Spec Sheet

4
Data SheetEX3400 Ethernet Switch
enforcement based on user identity, location, device, or a
combination of these. A user’s identity, device type, machine
posture check, and location can be used to not only grant or deny
access but also to determine the duration of access. If access is
granted, the switch assigns the user to a specific VLAN based on
authorization levels. The switch can also apply QoS policies or
mirror user traffic to a central location for logging, monitoring, or
threat detection by an intrusion prevention system (IPS).
The EX3400 also provides a full complement of port security
features, including Dynamic Host Configuration Protocol (DHCP)
snooping, dynamic ARP inspection (DAI), and media access
control (MAC) limiting to defend against internal and external
spoofing, man-in-the-middle, and denial-of-service (DoS) attacks.
MACsec
EX3400 switches support IEEE 802.1ae MACsec, providing
support for link-layer data confidentiality, data integrity, and data
origin authentication. The MACsec feature enables the EX3400
to support 88 Gbps of near line-rate hardware-based traffic
encryption on all GbE and 10GbE ports.
Defined by IEEE 802.1AE, MACsec provides secure, encrypted
communication at the link layer that is capable of identifying
and preventing threats from DoS and intrusion attacks, as well
as man-in-the-middle, masquerading, passive wiretapping,
and playback attacks launched from behind the firewall. When
MACsec is deployed on switch ports, all traffic is encrypted on the
wire but traffic inside the switch is not. This allows the switch to
apply all network policies such as QoS, deep packet inspection,
and sFlow to each packet without compromising the security of
packets on the wire.
Hop-by-hop encryption enables MACsec to secure
communications while maintaining network intelligence. In
addition, Ethernet-based WAN networks can use MACsec to
provide link security over long-haul connections. MACsec is
transparent to Layer 3 and higher-layer protocols and is not
limited to IP traffic—it works with any type of wired or wireless
traffic carried over Ethernet links.
Junos Operating System
The EX3400 switches run the same Junos OS that is used by
other Juniper Networks EX Series Ethernet Switches, QFX Series
Switches, Juniper Routers, Juniper SRX Firewalls, and the Juniper
NFX Series Network Services Platform. By utilizing a common
operating system, Juniper delivers a consistent implementation
and operation of control plane features across all products.
To maintain that consistency, Junos OS adheres to a highly
disciplined development process that uses a single source
code and employs a highly available modular architecture that
prevents isolated failures from bringing an entire system down.
These attributes are fundamental to the core value of the
software, enabling all Junos OS-powered products to be updated
simultaneously with the same software release. All features are
fully regression tested, making each new release a true superset
of the previous version. Customers can deploy the software with
complete confidence that all existing capabilities are maintained
and operate in the same way.
Converged Environments
The EX3400 switches provide a flexible solution for demanding
converged data, voice, and video environments. The EX3400-
24P and EX3400-48P support PoE+, delivering up to 30 watts of
power per port to support networked devices such as telephones,
video cameras, IEEE 802.11ac wireless LAN (WLAN) access
points, and videophones. The PoE+ standard provides nearly
double the 15.4 watts per port available with the IEEE 802.3af
PoE standard.
High Availability
The EX3400 line of Ethernet switches is designed to support
many of the same failover capabilities and high availability (HA)
functionality as other Juniper EX access switches with Virtual
Chassis technology.
Each EX3400 switch is capable of functioning as a Routing Engine
(RE) when deployed in a Virtual Chassis configuration. When two
or more EX3400 switches are interconnected in a Virtual Chassis
configuration, all member switches share a single control plane.
Junos OS automatically initiates an election process to assign a
Product Options
Table 2: EX3400 Ethernet Switch Models
SKU Total 10/100/
1000BASE-T
Ports
Uplinks Airflow Power
Supply
Typ e
PoE+ Power
Budget (W)
Max. System
Power
Consumption
(W)
*
Power Supply
Rating (W)
EX3400-24T 24
10GbE/GbE
SFP+/SFP
ports
2 40GbE
QSFP+ ports
Front-to-back AC 0 100 150W
EX3400-48T 48 Front-to-back AC 0 120 150W
EX3400-48T-AFI 48 Back-to-front AC 0 120 150W
EX3400-24P 24 PoE+ Front-to-back AC 370W
2
/720W
3
110 600W
EX3400-48P 48 PoE+ Front-to-back AC 740W
2
/1440W
3
120 920W
EX3400-24T-DC 24 Front-to-back DC 0 100 150W
2
1 power supply
3
2 power supplies
* Input power without PoE