Software Licenses for MX Series Routers and MPC Service Cards
MX Series Routers support subscription and perpetual licenses.
Go through the following tables:
| SKU | SKU Character Description |
|---|---|
|
S-MXSPC3-A1/A2/A3/P1/P2/P3-1/3/5/P S-MXSPC3-1/2-IPSEC-1/3/5/P |
S—Software MXSPC3— Product name: MXSPC3 line card A1/A2/A3—Advanced 1 or advanced 2 or advanced 3 software features P1/P2/P3—Premium 1 or premium 2 or premium 3 software features 1/2-IPSEC—Supported IPsec VPN features list 1/3/5—Subscription term 1 or 3 or 5 years P—Perpetual license |
|
Features with Licenses |
MX Series Routers |
|---|---|
|
Use Case for Premium (includes Advanced features): Services Scale: 32+IP VPNs and 8+multicast VPNs |
|
|
Highscale IP-VPNs |
Premium |
|
IP fabrics (SRv6 and SRm6) |
Premium |
|
Inline NAT and inline MDI |
Premium |
|
1:1 inline J-Flow |
Premium |
|
Use Case for Advanced (includes Standard features): Transport Scale: 32 IP VPNs – all address families and 8 next-generation MVPN |
|
|
IP routing |
Advanced |
|
IGP (OSFP and IS-IS) |
Advanced |
|
IP-FRR |
Advanced |
|
PIM variants |
Advanced |
|
PWHT for Layer 3 VPNs or BNG |
Advanced |
|
IGMP |
Advanced |
|
Internet eBGP peering |
Advanced |
|
BGP multihoming (add path and multi-path) |
Advanced |
|
EPE |
Advanced |
|
BGP PIC |
Advanced |
|
BGP flow specification |
Advanced |
|
All Layer 2 services—E-LINE (Layer 2 VPNs, Layer 2 circuit, EVPN VPWS, EVPN FXC), E-LAN (bridging, H-VPLS, EVPN, and IRB), E-TREE (H-VPLS, EVPN, and IRB), Layer 2 multicast (snooping included) |
Advanced |
|
All MPLS transport—LDP, RSVP-TE, SR, SR-TE, and MPLS-FRR (including TI-LFA) |
Advanced |
|
IP fabrics (GRE, MPLSoUDP, VxLAN, and IPinIP) |
Advanced |
|
Streaming telemetry |
Advanced |
|
SNMP |
Advanced |
|
Policers |
Advanced |
|
ACLs |
Advanced |
|
J-Flow (sampled) |
Advanced |
|
sFlow |
Advanced |
|
Port mirroring |
Advanced |
|
VLAN queuing |
Advanced |
|
Timing (all variants) |
Advanced |
|
OAM—BFD |
Advanced |
|
Ethernet CFM or LFM |
Advanced |
|
MPLS or SR (ping and traceroute) |
Advanced |
|
Services OAM |
Advanced |
|
RPM |
Advanced |
|
TWAMP |
Advanced |
|
HQoS |
Advanced |
|
Logical Systems |
Advanced |
|
Use Case for Standard: Basic Layer 2 features |
|
|
Bridging with port and single level VLAN (dot1Q) |
Standard |
|
LAG |
Standard |
The Junos Fusion Technology feature requires an additional license in addition to Advanced license.
The subscriber management (BNG or CUPS) feature requires an additional license in addition to Premium license.
Features that are not explicitly listed in Premium license are included in Advanced license, except for the following:
-
Junos Fusion Technology requires an additional license in addition to Advanced or Premium license.
-
Premium software tier is a prerequisite for running subscriber services (BNG (PL), BNG CUPS, MX Mobile User Plane (SAEGW-U, 5G AGF or UPF)).
|
Features with Licenses |
MX-SPC3 |
|---|---|
|
Use Case for Premium 3: Advanced threat intelligence |
|
|
DNS sinkhole, IDS, and URL filtering |
Premium 3 |
|
Use Case for Premium 2: Service provider edge; Gi firewall for mobile operators; enterprise edge and data center |
|
|
CGNAT, DNS sinkhole, IDS, stateful firewall, and URL filtering |
Premium 2 |
|
Use Case for Premium 1: Enterprise data center and edge; service provider edge |
|
|
CGNAT, DNS sinkhole, IDS, stateful firewall, and URL filtering |
Premium 1 |
|
Use Case for Advanced 3: Advanced threat intelligence |
|
|
Intrusion detection system (IDS) |
Advanced 3 |
|
Use Case for Advanced 2: Advanced threat intelligence |
|
|
Stateful firewall |
Advanced 2 |
|
Use Case for Advanced 1: Enterprise data center and edge; service provider edge |
|
|
Carrier-grade NAT (CGNAT) |
Advanced 1 |
|
Use Case for Standard: Enterprise data center; service provider edge and data center |
|
|
Traffic Load Balancer (TLB) |
Standard |
IPsec– Full card for Site-to-Site VPN, Dynamic Endpoint, and AutoVPN, use S-MXSPC3-2-IPSEC- 1/3/5/P.
IPsec– Half card for Site-to-Site VPN, Dynamic Endpoint, and AutoVPN, use S-MXSPC3-1-IPSEC- 1/3/5/P.
IPsec* – Group VPN, Intra HA, policy-based VPN, passive mode, IPsec tunnel trace route are not supported.
|
MX Series Routers and MX-SPC3 |
Subscription |
Perpetual |
|---|---|---|
|
MX304 |
MX304-BASE/PREM MX304-LMIC16-BASE S-MX-1C/16C-A1/P1-C1-3/5/7/1* |
MX304-BASE/PREM MX304-LMIC16-BASE S-MX-1C/16C-A1/P1-C1-P |
|
MX204 |
MX204-HW-BASE S-MX-4C-A1/P1-C1-3/5/7/1* |
MX204-HW-BASE S-MX-4C-A1/P1-C1-P |
|
MX10K3-L2103 Supported on MX10003 device |
MX10K3-L2103-BASE S-MX-12C-A1/P1-C1-3/5/7/1* |
MX10K3-L2103-BASE S-MX-12C-A1/P1-C1-P |
|
MPC5E Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 |
MPC5E/Q-40G10G/100G10G S-MX-2C4-A1/P1-3/5/7/1* |
MPC5E/Q-40G10G/100G10G S-MX-2C4-A1/P1-P |
|
MPC7E-10G Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 |
MPC7E-10G S-MX-4C-A1/P1-3/5/7/1* |
MPC7E-10G S-MX-4C-A1/P1-P |
|
MPC7E-MRATE Supported on MX240, MX480, MX960, MX2008, MX2010, and MX2020 |
MPC7E-MRATE S-MX-4C8-A1/P1-3/5/7/1* |
MPC7E-MRATE S-MX-4C8-A1/P1-P |
|
MPC10E-10C Supported on MX240, MX480, and MX960 devices |
MPC10E-10C-P-BASE S-MX-10C-A1/P1-3/5/7/1* |
MPC10E-10C-P-BASE S-MX-1C/10C-A1/P1-P |
|
MPC10E-15C Supported on MX240, MX480, and MX960 devices |
MPC10E-15C-P-BASE S-MX-15C-A1/P1-3/5/7/1* |
MPC10E-15C-P-BASE S-MX-15C-A1/P1-P |
|
MX2K-MPC6E Supported on MX2008, MX2010, and MX2020 devices |
MX2K-MPC6E S-MX-2C/2C4/4C-A1/P1-3/5/7/1* |
MX2K-MPC6E S-MX-2C/2C4/4C-A1/P1-P |
|
MX2K-MPC8E Supported on MX2008, MX2010, and MX2020 devices |
MX2K-MPC8E S-MX-4C8/8C-A1/P1-3/5/7/1* |
MX2K-MPC8E S-MX-4C8/8C-A1/P1-P |
|
MX2K-MPC9E Supported on MX2008, MX2010, and MX2020 devices |
MX2K-MPC9E S-MX-8C-A1/P1-3/5/7/1* |
MX2K-MPC9E S-MX-8C-A1/P1-P |
|
MX10K-LC2101 Supported on MX10004, MX10008, and MX10016 devices |
MX10K-LC2101-BASE S-MX-24C-A1/P1-3/5/7/1* |
MX10K-LC2101-BASE S-MX-24C-A1/P1-P |
|
MX10K-LC480 Supported on MX10004, MX10008, and MX10016 |
MX10K-LC480-BASE S-MX-4C8-A1-3/5/7/1* |
MX10K-LC480-BASE S-MX-4C8-A1-P |
|
MX10K-LC4800 Supported on MX10004 and MX10008 |
MX10K-LC4800-BASE S-MX-48C-A1/P1-3/5/7/1* S-MX-4C-A1/P1-D-3/5/7/1* |
MX10K-LC4800-BASE S-MX-48C-A1/P1-P S-MX-4C-A1/P1-D-P |
|
MX10K-LC9600 Supported on MX10004 and MX10008 |
MX10K-LC9600-BASE S-MX-96C-A1/P1-3/5/7/1* S-MX-4C-A1/P1-D-3/5/7/1* |
MX10K-LC9600-BASE S-MX-96C-A1/P1-P S-MX-4C-A1/P1-D-P |
|
MX2K-MPC11E Supported on MX2010 and MX2020 devices |
MX2K-MPC11E-BASE S-MX-40C-A1/P1-3/5/7/1* |
MX2K-MPC11E-BASE S-MX-40C-A1/P1-P |
|
MX-SPC3 |
MX-SPC3 S-MXSPC3-A1/A2/A3/P1/P2/P3-1/3/5 S-MXSPC3-1/2-IPSEC-1/3/5 |
MX-SPC3 S-MXSPC3-A1/A2/A3/P1/P2/P3-P S-MXSPC3-1/2-IPSEC-P |
*1 year subscription term is for renewal only.
MPC10E-10C and MPC10E-15C line cards are supported on MX240, MX480, and MX960 devices.
MX2K-MPC11E line cards are supported on MX2010 and MX2020 devices.
MX10K3-L2103 line card is supported on MX10003 device.
MX10K-LC2101, MX10K-LC480, MX10K-LC9600 line cards are supported on MX10004, MX10008, and MX10016 devices.
The show system macsec license command displays the total MACsec bandwidth used by the line cards.
The MACsec feature is supported on MX204, MX240, MX304, MX480, MX960, MX2008, MX2010, MX2020, MX10003, MX10004, MX10008, and MX10016 device. These licenses are perpetual.
The minimum number of MACsec bandwidth licenses installed must be greater than or equal to the configured bandwidth of MACsec enabled ports.
The MACsec feature licenses are available in the following variants:
-
S-MX-1C-MSEC-P - 100-Gigabit Ethernet MACsec bandwidth license
-
S-MX-4C-MSEC-P - 400-Gigabit Ethernet MACsec bandwidth license
-
S-MX-4C8-MSEC-P - 480-Gigabit Ethernet MACsec bandwidth license
-
There will be no alarms or syslog messages for the following line cards if the license is not installed. However, the MACsec bandwidth usage on these line cards will be tracked.
-
MX10K-LC2101
-
MPC5E-100G10G
-
MPC5EQ100G10G
-
MPC5E-40G10G
-
MPC5EQ-40G10G
-
MX2K-MPC6E
-
MPC7E-10G
-
MPC7E-MRATE
-
MX2K-MPC8E
-
MX2K-MPC9E
-
-
The following line cards require MACsec bandwidth license. Junos OS displays a warning when you commit the configuration and generates alarms, if the MACsec bandwidth license is not installed or the MACsec bandwidth usage is more than the installed value.
-
MPC10E-10C
-
MPC10E-15C
-
MX2K-MPC11E
-
MX10KM-LC9600-BASE
-
MX10KM-LC480-BASE
-