ae MACSec, providing support for link layer data confidentiality, data integrity, and data origin authentication.

Junos Operating System

The EX3300 switches run the same Junos OS used by other EX Series Ethernet Switches, as well as Juniper routers and Juniper Networks SRX Series Services Gateways. By utilizing a common operating system, Juniper delivers a consistent implementation and operation of control plane features across all products. To maintain that consistency, Junos OS adheres to a highly disciplined development process that uses a single source code, follows a single quarterly release train, and employs a highly available modular architecture that prevents isolated failures from bringing an entire system down.

These attributes are fundamental to the core value of the software, enabling all Junos OS-powered products to be updated simultaneously with the same software release. All features are fully regression tested, making each new release a true superset of the previous version; customers can deploy the software with complete confidence that all existing capabilities will be maintained and operate in the same way.

High Availability

The EX3300 line of Ethernet switches is designed to support many of the same failover capabilities and high availability (HA) functionality as the Juniper Networks EX4200 line of Ethernet switches with Virtual Chassis technology.

Each EX3300 switch is capable of functioning as a Routing Engine when deployed in a Virtual Chassis configuration. When two or more EX3300 switches are interconnected in a Virtual Chassis configuration, all member switches share a single control plane. Junos OS automatically initiates an election process to assign a master (active) and backup (hot-standby) Routing Engine. An integrated Layer 2 and Layer 3 graceful Routing Engine switchover (GRES) feature maintains uninterrupted access to applications, services, and IP communications in the unlikely event of a master Routing Engine failure.

When more than two switches are interconnected in a Virtual Chassis configuration, the remaining switch elements act as line cards and are available to assume the backup Routing Engine position should the designated master fail. Master, backup and line card priority status can be assigned by the network operations team to dictate the order of ascension. This N+1 Routing Engine redundancy, coupled with GRES, the nonstop routing (NSR) and, in the future, the nonstop bridging (NSB) capabilities of Junos OS, ensures a smooth transfer of control plane functions following unexpected failures.

The EX3300 also supports the following HA features:

• Redundant trunk group: To avoid the complexities of Spanning Tree Protocol (STP) without sacrificing network resiliency, the EX3300 employs redundant trunk groups to provide the necessary port redundancy and simplify switch configuration.
• Cross-member link aggregation: Cross-member link aggregation allows redundant link aggregation connections between devices in a single Virtual Chassis configuration, providing an additional level of reliability and availability.

Physical Specifications

Uplink

• Fixed 4-port uplinks which can be individually configured as GbE (SFP) or 10GbE (SFP+) ports.

Dimensions (W x H x D)

• 17.4 x 1.7 x 12 in (43.7 x 4.4 x 31 cm)

Weight Lbs (Kg)

• EX3300-48P: 12.8 lb (5.8 kg)
• EX3300-24P: 11.6 lb (5.3 kg)
• EX3300-48T: 10.8 lb (4.9 kg)
• EX3300-48T-BF: 10.8 lb (4.9 kg)
• EX3300-24T: 10.0 lb (4.6 kg)
• EX3300-24T-DC: 9.8 lb (4.5 kg)

Environmental Ranges

Operating temperature: 32° to 113° F (0° to 45° C)

Storage temperature: -40° to 158° F (-40° to 70° C)

Operating altitude: Up to 10,000 ft (3,049 m)

Non-operating altitude: Up to 16,000 ft (4,877 m)

Relative humidity operating: 10% to 85% (noncondensing)

Relative humidity non-operating: 0% to 95% (noncondensing)

Hardware Specifications

• Switching Engine Model: Store and forward
• DRAM: 1 GB with ECC
• Flash: 1 GB
• CPU: 1 GHz

GbE Port Density per System

• EX3300-24T/EX3300-24P/EX3300-24T-DC: 28 (24 host ports + four 10GbE/GbE uplink ports)
• EX3300-48T/EX3300-48T-BF/EX3300-48P: 52 (48 host ports + four 10GbE/GbE uplink ports)

Virtual Chassis Capabilities

• Maximum number of members: 10
• Number of Virtual Chassis ports: 4
• Maximum Virtual Chassis interconnect capacity: 80 Gbps

Physical Layer

• Time Domain Reflectometry (TDR) for detecting cable breaks and shorts
• Auto medium-dependent interface/medium dependent interface crossover (MDI/MDIX) support
• Port speed downshift/setting maximum advertised speed on 10/100/1000BASE-T ports
• Digital optical monitoring for optical ports

Packet Switching Capacities (Maximum with 64 Byte Packets)

• EX3300-24T, EX3300-24P, EX3300-24T-DC: 128 Gbps
• EX3300-48T, EX3300-48T-BF, EX3300-48P: 176 Gbps
• Layer 2/Layer 3 Throughput (Mpps):
  • 24P/24T/24T-DC: 95 Mpps
  • 48P/48T/48T-BF: 130 Mpps

Layer 2 Switching

• Maximum MAC addresses per system: 16,000
• Jumbo frames: 9,216 Bytes
• Number of VLANs: 4,096
• Range of possible VLAN IDs: 1-4,095
• Port-based VLAN
• MAC-based VLAN
• Voice VLAN
• Compatible with Per-VLAN Spanning Tree Plus (PVST+)
• RVI (Routed VLAN Interface)
• IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
• LLDP-MED with VoIP integration
• IEEE 802.1D: Spanning Tree Protocol
• IEEE 802.1p: CoS prioritization
• IEEE 802.1Q: VLAN tagging
• IEEE 802.1Q-in-Q: VLAN stacking
• IEEE 802.1s: Multiple Spanning Tree Protocol (MSTP)
• IEEE 802.1ak Multiple VLAN Registration Protocol (MVRP)
• Persistent MAC (sticky MAC)
• Number of MST instances supported: 64
• Number of VSTP instances supported: 253
• IEEE 802.1w: Rapid Spanning Tree Protocol (RSTP)
• RSTP and VSTP running concurrently
• IEEE 802.1X: Port access control
• IEEE 802.3: 10BASE-T
• IEEE 802.3u: 100BASE-T
• IEEE 802.3ab: 1000BASE-T
• IEEE 802.3z: 1000BASE-X
• IEEE 802.3af: PoE
• IEEE 802.3at: PoE+
• IEEE 802.3x: Pause frames/flow control
• IEEE 802.3ad: Link Aggregation Control Protocol (LACP)
• Layer 3 VLAN-tagged sub-interface
• NetBios snooping
• Multicast VLAN Registration (MVR)
• Metro
• PVLAN support:
  • IEEE 802.1ag connectivity fault management
  • ITU-T G.8032 Ethernet Ring Protection Switching
  • IEEE 802.1ad Q-in-Q tunneling
  • Multicast VLAN routing
  • Layer 2 Tunneling Protocol (L2TP)
  • Adding/removing single tag
• Filter-based SVLAN tagging
• Flexible CoS (outer .1P marking)

Layer 3 Features: IPv4

• Maximum number of Address Resolution Protocol (ARP) entries: 4,000
• Maximum number of IPv4 unicast routes in hardware: 8,000
• Layer 3 redundancy: VRRP
• Routing protocols:
  • RIP v1/v2
  • Static routing
  • OSPF v2
  • BGP v4
• IP directed broadcast - traffic forwarding
• Virtual router (VRF-Lite) supporting RIP, OSPF, BGP
• Routing policy
• Filter-based Forwarding (FBF)
• Unicast Reverse Path Forwarding (uRPF)
• Multiprotocol BGP (MBGP)

Layer 3 Features: IPv6 Management Functionality

• Neighbor discovery, system logging, Telnet, SSH, Junos Web, SNMP, Network Time Protocol (NTP), Domain Name System (DNS)
• Static routing
• IPv6 ACL (PACL, VACL, RACL)
• IPv6 CoS (BA, MF classification and rewrite, scheduling based on TC)
• MLDv1/v2 snooping
• IPv6 ping, traceroute
• IPv6 stateless auto-configuration
• IPv6 Layer 3 forwarding in hardware

Layer 3 Features: IPv6 Routing

• RIPng
• OSPF v3
• BGP v6
• IPv6 Layer 3 redundancy: VRRP v6
• Virtual Router support for IPv6 unicast
• PIM for IPv6 multicast
• MBGP

Supported RFCs

• RFC 2925 MIB for remote ping, trace
• RFC 1122 Host requirements
• RFC 768 UDP
• RFC 791 IP
• RFC 783 Trivial File Transfer Protocol (TFTP)
• RFC 792 Internet Control Message Protocol (ICMP)
• RFC 793 TCP
• RFC 826 Address Resolution Protocol (ARP)
• RFC 894 IP over Ethernet
• RFC 903 Reverse ARP (RARP)
• RFC 906 TFTP bootstrap
• RFC 1027 Proxy ARP
• RFC 2068 HTTP server
• RFC 1812 Requirements for IP Version 4 routers
• RFC 1519 Classless Interdomain Routing (CIDR)
• RFC 1256 IPv4 ICMP Router Discovery (IRDP)
• RFC 1058 RIP v1
• RFC 2453 RIP v2
• RFC 1492 TACACS+
• RFC 2138 RADIUS authentication
• RFC 2139 RADIUS accounting
• RFC 2710 Multicast Listener Discovery Version (MLD) for IPv6
• RFC 3579 RADIUS Extensible Authentication Protocol (EAP) support for 802.1X
• RFC 5176 Dynamic Authorization Extensions to RADIUS
• RFC 2267 Network ingress filtering
• RFC 2030 SNTP
• RFC 854 Telnet client and server
• RFC 951, 1542 BootP
• RFC 2131 BootP/DHCP relay agent and DHCP server
• RFC 1591 Domain Name System (DNS)
• RFC 2474 DiffServ Precedence, including 8 queues/port
• RFC 2598 DiffServ Expedited Forwarding (EF)
• RFC 2597 DiffServ Assured Forwarding (AF)
• LLDP-MED, ANSI/TIA-1057, draft 08
• RFC 2328 OSPF v2
• RFC 3768 VRRP
• RFC 3810 Multicast Listener Discovery Version 2 (MLDv2) for IPv6
• RFC 4271 BGP4
• RFC 4601 PIM-SM
• RFC 3973 PIM-DM
• RFC 3569 PIM-SSM
• RFC 3618 Multicast Source Discovery Protocol (MSDP)

Security

• MAC limiting
• Allowed MAC addresses, configurable per port
• Dynamic ARP inspection (DAI)
• Proxy ARP
• Static ARP support
• DHCP snooping
• IP source guard
• 802.1X port-based
• 802.1X multiple supplicants
• 802.1X with VLAN assignment
• 802.1X with authentication bypass access (based on host MAC address)
• 802.1X with VoIP VLAN support
• 802.1X dynamic access control list (ACL) based on RADIUS attributes
• 802.1X supported EAP types: Message Digest 5 (MD5), Transport Layer Security (TLS), Tunneled Transport Layer Security (TTLS), Protected Extensible Authentication Protocol (PEAP)
• Access control lists, (Junos OS firewall filters)
• Port-based ACL (PACL)-ingress and egress
• VLAN-based ACL (VACL)-ingress and egress
• Router-based ACL (RACL)-ingress and egress
• ACL entries (ACE) in hardware per system: 1,500
• ACL counter for denied packets
• ACL counter for permitted packets
• Ability to add/remove/change ACL entries in middle of list (ACL editing)
• L2-L4 ACL
• Trusted Network Connect (TNC) certified
• Static MAC authentication
• MAC-RADIUS
• Control plane denial-of-service (DoS) protection
• Firewall filter on me0 interface (control plane protection)
• Captive Portal - Layer 2 interfaces
• Fallback authentication

High Availability

• External redundant power system option
• Link aggregation:
  • 802.3ad (LACP) support
• Number of link aggregation groups (LAGs) supported: 32
• Maximum number of ports per LAG: 8
  • LAG load sharing algorithm-bridged unicast traffic
• IP: S/D MAC, S/D IP
• TCP/UDP: S/D MAC, S/D IP, S/D port
• Non-IP: S/D MAC
• LAG sharing algorithm-routed unicast traffic
  • IP: S/D IP
  • TCP/UDP: S/D IP, S/D port
• LAG load sharing algorithm-bridged multicast traffic
• IP: S/D MAC, S/D IP
  • TCP/UDP: S/D MAC, S/D IP, S/D port
  • Non-IP: S/D MAC
• LAG sharing algorithm-routed multicast traffic
  • IP: S/D IP
  • TCP/UDP: S/D IP, S/D port
• Tagged ports support in LAG
• Graceful Route Engine Switchover (GRES) for IGMP v1/v2/ v3 snooping
• Non-stop Routing (OSPF v1/v2/v3, RIP/RIPng, BGP, BGP v6, ISIS, PIM)
• Non-Stop Software Upgrade (NSSU)

Quality of Service (QoS)

• Layer 2 QoS
• Layer 3 QoS
• Ingress policing: 1 rate 2 color
• Hardware queues per port: 8
• Scheduling methods (egress): Strict Priority (SP), SDWRR
• 802.1p, DiffServ code point (DSCP/IP) precedence trust and marking
• L2-L4 classification criteria, including Interface, MAC address, Ethertype, 802.1p, VLAN, IP address, DSCP/IP precedence, and TCP/UDP port numbers
• Congestion avoidance capabilities: Tail drop

Multicast

• IGMP snooping entries: 3,000
• IGMP snooping
• IGMP v1/v2/v3
• PIM-SM, PIM-SSM, PIM-DM
• VRF-Lite support for PIM and IBMP
• MLD v1/v2 snooping
• IGMP filter
• Multicast Source Discovery Protocol (MSDP)
• PIM for IPv6 multicast
• MBGP

Services and Manageability

• Junos OS CLI
• Web interface Junos Web support
• Out-of-band management: Serial, 10/100BASE-T Ethernet
• ASCII configuration
• Rescue configuration
• Configuration rollback
• Image rollback
• Element management tools: Junos Space Network Management Platform
• Real-Time Performance Monitoring (RPM)
• SNMP: v1, v2c, v3
• Remote monitoring (RMON) (RFC 2819) Groups 1, 2, 3, 9
• Network Time Protocol (NTP)
• DHCP server
• DHCP client and DHCP proxy
• DHCP relay and helper
• VR-aware DHCP
• RADIUS authentication
• TACACS+ authentication
• SSHv2
• Secure copy
• HTTP/HTTPs
• DNS resolver
• System logging
• Temperature sensor
• Configuration backup via FTP/secure copy
• sFlow
• Interface range
• Port profile associations
• Ethernet OAM link fault management (LFM)
• Uplink Failure Detection (UFD)
• EZ Touchless Provisioning using DHCP

Supported MIBs

• RFC 2464 Transmission of IPv6 Packets over Ethernet Networks
• RFC 4862 IPv6 Stateless Address Autoconfiguration
• RFC 4443 ICMPv6 for the IPv6 Specification
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers
• RFC 1155 Structure of Management Information (SMI)
• RFC 1157 SNMPv1
• RFC 1905 RFC 1907 SNMP v2c, SMIv2, and revised MIB-II
• RFC 2570-2575 SNMPv3, user-based security, encryption, and authentication
• RFC 2576 Coexistence between SNMP Version 1, Version 2, and Version 3
• RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-like MIB, and traps
• RFC 2578 SNMP Structure of Management Information MIB
• RFC 2579 SNMP textual conventions for SMIv2
• RFC 2925 Ping/traceroute MIB
• RFC 2665 Ethernet-like interface MIB
• RFC 1643 Ethernet MIB
• RFC 1493 Bridge MIB
• RFC 2096 IPv4 forwarding table MIB
• RFC 2011 SNMPv2 for IP using SMIv2
• RFC 2012 SNMPv2 for transmission control protocol using SMIv2
• RFC 2013 SNMPv2 for user datagram protocol using SMIv2
• RFC 2863 Interface MIB
• RFC 3413 SNMP application MIB
• RFC 3414 User-based security model for SNMPv3
• RFC 3415 View-based access control model for SNMP
• RFC 3621 PoE-MIB (PoE switches only)
• RFC 1724 RIPv2 MIB
• RFC 2863 Interface group MIB
• RFC 2819 RMON MIB
• RFC 2287 System application packages MIB
• RFC 4188 STP and extensions MIB
• RFC 4363 Definitions of managed objects for bridges with traffic classes, multicast filtering, and VLAN extensions
• RFC 2922 LLDP MIB
• RFC 2328 OSPF v2
• RFC 5643 OSPF v3 MIB support
• RFC 1981 Path MTU discovery for IPv6
• RFC 2460 IPv6 specification
• RFC 3484 Default address selection for IPv6
• RFC 4291 IPv6 addressing architecture
• RFC 4861 Neighbor discovery for IPv6
• IEEE 802.1ad Q-in-Q
• Draft - blumenthal - aes - usm - 08
• Draft - reeder - snmpv3 - usm - 3desede -00

Troubleshooting

• Debugging: CLI via console, telnet, or SSH
• Diagnostics: Show and debug command statistics
• Traffic mirroring (port)
• Traffic mirroring (VLAN)
• Filter-based mirroring
• Mirroring destination ports per system: 1
• LAG port monitoring
• Multiple destination ports monitored to 1 mirror (N:1)
• Maximum number of mirroring sessions: 1
• Mirroring to remote destination (over L2): 1 destination VLAN
• IP tools: Extended ping and trace
• Juniper Networks commit and rollback

Safety Certifications

• UL-UL60950-1 (First Edition)
• C-UL to CAN/CSA 22.2 No.60950-1 (First Edition)
• TUV/GS to EN 60950-1, Amendment A1-A4, A11
• CB-IEC60950-1, all country deviations

Electromagnetic Compatibility Certifications

• FCC 47CFR Part 15 Class A
• EN 55022 Class A
• ICES-003 Class A
• VCCI Class A
• AS/NZS CISPR 22 Class A
• CISPR 22 Class A
• EN 55024
• EN 300386
• CE

Telecom Quality Management

• TL9000

Environmental

• Reduction of Hazardous Substances (ROHS) 6

Telco

• CLEI code

FIPS

• FIPS 140-2 Level 1

Documentation:

Download the Juniper Networks EX3300 Data Sheet (PDF).