Virtual Chassis Technology

Juniper’s Virtual Chassis technology allows multiple interconnected

switches to operate as a single, logical unit, enabling users to

manage all platforms as one virtual device. Up to 10 EX4100

switches can be interconnected as a Virtual Chassis using 4 x

25GbE SFP28 dedicated front-panel ports. Although configured as

Virtual Chassis ports by default, the 4 x 25GbE SFP28 uplinks can

also be configured as uplink ports. The EX4100 switches can form a

Virtual Chassis with any other models within the EX4100 product

line.

Microsegmentation Using Group-Based Policy

GBP leverages underlying VXLAN technology to provide location-

agnostic endpoint access control. This allows network

administrators to implement consistent security policies across the

enterprise network domains. The EX4100 supports a standards-

based GBP solution, allowing different levels of access control for

endpoints and applications even within the same VLAN. Customers

can simplify their network configuration by using GBP, avoiding the

need to configure large numbers of firewall filters on all their

switches. GBP can block lateral threats by ensuring consistent

application of security group policies throughout the network,

regardless of the location of endpoints and/or users.

Flow-Based Telemetry

Flow-based telemetry enables flow-level analytics, allowing network

administrators to monitor thousands of traffic flows on the EX4100

without burdening the CPU. This improves network security by

monitoring, baselining, and detecting flow anomalies. For example,

if predefined flow thresholds are breached due to an attack, IP Flow

Information Export (IPFIX) alerts can be sent to an external server

to quickly identify the attack. Network administrators can also

automate specific workflows, such as further examining the traffic

or quarantining a port, to triage the issue. In addition to DOS

attacks, Flow-Based Telemetry on EX4100 switches can measure

packet delays at ingress, chip, and egress points, as well as report

drop reasons.

Features and Benefits

Simplified Operations with Juniper Mist Wired Assurance

The EX4100 is fully cloud onboarded, provisioned, and managed by

Juniper Mist Wired Assurance. The EX4100 is designed from the

ground up to deliver the rich telemetry that enables AI for IT

Operations (AIOps) with simplified operations from Day 0 to Day 2

and beyond. Juniper Mist Wired Assurance provides detailed switch

insights for easier troubleshooting and improved time to resolution

by offering the following features:

• Day 0 operations—Onboard switches seamlessly by claiming a

greenfield switch or adopting a brownfield switch with a single

activation code for true plug-and-play simplicity.

• Day 1 operations—Implement a template-based configuration

model for bulk rollouts of traditional and campus fabric

deployments, while retaining the flexibility and control required

to apply custom site- or switch-specific attributes. Automate

provisioning of ports via Dynamic Port Profiles.

• Day 2 operations—Leverage the AI in Juniper Mist Wired

Assurance to meet service-level expectations such as

throughput, successful connects, and switch health with key

pre- and post-connection metrics (see Figure 1). Add the self-

driving capabilities in Marvis Actions to detect loops, add

missing VLANs, fix misconfigured ports, identify bad cables,

isolate flapping ports, and discover persistently failing clients

(see Figure 2). And perform software upgrades easily through

Juniper Mist Cloud.

Figure 2: Juniper Mist Wired Assurance service-level expectations screen

EX4100 Line of Ethernet Switches Datasheet

3