Junos OS 22.3R1 for MX and EX Series with MPC10E

Version: 

Junos OS 22.3R1

Product type: 

Network and Network Related Devices and Systems

Product Status: 

In evaluation

Assurance Level: 

Protection Profile

Evaluation Facility: 

Teron Labs

Certification Progress: 

Progressing

Estimated Approval: 

Q2/2023

Juniper Networks Inc

1133 Innovation Way
Sunnyvale 94089 CA

Contact:

Mark Barrett
Lead Systems Engineer
Phone: +61 2 8913 9869
Email: mbarrett@juniper.net

Geetha Nalk
Certification Program Manager
Phone: +91 80 6121 4404
Email: ngeetha@juniper.net

Product Description:

The Target of Evaluation (TOE) is Juniper Networks, Inc. Junos OS 22.3R1 executing on MX series universal routing modular platforms (MX240, MX480 and MX960), and the EX9200 line of modular Ethernet switches (EX9204, EX9208 and EX9214) with MACsec support.

The line cards containing the MACsec module, required for deployment in the TOE are:

  • MPC10E-10C and MPC10E-15C for the MX platforms, and
  • EX9200-15C for the EX platforms.

The portfolio of MX universal routing modular platforms includes a wide range of physical and virtual platforms that share a common architecture and feature set. Each Juniper Networks MX routing appliance is a complete routing system that supports a variety of high-speed interfaces (only Ethernet is within scope of the evaluation) for medium/large networks and network applications. Juniper Networks MX routers share common Junos firmware, features, and technology for compatibility across platforms.

The EX9200 line of programmable, flexible and scalable modular Ethernet core switches simplifies the deployment of cloud applications, virtualized servers and rich media collaboration tools across campus and data center environments. High port densities enable the EX9200 to consolidate and aggregate network layers, dramatically simplifying campus and data center architectures while reducing total cost of ownership.

The MACsec line cards implement MACsec between adjacent devices, protecting all traffic communicated between the devices including frames for LLDP, DHCP, ARP, STP, Ethernet Control frames, etc (the exceptions to this protection are Destination MAC and Source MAC addresses in MACsec and MKA frames).