EX3400-48T 48 Port Switch
48-port 10/100/1000BASE-T, 4 x 1/10GbE SFP/SFP+, 2 x 40GbE QSFP+, redundant fans, front-to-back airflow, 1 AC PSU JPSU-150-AC-AFO
EX3400 Ethernet Switches are a cost-effective solution for today’s most demanding converged data, voice, and video enterprise access networks. The compact, fixed-configuration 1U devices offer levels of performance and management previously available only with high-end access switches.
The EX3400 is cloud-ready and ZTP-enabled, so you can onboard, configure, and manage it with Juniper Mist™ Wired Assurance for improved connected-device experiences. In addition, the Juniper Mist Cloud streamlines deploying and managing your campus fabric, while Mist AI simplifies operations and improves visibility into the performance of connected devices. EX3400 switches support Juniper’s Virtual Chassis technology for interconnecting up to 10 switches that can be managed as a single logical device.
The Juniper Networks® EX3400 Ethernet Switch with Juniper Networks Virtual Chassis technology provides enterprises with the flexibility and ease of management that previously was only available with higher-end access switches. The fixed-configuration EX3400 supports a number of key features, including:
• 24-port and 48-port models with and without Power over Ethernet (PoE/PoE+) are for campus wiring closet deployments.
• Cloud-ready and zero-touch provisioning (ZTP)-enabled for Juniper Mist Wired Assurance
• Data center-optimized cooling options offer both front-to-back and back-to-front airflows, making the EX3400 suitable for GbE data center access deployments.
• Two redundant, field-replaceable power supplies each provide up to 920 watts of power.
• 24-port data center models are included for metro deployments.
• Four dual-mode (GbE/10GbE) small form-factor pluggable transceiver (SFP/SFP+) uplink ports and two 40GbE QSFP+ ports are available.
• Uplink ports can be configured as Virtual Chassis interfaces and connected via standard 10GbE/40GbE optic interfaces (40GbE uplink ports are preconfigured by default as Virtual Chassis ports).
• Comprehensive Layer 2 functionality with RIP and static routing is provided.
• A compact, 13.8-inch deep 1 U form factor supports flexible deployment options.
• An easy-to-manage solution includes centralized software upgrades.
• Support is available for the same consistent modular Juniper Networks Junos operating system control plane feature implementation used by all other Juniper fixed-configuration Juniper
• Networks EX Series Ethernet Switches.
• Support is provided for Layer 3 (OSPF v2, IGMP v1/v2/v3, PIM, VRRP, BFD, virtual router) via an enhanced feature license (optional license required).
• Support is available for IPv6 management, including neighbor discovery, stateless auto configuration, telnet, SSH, DNS, system log, NTP, ping, traceroute, ACL, CoS static routing, and RIPng.
• IPv6 routing features (OSPFv3, virtual router support for unicast, VRRPv6, PIM, MLDv1/v2) are supported via an enhanced feature license.
• Support is available for Border Gateway Protocol (BGP), multiprotocol BGP (MBGP), and Intermediate System-to-Intermediate System (IS-IS) via an optional Advanced Feature license.
• Energy Efficient Ethernet (EEE) capability is provided.
Juniper Networks EX3400 Ethernet Switch delivers a high-performance, flexible, and cost-effective solution for today’s most demanding converged data, voice, and video enterprise access environments.
The EX3400 supports Juniper Networks Virtual Chassis technology, allowing up to 10 switches to be interconnected over uplink ports and managed as a single device, delivering a scalable, pay-as-you-grow solution for expanding network environments.
The EX3400 is onboarded, provisioned, and managed in the Juniper Mist Cloud Architecture. Mist Wired Assurance delivers better experiences for connected devices through AI-powered automation and service levels.
Architecture and Key Components
Cloud Management with Juniper Mist Wired Assurance
Juniper Mist Wired Assurance, a cloud-based service driven by Mist AI to claim, configure, manage, and troubleshoot the EX3400, delivers AI-powered automation and service levels to ensure a better experience for connected devices. Wired Assurance leverages rich Junos switch telemetry data to simplify operations, reduce mean time to repair, and improve visibility. Wired Assurance offers the following features:
• Day 0 operations - Onboard switches seamlessly by claiming a greenfield switch or adopting a brownfield switch with a single activation code for true plug-and-play simplicity.
• Day 1 operations - Implement a template-based configuration model for bulk rollouts of traditional and campus fabric deployments, while retaining the flexibility and control required to apply custom site- or switch-specific attributes. Automate provisioning of ports via Dynamic Port Profiles.
• Day 2 operations - Leverage the AI in Juniper Mist Wired Assurance to meet service-level expectations such as throughput, successful connects, and switch health with key pre- and post-connection metrics (see Figure 1). Add the self-driving capabilities in Marvis Actions to detect loops, add missing VLANs, fix misconfigured ports, identify bad cables, isolate flapping ports, and discover persistently failing clients (see Figure 2). And perform software upgrades easily through Juniper Mist cloud.
The addition of Marvis, a complementary Virtual Network Assistant driven by Mist AI, lets you start building a self-driving network that simplifies network operations and streamlines troubleshooting via automatic fixes for EX Series switches or recommended actions for external systems.
Virtual Chassis Technology
The EX3400 supports Juniper Networks Virtual Chassis technology, allowing up to 10 switches to be interconnected over uplink ports and managed as a single logical device, delivering a scalable, pay-as-you-grow solution for expanding network environments.
When deployed in a Virtual Chassis configuration, the EX3400 switches elect a primary and backup switch based on a set of criteria or preconfigured policies. The primary switch automatically creates and updates the switching and optional routing tables on all switches in the Virtual Chassis configuration. Virtual Chassis technology allows switches to be added or removed without service disruption. An EX3400 Virtual Chassis configuration operates as a highly resilient unified system, providing simplified management using a single IP address, single telnet session, single command-line interface (CLI), automatic version checking, and automatic configuration.
The EX3400 switches are also capable of local switching, so that packets coming into a port destined for another port on the same switch do not have to traverse the Virtual Chassis, increasing the forwarding capacity of the switch.
The EX3400 implements the same slot/module/port numbering schema as other Juniper Networks chassis-based products when numbering Virtual Chassis ports, providing true chassis-like operations. By using a consistent operating system and a single configuration file, all switches in a Virtual Chassis configuration are treated as a single device, simplifying overall system maintenance and management.
The two QSFP+ ports on the EX3400 switch can be configured as Virtual Chassis ports or as uplinks to aggregation devices.
Campus Fabric Deployments
Juniper campus fabrics support these validated architectures with the EX3400 switch playing the role of access switch:
EVPN multihoming (collapsed core or distribution): A collapsed core architecture combines the core and distribution layers into a single switch, turning the traditional three-tier hierarchal network into a two-tier network. This eliminates the need for STP across the campus network by providing multihoming capabilities from the access to the core layer. EVPN multihoming can be deployed and managed using the Juniper Mist cloud.
Core/distribution: A pair of interconnected EX Series core or distribution switches provide L2 EVPN and L3 VXLAN gateway support. The EVPN-VXLAN network between the distribution and core layers offers two modes: centrally or edge routed bridging overlay.
In all these EVPN-VXLAN deployment modes, EX3400 switches can be used as an access layer switch.
Managing AI-Driven Campus Fabric with the Juniper Mist Cloud
Juniper Mist Wired Assurance brings cloud management and Mist AI to campus fabric. It sets a new standard moving away from traditional network management towards AI-driven operations, while delivering better experiences to connected devices. The Juniper Mist Cloud streamlines deployment and management of campus fabric architectures by allowing:
• Automated deployment and zero touch deployment
• Anomaly detection
• Root cause analysis
Juniper Virtual Chassis
Virtual Chassis technology simplifies network management for smaller deployments. Up to 10 interconnected EX3400 switches can be managed as a single device utilizing a single Junos OS image and a single configuration file, reducing the overall number of units to monitor and manage. When the Junos OS is upgraded on the primary switch in an EX3400 Virtual Chassis configuration, the software is automatically upgraded on all other member switches at the same time.
In addition, a feature called system snapshot makes a copy of all software files used to run the switch, including the Junos operating system, the active configuration, and the rescue configuration. These copies can be used to reboot the switch the next time it is powered up or as a backup boot option. The Junos OS software can also be preinstalled on a flash drive and used to boot the EX3400 at any time.
Another feature, called automatic software download, enables network administrators to easily upgrade the EX3400 using the DHCP message exchange process to download and install software packages. Users simply configure the automatic software download feature on EX3400 switches acting as DHCP clients and establish a path to the server where the software package file is installed. The server then communicates the path to the software package file through DHCP server messages.
The ZTP feature allows a DHCP server to push configuration details and software images to multiple switches at boot-up time.
Power
The EX3400 supports the 802.3af Class 3 Power over Ethernet (PoE) and 802.3at PoE+ standards for supporting networked devices such as telephones, video cameras, IEEE 802.11ac WLAN access points, and videophones in converged networks. While EX3400 switches ship with a single power supply by default, they can support redundant 600W or 920W power supplies that provide PoE (15.4W) or PoE+ (30W) power to all ports in the switch. Spare power supplies can be ordered as needed.
There are two PoE power mode settings on the EX3400 switches:
• Static mode allows customers to specify the maximum PoE power setting on an individual port.
• Class mode allows end devices to specify PoE class and negotiate whether the switch can provide PoE power to the device.
The EX3400 also supports the industry-standard Link Layer Discovery Protocol (LLDP) and LLDP-Media Endpoint Discovery (LLDP-MED), which enable the switches to automatically discover Ethernet-enabled devices, determine their power requirements, and assign virtual LAN (VLAN) parameters. LLDP-MED-based granular PoE management allows the EX3400 to negotiate PoE usage down to a fraction of a watt on powered devices, enabling more efficient PoE utilization across the switch.
The EX3400 supports the IEEE 802.3az standard for Energy Efficient Ethernet (EEE) functionality, reducing power consumption of copper physical layers during periods of low link utilization.
In addition, the EX3400 supports rich quality-of-service (QoS) functionality for prioritizing data, voice, and video traffic. The switches support 12 QoS queues (8 unicast and 4 multicast) on every port, enabling them to maintain multilevel, end-to-end traffic prioritization. The EX3400 also supports a wide range of scheduling options, such as priority and shaped-deficit weighted round-robin (SDWRR) scheduling.
Security
The EX3400 switches fully interoperate with Juniper Networks Access Policy Infrastructure, which consolidates all aspects of a user’s identity, device, and location, enabling administrators to enforce access control and security down to the individual port or user levels. Working as an enforcement point in the Access Policy Infrastructure, the EX3400 provides both standards-based 802.1X port-level access control and Layer 2-4 policy enforcement based on user identity, location, device, or a combination of these. A user’s identity, device type, machine posture check, and location can be used to not only grant or deny access but also to determine the duration of access. If access is granted, the switch assigns the user to a specific VLAN based on authorization levels. The switch can also apply QoS policies or mirror user traffic to a central location for logging, monitoring, or threat detection by an intrusion prevention system (IPS).
The EX3400 also provides a full complement of port security features, including Dynamic Host Configuration Protocol (DHCP) snooping, dynamic ARP inspection (DAI), and media access control (MAC) limiting to defend against internal and external spoofing, man-in-the-middle, and denial-of-service (DoS) attacks.
MACsec
EX3400 switches support IEEE 802.1ae MACsec, providing support for link-layer data confidentiality, data integrity, and data origin authentication. The MACsec feature enables the EX3400 to support 88 Gbps of near line-rate hardware-based traffic encryption on all GbE and 10GbE ports.
Defined by IEEE 802.1AE, MACsec provides secure, encrypted communication at the link layer that is capable of identifying and preventing threats from DoS and intrusion attacks, as well as man-in-the-middle, masquerading, passive wiretapping, and playback attacks launched from behind the firewall. When MACsec is deployed on switch ports, all traffic is encrypted on the wire but traffic inside the switch is not. This allows the switch to apply all network policies such as QoS, deep packet inspection, and sFlow to each packet without compromising the security of packets on the wire.
Hop-by-hop encryption enables MACsec to secure communications while maintaining network intelligence. In addition, Ethernet-based WAN networks can use MACsec to provide link security over long-haul connections. MACsec is transparent to Layer 3 and higher-layer protocols and is not limited to IP traffic—it works with any type of wired or wireless traffic carried over Ethernet links.
Junos Operating System
The EX3400 switches run the same Junos OS that is used by other Juniper Networks EX Series Ethernet Switches, QFX Series Switches, Juniper Routers, Juniper SRX Firewalls, and the Juniper NFX Series Network Services Platform. By utilizing a common operating system, Juniper delivers a consistent implementation and operation of control plane features across all products. To maintain that consistency, Junos OS adheres to a highly disciplined development process that uses a single source code and employs a highly available modular architecture that prevents isolated failures from bringing an entire system down.
These attributes are fundamental to the core value of the software, enabling all Junos OS-powered products to be updated simultaneously with the same software release. All features are fully regression tested, making each new release a true superset of the previous version. Customers can deploy the software with complete confidence that all existing capabilities are maintained and operate in the same way.
Converged Environments
The EX3400 switches provide a flexible solution for demanding converged data, voice, and video environments. The EX3400-24P and EX3400-48P support PoE+, delivering up to 30 watts of power per port to support networked devices such as telephones, video cameras, IEEE 802.11ac wireless LAN (WLAN) access points, and videophones. The PoE+ standard provides nearly double the 15.4 watts per port available with the IEEE 802.3af PoE standard.
High Availability
The EX3400 line of Ethernet switches is designed to support many of the same failover capabilities and high availability (HA) functionality as other Juniper EX access switches with Virtual Chassis technology.
Each EX3400 switch is capable of functioning as a Routing Engine (RE) when deployed in a Virtual Chassis configuration. When two or more EX3400 switches are interconnected in a Virtual Chassis configuration, all member switches share a single control plane. Junos OS automatically initiates an election process to assign a primary (active) and backup (hot-standby) Routing Engine. An integrated Layer 2 and Layer 3 graceful Routing Engine switchover (GRES) feature maintains uninterrupted access to applications, services, and IP communications in the unlikely event of a primary Routing Engine failure.
When more than two switches are interconnected in a Virtual Chassis configuration, the remaining switch elements act as line cards and are available to take on the backup Routing Engine position should the designated primary fail. Primary, backup, and line card priority status can be assigned by the network operations team to dictate the order of ascension. This N+1 Routing Engine redundancy—coupled with GRES, the nonstop routing (NSR), and, in the future, the nonstop bridging (NSB) capabilities of Junos OS—ensures a smooth transfer of control plane functions following unexpected failures.
The EX3400 also supports the following HA features:
• Redundant trunk group - To avoid the complexities of Spanning Tree Protocol (STP) without sacrificing network resiliency, the EX3400 employs redundant trunk groups to provide the necessary port redundancy and simplify switch configuration.
• Cross-member link aggregation - Cross-member link aggregation allows redundant link aggregation connections between devices in a single Virtual Chassis configuration, providing an additional level of reliability and availability.
• Nonstop bridging (NSB) and nonstop active routing (NSR) - NSB and NSR on the EX3400 switch ensure control plane protocols, states, and tables are synchronized between primary and backup REs to prevent protocol flaps or convergence issues following a Routing Engine failover.
• Nonstop software upgrade (NSSU) - With NSSU, all members of an EX3400 Virtual Chassis configuration can be upgraded with a single command. Mission-critical traffic can be configured as a link aggregate across multiple Virtual Chassis switch members, ensuring minimal disruption during the upgrade process.
Flex Licensing
Juniper Flex licensing offers a common, simple, and flexible licensing model for EX Series access switches, enabling customers to purchase features based on their network and business needs.
Flex licensing is offered in Standard, Advanced, and Premium tiers. Standard tier features are available with the Junos OS image that ships with EX Series switches. Additional features can be unlocked with the purchase of a Flex Advanced or Flex Premium license.
The Flex Advanced and Premium licenses for the EX Series platforms are class based, determined by the number of access ports on the switch. Class 1 (C1) switches have 12 ports, Class 2 (C2) switches have 24 Ports, and Class 3 (C3) switches have 32 or 48 Ports.
The EX3400 switches support both subscription and perpetual Flex licenses. Subscription licenses are offered for three- and five-year terms. In addition to Junos features, the Flex Advanced and Premium subscription licenses include Juniper Mist Wired Assurance. Flex Advanced and Premium subscription licenses also allow portability across the same tier and class of switches, ensuring investment protection for the customer.
Full specification and details can be found in the Product Datasheet PDF file
