How to test the Juniper Switch

This method includes 10 sets of tests covering L2 and L3 single propagation; IGMP Group Multi-Point propagation; L2 and L3 multi-point propagation; network access control (NAC)/802.1X; storm control; Energy consumption; vswitch manageability, security and practicability, and vswitch features. A detailed and complete method is provided.

In the L2 single propagation performance test, we provide each switch with a single virtual LAN containing all ports. Attach the Spirent TestCenter Generator/analyzer to all the 48 Gb Ethernet and two 10 Gb ports on the switch and run three tests: all ports, only Gb ports and only 10 Gb ports. Submit the traffic to the Gb port in a full-mesh mode, and submit the traffic to the 10 Gb port in a mesh mode. We run each test separately at 64,256,151 8 bytes and test the throughput and average latency of each frame.

Test the single propagation performance of L3 is similar to that of L2, unless I use different VLANs and IP subnets to configure each switch port.

In the IGMP group capability test, we restored the L2 configuration, allowed IGMP inspection, and set the switch to IGMP query. In this test, 47 of the 48 TestCenter Gb Ethernet ports were added to the IGMPv2 group: 48th ports acted as monitors.

After sending the member information and waiting for at least two IGMP query intervals of the switch, the ScripMaster software of TestCenter will provide multicast traffic for the first 10 Gb port of the switch, this port is designed for multicast groups. For each RFC3918, if all groups receive at least one frame, iterative testing will be considered as a signal that passes. If any loss or overflow occurs, iteration testing fails. Using the binary search algorithm, we repeat this program to determine the multicast group capability.

In the L2 multicast performance test, we add a single VLAN for all the switch ports, use IGMP for inspection, and then run it in the IGMP query. Add the 48 Gb ports of TestCenter to the 500IGMPv2 group. The Juniper switch does not support IGMPv3 during the test, so IGMPv2 is required. This is different from the earlier access switch tests.

After waiting for at least two IGMP queries on the vswitch, The ScripMaster software of TestCenter will provide multicast traffic to the first 10 Gb port of the vswitch. This port is designed for Multiple Multicast Groups. Using the binary search algorithm, TestCenter determines the overall throughput. In a separate test, TestCenter measures the average and maximum latency values.

In the L3 multicast test, a separate VLAN and IP subnet are configured for each vswitch port, and an independent Sparse Mode route is configured for each port to set the switch to a PIM convergence point. The test installation and traffic modes are similar to those of L2. We then determine the throughput and detect the average latency and maximum latency at each speed.

To evaluate the support of 802.1X/NAC, we have developed six scenarios to describe the role of the switch in the NAC facility. Attach the vswitch to the Windows2003 server, which runs Juniper Steel-Belted Radius Enterprise Edition6.1 (SBR ). You can use the Windows Active Directory certificate to verify your identity.

In the first case, the switch needs to verify the customer, and the second case is similar to the first case, but it requires multi-customer verification that is attached to a single port. In the third case, the switch will assign a VLAN after verification. Fourth, the vswitch dynamically applies the access control list after verification. Fifth, the switch considers the customer as a visitor or a restricted VLAN after the verification fails. Finally, determine whether the vswitch port supports both 802.1X and Media Access Control verification.

To evaluate storm control, we use common attack techniques such as broadcast and tcp syn overflow. We configure limited attack traffic for the Juniper switch and use the real-time rate counter in the Spirent TestCenter to verify these limits.

We use Fluke322 and Fluke335 clamp tables to test energy consumption. The test includes three indicators: AC voltage, idle electric traffic, and electric traffic at full load. Configure the control and data of the Spirent TestCenter full-load switch to provide port speed limit. The power is obtained by multiplying the voltage by the current.

The test of vswitch manageability, security, and practicability includes objective and subjective factors. Objectively, we decide which management method is supported by the switch on IPv4 and Ipv6, and its security is the same. We also decide the default management method and the methods to enable/disable. In addition, we also decided whether to delete all personal identity information, restrictions and best security practices when deleting the configuration file.

Subjective Evaluation consists of our judgment on the implementation of these operations and other tests.

Finally, to evaluate the characteristics of a vswitch, you must enter a complete questionnaire from the supplier.

1. Juniper challenges Cisco to enter the 20 billion Ethernet switch Market
2. Replacing Cisco devices with Juniper devices significantly reduces maintenance costs