Virtual Chassis Technology

Juniper’s Virtual Chassis technology allows multiple interconnected

switches to operate as a single, logical unit, enabling users to

manage all platforms as one virtual device. Up to 10 EX4100-F

switches can be interconnected as a Virtual Chassis using 4 x

10GbE SFP+ dedicated front-panel ports. Although configured as

Virtual Chassis ports by default, the 4 x 10GbE SFP+ ports can also

be configured as uplink ports. The EX4100-F switches can form a

Virtual Chassis with any other models within the EX4100-F product

line.

Microsegmentation Using Group-Based Policy

GBP leverages underlying VXLAN technology to provide location-

agnostic endpoint access control. This allows network

administrators to implement consistent security policies across the

enterprise network domains. The EX4100-F supports a standards-

based GBP solution, allowing different levels of access control for

endpoints and applications even within the same VLAN. Customers

can simplify their network configuration by using GBP, avoiding the

need to configure large numbers of firewall filters on all their

switches. GBP can block lateral threats by ensuring consistent

application of security group policies throughout the network,

regardless of the location of endpoints and/or users.

Flow-Based Telemetry

Flow-based telemetry enables flow-level analytics, allowing network

administrators to monitor thousands of traffic flows on the

EX4100-F without burdening the CPU. This improves network

security by monitoring, baselining, and detecting flow anomalies.

For example, if predefined flow thresholds are breached due to an

attack, IP Flow Information Export (IPFIX) alerts can be sent to an

external server to quickly identify the attack. Network

administrators can also automate specific workflows, such as

further examining the traffic or quarantining a port, to triage the

issue. In addition to DOS attacks, Flow-Based Telemetry on

EX4100-F can measure packet delays at ingress, chip, and egress

points as well as report drop reasons.

Features and Benefits

Simplified Operations with Juniper Mist Wired Assurance

The EX4100-F is fully cloud onboarded, provisioned, and managed

by Juniper Mist Wired Assurance. The EX4100-F is designed from

the ground up to deliver the rich telemetry that enables AI for IT

Operations (AIOps) with simplified operations from Day 0 to Day 2

and beyond. Juniper Mist Wired Assurance provides detailed switch

insights for easier troubleshooting and improved time to resolution

by offering the following features:

• Day 0 operations—Onboard switches seamlessly by claiming a

greenfield switch or adopting a brownfield switch with a single

activation code for true plug-and-play simplicity.

• Day 1 operations—Implement a template-based configuration

model for bulk rollouts of traditional and campus fabric

deployments, while retaining the flexibility and control required

to apply custom site- or switch-specific attributes. Automate

provisioning of ports via Dynamic Port Profiles.

• Day 2 operations—Leverage the AI in Juniper Mist Wired

Assurance to meet service-level expectations such as

throughput, successful connects, and switch health with key

pre-and post-connection metrics (see Figure 1). Add the self-

driving capabilities in Marvis Actions to detect loops, add

missing VLANs, fix misconfigured ports, identify bad cables,

isolate flapping ports, and discover persistently failing clients

(see Figure 2). And perform software upgrades easily through

Juniper Mist Cloud.

Figure 2: Juniper Mist Wired Assurance service-level expectations screen

EX4100-F Line of Ethernet Switches Datasheet

3