Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Alert Description

Junos Software Service Release version 19.4R2-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to  Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select  Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 19.4R2-S1 is now available.

19.4R2-S1 - List of Fixed issues

PR Number Synopsis Category: QFX Access control list
1497133 Firewall filter could not work in certain conditions under VC setup
Product-Group=junos 		On EX4650/QFX5120 with Virtual Chassis setup, the firewall filter (egress direction) could not work when traffic goes across VCP (Virtual Chassis Port) link.
PR Number Synopsis Category: BBE OS Infrastructure library
1481278 [subscriber_services/bbe-os/] [all] Issue with binding Non-default routing-instance to existing soft-gre group
Product-Group=junos 		The issue is seen when you add the tunnel-routing-instance to existing soft-gre group the code does not recognise that the route has changed (due to routing-instance change) and that the old route needs to be deleted and new route added with new routing-instance.
PR Number Synopsis Category: PTX10003 Platform related issues
1498572 "login-tip" and "login-alarms" does not work as expected on certain PTX platforms running Junos Evolved
Product-Group=junos 		"login-tip" and "login-alarms" does not work as expected on certain PTX platforms running Junos Evolved
PR Number Synopsis Category: PFE SW evo-pfemand,packet-io on BRCM platforms running EVO
1497909 QFX5220-32CD and QFX5220-128C: evo-pfemand core file is seen if loopback filter is applied with input-list and after switch is rebooted.
Product-Group=junos 		On the QFX5220/QFX5130 platforms, if configuring the input-list or output-list filter on an interface, after rebooting the switch, it may cause the evo-pfemand crash and all interfaces are not created. Finally, the switch is unusable.
PR Number Synopsis Category: EVPN Layer-2 Forwarding
1498023 The l2ald memory leak may be observed in any EVPN scenario
Product-Group=junos 		In any EVPN scenario (for example, active-active multi-homing mode, active-standby multi-homing mode, EVPN-VXLAN, or EVPN-MPLS), the l2ald memory might slowly come up when the local CE device or core face interfaces continuously flap. If the memory of l2ald is exhausted, it causes the l2ald to crash.
PR Number Synopsis Category: IDP attack detection in the subscriber qmodules
1497340 The IDP attack detection might not work in a specific situation
Product-Group=junos 		In IDP scenario, if the total number of applications including predefined applications and the custom configured applications exceeds 4096, the IDP attack detection might fail.
PR Number Synopsis Category: flow ha module
1501018 SRX4100/4200 is not able to detect SPU failure through chassis info blob
Product-Group=junos 		On the SRX4100/SRX4200 platform, internal failures(flowd crash/reboot FPCs/restart chassis-control etc) cannot be detected by the jsrpd
PR Number Synopsis Category: JSR Infrastructure
1505864 The installation fails when upgrading from legacy Junos to specific BSDx based Junos
Product-Group=junos 		The installation fails when upgrading from legacy(non-BSDx) Junos to specific BSDx based Junos releases.
PR Number Synopsis Category: Firewall Network Address Translation
1473788 Not all NAT sessions are synced from Node1 to Node2
Product-Group=junos 		Not all of the NAT sessions are getting synced from Node1 to Node2 on the SRX4100/SRX4200 platform when L3-HA mode is configured.
PR Number Synopsis Category: Layer 2 VPN related issues
1502003 The rpd crash could be seen in certain conditions after deleting l2circuit configuration
Product-Group=junos 		On all Junos platforms with l2circuit local-switching configuration, if "connection-protection", "backup-neighbor" and "l2circuit traceoptions" are configured, the rpd crash could be seen when removing the complete l2circuit configuration.
PR Number Synopsis Category: MX104 Software - Chassis Daemon
1453893 FPC/PFE crash may happen with ATM MIC installed in the FPC
Product-Group=junos 		FPC crash on MX240 and MX2020 routers or Packet Forwarding Engine crash on MX104 routers might happen when the MIC-3D-8OC3-2OC12-ATM is installed and ATM interface is configured.
PR Number Synopsis Category: QFX L2 PFE
1497993 Traffic might get dropped if AE member interface is deleted/added or a SFP of the AE member interface is unplugged/plugged
Product-Group=junos 		On QFX5K/EX46xx platforms, if STP is configured on vlan but the AE interface which is part of that vlan is not configured with STP, after an AE member interface is deleted or a SFP of the AE member interface is unplugged, and when the deleted AE member interface is added back or the unplugged SFP is plugged again, traffic via that AE interface might get dropped. LACP and LLDP traffic are not affected by this issue.
PR Number Synopsis Category: SFW, CGNAT on MS-MIC/MS-MPC (XLP)
1496211 The B4 might not able to establish the softwire with AFTR
Product-Group=junos 		In dual-stack lite (DS-Lite) scenario, if the DS-Lite softwire-initiator (such as B4) and the Address Family Transition Router (AFTR, it acted as softwire-concentrator) is deployed with service-set included multiple softwire-rules, the wrong rule-id might be chosen for the traffic including either normal data packet or Port Control Protocol (PCP) mapping requested from the basic bridging broadband (B4) subscribers. It might cause the failures on the allocation of subscribers and choice of softwire sessions, then the subscribers behind the B4 are unable to establish a softwire (an IPv4-over-IPv6 tunnel) to AFTR.
PR Number Synopsis Category: SSL Proxy functionality on JUNOS
1505013 19.4R2 SecPDT: During longevity test found lcore-slave on vSRX HA device slt104-orange
Product-Group=junos 		When SSL proxy is enabled on a vSRX device, and if the device runs out of memory a crash might be observed in the SSL proxy module.
PR Number Synopsis Category: Trio pfe bridging, learning, stp, oam, irb software
1502867 Traffic originated from another subnet is sent out with 0x8100 instead of 0x88a8
Product-Group=junos 		On the MX platforms with MPC7/8/9 installed, when an interface configured with vlan-tags outer tpid (tag protocol ID) 0x88a8 on these line cards, traffic originated from another subnet will be sent out with 0x8100. It will cause traffic to get dropped at the remote site.
1503947 MPCs may crash when there is a change on routes learnt on IRB interface configured in VPLS/EVPN instances
Product-Group=junos 		On MX platforms, when an IRB interface is configured in VPLS/EVPN instances, MPCs might crash if the routes learnt on the IRB interface change.
PR Number Synopsis Category: Configuration mgmt, ffp, load-action, commit processing
1499265 The commit check might fail when adding IFL into a routing-instance which having no-normalization knob enabled under routing-instances stanza
Product-Group=junos 		The change by PR 1433542 (which is fixed in 18.3R3 18.4R3 19.1R2 19.2R2 19.3R1) causes commit check to fail. This happens when "no-normalization" is configured under a routing-instances stanza for a routing-instance with any of the following interface configuration - "vlan-id all", "vlan-id inner-all", "input-vlan-map", "output-vlan-map", "vlan-id-list", "vlan-id-range", "vlan-tags inner-list", "vlan-tags inner-range".
PR Number Synopsis Category: usf alg related issues
1500355 The SPC3 card might crash if SIP ALG is enabled
Product-Group=junos 		On MX240/480/960 with SPC3 card, if SIP (Session Initiation Protocol) ALG (Application Layer Gateway) is enabled, the SPC3 card might crash when processing the SIP ALG service. Traffic disruption might be seen during the SPC3 crash.
 

19.4R2-S1 - List of Known issues

PR Number Synopsis Category: HW Board, FPGA, CPLD issues
1503655 JDI-RCT :PDT_onyx2member-VC_IPCLOS: pfe will stuck in init state for one or two member with tcp connection timeout error
Product-Group=junos 		_onyx2member-VC_IPCLOS: pfe will stuck in init state for one or two member with tcp connection timeout error
PR Number Synopsis Category: QFX L3 data-plane/forwarding
1486632 On QFX 5100-48T-6Q VC/VCF, Observed error message "rcp for member 14, failed" while copying image to VCF member. when trying to downgrade the image
Product-Group=junos 		On QFX 5100-48T-6Q VC/VCF, Observed error message "rcp for member 14, failed" while copying image to VCF member. when trying to downgrade the image
1500508 On QFX5100 VC/VCF : Observing traffic loss on multiple traffic streams after reboot and flapping the interfaces of the VC node
Product-Group=junos 		On QFX5100 VC/VCF : Observing traffic loss on multiple traffic streams after reboot and flapping the interfaces of the VC node
1508133 Traffic loss observed in BGP streams while doing the triggers GRES & Reboot with base configurations
Product-Group=junos 		On QFX5100-VC, traffic loss is observed in BGP streams while doing the triggers GRES & Reboot with base configurations.
PR Number Synopsis Category: Device Configuration Daemon
1476199 Failure to configure proactive ARP detection
Product-Group=junos 		When trying to configure proactive ARP detection configuration under interface, the configuration may fail to commit.
PR Number Synopsis Category: Layer 3 forwarding, both v4+v6
1519372 IPV6 neighbor state change causes "Local Outlif" to leak by two values leads to DNX_NH::dnx_nh_tag_ipv4_hw_install errors
Product-Group=junos 		On ACX5448/ACX5448-D, PFE memory exhaustion is reported due to continuous IPv6 neighbor flaps.
PR Number Synopsis Category: Flow Module
1493174 L3-HA - Not able to clear the warm sessions on the peer SRX devices
Product-Group=junos 		Introduce a CLI command "clear security flow session session-state warm" for user when there are still warm sessions after "clear security flow session".
PR Number Synopsis Category: flow ha module
1509082 L3-ha - Interfaces were not coming up after restarting JSRPD
Product-Group=junos 		l3-ha shutdown interfaces will not come up in case of jsrpd restart. This is a known product limitation for l3ha feature at 17.4X2. The workaround is to remove shutdown interface configs and rollback 1.
PR Number Synopsis Category: Firewall Network Address Translation
1494431 Huge continuous drops on primary Node after it comes up from reboot on SRX4100/SRX4200
Product-Group=junos 		On the SRX4100/SRX4200 platform, huge continuous drops are seen on the primary Node after it comes up from the reboot in L3-HA mode
PR Number Synopsis Category: Platform infra to support jvision
1497343 The MPC10E line card might restart with sensord crash on it due to a timing issue
Product-Group=junos 		The sensord daemon along with the sensor of "/junos/system/cmerror/configuration" is enabled by default on MPC10E no matter Junos Telemetry Interface (JTI) is configured or not. There is a use-after-free issue during processing CMError configuration data in sensord, which is a timing issue. This issue could cause sensord to crash and the related MPC10E line card to restart.
PR Number Synopsis Category: Layer 2 Control Module
1473610 ERPS might not come up properly when MSTP and ERPS are enabled on the same interface.
Product-Group=junos 		When both "Multiple Spanning Tree Protocol " (MSTP) and Ethernet Ring Protection Switching" ERPS are enabled on the same interface, then ERPS does not come up properly.
PR Number Synopsis Category: MX104 Software - Chassis Daemon
1453893 FPC/PFE crash may happen with ATM MIC installed in the FPC
Product-Group=junos 		FPC crash on MX240 and MX2020 routers or Packet Forwarding Engine crash on MX104 routers might happen when the MIC-3D-8OC3-2OC12-ATM is installed and ATM interface is configured.
PR Number Synopsis Category: PTX10K Routing Engine
1503169 A few TCP-based application sessions might flap upon RE switchover or application sessions bouncing at the backup RE on PTX10008/PTX10016 router
Product-Group=junos 		In a rare case on a PTX10008/PTX10016 router with dual Routing Engines (RE) and GRES/NSR enabled, a few TCP-based application sessions like BGP/LDP might flap upon RE switchover or application (protocol) sessions bouncing at the backup RE. Once those sessions flap, they will be re-established automatically. The TCP sessions re-connection will impact the respective routing protocol sessions and therefore could impact the traffic. This is a timing issue; the more TCP-based application sessions the router has established prior the switchover, the higher chances to hit the issue. Usually when the issue happens, only a few TCP sessions are getting affected and not all of them.
PR Number Synopsis Category: QFX L2 PFE
1515254 On QFX5000 and EX46xx with VXLAN enabled , ARP request may get dropped if storm control is configured
Product-Group=junos 		ARP request get dropped on QFX5000 and EX46xx devices when all of the following condition are met. 1.Storm control is enabled on any of the port. 2.VXLAN is enabled 3.Arp-suppression is enabled.
PR Number Synopsis Category: QFX VC Infrastructure
1497563 Virtual Chassis is not stable with a channelization interface
Product-Group=junos 		In QFX5110 platform with Virtual Chassis (VC) scenario, VC might not get formed and can cause traffic loss if the 100G VCP ports are deleted and created, or changed from 40G to 100G or vice-versa. For the reason is that Forward Error Correction (FEC) should not be enabled when the physical interface is working as a VCP port.
1498485 Onyx VC: Vmcore observed after VC split event
Product-Group=junos 		[vc_vcf] [HA] QFX-Hardening: Onyx VC: Vmcore observed after VC split event
PR Number Synopsis Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1514152 CST:ISSU:Loss of PPPoE subscribers during ISSU from 19.4R2.6 to 19.4R2.6 in ps0 interface
Product-Group=junos 		Loss of PPPoE subscribers during ISSU from 19.4R2.6 to 19.4R2.6,out of 28k PPPoE subscribers only 375 where logged in again after ISSU.
PR Number Synopsis Category: UI Misc
1457602 The version info under configuration is changed from release 19.1
Product-Group=junos 		Under configuration on 19.x, version info is different from prior 18.x release.
PR Number Synopsis Category: ZT pfe l3 forwarding issues
1462775 Inline BFD session might flap on renegotiation of timers from slow to aggressive interval
Product-Group=junos 		On MX platforms with MPC10E/MPC11E, the Inline BFD session might flap on the transition from slow to aggressive timers.

Modification History

First publication date 2020-07-24
2022-03-23: Non-technical changes; corrected formatting issue