Planning Your Juniper Deployment

This topic provides an overview of the provisioning process and describes deployment considerations for the Megaport Virtual Edge (MVE).

​

Deployment considerations

This section provides an overview of the MVE deployment options and features.

​

Juniper products

Juniper Session Smart Router (SSR) delivers advanced routing capabilities, using Secure Vector Routing (SVR) to remove the complexity of traditional tunnel-based overlays. With session-aware routing, enhanced security, and simplified operations through cloud-based management on the Juniper Mist platform, the SSR provides a smarter approach to SD-WAN. Juniper vSRX is a virtualized that provides the security capabilities of Juniper’s physical SRX Series platforms on Megaport’s global private network. For information about all supported on the MVE platform, see the Megaport Virtual Edge (MVE) product page.

​

MVE locations

For a list of global locations where you can connect to an MVE, see Megaport Virtual Edge Locations.

​

Sizing your MVE instance

The instance size determines the MVE capabilities, such as how many concurrent connections it can support. To size your MVE correctly, consult the vendor’s sizing documentation to ensure it aligns with the number and type of features you plan to enable. When choosing an MVE instance size, keep in mind these items:

• Any increase on the network data stream load can degrade performance. For example, establishing secure tunnels with IPsec, adding traffic path steering, or using deep packet inspection (DPI) can affect the maximum throughput speed.
• Future plans to scale the network.

To check which MVE instance sizes are available for your deployment, use the MVE Size section of the Create Virtual Edge page in the Megaport Portal. Instance size availability depends on both the selected vendor and the deployment location, and might vary accordingly. Only sizes supported by the selected vendor are listed, and sizes that are not available at the selected location are labeled Not available here. To check the MVE instance sizes in the Megaport Portal

1. In the , go to the Services page.
2. Click Add Service, then select Virtual Edge (MVE). The Create Virtual Edge page opens.
3. In the Select Vendor / Product section, select Juniper SSR or Juniper vSRX.
4. In the Location section, select an MVE location.
   Select a location geographically close to your target branch or on-premises locations. Use the Search field to find a location by metro or country name. Alternatively, browse the region tabs, then select a location. Size availability can differ between data centers at the same location. To check a specific data center, select Manual mode, then select the provider and data center.
5. View the available sizes in the MVE Size section.
   Each size shows its vCPU and RAM allocation. Only sizes supported by the selected product are listed, and sizes that are not available at the selected location are grayed out and labeled Not available here. The sizes support varying numbers of concurrent connections, and individual partner product metrics vary slightly.
   If the MVE size you want is not available, there is not enough capacity at the selected location. You can either select another location with enough capacity or contact your Account Manager to discuss requirements.

What if I need more MVE capacity in the future? To increase your MVE capacity, you have these options:

• You can provision another MVE instance, add it to your SD-WAN overlay network, and split the workload between the two MVEs.
• You can provision a larger MVE instance, add it to your SD-WAN overlay network, migrate connections from the old MVE to the new larger MVE, and then retire the old MVE.

You can adjust the Megaport Internet bandwidth at any time without having to tear down the virtual machine.

​

Security

MVE provides secure capacity to and from your internet-enabled branch locations, to any endpoint or service provider on the Megaport SDN. CSP-hosted instances of partner SD-WAN products route critical traffic across the Megaport SDN, reducing internet dependence. Traffic remains encrypted and under your policy control while traveling across the Megaport SDN, to or from, MVE.

​

Licensing

You bring your own Juniper license for use with MVE. Licensing requirements vary depending on the Juniper product you deploy. Juniper licensing is subscription-based and managed through Juniper’s licensing portal. You will need valid subscriptions based on your deployment size and feature requirements. For more information, discuss licensing with your Account Manager and see the Juniper Licensing User Guide or contact Juniper support.

​

VLAN tagging

Megaport uses to differentiate VXCs and MVEs on a host hardware system. The tenant MVE receives untagged traffic for the internet-facing link, and single-tagged 802.1Q traffic for VXCs toward other destinations on the Megaport network (such as CSP on-ramps or other MVEs). For more information, see Configuring Q-in-Q.

​

vNICs

Each MVE can have up to five vNICs. The number and default configuration of vNICs varies by Juniper product. Juniper SSR: Each MVE for Juniper SSR is configured with three vNICs by default. Megaport recommends a minimum configuration of three vNICs:

• 0: Management
• 1: WAN
• 2: LAN

Juniper vSRX: Each MVE for Juniper vSRX deploys with two vNICs by default. You can add up to three more, for a total of five. The default vNICs are:

• 0: Management
• 1: Data Plane

Before specifying the number of vNICs on your MVE:

• Be aware that the number of vNICs cannot be changed after an MVE has been ordered. Decide in advance how many vNICs to specify when you create the MVE.
• Consult your service provider to make sure that functionality won’t be affected if you add a vNIC.

For more information, see Types of vNIC Connections.