Data Sheet

QFX5120 ETHERNET SWITCH

Product Description
The Juniper Networks® QFX5120 Switch delivers high scale, high availability, and high
performance for data center and campus deployments. The QFX5120 switch is a versatile
routing and switching platform addressing higher server access speed and campus
distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE
uplinks for collapsed spine data center or campus core deployments.
Product Options
Product Overview
The QFX5120 Switch includes four compact 1 U platforms—the QFX5120-48Y, the
The QFX5120 Switch delivers QFX5120-48YM, the QFX5120-48T, and the QFX5120-32C—that provide wire-speed
rich, low latency Layer 2/Layer packet performance, very low latency, and a rich set of Junos® operating system features.
3 features and advanced EVPN- QFX5120-48Y
VXLAN capabilities, making it an
The QFX5120-48Y is a 25GbE/100GbE data center leaf and campus distribution switch
ideal data center top-of-rack
featuring:
and aggregation switch for
campus enterprise deployments. • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
• Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
Featuring L3 gateway • Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550
capabilities for routing between nanoseconds
virtualized and bare-metal • A 2.2 GHz quad-core Intel CPU with 16 GB memory and 50 GB SSD storage
servers, the QFX5120 is
designed for extremely agile Using breakout cables, each of the eight 100GbE QSFP28 ports can be broken into four
data centers that require 25GbE SFP28 ports, while each 40GbE quad small form-factor pluggable plus (QSFP+)
support for overlay/underlay transceiver ports can be broken into four 10GbE small form-factor pluggable plus (SFP+)
network architectures. Native transceiver ports, increasing the total number of supported 25GbE and 10GbE ports per
25GbE with 100GbE uplink switch to 80.
ports on the QFX5120-48Y and QFX5120-48YM
QFX5120-48YM, 10GbE/1GbE
The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution
copper with 100GbE uplink
ports on the QFX5120-48T, switch featuring:
and 32 100GbE ports on the • 48 25GbE (SFP28)/10GbE (SFP+)/1GbE (SFP) downlink ports
QFX5120-32C make the • Eight 100GbE (QSFP28)/40GbE (QSFP+) uplink ports
QFX5120 family ideal for spine- • Up to 4 Tbps L2 and L3 performance (bidirectional), with latency as low as 550
and-leaf network deployments. nanoseconds
• Media Access Control Security (MACsec) AES-256 support across all ports
• A 2.9 GHz quad-core Intel CPU with 16 GB memory and 100 GB SSD storage

When using breakout cables, two of the 100GbE QSFP28 ports (ports 50 and 52) can be
broken into four 25GbE SFP28 or four 10GbE SFP+ ports, increasing the maximum number
of 10GbE/25GbE ports supported to 56. When using breakouts, the total number of all
ports on the switch, including 6x100GbE ports and 56x10/25GbE, is 62.
QFX5120-48T
The QFX5120-48T is a 10GbE/100GbE data center leaf and campus distribution switch
featuring:
• 48 dual-speed 1GbE/10GbE RJ-45 copper downlink ports

1
QFX5120 Ethernet Switch

• Six dual-speed 100GbE (QSFP28)/40GbE (QSFP+) uplink ports physical servers, virtual servers, and storage. The QFX5120 Switch
• Up to 2.16 Tbps L2 and L3 performance (bidirectional), with addresses these issues with low-latency, lossless, high-density
latency as low as 550 nanoseconds 10GbE, 25GbE, and 100GbE interfaces on a compact 1 U platform.
• A 2.2 GHz quad-core Intel CPU with 16 GB memory and 100 In addition, the QFX5120 offers EVPN-VXLAN L2 and L3 gateway
GB SSD storage support, making it an ideal solution for either edge routed or
Using breakout cables, each 100GbE QSFP28 port can be broken centrally routed overlay deployments in the data center. The
into four 25GbE SFP28 ports, while each 40GbE QSFP+ port can QFX5120 also supports flexible back-to-front and front-to-back
be broken into four 10GbE SFP+ ports, increasing the total number airflow cooling options, ensuring consistency with server designs
of 25GbE and 10GbE ports per switch to 72. for hot-aisle or cold-aisle deployments.

QFX5120-32C Data Center Server Access

The QFX5120-32C is a compact 100GbE data center leaf-and- The QFX5120-48Y and QFX5120-48YM support tri-speed 1GbE/
spine and campus distribution switch featuring: 10GbE/25GbE, making them a perfect fit for top-of-rack
deployments. The 48 ports of native 10GbE/25GbE for server
• 32 100GbE (QSFP28) or 40GbE (QSFP+) uplink ports
connectivity, plus up to eight 40GbE or 100GbE ports for uplink
• A 2.2 GHz quad-core Intel CPU with 16 GB memory and 64
connectivity, provide very low oversubscription of 1.5:1 from
GB SSD storage
access to aggregation.
• Up to 6.4 Tbps L2 and L3 performance (bidirectional), with
latency as low as 550 nanoseconds The QFX5120-48T supports dual-speed 1GbE/10GbE, also making
it a perfect fit for top-of-rack deployments. The 48 native 10GbE
Using breakout cables, each 100GbE QSFP28 port can be broken RJ-45 copper ports for server connectivity, plus up to six 40GbE or
into four 25GbE SFP28 ports and each 40GbE QSFP+ port can be 100GbE ports for uplink connectivity, provide unsubscribed (0.8:1)
broken into four 10GbE SFP+ ports, increasing the total number of access-to-aggregation ratio.
25GbE and 10GbE ports per switch to 128.
The QFX5120-32C can also be used for high-density 25GbE server
In addition, all QFX5120 switch models include: connectivity, with an option to break out the 100GbE ports into
• Support for VXLAN as an L2 or L3 gateway four 25GbE ports.
• Advanced Junos OS features such as Ethernet VPN-Virtual
In Figure 1, the QFX5120 is deployed as a leaf acting as an edge-
Extensible LAN (EVPN-VXLAN), BGP add-path, L3 VPN, and
routed gateway. In this topology, the VXLAN tunnel encapsulation
MPLS
and decapsulation take place on the QFX5120 leaf switches, while
• Feature-rich automation capabilities with support for Python
Juniper Networks QFX5200-32C or Juniper Networks
and zero-touch provisioning (ZTP)
QFX5210-64C spine switches are used for IP transit. Juniper
Junos OS Networks QFX5110-32Q switches can also be used in the spine to
The high-performance QFX5120 Switch runs Junos OS, Juniper’s build a 40GbE fabric.
powerful and robust network operating system that powers all
Juniper switches, routers, and firewalls. Key Junos OS features that
enhance the functionality and capabilities of the QFX5120 include:
• Software modularity, with process modules running
independently in their own protected memory space and with
the ability to do process restarts
• Uninterrupted routing and forwarding, with features such as
nonstop active routing (NSR) and nonstop bridging (NSB)
• Commit and rollback functionality that ensures error-free
network configurations
• A powerful set of scripts for on-box problem detection,
reporting, and resolution

Data Center Deployments Figure 1: Edge-routed bridging at the leaf with QFX5200-32C/QFX5210-64C as spine
switches
Data centers demand high-speed, low-latency, storage- and I/O-
converged networking solutions that maximize performance for

2
QFX5120 Ethernet Switch

In Figure 2, the QFX5120-48YM leaf and Juniper Networks Equipped with Junos OS, the QFX5120 supports the most
QFX10008 Switch spine are deployed as EVPN-VXLAN switches advanced and robust routing capabilities in the industry, OSPF for
acting as centrally routed gateways or distributed edge routed both IPv4 and IPv6, as well as advanced routing capabilities such as
gateways. If centrally routed bridging is used, the VXLAN tunnel IS-IS and BGP. With additional capabilities such as 64-way equal-
encapsulation and decapsulation occur on the spine switches for cost multipath (ECMP) and BGP add path, the QFX5120 is an ideal
inter-IRB (integrated routing and bridging) symmetric routing building block for deploying the most robust L3 underlay for SDN.
purposes. If edge routed bridging is used, the IP first hop gateways Campus Deployments
are distributed at the leaf-level QFX5120-48YM switches using
The QFX5120-48Y and QFX5120-48YM are ideal as campus
Type 5 symmetric inter-IRB routing. When using a QFX10000-30C-
distribution switches with 10GbE/25GbE downlinks and 40GbE/
M MACsec line card installed in a spine QFX10008 Switch working
100GbE uplinks supporting technologies like MC-LAG and EVPN
with a leaf QFX5120-48YM switch, the leaf-to-spine architecture
multihoming.
offers end-to-end MACsec AES-256 capabilities.
The QFX5120-32C is ideal as a campus core switch with 32 ports
of 100GbE and support for technologies like campus fabric core-
distribution.
The QFX5120-48T supports dual-speed 1GbE/10GbE, also making
it a perfect fit for top-of-rack deployments in campus environments
for server connectivity.
MC-LAG and EVPN Multihoming (Collapsed Core/Distribution)
A pair of interconnected QFX5120 switches can be deployed to
provide EVPN multihoming (ESI-LAG) or multichassis link
aggregation (MC-LAG) in a collapsed core/distribution
configuration. This eliminates the need for Spanning Tree Protocol
(STP) across the campus network by providing multihoming
capabilities from the access to the distribution layer, while
distribution to the core is an L3 IP fabric. ESI-LAG also supports
horizontal scaling with more than two devices in the distribution
layer and can extend EVPN to the core.

Figure 2: QFX5120-48T and QFX5120-48Y/48YM in a leaf-and-spine deployment

Data Center Spine

The QFX5120-32C, with 32 ports of 100GbE, can serve as the
spine in small to medium-sized enterprise data centers. The
QFX5120-32C can be deployed in a three-stage IP Clos with
EVPN-VXLAN overlay to support as many as 1500 server access
ports. The QFX5120-48Y/QFX5120-48YM and QFX5120-32C can
also be used as a collapsed spine data center deployment, offering
Ethernet segment identifier-link aggregation group (ESI-LAG)
connectivity to the rest of the network infrastructure blocks.
All QFX5120 switches can operate in both cut-through and store-
and-forward modes, delivering sustained wire-speed switching with
sub-microsecond latency and low jitter for any packet size
Figure 3: QFX5120 as a campus collapsed core/distribution switch with EVPN
(including jumbo frames) in either mode. With features such as multihoming (ESI-LAG) and MC-LAG support.
multichassis link aggregation (MC-LAG), the QFX5120 supports
active/active server dual-homing and can use full bisectional
bandwidth from server to switch.

3
QFX5120 Ethernet Switch

Figure 4: QFX5120 as a campus distribution switch with EVPN-VXLAN L2/L3 gateway support.

Campus Fabric Core-Distribution user configurable. The intelligent buffer mechanism in the
QFX5120 effectively absorbs traffic bursts while providing
A pair of interconnected QFX5120 switches can provide EVPN L2
deterministic performance, significantly increasing
and L3 VXLAN gateway support. This eliminates the need for STP
performance over static allocation.
across the campus network by providing a multihoming capability
• MPLS: A broad set of MPLS features, including L3 VPN, IPv6
from the access to the distribution layer, while distribution to the
provider edge router (6PE), RSVP traffic engineering, and LDP
core is an L3 IP fabric using EVPN technology. The IP fabric can
allow standards-based network segmentation and
also extend to connect multiple enterprise buildings, while VXLAN
virtualization, enabling the QFX5120 to be deployed as a low
allows stretching L2 across buildings. An IP Clos network between
latency MPLS label-switching router (LSR).
the distribution and the core layers can exist in two modes, both of
• VXLAN overlays: The QFX5120 switch is capable of both L2
which are supported by the QFX5120:
and L3 gateway services. Customers can deploy overlay
• Centrally routed bridging overlay: An IRB interface placed at a
networks to provide L2 adjacencies for applications over L3
central location in the fabric (in this case, a core device)
fabrics. The overlay networks use VXLAN in the data plane
• Edge routed bridging overlay: An IRB interface placed at the
and EVPN or Open vSwitch Database (OVSDB) for
edge of the fabric (in this case, a distribution device)
programming the overlays.
Features and Benefits • MACsec and hop-by-hop encryption: The QFX5120-48YM
• Automation: The QFX5120 supports a number of network supports IEEE 802.1AE MACsec AES-256, providing link-layer
automation and plug-and-play operational features, including data confidentiality, data integrity, and data origin
ZTP and event scripts, automatic rollback, and Python authentication. The MACsec feature enables the
scripting. QFX5120-48YM to support 2 Tbps of near line-rate
• Flexible forwarding table: The QFX5120 includes a unified hardware-based traffic encryption on all 100GbE, 40GbE,
forwarding table, which allows the hardware table to be carved 25GbE, 10GbE, and 1GbE ports. Defined by IEEE 802.1AE,
into configurable partitions of L2 media access control (MAC), MACsec provides secure, encrypted communication at the link
L3 host, and longest prefix match (LPM) tables. In a pure L2 layer that is capable of identifying and preventing threats from
environment, the QFX5120 supports 288,000 MAC denial-of-service (DoS) and intrusion attacks, as well as man-in-
addresses. In L3 mode, the table can support 208,000 host the-middle, masquerading, passive wiretapping, and playback
entries. In LPM mode, it can support 351,000 prefixes. Junos attacks launched from behind the firewall. When MACsec is
OS provides configurable options through a CLI that can deployed on switch ports, all traffic is encrypted on the wire,
optimize the QFX5120 for various deployment scenarios. but traffic inside the switch is not. This allows the switch to
• Intelligent buffer management: The QFX5120 features a total apply network capabilities such as quality of service (QoS) and
of 32 MB of shared buffers. While 25% of the total buffer sFlow to each packet without compromising the security of
space is dedicated, the rest is shared among all ports and is packets on the wire.

4
QFX5120 Ethernet Switch

Figure 5: Juniper HealthBot overview

In addition, Ethernet-based WAN networks can use MACsec to • Capacity planning and optimization by proactively detecting
provide link security over long haul connections. MACsec is hotspots and monitoring latency and microbursts
transparent to Layer 3 and higher layer protocols and is not limited • Troubleshooting and root cause analysis via high-frequency
to IP traffic; it works with any type of wired or wireless traffic monitoring and correlation of overlay and underlay networks
carried over Ethernet links. Monitoring and Analytics with Juniper HealthBot Software
• Virtual Chassis: The QFX5120 supports Juniper Networks Juniper® HealthBot software delivers the following features and
unique Virtual Chassis technology, which enables up to two benefits for enhanced monitoring and analytics:
interconnected switches to operate as a single, logical device
• Key performance indicator collection and visualization
with a single IP address. This technology allows campus
• Anomaly detection
enterprises to eliminate STP and efficiently utilize network
• Root cause analysis
links. QFX5120-48Y (starting Junos 19.3), QFX5120-32C
• Automated remediation
(staring Junos 20.3) and QFX5120-48T (starting Junos 20.2)
• Multivendor support
support Virtual chassis. Note: QFX5120-48YM does not
• Customizable playbooks
support Virtual Chassis at this time, this feature is reserved for
• JTI telemetry
future release.

Junos Telemetry Interface

The QFX5120 supports Junos telemetry interface (JTI), a modern
telemetry streaming tool designed for performance monitoring in
complex, dynamic data centers. Streaming data to a performance
management system enables network administrators to measure
trends in link and node utilization and troubleshoot such issues as
network congestion in real time. JTI delivers the following features:
• Application visibility and performance management by
provisioning sensors to collect and stream data and analyze
application and workload flow paths through the network

5
QFX5120 Ethernet Switch

Power Consumption
• QFX5120-48Y
- Max load: 450 W
- Typical load: 260 W
• QFX5120-48YM
- Max load: 650 W
- Typical load: 550 W
• QFX5120-48T
- Max load: 450 W
- Typical load: 300 W
• QFX5120-32C
- Max load: 515 W
- Typical load: 380 W

Airflow
• Front-to-back (airflow out) for hot aisle deployment
QFX5120 Switch Specifications • Back-to-front (airflow in) for cold aisle deployment

Hardware Interface Options

Switching Capacity • QFX5120-48Y
• QFX5120-48Y: 4 Tbps (bidirectional)/2 Bpps -2 management ports: 2 x RJ-45 ports
• QFX5120-48YM: 4 Tbps (bidirectional)/2 Bpps -1GbE SFP: 48 (24 copper 1GbE)
• QFX5120-48T: 2.16 Tbps (bidirectional)/1 Bpps -10GbE SFP+: 48/80(with breakout cable)
• QFX5120-32C: 6.4 Tbps (bidirectional)/2 Bpps -25GbE SFP: 48/80 (with breakout cable)
• Switching mode (all models): Cut-through and store-and- -40GbE QSFP+: 8 (each QSFP+ port can be configured as
forward a 4 x 10GbE interface or as a 40 Gbps port)
- 100GbE QSFP28: 8 (each QSFP28 port can be
Weight
configured as a 4 x 25GbE interface or as a 100 Gbps
• QFX5120-48Y: 23.7 lb (10.75 kg)
port)
• QFX5120-48YM: 24.8 lb (11.25 kg)
- SFP GbE optical and copper module
• QFX5120-48T: 24.25 lb (11 kg)
- SFP+ 10GbE optical modules
• QFX5120-32C: 21.12 lb (9.58 kg)
- SFP+ direct attach copper (DAC) cables: 1/3/5 m twinax
Dimensions (H x W x D) copper and 1/3/5/7 m active twinax copper
• QFX5120-48Y: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x 52.02 - SFP28 DAC cables: 1/3 m twinax copper
cm) - SFP28 optics: Short reach (SR), long reach (LR)
• QFX5120-48YM: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x - QSFP+ to SFP+: 10GbE direct attach breakout copper
52.02 cm) (1/3 m twinax copper cable)
• QFX5120-48T: 1.72 x 17.36 x 20.48 in. (4.37 x 44.09 x 52.02 • QFX5120-48YM
cm) - 2 management ports: 2 x RJ-45 ports
• QFX5120-32C: 1.7 x 17.26 x 20.27 in. (4.32 x 43.84 x 51.5 - 1GbE SFP: 48
cm) - 10GbE SFP+: 48/56 (total of 56 ports with breakout
cable on port 50 and 52)
- 25GbE SFP: 48/56 (total of 56 ports with breakout cable
on port 50 and 52)
- 40GbE QSFP+: 8 (QSFP+ port 50 and 52 can be
configured as a 4 x 10GbE interface or as a 40 Gbps port)

6
QFX5120 Ethernet Switch

- 100GbE QSFP28: 8 (QSFP28 port 50 and 52 can be Airflow

configured as a 4 x 25GbE interface or as a 100 Gbps
• Redundant (N+1) and hot-pluggable fan modules for front-to-
port)
back and back-to-front airflow
- SFP GbE optical
• Redundant variable-speed fans to reduce power draw
- SFP+ 10GbE optical modules
- SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m Power Supply and Fan Modules
active twinax copper • Dual redundant (1+1) and hot-pluggable 650 W AC/DC power
- SFP28 DAC cables: 1/3 m twinax copper supplies
- SFP28 optics: Short reach (SR), long reach (LR) • 100-240 V single phase AC power
- QSFP+ to SFP+: 10GbE direct attach breakout copper • -48 to -60 V DC power supply
(1/3 m twinax copper cable) • Redundant 4+1 (QFX5120-48Y/YM and QFX5120-48T) or
• QFX5120-48T 5+1 (QFX5120-32C) and hot-pluggable fan modules for front-
- 1 management port: 1 x RJ-45 port to- back or back-to-front airflow
- 1GbE RJ45 (copper): 48 (each port is dual-speed
Performance Scale (Unidimensional)
supporting 1GbE/10GbE)
• MAC addresses per system: 288,000
- 40GbE QSFP+: 6 (ports 50 and 51 can be configured as a
• VLAN IDs: 4093
4 x 10GbE interface or as 40 Gbps interfaces)
• Number of link aggregation groups (LAGs):
- 100GbE QSFP28: 6 (ports 50 and 51 can be configured
- 80 (QFX5120-48Y/YM, QFX5120-32C)
as a 4 x 25GbE interface or as 100 Gbps interfaces)
- 64 (QFX5120-48T)
• QFX5120-32C
• Number of ports per LAG: 64
- 1 RJ-45 in-band management port
• IPv4 unicast routes: 351,000 prefixes; 208,000 host routes; 64
- 10GbE SFP+: 2 native ports plus 124 (with 4 x 10GbE
ECMP paths
breakout cable)
• IPv4 multicast routes: 104,000
- 25GbE SFP: 124 (with breakout cable)
• IPv6 unicast routes: 168,000 prefixes; 104,000 host routes
- 40GbE QSFP+: 32 (ports 0-31 can be configured as a 4 x
• IPv6 multicast routes: 52,000
10GbE interface)
• Address Resolution Protocol (ARP) entries: 64,000
- 100GbE QSFP28: 32 (ports 0-31 can be configured as a 4
• Jumbo frame: 9216 bytes
x 25GbE interface)
• Spanning Tree Protocol (STP)
- SFP GbE optical and copper module
• Multiple Spanning Tree Protocol (MSTP) instances: 64
- SFP+ 10GbE optical modules
• VLAN Spanning Tree Protocol (VSTP) instances: 509
- SFP+ DAC cables: 1/3/5 m twinax copper and 1/3/5/7 m
• Traffic mirroring
active twinax copper
- Mirroring destination ports per switch: 4
- SFP28 DAC cables: 1/3 m twinax copper
- Maximum number of mirroring sessions: 4
- SFP28 optics: SR, LR
- Mirroring destination VLANs per switch: 4
- QSFP+ to SFP+: 10GbE direct attach breakout copper
(1/3 m twinax copper cable) Software Features Supported
Layer 2 Features
Common to All Models
• STP—IEEE 802.1D (802.1D-2004)
• 1 USB 2.0 port
• Rapid Spanning Tree Protocol (RSTP) (IEEE 802.1w); MSTP
• 1 RS-232 console port
(IEEE 802.1s)
• Supported transceiver and direct attach cable
• Bridge protocol data unit (BPDU) protect
- QSFP+ DAC cables: 1/3 m twinax copper
• Loop protect
- QSFP+ optics: SR4, LX4, ESR4, ER4, LR4
• Root protect
- QSFP28 optics: SR4, ER4, PSM4, CWDM4, LR4
• RSTP and VSTP running concurrently
• Rack installation kit
• VLAN—IEEE 802.1Q VLAN trunking
• Versatile four post mounting options for 19-in server rack or
• Routed VLAN interface (RVI)
datacom rack
• Port-based VLAN
• Private VLAN (PVLAN)

7
QFX5120 Ethernet Switch

• VLAN translation
• Static MAC address assignment for interface Security and Filters
• Per VLAN MAC learning (limit) • Secure interface login and password
• MAC learning disable • RADIUS
• Link Aggregation and Link Aggregation Control Protocol • TACACS+
(LACP) (IEEE 802.3ad) • Ingress and egress filters: Allow and deny, port filters, VLAN
• MACsec with AES256 (QFX5120-48YM only) filters, and routed filters, including management port filters
• Virtual Chassis—up to 2 members on QFX5120-48Y, • Filter actions: Logging, system logging, reject, mirror to an
QFX5120-32C and QFX5120-48T interface, counters, assign forwarding class, permit, drop,
Link Aggregation police, mark
• SSH v1, v2
• MC-LAG
• Static ARP support in pure IP fabric
• LAG load sharing algorithm—bridged or routed (unicast or
• Storm control, port error disable, and autorecovery
multicast) traffic
• Source MAC address filtering on the port
• IP: Session Initiation Protocol (SIP), Dynamic Internet Protocol
• DHCP snooping in pure IP fabric use case
(DIP), TCP/UDP source port, TCP/UDP destination port
• Layer 2 and non-IP: MAC SA, MAC DA, Ethertype, VLAN ID, Quality of Service (QoS)
source port • L2 and L3 QoS: Classification, rewrite, queuing
Layer 3 Features (IPv4) • Rate limiting:
- Ingress policing: Single-rate two-color policer, two-rate
• Static routing
three-color policer
• Routing protocols (RIP, OSPF, IS-IS, BGP)
- Egress policing: Policer, policer mark down action
• Virtual Router Redundancy Protocol (VRRP)
- Egress shaping: Per queue on each port
• Virtual router
• 10 hardware queues per port (8 unicast and 2 multicast)
• Dynamic Host Configuration Protocol (DHCP) relay
• Strict-priority queue (SPQ), shaped-deficit weighted round-
• Proxy Address Resolution Protocol (ARP)
robin (SDWRR), weighted random early detection (WRED),
EVPN-VXLAN Features weighted tail drop
• MAC virtual routing and forwarding (MAC-VRF) multiple EVPN • 802.1p remarking
instances (EVI) with service-types vlan-based, vlan-aware, vlan- • Layer 2 classification criteria: Interface, MAC address,
bundle Ethertype, 802.1p, VLAN
• Symmetric inter-IRB routing with anycast gateway and EVPN • Congestion avoidance capabilities: WRED
type-5 instances • Trust IEEE 802.1p (ingress)
• Proxy IGMPv2—EVPN route types 6/7/8 • Remarking of bridged packets
• ARP/ND proxy/suppression • Default inner to outer DiffServ code point (DSCP) copy for
• ESI-LAG A/A multihoming using Enterprise and SP-style EVPN-VXLAN
interfaces
IP Storage
• Enhanced Ethernet loop detection
• Priority-based flow control (PFC)—IEEE 802.1Qbb, DCBX
• Filter-based forwarding on IRB.VGA
• PFC using DSCP and explicit congestion notification (ECN) for
• EVPN advanced route policing
ROCEv2
• VLAN-id overlapping using SP-style interfaces
High Availability
Multicast Features
• Bidirectional Forwarding Detection (BFD)
• Internet Group Management Protocol (IGMP): v1, v2, v3
• Uplink failure detection
• IGMP snooping: v1, v2, and v3 (Layer 2 only)
• IGMP filter MPLS
• Protocol Independent Multicast-Sparse Mode (PIM-SM), PIM- • Static label-switched paths (LSPs)
Source-Specific Multicast (PIM-SSM), PIM-Dense Mode (PIM- • RSVP-based signaling of LSPs
DM) in pure IP fabric use case • LDP-based signaling of LSPs
• Multicast Source Discovery Protocol (MSDP) • LDP tunneling (LDP over RSVP)

8
QFX5120 Ethernet Switch

• MPLS class of service (CoS) • RFC 792 ICMP

• MPLS LSR support • RFC 793 TCP
• IPv6 tunneling (6PE) (via IPv4 MPLS backbone) • RFC 826 ARP
• IPv4 L3 VPN (RFC 2547, RFC 4364) • RFC 854 Telnet client and server
• RFC 894 IP over Ethernet
Management and Operations
• RFC 903 RARP
• Role-based CLI management and access
• RFC 906 TFTP Bootstrap
• CLI via console, telnet, or SSH
• RFC 951 1542 BootP
• Extended ping and traceroute
• RFC 1058 Routing Information Protocol
• Junos OS configuration rescue and rollback
• RFC 1112 IGMP v1
• Image rollback
• RFC 1122 Host requirements
• SNMP v1/v2/v3
• RFC 1142 OSI IS-IS Intra-domain Routing Protocol
• Junos XML management protocol
• RFC 1256 IPv4 ICMP Router Discovery Protocol (IRDP)
• sFlow v5
• RFC 1492 TACACS+
• Beacon LED for port and system
• RFC 1519 Classless Interdomain Routing (CIDR)
• ZTP
• RFC 1587 OSPF not-so-stubby area (NSSA) Option
• OpenStack Neutron Plug-in
• RFC 1591 Domain Name System (DNS)
• Python
• RFC 1745 BGP4/IDRP for IP—OSPF Interaction
• Junos OS event, commit, and OP scripts
• RFC 1772 Application of the Border Gateway Protocol in the
• JTI
Internet
Traffic Mirroring • RFC 1812 Requirements for IP Version 4 Routers
• Port-based • RFC 1997 BGP Communities Attribute
• LAG port • RFC 7348 VXLAN—Virtual extensible Local Area Network
• VLAN-based • RFC 8365 NVO—Network Virtualization Overlay Solution
• Filter-based Using Ethernet VPN (EVPN-VXLAN)
• Mirror to local • RFC 2030 SNTP, Simple Network Time Protocol
• Mirror to remote destinations (L2 over VLAN) • RFC 2068 HTTP server
• RFC 2131 BOOTP/DHCP relay agent and Dynamic Host
Standards Compliance
• RFC 2138 RADIUS Authentication
IEEE Standard • RFC 2139 RADIUS Accounting
• IEEE 802.1D • RFC 2154 OSPF with Digital Signatures (Password, MD-5)
• IEEE 802.1w • RFC 2236 IGMP v2
• IEEE 802.1 • RFC 2267 Network ingress filtering
• IEEE 802.1Q • RFC 2328 OSPF v2 (edge mode)
• IEEE 802.1p • RFC 2338 VRRP
• IEEE 802.1ad • RFC 2362 PIM-SM (edge mode)
• IEEE 802.3ad • RFC 2370 OSPF Opaque LSA Option
• IEEE 802.1AB • RFC 2385 Protection of BGP Sessions via the TCP MD5
• IEEE 802.3x Signature Option
• IEEE 802.1Qbb • RFC 2439 BGP Route Flap Damping
• IEEE 802.1Qaz • RFC 2453 RIP v2
T11 Standards • RFC 2474 Definition of the Differentiated Services Field (DS
Field) in the IPv4 and IPv6 Headers
• INCITS T11 FC-BB-5
• RFC 2597 Assured Forwarding PHB (per-hop behavior) Group
Supported RFCs • RFC 2598 An Expedited Forwarding PHB
• RFC 768 UDP • RFC 2697 A Single Rate Three Color Marker
• RFC 783 Trivial File Transfer Protocol (TFTP) • RFC 2698 A Two Rate Three Color Marker
• RFC 791 IP

9
QFX5120 Ethernet Switch

• RFC 2796 BGP Route Reflection—An Alternative to Full Mesh • RFC 2578 SNMP Structure of Management Information MIB
IBGP • RFC 2579 SNMP Textual Conventions for SMIv2
• RFC 2580 Conformance Statements for SMIv2
• RFC 2918 Route Refresh Capability for BGP-4
• RFC 2665 Ethernet-like Interface MIB
• RFC 3065 Autonomous System Confederations for BGP
• RFC 2787 VRRP MIB
• RFC 3376 IGMP v3 (source-specific multicast include mode
• RFC 2790 Host Resources MIB
only)
• RFC 2819 RMON MIB
• RFC 3392 Capabilities Advertisement with BGP-4
• RFC 2863 Interface Group MIB
• RFC 3446 Anycast RP
• RFC 2932 IPv4 Multicast MIB
• RFC 3569 SSM
• RFC 3410 Introduction and Applicability Statements for
• RFC 3618 MSDP
Internet Standard Management Framework
• RFC 3623 Graceful OSPF Restart
• RFC 3411 An Architecture for Describing SNMP Management
• RFC 4271 Border Gateway Protocol 4 (BGP-4)
Frameworks
• RFC 4360 BGP Extended Communities Attribute
• RFC 3412 Message Processing and Dispatching for the SNMP
• RFC 4456 BGP Route Reflection: An Alternative to Full Mesh
• RFC 3413 Simple Network Management Protocol (SNMP)
Internal BGP (IBGP)
Applications (all MIBs are supported except the Proxy MIB)
• RFC 4486 Subcodes for BGP Cease Notification Message
• RFC 3414 User-based Security Model (USM) for version 3 of
• RFC 4724 Graceful Restart Mechanism for BGP
SNMPv3
• RFC 4812 OSPF Restart Signaling
• RFC 3415 View-based Access Control Model (VACM) for the
• RFC 4893 BGP Support for Four-octet AS Number Space
SNMP
• RFC 5176 Dynamic Authorization Extensions to RADIUS
• RFC 3416 Version 2 of the Protocol Operations for the SNMP
• RFC 5396 Textual Representation of Autonomous System (AS)
• RFC 3417 Transport Mappings for the SNMP
Numbers
• RFC 3418 Management Information Base (MIB) for the SNMP
• RFC 5668 4-Octet AS Specific BGP Extended Community
• RFC 3584 Coexistence between Version 1, Version 2, and
• RFC 5880 Bidirectional Forwarding Detection (BFD) Dynamic
Version 3 of the Internet-standard Network Management
Host Configuration Protocol (DHCP) server
Framework
Supported MIBs • RFC 3826 The Advanced Encryption Standard (AES) Cipher
• RFC 1155 SMI Algorithm in the SNMP User-based Security Model
• RFC 1157 SNMPv1 • RFC 4188 Definitions of Managed Objects for Bridges
• RFC 1212, RFC 1213, RFC 1215 MIB-II, Ethernet-Like MIB • RFC 4318 Definitions of Managed Objects for Bridges with
and TRAPs Rapid Spanning Tree Protocol
• RFC 1850 OSPFv2 MIB • RFC 4363b Q-Bridge VLAN MIB
• RFC 1901 Introduction to Community-based SNMPv2 Approvals
• RFC 2011 SNMPv2 for Internet Protocol using SMIv2
Safety
• RFC 2012 SNMPv2 for the Transmission Control Protocol
• CAN/CSA-C22.2 No. 62368-1-14 Information Technology
using SMIv2
Equipment—Safety
• RFC 2013 SNMPv2 for the User Datagram Protocol using
• UL 62368-1 Information Technology Equipment—Safety
SMIv2
• EN 62368-1: 2014 Information Technology Equipment—
• RFC 2233 The Interfaces Group MIB using SMIv2
Safety
• RFC 2287 System Application Packages MIB
• IEC 62368-1: 2014 2nd Edition Information Technology
• RFC 2570 Introduction to Version 3 of the Internet-standard
Equipment—Safety (All country deviations): CB Scheme
Network Management Framework
• IEC 60950-1:2005/A2:2013 Information Technology
• RFC 2571 An Architecture for describing SNMP Management
Equipment—Safety (All country deviations): CB Scheme
Frameworks (read-only access)
• RFC 2572 Message Processing and Dispatching for the SNMP EMC
(read-only access) • EN 300 386 V1.6.1 (2012-09) Electromagnetic compatibility
• RFC 2576 Coexistence between SNMP Version 1, Version 2, and radio spectrum matters (ERM) Telecommunication network
and Version 3 equipment

10
QFX5120 Ethernet Switch

• EN 300 386 V2.1.1 (2016-07) Telecommunication network deployments. Our services enable you to maximize operational
equipment; EMC requirements; Harmonized Standard covering efficiency, reduce costs, and minimize risk while achieving a faster
the essential requirements of the Directive 2014/30/EU time-to-value for your network.
• EN 55032:2012 (CISPR 32:2012) Electromagnetic
By leveraging best practices from across the industry, you get the
compatibility of multimedia equipment—Emission requirements
maximum levels of system performance, designed and delivered by
• EN 55024:2010 (CISPR 24:2010) Information technology
the world’s leading professional technology experts.
equipment—immunity characteristics—limits and methods of
measurement For more information, please visit www.juniper.net/us/en/
• IEC/EN 61000 Immunity Test products-services.
• AS/NZS CISPR 32:2015 Australia/New Zealand Radiated and Installation and Implementation Service
Conducted Emissions Juniper Professional Services offers a Data Center Switching
• FCC 47 CFR Part 15 USA Radiated and Conducted Emissions QuickStart program to ensure that the solution is operational and
• ICES-003 Canada Radiated and Conducted Emissions the customer has a complete understanding of areas such as
• VCCI-CISPR 32:2016 Japanese Radiated and Conducted configuration and ongoing operations. The QuickStart service
Emissions provides an onsite consultant who works with the client team to
• BSMI CNS 13438 Taiwan Radiated and Conducted Emissions quickly develop the initial configuration and deployment of a small
(at 10 meters) Juniper Networks data center switching environment. A knowledge
• KN32/KN35 Korea Radiated Emission and Immunity transfer session, which is intended as a review of local
Characteristics (at 10 meters) implementation and configuration options, is also included, but is
• KN61000 Korea Immunity Test not intended as a substitute for formalized training.
• TEC/SD/DD/EMC-221/05/OCT-16 India EMC standard
Ordering Information
Environmental Compliance Product Description
Switch Hardware
Restriction of Hazardous Substances (ROHS) 6/6
QFX5120-48Y-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC airflow in
QFX5120-48Y-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, AC airflow out

80 Plus Silver PSU Efficiency QFX5120-48Y-DC-AFI2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC airflow in

QFX5120-48Y-DC-AFO2 QFX5120-48Y, 48x25GbE+8x100GbE, 1 U, DC airflow out
QFX5120-48YM-AFI 48x25GbE+8x100GbE MACsec AES256 switch, AC, back-to-
Recycled material front air flow
QFX5120-48YM-AFO 48x25GbE+8x100GbE MACsec AES256 switch, AC, front-to-
back air flow
Waste Electronics and Electrical Equipment (WEEE) QFX5120-48YM-DC-AI 48x25GbE+8x100GbE MACsec AES256 switch, DC, back-to-
front air flow, DC power

Registration, Evaluation, Authorisation and Restriction of QFX5120-48YM-DC-AO 48x25GbE+8x100GbE MACsec AES256 switch, AC, front-to-
back air flow, DC power
Chemicals (REACH) QFX5120-48T-AFI QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC airflow in
QFX5120-48T-AFO QFX5120-48T, 48x10GbE+6x100GbE, 1 U, AC airflow out
China Restriction of Hazardous Substances (ROHS) QFX5120-48T-DC-AFI QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC airflow in
QFX5120-48T-DC-AFO QFX5120-48T, 48x25GbE+6x100GbE, 1 U, DC airflow out
Telco
QFX5120-32C-AFI QFX5120-32C, 32x100GbE, 1 U, AC airflow in
• Common Language Equipment Identifier (CLEI) code QFX5120-32C-AFO QFX5120-32C, 32x100GbE, 1 U, AC airflow out
QFX5120-32C-DC-AFI QFX5120-32C, 32x100GbE, 1 U, DC airflow in
Environmental Ranges
QFX5120-32C-DC-AFO QFX5120-32C, 32x100GbE, 1 U, DC airflow out
• Operating temperature: 32° to 104° F (0° to 40° C) QFX5110-FANAFI FANAFI fan model, back-to-front airflow
• Storage temperature: -40° to 158° F (-40° to 70° C) QFX5110-FANAFO FANAFO fan model, front-to-back airflow
• Operating altitude: Up to 6000 ft (1829 m) EX-4PST-RMK 4 post rack mount
• Relative humidity operating: 5% to 90% (noncondensing) MACsec Encryption
• Relative humidity nonoperating: 0% to 95% (noncondensing) S-QFX5KC1-MACSEC-3 Class C1 QFX5000, MACsec AES 256 Encryption Sub Software,
Term: 3 Yrs
Juniper Networks Services and Support S-QFX5KC1-MACSEC-5 Class C1 QFX5000, MACsec AES 256 Encryption Sub Software,
Term: 5 Yrs
Juniper Networks leads the market in performance-enabling S-QFX5KC1-MACSEC-P Class C1 QFX5000, MACsec AES 256 Encryption Software,
services designed to accelerate, extend, and optimize your Perpetual

11
QFX5120 Ethernet Switch

Product Description Product Description

Flex Software JNP-100G-4X25G-1M QSFP28 to SFP+ 25GbE Direct Attach Breakout Copper (twinax
copper cable), 1 m (all models)
S-QFX5K-C1-A1-3 Flex Sub Software, Class 1 QFX5000 line, Adv 1, Term: 3 Yrs
JNP-100G-4X25G-3M QSFP28 to SFP+ 25GbE Direct Attach Breakout Copper (twinax
S-QFX5K-C1-A1-5 Flex Sub Software, Class 1 QFX5000 line, Adv 1, Term: 5 Yrs copper cable), 3 m (all models)
S-QFX5K-C1-A1-P Flex Software, Class 1 QFX5000 line, Adv 1, Perpetual
Software Feature Licenses
S-QFX5K-C1-A2-3 Flex Sub Software, Class 1 QFX5000 line, Adv 2, Term: 3 Yrs
S-QFX5K-C1-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), three-year
S-QFX5K-C1-A2-5 Flex Sub Software, Class 1 QFX5000 line, Adv 2, Term: 5 Yrs term license with support (QFX5120-48Y, QFX5120-48T)

S-QFX5K-C1-A2-P Flex Software, Class 1 QFX5000 line, Adv 2, Perpetual S-QFX5K-C1-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN),
three-year term license with support (QFX5120-48Y,
S-QFX5K-C1-P1-3 Flex Sub Software, Class 1 QFX5000 line, Prem 1, Term: 3 Yrs QFX5120-48T)
S-QFX5K-C1-P1-5 Flex Sub Software, Class 1 QFX5000 line, Prem 1, Term: 5 Yrs S-QFX5K-C1-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year term
S-QFX5K-C1-P1-P Flex Software, Class 1 QFX5000 line, Adv 3, Perpetual license with support (QFX5120-48Y, QFX5120-48T)

Services S-QFX5K-C1-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), five-year term

license with support (QFX5120-48Y, QFX5120-48T)
SVC-COR-QFX51-48M Juniper Care Core Support for QFX5120-48YM Switches
S-QFX5K-C1-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN),
SVC-ND-QFX51-48M Juniper Care Next Day Support for QFX5120-48YM five-year term license with support (QFX5120-48Y,
QFX5120-48T)
SVC-COR-QFX5KC1-MS Juniper Care Core Support for S-QFX5KC1-MACSEC-P
S-QFX5K-C1-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year term license
Optics and Transceivers with support (QFX5120-48Y, QFX5120-48T)
JNP-SFP-25G-SR SFP28 25GBASE-SR Optics for up to 100 m transmission over S-QFX5K-C2-A1-3 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), three-year
serial multimode fiber-optic (MMF) OM4 fiber (QFX5120-48Y) term license with support (QFX5120-32C)
JNP-SFP-25G-LR SFP28 25GBASE-SR Optics for up to 10 km transmission over S-QFX5K-C2-A2-3 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN),
serial single-mode fiber-optic (SMF) (QFX5120-48Y) three-year term license with support (QFX5120-32C)
JNP-SFP-25G-DAC-1M 25GbE SFP to SFP copper cable, 1 m (QFX5120-48Y) S-QFX5K-C2-P1-3 QFX5120 Premium 1 (RSVP, LDP, L3VPN), three-year term
JNP-SFP-25G-DAC-3M 25GbE SFP to SFP copper cable, 3 m (QFX5120-48Y) license with support (QFX5120-32C)

JNP-QSFP-100G-SR4 QSFP28 100GbE, SR4, 100 m (all models) S-QFX5K-C2-A1-5 QFX5120 Advanced 1 (OSPF/BGP/ISIS/MC-LAG), five-year term
license with support (QFX5120-32C)
JNP-QSFP-100G-PSM4 QSFP28 100GBASE-PSM4 optics for up to 500 m transmission
over parallel SMF (all models) S-QFX5K-C2-A2-5 QFX5120 Advanced 2 (Multicast, Virtual Chassis, EVPN-VXLAN),
five-year term license with support (QFX5120-32C)
JNP-QSFP-100G-CWDM QSFP28 100GbE, CWDM4, 2 km (all models)
S-QFX5K-C2-P1-5 QFX5120 Premium 1 (RSVP, LDP, L3VPN), five-year term license
JNP-QSFP-100G-LR4 QSFP28 100GbE, LR4, 10 km (all models) with support (QFX5120-32C)
JNP-100G-DAC-1M QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax
copper cable), 1 m (all models)
JNP-100G-DAC-3M QSFP28 to QSFP28 Ethernet Direct Attach Copper (twinax
copper cable), 3 m (all models)

Table 1. QFX5120-48YM Optics Support.

1GbE 10GbE 25GbE 40GbE 100GbE

EX-SFP-GE10KT15R13 EX-SFP-10GE-LRM JNP-25G-AOC-10M JNP-40G-AOC-10M JNP-100G-DAC-1M
EX-SFP-GE40KT13R15 EX-SFP-10GE-SR JNP-25G-AOC-20M JNP-40G-AOC-20M JNP-100G-DAC-3M
EX-SFP-GE40KT15R13 EX-SFP-10GE-USR JNP-25G-AOC-30M JNP-40G-AOC-30M JNP-QSFP-100G-CWDM
EX-SFP-1GE-SX EX-SFP-10GE-DAC-1M JNP-SFP-25G-SR JNP-QSFP-AOCBO-10M JNP-QSFP-100G-LR4
EX-SFP-1GE-SX-ET JNP-10G-AOC-10M JNP-SFP-25G-DAC-3M JNP-QSFP-AOCBO-1M JNP-QSFP-100G-SR4
EX-SFP-GE80KCW1490 JNP-10G-AOC-15M JNP-SFP-25G-DAC-5M JNP-QSFP-AOCBO-3M QSFP-100G-ER4L
EX-SFP-GE80KCW1510 JNP-10G-AOC-1M JNP-SFP-25G-LR JNP-QSFP-AOCBO-5M
EX-SFP-GE10KT13R15 JNP-10G-AOC-20M JNP-QSFP-AOCBO-7M
EX-SFP-GE80KCW1530 JNP-10G-AOC-30M JNP-QSFPP-40G-BXSR
EX-SFP-GE80KCW1550 JNP-10G-AOC-3M QFX-QSFP-40G-ESR4
EX-SFP-GE80KCW1570 JNP-10G-AOC-5M QFX-QSFP-DAC-1M
EX-SFP-GE80KCW1590 JNP-10G-AOC-7M QFX-QSFP-DACBO-1M
JNP-SFP-10G-BX10D QFX-QSFP-DACBO-3M
JNP-SFP-10G-BX10U QSFPP-40GBASE-SR4
SRX-SFPP-10G-SR-ET

12
 QFX5120 Ethernet Switch

About Juniper Networks

At Juniper Networks, we are dedicated to dramatically simplifying
network operations and driving superior experiences for end users.
Our solutions deliver industry-leading insight, automation, security
and AI to drive real business results. We believe that powering
connections will bring us closer together while empowering us all to
solve the world’s greatest challenges of well-being, sustainability
and equality.

Corporate and Sales Headquarters APAC and EMEA Headquarters

Juniper Networks, Inc. Juniper Networks International B.V. Boeing

1133 Innovation Way Avenue 240 1119 PZ Schiphol-Rijk

Sunnyvale, CA 94089 USA Amsterdam, The Netherlands

Phone: 888.JUNIPER (888.586.4737) Phone: +31.207.125.700

or +1.408.745.2000

www.juniper.net

Copyright 2021 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no
responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

1000639-017-EN Aug 2021 13