Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

ACX, EX, MX, PTX, QFX, NFX, SRX, VRR, vMX, vSRX

Alert Description

Junos Software Service Release version 18.4R3-S11 is now available for download from the Junos software download site
Download Junos Software Service Release:
  1. Go to  Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select  Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 18.4R3-S11 is now available.

18.4R3-S11 - List of Fixed issues

PR Number Synopsis Category: EX2300/3400 platform
1602732 The SFP might be suddenly unplugged due to i2c access read failure happening on EX2300/EX3400 platforms
Product-Group=junos 		On EX2300/EX3400 with busy system scenario, in some rare cases, executing rpc related commands will lead to the data reading failures on i2c (Inter-Integrated Circuit) bus, then the clock/communication issue might happen between SFP and I2C controller. After that, some/all SFP will flap unexpectedly on the system, the traffic loss might be seen.
PR Number Synopsis Category: BBE Remote Access Server
1625858 Radius CoA (Change of Authorization) NAK may not be sent with the configured Source Address in a virtual-router environment
Product-Group=junos 		On all Junos, when running a radius server in multiple routing instances, the CoA NAK messages uses the interface address instead of the configured source address for non-existent sessions. This issue happens when the Radius server is configured in different virtual routers with different settings.
PR Number Synopsis Category: Device Configuration Daemon
1478523 FPC with vpn-localization vpn-core-facing-only configuration might get stuck in ready state after configuration removal or restoration because vt logical interface under MVPN is not cleaned up (physical interface cleanup failed for vt-ifl under MVPN instance).
Product-Group=junos 		On all Junos platform with MVPN scenario, when 'vpn-localization vpn-core-facing-only' is configured, the FPC should be restart when MVPN configuration is changed. But if there is a large-scale configuration that includes "vpn-localization vpn-core-facing-only" and vt-ifl under mvpn instance, when performing configuration removal/restoration(load baseline, commit, rollback 1, commit again), the FPC might be stuck in ready state due to cleanup failure of vt-ifl under MVPN instance.
PR Number Synopsis Category: jdhcpd daemon
1588813 Delegated prefix ipv6 address is missing in accounting stop messages
Product-Group=junos 		DP (Delegated prefix) is cleared when underlying session (dhcpv6 over ppp) ifl is deconfigured. DP is not seen in Radius accounting stop messages.
PR Number Synopsis Category: Layer2 forwarding on EX/NTF/PTX/QFX
1599094 The l2ald process may crash due to memory leak when all active interfaces in a VLAN are unstable
Product-Group=junos 		When none of the constituent active interfaces on a VLAN is stable, memory leak may occur which might eventually lead l2ald to crash. No memory leak will be seen if one or some constituent interfaces are flapping but the VLAN has at least one active stable interface overall.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1570148 A false error related to insufficient space might appear while installing a Junos image that is corrupted
Product-Group=junos 		On all Junos platforms, the upgrade might fail with a false error related to insufficient space when trying to install Junos from a corrupted package.
PR Number Synopsis Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1479930 The lasers may keep lasting after the device reboots
Product-Group=junos 		On the QFX5210-64C platforms, the laser on the optic "QSFP+-4X10G-LR" may still keep lasting after rebooting even the port is disabled via CLI command before restarting.
PR Number Synopsis Category: QFX L2 PFE
1637249 Configuring L2PT on a transit switch in a Q-in-Q environment breaks L2PT for other S-VLANs
Product-Group=junos 		When L2PT (Layer2 Protocol Tunneling) is enabled on a transit switch using SP style configuration, protocol convergence between end nodes might fail.
PR Number Synopsis Category: QFX EVPN / VxLAN
1561588 Dcpfe process might crash on after committing EVPN-VXLAN profile configuration and ARP resolution may fail causing traffic issues.
Product-Group=junos 		Dcpfe process might crash on after committing EVPN-VXLAN profile configuration and ARP resolution may fail causing traffic issues.
1611488 Inter-vlan connectivity might be lost in an EVPN-VXLAN with CRB topology
Product-Group=junos 		In a fabric consisting of 2 or more spines and QFX5k as leaf switches in an EVPN-VXLAN CRB(Ehernet VPN-Virtual Extensible LAN Centrally-routed Bridging) overlay topology with VGA(Virtual Gateway Address) configured on the spine, inter-vlan connectivity with the hosts connected to leaf switches might be lost when the interfaces on second spine connected to leaf switches is enabled.
PR Number Synopsis Category: QFX5100 Virtual Chassis
1619997 Disabled VCP (Virtual chassis port) will be UP after the optic on it is reseated
Product-Group=junos 		On all EX and QFX platforms, disabled VCP(Virtual Chassis Port) using the command "request virtual-chassis vc-port set interface vcp-xx/xx/xx disable member XX" will be up after the optic on it is reseated. It should keep disabling VC on the port. After it is UP and then a Master switchover is performed, the port will be disabled.
PR Number Synopsis Category: RPD route tables, resolver, routing instances, static routes
1635009 Multipath route getting formed for a VPN prefix due to incorrect BGP route selection logic
Product-Group=junos 		On all Junos and EVO platforms running BGP, when a specific route is received from multiple places under a VRF, multipath route is getting formed even though the BGP route selection algorithm has the active route with higher local preference. Once multipath is formed, the traffic forwarding is happening based on that, and it may result in some traffic going to an unwanted path. Please refer to KB37775 [juniper.net] for more details.
PR Number Synopsis Category: SRX5XX platform
1575231 The fxp0 interface of an SRX550 in cluster might become unreachable from an external network
Product-Group=junos 		On SRX550 configured with chassis cluster, fxp0 interfaces might not be reachable from external management interface when the fxp0 and redundant Ethernet(reth) interfaces are in separate routing instances. This is because there is no ARP entry for the reth interface in fxp0 ARP table. As a result of this, SRX cluster cannot be accessed from an external management network.
PR Number Synopsis Category: MX10K platform
1481054 100G interface may randomly fail to come up after maintenance operations
Product-Group=junos 		On MX10008/MX10016 platforms with QSFP-100GBASE-LR4 optics, these 100GE interfaces may randomly fail to come up after maintenance operations (such as power cycle, software upgrade, or reboot of RE/FPC, etc) due to QSFP hardware initialization failure.
 

18.4R3-S11 - List of Known issues

PR Number Synopsis Category: Software build tools (packaging, makefiles, et. al.)
1480252 On EX4650 platform, after using force reboot, the output of CLI command 'show version' might show the model as QFX5120-48y-8c and after committing the http services, J-Web of the device might be inaccessible due to model issue.
Product-Group=junos 		On EX4650 platform, after using force reboot, the output of CLI command 'show version' might show the model as QFX5120-48y-8c and after committing the http services, J-Web of the device might be inaccessible due to model issue.
PR Number Synopsis Category: EX4300 PFE
1630935 Application of firewall filters might break connectivity towards the hosts on EX4300
Product-Group=junos 		On EX4300 platforms except EX4300-MP/EX4300-48MP, once input/output firewall filters are applied to the interfaces under family ethernet-switching, it might result in disrupting the connectivity towards few hosts connected to the device and thus impacts the related traffic.
PR Number Synopsis Category: EX2300/3400 PFE
1564941 The DHCP client might not obtain IP address when dhcp-security is configured
Product-Group=junos 		On EX2300 platforms, if enterprise Style (EP) and service provider (SP) style configurations are mixed on a trunk interface, the DHCP client under SP style configuration might not obtain IP address when dhcp-security is enabled on one of the trunk VLANs.
1627857 Packet drop might be observed when L2PT is configured on transit device
Product-Group=junos 		On ACX/EX/QFX Junos platforms with Q-in-Q setup in SP(Service Provider) style configuration, when L2PT (Layer2 Protocol Tunneling) is enabled on a transit switch, mac rewritten packets might get dropped on the transit device due to which protocol (for example, STP) convergence fails between the end nodes and thus L2PT breakage could be observed for service-VLANs included in the environment.
PR Number Synopsis Category: MPC5/6E PFE ISSU software
1542882 The JNH memory leak could be observed on MPCs or MICs
Product-Group=junos 		On all Junos platforms with Trio-based line cards, a Junos next-hop (JNH) memory leak might be observed. This issue is due to the counters applications under firewall filters taking the additional memory space from the shared JNH pool. In an extreme scenario, this could also lead to FPC crash.
PR Number Synopsis Category: Control Plane for Node Virtualization
1576173 "CHASSISD_FRU_IPC_WRITE_ERROR: fru_send_msg: FRU GNF 2, errno 40, Message too long" may appear periodically in the chassisd logs
Product-Group=junos 		"CHASSISD_FRU_IPC_WRITE_ERROR: fru_send_msg: FRU GNF 2, errno 40, Message too long" may appear periodically in the chassisd logs
PR Number Synopsis Category: EX driver issues
1600291 The SFP-T port might stop forwarding traffic on EX4600 platforms
Product-Group=junos 		On EX4600, after performing an upgrade, the peer device is rebooted, the peer interface is disabled/enabled or rebooting EX4600, then the SFP-T port on EX4600 might remain in up state but could not forward traffic.
PR Number Synopsis Category: Enhanced Broadband Edge support for firewall
1577845 Orphan filter logs found on MX with BNG configuration.
Product-Group=junos 		In a busy system with quick updates to the flows, usually in rare condition like non-graceful GRES (master RE hardware failure), a function was incorrectly being called might result in failing flow publishes to PFE and this can lead to 'orphan filter' issue.
PR Number Synopsis Category: Port-based link layer security services and protocols that a
1502946 The MACSEC decryption failures might be counted as input errors (CRC errors).
Product-Group=junos 		On MX platforms where JNP-MIC1-MACSEC/MIC-MACSEC-MRATE MIC are used, disabling/deleting MACSEC on an interface on the mentioned MIC might cause CRC/framing errors increment when there is traffic flowing through the interface. With this PR fix, any packet that fails MACSEC decryption will get dropped in MACSEC device itself which is sitting on the MIC and will not get forwarded to host ASIC. As a result, after this fix, CRC/framing error counters will not increase for frames that fail MACSEC decryption.
PR Number Synopsis Category: FreeBSD Kernel Infrastructure
1579331 EX4400: Under some conditions, the FPGA reset reason may be incorrectly shown in console logs as 0.
Product-Group=junos 		EX4400: Under some special conditions, such as boot from OAM volume following a graceful/warm reboot, the FPGA reset reason incorrectly shown in console logs as 0.
PR Number Synopsis Category: QFX L2 PFE
1560086 On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings.
Product-Group=junos 		On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings.
PR Number Synopsis Category: QFX5100 Platform optics
1606003 QFX5100 : Generate an optical power after detached and attached QSFP on disabled interface.
Product-Group=junos 		On QFX5100, optical power is seen after detached and attached QSFP on disable interface.
PR Number Synopsis Category: KRT Queue issues within RPD
1572130 High CPU usage may occur on rpd for routes that use static subscriber
Product-Group=junos 		On all Junos platforms in subscriber scenario, routes that use static subscriber demux or ge interfaces as qualified next-hop may be stuck due to the error "Destination address required" after GRES/ISSU. This may cause high CPU usage for rpd. The rpd restarts itself and system recovers automatically.
PR Number Synopsis Category: RPD route tables, resolver, routing instances, static routes
1346984 There are scenarios where an application allocates and caches next-hop templates. This causes the next-hop template cache to grow continuously. But when the application clears its local cache, memory is freed to the next-hop template cache. But the next-hop template cache does not have the code to shrink the cache and free memory back. So the next-hop template memory is trapped in the cache and cannot be used for other purposes. But if the same BGP routes and next-hops come up again, they will reuse the tem
Product-Group=junos 		There are scenario where application allocates and caches nexthop templates. This causes NH template cache to grow continuously. But when application clears their local cache, then memory is freed to NH template cache. But the NH template cache does not have code to shrink the cache and free memory back. So the NH template memory is trapped in the cache and cannot be used for other purposes. But if same BGP routes and nexthops come up again, they will reuse the templates from cache and not consume additional memory.
PR Number Synopsis Category: Generic platform and infra issues for MS-MIC and MS-MPC(XLP)
1489942 Prolonged flow control might occur with MS-MPC or MS-MIC.
Product-Group=junos 		On MX platforms with MS-MPC/MS-MIC, datapath is getting blocked due to incorrect handling of fragment packets with payload size 0. When the datapath is blocked for more than 5 seconds, it is identified as Prolonged flow control, and the pic is rebooted. Core dump is generated if dump-on-flow-control is enabled.
PR Number Synopsis Category: Trio LU, IX, QX, MQ chip drivers, ucode & related SW
1636060 Continuous Fabric Link Sanity Check interrupts in intervals of weeks might cause at some point fabric input block traffic black-holing
Product-Group=junos 		While during each Fabric input Link Sanity Checks, several other events are evaluated if traffic forwarding is compromised. Like if this event is triggered twice within 24 hours. During several consecutive Link Sanity Check interrupts over several weeks, traffic received at the fabric input side might not be forwarded anymore. Junos Software detection logic for such events have been enhanced to raise the severity to major if this interrupt is detected the 3rd time in sequence regardless which rate.
PR Number Synopsis Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1452136 The mgd might crash when you use the replace pattern command.
Product-Group=junos 		When you use the "replace pattern" command to replace the name in the apply-group, the mgd crashes.
PR Number Synopsis Category: Virtual Router Redundancy Protocol
1629996 Interface inet egress filter not able to capture VRRP PDU from VRRP master
Product-Group=junos 		This is working as per design for VRRP host outbound packets injected on plain L3 interfaces, inet/inet6 on ge-/xe-/et- interfaces VRRP TX on L3 interfaces are L2 injects. They are fully cooked packets which are sent out of the port without any service level (IP/IPv6) feature execution. This is expected for the VRRP TX packets. For VRRP over irb over layer 2 interfaces. Layer 2 filter can be used to match VRRP packets

 

Modification History

First publication 2022-01-24