Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX

Alert Description

Junos Software Service Release version 18.4R3-S5 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 18.4R3-S5 is now available.

18.4R3-S5 - List of Fixed issues

PR NumberSynopsisCategory: EX4300 PFE
1456879The traffic for some VLANs might not be forwarded when vlan-id-list is configured
Product-Group=junos		On EX4300 Series switches, if the vlan-id-list is used on one interface, the traffic for some VLANs under the vlan-id-list might not be forwarded.
PR NumberSynopsisCategory: EX2300/3400 PFE
1427075VC split after network topology changed
Product-Group=junos		In Virtual Chassis scenario, when the interfaces flaps or VLAN configuration is changed frequently, the network topology will be changed accordingly, then CPU utilization will be dramatically increased to very high within a short time, which might cause the failure of essential communications between VC primary and members. When the failure happens, FPC will automatically restart. As a result, VC is split and traffic is lost.
PR NumberSynopsisCategory: QFX Access control list
1403001Filter install will be failed due to no resource
Product-Group=junos		QFX5120 will show as "No resources for operation " during installing filter QFX5120 switches with VXLAN configured, user configured ACLs are limited to only one type (iRACL, iVACL or iPACL). But in this case there is only IPACL no other filter config
1514570Scale of filters with egress-to-ingress command is enabled.
Product-Group=junos		With the 'egress-to-ingress' knob enabled, the filter installation fails if the number of filter entries configured is more than 1K.
1521763Firewall "sample" configuration gives the warning as unsupported on QFX10002-36q and will not work.
Product-Group=junos		On QFX10002-36q, when inline-jflow is configured, the IPv4 firewall filter with 'sample' action gives a waring "unsupported platform" and will not work. On the other hand, the IPv6 firewall filter with 'sample' action will still work as expected.
PR NumberSynopsisCategory: BBE Remote Access Server
1517507GX-PLUS: CCR-T doesn't contain the Usage Monitoring information
Product-Group=junos		On subscriber termination, CCR-T is sent to the PCRF server reporting the same. But this doesn't contain the Usage monitoring information.
1518016JUNOS CLI [show network-access aaa subscribers statistics username "<>"] fails to fetch Subscriber-specific AAA statistics information if an subscriber username includes space
Product-Group=junos		Subscriber username with space in between is not displayed by [show network-access aaa subscribers statistics username "<>"] command
PR NumberSynopsisCategory: QFX Access Control related
1515972"dot1x" memory leak
Product-Group=junos		Memory leak is seen in 'dot1xd' daemon when no 'dot1x' is configured. Memory leak is seen for the allocation while creating socket from 'dot1xd' daemon to 'authd' daemon. If 'authd' is not running , 'dot1xd' daemon tries to connect to 'authd' periodically and every time it was allocating memory for string "/var/run/authd_control" for socket creation. The memory does not free in this scenario and we see memory leak for string "/var/run/authd_control". There will be no service impact to other services/daemons other than dot1x.
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1520078Unable to create a new VTEP interface
Product-Group=junos		In all platforms with VXLAN Static VTEP tunnels scenario (including Static VXLAN without EVPN), after RE switchover or restart of l2-learning, if create a new VTEP interface, the interface may not work.
1521199The l2ad process might crash when EVPN-DCI session is teared down by MP-BGP-EVPN peer
Product-Group=junos		On EVPN-VXLAN scenario, when EVPN-DCI session is teared down by MP-BGP-EVPN peer, the l2ald process might crash with a core file generated in all VTEPs. It might cause total EVPN-VXLAN fabric bring down and entire network impact.
PR NumberSynopsisCategory: Express PFE CoS Features
1509220Traffic might be affected on QFX10002/QFX10008/QFX10016 platform
Product-Group=junos		On QFX10002/QFX10008/QFX10016, on the interfaces which map to h/w stream 0, if enhanced transmission selection (ETS), which in JunOS implementation is Hierarchical port scheduling configurations, change while high rate traffic is flowing, the chip might be wedged, thus no traffic flow is seen. Hierarchical port scheduling is the Junos OS implementation of enhanced transmission selection (ETS), as described in IEEE 802.1Qaz.
PR NumberSynopsisCategory: Internet Group Management Protocol
1520059Packet loss might be observed while verifying traffic from access to core network for IPv4/IPv6 interfaces
Product-Group=junos		On EX2300-48T/EX2300-48P/EX2300-48MP, packet loss may be seen when L3 IPv4/IPv6 interface and route related configurations with IPv4/IPv6 unicast stream are configured. This issue might cause traffic drop. This issue happens if two different NH(Next Hop) IDs are programmed in the Hardware for same route but only one entry is maintained in the software.This issue is specific to 48 port EX2300 platforms and will not occur on other 12/24 ports EX2300, such as EX2300-24T, EX2300-24P, EX2300-24MP.
PR NumberSynopsisCategory: Kernel software for AE/AS/Container
1474300A new aggregated Ethernet member interface for a static LAG bundle is installed in the FIB even though the micro- BFD session is down.
Product-Group=junos		On all Junos platforms, if a static Link Aggregate Group (LAG) is configured, and Bidirectional Forwarding Detection (BFD) is enabled on the LAG which is also called as micro BFD, a newly added member link might start to forward traffic immediately when the configuration change commits even though its micro BFD session is still down, for example, add a new member interface only on single end, and the remote member interface is disabled or not added. Therefore, traffic loss might be seen due to this issue.
PR NumberSynopsisCategory: jdhcpd daemon
1525052The memory leak in jdhcpd might be seen if access-profile is configured under "dhcp-relay" or "dhcp-local-server" stanza
Product-Group=junos		With access-profile being configured under "forwarding-options dhcp-relay" or "system services dhcp-local-server" stanza, there might be memory leak in jdhcpd when DHCP request is processed. The leaked memory size for each processing will be the number of bytes equal to the length of the access profile.
PR NumberSynopsisCategory: Firewall Policy
1500938The srxpfe/flowd process might crash due to memory corruption within JDPI
Product-Group=junos		On SRX/MX platforms, if there are any services (e.g. AppID, IDP, APBR and so on) running based on Juniper Deep Packet Inspection (JDPI), when the work load is reaching heavy level, for example, above 50% of max connection per second for Layer 7 security policy, or 30% for IDP, the srxpfe/flowd process might crash due to memory corruption caused by this issue.
PR NumberSynopsisCategory: jsscd daemon
1511745Static subscribers are logged out after creating a unit under demux0 interface
Product-Group=junos		In MX platforms with static subscriber scenario, the existing static subscribers associated to a demux0 interface might be forced to log out after creating another unit under demux0 interface.
PR NumberSynopsisCategory: Issues related to Jflow Jvision Sensors
1477445Sampling process might crash when the MPLS or MPLS over the UDP traffic is sampled.
Product-Group=junos		When inline-jflow is configured for sampling MPLS traffic, multi-svcs process running on the FPC may crash (which will lead to FPC crash and restart) due to MPLS resend flow referencing to an unavailable memory location.
PR NumberSynopsisCategory: Multiprotocol Label Switching
1517018The rpd might crash after upgrading Junos software release from pre 18.1 to 18.1 onwards
Product-Group=junos		On all Junos platforms, the rpd might continuously crash after upgrading Junos software release from pre 18.1 to 18.1 onwards while graceful-restart and RSVP/static LSP are configured. This is because there is a change in the data structure written to the restart db file from 18.1 onwards. So, when rpd comes up and tries to read the restart db file written by pre 18.1 release image, the rpd might crash.
PR NumberSynopsisCategory: Multicast Routing
1443713PIM (S,G) joins might cause MSDP to incorrectly announce source active messages in some cases.
Product-Group=junos		In the event of a network running: 1) a first-hop PIM router also being a rendez-vous point (RP); and 2) anycast RP in conjunction with MSDP; and 3) any-source multicast; and 4) a PIM last-hop router sending an (S,G) join when there is no traffic in the network matching the source and group, the first-hop RP will incorrectly send MSDP source-active messages to other MSDP peers. In other cases such as when the RP is not the first-hop PIM router, the traffic source needs to originate packets before the RP would originate MSDP source-active messages.
PR NumberSynopsisCategory: FreeBSD Kernel Infrastructure
1450093EX4300 : CLI config "on-disk-failure" is not supported
Product-Group=junos		On an EX4300 switch, the CLI configuration "set chassis routing-engine on-disk-failure disk-failure-action (reboot | halt)" is not supported.
PR NumberSynopsisCategory: Express Paradise PFE Sflow
1525589PTX10002-60C / PTX1K - SFLOW Adaptive-sampling with rate limiter knob enabled crosses sample rate 65535
Product-Group=junos		'show sflow Interfaces' command displays wrong adaptive-sampling rates for rate limiter configuration. The display usually shows a sampling rate of more than 65535.
PR NumberSynopsisCategory: Interface related issues. Port up/down, stats, CMLC , serdes
1462748On the QFX5100 switches, the interface output counter is double counted for self-generated traffic.
Product-Group=junos		On QFX5100 device, interface output counter is double counted for self-generated traffic
PR NumberSynopsisCategory: QFX Platform related (SYSLOG/ALARMS/miscellaneous)
1317750Port LEDs do not work on the QFX5100 switch in QFX5110-QFX5100 mixed mode Virtual Chassis.
Product-Group=junosvae		Port LEDs on the QFX5100 do not work. If a device connects to a port on the QFX5100, the port LED stays unlit.
PR NumberSynopsisCategory: QFX L2 PFE
1510329ARP replies might be flooded through the EVPN-VXLAN network as unknown unicast ARP reply.
Product-Group=junos		The QFX5100/5110/5120/5200 platforms configured as EVPN-VxLAN leaf, the leaf will send periodic ARP requests to connected hosts to refresh the mac-ip entry when proxy-arp and suppression are enabled. These ARP replies are being processed by the leaf, however, they are also being flooded further through the EVPN-VxLAN network as unknown unicast ARP reply. This issue may decrease the bandwidth efficiency of the core network.
PR NumberSynopsisCategory: QFX EVPN / VxLAN
1516653The MAC learning might not work properly after multiple MTU changes on the access port in VxLAN scenario
Product-Group=junosvae		On QFX5120 platform running with Virtual Extensible LAN protocol (VxLAN) scenario, if there are multiple iterations of MTU change on the access port which faces Customer Edge (CE) side, for example, 20 iterations under the scale with around 100 VLAN to VXLAN Network Identifier (VNI) mapping, the MAC learning on the access port might not be able to work properly due to this issue.
PR NumberSynopsisCategory: QFX VC Infrastructure
1497563Virtual Chassis is not stable with 100-Gigabit Ethernet and 40-Gigabit Ethernet interfaces.
Product-Group=junos		In QFX5110 platform with Virtual Chassis (VC) scenario, VC might not get formed and can cause traffic loss if the 100G VCP ports are deleted and created, or changed from 40G to 100G or vice-versa. For the reason is that Forward Error Correction (FEC) should not be enabled when the physical interface is working as a VCP port.
PR NumberSynopsisCategory: RPD Interfaces related issues
1503075Fabric interface might be Monitored down after chassis cluster reboot
Product-Group=junos		On all SRX series devices with chassis cluster enabled, Fabric link might be Monitored down after rebooting both nodes simultaneously. This can cause CS(Cold Sync monitoring) and FL(Fabric Connection monitoring) failure.
PR NumberSynopsisCategory: Remote Access VPN issues on SRX
1442145With NCP remote access solution, in a PathFinder case (for example, where IPsec traffic has to be encapsulated as TCP packets), TCP encapsulation for transit traffic is failing.
Product-Group=junos		With the NCP remote access solution, where IPsec traffic has to be encapsulated as TCP packets, TCP encapsulation for transit traffic is failing.
PR NumberSynopsisCategory: SSL Proxy functionality on JUNOS
1516903The srxpfe/flowd process might crash when SSL-Proxy is used
Product-Group=junos		On all SRX Series devices with SSL-Proxy used, memory leak might occur when new session creation refers to the SSL-Proxy profile, which results in a corrupted memory accessed and the flowd/srxpfe process crash.
PR NumberSynopsisCategory: MX10003/MX204 Platform SW - Chassisd s/w defects
1315577MX10003 : Despite of having all AC low PEM alarm is raised.
Product-Group=junosvae		An alarm is raised if mixed AC PEMs are present. This occurs because the criteria for checking whether mixed AC is present was changed.
PR NumberSynopsisCategory: SRX-1RU platfom related protocol, QoS, filtering features et
1515046VRRP does not work on reth interface with a vlan greater than 1023
Product-Group=junos		When a redundant Ethernet (reth) interface has vlan-tagging configured and is part of a VRRP group, the SRX/vSRX is unable to allocate the VIP to the reth interface if the vlan-id configured is greater than 1023. As a result, VRRP does not work.
PR NumberSynopsisCategory: Trio pfe bridging, learning, stp, oam, irb software
1494594Packets get dropped when next hop is IRB over lt interface.
Product-Group=junos		On MX series platforms, when a route's next-hop is an IRB interface with lt- as the underlying L2 interface, it is not getting programmed on PFE, resulting in packet drop.
1501014Traffic to VRRP virtual IP/MAC might be dropped when ingress queueing is enabled
Product-Group=junos		On MX platforms with any MPC in enhanced network-service mode, if VRRP is configured on AE interface, after 'set chassis fpc X pic X traffic-manager mode ingress-and-egress' is enabled, traffic sent to virtual IP/MAC might be dropped and the forward traffic will be affected.
PR NumberSynopsisCategory: Junos Automation, Commit/Op/Event and SLAX
1442248SRX series devices or vSRX instances/platforms fail to download dynamic-address feed from security director
Product-Group=junos		If downloading dynamic-address feed from an HTTPS server that is configured on Security Director is available, then the download process fails. As a result the IP address contained in the list not be sent from Security Director to the platform. If the platform has a policy referencing the IP address, then that policy will not match pass-through traffic.
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1423500Configuration commit might fail when the file system gets into full state.
Product-Group=junos		On all platforms running Junos OS, when the file system gets into the Full state and there is not enough spare disk space, it might get into a problematic system condition while committing the configuration. After that, if the consecutive commits are still done in such a problematic condition, commit-check failure logs might be seen eventually. Due to this issue, some processes might not run even if the configuration is present.
PR NumberSynopsisCategory: MX10K linecard
1510994The disabled QSPF transceiver might fail to be turned on
Product-Group=junos		In the scenario that QSFP is used as a single interface or child link of the AE interface, if the interface is disabled and enabled frequently, the write errors might happen on I2C (Inter-Integrated Circuit) of QSPF. Then the laser of QSFP might not be enabled.
 

18.4R3-S5 - List of Known issues

PR NumberSynopsisCategory: SFI Infra-structure
1485038The following error message is observed: IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) failed continuously in AD with base configurations.
Product-Group=junos		EX 9251 Summit-B54 : "IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) error message is observed continuously in AD with base configurations.
PR NumberSynopsisCategory: EX2300/3400 platform
1408675EX3400 PSU status is still taking "check" status even though PSU module has been removed
Product-Group=junos		EX3400 PSU status is still taking "check" status even though PSU module has been removed
PR NumberSynopsisCategory: QFX PFE L2
1480132On QFX5100, fxpc CPU utilization is increased after Broadcom SDK upgrade to 6.5.x from 5.3.x
Product-Group=junos		On QFX5100 switches, FXPC CPU utilization is increased due to high number of active ports after third-party (Broadcom ) SDK upgrade to 6.5.x from 5.3.x.
PR NumberSynopsisCategory: QFX L3 data-plane/forwarding
1481987Multicast traffic loss could be seen in certain conditions while enabling IGMP snooping under EVPN-VXLAN ERB scenario
Product-Group=junos		On QFX5110 & QFX5120 platform, which is running as Layer 3 VxLAN gateway, if "igmp-snooping" is enabled in partial but not for all bridge-domains, multicast traffic loss could be observed in non-igmp snooping bridge-domains.
PR NumberSynopsisCategory: ACX MPLS
1456624On the ACX5448 device, the Layer 2 VPN with the Ethernet encapsulation type stops passing traffic after a random port is added with VLAN configuration.
Product-Group=junos		On ACX platform with L2VPN family and encapsulation-type ethernet, there might be packet drops seen after a random port is added with VLAN configuration on the device. The traffic drops are caused due to the egress entry being incorrectly shared between the ethernet-ccc and the vlan-bridging (mapping).
PR NumberSynopsisCategory: ACX Services feature
1504717Observed core-ripsaw-node-aftd-expr on ACX6360
Product-Group=junos		acx6360: Observed core-ripsaw-node-aftd-expr
PR NumberSynopsisCategory: a20a40 specific issue
1505864The installation fails when upgrading from legacy Junos to specific BSDx based Junos
Product-Group=junos		The installation fails when upgrading from legacy(non-BSDx) Junos to specific BSDx based Junos releases.
1522130PFE_FLOWD_SELFPING_PACKET_LOSS error messages reported for CP SPU
Product-Group=junos		Syslog reporting "PFE_FLOWD_SELFPING_PACKET_LOSS: Traffic impact: Selfping packets loss/err: 300 within 600 second" error messages in node0 and node1 CP
PR NumberSynopsisCategory: Border Gateway Protocol
1517498The rpd might crash after deleting and re-adding a BGP neighbor
Product-Group=junos		In BGP scenario on all Junos platforms, after deleting and re-adding a BGP neighbor, the rpd might crash due to a rare timing issue.
PR NumberSynopsisCategory: Control Plane for Node Virtualization
1451215Main chassisd thread at a JNS GNF might experience stalls upon GNF SNMP polling for hardware-related OIDs.
Product-Group=junos		- Chassisd main thread stalls could be seen at a JNS GNF upon GNF SNMP polling for HW-related OIDs (e.g. ones from jnxBoaAnatomy MIB). - If a GNF chassisd main thread stalls are ongoing and the GNF is restarted, then a service MGD process at the BSYS could start spinning at 100% CPU. This MGD process won't terminate by itself and will be consuming 100% CPU even when the GNF is back online.
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1408840In an Ethernet Virtual Private Network-Virtual Extensible LAN scenario with scaled bridge domains configured (for example, 4000 bridge domains), if the core-facing link on the VXLAN tunnel endpoint (VTEP) comes up (Down >> Up), the traffic received from the customer edge (CE) might be dropped by the VTEP for a period of time before it becomes normal.
Product-Group=junos		In a EVPN-VXLAN scenario with scaled Bridge Domains configured (for example, 4000 Bridge Domains), if the core facing link on the VTEP (VXLAN Tunnel Endpoint) comes up (Down >> Up), the traffic received from the CE (Customer Edge) might be dropped by the VTEP for a period of time before it becomes normal.
PR NumberSynopsisCategory: Sflow on qfx10k/ptx series PRs for defect & enhancement req
1475082The sFlow could not work correctly if the received traffic goes out of more than one interface.
Product-Group=junos		On QFX10K platforms, if the traffic which is received from AE bundle go out of more than one interface, the sflow might work incorrectly.
PR NumberSynopsisCategory: Express PFE MPLS Features
1515092The routes update might fail upon HMC memory issue and traffic impact might be seen
Product-Group=junos		On PTX Series and QFX Series devices, in rare cases, HMC memory error might cause routes update failure and traffic impact on the Packet Forwarding Engine.
PR NumberSynopsisCategory: Stateful firewall and NAT
1433063NTAD daemon running in 32bit mode (the only possible mode in current implementation) is not compatible with RPD running in 64bit mode
Product-Group=junos		Currently NTAD daemon can run only in 32bit mode. To have NTAD running, RPD has to run in 32bit mode too. If RPD runs in 64bit mode, then NTAD will crash cyclically once started. After 4th crash NTAD won't be automatically restarted. This problem has no fix currently.
PR NumberSynopsisCategory: to track replication related interface bugs
1372087If you perform GRES with the interface em0 (or fxp0) disabled on the primary Routing Engine, when you enable the interface on the new backup Routing Engine, you might not be able to access the network.
Product-Group=junos		If performing GRES with the interface em0 (or fxp0) disabled on the primary RE, then enabling the interface on the new backup RE, it isn't able to access network.
PR NumberSynopsisCategory: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1463368Need to add the Backport jemalloc profiling CLI support to all Junos OS Releases where jemalloc is present.
Product-Group=junos		Backport jemalloc profiling CLI support to all releases where jemalloc is present.
PR NumberSynopsisCategory: ISIS routing protocol
1526447ISIS LSP database Sync issue while using Flood group feature
Product-Group=junos		On a Junos platform, when flood-group is configured on any interface & after isis adjacency flap, the device is sending only self-generated LSPs & not incrementing the LSP updates received from neighbor which flapped. This is causing LSP database out of sync.
PR NumberSynopsisCategory: Flow Module
1467654TCP session might not time out properly upon receiving TCP RESET packet
Product-Group=junos		TCP session cannot time out properly upon receiving the TCP RESET packet, and the session timeout does not change to two seconds.
PR NumberSynopsisCategory: Firewall Policy
1454907Traffic might be dropped when policies are changed in SRX Series devices
Product-Group=junos		If a huge number of policies are configured on SRX Series devices and some policies are changed, the traffic that matches the changed policies might be dropped.
PR NumberSynopsisCategory: Security platform jweb support
1493601Infinite loading circle may be encountered via J-Web on SRX platforms
Product-Group=junos		On SRX platforms, infinite loading circle may be encountered on J-Web after navigating new page when the page is still rendering.
PR NumberSynopsisCategory: Label Distribution Protocol
1521698LDP session-group may through the commit error on EVO platforms and keeps flapping in MX platform.
Product-Group=junos		Customers may experience below issues addressed in this PR. --- Configuration of "protocols ldp session-group" on EVO platform may through commit failure error. --- LDP session keeps flapping on MX power PPC platform upon adding authentication key in ldp session-group.
PR NumberSynopsisCategory: sflow on MX PRs for defect & enhancement requests
1487876Incorrect 'frame length' of 132 bytes might be captured in packet header
Product-Group=junos		On all MX/PTX5k/EX platforms with Trio based line cards, if a packet is send with more than 128 bytes it will always show incorrect "Frame length" of 132 bytes in raw packet header of sflow collector captured data.
PR NumberSynopsisCategory: PE based L3 software
1500798BFD sessions flap after deactivating or activating the aggregated Ethernet interface or executing GRES.
Product-Group=junos		On QFX10008 platforms, if the BFD is configured over an AE interface (member link across multiple FPCs), deactivating/activating the AE interface or executing GRES will cause the BFD sessions to flap.
PR NumberSynopsisCategory: QFX PFE Class of Services
1430173The CoS rewrite rules applied under an aggregated Ethernet interface might not take effect after NSSU.
Product-Group=junos		On QFX 5K platform, Class of Service (CoS) rewrite rules applied under an Aggregated Ethernet (AE) interface might not take effect after Non-Stop Software Upgrade (NSSU). In the end, packets could not enter into correct queues for sending.
PR NumberSynopsisCategory: RPD Next-hop issues including indirect, CNH, and MCNH
1407408The process rpd crash may be observed once a non-forwarding path is used for re-resolution
Product-Group=junos		The process rpd might crash after a non-forwarding route (that is, a route to an indirect next-hop association is a non-forwarding indirect next- hop) which is received from multiple protocols is resolved again by using the non-forwarding path.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1421566Some LDP routes in VRF cannot be resolved over inet.3 table.
Product-Group=junos		Some LDP routes in VRF (e.g. foo.mpls.0) cannot be resolved over inet.3 table, which makes these LDP routes hidden.
PR NumberSynopsisCategory: Generic platform and infra issues for MS-MIC and MS-MPC(XLP)
1482400The vmcore crash sometimes along with mspmand crash might happen on MS-MPC/MS-MIC if large-scale traffic flows are processed by it
Product-Group=junos		With NAT/Stateful-firewall/TCP tickle (enable by default) configured on MS-MPC/MS-MIC, the vmcore crash sometimes along with mspmand crash might happen if large-scale traffic flows (e.g. million flows) are processed by it.
PR NumberSynopsisCategory: Trio pfe l3 forwarding issues
1472587MX10003/MX204 BFD/LACP may flap during BGP convergence
Product-Group=junos		During BGP converence, eg full internet table load, the BFD and LACP protocol on the router may flap
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1452136The mgd might crash when you use the replace pattern command.
Product-Group=junos		When you use the "replace pattern" command to replace the name in the apply-group, the mgd crashes.
PR NumberSynopsisCategory: For GPRS security features on highend SRX series
1526801GTP traffic dropped when enable-gtpu-distribution is configured
Product-Group=junos		On SRX5k platform, when GTP Distribution (enable-gtpu-distribution) is configured without GTP Inspection enabled on the security policies, the GTP traffic is not getting distributed and traffic may get dropped. This issue exists from Junos 18.1 until Junos 19.1 and the fix is in Junos 19.2R1 and all higher releases.

Modification History

2020-08-31 First Publication