Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, EX, MX, NFX, PTX, QFX, SRX, VRR, vSRX
Alert Description
Junos Software Service Release version 19.3R3-S6 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 19.3R3-S6 is now available.
19.3R3-S6 - List of Fixed issues
PR Number
Synopsis
Category: EX4300 PFE
1630616
The ARP resolution may get failed on VRRP enabled interface
Product-Group=junos
On EX4300, ARP resolution against virtual IP on VRRP enabled interface may get fail with "no-arp-trap" is configured due to which service may get affected.
1630935
Application of firewall filters might break connectivity towards the hosts on EX4300
Product-Group=junos
On EX4300 platforms except EX4300-MP/EX4300-48MP, once input/output firewall filters are applied to the interfaces under family ethernet-switching, it might result in disrupting the connectivity towards few hosts connected to the device and thus impacts the related traffic.
PR Number
Synopsis
Category: EX2300/3400 PFE
1633115
Traffic loss for 20 sec on VC with AE link-protection when rebooting backup FPC
Product-Group=junos
On EX/QFX series Virtual Chassis (VC) with Aggregated Ethernet (AE) link-protection configured, traffic loss could be seen for around 20 sec when the traffic is passing through backup link and backup FPC is rebooted.
PR Number
Synopsis
Category: EX2300/3400 platform
1627673
System time may not be updated after reboot on EX2300 platform
Product-Group=junos
System time may not be updated after reboot. Symptoms seen are: 1) After USB image installation, CLI is not working fine. 2) When DHCP persistence is configured with DHCP security and device reboots, the lease time values may show a high lease value post reboot.
1649338
The VC port might not be formed automatically after Zeroize
Product-Group=junos
On all EX3400 platforms, the Virtual-Chassis (VC) port might not be formed automatically after executing the command "request system zeroize".
PR Number
Synopsis
Category: QFX Multichassis Link Aggregrate
1639713
Traffic loss might be seen for the mac addresses learned on the ICL interface
Product-Group=junos
On all QFX platforms configured with Multichassis Link Aggregation Groups (MC-LAG), when the Interchassis Link (ICL) and mc-ae interfaces are flapped and BUM traffic is sent to mc-ae, some mac entries are learned on the ICL interface with flag DLR. This may cause traffic loss with certain traffic flow.
PR Number
Synopsis
Category: BBE Statistics daemon & libraries
1646846
The bbe-statsd daemon might crash after ISSU
Product-Group=junos
On all MX platforms with the subscriber management scenario, when ISSU happens from pre 18.4 to post 18.4, subscribers that re-logged in pre 18.4 are called preNG subscribers. For any of the preNG subscribers, if the ipv4/ipv6 family interface goes up/down, the issue is triggered.
PR Number
Synopsis
Category: EVPN Layer-2 Forwarding
1586402
The BUM traffic might lose after triggering NSR in EVPN-MPLS or EVPN-ETREE scenario
Product-Group=junos
In EVPN-MPLS or EVPN-ETREE scenario, the EVPN allocates an IM label (Inclusive multicast route labels) per VLAN, and the IM labels including the EVI name and VLAN ID are mirrored to the standby RE (routing engine). If disabling/enabling NSR or switching RE mastership with NSR, the l2ad activated in the new master RE might not create the IM next-hop and locally-learned MAC addresses along with new underlay MPLS next-hop created by rpd for the remote EVPN PE, then the remote EVPN PE might be missed from the flood next-hop group on the EVPN instances, it might cause the BUM traffic to lose between the EVPN PEs.
PR Number
Synopsis
Category: Express PFE FW Features
1637328
Filters with Unsupported match/action by kernel filters, will not be learnt by firewall MIB daemon.
Product-Group=junosvae
Filters with Unsupported match/action by kernel filters, will not be learnt by firewall MIB daemon.
PR Number
Synopsis
Category: Express PFE Services including JTI, TOE, HostPath, Jflow
1637364
True Outgoing Interface in ECMP traffic is not getting reported correctly by jflow
Product-Group=junos
On Junos PTX series, True Outgoing Interface(OIF) reporting might not happen correctly for ECMP traffic when ingress sampling is configured on AE interface.
PR Number
Synopsis
Category: Integrated Routing & Bridging (IRB) module
1623262
Host generated IPv4 traffic sent over IPv6 next-hop with IRB interface might get dropped
Product-Group=junos
On all Junos platforms that support IRB(Integrated routing and bridging), when host originated IPv4 traffic is sent over IPv6 next-hop with IRB interface, the traffic might get dropped because of ether-type mismatch. This is because the ether-type field in L2 header is set to IPv6 (instead of IPv4) always due to the IPv6 next hop.
PR Number
Synopsis
Category: Flow Module
1601806
On SRX-Series devices using Unified Policies with IPv6, when attempting to reject certain dynamic-applications a flowd core could be generated
Product-Group=junos
On SRX-Series devices using Unified Policies with IPv6, when attempting to reject certain dynamic-applications a flowd core could be generated.
PR Number
Synopsis
Category: High Availability/NSRP/VRRP
1651501
On all SRX 5K products, when chassis cluster is configured and there's a hardware issue with the CP (Central Point), failover might not happen correctly
Product-Group=junos
On all SRX 5K products, when chassis cluster is configured and there's a hardware issue with the CP (Central Point), failover might not happen correctly
PR Number
Synopsis
Category: User Firewall related issues
1637548
Unable to connect to domain controller on installing Microsoft KB update
Product-Group=junos
On all SRX platforms, when the User Identification feature is used with Active Directory, after the Domain Controller server installs updates related to Microsoft's KB article
KB5004442
[juniper.net]
, SRX is no longer able to connect to it.
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1639991
Recovery snapshot might fail if OAM volume is already mounted
Product-Group=junos
Recovery snapshot might fail with the error "The OAM volume is too small to store a snapshot" if OAM volume is already mounted.
PR Number
Synopsis
Category: Kernel Multicast Infrastructure
1608311
Intermittent p2mp traffic drop might be seen in MVPN scenario
Product-Group=junos
On MX platforms that support enhanced IP, intermittent p2mp traffic drop might be seen in the case of MVPN with p2mp. When the multicast composite NH involves unicast NH pointing to pseudo interfaces like interface vt-, irb or lsi and the other unicast next-hop is spread across multiple line cards/PFEs, if a new member joins or an existing member leaves the multicast stream traffic drop might be seen.
PR Number
Synopsis
Category: Kernel MPLS / Tag / P2MP Infrastructure
1654798
RE kernel crash might be observed in the one-hop-LSP MPLS scenario with RE outbound traffic if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally
Product-Group=junos
On all Junos platforms, if 'routing-option resolution preserve-nexthop-hierarchy' is configured globally, Routing-engine (RE) kernel crash might be observed in the one-hop-LSP Multiprotocol Label Switching (MPLS) scenario with RE outbound traffic.
PR Number
Synopsis
Category: vMX Data Plane Issues
1641119
IPv4 and v6 packet header corruption could happen with some sampling scenario
Product-Group=junos
On vMX/MX150/NFX150 platforms, when sampling is enabled on input WAN interfaces and the sampled packet go out through a GRE tunnel, IPv4/6 header corruption may happen. Due to IP header corruption, remote router reports L3 incompletes at receiving interface.
PR Number
Synopsis
Category: Protocol Independant Multicast
1621358
Initial multicast register packets may get dropped
Product-Group=junos
On MX platforms, initial multicast register packets may get dropped, this may affect multicast services.
PR Number
Synopsis
Category: QFX L2 PFE
1633452
The FBF filtered VLAN traffic will not be passed properly to the forwarding routing instances over AE interfaces on QFX5K/EX4600/EX4650 platforms
Product-Group=junos
On QFX5K/EX4600/EX4650 platforms with IPv4 Filter-based forwarding (FBF) scenario, when IPv4 FBF is used with 802.1Q VLAN tag enabled layer-3 AE interfaces, the VLAN filtered configuration enabled by FBF filter will be stored in the VLAN filter processor (VFP) ternary content addressable memory (TCAM). But, in some cases of adding/deleting the configuration of the routing instances (then routing-instance) in FBF filter, the stale allocated entries in VFP TCAM might not be deleted from the system, the memory slices of VFP TCAM will be exhausted until it is run out. Finally, there are not enough memory slices left to store the VLAN filtered information for the forwarding routing instances, then the FBF filtered VLAN traffic will not be forwarded correctly since the FBF filters might not be programmed/processed on the system.
1638619
Targeted broadcast or WOL feature may not work on QFX 5k platforms
Product-Group=junos
On QFX platforms, Wake On LAN(WOL) feature stops working as the affected platforms erroneously process such packets. This might cause a blackhole in the network for such traffic.
PR Number
Synopsis
Category: SRX-1RU platfom related protocol, QoS, filtering features et
1541668
SRX4600 PEM code has a bug which might raise false fan failure alarm
Product-Group=junosvae
SRX4600 PEM code has a bug which might raise false fan failure alarm when other status is wrong.
PR Number
Synopsis
Category: Issues related to port-mirroring functionality on JUNOS
1634570
The fpc might crash on enabling port-mirroring
Product-Group=junos
On vMX/MX150 platforms, if port-mirroring is enabled with scaled flows (10k or more flows for immediate crash) and throughput scenario, the fpc crash might be observed. However, the issue could be restored after self-reboot.
PR Number
Synopsis
Category: PTX/QFX100002/8/16 interface software
1600768
CRC errors increase continuously after interface flap
Product-Group=junos
On PTX10008 and PTX10016 routers with LC1101, LC1102, or LC1103 line cards, interface flapping might cause the interface CRC errors to increase continuously. Then traffic loss might be seen. This is a rare timing issue.
PR Number
Synopsis
Category: VMHOST platforms software
1605971
VM host platforms might boot exactly 30 minutes after executing 'request vmhost halt' command
Product-Group=junos
On all VM host platforms running Junos OS Release 19.3R1 onwards, when 'request vmhost halt' is executed, the system reboots after exactly 30 minutes instead of maintaining the halt condition.
19.3R3-S6 - List of Known issues
PR Number
Synopsis
Category: EX2300/3400 PFE
1564941
The DHCP client might not obtain IP address when dhcp-security is configured
Product-Group=junos
On EX2300 platforms, if enterprise Style (EP) and service provider (SP) style configurations are mixed on a trunk interface, the DHCP client under SP style configuration might not obtain IP address when dhcp-security is enabled on one of the trunk VLANs.
PR Number
Synopsis
Category: Sflow on QFX 5100,5200, 5110
1598239
Sflow impacts on ICMP traffic on QFX5XXX platforms
Product-Group=junos
On QFX5XXX platforms in sflow scenario, CPU/host bound ICMP traffic from or to the sampled interface might be dropped, which might have impact on services based on ICMP probes like RPM.
PR Number
Synopsis
Category: EVPN control plane issues
1600310
Bridge mac-table learning entries might not be as expected for the EVPN-MPLS routing instance
Product-Group=junos
When using the logical tunnel (lt-) interface to stitch EVPN-MPLS and EVPN-VxLAN, bridge mac-table learning entries might not be as expected for the EVPN-MPLS routing instance. This is due to the AD (Auto-Discovery) route per ESI with VxLAN encapsulation community which is ignored on MPLS routing instance.
PR Number
Synopsis
Category: Platform infra to support jvision
1502260
Sensord crashes on MPC10E even telemetry is not enabled
Product-Group=junos
With scale interface flap and network churn, sensord core might be generated and sensord crash occurs on MPC10E even if there is no telemetry configured. It could cause MPC10E restart and affect service/traffic through this card.
PR Number
Synopsis
Category: lacp protocol
1640240
Aggregated Ethernet interface remains up instead of down after deleting loopback and ae interface ip on neighbor while verifying BFD sessions on router
Product-Group=junos
Aggregated Ethernet child interfaces with LACP configurations are not timing out even if peer is gone and not sending any bridge protocol data unit (BPDU).
PR Number
Synopsis
Category: Track veHostd, vmm-sdk issues on Mt Rainier RE
1448413
The vehostd application fails to generate a minor alarm.
Product-Group=junos
On Junos OS platforms with NG-RE installed, the process vehostd may crash without the core file and automatic restart of vehostd may fail. Vehostd is a daemon for managing the lifecycle of system-critical Junos OS VMs in the system. If the process vehostd gets in crash state, it will impact the management of Junos OS VMs.
PR Number
Synopsis
Category: FreeBSD Kernel Infrastructure
1555748
Devices might get stuck in "OK" prompt while loading the image.
Product-Group=junos
EX, MX, PTX & SRX series devices may stuck in the "OK" prompt while loading image for certain junos versions like 18.3R1, 21.1R1.
1602005
Upgrade might fail when upgrading from legacy release
Product-Group=junos
On all platforms while directly upgrading from Junos with FreeBSD 6 (e.g. 15.1X49 or before) to the affected releases, the system will check the USB connection. The upgrading will fail if there is no USB device detected during the upgrading process.
PR Number
Synopsis
Category: Kernel Tunnel Interface Infrastructure
1609630
BFD over GRE tunnel interface stuck in "init" state with GRES enabled
Product-Group=junos
On all JUNOS platforms, when disabling the physical interface where GRE tunnels is established and performing a GRES (Graceful Routing Engine Switchover). After GRES, enabling the physical interface will cause BFD to become stuck in init state.
PR Number
Synopsis
Category: Chassis mgmt for all QFX systems - chassis MIB, alarms, CLI
1584902
The the QFX5000 and QFX10000 lines of switches might hang for some time after reboot
Product-Group=junosvae
On the QFX5000 and QFX10000 lines of switches, during reboot in certain instances the device might get into a state where the Junos virtual machine hangs until the NMI is triggered and reboots fully. The system recovers after approximately 30 minutes.
PR Number
Synopsis
Category: QFX PFE
1576060
On the QFX5100-48T switch, the 10G interface might be auto-negotiated at 1G speed instead of 10G
Product-Group=junos
On the QFX5100-48T switch, auto-negotiation might fail to work and the 10G interface might be auto-negotiated at 1G speed instead of 10G. This issue might cause a link down.
PR Number
Synopsis
Category: QFX L2 PFE
1560086
On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings.
Product-Group=junos
On the QFX5200 line of switches, the pseudorandom binary sequence (PRBS) test fails for 100GbE interfaces with the default settings.
PR Number
Synopsis
Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1570676
When traffic towards client gets fragmented PPP/LNS Radius downlink accounting inaccurate with peer LCP negotiated MRU.
Product-Group=junos
When traffic towards client gets fragmented PPP/LNS Radius downlink accounting inaccurate. As of now this is unsupported.
PR Number
Synopsis
Category: Junos Automation, Commit/Op/Event and SLAX
1604622
File download using "request system download" might fail
Product-Group=junos
On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.
Modification History
First publication 2022-04-26
19.3R3-S6: Software Release Notification