«Connectivity” has always been the most difficult topic for me :(
👍8🔥6🍾2🗿2
В нашем видеосалоне пополнение:
Junos MCP Server + Claude Sonnet LLM demo
https://youtu.be/zwRdmt_5O1s
Junos MCP Server + Claude Sonnet LLM demo
https://youtu.be/zwRdmt_5O1s
YouTube
Junos MCP Server
Junos MCP Server Model Context Protocol Claude Desktop Claude Sonnet
Telegram channel: https://t.me/jp2mp
Telegram channel: https://t.me/jp2mp
🔥6👍3🗿2🦄1
Junos 26.2R1, SRX series firewalls:
HTTP/2 protocol support
Support for cleartext HTTP/2 inspection
HTTP/2 inspection for SSL proxy
HTTP/2 inspection for IDP
Support for HTTP/2 in web filtering and content filtering
HTTP/2 AppQoS based on DSCP with first-stream classification for consistent policy enforcement
HTTP/2 stream-based session logging enhancement
Support for HTTP/2 traffic in Juniper ATP Cloud
HTTP/2 protocol support
Support for cleartext HTTP/2 inspection
HTTP/2 inspection for SSL proxy
HTTP/2 inspection for IDP
Support for HTTP/2 in web filtering and content filtering
HTTP/2 AppQoS based on DSCP with first-stream classification for consistent policy enforcement
HTTP/2 stream-based session logging enhancement
Support for HTTP/2 traffic in Juniper ATP Cloud
👍5🗿3
HPE Networking Orb🗝
Unified Access policy in a campus LAN (Wireless Assurance, Wired Assurance) That means that now (25.4R1+) we can use GBP-based micro-segmentation not only in "EVPN-VxLAN Campus Fabric IP Clos" design (with L3 routing and EVPN/VxLAN is extended up to Access…
The another name for this technique is ZTIS (Zero Trust Inline Segmentation)
Quick remainder: previously, micro-segmentation was supported in IP Clos campus fabric only (=that means EVPN/VxLAN starts at the access layer)
Now it is possible to do micro-segmentation in more simple architecture, even without EVPN/VxLAN at all
» When you enable ZTIS on a supported switch, the switch learns GBP tag assignments from attached Mist APs/Switches through (Layer2 unicast or multicast) proprietary ZTIS GBP messages.
More details are in this NCE (Network Configuration Example): Zero Trust Inline Segmentation in Distributed Enterprise Branch Designs
https://www.juniper.net/documentation/us/en/software/nce/nce-513-microsegmentation-wired-enterprise-branch-deployment-guide/about_this_document.html
Supported on EX4100/EX4400/EX4650/QFX5120 switches starting from 24.4R2-S3 / 25.4R1-S1
Update: Junos 26.2R1+ is recommended for this feature.
Quick remainder: previously, micro-segmentation was supported in IP Clos campus fabric only (=that means EVPN/VxLAN starts at the access layer)
Now it is possible to do micro-segmentation in more simple architecture, even without EVPN/VxLAN at all
» When you enable ZTIS on a supported switch, the switch learns GBP tag assignments from attached Mist APs/Switches through (Layer2 unicast or multicast) proprietary ZTIS GBP messages.
More details are in this NCE (Network Configuration Example): Zero Trust Inline Segmentation in Distributed Enterprise Branch Designs
https://www.juniper.net/documentation/us/en/software/nce/nce-513-microsegmentation-wired-enterprise-branch-deployment-guide/about_this_document.html
Supported on EX4100/EX4400/EX4650/QFX5120 switches starting from 24.4R2-S3 / 25.4R1-S1
Update: Junos 26.2R1+ is recommended for this feature.
www.juniper.net
About This Document | Juniper Networks
Over the past decades, network security and policy enforcement have typically been applied to client traffic as it leaves the network. This approach usually relies on macrosegmentation through a firewall that controls traffic between VLANs and toward corporate…
👍5🗿2🌚1
Apstra (6.1.1) DC Director - short "silent" demo (16 min)
logical device creation
interface map creation
rack creation
template creation
blueprint creation - staging & first commit
tenant creation + virtual network (VxLAN) creation - second commit
https://www.youtube.com/watch?v=GQBRnwZ8Rsc
logical device creation
interface map creation
rack creation
template creation
blueprint creation - staging & first commit
tenant creation + virtual network (VxLAN) creation - second commit
https://www.youtube.com/watch?v=GQBRnwZ8Rsc
YouTube
Apstra Datacenter Director - short silent demo
HPE Juniper Apstra Datacenter Director logical devices racks templates
Telegram channel: https://t.me/jp2mp
Telegram channel: https://t.me/jp2mp
👍5🗿2❤1👻1
Just note: Juniper Routing Director 2.9.0 has been posted
https://www.juniper.net/documentation/us/en/software/juniper-routing-director2.9.0/release-notes/rd-release-notes-2.9.0/index.html
https://www.juniper.net/documentation/us/en/software/juniper-routing-director2.9.0/release-notes/rd-release-notes-2.9.0/index.html
www.juniper.net
Release Notes: Juniper Routing Director Release 2.9.0 | Juniper Routing Director 2.9.0 | Juniper Networks
Enhanced network implementation plan page.
🔥4🗿2🤓1🤝1
HPE Networking Orb🗝
PTX10002-60MR "Available to order" status in a recent (April's) GPL Nice box (48x100G + 12x800G = 14.4 Tbps in 2RU, Express 5 chipset, 4M+ FIB, 128-way ECMP, 4x10G ... 800G ZR/ZR+ support, PTP Class D (!) timing, MACSEC, SR-MPLS, SRv6 uSID, BIER, ...) Junos…
Datasheet is published.
From my personal point-of-view this box (12x800G QSFP112-DD + 48x100G QSFP28 = 14,4 Tbps in 2RU) looks like an ideal "sweet spot" for any IP/MPLS/SR/SRv6 transport network (also for Peering, DCI, Metro aggregation use cases)
Supported from Junos Evolved release 26.2R1
https://www.hpe.com/psnow/doc/PSN1014929896HKEN
From my personal point-of-view this box (12x800G QSFP112-DD + 48x100G QSFP28 = 14,4 Tbps in 2RU) looks like an ideal "sweet spot" for any IP/MPLS/SR/SRv6 transport network (also for Peering, DCI, Metro aggregation use cases)
Supported from Junos Evolved release 26.2R1
https://www.hpe.com/psnow/doc/PSN1014929896HKEN
PSNow
Juniper PTX10002-60MR Router Data sheet
This digital data sheet provides detailed information about Juniper PTX10002-60MR Router
👍5🗿2🌚1
With the latest AOS-8 release (AOS‑8.13.3 or later), HPE Aruba Networking now supports select 7xx Series Wi‑Fi 7 access points for customers who would like to remain on AOS‑8 while refreshing hardware or expanding their wireless footprint.
Which AOS‑8 deployment modes are supported?
Support is designed for common AOS‑8 customer environments, including both controllerless and controller-based deployments in distributed encryption forwarding modes:
- Mobility Conductor and Mobility Controller deployments
- Campus AP (CAP)
- InstantOS/Instant AP (IAP)
More details:
https://community.hpe.com/t5/networking/announcing-aos-8-support-for-hpe-aruba-networking-wi-fi-7-access/ba-p/7270269
Which AOS‑8 deployment modes are supported?
Support is designed for common AOS‑8 customer environments, including both controllerless and controller-based deployments in distributed encryption forwarding modes:
- Mobility Conductor and Mobility Controller deployments
- Campus AP (CAP)
- InstantOS/Instant AP (IAP)
More details:
https://community.hpe.com/t5/networking/announcing-aos-8-support-for-hpe-aruba-networking-wi-fi-7-access/ba-p/7270269
👍3🗿3🔥1
Я буду рассказывать в следующий вторник.
Только для Партнеров и Дистрибьюторов (!), поэтому:
- также будет рассказ про самые необходимые инструменты/документы
- будет больше внутренних деталей/roadmap-a, которые в паблик мы обычно/пока не выносим
Если вы опытный Партнер Juniper и следите за обновлениями, возможно вы все это уже знаете (потому что главная задача это познакомить Партнеров HPE с нашим Routing Portfolio)
Ссылка для регистрации:
https://events.teams.microsoft.com/event/e10852b3-9fbc-43cc-8d19-66f43d17e5d4@105b2061-b669-4b31-92ac-24d304d195dc
Только для Партнеров и Дистрибьюторов (!), поэтому:
- также будет рассказ про самые необходимые инструменты/документы
- будет больше внутренних деталей/roadmap-a, которые в паблик мы обычно/пока не выносим
Если вы опытный Партнер Juniper и следите за обновлениями, возможно вы все это уже знаете (потому что главная задача это познакомить Партнеров HPE с нашим Routing Portfolio)
Ссылка для регистрации:
https://events.teams.microsoft.com/event/e10852b3-9fbc-43cc-8d19-66f43d17e5d4@105b2061-b669-4b31-92ac-24d304d195dc
🔥6👍5🗿2🍌1🏆1🙈1
HPE Networking Orb🗝
MX204 EOL details (extended 1Y order period, standard LOD+5Y period till complete EOS) LSV (Last Software Version) Junos 27.4 LOD (Last Order Date) 15.06.2027 EOE (End Of Engineering) 15.06.2030 EOS (End Of Support) 15.06.2032 Replacement options: ACX7024X…
Now in public
✍2👌2🗿2🦄1
BNG Chassis Redundancy with DHCP Active Lease Query and EVPN VPWS
https://community.juniper.net/blogs/sathish-eruvala/2026/07/16/bng-chassis-redundancy-with-dhcp-and-evpn-vpws
https://community.juniper.net/blogs/sathish-eruvala/2026/07/16/bng-chassis-redundancy-with-dhcp-and-evpn-vpws
community.juniper.net
BNG Chassis Redundancy with DHCP Active Lease Query and EVPN VPWS
When a Broadband Network Gateway goes down, thousands of subscribers lose connectivity. Traditional BNG redundancy solutions often result in subscriber session loss, requiring DHCP reinitialization and leading to service disruption.
Active Lease Query (ALQ)…
Active Lease Query (ALQ)…
🗿4👍3🔥1🤔1
Regarding previous post: It's interesting to compare it with my 6 years ago investigation
MPC7E is replaced with MPC10E
LDP PW transport is replaced with EVPN-VPWS transport
ALQ works with DHCP server - in 2020 it was possible only with DHCP Relay
Added Routing Instance for subscribers
Added CGNAT
https://youtu.be/atiQTWomOAU?si=u9XTv0NPApWOEw0k
MPC7E is replaced with MPC10E
LDP PW transport is replaced with EVPN-VPWS transport
ALQ works with DHCP server - in 2020 it was possible only with DHCP Relay
Added Routing Instance for subscribers
Added CGNAT
https://youtu.be/atiQTWomOAU?si=u9XTv0NPApWOEw0k
YouTube
M-N BNG Redundancy 2020-06
Juniper Networks MX BNG subscriber management solution
Telegram channel: https://t.me/jp2mp
Telegram channel: https://t.me/jp2mp
👍3🔥2🗿2👻1
HPE Networking Orb🗝
Я буду рассказывать в следующий вторник. Только для Партнеров и Дистрибьюторов (!), поэтому: - также будет рассказ про самые необходимые инструменты/документы - будет больше внутренних деталей/roadmap-a, которые в паблик мы обычно/пока не выносим Если вы…
Слайды с сегодняшней презентации. Public version (убран некоторый roadmap и некоторые цифры скейлинга)
Поправка: Слайд 13 - PTX10002-60MR -8x800G 12x800G
https://www.dropbox.com/scl/fi/i3gaqs8vndkml35ginih3/2026-07-HPE-Routing-Infrastructure-Solution-RIS-Webinar-v01-public.pdf?rlkey=j3nbadbx3w9ui4ycd9tvbx8c5&st=ufvzf7qs&dl=0
Поправка: Слайд 13 - PTX10002-60MR -
https://www.dropbox.com/scl/fi/i3gaqs8vndkml35ginih3/2026-07-HPE-Routing-Infrastructure-Solution-RIS-Webinar-v01-public.pdf?rlkey=j3nbadbx3w9ui4ycd9tvbx8c5&st=ufvzf7qs&dl=0
Dropbox
2026-07 HPE Routing Infrastructure Solution (RIS Webinar) v01 - public.pdf
Shared with Dropbox
🔥8🗿2🙏1🤨1
"Available to Order" in August GPL:
MACSEC, EVPN-VxLAN, Flow-based telemetry, 10-member VC
Datasheet: https://www.hpe.com/psnow/doc/a50015451enw
EX5200-24T / 24x100M/1G/2.5G/5G/10G
EX5200-48T / 48x100M/1G/2.5G/5G/10G
EX5200-24MP / 24x100M/1G/2.5G/5G/10G & PoE++
EX5200-48MP / 48x100M/1G/2.5G/5G/10G & PoE++
EX5200-EM-2C / 2x40G/100G Ext. module for EX5200
EX5200-EM-8Y / 8x10G/25G Ext. module for EX5200
MACSEC, EVPN-VxLAN, Flow-based telemetry, 10-member VC
Datasheet: https://www.hpe.com/psnow/doc/a50015451enw
👍11🌚2🗿2
HPE Networking Orb🗝
New branch SRX400, SRX440, SRX440-2AC SKUs are in June's GPL ("available to order") 8× 1GbE RJ45, 2× 1GbE SFP PoE (2 ports, 60W budget), fanless, external PS, 5G support with upcoming "-C" models Multi-node HA (no Chassis Cluster support) SRX440 has more…
Public datasheet:
https://www.hpe.com/psnow/doc/a50015856enw
https://www.hpe.com/psnow/doc/a50015856enw
PSNow
HPE Networking SRX400 Firewall Series for branch
The SRX400 series of firewalls combines effective security, routing, switching, WAN interfaces, and SD-WAN with next-generation firewalls and advanced threat mitigation capabilities.
👍4🗿2✍1🥴1
Does ORv3 (Open Rack version 3) conquer the world?
Select existing QFX platforms have been retrofitted for ORv3 compliance through dedicated adapter trays and mechanical/electrical design modifications. At the same time, other variants are natively engineered to meet ORv3 requirements from the ground up.
More details here: https://community.juniper.net/blogs/ridha-hamidi2/2026/08/08/orv3-compliant-qfx-series-switches
Select existing QFX platforms have been retrofitted for ORv3 compliance through dedicated adapter trays and mechanical/electrical design modifications. At the same time, other variants are natively engineered to meet ORv3 requirements from the ground up.
More details here: https://community.juniper.net/blogs/ridha-hamidi2/2026/08/08/orv3-compliant-qfx-series-switches
👌2🥱2🗿2✍1
Apstra Datacenter Director vs Arista Cloud Vision
2 short demos: EVPN-VxLAN fabric creation and EVPN/VxLAN troubleshooting
Yes, this video is created by HPE TME (Technical & Marketing Engineer) and could be biased
But anyway I think it is still very interesting for people involved in DC operations
https://youtu.be/5uDKKj96SKs
2 short demos: EVPN-VxLAN fabric creation and EVPN/VxLAN troubleshooting
Yes, this video is created by HPE TME (Technical & Marketing Engineer) and could be biased
But anyway I think it is still very interesting for people involved in DC operations
https://youtu.be/5uDKKj96SKs
YouTube
HPE Apstra vs Arista Cloud Vision
Two short demos: 1) EVPN-VxLAN fabric creation 2) EVPN-VxLAN troubleshooting
👍3🔥2