•
QoS Schedulers
—A QoS scheduler defines the output queue properties for each class
of service in the domain that is associated with the scheduler. Queue properties include
the amount of interface bandwidth assigned to the queue, the size of the memory
buffer allocated for storing packets, the priority of the queue, and the random early
detection (RED) drop profiles associated with the queue. The QoS Design software
supports two-level and three-level schedulers A two-level scheduler is a shared
scheduler (or scheduler profile) that allows logical interfaces belonging to the same
physical port to share one set of scheduling properties. A two-level scheduler can also
include a drop profile to reference WRED congestion control of the queue. With a
three-level scheduler, scheduling is performed at the interface level and the scheduler
defines two parameters—the port oversubscription ratio and the interface
oversubscription ratio.
•
QoS Profiles
—A QoS profile is a configuration template that allows you to create
service offerings that provide priority to certain traffic when you provision Layer 2
Ethernet Services. A QoS profile defines classification and policing for UNI ingress
traffic and policing, scheduling, and rewrite rules for UNI egress traffic on the N-PE
devices for Ethernet services.
Known Issues
The QoS Design 2.0 release includes the following known issues:
•
Create scheduler issue when you deselect a class of service. If you clear the check box
for some CoS rows and then edit one or more selected CoS rows, when you click
OK
the edited CoS rows that you configured are preserved. However, the CoS rows that
were cleared before you clicked
OK
are automatically selected again. As a workaround,
clear the checkbox for each CoS row that was automatically selected and then click
Create
. Only the Cos rows you intentionally selected are saved for the QoS scheduler.
[565752]
Security Design
The Junos Space Security Design application is a powerful but easy-to-use solution that
allows you to design a security topology that represents your physical network, create
IPSec VPNs on different sections of your network to provide appropriate security on the
network, and create security policies that define a set of rules to permit, deny or reject
communication between security domains.
New Features
The Junos Space Security Design application presents the following new features:
•
CLI Preview for Provisioning IPSec VPNs and Security Policies
—The provisioning
workflow for IPSec VPNs and security policies allows you to view the CLI format of the
configuration pushed to the device.
•
Support for Screen OS Devices
— Screen OS devices are supported in IPsec VPN and
Security Policy creation and deployment.
7
Copyright © 2010, Juniper Networks, Inc.
Security Design
