Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX

Alert Description

Junos Software Service Release version 18.3R3-S6 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to  Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select  Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 18.3R3-S6 is now available.

18.3R3-S6 - List of Fixed issues

PR Number Synopsis Category: MX10K platform
1325946 Chassisd process memory leak issue on MX10008/MX10016 platform which might cause traffic loss.
Product-Group=junos 		Without any significant trigger events, chassisd process on active Routing-Engine for MX10008 and MX10016 platforms keeps leaking memory. When chassisd memory usage is reaching ~3.5GB it may crash and trigger RE switchover. In some production cases, such RE switchover has triggered temporary traffic impact even on NSR/GRES enabled systems. The rate of memory leak is depending on how many optics/SFPs the system has. Rate of leak = 'Number of optics/SFPs under the system has' * 16Bytes per every 6 seconds.
PR Number Synopsis Category: QFX access control list
1606256 Multicast streams may stop flooding in VXLAN setup
Product-Group=junos 		In VXLAN with multicast used scenario, multicast traffic might not get flooded if the multicast IP is in one of the IP range (224.0.0.32 - 224.0.0.255). This is because a newly introduced dynamic filter only works for non-VxLAN traffic.
PR Number Synopsis Category: QFX L2 PFE
1602914 Traffic drop might be observed on QFX5K platforms in virtual chassis scenario when firewall filter is configured
Product-Group=junos 		On QFX5k platforms in the Virtual chassis scenario, when the firewall filter is applied over the AE interface and AE is having only one child member from FPC0 and there are no child members from FPC1, all the packets flowing through backup FPC will be dropped.
PR Number Synopsis Category: qfx-sw-mclag
1605234 MAC move may be seen between the ICL and MC-LAG interface if adding/removing VLANs on the ICL interface
Product-Group=junos 		On QFX/EX platforms with MC-LAG used, if adding/removing VLANs on the ICL (the interchassis link) interface which is used to forward data packets link between two MC-LAG peers, a continuous MAC move might be seen between the ICL and MC-LAG interface. When this happens, it will cause traffic drop due to the flooding as a consequence of the MAC moves.
 

18.3R3-S6 - List of Known issues

PR Number Synopsis Category: BBE database related issues
1465277 The jdhcpd process might consume a high CPU and no further subscribers can be brought up
Product-Group=junos 		When DHCP sessions are brought up on the EX4300-32F (3 GB DRAM & acting as DHCP relay/server), if any DHCP operation (e.g. request, release, renew coming from the different interface after MAC move of DHCP subscribers) happens at higher rates per second which translates to an update to the DHCP sessions, jdhcpd daemon might consume high CPU (e.g. 70%) and operations may take potentially long time. This will prevent clients from getting the IP addresses and no further subscribers can be brought up. Fix: >> A new memory band for SDB (subscriber database) has been introduced, which will help heal the situation. >> This fix is applicable to EX4300-32F only.
PR Number Synopsis Category: QFX Control Plane VXLAN
1501117 The 12ald process might crash in a rare condition under EVPN-VxLAN scenario.
Product-Group=junos 		On all Junos platforms with EVPN-VxLAN multihoming scenario, if incorrect MAC move happens within the same ESI (Ethernet Segment Identifiers) bridge-domain, the l2ald process might crash. This is a rare timing issue.
PR Number Synopsis Category: Express PFE FW Features
1432116 The FPC might crash when a firewall filter is modified.
Product-Group=junos 		In QFX10K/PTX series platforms, if a firewall filter with multiple match conditions is configured on interfaces which are Up and the firewall filter is modified (either a new action is added or the condition is added/removed etc.), the FPC might crash and restart. It might affect the service/traffic.
PR Number Synopsis Category: User Firewall related issues
1605933 Memory leak at the useridd process might be observed when Integrated User Firewall is configured
Product-Group=junos 		On SRX-Series devices having Integrated User Firewall enabled with Active Directory as the authentication source, memory leak might be observed at the useridd process.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1602005 Upgrade might fail when upgrading from legacy release
Product-Group=junos 		On all platforms (For SRX, only SRX5k with RE-1800x4) while directly upgrading from Junos with FreeBSD 6 (e.g. 15.1X49 or before) to the affected releases, the system will check the USB connection. The upgrading will fail if there is no USB device detected during the upgrading process.
PR Number Synopsis Category: Kernel Multicast Infrastructure
1569957 FPC might crash in a multicast scenario
Product-Group=junos 		On EX Series switches and PTX Series routers with aggregated Ethernet interface(s), FPC crash might be seen after GRES. It might be seen when the device is configured with a multicast scenario. Composite next hops for multicast routes are present over aggregated Ethernet child links. After child member(s) of thea ggregated Ethernet interface flap, there is a sync issue between primary Routing Engine and backup Routing Engine, which causes the FPC to crash.
PR Number Synopsis Category: PTX Broadway based PFE MPLS-LSPs RSVP VPNs tcc ccc software
1466659 IPv6 traffic might be dropped in a Layer 3 VPN network.
Product-Group=junos 		On certain PTX and QFX platforms, IPv6 traffic might get affected in the L3VPN scenario between CEs.
PR Number Synopsis Category: QFX EVPN / VxLAN
1604393 Duplicate packets may be seen during bringing up all the interfaces on the spine switch
Product-Group=junos 		On the QFX5K platforms with EVPN-VxLAN configured, duplicate packets will be seen during bringing down and bringing up all the interfaces on the spine switch where type-2 and type-5 tunnels are established. This issue will persist for a short period until the spine installs the type-2 VTEP (VxLAN Tunnel End Point) towards the leaves.
PR Number Synopsis Category: RPD Next-hop issues including indirect, CNH, and MCNH
1602007 The IPv6 traffic might be impacted on the QFX/PTX platforms when an IPv6 route resolves over a dynamic tunnel
Product-Group=junos 		On the QFX/PTX platforms, if an IPv6 route resolves over a dynamic tunnel, and the forwarding route for the dynamic tunnel is a direct interface route, if the interface is not configured with an IPv6 address, then the dynamic tunnel might be in down state.
PR Number Synopsis Category: Issues related to control plane security
1425231 The rpd will crash continuously if MD5 authentication on any protocols is used along with master-password
Product-Group=junos 		On all Junos platforms running 64-bit mode rpd, the rpd will crash continuously if MD5 authentication on any protocols (such as MD5 authentication for BGP/ISIS/OSPF) is used along with master password.
PR Number Synopsis Category: All Asgard Platform Related Issues
1335526 The ppmd process might crash after an upgrade on SRX platforms
Product-Group=junos 		On SRX platforms with Bidirectional Forwarding Detection (BFD) enabled for multiple protocols (such as OSPF, ISIS, BGP, PIM), the ppmd process might crash after an upgrade.
PR Number Synopsis Category: Junos Automation, Commit/Op/Event and SLAX
1604622 File download using "request system download" might fail
Product-Group=junos 		On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.

Modification History

First publication 2021-09-23