- play_arrow Getting Started with Juniper Licenses
- Juniper Licenses
- play_arrow Junos Product Licenses
- ACX Series Licensing Lifecycle
- cRPD Licensing Lifecycle
- cSRX Licensing Lifecycle
- EX Series Switches Licensing Lifecycle
- Juniper Secure Connect Licensing Lifecycle
- MX Series Routers and MPC Service Cards Licensing Lifecycle
- NFX Series Licensing Lifecycle
- PTX Series Routers Licensing Lifecycle
- QFX Series Switches Licensing Lifecycle
- SRX Series Firewall Licensing Lifecycle
- vSRX Virtual Firewall Licensing Lifecycle
- play_arrow Cloud and Networking Management Licenses
- play_arrow Data Center Licenses
- play_arrow Subscriber Services Licenses
- play_arrow Juniper Licensing Operational Process
- play_arrow Juniper Software License Model
- Juniper Licensing Terminology
- Juniper License Lifecycle
- play_arrow Juniper Agile Licensing
- play_arrow Activate Juniper Licenses
- play_arrow Monitor Juniper Licenses
- play_arrow Juniper License Keys Upgrade
- play_arrow Juniper License FAQs
-
Software Licenses for MX Series Routers and MPC Service Cards
MX Series Routers support subscription and perpetual licenses.
Go through the following tables:
| SKU | SKU Character Description |
|---|---|
S-MXSPC3-A1/A2/A3/P1/P2/P3-1/3/5/P S-MXSPC3-1/2-IPSEC-1/3/5/P | S—Software MXSPC3— Product name: MXSPC3 line card A1/A2/A3—Advanced 1 or advanced 2 or advanced 3 software features P1/P2/P3—Premium 1 or premium 2 or premium 3 software features 1/2-IPSEC—Supported IPsec VPN features list 1/3/5—Subscription term 1 or 3 or 5 years P—Perpetual license |
Features with Licenses | MX Series Routers |
|---|---|
Use Case for Premium (includes Advanced features): Services Scale: 32+IP VPNs and 8+multicast VPNs | |
Highscale IP-VPNs | Premium |
IP fabrics (SRv6 and SRm6) | Premium |
Inline NAT and inline MDI | Premium |
1:1 inline J-Flow | Premium |
Use Case for Advanced (includes Standard features): Transport Scale: 32 IP VPNs – all address families and 8 next-generation MVPN | |
IP routing | Advanced |
IGP (OSFP and IS-IS) | Advanced |
IP-FRR | Advanced |
PIM variants | Advanced |
PWHT for Layer 3 VPNs or BNG | Advanced |
IGMP | Advanced |
Internet eBGP peering | Advanced |
BGP multihoming (add path and multi-path) | Advanced |
EPE | Advanced |
BGP PIC | Advanced |
BGP flow specification | Advanced |
All Layer 2 services—E-LINE (Layer 2 VPNs, Layer 2 circuit, EVPN VPWS, EVPN FXC), E-LAN (bridging, H-VPLS, EVPN, and IRB), E-TREE (H-VPLS, EVPN, and IRB), Layer 2 multicast (snooping included) | Advanced |
All MPLS transport—LDP, RSVP-TE, SR, SR-TE, and MPLS-FRR (including TI-LFA) | Advanced |
IP fabrics (GRE, MPLSoUDP, VxLAN, and IPinIP) | Advanced |
Streaming telemetry | Advanced |
SNMP | Advanced |
Policers | Advanced |
ACLs | Advanced |
J-Flow (sampled) | Advanced |
sFlow | Advanced |
Port mirroring | Advanced |
VLAN queuing | Advanced |
Timing (all variants) | Advanced |
OAM—BFD | Advanced |
Ethernet CFM or LFM | Advanced |
MPLS or SR (ping and traceroute) | Advanced |
Services OAM | Advanced |
RPM | Advanced |
TWAMP | Advanced |
HQoS | Advanced |
Logical Systems | Advanced |
Use Case for Standard: Basic Layer 2 features | |
Bridging with port and single level VLAN (dot1Q) | Standard |
LAG | Standard |
The Junos Fusion Technology feature requires an additional license in addition to Advanced license.
The subscriber management (BNG or CUPS) feature requires an additional license in addition to Premium license.
Features that are not explicitly listed in Premium license are included in Advanced license, except for the following:
Junos Fusion Technology requires an additional license in addition to Advanced or Premium license.
Premium software tier is a prerequisite for running subscriber services (BNG (PL), BNG CUPS, MX Mobile User Plane (SAEGW-U, 5G AGF or UPF)).
Features with Licenses | MX-SPC3 |
|---|---|
Use Case for Premium 3: Advanced threat intelligence | |
DNS sinkhole, IDS, and URL filtering | Premium 3 |
Use Case for Premium 2: Service provider edge; Gi firewall for mobile operators; enterprise edge and data center | |
CGNAT, DNS sinkhole, IDS, stateful firewall, and URL filtering | Premium 2 |
Use Case for Premium 1: Enterprise data center and edge; service provider edge | |
CGNAT, DNS sinkhole, IDS, stateful firewall, and URL filtering | Premium 1 |
Use Case for Advanced 3: Advanced threat intelligence | |
Intrusion detection system (IDS) | Advanced 3 |
Use Case for Advanced 2: Advanced threat intelligence | |
Stateful firewall | Advanced 2 |
Use Case for Advanced 1: Enterprise data center and edge; service provider edge | |
Carrier-grade NAT (CGNAT) | Advanced 1 |
Use Case for Standard: Enterprise data center; service provider edge and data center | |
Traffic Load Balancer (TLB) | Standard |
IPsec– Full card for Site-to-Site VPN, Dynamic Endpoint, and AutoVPN, use S-MXSPC3-2-IPSEC- 1/3/5/P.
IPsec– Half card for Site-to-Site VPN, Dynamic Endpoint, and AutoVPN, use S-MXSPC3-1-IPSEC- 1/3/5/P.
IPsec* – Group VPN, Intra HA, policy-based VPN, passive mode, IPsec tunnel trace route are not supported.
MX Series Routers and MX-SPC3 | Subscription | Perpetual |
|---|---|---|
MX304 | MX304-BASE/PREM MX304-LMIC16-BASE S-MX-1C/16C-A1/P1-C1-3/5/7/1* | MX304-BASE/PREM MX304-LMIC16-BASE S-MX-1C/16C-A1/P1-C1-P |
MX204 | MX204-HW-BASE S-MX-4C-A1/P1-C1-3/5/7/1* | MX204-HW-BASE S-MX-4C-A1/P1-C1-P |
MX10K3-L2103 Supported on MX10003 device | MX10K3-L2103-BASE S-MX-12C-A1/P1-C1-3/5/7/1* | MX10K3-L2103-BASE S-MX-12C-A1/P1-C1-P |
MPC5E Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 | MPC5E/Q-40G10G/100G10G S-MX-2C4-A1/P1-3/5/7/1* | MPC5E/Q-40G10G/100G10G S-MX-2C4-A1/P1-P |
MPC7E-10G Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 | MPC7E-10G S-MX-4C-A1/P1-3/5/7/1* | MPC7E-10G S-MX-4C-A1/P1-P |
MPC7E-MRATE Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 | MPC7E-MRATE S-MX-4C8-A1/P1-3/5/7/1* | MPC7E-MRATE S-MX-4C8-A1/P1-P |
MPC10E-10C Supported on MX240, MX480, and MX960 devices | MPC10E-10C-P-BASE S-MX-10C-A1/P1-3/5/7/1* | MPC10E-10C-P-BASE S-MX-1C/10C-A1/P1-P |
MPC10E-15C Supported on MX240, MX480, and MX960 devices | MPC10E-15C-P-BASE S-MX-15C-A1/P1-3/5/7/1* | MPC10E-15C-P-BASE S-MX-15C-A1/P1-P |
MX2K-MPC6E Supported on MX2008, MX2010, and MX2020 devices | MX2K-MPC6E S-MX-2C/2C4/4C-A1/P1-3/5/7/1* | MX2K-MPC6E S-MX-2C/2C4/4C-A1/P1-P |
MX2K-MPC8E Supported on MX2008, MX2010, and MX2020 devices | MX2K-MPC8E S-MX-4C8/8C-A1/P1-3/5/7/1* | MX2K-MPC8E S-MX-4C8/8C-A1/P1-P |
MX2K-MPC9E Supported on MX2008, MX2010, and MX2020 devices | MX2K-MPC9E S-MX-8C-A1/P1-3/5/7/1* | MX2K-MPC9E S-MX-8C-A1/P1-P |
MX10K-LC2101 Supported on MX10004, MX10008, and MX10016 devices | MX10K-LC2101-BASE S-MX-24C-A1/P1-3/5/7/1* | MX10K-LC2101-BASE S-MX-24C-A1/P1-P |
MX10K-LC480 Supported on MX10004, MX10008, and MX10016 | MX10K-LC480-BASE S-MX-4C8-A1-3/5/7/1* | MX10K-LC480-BASE S-MX-4C8-A1-P |
MX10K-LC4800 Supported on MX10004 and MX10008 | MX10K-LC4800-BASE S-MX-48C-A1/P1-3/5/7/1* S-MX-4C-A1/P1-D-3/5/7/1* | MX10K-LC4800-BASE S-MX-48C-A1/P1-P S-MX-4C-A1/P1-D-P |
MX10K-LC9600 Supported on MX10004 and MX10008 | MX10K-LC9600-BASE S-MX-96C-A1/P1-3/5/7/1* S-MX-4C-A1/P1-D-3/5/7/1* | MX10K-LC9600-BASE S-MX-96C-A1/P1-P S-MX-4C-A1/P1-D-P |
MX2K-MPC11E Supported on MX2010 and MX2020 devices | MX2K-MPC11E-BASE S-MX-40C-A1/P1-3/5/7/1* | MX2K-MPC11E-BASE S-MX-40C-A1/P1-P |
MX-SPC3 | MX-SPC3 S-MXSPC3-A1/A2/A3/P1/P2/P3-1/3/5 S-MXSPC3-1/2-IPSEC-1/3/5 | MX-SPC3 S-MXSPC3-A1/A2/A3/P1/P2/P3-P S-MXSPC3-1/2-IPSEC-P |
*1 year subscription term is for renewal only.
MPC10E-10C and MPC10E-15C line cards are supported on MX240, MX480, and MX960 devices.
MX2K-MPC11E line cards are supported on MX2010 and MX2020 devices.
MX10K3-L2103 line card is supported on MX10003 device.
MX10K-LC2101, MX10K-LC480, MX10K-LC9600 line cards are supported on MX10004, MX10008, and MX10016 devices.
The show system macsec license command displays the total MACsec bandwidth used by the line cards.
The MACsec feature is supported on MX240, MX304, MX480, MX960, MX2008, MX2010, MX2020, MX10003, MX10004, MX10008, and MX10016 device. These licenses are perpetual.
The minimum number of MACsec bandwidth licenses installed must be greater than or equal to the configured bandwidth of MACsec enabled ports.
The MACsec feature licenses are available in the following variants:
S-MX-1C-MSEC-P - 100-Gigabit Ethernet MACsec bandwidth license
S-MX-4C-MSEC-P - 400-Gigabit Ethernet MACsec bandwidth license
S-MX-4C8-MSEC-P - 480-Gigabit Ethernet MACsec bandwidth license
There will be no alarms or syslog messages for the following line cards if the license is not installed. However, the MACsec bandwidth usage on these line cards will be tracked.
MX10K-LC2101
MPC5E-100G10G
MPC5EQ100G10G
MPC5E-40G10G
MPC5EQ-40G10G
MX2K-MPC6E
MPC7E-10G
MPC7E-MRATE
MX2K-MPC8E
MX2K-MPC9E
The following line cards require MACsec bandwidth license. Junos OS displays a warning when you commit the configuration and generates alarms, if the MACsec bandwidth license is not installed or the MACsec bandwidth usage is more than the installed value.
MPC10E-10C
MPC10E-15C
MX2K-MPC11E
MX10KM-LC9600-BASE
MX10KM-LC480-BASE
