SRX Series Services Gateways for the Branch

Transcription

1 SR SERIES : SR100, SR110, SR210, SR220,, SR550, and SR650 SR Series,,.,,,,.,, SR Series Junos OS. Junos OS,. TCO. SR Series, UTM(unified threat management),,. SR Series Junos OS. Junos OS 100. Junos OS IPv4/IPv6, OSPF, BGP, 15. SR Series,,,,, Spotlight Secure*,. SR Series. VPN Dynamic Addressing Split Tunneling. SR Series, IPsec VPN, NAT(Network Address Translation), (wizard). SR Series IPS, (AppSecure),,,,, UTM (Unified Threat Management). SR (UAC: unified access control) (adaptive threat management).. SR Series.,,. WAN,, T1/E1, xdsl, Wi-Fi, 3G/4G LTE. SR Series -. Junos OS CLI (command-line interface), GUI, NSM(Network and Security Manager), Junos Space Security Director. *Available on SR550 and higher devices 1

2 SR Series 제품 SR100 SR110 SR210 SR220 SR550 SR650 설명 8 10/100 Ethernet LAN 1 USB (3G USB ) UTM1; 1, 1, 1, IPS(intrusion prevention system)1, AppSecure 1 2 GB DRAM, 2 GB VDSL/ADSL2+ Ethernet WAN 8 10/100 Ethernet LAN 2 USB (3G USB ) UTM 1 ; 1, 1, 1, Unified Access Control (UAC) 2 GB DRAM, 2 GB CF 2 10/100/1000 Ethernet 6 10/100 Ethernet LAN, 1 Mini-PIM, 2 USB (3G USB ) 4 PoE(Power over Ethernet) 802.3af T1/E1, Serial, ADSL/2/2+, VDSL, G.SHDSL, Ethernet SFP(small form-factor pluggable transceiver) IPS ExpressAV Content Security Accelerator ( ) UTM 1 ; 1, 1, 1, IPS (Intrusion prevention system) 1,, AppSecure 1 2 GB DRAM, 2 GB 8 10/100/1000 Ethernet LAN, 2 Mini-PIM 8 PoE(Power over Ethernet), PoE at, 802.3af T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, Ethernet SFP IPS ExpressAV Content Security Accelerator UTM 1 ; 1, 1, 1, IPS (Intrusion prevention system) 1,, AppSecure 1 2 GB DRAM, 2 GB CF 16 10/100/1000 Ethernet LAN, 4 Mini-PIM 16 PoE, PoE at, 802.3af T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, Ethernet SFP IPS ExpressAV Content Security Accelerator UTM 1 ; 1, 1, 1, IPS (Intrusion prevention system) 1,, AppSecure 1 10 Ethernet (6 10/100/1000 Copper, 4 SFP), 2 Mini-PIM, 6 GPIM GPIM PIM T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, DS3/E3, Gigabit Ethernet ; SFP 52 Ethernet ; 40 PoE(802.3at, PoE+, 802.3af ) 50 Non-PoE 10/100/1000 Copper IPS ExpressAV Content Security Accelerator UTM 1 ; 1, 1, 1, C&C(command and control),,, GeoIP 4 GB DRAM, 8 GB Compact Flash (SR550 High Memory) 2 GB DRAM, 2 GB (SR550) AC ; AC (PoE- ; PoE ) 4 10/100/1000 Ethernet LAN, 8 GPIM GPIM PIM T1, E1, DS3/E3, Ethernet ; SFP 52 Ethernet ( at, PoE+, 802.3af PoE ( 52 Non-PoE 10/100/1000 Copper ) IPS ExpressAV Content Security Accelerator UTM 1 ; 1, 1, 1, IPS (Intrusion prevention system) 1,, AppSecure 1 C&C(command and control),,, GeoIP (Routing Engine); (failover) (hot-swap) 2 GB DRAM, 2 GB, AC ; AC (PoE- ; PoE ) SR Series - - WAN, PC. 1 UTM(Unified Threat Management),,, AppSecure, IPS. UTM (low memory).. UAC. 2

3 AppSecure Untrust Zone INTERNET Trust Zone Intranet Guest Zone DMZ Zone 1:,, SR,, UTM. (Full Packet Inspection) Layer 7.,. AppSecure SR,,,. Intrusion Prevention IPS(Intrusion Prevention System). Unified Threat Management (UTM) SR UTM(unified threat management),,,,,. SR,,,.. User Firewall. SR. SR UAC(Unified Access Control). Adaptive Threat Intelligence SR Spotlight Secure. Spotlight Secure SR.,,. Junos Space Security Director. /VPN. SR.,,. SR.,,.. ( )..,,.,. (High Availability) Junos Services Redundancy Protocol (JSRP) SR Series. JSRP..,.. /. 3

4 Active/Standby Active/Standby INTERNET INTERNET Active Standby Failure Active E Series E Series E Series E Series Active/Standby Active/Active Active/Active INTERNET INTERNET INTERNET 240 Active Active Active Failure Active s E Series E Series E Series E Series E Series 2: SR Series / HA, VPN. SR Series. /, IPsec SA(security associations), NAT,,. VRRP(Virtual Router Redundancy Protocol) / (resiliency protocols). Convergence Time.. /. (next-hop).. 3., Junos OS., Junos OS (next-hop).. (egress). Junos OS. - (next-hop). Junos OS. Session Initial Packet Processing Ingress Interface Session and Forwarding Table Disallowed by Policy: Dropped Security Policy Evaluation and Next-Hop Lookup Table Update 3: Forwarding for Permitted Traffic Egress Interface 4

5 Small Office SR110 3G Connectivity Internet SF.com Facebook Skype Google SIP Server App Server UC Server Private Data Center VDSL Private WAN SR650 SR650 WLC800 E4200 E4200 Large HA Office Hosted Server Web Server T1/E1 VDSL T1/E1 4G LTE SFP DS3/E3 SR210 4G LTE C111 SR550 SR550 WLC100 E3300 E3300 WLA532 Mid-sized HA Branch Small, Link HA Branch Small Branch with Cellular Backup 3: SR100 SR110 SR210 SR220 SR550 SR650 5

6 Protocols IPv4, IPv6, ISO Connectionless Network Service (CLNS) Routing and Multicast Static routes RIPv2 +v1 OSPF/OSPFv3 BGP BGP Router Reflector 1 IS-IS Multicast (Internet Group Management Protocol (IGMPv1/2/3), PIM-SM/DM/SSM, Session Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), source-specific, Multicast inside IPsec tunnel), MSDP MPLS (RSVP, LDP, Circuit Cross-connect (CCC), Translational Cross-connect (TCC), Layer 2 VPN (VPLS), Layer 3 VPN, VPLS, NGMVPN) IP Address Management Static DHCP, PPPoE client Internal DHCP server, DHCP Relay Address Translation Source NAT with Port Address Translation (PAT) Static NAT Destination NAT with PAT Persistent NAT, NAT64 Encapsulations Ethernet (MAC and VLAN tagged) Point-to-Point Protocol (PPP) (synchronous) Multilink Point-to-Point Protocol (MLPPP) Frame Relay Multilink Frame Relay (MLFR) (FRF.15, FRF.16), FRF.12, LFI High-Level Data Link Control (HDLC) Serial (RS-232, RS-449,.21, V.35, EIA-530) 802.1q VLAN support Point-to-Point Protocol over Ethernet (PPPoE) L2 Switching Q, 802.1D, RSTP, MSTP, 802.3ad (LACP) 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping Layer 2 switching with high availability Traffic Management Quality of Service (QoS) 802.1p, DSCP, EP Marking, policing, and shaping Class-based queuing with prioritization Weighted random early detection (WRED) Queuing based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multi-field (MF) filters Guaranteed bandwidth Maximum bandwidth Ingress traffic policing Priority-bandwidth utilization DiffServ marking Virtual channels Security Firewall Firewall, zones, screens, policies Stateful firewall, stateless filters Network attack detection Screens denial of service (DoS) and provides distributed denial of service (DDoS) protection (anomaly-based) Prevent replay attack; Anti-Replay Unified Access Control TCP reassembly for fragmented packet protection Brute force attack mitigation SYN cookie protection Zone-based IP spoofing Malformed packet protection NGFW/UTM 3 Intrusion Prevention System (IPS) Protocol anomaly detection Stateful protocol signatures Intrusion prevention system (IPS) attack pattern obfuscation User role-based policies Customer signatures creation Multiple times a week and emergency updates AppSecure AppTrack (application visibility and tracking) AppFirewall (policy enforcement by application name) Custom signatures AppQoS (network traffic prioritization and bandwidth management) Dynamic signature updates User-based application policy enforcement Antivirus Express AV (stream-based AV, not available on SR100 and SR110) File-based antivirus Signature database Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP 1 BGP Route Reflector supported on SR550 and SR650. See ordering section for more information. 2 As of Junos D40, the SR550 High Memory unit does not support xstp, LLDP, 802.1x, Q-in-Q, IGMP Snooping and L2 switching with HA 3 Unified Threat Management antivirus, antispam, Web filtering, AppSecure, and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the ordering section for options. 6

7 Antispyware Anti-adware Antikeylogger Cloud-based antivirus Antispam Integrated enhanced Web filtering Category granularity (90+ categories) Real time threat score Redirect Web filtering Content Security Accelerator in SR210 high memory, SR220,, SR550, and SR650 4 ExpressAV option in SR210 high memory, SR220 high memory,, SR550, and SR650 4 Content filtering Based on MIME type, file extension, and protocol commands VPN Auto VPN (Zero Touch Hub) Tunnels (GRE, IP-IP, IPsec) IPsec, Data Encryption Standard (DES) (56-bit), triple Data Encryption Standard (3DES) (168-bit), Advanced Encryption Standard (AES) (128-bit+) encryption Message Digest 5 (MD5),SHA-1, SHA-128, SHA-256 authentication Junos Pulse Dynamic VPN client; browser-based remote access feature requiring a license IPv4 and IPv6 VPN Multi-Proxy ID for site-to-site VPN Multimedia Transport Compressed Real-Time Transport Protocol (CRTP) High Availability VRRP JSRP Stateful failover and dual box clustering SR550/SR650: Redundant power (optional) GPIM hot swap Future internal failover and SRE hot swap (OIR) on SR650 Backup link via 3G/4G LTE wireless or other WAN Active/active L3 mode 5 Active/passive L3 mode 5 Configuration synchronization 5 Session synchronization for firewall and VPN 5 Session failover for routing change 5 Device failure detection 5 Link failure detection 5 IP Monitoring with route and interface failover IPv6 OSPFv3 RIPng IPv6 Multicast Listener Discovery (MLD) BGP ISIS Wireless C111 Cellular 3G/4G/LTE Broadband Data Bridge supported on all branch SR Series devices 3G USB modem support for SR100, SR110, and SR210 SLA, Measurement, and Monitoring Real-time performance monitoring (RPM) Sessions, packets, and bandwidth usage Juniper J-Flow monitoring and accounting services IP Monitoring Logging Syslog Traceroute Extensive control- and data-plane structured and unstructured syslog Administration Juniper Networks Network and Security Manager support (NSM) Juniper Networks Junos Space Security Director support Juniper Networks STRM Series Security Threat Response Managers support Juniper Networks Advanced Insight Solutions support External administrator database (RADIUS, LDAP, SecureID) Auto-configuration Configuration rollback Rescue configuration with button Commit confirm for changes Auto-record for diagnostics Software upgrades (USB upgrade option) Juniper Networks J-Web Command-line interface Smart image download Certifications NEBS Compliance for, SR650 6 Department of Defense (DoD) Certification for SR Series Services Gateways, including testing and certification by the Department of Defense Joint Interoperability Test Command (JITC) for interoperability with DoD networks and addition of the SR Series Services Gateways to the Unified Capabilities Approved Product List (UC APL) 4 Unified Threat Management antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the ordering section for options. 5 SR100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key. 6 Coming soon for SR110 and SR550. 7

8 Maximum Performance and Capacity SR100 SR110 SR210 SR220 SR550 SR650 Junos OS version tested Junos OS D15 Junos OS D15 Junos OS D15 Junos OS D15 Junos OS 11.4R5 Junos OS Junos OS 12.1/ R5 Firewall performance (large packets) 700 Mbps 700 Mbps 850 Mbps 950 Mbps 1.8 Gbps 7 Gbps 7 Gbps Firewall performance (IMI) 200 Mbps 200 Mbps 250 Mbps 300 Mbps 600 Mbps 2 Gbps 2.5 Gbps Firewall + routing PPS (64 Byte) 70 Kpps 70 Kpps 95 Kpps 125 Kpps 200 Kpps 700 Kpps 850 Kpps Firewall performance 8 (HTTP) 100 Mbps 100 Mbps 290 Mbps 350 Mbps 830 Mbps 2 Gbps 2 Gbps IPsec VPN throughput (large packets) 65 Mbps 65 Mbps 85 Mbps 100 Mbps 300 Mbps 1.0 Gbps 1.5 Gbps IPsec VPN tunnels ,000 2,000 3,000 AppSecure firewall throughput 8 90 Mbps 90 Mbps 250 Mbps 300 Mbps 750 Mbps 2.0 Gbps 1.9 Gbps IPS (intrusion prevention system) 75 Mbps 9 75 Mbps 65 Mbps 80 Mbps 230 Mbps 800 Mbps 1 Gbps Antivirus 25 Mbps (Sophos AV) 25 Mbps (Sophos AV) 30 Mbps (Sophos AV) 35 Mbps (Sophos AV) 85 Mbps (Sophos AV) 300 Mbps (Sophos AV) 350 Mbps (Sophos AV) Connections per second 1,800 1,800 2,200 2,800 8,500 27,000 35,000 Maximum concurrent sessions 32 K 7 32 K 7 64 K 7 96 K K K 512 K DRAM options 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB/4 GB 7 DRAM 2 GB DRAM Maximum security policies ,048 4,096 8,000 8,192 Maximum users supported Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Network Connectivity Fixed I/O 8 x 10/100 8 x 10/100 VDSL/ ADSL2+ WAN (Annex A or B) 2 x 10/100/1000 BASE-T + 6 x 10/100 8 x 10/100/1000 BASE-T 16 x 10/100/1000 BASE-T 6 x 10/100/1000 BASE-T + 4 SFP 4 x 10/100/1000 BASE-T I/O slots N/A N/A 1 x SR Series Mini-PIM 2 x SR Series Mini-PIM 4 x SR Series Mini-PIM 2 x SR Series Mini-PIM, 6 x GPIM or multiple GPIM and PIM combinations 8 x GPIM or multiple GPIM and PIM combinations Services and Routing Engine slots No No No No No No 2 10 WAN/LAN interface options N/A N/A See ordering information See ordering information See ordering information See ordering information See ordering information Maximum number of PoE ports (PoE optional on some SR Series models) N/A N/A Up to 4 ports of 802.3af with maximum 50 W Up to 8 ports of 802.3af/ at with maximum 120 W Up to 16 ports of 802.3af/ at with maximum 150 W Up to 40 ports of 802.3af/ at with maximum 247 W Up to 48 ports of 802.3af/ at with maximum 247 W USB per SRE 7 Based on 2 GbE memory models, which require Junos OS D15 (exception: Junos OS 11.4r5 for only). 8 Throughput numbers based on HTTP traffic with 44 kilobyte transaction size. 9 Use software based IPS engine which has higher performance and less capacity 10 SR650 supports a single Services and Routing Engine (SRE) as of software release

9 SR100 SR110 SR210 SR220 SR550 SR650 Routing Routing (Packet Mode) PPS 100Kpps 100Kpps 150Kpps 200Kpps 300Kpps 1000Kpps 1000Kpps BGP instances BGP peers BGP routes 8 K 8 K 16 K 32 K 600 K 712 K 800 K OSPF instances OSPF routes 8 K 8 K 16 K 32 K 200 K 200 K 200 K RIP v1 / v2 instances RIP v2 routes 8 K 8 K 16 K 32 K 32 K 32 K 32 K Static routes 8 K 8 K 16 K 32 K 100 K 100 K 100 K Source-based routing Yes Yes Yes Yes Yes Yes Yes Policy-based routing Yes Yes Yes Yes Yes Yes Yes Equal-cost multipath (ECMP) Yes Yes Yes Yes Yes Yes Yes Reverse path forwarding (RPF) Yes Yes Yes Yes Yes Yes Yes IPsec VPN Concurrent VPN tunnels ,000 2,000 3,000 Tunnel interfaces DES (56-bit), 3DES (168-bit) and AES (256-bit) MD-5, SHA-1 and SHA-2 authentication Manual key, Internet Key Exchange (IKE v1+v2), public key infrastructure (PKI) (.509) Perfect forward secrecy (DH Groups) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 Prevent replay attack Yes Yes Yes Yes Yes Yes Yes Dynamic remote access VPN Yes Yes Yes Yes Yes Yes Yes IPsec NAT traversal Yes Yes Yes Yes Yes Yes Yes Redundant VPN gateways Yes Yes Yes Yes Yes Yes Yes Number of remote access users 25 users 25 users 50 users 150 users 250 users 500 users 500 users User Authentication and Access Control Third-party user authentication RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS accounting Yes Yes Yes Yes Yes Yes Yes AUTH VPN, Web-based, 802. authentication PKI certificate requests (PKCS 7 and PKCS 10) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Certificate Authorities supported Yes Yes Yes Yes Yes Yes Yes Virtualization Maximum number of security zones Maximum number of virtual routers Maximum number of VLANs ,000 3,967 3,967 9

10 SR100 SR110 SR210 SR220 SR550 SR650 Encapsulations PPP/MLPPP N/A N/A Yes Yes Yes Yes Yes PPPoE Yes Yes Yes Yes Yes Yes Yes PPPoA N/A Yes Yes Yes Yes Yes Yes MLPPP maximum physical interfaces N/A N/A Frame Relay N/A N/A Yes Yes Yes Yes Yes MLFR (FRF.15, FRF.16) N/A N/A Yes Yes Yes Yes Yes MLFR maximum physical interfaces N/A N/A HDLC N/A N/A Yes Yes Yes Yes Yes Wireless C111 3G /4G LTE Bridge support Yes Yes Yes Yes Yes Yes Yes Junos/SR Series management of C111 Yes Yes Yes Yes Yes Yes Yes Flash and Memory Memory (DRAM) 2 GB (SR100H2) 2 GB (SR110H2) 2 GB (SR210HE2) 2 GB (SR220H2) 2 GB (H2) 2 GB/4 GB 11 2 GB (SR650) Memory slots Fixed memory Fixed memory Fixed memory Fixed memory Fixed memory 2 DIMM 4 DIMM Flash memory 2 GB 2 GB CF, externally accessible 2 GB 2 GB CF, externally accessible 2 GB 2 GB/8 GB 11 CF internal 2 GB CF internal on SRE, external slot empty, up to 2 GB CF supported USB port for external storage Yes Yes Yes Yes Yes Yes Yes Dimensions and Power Dimensions (W x H x D) 8.5 x 1.4 x 5.8 in (21.6 x 3.6 x 14.7 cm) x 1.72 x in (28 x 4.37 x 21.3 cm) x 1.73 x 7.12 in (28.0 x 4.4 x 18.1 cm) x 1.73 x 7.11 in (36.3 x 4.4 x 18.1 cm) 17.5 x 1.75 x 15.1 in (44.4 x 4.4 x 38.5 cm) 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) Weight (device and power supply) 2.5 lb (1.1 kg) 6.7 lb (3.06 kg) 3.3 lb (1.5 kg) non-poe / 4.4 lb (2 kg) PoE No interface modules 3.43 lb (1.56 kg) non-poe No interface modules For LM and HM-AC: 11.2 lb (5.1 kg) For HM - DC: lb (5.7 kg) / 12.3 lb (5.6 kg) PoE No interface modules lb (9.96 kg) No interface modules 1 power supply 24.9 lb (11.3 kg) No interface modules 1 power supply Rack-mountable Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 2 RU Yes, 2 RU Power supply (AC) VAC, 30 W VAC, 60 W VAC, 60 W non- PoE/ 150 W PoE VAC, 60 W non- PoE / 200 W PoE 150 W for LM and HM 190 W for HM with DC 360 W for PoE VAC, single 645 W or dual 645 W VAC, single 645 W or dual 645 W Maximum PoE power N/A N/A 50 W 120 W 150 W 247 W redundant, or 494 W nonredundant 247 W redundant, or 494 W nonredundant 11 7: 4 GB DRAM and 8 GB CF is default on the SR550 High Memory SKUs 10

11 SR100 SR110 SR210 SR220 SR550 SR650 Average power consumption 10 W 24 W 28 W, 84 W (PoE) 28 W H2-74 W H2- DC - 72 W H2- PoE- 86 W 85 W 122 W Input frequency Hz Hz Hz Hz Hz Hz Hz Maximum current consumption VAC VAC VAC, VAC (PoE) VAC VAC, VAC (PoE) VAC with single PSU with PoE, VAC with dual PSU with PoE VAC with single PSU with PoE, VAC with dual PSU with PoE Maximum inrush current 60 A 70 A 80 A, 60 A for PoE 80 A 40 A, 45 A for PoE 45 A for ½ cycle 45 A for ½ cycle Average heat dissipation 35 BTU/hr 81 BTU/hr 95 BTU/hr (SR210HE2) 116 BTU/hr (SR210HE2- PoE) 104 BTU/hour (SR220H2) 253 BTU/hr (H2) 246 BTU/hr (H2- DC 294 BTU/hr (SR40H2- PoE) 238 BTU/hr 319 BTU/hr Maximum heat dissipation 80 BTU/hr 99 BTU/hr 126 BTU/hr (SR210HE2) 157 BTU/hr (SR210HE2- PoE) 126 BTU/hour (SR220H2) 427 BTU/hr (H2) 409 BTU/hr (H2- DC) 560 BTU/hr (H2- PoE) 1,449 BTU/hr 699 BTU/hr Redundant power supply (hot swappable) No No No No No Yes (up to maximum capacity of single PSU) Yes (up to maximum capacity of single PSU) Acoustic noise level (Per ISO 7779 Standard) 0 db (fanless) 0 db (fanless) 29.1 db 51.1 db 70.0 db 51.8 db 60.9 db Environment Operational temperature 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) Nonoperational temperature 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) -40 to 158 F, (-40 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) Humidity (operating) Humidity (nonoperating) 10% to 90% noncondensing 5% to 95% noncondensing Mean time between failures (Telcordia model) 24.8 years 24.8 years years (SR210HE2) years (SR210HE2- PoE).46 years (SR220H2) years (SR220H2- PoE) years (H2) 9.92 years (H2- PoE) 9.6 years with redundant power 9.6 years with redundant power 11

12 SR100 SR110 SR210 SR220 SR550 SR650 Certifications and Network Homologation USA Safety certifications UL UL UL UL UL UL UL EMC certifications FCC Class B FCC Class B FCC Class B 1 FCC Class A FCC Class A FCC Class A FCC Class A Network homologation TIA-968 TIA-968 TIA-968 TIA-968 TIA-968 TIA-966 TIA-966 Canada Safety certifications CSA CSA CSA CSA CSA CSA CSA EMC certifications ICES class B ICES class B ICES class B 1 ICES Class A ICES class A ICES class A ICES class A Network homologation CS-03 CS-03 CS-03 CS-03 CS-03 CS-03 CS-03 Australia Safety certifications EMC certifications Class B Class B Class B 1 Class A Class A Class A Class A Network homologation New Zealand AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 016 AS / ACIF S 016 Safety certifications EMC certifications Class B Class B Class B 1 Class A Class A Class A Class A Network homologation PTC 217, PTC 273 PTC 217, PTC 273 PTC 217, PTC 273 PTC 217, PTC 273 PTC 217, PTC 273 PTC 217 PTC 217 Japan Safety certifications Comply safety certifications (UL/CUL/CSA) by CB Scheme EMC certifications VCCI Class B VCCI Class B VCCI Class B 1 VCCI Class A VCCI Class A VCCI Class A VCCI Class A European Union Safety certifications EN EN EN EN EN EN EN EMC certifications EN Class B, EN EN Class B, EN EN Class B 12, EN EN Class A, EN EN Class A, EN EN Class A, EN EN Class A, EN Network homologation CTR 12/, CTR 21, DoC Software Certifications CTR 12/, CTR 21, DoC CTR 12/, CTR 21, DoC CTR 12/, CTR 21, DoC CTR 12/, CTR 21, DoC CTR 12/, DoC NIST FIPS Level 2 Yes Yes Yes Yes Yes In Progress Yes CTR 12/, DoC ISO Common Criteria NDPP+TFFW EP Yes Yes Yes Yes Yes Yes Yes USGv6 Yes Yes Yes Yes Yes Yes Yes 12 SR210H-POE is class A. *There are several models available for the SR210 and including the enhanced version. Please contact your Juniper or partner account representative for more information. 12

13 구성요소설명 SR100 SR110 SR210 SR220 SR550 SR650 SR-GP-16GE 16-port 10/100/1000BASE-T PIM SR-GP-16GE-POE 16-port 10/100/1000BASE-T PoE PIM SR-GP-24GE 24-port 10/100/1000BASE-T PIM, includes 4 SFP slots SR-GP-24GE-POE 24-port 10/100/1000BASE-T PoE PIM, includes 4 SFP slots SR-GP-8SFP 8-port GbE copper, fiber SFP PIM SR-GP-DUAL-T1-E1 Dual T1/E1 GPIM SR-GP-QUAD-T1-E1 Quad T1/E1 GPIM SR-GP-1DS3-E3 1-port clear channel DS3/ E3 GPIM single GPIM slot SR-GP-8SERIAL Eight-port Sync Serial GPIM SR-MP-1SERIAL 1-port Sync Serial Mini-PIM SR-MP-1ADSL2-A 1-port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ ADSL2+ Annex A SR-MP-1ADSL2-B 1-port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ ADSL2+ Annex B SR-MP-1VDSL2-A 1-port VDSL2 Mini-PIM supporting Annex A, with fallback to ADSL2/ADSL2+ SR-MP-8GSHDSL 8-wire (4-pair) G.SHDSL Mini-PIM SR-MP-1SFP-GE 1-port SFP Mini-PIM SR-MP-1T1E1 1-port T1 or E1 Mini-PIM SR-MP-1T1E1-R 1-port T1 or E1 Mini-PIM (ROHS version) 14 SR-MP-1VDSL2-R 1-port VDSL2 Mini-PIM supporting Annex A, with fallback to ADSL2/ADSL2+ 14 (ROHS version) SR-MP-1SERIAL-R 1-port Sync Serial Mini-PIM (ROHS version) 14 Not supported on the SR550 High Memory 14 Only supported on the SR550 High Memory,,.,,,.,,. Automated Support and Prevention Juniper s Automated Support and Prevention consists of an ecosystem of tools, applications, and systems targeted towards simplifying and streamlining operations, delivering operational efficiency, reducing downtime, and increasing your network s ROI running Juniper Networks Junos operating system. Automated Support and Prevention brings operational efficiency by automating several time-consuming tasks such as incident management, inventory management, proactive bug notification and on-demand EOL/EOS/EOE reports. The Junos Space Service Now and Service Insight service automation tools are standard entitlements of all Juniper Care contracts.

14 SR650 Base System SR650-BASE-SRE6-645AP SR650-BASE-SRE6-645DP SR650B-SRE6-645AP-TAA SR650 Services Gateway with SRE 6, 645 W AC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rack-mount kit SR650 Services Gateway with SRE 6, 645 W DC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rack-mount kit Trade Agreement Act-compliant SR650 Services Gateway with SRE 6, 645 W AC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rack-mount kit SR650 Power Supplies and Accessories SR600-PWR- 645AC-POE SR600-PWR- 645DC-POE SR600-SRE6H SR650-CHAS SR650-FAN-01 SR650-FILT-01 Spare 645 W AC PoE power supply unit for SR650, SR550 systems one is included in SR650, SR550 base system (SR650- BASE-SRE6-645AP, SR AP) 645 W DC source power supply for SR550 and SR650; provides 397 W system 12 V and 248 W PoE 50 VDC; works with VDC input no power cord Spare SRE6-H for SR650 one is included in SR650 base system (SR650-BASE-SRE6-645AP) SR650 chassis including fan tray no system processor (SRE) and no power supply unit Spare SR650 fan tray, one is included in SR650 chassis spare (SR650-CHAS), and included in SR650 base system (SR650- BASE-SRE6-645AP) Not included in SR650 chassis spare (SR650-CHAS), and not included in SR650 base system (SR650-BASE-SRE6-645AP) optional, as this is not required for normal operations, but recommended for dusty environments SR650 Additional Software Feature Licenses SR650-K-AV SR650-S-AV SR650-IDP SR650-S2-AS SR650-W-WF SR650-SMB4-CS SR650-S-SMB4-CS SR650-K-AV-3 One year subscription for Juniper-Kaspersky antivirus updates on SR650 antivirus updates on SR650 One year subscription for IDP updates on SR650 antispam updates on SR650 One year subscription for Juniper-Websense Web filtering updates on SR650 AS, AppSecure and IDP on SR650 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR650 Three year subscription for Juniper-Kaspersky AV updates on SR650 SR650-S-AV-3 SR650-IDP-3 SR650-S2-AS-3 SR650-W-WF-3 SR650-SMB4-CS-3 SR650-S-SMB4- CS-3 SR-BGP-ADV-LTU SR650-K-AV-5 SR650-S-AV-5 SR650-IDP-5 SR650-W-WF-5 SR650-SMB4-CS-5 SR650-S-SMB4- CS-5 SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU SR-RAC-50-LTU SR-RAC-100-LTU SR-RAC-150-LTU SR-RAC-250-LTU SR-RAC-500-LTU SR650-APPSEC-A-1 SR650-APPSEC-A-3 SR650-APPSEC-A-5 AV updates on SR650 Three year subscription for IDP updates on SR650 antispam updates on SR650 Three year subscription for Juniper-Websense Web filtering updates on SR650 Three year security subscription for enterprise AS, AppSecure and IDP on SR650 Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR650 Advanced BGP License for SR650 only Five year subscription for Juniper-Kaspersky AV updates on SR650 Five year subscription for Juniper-Sophos AV updates on SR650 Five year license for IDP updates for SR650 Five year subscription for Juniper-Websense Web filtering updates on SR650 AS, AppSecure and IDP on SR650 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR650 Dynamic VPN Client: 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 10 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 25 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 50 simultaneous users for SR210, SR220,, SR550, and SR650 only Dynamic VPN Client: 100 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 150 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 250 simultaneous users for, SR550, and SR650 only Dynamic VPN Client: 500 simultaneous users for SR550 and SR650 only One year subscription for Application Security and IPS updates for SR650 Three year subscription for Application Security and IPS updates for SR650 Five year subscription for Application Security and IPS updates for SR650 14

15 SR550 Base System SR AP-M SR DP-M SR AP SR DP SR550 Services Gateway with 4 GB DRAM and 8 GB CF, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual PS slots, fans; ships with one 645 watt AC power supply with 247 W PoE power (power cord and rack-mount kit included) SR550 Services Gateway with 4 GB DRAM and 8 GB CF, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual PS slots, fans; ships with one 645 watt DC power supply with 247 W PoE power (no power cord or rack-mount kit included) SR550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual PS slots, fans; ships with one 645 watt AC power supply with 247 W PoE power (power cord and rack-mount kit included) SR550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual PS slots, fans; ships with one 645 watt DC power supply with 247 W PoE power (no power cord and rack-mount kit Included) SR550 Power Supplies and Accessories SR600-PWR- 645AC-POE SR600-PWR- 645DC-POE SR550-CHAS SR550-FILT-01 Spare 645 W AC PoE power supply unit for SR550 and SR650 systems one is included in SR550 and SR650 base systems (SR650-BASE-SRE6-645AP, SR AC) 645 W DC source power supply for SR550, SR650 provides 397 W system 12 V and 248 W PoE 50 VDC; works with VDC input no power cord SR550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4 GbE SFP ports, dual PS slots, fans (power supply not included) Not included in SR550 systems, optional, as this is not required for normal operations, but recommended for dusty environments SR550 Additional Software Feature Licenses SR550-K-AV SR550-S-AV SR550-IDP SR550-S2-AS SR550-W-WF SR550-SMB4-CS SR550-S-SMB4-CS SR550-K-AV-3 SR550-S-AV-3 SR550-IDP-3 One year subscription for Juniper-Kaspersky antivirus updates on SR550 antivirus updates on SR550 One year subscription for IDP updates on SR550 antispam updates on SR550 One year subscription for Juniper-Websense Web filtering updates on SR550 AS, AppSecure and IDP on SR550 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR550 Three year subscription for Juniper-Kaspersky AV updates on SR550 AV updates on SR550 Three year subscription for IDP updates on SR550 SR550-S2-AS-3 SR550-W-WF-3 SR550-SMB4-CS-3 SR550-S-SMB4- CS-3 SR550-K-AV-5 SR550-S-AV-5 SR550-IDP-5 SR550-W-WF-5 SR550-SMB4-CS-5 SR550-S-SMB4- CS-5 SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU SR-RAC-50-LTU SR-RAC-100-LTU SR-RAC-150-LTU SR-RAC-250-LTU SR-RAC-500-LTU SR550-APPSEC-A-1 SR550-APPSEC-A-3 SR550-APPSEC-A-5 Base System H2 H2-POE antispam updates on SR550 Three year subscription for Juniper-Websense Web filtering updates on SR550 Three year security subscription for enterprise AS, AppSecure and IDP on SR550 Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR550 Five year subscription for Juniper-Kaspersky AV updates on SR550 Five year subscription for Juniper-Sophos AV updates on SR550 Five year license for IDP updates for SR550 Five year subscription for Juniper-Websense Web filtering updates on SR550 AS, AppSecure and IDP on SR550 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR550 Dynamic VPN Client: 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 10 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 25 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 50 simultaneous users for SR210, SR220,, SR550, and SR650 only Dynamic VPN Client: 100 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 150 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 250 simultaneous users for, SR550, and SR650 only Dynamic VPN Client: 500 simultaneous users for SR550 and SR650 only One year subscription for Application Security and IPS updates for SR550 Three year subscription for Application Security and IPS updates for SR550 Five year subscription for Application Security and IPS updates for SR550 Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB DRAM, 2 GB Flash); integrated power supply with power cord, and 19 rack mount kit included Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB RAM, 2 GB Flash), with 16 ports PoE (150 W); integrated power supply with power cord, and 19 rack mount kit included 15

16 H2-DC -RMK H-TAA H-POE-TAA Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB RAM, 2 GB Flash); integrated -48 V DC power supply with 19 rack mount kit included rack-mount kit for 19 in rack (holds one unit) Trade Agreement Act-compliant Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash) Trade Agreement Act-compliant Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash), with 16 ports PoE (150 W) Additional Software Feature Licenses -K-AV -S-AV -IDP -S2-AS -W-WF -SMB4-CS -S-SMB4-CS -K-AV-3 -S-AV-3 -IDP-3 -S2-AS-3 -W-WF-3 -SMB4-CS-3 -S-SMB4- CS-3 -K-AV-5 -S-AV-5 -IDP-5 -S2-AS-5 One year subscription for Juniper-Kaspersky antivirus updates on antivirus updates on One year subscription for IDP updates on antispam updates on One year subscription for Juniper-Websense Web filtering updates on AS, AppSecure and IDP on includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on Three year subscription for Juniper-Kaspersky antivirus updates on antivirus updates on Three year subscription for IDP updates on antispam updates on Three year subscription for Juniper-Websense Web filtering updates on Three year security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on Five year subscription for Juniper-Kaspersky antivirus updates on Five year subscription for Juniper-Sophos antivirus updates on Five year subscription for IDP updates on Five year subscription for Juniper-Sophos antispam updates on -SMB4-CS-5 -S-SMB4- CS-5 -S2-AS-5 -W-WF-5 -SMB2-CS-5 AS, AppSecure and IDP on includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on Five year subscription for Juniper-Sophos antispam updates on Five year subscription for Juniper-Websense Web filtering updates on includes Kaspersky antivirus, Web filtering, Sophos antispam, and IDP on -S-SMB-CS-5 includes Sophos antivirus, Web filtering, Sophos antispam and IPS on SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU SR-RAC-50-LTU SR-RAC-100-LTU SR-RAC-150-LTU SR-RAC-250-LTU -APPSEC-A-1 Dynamic VPN Client: 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 10 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 25 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 50 simultaneous users for SR210, SR22,, SR550 and SR650 only Dynamic VPN Client: 100 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 150 simultaneous users for SR220,, SR550, and SR650 only Dynamic VPN Client: 250 simultaneous users for, SR550, and SR650 only One year subscription for Application Security and IPS updates for -APPSEC-A-3 Three year subscription for Application Security and IPS updates for -APPSEC-A-5 Five year subscription for Application Security and IPS updates for SR220 Base System SR220H2 SR220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (2 GB RAM, 2 GB Flash) external power supply and cord included SR220H2-POE SR220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (2 GB RAM, 2 GB Flash), with 8 ports PoE (120 W)* SR220-RMK SR220-WALL-KIT SR220-PWR-60W* SR220 rack-mount kit for 19 in rack (holds one unit) SR220 wall mount kit (holds one unit) Spare SR220 switching power supply, 60 W (non-poe) -W-WF-5 Five year subscription for Juniper-Websense Web filtering updates on *See price list for country-specific power cord model numbers. 16

17 SR220 Additional Software Feature Licenses SR220-K-AV SR220-S-AV SR220-IDP SR220-S2-AS SR220-W-WF SR220-SMB4-CS SR220-S-SMB4-CS SR220-K-AV-3 SR220-S-AV-3 SR220-IDP-3 SR220-S2-AS-3 SR220-W-WF-3 SR220-SMB4-CS-3 SR220-S-SMB4- CS-3 SR220-K-AV-5 SR220-S-AV-5 SR220-IDP-5 SR220-W-WF-5 SR220-SMB4-CS-5 SR220-S-SMB4- CS-5 SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU SR-RAC-50-LTU SR-RAC-100-LTU One year subscription for Juniper-Kaspersky antivirus updates on SR220 antivirus updates on SR220 One year subscription for IDP updates on SR220 antispam updates on SR220 One year subscription for Juniper-Websense Web filtering updates on SR220 AS, AppSecure and IDP on SR220 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR220 Three year subscription for Juniper-Kaspersky antivirus updates on SR220 antivirus updates on SR220 Three year subscription for IDP updates on SR220 antispam updates on SR220 Three year subscription for Juniper-Websense Web filtering updates on SR220 Three year security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on SR220 Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR220 Five year subscription for Juniper-Kaspersky antivirus updates on SR220 Five year subscription for Juniper-Sophos antivirus updates on SR220 Five year subscription for IDP updates on SR220 Five year subscription for Juniper-Websense Web filtering updates on SR220 AS, AppSecure and IDP on SR220 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR220 Dynamic VPN Client: 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 10 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 25 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 50 simultaneous users for SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 100 simultaneous users for SR220,, SR550, and SR650 SR-RAC-150-LTU Dynamic VPN Client: 150 simultaneous users for SR220,, SR550, and SR650 SR220-APPSEC-A-1 One year subscription for Application Security and IPS updates for SR220 SR220-APPSEC-A-3 Three year subscription for Application Security and IPS updates for SR220 SR220-APPSEC-A-5 Five year subscription for Application Security and IPS updates for SR220 SR210 Base System SR210HE2 SR210 Services Gateway with 2 GbE+ 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB RAM, 2 GB Flash) SR210HE2-POE SR210 Services Gateway with 2 GbE + 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB RAM, 2 GB Flash), with 4 ports PoE (50 W) SR210 Additional Hardware SR210-DESK-STAND SR210 desk top stand (holds one unit) SR210-RMK SR210-WALL-KIT SR210 rack-mount kit for 19 in rack (holds one unit) SR210 wall mount kit (holds one unit) SR210-PWR-60W-* Spare SR210 switching power supply, 60 W (non-poe) SR210-PWR-150W-* Spare SR210 switching power supply, 150 W (PoE) SR210 Additional Software Feature Licenses SR210-K-AV SR210-S-AV SR210-IDP SR210-S2-AS SR210-W-WF SR210-SMB4-CS SR210-S-SMB4-CS SR210-K-AV-3 SR210-S-AV-3 SR210-IDP-3 SR210-S2-AS-3 SR210-W-WF-3 SR210-SMB4-CS-3 SR210-S-SMB4- CS-3 One year subscription for Juniper-Kaspersky antivirus updates on SR210 antivirus updates on SR210 One year subscription for IDP updates on SR210 antispam updates on SR210 One year subscription for Juniper-Websense Web filtering updates on SR210 AS, AppSecure and IDP on SR210 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR210 Three year subscription for Juniper-Kaspersky antivirus updates on SR210 antivirus updates on SR210 Three year subscription for IDP updates on SR210 antispam updates on SR210 Three year subscription for Juniper-Websense Web filtering updates on SR210 Three year security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on SR210 Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR210 17

18 SR210-K-AV-5 SR210-S-AV-5 SR210-IDP-5 SR210-S2-AS-5 SR210-W-WF-5 SR210-SMB4-CS-5 SR210-S-SMB4- CS-5 SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU SR-RAC-50-LTU SR210-APPSEC-A-1 SR210-APPSEC-A-3 SR210-APPSEC-A-5 Five year subscription for Juniper-Kaspersky antivirus updates on SR210 Five year subscription for Juniper-Sophos antivirus updates on SR210 Five year subscription for IDP updates on SR210 Five year subscription for Juniper-Sophos antispam updates on SR210 Five year subscription for Juniper-Websense Web filtering updates on SR210 AS, AppSecure and IDP on SR210 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP on SR210 Dynamic VPN Client: 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 10 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 25 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 Dynamic VPN Client: 50 simultaneous users for SR210, SR220,, SR550, and SR650 only One year subscription for Application Security and IPS updates for SR210 Three year subscription for Application Security and IPS updates for SR210 Five year subscription for Application Security and IPS updates for SR210 Small Form Factor Pluggable (SFP) Transceivers SR-SFP-1GE-LH SR-SFP-1GE-L SR-SFP-1GE-S SR-SFP-1GE-T SR-SFP-FE-F SR-MP-1SFP-GE SR-GP-8SFP SR110 Base System SR110H2-VA SR110H2-VB SFP 1000BASE-LH Optical Transceiver SFP 1000BASE-L Optical Transceiver SFP 1000BASE-S Optical Transceiver SFP 1000BASE-T Copper Transceiver SFP 100BASE-F Optical Transceiver Single-port SFP Mini-PIM 8-port GbE copper, fiber SFP PIM SR110 Services Gateway with 8xFE ports, 2 GB RAM and Flash, 1-port VDSL2/ADSL2+ over POTS, USB port for cellular modem connectivity, and external PS and cord included SR110 Services Gateway with 8xFE ports, 2 GB RAM and Flash, 1-port VDSL2/ADSL2+ over ISDN BRI, USB port for cellular modem connectivity, and external PS and cord included *See price list for country-specific power cord model numbers. SR110 Additional Hardware SR110-DESK-STAND SR110 desktop stand; holds one unit SR110-RMK SR110-WALL-KIT SR100 Base System SR100H2 SR100 Additional Hardware SR110 rack-mount kit; holds one unit SR110 wall mount kit; holds one unit SR100 Services Gateway with 8xFE ports and high memory (2 GB RAM, 2 GB Flash) SR100-PWR-30W-* Spare SR100 switching power supply, 30 W (non-poe) SR-100-RMK SR100-WALL-KIT SR100-DESK- STAND SR rack-mount kit (holds two units) SR100 wall mount kit (holds one unit) SR100 desk stand (holds one unit) SR100/SR110 Dynamic VPN Client SR-RAC-5-LTU SR-RAC-10-LTU SR-RAC-25-LTU 5 simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR simultaneous users for SR100, SR110, SR210, SR220,, SR550, and SR650 SR100/SR110 Additional Software Feature Licenses ** SR1-K-AV SR1-K-AV-3 SR1-K-AV-5 SR1-S-AV SR1-S-AV-3 SR1-S-AV-5 SR1-S2-AS SR1-S2-AS-3 SR1-S2-AS-5 SR1-W-EWF SR1-W-EWF-3 SR1-W-EWF-5 SR1-SMB4-CS SR1-SMB4-CS-3 One year subscription for Juniper-Kaspersky AV updates Three year subscription for Juniper-Kaspersky AV updates Five year subscription for Juniper-Kaspersky AV updates AV updates AV updates Five year subscription for Juniper-Sophos AV updates antispam updates antispam updates Five year subscription for Juniper-Sophos antispam updates One year subscription for Juniper-Websense enhanced Web filtering updates Three year subscription for Juniper-Websense enhanced Web filtering updates Five year subscription for Juniper-Websense enhanced Web filtering updates AS, AppSecure and IDP Three year security subscription for Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP ** The additional software feature licenses apply to both the SR100 and the SR

19 SR1-SMB4-CS-5 AS, AppSecure and IDP SR1-SMB4-CS-R One year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-S-SMB4-CS includes Sophos AV, enhanced WF, Sophos AS, AppSecure, AppSecure and IDP SR1-SMB4-CS- 3-R Three year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-S-SMB4- CS-3 Three year security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-SMB4-CS- 5-R Five year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-S-SMB4- CS-5 includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-S-SMB4- CS-R One year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP SR1-IDP SR1-IDP-3 SR1-IDP-5 SR1-K-AV-3-R SR1-K-AV-5-R SR1-K-AV-R SR1-S-AV-3-R SR1-S-AV-5-R SR1-S-AV-R SR1-S2-AS-3-R SR1-S2-AS-5-R SR1-S2-AS-R SR1-W-EWF-3-R SR1-W-EWF-5-R SR1-W-EWF-R One year license for IDP updates Three year license for IDP updates Five year license for IDP updates Three year renewal subscription for Juniper- Kaspersky AV updates Five year renewal subscription for Juniper- Kaspersky AV updates One year renewal subscription for Juniper- Kaspersky AV updates Three year renewal subscription for Juniper- Sophos AV updates Five year renewal subscription for Juniper- Sophos AV updates One year renewal subscription for Juniper- Sophos AV updates Three year renewal subscription for Juniper- Sophos antispam updates Five year renewal subscription for Juniper- Sophos antispam updates One year renewal subscription for Juniper- Sophos antispam updates Three year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates Five year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates One year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates SR1-S-SMB4- CS-3-R SR1-S-SMB4- CS-5-R SR1-IDP-R SR1-IDP-3-R SR1-IDP-5-R SR100-APPSEC-A-1 SR100-APPSEC-A-3 Three year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP Five year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP One year renewal subscription for IDP Signature service Three year renewal subscription for IDP Signature service Five year renewal subscription for IDP Signature service One year subscription for Application Security and IPS updates for SR100 Three year subscription for Application Security and IPS updates for SR100 SR100-APPSEC-A-5 Five year subscription for Application Security and IPS updates for SR100 ** The additional software feature licenses apply to both the SR100 and the SR110.,.,,.,. 한국주니퍼네트웍스 ( 주 ) 서울시강남구역삼 1 동 캐피탈타워 19 층 TEL: 02) FA: 02) 본사 아태지역및 EMEA 본부 주니퍼네트웍스솔루션에대한구매문의는한국주니퍼네트웍스 ( 전화 , 이메일 salesinfo-korea@juniper.net) 로연락주십시오. 주니퍼둘러보기 앱다운로드 Copyright 2017 Juniper Networks, Inc. 모든권리보유. 주니퍼네트웍스, 주니퍼네트웍스로고, Junos 및 QFabric 은미국과기타국가에서 Juniper Networks, Inc. 의등록상표입니다. 기타모든상표, 서비스마크, 등록상표또는등록서비스마크는해당소유업체의 자산입니다. 주니퍼네트웍스는본문서의부정확성에대해일체의책임을지지않습니다. 주니퍼네트웍스는예고없이본문서의내용을변경, 수정, 이전또는개정할권리를보유합니다 KR Nov 2017