Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Executive Intro Slide JUNIPER / VMWARE NSX TECHNICAL UPDATE Daniel McGinniss May 8, 2014

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line AGENDA NSX – The Problem and Solution Juniper / VMware – Strategy Update Understanding NSX VXLAN Hardware Gateways Introduction to Configuring NSX L2 Gateways QFX5100 Connectivity Models

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line IMPETUS FOR CHANGE Logical Scale 4096 VLANs MAC propagation VLAN member limitations Multi-tenancy Lack of customer separation Difficult to gather flow stats Services are inflexible Business Agility Moves/adds/changes Device-level config changes Resource allocation silos What is the problem that NSX is attempting to solve?

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line THE SOLUTION Decouple virtual network from physical network L2 L3 Virtual Network L2 VM Physical Logical Business Agility Benefits  No network-level changes  Automated configuration  No Layer 2 protocols  Dynamic resource allocation Logical Scaling Benefits  Network is all Layer 3  VM MACs are masked  No need to configure VLANs Support for multi-tenancy  Similar to VRFs  Pooled resources  No need to configure VLANs

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Title and Bullets INTRODUCING OVERLAYS Using VXLAN to “tunnel” across a Juniper underlay VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VXLAN Attributes  MACs are hidden from underlay  No VLANs configured on the underlay  Core is all Layer 3  Server-to-server traffic is encapsulated

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line VM 1 TCPVM 1 EthVM 1 App DataVM 1 IP UDPVXLANOuter EthOuter IP THE PACKET WALK VM 1 to VM 4 communication in a VxLAN conversation VM 1 VM 2 VM 3 VXLAN VTEP vSwitch Kernel IP Stack VM 4 VM 5 VM 6 VTEP vSwitch Kernel IP Stack Step 2: VTEP module encapsulates VM 1 packet in UDP/VxLAN header Step 1: VM 1 sends a data packet onto the network via vSwitch IP Transport Network Step 3: Kernel adds outer IP & Ethernet header addressed to remote hypervisor Step 4: IP Packet received by remote hypervisor Step 5: IP header removed, UDP/VxLAN packet sent to VTEP Step 6: VTEP de-encapsulates UDP/VxLAN header, VM 1 packet delivered to VM 4 VM 1 TCPVM 1 EthVM 1 App DataVM 1 IP UDPVXLAN VM 1 TCPVM 1 EthVM 1 App DataVM 1 IP

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line THE BIG PICTURE Management Plane Centralize provisioning and orchestration Control Plane Centralize route distribution, topology discovery and tunnel mapping Data Plane Network overlays tunnel across physical network Network Director Private WAN; DCI; Internet Bare Metal Orchestration NSX Controller Services GW Trends of the SDN Data Center…. VXLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VXLAN VxLAN VxLAN VxLAN VxLAN VxLAN

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line VMWARE OVERLAY OPTIONS NSX for vSphere Overlay solution with ESXi and VMware server management tools Description NSX for Multi Hypervisor Overlay solution with multi hypervisor and multiple cloud management platforms support VXLAN without Controllers VMware vCloud Director Cloud Management Platforms (CMP) OpenStack, CloudStack, customVMware vCloud DirectorYes Support L3 Multicast-Based Data Plane Learning NoYes IP/Ethernet transportNetworkIP/Ethernet transport ESXiHypervisorXEN, KVM, ESXi, RedhatESXi Overlay solution without a controller NSX for vSphereSDN ControllerNSX for MHNo controllerL3 Multicast, Unicast or hybridEnd Point ReachabilityOVSDB control planeL3 Multicast, Unicast or hybrid VXLANOverlay Encapsulation GRE (for VMs that need to pass firewalls), STT (VM to VM), VxLAN (VM to HW VTEP) VxLAN VMware VDSVirtual Switch Open vSwitch(XEN,KVM) & NSX vSwitch for ESXi VMware VDS

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line AGENDA NSX – The Problem and Solution Juniper / VMware – Strategy Update Understanding NSX VXLAN Hardware Gateways Introduction to Configuring NSX L2 Gateways QFX5100 Connectivity Models

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line JUNIPER / VMWARE PARTNERSHIP 1.Smart forwarding across physical and virtual infrastructure 2.End-to-end visibility and management 3.Telemetry and analytics 4.Integrated security 5.Application/flow-based traffic handling Five “Areas of Collaboration”

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line JUNIPER / VMARE PARTNERSHIP 1.Jointly published whitepaper: Daniel McGinniss / Scott Lowe (VMware)  Joint Blog: Denise Shiffman / Hatem Naguib (VMware)  Interop Las Vegas 2014 Keynote: Pat Gelsinger; CEO VMware  Marketing Work Streams

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line AGENDA NSX – The Problem and Solution Juniper / VMware – Strategy Update Understanding NSX VXLAN Hardware Gateways Introduction to Configuring NSX L2 Gateways QFX5100 Connectivity Models

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line Bare Metal Servers Databases HPC Legacy Apps Non x86 IP Storage Firewalls Load Balancers NAT Intrusion Detection VPN Concentrator L4 – 7 Appliances NSX-vSphere ESXi NSX-MH ESXi NSX-MH KVM NSX-MH XEN SDN Servers Virtualized Servers ESX ESXi KVM XEN NETWORK DEVICES IN THE DATA CENTER

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line ALL THE DEVICES NEED TO COMMUNICATE Four use primary use cases Provide SDN-to-non-SDN translation, same IP subnet SDN to IP (Layer 2) Layer2 Remote Data Center Branch Offices Internet Layer3 Provide SDN-to-non-SDN translation, different IP subnet SDN to IP (Layer 3) Provide SDN-to-SDN translation, same or different IP subnet, same or different overlay SDN SDN to SDN WAN Provide SDN-to-WAN translation, same or different IP subnet, same or different encapsulation SDN to WAN

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line TWO GATEWAY OPTIONS Universal SDN Gateway (USG) MX Series & EX of 4 use cases Custom silicon = future proof Higher cost, larger footprint Layer 2 Gateway QFX of 4 use cases Standalone – Virtual Chassis – Virtual Chassis Fabric Relatively low cost

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line USGs INSIDE THE DATA CENTER DATA CENTER 1 Legacy Pods NSX SDN Pod 1 Layer2 USG Layer3 USG SDN USG WAN USG L4 – 7 Services Using Layer 2 USGs to bridge between devices that reside within the same IP subnet: 1.Bare metal servers like high-performance databases, non- x86 compute, IP storage, non-SDN VMs 2.Layer 4–7 services such as load balancers, firewalls, Application Device Controllers, and Intrusion Detection/Prevention gateways. VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native NSX Controller OVSDB

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line USGs INSIDE THE DATA CENTER DATA CENTER 1 Legacy Pods NSX SDN Pod 1 Layer2 USG Layer3 USG SDN USG WAN USG L4 – 7 Services VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native Using Layer 3 USGs to route between devices that reside within different IP subnets: 1.Bare metal servers like high-performance databases, non- x86 compute, IP storage, non-SDN VMs 2.Layer 4–7 services such as load balancers, firewalls, Application Device Controllers, and Intrusion Detection/Prevention gateways. NSX Controller OVSDB

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line GRE MPLSoverGRE MPLSoverGRE MPLSoverGRE MP NSX SDN Pod 2 USGs INSIDE THE DATA CENTER DATA CENTER 1 NSX SDN Pod 1 Layer2 USG Layer3 USG SDN USG WAN USG Using SDN USGs to communicate between islands of SDN: 1.NSX to NSX – Risk, scale, change control, administration 2.NSX to Contrail – Multi-vendor, migrations Contrail SDN Pod 1 VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN MPLSover VxLAN VxLAN VxLAN VxLAN VxLAN MPLSover LSoverGRE MPLSoverGRE MPLS NSX Controller OVSDB Contrail Controller OVSDB NetConf / MBGP NSX Controller

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line VxLAN BRANCH OFFICES NSX SDN Pod 2 Internet USGs FOR REMOTE CONNECTIVITY DATA CENTER 1 SDN Pod 1 Layer2 USG Layer3 USG SDN USG WAN USG DATA CENTER 2 VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3VxLAN GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE EVPN EVPN EVPN EVPN EV PN EVPN EVPN EVPN EVPN EVPN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Using WAN USGs to communicate to resources outside the local data center: 1.Data Center Interconnect – SDN to [VPLS, EVPN, L3VPN] 2.Branch Offices – SDN to [GRE, IPSec] 3.Internet – SDN to IP (Layer 3) NSX Controller DC2 OVSDB NSX Controller DC1 OVSDB

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line EVPN Internet Contrail SDN Pod 1 L4–7 Services Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native IP L3 Native Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native MPLSoverGRE MPLSoverGRE MPLSoverGRE MPLSover LSoverGRE MPLSoverGRE MPLS VxLAN VxLAN VxLAN Native IP L3 Native IP L3 Native IP L3 Native IP L3 NSX SDN Pod 2 UNIVERSAL GATEWAY SOLUTIONS DATA CENTER 1 NSX SDN Pod 1 Layer2 USG Layer3 USG WAN USG Legacy Pods DATA CENTER 2 NSX SDN Pod 2 BRANCH OFFICES VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Native IP L3 VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN VxLAN Native IP L2 Native IP L2 Native IP L2 Native IP L2 Native IP L2 VxLAN VxLAN VxLAN VxLAN VxLAN MPLSover Native IP L2 Native IP L3 Native IP L3 Native IP EVPN GRE VxLAN SDN USG GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE GRE VxLAN VxLAN VxLAN VxLAN

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line USG COMPARISONS MATRIX Description QFX5100 MX Series/EX9200 Layer 2 USG Provide SDN-to-non-SDN translation, same IP subnet ✔ ✔ NSX or Contrail talk Layer 2 to non-SDN VMs, bare metal and L4-7 services Use Cases Layer 3 USG Provide SDN-to-non-SDN translation, different IP subnet ✔ NSX or Contrail talk Layer 3 to non-SDN VMs, bare metal and L4-7 services and Internet SDN USG Provide SDN-to-SDN translation, same or different IP subnet, same or different Overlay ✔ NSX or Contrail talk to other PODs of NSX or Contrail WAN USG Provide SDN-to-WAN translation, same or different IP subnet ✔ NSX or Contrail talk to other remote locations – branch, DCI X86 Appliance ✔ ✔ Competing ToRs ✔ Competing Chassis ✔ Description

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line AGENDA NSX – The problem and solution Juniper / VMware – Strategy update Understanding NSX VXLAN Hardware Gateways Introduction to Configuring NSX L2 Gateways QFX5100 Connectivity Models

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. VMWARE NSX L2 GATEWAY OPERATION Virtual Network (Virtual VTEP) Physical Environment (Hardware VTEP) VMware NSX Controller 1 VTEPs register with VMware NSX 2 Virtual VTEP MAC addresses advertised to hardware VTEPs 3 Virtual Network Identifiers mapped to VXLANs / VLANs 4 Hardware VTEPs send physical MAC addresses to VMware NSX 5 VMware NSX publishes mappings to all VTEPs 6 Traffic flows between virtual and physical environments Changed NSX to VMware NSX Changed “routes ” to “mappings” (VMware ask) Changed arrows in step 3 to show them coming from controller vs virt network to physical

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line JUNOS CLI OUTPUT Juniper VXLAN VTEP Gateway Switch Setup Juniper QFX5100 show commands to see dynamically created VLANs, interface bindings and MACs. Port xe-0/0/3 is attached to bare metal server, is configured as access port. Controller ip is

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line NSX MANAGER OUTPUT

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 2-Line AGENDA NSX – The problem and solution Juniper / VMware – Strategy Update Understanding NSX VXLAN Hardware Gateways Introduction to Configuring NSX L2 Gateways QFX5100 Connectivity Models

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line CONNECTIVITY MODELS WITH QFX SERIES Virtual Chassis Fabric Resiliency Physical server multihoming Virtual Chassis Fabric abstracted as VTEP for all physical servers in fabric Simplified management & provisioning QFX5100 Virtual Chassis Fabric Supported only with Virtual Chassis Fabric of QFX5100s

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line Two-member Virtual Chassis only L3 scale out with Virtual Chassis for BM end-host connectivity 2 member Virtual Chassis BGP/OSPF Simple to deploy with abstraction across a pair of switches L3 protocols from TORs including Virtual Chassis CONNECTIVITY MODELS WITH QFX SERIES Virtual Chassis

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Blank SlideTitle and Content 1-Line CAVEATS Multi-controller support not available MC-LAG not supported. Planned Only L2 access ports supported. L2 trunking support planned Ephemeral DB (separate CLI & controller config) planned

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Q&A Slide

Slide Type Juniper Networks Large Venue Template / 16x9 / V6 Copyright © 2014 Juniper Networks, Inc. Thank-You Slide