
7
SRX100 SRX210 SRX220 SRX240 SRX650
Routing
BGP instances 5 10 16 20 64
BGP peers 8 16 16 32 256
BGP routes 4 K / 8 K 8 K / 16 K 32 K 32 K / 64 K 800 K
OSPF instances 4 10 16 20 64
OSPF routes 4 K / 8 K 8 K / 16 K 32 K 32 K / 64 K 800 K
RIP v1 / v2 instances 4 10 16 20 64
RIP v2 routes 4 K / 8 K 8 K / 16 K 32 K 32 K / 64 K 800 K
Static routes 4 K / 8 K 8 K / 16 K 32 K 32 K / 64 K 800 K
Source-based routing Yes Yes Yes Yes Yes
Policy-based routing Yes Yes Yes Yes Yes
Equal-cost multipath (ECMP) Yes Yes Yes Yes Yes
Reverse path forwarding (RPF) Yes Yes Yes Yes Yes
MPLS
4
Layer 2 VPN (VPLS) Yes Yes Yes Yes Yes
Layer 3 VPN Yes Yes Yes Yes Yes
LDP Yes Yes Yes Yes Yes
RSVP Yes Yes Yes Yes Yes
Circuit Cross-connect (CCC) Yes Yes Yes Yes Yes
Translational Cross-connect (TCC) Yes Yes Yes Yes Yes
Multicast
7
IGMP (v1, v2, v3) Yes Yes Yes Yes Yes
Protocol independent multicast (PIM) sparse
mode (SM)
Yes Yes Yes Yes Yes
PIM dense mode (DM) Yes Yes Yes Yes Yes
PIM source-specific multicast (SSM) Yes Yes Yes Yes Yes
Multicast inside IPsec tunnel Yes Yes Yes Yes Yes
IPsec VPN
Concurrent VPN tunnels 128 256 512 1,000 3,000
Tunnel interfaces 10 64 64 128 512
DES (56-bit), 3DES (168-bit) and AES
(256-bit)
Yes Yes Yes Yes Yes
MD-5 and SHA-1 authentication Yes Yes Yes Yes Yes
Manual key, Internet Key Exchange (IKE),
public key infrastructure (PKI) (X.509)
Yes Yes Yes Yes Yes
Perfect forward secrecy (DH Groups) 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5
Prevent replay attack Yes Yes Yes Yes Yes
Dynamic remote access VPN Yes Yes Yes Yes No
IPsec NAT traversal Yes Yes Yes Yes Yes
Redundant VPN gateways Yes Yes Yes Yes Yes
User Authentication and Access Control
Third-party user authentication RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS accounting Yes Yes Yes Yes Yes
XAUTH VPN, Web-based, 802.X
authentication
Yes Yes Yes Yes Yes
PKI certificate requests (PKCS 7 and
PKCS 10)
Yes Yes Yes Yes Yes
Certificate Authorities supported VeriSign, Entrust,
Microso, RSA Keon,
iPLanet, (Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA Keon,
iPLanet, (Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA Keon,
iPLanet, (Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA Keon,
iPLanet, (Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA Keon,
iPLanet, (Netscape),
Baltimore,
DoD PKI
Comentarios a estos manuales