Description

In rare cases, after a forwarding redundancy group (RG1+) failover, the vSRX may incorrectly source outbound traffic with the underlying interface MAC address rather than the reth virtual MAC address. This behavior can lead to temporary traffic impact until MAC address tables on connected devices are updated.

Solution

As a temporary workaround, perform a "commit full" on the affected vSRX device. This will restore the correct MAC address behavior; however, the issue may reoccur after the next Data Plane Redundancy Group (RG1+) failover.

Alternatively, clear the ARP/MAC entries on the connected switch and affected end hosts, allowing them to relearn the reth virtual MAC address through a new ARP resolution process.

This issue is resolved in the following Junos OS releases and later:

  • 20.4R3-S10
  • 21.2R3-S8
  • 21.4R3-S6
  • 22.1R3-S5
  • 22.3R3-S2
  • 22.4R3
  • 23.1R2
  • 23.2R1
  • 23.3R1

Modification History

2024-06-18 : Article Created