Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX EX MX NFX PTX QFX SRX vSRX

Alert Description

Junos Software Service Release version 25.4R1-S1 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For your review

Solution

Solution

Junos Software service Release version 25.4R1-S1 is now available.

25.4R1-S1 - List of Fixed issues

PR NumberSynopsisCategory: EX2300/3400 PFE
1922040
Major		On EX2300 and EX3400 devices, Network Processing Unit telemetry counters can be incorrect after device or PFE bring up
Product-Group=junos
Severity=Major		On Junos EX2300 and EX3400 switches, after the device or the Packet Forwarding Engine (PFE) starts, some hardware telemetry or statistics related to Network Processing Unit can appear incorrect or fail to report as expected; network traffic is not affected.
PR NumberSynopsisCategory: SRX1600 MACsec
1911374
Major		The Lag-link & Aggregate-member-info tags are missing in 'show interfaces fab1 detail | display xml'
Product-Group=junos
Severity=Major		The 'Link:' and 'Aggregate member links:' sections are missing for cli: 'show interfaces fab0.0 detail'and 'show interfaces fab1.0 detail' commands. The affected platforms are Fleming (SRX1600/SRX2300/SRX4120/SRX4300) and Casino Royale (SRX4700).
PR NumberSynopsisCategory: SRX Fleming Platforms related issues
1927758
Critical		HA failover not triggered after PFE process crash in chassis cluster (MNHA) mode on SRX1600/2300/4300/4700
Product-Group=junosvae
Severity=Critical		On SRX1600/2300/4300/4700 platforms configured in chassis cluster (MNHA) mode, when a PFE (Packet Forwarding Engine) process crash occurs on the active node, HA failover is not triggered because the failure condition is not detected by the HA subsystem.
PR NumberSynopsisCategory: "agentd" software daemon
1902691
Major		The JSD server fails to start the local SSL certificate for the SSL-based telemetry services in the FIP mode
Product-Group=junos
Severity=Major		On all Junos and Junos OS Evolved platforms, when FIPS is enabled, the JSD server fails to start if a local SSL certificate is configured on telemetry; as a result, telemetry services using SSL certificates are unavailable.
PR NumberSynopsisCategory: BBE UP Session Manager related issues
1916030
Major		L2TP subscriber session failure in BNG CUPS scenario
Product-Group=junos
Severity=Major		On Junos MX platforms and Junos OS Evolved ACX platforms that support BNG CUPS ( Broadband Network Gateway Control and User Plane Separation), L2TP (Layer 2 Tunneling Protocol) subscriber sessions will fail to come up. When this happens, the subscriber session does not bind correctly and no data traffic will pass for the affected subscribers.
PR NumberSynopsisCategory: Border Gateway Protocol
1915893
Major		RPD crashed while stale route LLGR timer expired
Product-Group=junos
Severity=Major		When using BGP-LU with LLGR (Long-Lived Graceful Restart), advertising lo0 addresses as direct peers, while BGP-VPN runs on top of BGP-LU. When the customer shuts down the BGP peer, and the LLGR timer expires, if the RPD tries to bring the connection back up, the RPD process may restart. The issue is due to failing to clean up an unconfigured peer data structure after the LLGR stale timer expires, leaving the peer in the Connect state.
PR NumberSynopsisCategory: MX304 Chassis specific platform
1922064
Major		PIC/LMIC will be stuck in offline state with MACsec
Product-Group=junos
Severity=Major		On MX304 platforms/LC4800/LC4802 linecards, when LMIC(Line Modular Interface Card)/PIC (Peripheral Interface Card ) is restarted on MACsec (Media Access Control Security) enabled interfaces, LMIC/PIC will be stuck in offline state which results into traffic loss.
PR NumberSynopsisCategory: Express BX PFE L3 Features
1917717
Major		IPv4 Family Statistics for subinterfaces streaming as zero
Product-Group=junos
Severity=Major		When the CLI setting "set forwarding-options family inet route-accounting" is enabled to activate IPv4 route accounting statistics, the streaming for /interfaces/interface/subinterfaces/subinterface incorrectly reports all IPv4 counters as zero. This occurs even though IPv4 traffic is successfully forwarded and accounted for in the Packet Forwarding Engine (PFE) .
PR NumberSynopsisCategory: QFX Access Control related
1925496
Major		Core is seen in Group based policy configuration with switch-port trunk configuration
Product-Group=junos
Severity=Major		l2ald Core @l2ald_gbptag_change_mac_in_db, @gbptagdb_update_internal_taginfo is seen in Suite teardown
PR NumberSynopsisCategory: VPWS, L2 CKT, EVPN-VPWS
1911023
Major		Redundant PFE label swap during MHL2circuit failover leading to traffic loss
Product-Group=junos
Severity=Major		On all ACX5448 platform, during a CCC(circuit cross-connect)-to-MPLS primary and protect path next-hop swap event, the in-labels are also being swapped. However, these labels were already swapped during earlier MPLS-to-CCC events. This additional, unintended swap by the PFE leads to traffic disruption.
PR NumberSynopsisCategory: Dynamic rendering infrastructure
1915225
Major		cli-pfe does not terminate immediately when user issues Ctrl-C
Product-Group=junos
Severity=Major		A cli-pfe show command may continue to gather data in the background after the user issues a Ctrl-C. Eventually the background command will complete. However, the CPU usage for the cli-pfe process will continue to be high while it is still running.
PR NumberSynopsisCategory: EVPN control plane issues
1916656
Major		Incorrect CCC state displayed when IFL or interface status is absent
Product-Group=junos
Severity=Major		On all Junos OS and Junos OS Evolved platforms, When the logical interface (IFL) is not present, the system incorrectly reports the Circuit Cross-Connect (CCC) state as CCC Up. Similarly, when the interface status itself is not available, the pseudowire state is shown as CCC_Up or CCC_Down. The pseudowire state should instead be reported as Not Applicable, since the underlying interface or IFL required to determine a valid CCC state does not exist. Displaying CCC Up/Down incorrectly in the absence of interface.
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1926818
Major		ARP resolution failure for /32 static host routes via IRB in EVPN virtual-switch routing instances
Product-Group=junos
Severity=Major		On all Junos and Junos Evolved platforms that support EVPN (Ethernet VPN) virtual-switch routing instances, ARP (Address Resolution Protocol) resolution fails for static host routes configured with a /32 mask when the next-hop interface is an IRB (Integrated Routing and Bridging) interface and the destination host resides in a different subnet. As a result, ARP entries are not installed, MAC (Media Access Control) addresses of destination hosts are not learned, and traffic destined to those hosts becomes unreachable, causing service impact.
PR NumberSynopsisCategory: EX interfaces issues
1915222
Minor		Interfaces down after Virtual Chassis reboot
Product-Group=junos
Severity=Minor		On all Junos EX Series platforms, following a Virtual Chassis (VC) reboot, random interface links GE(Gigabit) and XE(10 Gigabit) intermittently appear in a down state at the Interface Descriptor (IFD) level, even though the physical link remains operational.
PR NumberSynopsisCategory: EX5200/7200 PFE
1917742
Critical		NDPv6 policer violations are not being triggered while ARP violations are unexpectedly logged
Product-Group=junos
Severity=Critical		On all EX platforms, even though the NDPv6 (Neighbor Discovery Protocol for IPv6) policer threshold is exceeded, no NDPv6 violations are recorded. Instead, the system reports ARP (Address Resolution Protocol) violations, which is unexpected since the traffic being sent consists solely of IPv6 RA (Router Advertisement) packets.
PR NumberSynopsisCategory: jdhcpd daemon
1911001
Major		On Junos devices supporting subscriber services acting as DHCPv6 relay randomly deletes IA_NA or IA_PD binding/route
Product-Group=junos
Severity=Major		On all Junos devices supporting subscriber services, in case of dual stack DHCP (Dynamic Host Configuration Protocol) subscribers with IA_NA (Identity Association for Non-temporary Address) and IA_PD (Identity Association for Prefix Delegation) bindings with lease times (For the assignment of IPv6 address to a client device), when a client initiates separate renew exchanges for the IA_NA and IA_PD, and once client and DHCP server are in sync with these timers, there can be a race condition at Junos device which is DHCPv6 relay, has not refreshed lease timer and can go out of sync. This can result in deleting IA_NA/IA_PD binding and route to get deleted for that subscriber only. This causes one of the leg for IA_PD or IA_NA to go down for that subscriber, which can result in traffic impact for that leg.
PR NumberSynopsisCategory: Port-based link layer security services and protocols that a
1922797
Major		When Macsec is enabled on 1G interface, Auto-neg needs to be disabled for MX301.
Product-Group=junos
Severity=Major		When Macsec is enabled on 1G interface, Auto-neg needs to be disabled for MX301. Config to disable auto-negotiation: set interfaces <1g-intf-name> gigether-options no-auto-negotiation
PR NumberSynopsisCategory: PRs for Model-X Interfaces, Optics
1921080
Major		Unable to create large number of ifls on 1G interface
Product-Group=junos
Severity=Major		On Junos MX301 and MX304 platforms there is a scaling issue to configure more than 1024 ifls (logical interfaces) on 1-Gigabit ethernet interfaces. Further interfaces will not work. There is no impact on the existing interfaces and system works fine with 1024 logical interfaces.
PR NumberSynopsisCategory: PRs for Model-X RCB
1924853
Major		Truncated log messages are seen for sensor logs on MX301 and SRX4700 platforms
Product-Group=junos
Severity=Major		On Junos MX301 and SRX4700 platforms, there is the change in log message for the CB 0_TEMP_0 sensor. This is a display issue with no functional impact.
PR NumberSynopsisCategory: NGPE Chassis platform
1932385
Major		The license add using 'terminal' option fails in a controller setup
Product-Group=junos
Severity=Major		On Junos MX304 and MX10K platforms, the 'terminal' option is not supported in controller satellite setup along with device-list option since terminal is local to controller and cannot be used to install license in satellite. The user can use the 'file' option and the file needs to be copied to the device and later user can use the same command with the file option to add the license.
PR NumberSynopsisCategory: NGPE Class of Service
1930484
Major		NGPE COS: Adjustment for 54B VXLAN header for traffic going from NGPE AD to SD
Product-Group=junos
Severity=Major		54B VXLAN header will not be accounted during COS shaping on NGPE EP port for packets going from AD to SD.
PR NumberSynopsisCategory: Category for all Infrastructure & PFE related issues support for NGPE
1922669
Minor		The connectivity to Satellite devices will be lost if MTU on NGPE EP is set to greater than 1522
Product-Group=junos
Severity=Minor		In fusion setup on MX platforms, in a NGPE(next-gen port-extender) topology, If the MTU on an NGPE EP is set to more than 1522, and there are host bound packets of size are than 1522, this will cause the PFE crash. This will cause the system to go down as the connectivity to SD will be lost.
PR NumberSynopsisCategory: JUNOS Network App Infrastructure (for ping, traceroute, etc)
1924159
Major		Fetch command output format changed and completion percentage not displayed
Product-Group=junos
Severity=Major		On Junos and Junos OS Evolved platforms, the output format of the fetch command changed after upgrading to a newer upstream version of the utility. The earlier format displayed an explicit completion indicator (for example, 100%). The upgraded version removed this indicator.
PR NumberSynopsisCategory: vpls on branch (jseries and srx) platforms
1887306
Major		ISIS adjacency not coming up on SRX 3XX series platforms in VPLS topology
Product-Group=junos
Severity=Major		On SRX 3XX platforms, due to incorrect mbuf (Memory Buffer) allocation, the ISIS (Intermediate System-to-Intermediate System) packets with MPLS (Multiprotocol Label Switching) tag transiting over a L2VPN (Layer 2 Virtual Private Network) are dropped if the packet size exceeds 1500 bytes resulting in the ISIS adjacency remaining stuck in the initializing state, leading to routing issues. This issue is intermittent and observed only when the SRX 3XX device is serving as the PE in MPLS L2VPN network.
PR NumberSynopsisCategory: QFX5K hostpath
1921455
Major		The dcpfe process crashes when adding or removing classifier configuration on QFX5210
Product-Group=junos
Severity=Major		On QFX5210 platform with Class of Service (CoS), the dcpfe process crashes when classifier is configured or removed on interface with active traffic. This can affect traffic forwarding till dcpfe process restarts post crash.
PR NumberSynopsisCategory: ZT/YT pfe l3 forwarding issues
1909930
Major		24.4R2-S1:JUNOS:MACSEC: When connectivity-association properties mka eapol-address is set to unicast address, then MKA session stays in in-progress
Product-Group=junos
Severity=Major		When AE interface (member links) are configured with MACsec, the MKA session establishes successfully when the default standard MAC address is used. However, when a custom unicast MAC address is configured, the MKA session does not come up. This is not a common use case, but the workaround is to allow the MKA session to operate with the default MAC address instead of a custom unicast MAC address.
PR NumberSynopsisCategory: Trio pfe bridging, learning, stp, oam, irb software
1873239
Minor		VTEP fragmenting VXLAN packets which gets routed into IRB or any L3 interface as underlay over VXLAN tunnels
Product-Group=junos
Severity=Minor		On all Junos MX platforms, in VXLAN (Virtual Extensible Local Area Network) tunnel setup, where packets getting routed into an underlay IRB (Integrated Routing and Bridging) or any L3 interface over VXLAN tunnels, if VTEP (Virtual Tunnel Endpoint) receiving an IPv4 packet with its total packet size bigger than the outgoing IRB/L3 interface IFL (Interface Logical) MTU (Maximum Transmission Unit) then VTEP fragments outer IPv4 packet and each fragment is sent to the remote VTEP which eventually drops them causing packet drop.
PR NumberSynopsisCategory: Trio pfe l3 forwarding issues
1921361
Major		Slow memory leak triggered by subscribing to the pipeline sensor for a long duration
Product-Group=junos
Severity=Major		On Junos platforms with MPC 1-9, LC2101, LC480, LC2103 line-cards and MX204, a slow memory is observed when subscribing to the pipeline sensor ( path is /components/component/integrated-circuit/pipeline-counters/). Over time, this causes a gradual increase in heap memory usage. Increase in heap memory usage beyond a certain threshold will lead to FPC crash resulting in loss of services and traffic over that FPC.

 

 

25.4R1-S1 - List of Known issues

PR NumberSynopsisCategory: "agentd" software daemon
1651519
Critical		Junos OS and Junos OS Evolved: Multiple vulnerabilities have been resolved in MQTT
Product-Group=junos		Multiple vulnerabilities have been resolved in MQTT (Message Queuing Telemetry Transport) included with Junos by fixing vulnerabilities found during external security research. Please refer to https://supportportal.juniper.net/JSA71655 [juniper.net] for more information.

Resolved In: evo:20.4R3-S7-EVO evo:21.4R3-S4-EVO evo:22.1R3-EVO evo:22.2R3-EVO evo:22.3R2-EVO evo:22.3X80-D43-EVO evo:22.3X80-D45-EVO evo:22.4R1-EVO junos:19.1R3-S10 junos:19.2R3-S7 junos:19.3R3-S8 junos:19.4R3-S11 junos:20.2R3-S7 junos:20.2X42 junos:20.3R3-S6 junos:20.3X75-D36 junos:20.3X75-D43 junos:20.3X75-D52 junos:20.4R3-S7 junos:21.1R3-S4 junos:21.2R3-S5 junos:21.3R3-S4 junos:21.4R3-S4 junos:22.1R3 junos:22.2R3 junos:22.3R2 junos:22.4R1 junos:23.3R2 junos:23.4R1
PR NumberSynopsisCategory: Border Gateway Protocol
1909265
Major		JDI-RCT:M/Mx: : NGMVPN multicast traffic gets dropped post Change route-distinguisher/route-target on L3VPN instances.
Product-Group=junos		Not consistent issue and happens when RD and RT change is done in all routing instances while the traffic is running. Also sometimes issue seen only in certain instances. When issue happens there will be traffic drop for inclusive tunnel and affecting all flows on inclusive tunnel and it may not recover unless some external events like route change occurs.

Resolved In: evo:25.2R2-EVO evo:25.2R2-S1-EVO evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:25.2R2 junos:25.4R2 junos:26.1R1
1922759
Major		On MX301 rpd may core when logical-systems configuration is used to create EVPN-VPWS
Product-Group=junos		On MX301 rpd may core when logical-systems configuration is used to create EVPN-VPWS

Resolved In:
PR NumberSynopsisCategory: MX304 Routing Engine issues
1857029
Major		zeroize command not working
Product-Group=junos		zeroize command not working

Resolved In:
PR NumberSynopsisCategory: QFX Control Plane VXLAN
1921796
Major		VRRP traffic dropped after priority change due to pinned MAC entry on peer device
Product-Group=junos		On all Junos and Junos Evolved platforms, when Virtual Router Redundancy Protocol (VRRP) priority is changed, the VRRP virtual Media Access Control (MAC) address can remain pinned as a static entry on the remote device. As a result, MAC movement does not occur correctly, and VRRP packets are dropped on the leaf device. This impacts VRRP operation after priority changes.

Resolved In: evo:23.2R2-S7-EVO evo:23.4R2-S8-EVO evo:24.2R2-S5-EVO evo:24.4R2-S4-EVO evo:25.4R2-EVO junos:23.2R2-S7 junos:23.4R2-S7-J4 junos:23.4R2-S8 junos:24.2R2-S5 junos:24.4R2-S4 junos:25.2R2-S1 junos:25.4R2
PR NumberSynopsisCategory: 1G/10G LC Timing software
1908234
Major		MX10008 PTP IRB: Spike seen during noise generation test with 255 master scaled stream with 2 IRB interface
Product-Group=junos		During noise generation tests on MX10008 and MX10004 platforms with LC480 line cards, a spike could occasionally be observed in T1/T4 TE measurements when PTP master streams are scaled to 255 with G.8275.2 over IRB is configured. This spike occurs approximately every 10, 000 seconds and is typically seen when the number of master PTP streams exceeds 128. Additionally, there is a configurable limit on the pps rate for Sync and Delay packets (upto 64pps), and exceeding the recommended threshold may contribute to this behavior.

Resolved In: evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:25.4R1-S2 junos:25.4R2 junos:26.1R1
PR NumberSynopsisCategory: EVPN control plane issues
1879311
Major		Transient Traffic Duplication During EVPN Multihomed Spine Reboot in Collapsed EVPN-VXLAN Deployments
Product-Group=junos		On all Junos and Junos OS Evolved platforms with EVPN-VxLAN Multihoming scenario, in EVPN multihomed (ESI) deployments without core isolation, a temporary traffic duplication could occur during a spine reboot or any event that forces forwarding re-convergence.

Resolved In: evo:23.4X100-D40-EVO
PR NumberSynopsisCategory: EX4100 PFE
1926180
Major		Consolidated the L2 and L3 FTFP groups by merging their qualifiers into a single FTFP group.
Product-Group=junos		.

Resolved In: junos:26.1R1
PR NumberSynopsisCategory: EX interfaces issues
1870962
Major		In EX4400 devices with 4x25G or 1x100g ULM, when we perform PIC online, CPU hog by CMQFX thread may be seen
Product-Group=junos		In EX4400 devices with 4x25G or 1x100g ULM, when we perform PIC online, CPU hog by CMQFX thread may be seen for as much as 3.5seconds

Resolved In:
PR NumberSynopsisCategory: EX optics issues
1899248
Major		EX4400-48F: When we have SFP-SX optics plugged in EX4400-48F device in the ports 0 to 35 and it is rebooted, the activity LED remains on
Product-Group=junos		EX4400-48F: When we have SFP-SX optics plugged in EX4400-48F device in the ports 0 to 35 and it is rebooted, the activity LED remains on.

Resolved In:
1913274
Major		25.4 INDRI RLI : EX4300-48mp : 4x10 ULM, Pic0 , Pic1 are going for Hogging while doing 10G -SFP-T optics JIJO
Product-Group=junos		Jack Out and Jack In need 10 second interval. This hits only when I2C error is seen.

Resolved In:
PR NumberSynopsisCategory: Enhanced Broadband Edge support for firewall
1925736
Major		[RLI-59204:Model-X:MX301:HTTP/1.1 307 redirect responses are missing from the IPv6 packet captures]
Product-Group=junos		HTTPv6 redirect functionality doesn't work on the MX301 platform.

Resolved In:
PR NumberSynopsisCategory: Port-based link layer security services and protocols that a
1932925
Critical		MACsec traffic encryption failure after SFP OIR with interface and session up
Product-Group=junos		On MX301 and platforms with PTX10K-LC1301-36QD, After SFP (Small Form-factor Pluggable transceiver) Online Insertion and Removal (OIR) on a MACsec (Media Access Control Security) enabled interface, the link and MACsec session remain UP, but MACsec encryption and decryption stop functioning. This results in traffic loss and causes service impact.

Resolved In: evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:25.4R2 junos:26.1R1
PR NumberSynopsisCategory: MX10K RCB
1907227
Major		CLI based Virtium SSD firmware upgrade is missing
Product-Group=junos		Support for Virtium SSD firmware upgrade for Mclaren RCB not available in 25.2R1-S1. Fixed in later releases.

Resolved In: evo:25.4R1-EVO evo:26.1R1-EVO junos:25.4R1 junos:26.1R1
1909435
Major		Suppress humidity sensor CLI command and corresponding code in McLaren MX
Product-Group=junosvae		Humidity Sensor CLI command is not applicable in McLaren RCB. The command has been suppressed in later releases

Resolved In: junos:25.2R1-S2 junos:25.2R2 junos:25.4R1 junos:26.1R1
1916094
Major		POL current/power values in CLI may not match actual readings
Product-Group=junosvae		On McLaren RCB, display-only issue in Junos CLI show chassis environment : current/power for some of the POLs are shown as 0, observed in 25.2R1-S1. Fixed in later releases.

Resolved In: junos:25.2R2 junos:25.4R1 junos:26.1R1
PR NumberSynopsisCategory: PRs for Model-X Interfaces, Optics
1921562
Major		[MX301]: Carrier transition count show 2 for ae interface instead of 1 on initial link up
Product-Group=junos		[MX301]: Carrier transition count show 2 for ae interface instead of 1

Resolved In:
PR NumberSynopsisCategory: MPC11 ULC platform software related issues.
1809351
Major		JDI-RCT:M/Mx: ISIS session over MPC11 cards flapped due to "3-Way handshake failed" during ISSU (FRU upgrade stage - reboot phase)
Product-Group=junos		JDI-RCT:M/Mx: ISIS session over MPC11 cards flapped due to "3-Way handshake failed" during ISSU (FRU upgrade stage - reboot phase)

Resolved In:
PR NumberSynopsisCategory: Multiprotocol Label Switching
1901973
Major		On MX301, rpd core may be seen after deactivate/activate protocol isis trigger
Product-Group=junos		On MX301, rpd core may be seen after deactivate/activate protocol isis trigger

Resolved In:
1923867
Minor		The rpd process crash is observed after a graceful restart in the RSVP-TE scenario
Product-Group=junos		On Junos OS and Junos OS Evolved platforms with Graceful Restart and RSVP-TE (Resource Reservation Protocol - Traffic Engineering) configured, an rpd crash is observed, leading to traffic impact after a Graceful Restart if a PVC (Permanent Virtual Circuit) fails to allocate correctly during this recovery process, leaving it in an incomplete or unallocated state, and the system attempts to clean up or remove this unallocated PVC.

Resolved In: evo:25.2R2-EVO evo:25.4R2-EVO evo:26.1R1-EVO evo:26.2R1-EVO junos:23.2R2-S7 junos:23.4R2-S8 junos:24.2R2-S4 junos:24.4R2-S1-J8 junos:24.4R2-S3 junos:25.2R2 junos:25.4R2 junos:26.1R1
1925599
Major		JDI-RCT:M/Mx: during ISSU , may observe some traffic drops for L3VPN streams during FRU upgrade stage (HW resync phase).
Product-Group=junos		On MX platforms, during ISSU, some traffic drop may occur in HW sync phase for few L3VPN flows. The traffic recovers post HW sync phase. This issue is not specific to 25.4R1.

Resolved In:
PR NumberSynopsisCategory: Multicast for L3VPNs
1908581
Major		Significant multicast traffic loss observed during ISSU in NextGeneration MVPN (NGMVPN) deployments
Product-Group=junos		On MX480 platforms running Junos OS, multicast traffic loss can occur during InService Software Upgrade (ISSU) in NGMVPN deployments using both IPMSI and SPMSI with a nonzero threshold, as FPCs upgrade and synchronize and multicast statistics may briefly report zero, triggering SPMSI withdrawal and fallback to IPMSI, which may not yet be fully programmed, leading to temporary loss of only SPMSI flows for a variable duration (~180230 seconds) while IPMSI flows continue normally; the issue can affect both IPv4 and IPv6 multicast.

Resolved In: evo:26.2R1-EVO
PR NumberSynopsisCategory: NGPE Chassis platform
1902701
Major		A vmcore may be observed on the backup when there are changes to configuration attributes related to EP IFDs are performed with GRES configured.
Product-Group=junos		A vmcore may be observed on the backup when any of the following configurations are performed on the EP IFDs with GRES configured 1. Port Speed change on the EP IFDs When configuring(set)/unconfiguring(delete) port speed on the EP IFDs using the config stanza "chassis port-extender fpc-slot <> pic-slot <> port <> speed <>" 2. Changing the configuration attribute "cascade-port"/"target-mode"/"device" under the config hierarchy "chassis port-extender fpc-slot <>" "chassis port-extender fpc-slot <> cascade-port <>" "chassis port-extender fpc-slot <> target-mode <> " "chassis port-extender fpc-slot <> device <>" Impact: 1. Traffic will be impacted. 2. Backup RE is not available for graceful switchover until state resync/replay completes from the master. Though vmcore is observed, backup does not reboot as it is system generated live core for debugging.

Resolved In:
PR NumberSynopsisCategory: ACX Timing software
1900889
Critical		High CPU utilization of the acx-arm-feb process after upgrade or reboot when PTP or SyncE is configured
Product-Group=junos		On ACX710 platforms running Junos OS, the acx-arm-feb process can reach 100 percent CPU utilization after an upgrade or reboot when PTP or SyncE is configured and the associated interfaces are enabled. This condition may result in degraded operational responsiveness and partial traffic impact.

Resolved In: junos:23.2R2-S5 junos:24.4R2-S3 junos:25.2R2 junos:25.2R2-S2
PR NumberSynopsisCategory: Protocol Independant Multicast
1918590
Major		On MX301, IGMP may not get enabled by default when PIM is enabled
Product-Group=junos		On MX301, IGMP may not get enabled by default when PIM is enabled. Use "set protocols igmp interface" to explicitly enable IGMP

Resolved In:
PR NumberSynopsisCategory: Sangria Platform including chassisd, RE, CB, power managemen
1913580
Major		Chassisd crash will happen when shutting down the FPC of PTX5000 and PTX3000 using online/offline button
Product-Group=junos		When the FPC(Flexible PIC Concentrator)online/offline button is pressed on PTX5000 and PTX3000 twice in a short period, chassisd crash will happen. it is causing all FPCs to lose connectivity with the Routing Engine while remaining in an online state. As a result, service impact happened till all FPCs become online.

Resolved In: junos:22.3X60 junos:22.4R3-S9
PR NumberSynopsisCategory: ZT/YTpfe bridging, learning, stp, oam, irb software
1907722
Major		PFE error messages "ytchip-luss[13214]: %PFE-3: xss_event_handler(1154): YT[0].slice[1]_PPE 120.xss[0] ADDR Error." are observed on MX304 when certain kind of L3 unicast and L3 multicast traffic are transmitted together
Product-Group=junos		PFE error messages are observed on MX304 when certain kind of L3 unicast and L3 multicast traffic are transmitted

Resolved In:
PR NumberSynopsisCategory: Issues related to YANG Data Models
1781023
Minor		Few yang package are occuring multiple place On Box
Product-Group=junos		Few yang package are occuring multiple place On Box

Resolved In:
PR NumberSynopsisCategory: Junos Fusion Aggregation Device Infra
1913169
Major		The smdp process crash is observed on MX Aggregation Device during Junos upgrade in a Junos Fusion Deployment
Product-Group=junos		In all Junos MX platforms acting as the AD (Aggregation Device) in a Junos Fusion deployment, a Junos software upgrade causes the smdp (Satellite Platform and Management Daemon) process to crash impacting forwarding plane services. This issue is observed when AD nodes are moved to a higher Junos version while the SD (Satellite nodes) are still running a lower version.

Resolved In: junos:22.4R3-S7-J7 junos:22.4R3-S9 junos:23.2R2-S6
PR NumberSynopsisCategory: usf flow and datapath issue on SPC3
1614358
Major		21.3R1:USF-NAT: Duplicate syslog messages are displayed for V4 and v6 session close after Configure NAT Services with 2 Service sets (next-hop style) one for NAPT44 and another for NAPT64.
Product-Group=junos		In some NAPT44 and NAT64 scenarios, Duplicate SESSION_CLOSE Syslog will be seen.

Resolved In:
PR NumberSynopsisCategory: Unified Services Framework
1910673
Critical		26.1DCB:MX480:: SFW: Traffic loss observed after performing GRES operation with SFW & Service-set configuration.
Product-Group=junos		We have an Issue in NH when we push the config, so to work around this we need to activate/deactivate the service-set configured on the interface.

Resolved In: