• Number of LAGs supported: 128

- Maximum number of ports per LAG: 8

• LAG load-sharing algorithm bridged or routed (unicast or

multicast) traffic:

- IP: S/D IP

- TCP/UDP: S/D IP, S/D Port

- Non-IP: S/D MAC

- Tagged ports support in LAG

Layer 3 Features: IPv4

• Maximum number of ARP entries: 32,000

• Maximum number of IPv4 unicast routes in hardware: 32,650

prefixes; 32,150 host routes

• Maximum number of IPv4 multicast routes in hardware:

16,100 multicast routes

• Routing protocols: RIPv1/v2, OSPF, BGP, IS-IS

• Static routing

• Routing policy

• Bidirectional Forwarding Detection (BFD)

• L3 redundancy: Virtual Router Redundancy Protocol (VRRP)

• VRF-Lite: 1000

Layer 3 Features: IPv6

• Maximum number of neighbor discovery (ND) entries: 16,000

• Maximum number of IPv6 unicast routes in hardware: 16,200

prefixes; 16,050 host routes

• Maximum number of IPv6 multicast routes in hardware: 8000

multicast routes

• Routing protocols: RIPng, OSPFv3, IPv6, IS-IS

• Static routing

Access Control Lists (ACLs) (Junos OS Firewall Filters)

• ACL entries (ACE) in hardware per system:

- Port-based ACL (PACL) ingress: 4092

- VLAN-based ACL (VACL) ingress: 4092

- Router-based ACL (RACL) ingress: 4092

- Port-based ACL (PACL) egress: 1022

- VLAN-based ACL (VACL) egress: 511

- Egress across RACL: 1022

- ACL counter for denied packets

• ACL counter for permitted packets

• Ability to add/remove/change ACL entries in middle of list

(ACL editing)

• L2-L4 ACL

Access Security

• 802.1X port-based

• 802.1X multiple supplicants

• 802.1X with VLAN assignment

• 802.1X with authentication bypass access (based on host MAC

address)

• 802.1X with VoIP VLAN support

• 802.1X dynamic ACL based on RADIUS attributes

• 802.1X Supported Extensible Authentication Protocol (EAP)

types: Message Digest 5 (MD5), Transport Layer Security (TLS),

Tunneled TLS (TTLS), Protected Extensible Authenticated

Protocol (PEAP)

• MAC authentication (RADIUS)

• Control plane DoS protection

• Radius functionality over IPv6 for authentication,

authorization, and accounting (AAA)

• DHCPv6 snooping

• IPv6 neighbor discovery

• IPv6 source guard

• IPv6 router advertisement (RA) guard

• IPv6 Neighbor Discovery Inspection

• MACsec

High Availability

• Redundant, hot-swappable power supplies

• Redundant, field-replaceable, hot-swappable fans

• GRES for Layer 2 hitless forwarding and Layer 3 protocols on

RE failover

• Graceful protocol restart (OSPF, BGP)

• Layer 2 hitless forwarding on RE failover

• Nonstop bridging: LACP, xSTP

• Nonstop routing: PIM, OSPF v2 and v3, RIP v2, RIPng, BGP,

BGPv6, IS-IS, IGMP v1, v2, v3

Quality of Service

• L2 QoS

• L3 QoS

• Ingress policing: 1 rate 2 color

• Hardware queues per port: 12 (8 unicast + 4 multicast)

• Scheduling methods (egress): Strict priority (SP), weighted

deficit round-robin (WDRR)

• 802.1p, DiffServ code point (DSCP)/IP precedence trust and

marking

• L2-L4 classification criteria: Interface, MAC address, Ethertype,

802.1p, VLAN, IP address, DSCP/IP precedence, TCP/UDP

port numbers, and more

EX4100 Line of Ethernet Switches Datasheet

11