Juniper NS-RBO-CS-SSG350-3 Manuel

APPLICATION NOTECopyright © 2010, Juniper Networks, Inc. BRANCH OFFICE CONNECTIVITY GUIDE Juniper Networks Design Practices for Connecting BranchOffic

6 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Using RIP with On-Demand Circuits Extensions (Advantage

Copyright © 2010, Juniper Networks, Inc. 7APPLICATION NOTE - Branch Office Connectivity Guide Implementing ECMP as an Aid in Load BalancingAs shown i

8 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Figure 6: BGP routing designThe main advantages of thi

Copyright © 2010, Juniper Networks, Inc. 9APPLICATION NOTE - Branch Office Connectivity Guide administrative distances. Whenever the primary tunnel i

10 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide • Assumptions about the nature of the IPsec tunnels h

Copyright © 2010, Juniper Networks, Inc. 11APPLICATION NOTE - Branch Office Connectivity Guide Note: The hub also stores a profile with the configura

12 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide • The security associations (SAs) and the NHRP caches

Copyright © 2010, Juniper Networks, Inc. 13APPLICATION NOTE - Branch Office Connectivity Guide • A single NHS server only can be configured on a per

14 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Functionality DescriptionNetwork Address Translation (

Copyright © 2010, Juniper Networks, Inc. 15APPLICATION NOTE - Branch Office Connectivity Guide is routed through interface Ethernet 0/1, the interfac

ii Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Table of ContentsIntroduction . . . . . . . . . . . .

16 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide There is no session or configuration synchronization b

Copyright © 2010, Juniper Networks, Inc. 17APPLICATION NOTE - Branch Office Connectivity Guide Figure 14: Type C – HA configurationBranch office Typ

18 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Pertaining to the other branch offices, the interfaces

Copyright © 2010, Juniper Networks, Inc. 19APPLICATION NOTE - Branch Office Connectivity Guide Table 3: Data Center Key Design ConsiderationsRequire

20 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Data Center Network ArchitectureFigure 17 illustrates

Copyright © 2010, Juniper Networks, Inc. 21APPLICATION NOTE - Branch Office Connectivity Guide Figure 17: Enterprise network for the data centerInte

22 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Internet ConnectionsBecause HA is an integral part of

Copyright © 2010, Juniper Networks, Inc. 23APPLICATION NOTE - Branch Office Connectivity Guide Table 4: M Series Edge A and B Router Connectivity an

24 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide The first set of firewalls, specifically the Internet

Copyright © 2010, Juniper Networks, Inc. 25APPLICATION NOTE - Branch Office Connectivity Guide from accepting upstream routing information, namely th

Copyright © 2010, Juniper Networks, Inc. iiiAPPLICATION NOTE - Branch Office Connectivity Guide VPN Firewalls . . . . . . . . . . . . . . . . . . . .

26 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide The NSRP design uses a mix of VSI and non-VSI interfac

Copyright © 2010, Juniper Networks, Inc. 27APPLICATION NOTE - Branch Office Connectivity Guide The firewall policy that is deployed on the firewalls

28 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide because there is only one private WAN provider. The la

Copyright © 2010, Juniper Networks, Inc. 29APPLICATION NOTE - Branch Office Connectivity Guide access between branches. Many organizations often term

30 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Shared Services CoreThe shared services core is the se

Copyright © 2010, Juniper Networks, Inc. 31APPLICATION NOTE - Branch Office Connectivity Guide WX Design RequirementsTable 8 summarizes the WX Series

32 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Appendix B Naming ConventionsM Series and J Series Int

Copyright © 2010, Juniper Networks, Inc. 33APPLICATION NOTE - Branch Office Connectivity Guide Appendix C ProductsProduct TablesProduct/Technology Ty

34 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide KasperskyBy integrating a best-in-class gateway antivi

APPLICATION NOTE - Branch Office Connectivity Guide 353500143-002-EN May 2010Copyright 2010 Juniper Networks, Inc. All rights reserved. Juniper Ne

iv Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Table of FiguresFigure 1: Connecting branch offices,

Copyright © 2010, Juniper Networks, Inc. 1APPLICATION NOTE - Branch Office Connectivity Guide IntroductionDesigning and scaling an enterprise network

2 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide Design Considerations—Connectivity at the Branch Office

Copyright © 2010, Juniper Networks, Inc. 3APPLICATION NOTE - Branch Office Connectivity Guide Table 1: Functionality, Features, and Capabilities of

4 Copyright © 2010, Juniper Networks, Inc.APPLICATION NOTE - Branch Office Connectivity Guide • Configuration Simplicity: Provisioning is easy. Whe

Copyright © 2010, Juniper Networks, Inc. 5APPLICATION NOTE - Branch Office Connectivity Guide When a device sends traffic to other devices, it sends