Results Summary and Analysis

For the Secure Data Center Fabric with Juniper SRX JVDE, comprehensive functional testing was performed on devices listed in Validated Platforms and Software section in this document:

• Baseline System Test:
  • Add two SRX devices as external generic systems
  • Add connectivity templates for underlay BGP sessions from spines to SRX
  • Add SRXs also as External Gateway devices to establish overlay BGP for Type5 EVPN routes.
• Operational and Trigger Tests:
  • Operational testing of switches was carried out for the following:
    • Daemon failures such as RPD, ppmd, jsrpd
    • Reboot devices cause no issues when the devices boot up
  • Connectivity tests for the following items were carried out:
    • ICL link failure between MNHA nodes
    • Link flap between firewall and spine
    • Link fails between firewall and spine
    • Primary MNHA node fails
    • Spine failure
  • Resiliency tests for overlay connectivity testing for the below scenarios:
    • Inter VRF Traffic for application identification
    • SSL inspection on inter-VRF traffic and VRF to internet traffic
    • Infected host and SecIntel feed for inter VRF traffic and VRF to internet traffic
    • Destination NAT on North-South traffic.

Scale Testing numbers are as follows:

Table 1: Multi-dimensional Scale Numbers Tested

Features	Tested Scale Numbers
VLANs VNIs with IRB	1500
Host per VNI per port	5
DCI VTEPS	30
BGP total path	426468
BGP active path	213202

The scale numbers above are not device maximums; they only reference the scale at which these multidimensional test cases are performed.

Overall, the JVDE validation testing didn’t detect any issues, and all performance parameters were within the threshold and performed as expected. Traffic profiles were tested on SRX4600 for both inter-VRF and external.