On all Junos EX46xx/QFX5k (except QFX5100) platforms, child links which are in LACP (Link Aggregation Control Protocol) detached state are up and instead of dropping the traffic, these links are accepting the incoming traffic. It causes traffic to be incorrectly forwarded.

user@device> show lacp interfaces



LACP protocol: Receive State Transmit State Mux State

xe-0/0/1 Current Fast periodic Collecting distributing

xe-0/0/3 Defaulted Fast periodic Detached <------- xe-0/0/3 in detached state

xe-0/0/4 Current Fast periodic Collecting distributing

xe-0/0/5 Defaulted Fast periodic Detached <------- xe-0/0/5 in detached state

xe-0/0/6 Current Fast periodic Collecting distributing

xe-0/0/45 Defaulted Fast periodic Detached <------- xe-0/0/45 in detached state

xe-0/0/46 Current Fast periodic Collecting distributing

xe-0/0/48 Current Fast periodic Collecting distributing

Interface Link Input packets (pps) Output packets (pps)

gr-0/0/0 Up 0 (0) 0 (0)

ip-0/0/0 Up 0 (0) 0 (0)

pfh-0/0/0 Up 0 0

xe-0/0/0 Up 13119711 (1000) 37678151 (2856)

xe-0/0/1 Up 122336 (8) 237943 (16)

xe-0/0/2 Up 20 (0) 50831251 (3856)

xe-0/0/3 Up 12571526 (951) 13514 (1) <------ accepting incoming traffic on a detached lacp port

xe-0/0/4 Up 22569 (0) 12409581 (941)

xe-0/0/5 Up 12571562 (952) 13514 (1) <------ accepting incoming traffic on a detached lacp port

xe-0/0/6 Up 15187 (0) 15123 (1)

xe-0/0/45 Up 12572360 (952) 13515 (1) <------ accepting incoming traffic on a detached lacp port

xe-0/0/46 Up 28461 (1) 18977 (2)

xe-0/0/48 Up 18777 (0) 22363 (2)

ae5 Up 37922778 (2864) 12744530 (965)

bme0 Up 0 397840

Upgrade to below versions:

junos:20.4R3-S9 junos:21.2R3-S6 junos:21.3R3-S5 junos:21.4R3-S5 junos:22.1R3-S4 junos:22.2R3-S2 junos:22.3R2-S2 junos:22.3R3-S1 junos:22.4R3 junos:23.1R2 junos:23.2R2 junos:23.3R1