Juniper Networks EX2300M-48MP
Compact, high-performance, multigigabit access switches.

Product Overview:

The Juniper Networks EX2300 Ethernet Switch offers an economical, entry-level, standalone solution for accesslayer deployments in branch and remote offices, as well as enterprise campus networks. Both 1 Gbps and 2.5 Gbps access port options are available to provide higherspeed options, especially when connecting to 802.11ac Wave 2 access points.

To simplify network operations, the EX2300 can act as a satellite device to support a Juniper Networks Junos Fusion Enterprise deployment, which can combine several wiring closets into one logical management platform. For smaller networks, up to four EX2300 switches can be interconnected in a Virtual Chassis configuration, allowing them to be managed as a single switch.

Product Description

The Juniper Networks® EX2300 line of Ethernet switches offers a compact, highperformance solution for supporting today’s converged network access deployments.

Each EX2300 switch includes an ASIC-based Packet Forwarding Engine (PFE) with an integrated CPU to consistently deliver wire-rate forwarding, even with all control plane features enabled. Based on existing, field-proven Juniper Networks technology, the PFE brings the same level of carrier-class performance and reliability to the EX2300 switches that Juniper Networks routers bring to the world’s largest service provider networks.

Select EX2300 models also support the 802.3af Class 3 Power over Ethernet (PoE) and 802.3at PoE+ standards for supporting networked devices such as telephones, video cameras, IEEE 802.11ac WLAN access points, and videophones in converged networks. The PoE-enabled EX2300 switches include a maximum system budget of 740 watts to deliver up to 30 watts to select ports.

Multiple EX2300 models are available, including versions offering multigigabit (up to 2.5 Gbps) PoE+ access ports that can accommodate higher-speed IEEE 802.11ac Wave 2 access points, enabling the switches to support more wireless users.

The EX2300 fixed-configuration Ethernet switches provide exceptional value to enterprise customers by supporting the following key technologies:

• Juniper Networks Junos® Fusion Enterprise allows up to 128 EX2300 switches to be configured as satellite devices that connect to EX9200 core aggregation devices.
• Virtual Chassis technology enables up to four interconnected EX2300 switches to form a single logical device.
• Flexible 4x1GbE SFP/10GbE SFP+ uplinks provide high-speed connectivity to aggregation layer switches or other upstream devices.
• Up to 48 10/100/1000BASE-T ports are available with or without PoE/PoE+.
• Energy Efficient Ethernet (EEE) support is provided on 1GbE ports.
• Complete Layer 2 and basic Layer 3 switching capabilities are available.
• Simplified management uses Juniper Networks Junos Space Network Director and J-Web GUI.

Additional features include:

• PoE-enabled EX2300 switches can simultaneously deliver up to 15.4 watts of standards-based 802.3af Class 3 PoE to a maximum of 48 ports or 30 watts of standards-based 802.3at PoE+ to a maximum of 24 ports, based on a total system budget of 740 watts.
• Uplink ports can be configured as Virtual Chassis interfaces and connected via standard 10GbE optics interfaces (optional license required).
• Fixed power supply and uplink ports ensure operational simplicity.
• Low power consumption, low acoustic fans, and a small 10-inch deep footprint enable flexible, environmentally friendly deployment.
• Support for L2 protocols as well as L3 protocols like RIP and static routing are included in the base license.
• An optional enhanced license is available for supporting additional L3 protocols such as OSPF, Internet Group Management Protocol (IGMP v1/v2/v3), Protocol Independent Multicast (PIM), Bidirectional Forwarding Detection (BFD), MLD v1, MLD v2, MLD snooping, and Virtual Router Redundancy Protocol (VRRP).
• Support is available for IPv6 management, including neighbor discovery, telnet, SSH, DNS, system log, and NTP.
• A single release train for Juniper Networks Junos operating system is supported to ensure a consistent control plane feature implementation.
• Modular Junos OS prevents a switch reboot if a single protocol feature fails.
• Built-in Web interface (Juniper Networks J-Web Software) is provided.
• RJ-45 serial console port is available.
• USB mini console port is included on 1GbE access switch models.
• Out-of-band Ethernet management port is provided.
• Reduction of Hazardous Waste (RoHS) is certified.

Features and Benefits:

High Availability Features

To avoid the complexities of the Spanning Tree Protocol (STP) without sacrificing network resiliency, the EX2300 employs a redundant trunk group (RTG) to provide the necessary port redundancy and simplify switch configuration. It also supports cross-member link aggregation, which allows redundant link aggregation connections between devices in a single Virtual Chassis configuration, providing an additional level of reliability and availability.

Junos Operating System

The EX2300 switches run the same Junos OS that is used by other Juniper Networks EX Series Ethernet Switches, QFX Series Switches, Juniper Routers, Juniper SRX Firewalls, and the Juniper NFX Series Network Services Platform. By utilizing a common operating system, Juniper delivers a consistent implementation and operation of control plane features across all products. To maintain that consistency, the Junos OS adheres to a highly disciplined development process that uses a single source code, and it employs a highly available modular architecture that prevents isolated failures from bringing down an entire system.

These attributes are fundamental to the core value of the software, enabling all Junos OS-powered products to be updated simultaneously with the same software release. All features are fully regression-tested, making each new release a true superset of the previous version. Customers can deploy the software with complete confidence that all existing capabilities are maintained and operate in the same way.

Converged Environments

The EX2300 provides the highest levels of flexibility and features in its class for the most demanding converged data, voice, and video environments, delivering a reliable platform for unifying enterprise communications.

By providing a full 15.4 watts of Class 3 PoE to VoIP telephones, closed-circuit security cameras, wireless access points, and other IP-enabled devices, the EX2300 delivers a future-proofed solution for converging disparate networks onto a single IP infrastructure. The EX2300 PoE switches also support 802.3at standards-based PoE+, delivering 30 watts for powering networked devices such as IEEE 802.11ac wireless access points, and videophones that might require more power than available with IEEE 802.3af.

To ease deployment, the EX2300 supports the industrystandard Link Layer Discovery Protocol (LLDP) and LLDPMedia Endpoint Discovery (LLDP-MED) protocol, enabling the switches to automatically discover Ethernet-enabled devices, determine their power requirements, and assign virtual LAN (VLAN) membership. LLDP-MED-based granular PoE management allows the EX2300 to negotiate PoE usage down to a fraction of a watt on powered devices, enabling more efficient PoE utilization across the switch.

In addition, the EX2300 supports rich quality-of-service (QoS) functionality for prioritizing data, voice, and video traffic. The switches support eight class-of-service (CoS) queues on every port, enabling them to maintain multilevel, end-to-end traffic prioritizations. The EX2300 also supports a wide range of policy options, including strict priority, low latency, weighted random early detection (WRED), and shaped-deficit weighted roundrobin (SDWRR) queuing.

Security

Working as an enforcement point in Access Policy Infrastructure, the EX2300 provides both standards-based 802.1X portlevel access control for multiple devices per port, as well as Layer 2-4 policy enforcement based on user identity, location, device, or a combination of these. A user’s identity, device type, machine posture check, and location can be used to determine whether access should be granted and for how long. If access is granted, the switch provides access to the network based on authorization attributes sent by the authentication server. The switch can also apply security policies, QoS policies, or both, or it can mirror user traffic to a central location for logging, monitoring, or threat detection by intrusion prevention systems.

The EX2300 also provides a full complement of integrated port security and threat detection features, including Dynamic Host Configuration Protocol (DHCP) snooping, dynamic ARP inspection (DAI), and media access control (MAC) limiting to defend against internal and external spoofing, and man-in-themiddle and denial of service (DoS) attacks.

Physical Specifications

Power Options

Model	Max. System Power Consumption (Input Power without PoE)	Total PoE Power Budget
EX2300-24T	55 W AC	0
EX2300-24P	80 W AC	370 W
EX2300-24MP	55 W AC	380 W
EX2300-48T	70 W AC	0
EX2300-48P	100 W AC	740 W
EX2300-48MP	90 W AC	740 W

Dimensions (W x H x D)

• Width:
  • 17.4 in (44.19 cm) for desktop installations
  • 17.5 in (44.6 cm) with rack-mount brackets
• Height: 1.75 in (4.45 cm) for 1U installations
• Depth:
  • EX2300-24T: 10.2 in (25.9 cm)
  • EX2300-24P: 12.2 in (30.98 cm)
  • EX2300-24MP: 10 in (25.4 cm)
  • EX2300-48T: 10.2 in (25.9 cm)
  • EX2300-48P: 12.2 in (30.98 cm)
  • EX2300-48MP: 14.5 in (36.83 cm)

Backplane

• 80 Gbps Virtual Chassis interconnect to link up to four switches as a single logical device (EX2300-24/48T/P and EX2300-24/48 MP models)

System Weight

• EX2300-24T: 7.25 lb (3.29 kg)
• EX2300-24P: 9.89 lb (4.49 kg)
• EX2300-24MP: 8.82 lb (4 kg)
• EX2300-48T: 8.29 lb (3.76 kg)
• EX2300-48P: 11.07 lb (5.02 kg)
• EX2300-48MP: 14.33 lb (6.5 kg)

Environmental Ranges

• Operating temperature: 32° to 113° F (0° to 45° C)
• Storage temperature: -40° to 158° F (-40° to 70° C)
• Operating altitude: up to 13,000 ft (3962 m) at 40° C according to GR-63
• Non-operating altitude: up to 15,000 ft (4572 m)
• Relative humidity operating: 10% to 85% (noncondensing)
• Relative humidity non-operating: 0% to 95% (noncondensing)

Cooling

• Airflow:
• EX2300-24T: 25 cfm
• EX2300-24P: 23 cfm
• EX2300-48T: 24 cfm
• EX2300-48P: 25 cfm

Hardware Specifications

Switching Engine Model

• Store and forward

DRAM

• 2 GB (EX2300-24/48T/P)

Flash

• 2 GB (EX2300 non-multigigabit models) 8 GB (EX2300-24MP, EX2300-48MP)

CPU

• 1.25GHz ARM CPU

GbE Port Density per System

• EX2300-24P/24T/24MP: 28 (24 host ports + four-port SFP/SFP+ uplinks)
• EX2300-48P/48T: 52 (48 host ports + four-port SFP/SFP+ uplinks)
• EX2300-48MP: 54 (48 host ports + six-port SFP/SFP+ uplinks)

Supported Optics

• 10/100/1000BASE-T connector type RJ-45
• GbE SFP optic/connector type: RJ-45, or LC SFP fiber supporting 1000BASE-T SFP, SX (multimode), LX (singlemode), or LH (single-mode)

Physical Layer

• Physical port redundancy: Redundant trunk group (RTG)
• Cable diagnostics for detecting cable breaks and shorts
• Auto MDI/MDIX (medium-dependent interface/mediumdependent interface crossover) support
• Port speed downshift/setting maximum advertised speed on 10/100/1000BASE-T ports
• Digital optical monitoring for optical ports

Packet-Switching Capacities (Maximum with 64-Byte Packets)

• EX2300-24P/24T/24MP: 128 Gbps
• EX2300-48P/48T/48MP: 176 Gbps

Software Specifications

Layer 2/Layer 3 Throughput (Mpps) (Maximum with 64 Byte Packets)

• EX2300-24P/24T/24MP: 95 Mpps (wire speed)
• EX2300-48P/48T/48MP: 130 Mpps (wire speed)

Layer 2 Features

• Maximum MAC addresses in hardware: 16,000
• Jumbo frames: 9216 bytes
• Number of VLANs supported: 4093
• Range of possible VLAN IDs: 1-4094
• Port-based VLAN
• MAC-based VLAN
• Voice VLAN
• Layer 2 Tunneling Protocol (L2TP)
• IEEE 802.1ak: Multiple VLAN Registration Protocol (MVRP)
• Compatible with Per-VLAN Spanning Tree Plus (PVST+)
• RVI (Routed VLAN Interface)
• IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
• LLDP-MED with VoIP integration
• IEEE 802.1ad Q-in-Q tunneling
• IEEE 802.1br: Bridge Port Extension
• IEEE 802.1D: Spanning Tree Protocol
• IEEE 802.1p: CoS Prioritization
• IEEE 802.1Q: VLAN Tagging
• IEEE 802.1Q-in-Q: VLAN Stacking
• IEEE 802.1s: Multiple Spanning Tree Protocol (MSTP)
• Number of MST instances supported: 64
• Number of VSTP instances supported: 253
• IEEE 802.1w: Rapid Spanning Tree Protocol (RSTP)
• IEEE 802.1X: Port Access Control
• IEEE 802.3: 10BASE-T
• IEEE 802.3u: 100BASE-T
• IEEE 802.3ab: 1000BASE-T
• IEEE 802.3z: 1000BASE-X
• IEEE 802.3af: PoE
• IEEE 802.3at: PoE+
• IEEE 802.3ad: Link Aggregation Control Protocol (LACP)
• IEEE 802.3x: Pause Frames/Flow Control

Layer 3 Features: IPv4

• Maximum number of ARP entries: 1,500
• Maximum number of IPv4 unicast routes in hardware: 512 prefixes; 4,096 host routes
• Maximum number of IPv4 multicast routes in hardware: 2,048 groups; 2,048 multicast routes
• Routing Protocols: RIP v1/v2, OSPF v1/v2
• Static routing
• Routing policy
• Bidirectional Forwarding Detection (BFD) with slow timers (> 3 sec)
• IP directed broadcast

Layer 3 Features: IPv6

• Maximum number of Neighbor Discovery (ND) entries: 1,500
• Maximum number of IPv6 unicast routes in hardware: 512 prefixes; 2,048 host routes
• Maximum number of IPv6 multicast routes in hardware: 1,024 groups; 1,024 multicast routes
• Neighbor discovery, system logging, Telnet, SSH, SNMP, Network Time Protocol (NTP), Domain Name System (DNS)
• Static routing
• Routing protocols: RIPng, OSPF v3, Multicast Listener Discovery, Multicast Listener Discovery v2

Access Control Lists (ACLs) (Junos OS Firewall Filters)

• Port-based ACL (PACL)—256 ingress; 256 egress
• VLAN-based ACL (VACL)— 256 ingress; 256 egress
• Router-based ACL (RACL)—256 ingress; 512 egress
• ACL entries (ACE) in hardware per system: 2,000
• ACL counter for denied packets
• ACL counter for permitted packets
• Ability to add/remove/change ACL entries in middle of list (ACL editing)
• L2-L4 ACL

Access Security

• MAC limiting
• Allowed MAC addresses—configurable per port
• Sticky MAC (persistent MAC address learning)
• Dynamic ARP inspection (DAI)
• Proxy ARP
• Static ARP support
• DHCP snooping
• 802.1X port-based
• 802.1X multiple supplicants
• 802.1X with VLAN assignment
• 802.1X with authentication bypass access (based on host MAC address)
• 802.1X with VoIP VLAN support
• 802.1X dynamic ACL based on RADIUS attributes
• 802.1X Supported EAP types: Message Digest 5 (MD5), Transport Layer Security (TLS), Tunneled Transport Layer Security (TTLS), Protected Extensible Authentication Protocol (PEAP)
• IPv6 RA Guard
• IPv6 Neighbor Discovery Inspection
• Captive Portal
• Static MAC authentication
• MAC-RADIUS
• Control plane DoS protection
• Fallback authentication
• Trusted Network Connect (TNC) certified

High Availability

• Link aggregation
• 802.3ad (LACP) support:
  • Number of LAGs supported: 128
  • Maximum number of ports per LAG: 8
• Tagged ports support in LAG
• Uplink Failure Detection

Quality of Service (QoS)

• Layer 2 QoS
• Layer 3 QoS
• Ingress policing: one-rate two-color; two-rate three-color markers
• Hardware queues per port: 8
• Scheduling methods (egress): Strict Priority (SP), shapeddeficit weighted round-robin (SDWRR)
• 802.1p, DSCP /IP precedence trust and marking
• L2-L4 classification criteria: Interface, MAC address, EtherType, 802.1p, VLAN, IP address, DSCP/IP precedence, TCP/UDP port numbers
• Congestion avoidance capabilities: Tail drop and WRED

Multicast

• IGMP snooping entries: 2,000
• IGMP: v1, v2, v3
• IGMP snooping
• PIM-SM, PIM-SSM, PIM-DM
• MLD snooping

Services and Manageability

• Junos OS CLI
• Web interface (J-Web)
• Out-of-band management: Serial, 10/100BASE-T Ethernet
• ASCII configuration
• Rescue configuration
• Configuration rollback
• Image rollback
• Element management tools: Junos Space Network Management Platform
• Simple Network Management Protocol (SNMP): v1, v2c, v3
• Remote monitoring (RMON) (RFC 2819) Groups 1, 2, 3, 9
• Network Time Protocol (NTP)
• DHCP server
• DHCP client and DHCP proxy
• DHCP relay and helper
• RADIUS authentication
• TACACS+ authentication
• SSHv2
• Secure copy
• HTTP/HTTPs
• DNS resolver
• System log logging
• Temperature sensor
• Configuration backup via FTP/secure copy
• Interface range

Supported RFCs

• RFC 768 UDP
• RFC 783 Trivial File Transfer Protocol (TFTP)
• RFC 791 IP
• RFC 792 Internet Control Message Protocol (ICMP)
• RFC 793 TCP
• RFC 826 ARP
• RFC 854 Telnet client and server
• RFC 894 IP over Ethernet
• RFC 903 Reverse ARP (RARP)
• RFC 906 Bootstrap Loading using TFTP
• RFC 951, 1542 BootP
• RFC 1027 Proxy ARP
• RFC 1058 RIP v1
• RFC 1122 Requirements for Internet Hosts
• RFC 1256 IPv4 ICMP Router Discovery (IRDP)
• RFC 1492 TACACS+
• RFC 1519 Classless Interdomain Routing (CIDR)
• RFC 1591 Domain Name System (DNS)
• RFC 1812 Requirements for IP Version 4 routers
• RFC 2030 Simple Network Time Protocol (SNTP)
• RFC 2068 HTTP/1.1
• RFC 2131 BOOTP/DHCP relay agent and DHCP server
• RFC 2138 RADIUS Authentication
• RFC 2139 RADIUS Accounting
• RFC 2267 Network Ingress Filtering
• RFC 2453 RIP v2
• RFC 2474 DiffServ Precedence, including 8 queues/port
• RFC 2597 DiffServ Assured Forwarding (AF)
• RFC 2598 DiffServ Expedited Forwarding (EF)
• RFC 2710 Multicast Listener Discovery Version (MLD) for IPv6
• RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations
• RFC 3176 sFlow
• RFC 3579 RADIUS Extensible Authentication Protocol (EAP) support for 802.1X
• RFC 5176 Dynamic Authorization Extensions to RADIUS
• LLDP Media Endpoint Discovery (LLDP-MED), ANSI/TIA1057, draft 08

Supported MIBs

• RFC 1155 Structure of Management Information (SMI)
• RFC 1157 SNMPv1
• RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-like MIB, and TRAPs
• RFC 1493 Bridge MIB
• RFC 1643 Ethernet MIB
• RFC 1724 RIPv2 MIB
• RFC 1905 RFC 1907 SNMP v2c, SMIv2 and Revised MIB-II
• RFC 1981 Path MTU Discovery for IPv6
• RFC 2011 SNMPv2 Management Information Base for the IP using SMIv2 RFC 2012 SNMPv2 Management Information Base for the Transmission Control Protocol using SMIv2
• RFC 2013 SNMPv2 Management Information Base for the User Datagram Protocol using SMIv2
• RFC 2096 IPv4 Forwarding Table MIB
• RFC 2287 System Application Packages MIB
• RFC 2460 IPv6 Specification
• RFC 2464 Transmission of IPv6 Packets over Ethernet Networks
• RFC 2570-2575 SNMPv3, User-based Security, Encryption, and Authentication
• RFC 2576 Coexistence between Version 1, Version 2, and Version 3 of the Internet-standard Network Management Framework
• RFC 2578 SNMP Structure of Management Information MIB
• RFC 2579 SNMP Textual Conventions for SMIv2
• RFC 2665 Definitions of Managed Objects for the Ethernet-like Interface Types
• RFC 2819 RMON MIB
• RFC 2863 The Interfaces Group MIB
• RFC 2922 LLDP MIB
• RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations
• RFC 3413 SNMP Application MIB
• RFC 3414 User-based Security Model for SNMPv3
• RFC 3415 View-based Access Control Model (VACM) for SNMP
• RFC 3484 Default Address Selection for IPv6
• RFC 3621 PoE-MIB (PoE switches only)
• RFC 3810 Multicast Listener Discovery Version 2 (MLDv2) for IPv6
• RFC 4188 STP and Extensions MIB
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers
• RFC 4291 IPv6 Addressing Architecture
• RFC 4363 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and VLAN Extensions
• RFC 4443 ICMPv6 for the IPv6 Specification
• RFC 4861 Neighbor Discovery for IPv6
• RFC 4862 IPv6 Stateless Address Autoconfiguration
• Draft – blumenthal – aes – usm - 08
• Draft – reeder - snmpv3 – usm - 3desede -00

Troubleshooting

• Debugging: CLI via console, telnet, or SSH
• Diagnostics: Show and debug command statistics
• Traffic mirroring (port)
• Traffic mirroring (VLAN)
• ACL-based mirroring
• Mirroring destination ports per system: 4
• LAG port monitoring
• Multiple destination ports monitored to 1 mirror (N:1)
• Maximum number of mirroring sessions: 4
• Mirroring to remote destination (over L2): 1 destination VLAN
• Encapsulated Remote Switched Port Analyzer (ERSPAN)
• IP tools: Extended ping and trace
• Juniper Networks commit and rollback

Safety Certifications

• UL-UL60950-1 (Second Edition)
• C-UL to CAN/CSA 22.2 No.60950-1 (Second Edition)
• TUV/GS to EN 60950-1 (Second Edition)
• CB-IEC60950-1 (Second Edition with all country deviations)
• EN 60825-1 (Second Edition)

Electromagnetic Compatibility Certifications

• FCC 47CFR Part 15 Class A
• EN 55022 Class A
• ICES-003 Class A
• VCCI Class A
• AS/NZS CISPR 22 Class A
• CISPR 22 Class A
• EN 55024
• EN 300386
• CE

Telecom Quality Management

• TL9000

Environmental

• Reduction of Hazardous Substances (ROHS) 6

Telco

• CLEI code

Noise Specifications

Noise measurements based on operational tests taken from bystander position (front) and performed at 25° C in compliance with ISO 7779. The PoE load was 370 W (24 ports powered at 15.4W each) on the EX2300-24P and 740 W (48 ports powered at 15.4W each) on the EX2300-48P.

Model	Acoustic Noise in DB
EX2300-24T	34.2
EX2300-24P	40.6
EX2300-48T	34.6
EX2300-48P	51.4

Documentation:

Download the Juniper Networks EX2300 Data Sheet (PDF).