Module Name

EX4300 Ethernet Switches

Standard

FIPS 140-2

Status

Active

Sunset Date

12/20/2021

Validation Dates

12/21/2016

Overall Level

1

Caveat

When operated in FIPS mode and with the tamper evident seals installed as indicated in the Security Policy.

Security Level Exceptions

• Roles, Services, and Authentication: Level 3
• Design Assurance: Level 3
• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

Juniper Networks EX4300 Ethernet Switches combine the carrier-class reliability of modular systems with the economics of stackable platforms, delivering a high-performance, scalable solution for data center and campus office environments. Offering a full suite of Layer 2 and Layer 3 switching capabilities, EX4300 switches offer 24 or 48-port 10/100/1000BASE-T configurations with redundant, hot-swappable internal power supplies and field-replaceable fans to ensure maximum uptime. In addition, Power over Ethernet (PoE)-enabled EX4300 switch models offer standards-based 802.3at PoE+.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Cert. #3655
CVL	Cert. #668
DRBG	Cert. #984
ECDSA	Cert. #763
HMAC	Certs. #2404 and #2405
SHS	Certs. #3072 and #3073
Triple-DES	Cert. #2045

Other Algorithms

EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; arcfour; blowfish; cast128; Diffie-Hellman (non-compliant); DSA; HMAC-MD5; HMAC-SHA-1-96 (non-compliant); MD5; ripemd160; RSA (non-compliant); umac-64; umac-128

Hardware Versions

P/N EX4300-24P, EX4300-24T, EX4300-48P, EX4300-48T, EX4300-32F with 520-052564 (Tamper Seal)

Firmware Versions

JUNOS 14.1X53-D30.3