Alert Type
SRN - Software Release Notification
Risk
Risk Description
Low/Notification
software release notification
Impact
Impact Description
Low/Notification
software release notification
Product Affected
ACX, MX, EX, PTX, QFX, vMX, cSRX, vRR, NFX, SRX, vSRX, JWEB.
Alert Description
Junos Software Service Release version 21.4R1-S2 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 21.4R1-S2 is now available.
21.4R1-S2 - List of Fixed issues
PR Number
Synopsis
Category: "agentd" software daemon
1611498
show ldp traffic-statistics interface p2mp is not displaying any traffic stats
Product-Group=junos
Re cli "show ldp traffic-statistics interface p2mp" does not display traffic stats. This issue is applicable to AFT based trio line cards on MX routers.
PR Number
Synopsis
Category: PTX10003 Platform related issues
1654762
[PTX10003] SSD DGM28-B56D81BCBQ || RE 0 SSD Primary minimum supported firmware version mismatch
Product-Group=junos
PTX10003 may show alarm "RE # SSD Primary minimum supported firmware version mismatch" if the routing-engine is installed with Innodisk SSD.
PR Number
Synopsis
Category: Device Configuration Daemon
1637636
[VALE] [USB-Upgrade] JDI_REG_TPTX_REGRESSIONS::The FPCs are not online with USB upgrade from 21.3R1.9 to 21.4R1.11
Product-Group=junos
Problem : After USB upgrade, mastership is getting resolved but FPC's are not coming online. Root Cause : All bme interface are loosing 128.0.0.1 IP address after USB upgrade.
1641585
The ae interface with 400GE gets flapped on adding/removing a 400GE member link
Product-Group=junos
On all platforms supporting 400GE interface, once adding/removing a 400GE interface member to/from an aggregate bundle, that ae interface gets flapped.
PR Number
Synopsis
Category: DNX VPLS
1654172
The LDP sessions might flap in VPLS scenario resulting in PFE errors
Product-Group=junos
On ACX5448 and ACX710 LDP (Label Distribution Protocol) session flaps with multiple VPLS (Virtual Private LAN Service) instances/sessions might trigger a FEC leakage that can exhaust all available FECs as the VPLS FEC index is not freed. Prolonged LDP flap leads to FEC exhaustion in the system with no FEC index to be allocated resulting in PFE errors.
PR Number
Synopsis
Category: Lacp related problems and issues.
1647145
The lacpd may not come up on one of the links in the AE bundle
Product-Group=junos
On EVO platforms during lacpd process restart, child IFD indexes from the port options IFD based data which gets stored in kernel by lacpd, might not get reused due to old indexes weren't freed. When this occurs, new indexes may be generated repeatedly which could cause the port numbers exhaustion problem in AE (Aggregated Ethernet interface) bundle.
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1642743
Ignore the syslog - UI_MOTD_PROPAGATE_ERROR: Unable to propagate login announcement (motd) to /var/etc/motd.junos
Product-Group=junos
An unharmful syslog error message [UI_MOTD_PROPAGATE_ERROR: Unable to propagate login announcement (motd) to /var/etc/motd.junos] is seen in EVO in case someone configures "system login announcement". There is no functional impact and the error message can be ignored.
PR Number
Synopsis
Category: Kernel Tunnel Interface Infrastructure
1644480
OAMD process is not enabled on MX10008/MX10016 causing GRE keepalives adjacency down
Product-Group=junosvae
OAMD process is not enabled to spawn by itself on mx10008/mx10016.
PR Number
Synopsis
Category: MPLS Point-to-Multipoint TE
1654226
The route might stay Up though LSP is down after the primary LSP interface is administratively disabled
Product-Group=junos
After a link-protected LSP undergoes local reversion, the PLR reinstates local (link) protection successfully. However, the LP-MP does not properly detect that its Phop node has signaled itself as the PLR. This causes the downstream node not to properly consider itself as LP-MP. Hence, when there is a second failure on the same link connecting these two nodes, the LSP state is blown off from the downstream node. The downstream node deletes the LSP state and drops traffic arriving on the bypass.
PR Number
Synopsis
Category: RPD route tables, resolver, routing instances, static routes
1635009
Multipath route getting formed for a VPN prefix due to incorrect BGP route selection logic
Product-Group=junos
On all Junos OS and Junos OS Evolved platforms running BGP, when a specific route is received from multiple places under a VRF, multipath route is getting formed even though the BGP route selection algorithm has the active route with higher local preference. Once multipath is formed, the traffic forwarding is happening based on that, and it may result in some traffic going to an unwanted path. Please refer to
KB37775
[juniper.net]
for more details.
PR Number
Synopsis
Category: Remote Access VPN issues on SRX
1611003
Juniper Secure Client: traffic gets dropped during reaching JSC installed CLIENT from SERVER behind gateway in TCP path finder enabled VPN gateway
Product-Group=junos
The issue is when we enable TCP path finder in the VPN gateway, VPN connection is established properly. After VPN connection is established, able to ping from JSC installed CLIENT to SERVER behind gateway, but unable to ping from SERVER behind gateway to JSC installed CLIENT
PR Number
Synopsis
Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1624562
The core files may not get deleted using CLI "file delete /var/core/*/vmcore*"
Product-Group=junos
File delete with regex may fail, if using filename without regex it works.
1627323
Junos Fusion Satellite EX4300 upgrade fails from MX104
Product-Group=junos
Junos Fusion Satelite EX4300 upgrade is performed from MX104 as AD with dual REs. The upgrade may get stuck and not responding.
1637552
During the ephemeral configuration database changes, "mgd" core files might be generated
Product-Group=junos
On all Junos platforms, "mgd" core files might be generated when the ephemeral configuration database changes.
1641025
Unable to access configure exclusive mode after mgd process is killed
Product-Group=junos
On all Junos OS and Junos OS Evolved devices, when copy-config, get-configuration, and discard-change RPCs run in two parallel NETCONF sessions and the database is also accessed in parallel by two NETCONF sessions, it leads to database corruption and mgd-related services might crash.
21.4R1-S2 - List of Known issues
PR Number
Synopsis
Category: "agentd" software daemon
1625806
gNMI set RPC might fail when multiple values within a single gNMI SetRequest are used for the Junos telemetry interface
Product-Group=junos
On all devices, when setting multiple values within a single gNMI SetRequest on the Junos telemetry interface, configuration change request with RPC doesn't succeed. "Set request", which is used in RPC to load configuration and commit and set RPC, has arguments path and value. If GNMI-Path has last-entry as list, it's not handled correctly.
1665516
Na-grpcd process can core during longevity flap tests
Product-Group=junos
Due to race condition happening at the time of streaming and simultaneous disconnection of clients, na-grpcd can core at rare ocassions. This will cause temporary outage of streaming telemetry services. The service will self recover upon restart of the process.
PR Number
Synopsis
Category: MPC10/MPC11 Chassis Category
1594579
Implement FW reload option to MPC10/MPC11 LC in CLI
Product-Group=junos
Provide a CLI to reload firmware after upgrade on Alfaromeo
PR Number
Synopsis
Category: Lacp related problems and issues.
1647145
The lacpd may not come up on one of the links in the AE bundle
Product-Group=junos
On EVO platforms during lacpd process restart, child IFD indexes from the port options IFD based data which gets stored in kernel by lacpd, might not get reused due to old indexes weren't freed. When this occurs, new indexes may be generated repeatedly which could cause the port numbers exhaustion problem in AE (Aggregated Ethernet interface) bundle.
PR Number
Synopsis
Category: ISIS routing protocol
1631738
The rpd might crash after clearing isis database
Product-Group=junos
When ISIS database is cleaned, rpd crash might be observed.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1416334
19.1R1: ISSU: During ISSU from 18.4R1 to 19.1, traffic through IPSEC VPN fails.
Product-Group=junos
On SRX5400, SRX5600, and SRX5800 devices, during in-service software upgrade (ISSU), the IPsec tunnels flap, causing a disruption of traffic. The IPsec tunnels recover automatically after the ISSU process is completed.
PR Number
Synopsis
Category: lacp protocol
1640240
Aggregated Ethernet interface remains up instead of down after deleting loopback and ae interface ip on neighbor while verifying BFD sessions on router
Product-Group=junos
Aggregated Ethernet child interfaces with LACP configurations are not timing out even if peer is gone and not sending any bridge protocol data unit (BPDU).
PR Number
Synopsis
Category: MPC11 ULC platform software related issues.
1647622
Regressions : [Segment Routing] : Ping verification is failing + VERIFY FAILED: verify_ping:ping On Devices: ['r0']
Product-Group=junos
PR is under investigation.
PR Number
Synopsis
Category: VRR (Virtual Route Reflector) for MX
1629242
The "monitor traffic interface" might not work for em2 on vRR/JRR200
Product-Group=junos
On all Junos 20.3+ platforms, the operational command "monitor traffic interface" might not work for em2 interface.
1644806
The video console for vRR might not work after an upgrade to Junos with upgraded FreeBSD
Product-Group=junos
Video console (ttyv0) for vRR might not work when upgraded from legacy JUNOS [release 16.1 using FreeBSD 6.X] to later JUNOS releases [release 20.4 using FreeBSD 10 and later] and vRR is spawned with a video console. Post upgrade serial console (ttyd0 or ttyu0) works without any issues but video console does not work. This happens because video console is not configured to be an active console on vRR on 20.4 release.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Interface
1618891
One-time interface flap might be seen on the QFX5120 platform
Product-Group=junos
On QFX5120 platforms, the flap might be observed on the interface when applying the configuration unrelated to the respective interfaces.
PR Number
Synopsis
Category: ZT/YT pfe l3 forwarding issues
1636785
FRR loss of around 18- 20 seconds seen during LAG bundle failure triggers with scaled configuration
Product-Group=junos
FRR loss of around 18- 20 seconds seen during LAG bundle failure triggers with scaled configuration
PR Number
Synopsis
Category: Trio pfe l3 forwarding issues
1631612
[Indus][Daniel][mx10008] 100% CPU Utilization for ~20 mins on Indus and Daniel cards with FIT configuration after any negative trigger
Product-Group=junos
In scaled setup with high number of nexthops and routes, a config churn could lead to high cpu utilization and delayed convergence for Indus and Daniel MPC linecards
Modification History
First publication 2022-06-10
21.4R1-S2: Software Release Notification for JUNOS Software