Alert Type

SRN - Software Release Notification

Product Affected

ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX

Alert Description

Junos Software Service Release version 20.1R1-S4 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to  Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select  Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

NOTE: EX2300/EX3400 JUNOS Software images has been recalled and removed from software download due to PR1537696 - See TSB17855 [juniper.net] for detail

Junos Software service Release version 20.1R1-S4 is now available.

20.1R1-S4 - List of Fixed issues
PR Number Synopsis Category: EX driver issues
1515689 The IP communication between directly connected interfaces on EX4600 would fail
Product-Group=junosvae 		The IP communication between directly connected interfaces on EX4600 TVP platforms would fail. This issue only might occur in this special scenario and it might have traffic/service impact.
PR Number Synopsis Category: JUNOS kernel/ukernel changes for ACX
1509402 PFE crash might be seen and the FPC may remain down on ACX710 platform
Product-Group=junos 		On ACX710 platform, after the PTP(Precision Time Protocol) configuration is removed and the router is rebooted, the PFE might crash and the FPC remains down if PTP traffic is still coming into the router. This issue might also happen when SyncE is configured. This causes the router to crash and not come up.
PR Number Synopsis Category: ACX GE, 10GE, PoE, IDT framers
1430009 gigether-options knob enabled again under interface hierarchy
Product-Group=junos 		gigether-options and ether-options both are support on ACX5k PR1430009 initially opened to remove gigether-options, now it has been reverted. Revert has been tracked in the same PR 1430009. Yes, latest fix of PR 1430009 has added back gigether-options
PR Number Synopsis Category: Border Gateway Protocol
1482209 BGP multi-pathed traffic might not fully load-balanced for a while after adding a new path for load sharing
Product-Group=junos 		On all Junos platforms with the BGP-ECMP (Equal Cost Multi-Path) scenario, if adding a new path for load sharing, the traffic might not fully load-balanced for a while. The worst-case scenario is much traffic moving to the new path and lead to a link oversubscription.
PR Number Synopsis Category: MX Platform SW - Power Management
1524338 [chassisd] [troubleshooting_fru] MX2020 :: Omni MX2K-UNIVERSAL-HV-PSM - PSM firmware upgrade should not allow multiple PSM upgrade in parallel to avoid the firmware corruption and support mutliple firmwares for different Hw Revs
Product-Group=junos 		Running parallel multiple firmware upgrades on the PSMs can result in firmware corruption. This change does not allow to launch a upgrade process when another instance is already running
PR Number Synopsis Category: Express PFE CoS Features
1509220 Traffic might be affected on QFX10002/QFX10008/QFX10016 platform
Product-Group=junos 		On QFX10002/QFX10008/QFX10016, on the interfaces which map to h/w stream 0, if enhanced transmission selection (ETS), which in JunOS implementation is Hierarchical port scheduling configurations, change while high rate traffic is flowing, the chip might be wedged, thus no traffic flow is seen. Hierarchical port scheduling is the Junos OS implementation of enhanced transmission selection (ETS), as described in IEEE 802.1Qaz.
PR Number Synopsis Category: Port-based link layer security services and protocols that a
1514680 The MACSec session might fail to be established if 256-bit cipher suite is configured for MACsec connectivity association being assigned to a logical interface
Product-Group=junos 		On MX platforms except MPC10E/11E, if 256-bit cipher suite (i.e. gcm-aes-256 and gcm-aes-xpn-256) is configured for MACsec connectivity association (CA) and the CA is assigned to a logical interface (IFL), the current MACsec hashing algorithm will use the first 128-bit out of the 256-bit key to calculate the hash value. This might not be compatible with other vendors and even MPC10E/11E on MX. The MACsec session will not be established when interoperating with incompatible device. This PR changed the implementation of MACSec hashing algorithm to resolve the compatibility issue with other vendors and MPC10E/11E on MX. The following CLI knob has been added to provide the backward compatibility with previous Junos versions which use 128-bit hash key implementation. "set security macsec connectivity-association sak-hash-128"
PR Number Synopsis Category: Resource Reservation Protocol
1485985 The rpd crash might be seen after back to back GR or GRES
Product-Group=junos 		On all platforms, with RSVP LSP configured, after back to back GR or GRES, the rpd crash might be seen.
PR Number Synopsis Category: Configuration mgmt, ffp, load-action, commit processing
1468119 On Junos OS Release from 16.2R1 onwards, if commit is executed after commit check, the daemon (for example, dhcpd and sampled) might not get started even after the related configuration is successfully committed
Product-Group=junos 		On Junos OS Release from 16.2R1 onwards, if commit is executed after commit check, the daemon (for example, dhcpd and sampled) might not get started even after the related configuration is successfully committed.
PR Number Synopsis Category: ZT pfe l3 forwarding issues
1529475 The multicast traffic might be dropped due to hash mismatch when there are AE and ECMP links involved in multicast tree
Product-Group=junos 		On MX platforms with MPC10 or MPC11 line cards, the multicast traffic over an AE or ECMP interface may be dropped because the hash calculation on the egress line card could be different than on the ingress line card. This could happen if the encapsulation on the egress interface changes a field in the packet that is used in the hash calculation.
 

20.1R1-S4 - List of Known issues
PR Number Synopsis Category: IPSEC/IKE VPN
1517262 The flowd might crash in IPsec VPN scenario
Product-Group=junos 		On SRX platforms with IPsec VPN configured, the flowd might crash during the IPsec VPN rekey window. The traffic/service might be impacted if hitting this issue.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1505864 The installation fails when upgrading from legacy Junos to specific BSDx based Junos
Product-Group=junos 		The installation might fail when upgrading from legacy Junos (before Junos 15.1) to higher BSDx based Junos releases (Junos 15.1 and after).
PR Number Synopsis Category: ZT pfe l3 forwarding issues
1462775 Inline BFD session might flap on renegotiation of timers from slow to aggressive interval
Product-Group=junos 		On MX platforms with MPC10E/MPC11E, the Inline BFD session might flap on the transition from slow to aggressive timers.
 

Modification History

Updated 2020-09-11 - Recall EX2300/EX4300 - See TSB17855 [juniper.net]
First publication 2020-09-03