Data Sheet

QFX5120 SWITCH

Product Description
The Juniper Networks® QFX5120 Switch delivers high scale, high availability, and
high performance for data center and campus deployments. The QFX5120 switch is
a versatile routing and switching platform addressing higher server access speed and
campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and
100GbE uplinks for collapsed spine data center or campus core deployments.
Product Overview
Product Options
The QFX5120 Switch includes four compact 1 U platforms—the QFX5120-48Y,
The QFX5120 Switch delivers
the QFX5120-48YM, the QFX5120-48T, and the QFX5120-32C—that provide
rich, low latency Layer 2/Layer
wire-speed packet performance, very low latency, and a rich set of Junos® operating
3 features and advanced EVPN-
system features.
VXLAN capabilities, making it an
ideal data center top-of-rack and QFX5120-48Y
aggregation switch for campus The QFX5120-48Y is a 25GbE/100GbE data center leaf and campus distribution
enterprise deployments. switch featuring:
Featuring L3 gateway capabilities • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
for routing between virtualized and
• Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
bare-metal servers, the QFX5120
is designed for extremely agile • Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550
data centers that require support nanoseconds
for overlay/underlay network • A 2.2 GHz quad-core Intel CPU with 16 GB memory and 50 GB SSD storage
architectures. Native 25GbE Using breakout cables, each of the eight 100GbE QSFP28 ports can be broken
with 100GbE uplink ports on the into four 25GbE SFP28 ports, while each 40GbE quad small form-factor pluggable
QFX5120-48Y and QFX5120- plus (QSFP+) transceiver ports can be broken into four 10GbE small form-factor
48YM, 10GbE/1GbE copper pluggable plus (SFP+) transceiver ports, increasing the total number of supported
with 100GbE uplink ports on 25GbE and 10GbE ports per switch to 80.
the QFX5120-48T, and 32
QFX5120-48YM
100GbE ports on the QFX5120-
The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus
32C make the QFX5120 family
distribution switch featuring:
ideal for spine-and-leaf network
deployments. • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
• Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
• Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550
nanoseconds
• Media Access Control Security (MACsec) AES-256 support across all ports
• A 2.9 GHz quad-core Intel CPU with 16 GB memory and 100 GB SSD storage

When using breakout cables, two of the 100GbE QSFP28 ports (ports 50 and 52)
can be broken into four 25GbE SFP28 or four 10GbE SFP+ ports, increasing the
maximum number of 10GbE/25GbE ports supported to 56. When using breakouts,
the total number of all ports on the switch, including 6x100GbE ports and
56x10/25GbE, is 62.

1
QFX5120 Ethernet Switch

QFX5120-48T • Software modularity, with process modules running

The QFX5120-48T is a 10GbE/100GbE data center leaf and independently in their own protected memory space and
campus distribution switch featuring: with the ability to do process restarts

• 48 dual-speed 1GbE/10GbE RJ-45 copper downlink ports • Uninterrupted routing and forwarding, with features such as
nonstop active routing (NSR) and nonstop bridging (NSB)
• Six dual-speed 100GbE (QSFP28)/40GbE (QSFP+) uplink
ports • Commit and rollback functionality that ensures error-free
network configurations
• Up to 2.16 Tbps L2 and L3 performance (bidirectional),
with latency as low as 550 nanoseconds • A powerful set of scripts for on-box problem detection,
reporting, and resolution
• A 2.2 GHz quad-core Intel CPU with 16 GB memory and
100 GB SSD storage Data Center Deployments
Data centers demand high-speed, low-latency, storage- and
Using breakout cables, each of the eight 100GbE QSFP28
I/O-converged networking solutions that maximize performance
ports can be broken into four 25GbE SFP28 ports, while each
for physical servers, virtual servers, and storage. The QFX5120
40GbE QSFP+ port can be broken into four 10GbE SFP+ ports,
Switch addresses these issues with low-latency, lossless, high-
increasing the total number of supported 25GbE and 10GbE
density 10GbE, 25GbE, and 100GbE interfaces on a compact 1
ports per switch to 80.
U platform. In addition, the QFX5120 offers EVPN-VXLAN L2
QFX5120-32C and L3 gateway support, making it an ideal solution for either
The QFX5120-32C is a compact 100GbE data center leaf-and- edge routed or centrally routed overlay deployments in the data
spine and campus distribution switch featuring: center. The QFX5120 also supports flexible back-to-front and
front-to-back airflow cooling options, ensuring consistency with
• 32 100GbE (QSFP28) or 40GbE (QSFP+) uplink ports
server designs for hot-aisle or cold-aisle deployments.
• A 2.2 GHz quad-core Intel CPU with 16 GB memory and
64 GB SSD storage Data Center Server Access
The QFX5120-48Y and QFX5120-48YM support tri-speed
• Up to 6.4 Tbps L2 and L3 performance (bidirectional), with
1GbE/10GbE/25GbE, making them a perfect fit for top-of-rack
latency as low as 550 nanoseconds
deployments. The 48 ports of native 10GbE/25GbE for server
Using breakout cables, each of the 100GbE QSFP28 ports connectivity, plus up to eight 40GbE or 100GbE ports for uplink
can be broken into four 25GbE SFP28 ports and each of the connectivity, provide very low oversubscription of 1.5:1 from
40GbE QSFP+ ports can be broken into four 10GbE SFP+ ports, access to aggregation.
increasing the total number of supported 25GbE and 10GbE
ports per switch to 128. The QFX5120-48T supports dual-speed 1GbE/10GbE, also
making it a perfect fit for top-of-rack deployments. The 48
In addition, all QFX5120 switch models include: native 10GbE RJ-45 copper ports for server connectivity,
• Support for VXLAN as an L2 or L3 gateway plus up to six 40GbE or 100GbE ports for uplink connectivity,
provide unsubscribed (0.8:1) access-to-aggregation ratio.
• Advanced Junos OS features such as Ethernet VPN-Virtual
Extensible LAN (EVPN-VXLAN), BGP add-path, L3 VPN, The QFX5120-32C can also be used for high-density 25GbE
and MPLS server connectivity, with an option to break out the 100GbE
• Feature-rich automation capabilities with support for ports into four 25GbE ports.
Python and zero-touch provisioning (ZTP)
Junos OS
The high-performance QFX5120 Switch runs Junos OS,
Juniper’s powerful and robust network operating system that
powers all Juniper switches, routers, and firewalls. Key Junos OS
features that enhance the functionality and capabilities of the
QFX5120 include:

2
QFX5120 Ethernet Switch

QFX10000 QFX10000 Equipped with Junos OS, the QFX5120 supports the most
advanced and robust routing capabilities in the industry, OSPF
for both IPv4 and IPv6, as well as advanced routing capabilities
such as IS-IS and BGP. With additional capabilities such as
64-way equal-cost multipath (ECMP) and BGP add path, the
QFX5120 is an ideal building block for deploying the most
robust L3 underlay for SDN.
100GbE

Campus Deployments
QFX5120-48YM QFX5120-48Y/YM The QFX5120-48Y and QFX5120-48YM are ideal as campus
10GbE 10GbE/25GbE
distribution switches with 10GbE/25GbE downlinks and
40GbE/100GbE uplinks supporting technologies like MC-LAG
and EVPN multihoming.

The QFX5120-32C is ideal as a campus core switch with 32

ports of 100GbE and support for technologies like campus
fabric core-distribution.

The QFX5120-48T supports dual-speed 1GbE/10GbE, also

making it a perfect fit for top-of-rack deployments in campus
Figure 1: QFX5120-48Y/48YM and QFX5120-48T in a leaf and spine deployment environments for server connectivity.

In Figure 1, the QFX5120-48YM leaf and Juniper Networks MC-LAG and EVPN Multihoming (Collapsed Core/
Distribution)
QFX10008 Switch spine are deployed as EVPN-VXLAN
switches acting as centrally routed gateways or distributed A pair of interconnected QFX5120 switches can be deployed
edge routed gateways. If centrally routed bridging is used, the to provide EVPN multihoming (ESI-LAG) or multichassis
VXLAN tunnel encapsulation and decapsulation occur on the link aggregation (MC-LAG) in a collapsed core/distribution
spine switches for inter-IRB (integrated routing and bridging) configuration. This eliminates the need for Spanning Tree
symmetric routing purposes. If edge routed bridging is used, the Protocol (STP) across the campus network by providing
IP first hop gateways are distributed at the leaf-level QFX5120- multihoming capabilities from the access to the distribution
48YM switches using Type 5 symmetric inter-IRB routing. When layer, while distribution to the core is an L3 IP fabric. ESI-LAG
using a QFX10000-30C-M MACsec line card installed in a spine also supports horizontal scaling with more than two devices in
QFX10008 Switch working with a leaf QFX5120-48YM switch, the distribution layer and can extend EVPN to the core.
the leaf-to-spine architecture offers end-to-end MACsec AES-
MC-LAG/ESI-LAG (EVPN Multihoming)
256 capabilities.

Data Center Spine

Collapsed QFX5120
The QFX5120-32C, with 32 ports of 100GbE, can serve as Core
the spine in small to medium-sized enterprise data centers.
The QFX5120-32C can be deployed in a three-stage IP Clos
with EVPN-VXLAN overlay to support as many as 1500 EX Series
Access Switches
server access ports. The QFX5120-48Y/QFX5120-48YM and
QFX5120-32C can also be used as a collapsed spine data
center deployment, offering Ethernet segment identifier-link
aggregation group (ESI-LAG) connectivity to the rest of the
Juniper AP Juniper AP
network infrastructure blocks.

All QFX5120 switches can operate in both cut-through and

store-and-forward modes, delivering sustained wire-speed Guest Employee Guest Employee
switching with sub-microsecond latency and low jitter for any
packet size (including jumbo frames) in either mode. With
features such as multichassis link aggregation (MC-LAG), the IoT IoT
QFX5120 supports active/active server dual-homing and can
Figure 2: QFX5120 as a campus collapsed core/distribution switch with EVPN
use full bisectional bandwidth from server to switch. multihoming (ESI-LAG) and MC-LAG support.

3
QFX5120 Ethernet Switch

Core / Distribution Core / Distribution

Deployments IP Clos IP Clos
Centralized Routing Distributed Routing

Core EX9200
QFX5120

Distribution QFX5120

EX4300
Access EX3400
EX2300

Virtual Chassis Virtual Chassis

IP fabric L2/L3 VXLAN gateway

Figure 3: QFX5120 as a campus distribution switch with EVPN-VXLAN L2/L3 gateway support.

Campus Fabric Core-Distribution support 351,000 prefixes. Junos OS provides configurable

A pair of interconnected QFX5120 switches can provide options through a CLI that can optimize the QFX5120 for
EVPN L2 and L3 VXLAN gateway support. This eliminates various deployment scenarios.
the need for STP across the campus network by providing a • Intelligent buffer management: The QFX5120 features a
multihoming capability from the access to the distribution layer, total of 32 MB of shared buffers. While 25% of the total
while distribution to the core is an L3 IP fabric using EVPN buffer space is dedicated, the rest is shared among all ports
technology. The IP fabric can also extend to connect multiple and is user configurable. The intelligent buffer mechanism
enterprise buildings, while VXLAN allows stretching L2 across in the QFX5120 effectively absorbs traffic bursts while
buildings. An IP Clos network between the distribution and the providing deterministic performance, significantly
core layers can exist in two modes, both of which are supported increasing performance over static allocation.
by the QFX5120:
• MPLS: A broad set of MPLS features, including L3 VPN,
• Centrally routed bridging overlay: An IRB interface placed at IPv6 provider edge router (6PE), RSVP traffic engineering,
a central location in the fabric (in this case, a core device) and LDP allow standards-based network segmentation and
• Edge routed bridging overlay: An IRB interface placed at virtualization, enabling the QFX5120 to be deployed as a
the edge of the fabric (in this case, a distribution device) low latency MPLS label-switching router (LSR).
• VXLAN overlays: The QFX5120 switch is capable of both
Features and Benefits L2 and L3 gateway services. Customers can deploy overlay
• Automation: The QFX5120 supports a number of network networks to provide L2 adjacencies for applications over
automation and plug-and-play operational features, L3 fabrics. The overlay networks use VXLAN in the data
including ZTP and event scripts, automatic rollback, and plane and EVPN or Open vSwitch Database (OVSDB) for
Python scripting. programming the overlays.
• Flexible forwarding table: The QFX5120 includes a • MACsec and hop-by-hop encryption: The QFX5120-
unified forwarding table, which allows the hardware table 48YM supports IEEE 802.1AE MACsec AES-256,
to be carved into configurable partitions of L2 media providing link-layer data confidentiality, data integrity, and
access control (MAC), L3 host, and longest prefix match data origin authentication. The MACsec feature enables
(LPM) tables. In a pure L2 environment, the QFX5120 the QFX5120-48YM to support 2 Tbps of near line-rate
supports 288,000 MAC addresses. In L3 mode, the table hardware-based traffic encryption on all 100GbE, 40GbE,
can support 208,000 host entries. In LPM mode, it can

4
QFX5120 Ethernet Switch

Domain expert knowledge

Playbooks

SNMP

JTI Telemetry

NETCONF

CLI
HealthBot
IPFIX {REST-API}

SYSLOG
BYOI
ML/AI

Machine learning knowledge

Figure 4: Juniper HealthBot overview

25GbE, 10GbE, and 1GbE ports. Defined by IEEE 802.1AE, data to a performance management system enables network
MACsec provides secure, encrypted communication at administrators to measure trends in link and node utilization and
the link layer that is capable of identifying and preventing troubleshoot such issues as network congestion in real time. JTI
threats from denial-of-service (DoS) and intrusion attacks, delivers the following features:
as well as man-in-the-middle, masquerading, passive
• Application visibility and performance management by
wiretapping, and playback attacks launched from behind
provisioning sensors to collect and stream data and analyze
the firewall. When MACsec is deployed on switch ports, all
application and workload flow paths through the network
traffic is encrypted on the wire, but traffic inside the switch
is not. This allows the switch to apply network capabilities • Capacity planning and optimization by proactively
such as quality of service (QoS) and sFlow to each packet detecting hotspots and monitoring latency and microbursts
without compromising the security of packets on the wire. • Troubleshooting and root cause analysis via high-frequency
In addition, Ethernet-based WAN networks can use MACsec monitoring and correlation of overlay and underlay
to provide link security over long haul connections. MACsec networks
is transparent to Layer 3 and higher layer protocols and is Monitoring and Analytics with Juniper
not limited to IP traffic; it works with any type of wired or HealthBot Software
wireless traffic carried over Ethernet links.
Juniper® HealthBot software delivers the following features and
• Virtual Chassis: The QFX5120 supports Juniper Networks benefits for enhanced monitoring and analytics:
unique Virtual Chassis technology, which enables up to
• Key performance indicator collection and visualization
four interconnected switches to operate as a single, logical
device with a single IP address. This technology allows • Anomaly detection
campus enterprises to eliminate STP and efficiently utilize • Root cause analysis
network links.
• Automated remediation
Junos Telemetry Interface • Multivendor support
The QFX5120 supports Junos telemetry interface (JTI), a
• Customizable playbooks
modern telemetry streaming tool designed for performance
• JTI telemetry
monitoring in complex, dynamic data centers. Streaming

5
QFX5120 Ethernet Switch

• QFX5120-48T
- ­ Max load: 450 W
- ­ Typical load: 300 W
QFX5120-32C • QFX5120-32C
- ­ Max load: 515 W
- ­ Typical load: 380 W
Airflow
QFX5120-48T • Front-to-back (airflow out) for hot aisle deployment
• Back-to-front (airflow in) for cold aisle deployment
Interface Options
• QFX5120-48Y
QFX5120-48Y - ­ 2 management ports: 2 x RJ-45 ports
- ­ 1GbE SFP: 48 (24 copper 1GbE)
- ­ 10GbE SFP+: 48/80(with breakout cable)
- ­ 25GbE SFP: 48/80 (with breakout cable)
QFX5120-48YM - ­ 40GbE QSFP+: 8 (each QSFP+ port can be configured
as a 4 x 10GbE interface or as a 40 Gbps port)
QFX5120 Switch Specifications - ­ 100GbE QSFP28: 8 (each QSFP28 port can be
configured as a 4 x 25GbE interface or as a 100 Gbps
Hardware port)
Switching Capacity - ­ SFP GbE optical and copper module
• QFX5120-48Y: 4 Tbps (bidirectional)/1.31 Bpps
- ­ SFP+ 10GbE optical modules
• QFX5120-48YM: 4 Tbps (bidirectional)/1.31 Bpps
- ­ SFP+ direct attach copper (DAC) cables: 1/3/5 m twinax
• QFX5120-48T: 2.16 Tbps (bidirectional)/1001.7 Mpps copper and 1/3/5/7 m active twinax copper
• QFX5120-32C: 6.4 Tbps (bidirectional)/2 Bpps - ­ SFP28 DAC cables: 1/3 m twinax copper
• Switching mode (all models): Cut-through and store-and- - ­ SFP28 optics: Short reach (SR), long reach (LR)
forward
- ­ QSFP+ to SFP+: 10GbE direct attach breakout copper
Weight (1/3 m twinax copper cable)
• QFX5120-48Y: 23.7 lb (10.75 kg) • QFX5120-48YM
• QFX5120-48YM: 24.8 lb (11.25 kg) - ­ 2 management ports: 2 x RJ-45 ports
• QFX5120-48T: 24.25 lb (11 kg) - ­ 1GbE SFP: 48
• QFX5120-32C: 21.12 lb (9.58 kg) - ­ 10GbE SFP+: 48/56 (total of 56 ports with breakout
Dimensions (HxWxD) cable on port 50 and 52)
• QFX5120-48Y: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x - ­ 25GbE SFP: 48/56 (total of 56 ports with breakout
52.02 cm) cable on port 50 and 52)
• QFX5120-48YM: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x - ­ 40GbE QSFP+: 8 (QSFP+ port 50 and 52 can be
52.02 cm) configured as a 4 x 10GbE interface or as a 40 Gbps
port)
• QFX5120-48T: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x
52.02 cm) - ­ 100GbE QSFP28: 8 (QSFP28 port 50 and 52 can be
configured as a 4 x 25GbE interface or as a 100 Gbps
• QFX5120-32C: 1.7 x 17.26 x 20.27 in. (4.32 x 43.84 x
port)
51.5 cm)
- ­ SFP GbE optical
Power Consumption
- ­ SFP+ 10GbE optical modules
• QFX5120-48Y
- ­ SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7
- ­ Max load: 450 W
m active twinax copper
- ­ Typical load: 260 W
- ­ SFP28 DAC cables: 1/3 m twinax copper
• QFX5120-48YM
- ­ SFP28 optics: Short reach (SR), long reach (LR)
- ­ Max load: 650 W
- ­ QSFP+ to SFP+: 10GbE direct attach breakout copper
- ­ Typical load: 550 W (1/3 m twinax copper cable)

6
QFX5120 Ethernet Switch

• QFX5120-48T Performance Scale (Unidimensional)

- ­ 1 management port: 1 x RJ-45 port • MAC addresses per system: 288,000
- ­ 1GbE RJ45 (copper): 48 (each port is dual-speed • VLAN IDs: 4093
supporting 1GbE/10GbE) • Number of link aggregation groups (LAGs):
- ­ 40GbE QSFP+: 6 (ports 50 and 51 can be configured as - ­ 80 (QFX5120-48Y/YM, QFX5120-32C)
a 4 x 10GbE interface or as 40 Gbps interfaces)
- ­ 64 (QFX5120-48T)
- ­ 100GbE QSFP28: 6 (ports 50 and 51 can be configured
• Number of ports per LAG: 64
as a 4 x 25GbE interface or as 100 Gbps interfaces)
• IPv4 unicast routes: 351,000 prefixes; 208,000 host
• QFX5120-32-C routes; 64 ECMP paths
- ­ 1 RJ-45 in-band management port • IPv4 multicast routes: 104,000
- ­ 10GbE SFP+: 2 native ports plus 124 (with 4 x 10GbE • IPv6 unicast routes: 168,000 prefixes; 104,000 host routes
breakout cable)
• IPv6 multicast routes: 52,000
- ­ 25GbE SFP: 124 (with breakout cable)
• Address Resolution Protocol (ARP) entries: 64,000
- ­ 40GbE QSFP+: 32 (ports 0-30 can be configured as a 4
x 10GbE interface) • Jumbo frame: 9216 bytes

- ­ 100GbE QSFP28: 32 (ports 0-30 can be configured as a • Spanning Tree Protocol (STP)
4 x 25GbE interface) • Multiple Spanning Tree Protocol (MSTP) instances: 64
- ­ SFP GbE optical and copper module • VLAN Spanning Tree Protocol (VSTP) instances: 509
- ­ SFP+ 10GbE optical modules • Traffic mirroring
- ­ SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 - ­ Mirroring destination ports per switch: 4
m active twinax copper - ­ Maximum number of mirroring sessions: 4
- ­ SFP28 DAC cables: 1/3 m twinax copper - ­ Mirroring destination VLANs per switch: 4
- ­ SFP28 optics: SR, LR
Software Features Supported
- ­ QSFP+ to SFP+: 10GbE direct attach breakout copper
Layer 2 Features
(1/3 m twinax copper cable)
• STP—IEEE 802.1D (802.1D-2004)
Common to All Models
• Rapid Spanning Tree Protocol (RSTP) (IEEE 802.1w); MSTP
• 1 USB 2.0 port
(IEEE 802.1s)
• 1 RS-232 console port
• Bridge protocol data unit (BPDU) protect
• Supported transceiver and direct attach cable
• Loop protect
- ­ QSFP+ DAC cables: 1/3 m twinax copper
• Root protect
- ­ QSFP+ optics: SR4, LX4, ESR4, ER4, LR4
• RSTP and VSTP running concurrently
- ­ QSFP28 optics: SR4, ER4, PSM4, CWDM4, LR4
• VLAN—IEEE 802.1Q VLAN trunking
• Rack installation kit
• Routed VLAN interface (RVI)
• Versatile four post mounting options for 19-in server rack
• Port-based VLAN
or datacom rack
• Private VLAN (PVLAN)
Airflow
• VLAN translation
• Redundant (N+1) and hot-pluggable fan modules for front-
to-back and back-to-front airflow • Static MAC address assignment for interface
• Redundant variable-speed fans to reduce power draw • Per VLAN MAC learning (limit)
• MAC learning disable
Power Supply and Fan Modules
• Dual redundant (1+1) and hot-pluggable 650 W AC/DC • Link Aggregation and Link Aggregation Control Protocol
power supplies (LACP) (IEEE 802.3ad)

• 100-240 V single phase AC power • MACsec with AES256 (QFX5120-48YM only)

• 48 to -60 V DC power supply • Virtual Chassis—up to 4 members

• Redundant 4+1 (QFX5120-48Y/YM and QFX5120-48T) Link Aggregation

or 5+1 (QFX5120-32C) and hot-pluggable fan modules for • MC-LAG
front-to- back or back-to-front airflow • LAG load sharing algorithm—bridged or routed (unicast or
multicast) traffic

7
QFX5120 Ethernet Switch

• IP: Session Initiation Protocol (SIP), Dynamic Internet Quality of Service (QoS)
Protocol (DIP), TCP/UDP source port, TCP/UDP • L2 and L3 QoS: Classification, rewrite, queuing
destination port
• Rate limiting:
• Layer 2 and non-IP: MAC SA, MAC DA, Ethertype, VLAN
- ­ Ingress policing: Single-rate two-color policer, two-rate
ID, source port
three-color policer
Layer 3 Features (IPv4) - ­ Egress policing: Policer, policer mark down action
• Static routing
- ­ Egress shaping: Per queue on each port
• Routing protocols (RIP, OSPF, IS-IS, BGP)
• 10 hardware queues per port (8 unicast and 2 multicast)
• Virtual Router Redundancy Protocol (VRRP)
• Strict-priority queue (SPQ), shaped-deficit weighted round-
• Virtual router robin (SDWRR), weighted random early detection (WRED),
• Dynamic Host Configuration Protocol (DHCP) relay weighted tail drop
• Proxy Address Resolution Protocol (ARP) • 802.1p remarking

EVPN-VXLAN Features • Layer 2 classification criteria: Interface, MAC address,

Ethertype, 802.1p, VLAN
• MAC virtual routing and forwarding (MAC-VRF) multiple
EVPN instances (EVI) with service-types vlan-based, vlan- • Congestion avoidance capabilities: WRED
aware, vlan-bundle • Trust IEEE 802.1p (ingress)
• Symmetric inter-IRB routing with anycast gateway and • Remarking of bridged packets
EVPN type-5 instances
• Default inner to outer DiffServ code point (DSCP) copy for
• Proxy IGMPv2—EVPN route types 6/7/8 EVPN-VXLAN
• ARP/ND proxy/suppression IP Storage
• ESI-LAG A/A multihoming using Enterprise and SP-style • Priority-based flow control (PFC)—IEEE 802.1Qbb, DCBX
interfaces
• PFC using DSCP and explicit congestion notification (ECN)
• Enhanced Ethernet loop detection for ROCEv2
• Filter-based forwarding on IRB.VGA High Availability
• EVPN advanced route policing • Bidirectional Forwarding Detection (BFD)
• VLAN-id overlapping using SP-style interfaces • Uplink failure detection
Multicast Features MPLS
• Internet Group Management Protocol (IGMP): v1, v2, v3 • Static label-switched paths (LSPs)
• IGMP snooping: v1, v2, and v3 (Layer 2 only) • RSVP-based signaling of LSPs
• IGMP filter • LDP-based signaling of LSPs
• Protocol Independent Multicast-Sparse Mode (PIM-SM), • LDP tunneling (LDP over RSVP)
PIM-Source-Specific Multicast (PIM-SSM), PIM-Dense
• MPLS class of service (CoS)
Mode (PIM-DM) in pure IP fabric use case
• MPLS LSR support
• Multicast Source Discovery Protocol (MSDP)
• IPv6 tunneling (6PE) (via IPv4 MPLS backbone)
Security and Filters
• IPv4 L3 VPN (RFC 2547, RFC 4364)
• Secure interface login and password
• RADIUS Management and Operations
• Role-based CLI management and access
• ACACS+
• CLI via console, telnet, or SSH
• Ingress and egress filters: Allow and deny, port filters, VLAN
filters, and routed filters, including management port filters • Extended ping and traceroute
• Filter actions: Logging, system logging, reject, mirror to an • Junos OS configuration rescue and rollback
interface, counters, assign forwarding class, permit, drop, • Image rollback
police, mark
• SNMP v1/v2/v3
• SSH v1, v2
• Junos XML management protocol
• Static ARP support in pure IP fabric
• sFlow v5
• Storm control, port error disable, and autorecovery
• Beacon LED for port and system
• Source MAC address filtering on the port
• ZTP
• DHCP snooping in pure IP fabric use case
• OpenStack Neutron Plug-in

8
 QFX5120 Ethernet Switch

• Python • RFC 1745 BGP4/IDRP for IP—OSPF Interaction

• Junos OS event, commit, and OP scripts • RFC 1772 Application of the Border Gateway Protocol in
• JTI the Internet
• RFC 1812 Requirements for IP Version 4 Routers
Traffic Mirroring
• RFC 1997 BGP Communities Attribute
• Port-based
• RFC 7348 VXLAN—Virtual extensible Local Area Network
• LAG port
• RFC 8365 NVO—Network Virtualization Overlay Solution
• VLAN-based
Using Ethernet VPN (EVPN-VXLAN)
• Filter-based
• RFC 2030 SNTP, Simple Network Time Protocol
• Mirror to local
• RFC 2068 HTTP server
• Mirror to remote destinations (L2 over VLAN) • RFC 2131 BOOTP/DHCP relay agent and Dynamic Host
Standards Compliance • RFC 2138 RADIUS Authentication
IEEE Standard • RFC 2139 RADIUS Accounting
• IEEE 802.1D • RFC 2154 OSPF with Digital Signatures (Password, MD-5)
• IEEE 802.1w • RFC 2236 IGMP v2
• IEEE 802.1 • RFC 2267 Network ingress filtering
• IEEE 802.1Q • RFC 2328 OSPF v2 (edge mode)
• IEEE 802.1p • RFC 2338 VRRP
• IEEE 802.1ad • RFC 2362 PIM-SM (edge mode)
• IEEE 802.3ad • RFC 2370 OSPF Opaque LSA Option
• IEEE 802.1AB • RFC 2385 Protection of BGP Sessions via the TCP MD5
• IEEE 802.3x Signature Option
• RFC 2439 BGP Route Flap Damping
• IEEE 802.1Qbb
• RFC 2453 RIP v2
• IEEE 802.1Qaz
• RFC 2474 Definition of the Differentiated Services Field
T11 Standards (DS Field) in the IPv4 and IPv6 Headers
• INCITS T11 FC-BB-5
• RFC 2597 Assured Forwarding PHB (per-hop behavior)
Supported RFCs Group
• RFC 768 UDP • RFC 2598 An Expedited Forwarding PHB
• RFC 783 Trivial File Transfer Protocol (TFTP) • RFC 2697 A Single Rate Three Color Marker
• RFC 791 IP • RFC 2698 A Two Rate Three Color Marker
• RFC 792 ICMP • RFC 2796 BGP Route Reflection—An Alternative to Full
• RFC 793 TCP Mesh IBGP
• RFC 826 ARP • RFC 2918 Route Refresh Capability for BGP-4
• RFC 854 Telnet client and server • RFC 3065 Autonomous System Confederations for BGP
• RFC 894 IP over Ethernet • RFC 3376 IGMP v3 (source-specific multicast include
mode only)
• RFC 903 RARP
• RFC 3392 Capabilities Advertisement with BGP-4
• RFC 906 TFTP Bootstrap
• RFC 3446 Anycast RP
• RFC 951 1542 BootP
• RFC 3569 SSM
• RFC 1058 Routing Information Protocol
• RFC 3618 MSDP
• RFC 1112 IGMP v1
• RFC 3623 Graceful OSPF Restart
• RFC 1122 Host requirements
• RFC 4271 Border Gateway Protocol 4 (BGP-4)
• RFC 1142 OSI IS-IS Intra-domain Routing Protocol
• RFC 4360 BGP Extended Communities Attribute
• RFC 1256 IPv4 ICMP Router Discovery Protocol (IRDP)
• RFC 4456 BGP Route Reflection: An Alternative to Full
• RFC 1492 TACACS+
Mesh Internal BGP (IBGP)
• RFC 1519 Classless Interdomain Routing (CIDR)
• RFC 4486 Subcodes for BGP Cease Notification Message
• RFC 1587 OSPF not-so-stubby area (NSSA) Option
• RFC 4724 Graceful Restart Mechanism for BGP
• RFC 1591 Domain Name System (DNS)
• RFC 4812 OSPF Restart Signaling

9
QFX5120 Ethernet Switch

• RFC 4893 BGP Support for Four-octet AS Number Space • RFC 3416 Version 2 of the Protocol Operations for the
• RFC 5176 Dynamic Authorization Extensions to RADIUS SNMP
• RFC 5396 Textual Representation of Autonomous System • RFC 3417 Transport Mappings for the SNMP
(AS) Numbers • RFC 3418 Management Information Base (MIB) for the
• RFC 5668 4-Octet AS Specific BGP Extended Community SNMP
• RFC 5880 Bidirectional Forwarding Detection (BFD) • RFC 3584 Coexistence between Version 1, Version 2, and
Dynamic Host Configuration Protocol (DHCP) serve Version 3 of the Internet-standard Network Management
Framework
Supported MIBs
• RFC 3826 The Advanced Encryption Standard (AES) Cipher
• RFC 1155 SMI Algorithm in the SNMP User-based Security Model
• RFC 1157 SNMPv1 • RFC 4188 Definitions of Managed Objects for Bridges
• RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-Like • RFC 4318 Definitions of Managed Objects for Bridges with
MIB and TRAPs Rapid Spanning Tree Protocol
• RFC 1850 OSPFv2 MIB • RFC 4363b Q-Bridge VLAN MIB
• RFC 1901 Introduction to Community-based SNMPv2
Approvals
• RFC 2011 SNMPv2 for Internet Protocol using SMIv2
Safety
• RFC 2012 SNMPv2 for the Transmission Control Protocol
• CAN/CSA-C22.2 No. 62368-1-14 Information Technology
using SMIv2
Equipment—Safety
• RFC 2013 SNMPv2 for the User Datagram Protocol using
SMIv2 • UL 62368-1 Information Technology Equipment—Safety

• RFC 2233 The Interfaces Group MIB using SMIv2 • EN 62368-1: 2014 Information Technology Equipment—
Safety
• RFC 2287 System Application Packages MIB
• IEC 62368-1: 2014 2nd Edition Information Technology
• RFC 2570 Introduction to Version 3 of the Internet- Equipment—Safety (All country deviations): CB Scheme
standard Network Management Framework
• IEC 60950-1:2005/A2:2013 Information Technology
• RFC 2571 An Architecture for describing SNMP Equipment—Safety (All country deviations): CB Scheme
Management Frameworks (read-only access)
• RFC 2572 Message Processing and Dispatching for the EMC
SNMP (read-only access) • EN 300 386 V1.6.1 (2012-09) Electromagnetic
compatibility and radio spectrum matters (ERM)
• RFC 2576 Coexistence between SNMP Version 1, Version
Telecommunication network equipment
2, and Version 3
• EN 300 386 V2.1.1 (2016-07) Telecommunication network
• RFC 2578 SNMP Structure of Management Information
equipment; EMC requirements; Harmonized Standard
MIB
covering the essential requirements of the Directive
• RFC 2579 SNMP Textual Conventions for SMIv2 2014/30/EU
• RFC 2580 Conformance Statements for SMIv2 • EN 55032:2012 (CISPR 32:2012) Electromagnetic
• RFC 2665 Ethernet-like Interface MIB compatibility of multimedia equipment—Emission
requirements
• RFC 2787 VRRP MIB
• EN 55024:2010 (CISPR 24:2010) Information technology
• RFC 2790 Host Resources MIB
equipment—immunity characteristics—limits and methods
• RFC 2819 RMON MIB of measurement
• RFC 2863 Interface Group MIB • IEC/EN 61000 Immunity Test
• RFC 2932 IPv4 Multicast MIB • AS/NZS CISPR 32:2015 Australia/New Zealand Radiated
• RFC 3410 Introduction and Applicability Statements for and Conducted Emissions
Internet Standard Management Framework • FCC 47 CFR Part 15 USA Radiated and Conducted Emissions
• RFC 3411 An Architecture for Describing SNMP • ICES-003 Canada Radiated and Conducted Emissions
Management Frameworks
• VCCI-CISPR 32:2016 Japanese Radiated and Conducted
• RFC 3412 Message Processing and Dispatching for the Emissions
SNMP
• BSMI CNS 13438 Taiwan Radiated and Conducted
• RFC 3413 Simple Network Management Protocol (SNMP) Emissions (at 10 meters)
Applications (all MIBs are supported except the Proxy MIB)
• KN32/KN35 Korea Radiated Emission and Immunity
• RFC 3414 User-based Security Model (USM) for version 3 Characteristics (at 10 meters)
of SNMPv3
• KN61000 Korea Immunity Test
• RFC 3415 View-based Access Control Model (VACM) for
• TEC/SD/DD/EMC-221/05/OCT-16 India EMC standard
the SNMP

10
QFX5120 Ethernet Switch

Environmental Compliance Ordering Information

Restriction of Hazardous Substances (ROHS) 6/6 Product Description

China Restriction of Hazardous Substances Switch Hardware

(ROHS) QFX5120-48Y-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC
airflow in
Registration, Evaluation, Authorisation and
Restriction of Chemicals (REACH) QFX5120-48Y-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC
airflow out
Waste Electronics and Electrical Equipment
(WEEE) QFX5120-48Y-DC-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC
airflow in
Recycled material QFX5120-48Y-DC-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC
airflow out

80 Plus Silver PSU Efficiency QFX5120-48YM-AFI 48x25GbE+8x100GbE MACsec AES256 switch, AC,
back-to-front air flow
QFX5120-48YM-AFO 48x25GbE+8x100GbE MACsec AES256 switch, AC,
Telco front-to-back air flow

• Common Language Equipment Identifier (CLEI) code QFX5120-48YM-DC-AI 48x25GbE+8x100GbE MACsec AES256 switch, DC,
back-to-front air flow, DC power
Environmental Ranges QFX5120-48YM-DC-AO 48x25GbE+8x100GbE MACsec AES256 switch, AC,
• Operating temperature: 32° to 104° F (0° to 40° C) front-to-back air flow, DC power

• Storage temperature: -40° to 158° F (-40° to 70° C) QFX5120-48T-AFI QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC

airflow in
• Operating altitude: Up to 6000 ft (1829 m)
QFX5120-48T-AFO QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC
• Relative humidity operating: 5% to 90% (noncondensing) airflow out

• Relative humidity nonoperating: 0% to 95% QFX5120-48T-DC-AFI QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC

airflow in
(noncondensing)
QFX5120-48T-DC-AFO QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC
Juniper Networks Services and Support airflow out
QFX5120-32C-AFI QFX5120-32C, 32x100GbE, 1 U, AC airflow in
Juniper Networks leads the market in performance-enabling
QFX5120-32C-AFO QFX5120-32C, 32x100GbE, 1 U, AC airflow out
services designed to accelerate, extend, and optimize your
deployments. Our services enable you to maximize operational QFX5120-32C-DC-AFI QFX5120-32C, 32x100GbE, 1 U, DC airflow in

efficiency, reduce costs, and minimize risk while achieving a QFX5120-32C-DC-AFO QFX5120-32C, 32x100GbE, 1 U, DC airflow out

faster time-to-value for your network. QFX5110-FANAFI FANAFI fan model, back-to-front airflow
QFX5110-FANAFO FANAFO fan model, front-to-back airflow
By leveraging best practices from across the industry, you get the
EX-4PST-RMK 4 post rack mount
maximum levels of system performance, designed and delivered
MACsec Encryption
by the world’s leading professional technology experts.
S-QFX5KC1-MACSEC-3 Class C1 QFX5000, MACsec AES 256 Encryption
For more information, please visit www.juniper.net/us/en/ Sub Software, Term: 3 Yrs

products-services. S-QFX5KC1-MACSEC-5 Class C1 QFX5000, MACsec AES 256 Encryption

Sub Software, Term: 5 Yrs

Installation and Implementation Service S-QFX5KC1-MACSEC-P Class C1 QFX5000, MACsec AES 256 Encryption
Software, Perpetual
Juniper Professional Services offers a Data Center Switching
Flex Software
QuickStart program to ensure that the solution is operational
S-QFX5K-C1-A1-3 Flex Sub Software, Class 1 QFX5000 line, Adv 1,
and the customer has a complete understanding of areas such Term: 3 Yrs
as configuration and ongoing operations. The QuickStart service S-QFX5K-C1-A1-5 Flex Sub Software, Class 1 QFX5000 line, Adv 1,
provides an onsite consultant who works with the client team Term: 5 Yrs
to quickly develop the initial configuration and deployment of S-QFX5K-C1-A1-P Flex Software, Class 1 QFX5000 line, Adv 1,
Perpetual
a small Juniper Networks data center switching environment.
A knowledge transfer session, which is intended as a review of S-QFX5K-C1-A2-3 Flex Sub Software, Class 1 QFX5000 line, Adv 2,
Term: 3 Yrs
local implementation and configuration options, is also included,
S-QFX5K-C1-A2-5 Flex Sub Software, Class 1 QFX5000 line, Adv 2,
but is not intended as a substitute for formalized training. Term: 5 Yrs
S-QFX5K-C1-A2-P Flex Software, Class 1 QFX5000 line, Adv 2,
Perpetual
S-QFX5K-C1-P1-3 Flex Sub Software, Class 1 QFX5000 line, Prem 1,
Term: 3 Yrs

11
QFX5120 Ethernet Switch

Product Description Product Description

S-QFX5K-C1-P1-5 Flex Sub Software, Class 1 QFX5000 line, Prem 1, Software Feature Licenses
Term: 5 Yrs
S-QFX5K-C1-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG),
S-QFX5K-C1-P1-P Flex Software, Class 1 QFX5000 line, Adv 3, three-year term license with support (QFX5120-48Y,
Perpetual QFX5120-48T)
Services S-QFX5K-C1-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis,
EVPN-VXLAN), three- year term license with support
SVC-COR-QFX51-48M Juniper Care Core Support for QFX5120-48YM (QFX5120-48Y, QFX5120-48T)
Switches
S-QFX5K-C1-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year
SVC-ND-QFX51-48M Juniper Care Next Day Support for QFX5120-48YM term license with support (QFX5120-48Y, QFX5120-
SVC-COR-QFX5KC1-MS Juniper Care Core Support for S-QFX5KC1- 48T)
MACSEC-P S-QFX5K-C1-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG),
Optics and Transceivers five-year term license with support (QFX5120-48Y,
QFX5120-48T)
JNP-SFP-25G-SR SFP28 25GBASE-SR Optics for up to 100 m
transmission over serial multimode fiber-optic (MMF) S-QFX5K-C1-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis,
OM4 fiber (QFX5120-48Y) EVPN-VXLAN), five- year term license with support
(QFX5120-48Y, QFX5120-48T)
JNP-SFP-25G-LR SFP28 25GBASE-SR Optics for up to 10 km
transmission over serial single-mode fiber-optic (SMF) S-QFX5K-C1-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year
(QFX5120-48Y) term license with support (QFX5120-48Y, QFX5120-
48T)
JNP-SFP-25G-DAC-1M 25GbE SFP to SFP copper cable, 1 m (QFX5120-
48Y) S-QFX5K-C2-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG),
three-year term license with support (QFX5120-32C)
JNP-SFP-25G-DAC-3M 25GbE SFP to SFP copper cable, 3 m (QFX5120-
48Y) S-QFX5K-C2-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis,
EVPN-VXLAN), three- year term license with support
JNP-QSFP-100G-SR4 QSFP28 100GbE, SR4, 100 m (all models) (QFX5120-32C)
JNP-QSFP-100G-PSM4 QSFP28 100GBASE-PSM4 optics for up to 500 m S-QFX5K-C2-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year
transmission over parallel SMF (all models) term license with support (QFX5120-32C)
JNP-QSFP-100G-CWDM QSFP28 100GbE, CWDM4, 2 km (all models) S-QFX5K-C2-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG),
five-year term license with support (QFX5120-32C)
JNP-QSFP-100G-LR4 QSFP28 100GbE, LR4, 10 km (all models)
S-QFX5K-C2-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis,
JNP-100G-DAC-1M QSFP28 to QSFP28 Ethernet Direct Attach Copper
EVPN-VXLAN), five- year term license with support
(twinax copper cable), 1 m (all models)
(QFX5120-32C)
JNP-100G-DAC-3M QSFP28 to QSFP28 Ethernet Direct Attach Copper
S-QFX5K-C2-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year
(twinax copper cable), 3 m (all models)
term license with support (QFX5120-32C)
JNP-100G-4X25G-1M QSFP28 to SFP+ 25GbE Direct Attach Breakout
Copper (twinax copper cable), 1 m (all models)
JNP-100G-4X25G-3M QSFP28 to SFP+ 25GbE Direct Attach Breakout
Copper (twinax copper cable), 3 m (all models)

Table 1. QFX5120-48YM Optics Support

1GbE 10GbE 25GbE 40GbE 100GbE

EX-SFP-GE10KT15R13 EX-SFP-10GE-LRM JNP-25G-AOC-10M JNP-40G-AOC-10M JNP-100G-DAC-1M
EX-SFP-GE40KT13R15 EX-SFP-10GE-SR JNP-25G-AOC-20M JNP-40G-AOC-20M JNP-100G-DAC-3M
EX-SFP-GE40KT15R13 EX-SFP-10GE-USR JNP-25G-AOC-30M JNP-40G-AOC-30M JNP-QSFP-100G-CWDM
EX-SFP-1GE-SX EX-SFP-10GE-DAC-1M JNP-SFP-25G-SR JNP-QSFP-AOCBO-10M JNP-QSFP-100G-LR4
EX-SFP-1GE-SX-ET JNP-10G-AOC-10M JNP-SFP-25G-DAC-3M JNP-QSFP-AOCBO-1M JNP-QSFP-100G-SR4
EX-SFP-GE80KCW1490 JNP-10G-AOC-15M JNP-SFP-25G-DAC-5M JNP-QSFP-AOCBO-3M QSFP-100G-ER4L
EX-SFP-GE80KCW1510 JNP-10G-AOC-1M JNP-SFP-25G-LR JNP-QSFP-AOCBO-5M
EX-SFP-GE10KT13R15 JNP-10G-AOC-20M JNP-QSFP-AOCBO-7M
EX-SFP-GE80KCW1530 JNP-10G-AOC-30M JNP-QSFPP-40G-BXSR
EX-SFP-GE80KCW1550 JNP-10G-AOC-3M QFX-QSFP-40G-ESR4
EX-SFP-GE80KCW1570 JNP-10G-AOC-5M QFX-QSFP-DAC-1M
EX-SFP-GE80KCW1590 JNP-10G-AOC-7M QFX-QSFP-DACBO-1M
JNP-SFP-10G-BX10D QFX-QSFP-DACBO-3M
JNP-SFP-10G-BX10U QSFPP-40GBASE-SR4
SRX-SFPP-10G-SR-ET

12
 QFX5120 Ethernet Switch

About Juniper Networks

Juniper Networks brings simplicity to networking with
products, solutions and services that connect the world.
Through engineering innovation, we remove the constraints
and complexities of networking in the cloud era to solve the
toughest challenges our customers and partners face daily. At
Juniper Networks, we believe that the network is a resource for
sharing knowledge and human advancement that changes the
world. We are committed to imagining groundbreaking ways to
deliver automated, scalable and secure networks to move at the
speed of business.

Corporate and Sales Headquarters APAC and EMEA Headquarters

Juniper Networks, Inc. Juniper Networks International B.V.
1133 Innovation Way Boeing Avenue 240
Sunnyvale, CA 94089 USA 1119 PZ Schiphol-Rijk
Phone: 888.JUNIPER (888.586.4737) Amsterdam, The Netherlands EXPLORE JUNIPER
or +1.408.745.2000 Phone: +31.0.207.125.700 Get the App.
www.juniper.net

Copyright 2021 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks
assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

1000639-014-EN Jan 2021 13