Juniper

Editor's Notes

• #7: Speaker notes: In order to address all of those challenges, Juniper has created the Simply Connected portfolio. This portfolio combines from switching, security, wireless, and routing products. Each of those products is well capable of competing in its own space. The benefit of having the Simply Connected is our holistic approach to the enterprise mobility and BYOD or your network access. So when all of those products are working together, it allows us to provide you with more features and more qualities that will allow you to manage all of those trends or to tackle all those trends together. If you think about coordinated security, think about the unified policy story that I just told you.  Performance at scale and high resiliency — it’s an end-to-end story today, starting at the end device that the user chooses to use, all the way to the application that he would like to reach or use or to access. All of those pillars — the coordinated security, the performance and scale, and the highly resilient — need to address an end-to-end story. And this is what we are going to demonstrate moving forward.
• #12: Here is snap shot of the Juniper Networks SRX Series for the Branch Portfolio in 2012. In December of 2011 we announced the SRX110, and in Q1 2012 we announced the SRX550. The SRX550 shipped with Junos12.1 (FRS march 26th). The SRX550 plugs the price/performance gap between the 240 and 650 and is a flexible solution, ideal for mid to large branch offices. The Branch SRX product family continues to add coverage for the enterprise branch and commercial office. We have a model for every sized office. All branch SRX models support the same security and routing services and protocols. SRX100/110 are fixed form factor devices, ideal for Small Offices. SRX210 and SRX220 are ideal solutions for small to medium offices. SRX210 has 1 mini-PIM slots with 2 Gigabit Ethernet interfaces and 6 FE interfaces. SRX220 has 2 mini-PIM slots and 8 onboard Gigabit Ethrenet interfaces. SRX240 is ideal for medium offices with 4 built in mini-PIM slots and 16 on-board Gigabit Ethernet interfaces.SRX650 is great for large branch and regional offices with more LAN slots and dual processors and power supplies for increased availability.
• #13: Junos Space Network DirectorNetwork Director features a full life cycle management, including a pre and post deployment life cycle tools. With a single plane visibility to manage network infrastructure, user and experiences, and it runs on top of Junos Space. In its initial release it manages the EX switching and wireless product lines. In terms of the life cycle, it includes plan and build, configure and deploy, visualize and monitor, troubleshoot, and report. NOTES:Build mode is used to discover the devices in the network and to create and manage device configurations. Semantics and discovery of devices can be done using various mechanisms CSV import, IP range, subnet sweep or targeting discovery using IP or hostname. SNMP and ICMP based mechanisms are used to detect Juniper devices.  Build mode is also the area where devices can be organized into hierarchal groupings based on logical relationships or physical locations.  Configuration in Network Director is done using profiles. Profiles are snippets of configuration that are created using wizards that seamlessly handle various configuration elements from device specific configuration, port configuration (including authentication options, POE settings etc.), VLANs, ACLs and WLAN configuration. Profiles are easily associated to a device, port, and collection of devices, logical entities or even physical locations. To avoid errors the configuration created through associated profiles for the device is validated to see for its applicability Brownfield deployments are supported within Network Director - as devices are discovered their configurations are parsed for various elements to map the configuration to profiles. Multiple devices with the same configuration would have a single profile created and be associated to those devices.  Profiles offer users scalability, flexibility and rapid deployment of configuration. It also eliminates errors and repetitive tasks__________________________________________________________________________Deploy mode is where device related changes – image management, configuration pushes, reconciliation is done. As with other modes, actions can be done on a device or group of devices or location entities.  Software image management. Network Director maintains a repository of software images that have been uploaded to Network Director. Multiple software images from the repository on multiple devices can be deployed in a single job. Devices can be selected based on location or device model or role of the device in the network. You can separate the staging of the image—that is, downloading the software package to the device—from the actual installation of the package. Both the individual steps of staging and upgrade can be performed immediately or scheduled.  Initiate, schedule and track configuration deployment. Changes to a device’s configuration done in Build mode result in the device being added to a list of devices with pending changes, in Deploy mode, you can deploy those pending changes on the device. Device configuration resynchronization. When a device is discovered, its configuration is read and saved. Network Director uses this information to determine what configuration commands to send to the device when you deploy configuration on the device. Network Director will detect if a configuration on a device if its configuration is out-of-sync. Deploy mode provides a task for you to do so. The administrator has the option to keep the Network Director configuration or change Network Director’s configuration database to reflect what is seen on the network.  Device configuration file backup and restore. Switch or WLAN configuration may be backed up in Network Director and at a later point the administrator can choose to restore an archived configuration to the network._________________________________________________________________ The Monitor mode provides visibility into network status and performance by collecting monitoring information from devices and maintaining the information it collects from the devices in a database. Monitor lifecycle offers a an easy-to-understand graphs and in tables that can be sorted and filtered, allowing you to quickly visualize the state of your network, spot trends developing over time, and find important details. Monitor lifecycle divides monitoring activity into the following categories: Traffic Monitoring:Traffic view provides information for analyzing traffic on switches and wireless LAN. It provides an overview of the traffic on each device, such as proportion of multicast, unicast, broadcast traffic or the trend in packet errors. Tasks provide detailed looks at traffic on individual ports or VLANs, port utilization, and so on. Client MonitoringThe Client view provides information about clients and sessions on the network such as mobile devices, VoIP phones, laptops, printers, security cameras. It provides overall client session activity: total number ofsessions, sessions consuming the most bandwidth, and trends in the number of sessions. In addition detailed information about each client, such as MAC address, IP address, user name (802.1X clients), client VLAN, and port or access point the client is connected to.  Wireless (RF) MonitoringThe RF view provides information about radio frequency (RF) performance, such as throughput, retransmissions, packet errors, signal-to-noise ratio, and interference sources. It provides visibility to radio’s neighbors and to display spectrograms for troubleshooting interference. Equipment MonitoringThe Equipment view provides resource usage and status information for the devices. It provides CPU and memory use, power supply and fan status, port status, and general device information for switches including Virtual Chassis and wireless LAN controllers, access points and radios. Monitoring mode highlights:• Monitoring and Alarms Network elements• Roll up of alerts & network traffic by infrastructure (port, device, network) and location• Device, cluster and VC status & availability• Watch lists on events that occurred with overlay of service outage information• Up to 1 year of trended dataUser centric• User statistics & session status• Device profiling• Present location & roaming history• Session related alarms - authentication and authorization failures, • Threshold crossing, invalid IP address etc.Security• WIDS/WIPS alarmsServices • Guest, voice• View of current service outages (network access service)RFViews• RF parameters (SNR, Utilization etc.)• Spectrum management____________________________________________________________________________The Fault mode provides visibility into unexpected network events and manages network faults or exceptions, which are presented as alarms in Network Director. Network Director collect, analyzes and correlating these low-level events into alarms and allows the user to view monitors that display current active alarms and summaries of alarms categorized in addition to viewing alarm details, including the individual events that are correlated to an alarm. Fault mode highlights:• Processing alarms by severity, category, and state• Status, performance, threshold• De-duplication, correlation with monitoring• Thresholds, outages and trends • Receive SNMP traps directly from devices • Generate and display events and alarms• Acknowledge, escalate, and clear alarms• Detect device faults based on data collected from devices____________________________________________________________________________Report mode enables administrators to run reports on the data that Network Director collects and stores on the server. Network Director can set up report definition that specifies the format of the report (HTML, PDF, CSV), the historical time frame the report covers, and the report content. You can choose between predefined report content for reporting on alarms, Network Directory activity, device inventory, sessions, traffic and RF information. The scope selected can be a device, a location or a group of devices. Reports can be scheduled, allowing the report to run at a specified time in the future or on a recurring basis. Generated reports are stored on Network Director, where they are available for downloading. You can also choose to have them delivered through e-mail or to archive them to a SCP file server when you create the report definition.