Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, MX, EX, PTX, QFX, vMX, vRR, NFX, SRX, vSRX.
Alert Description
Junos Software Service Release version 22.1R1-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 22.1R1-S1 is now available.
22.1R1-S1 - List of Fixed issues
PR Number
Synopsis
Category: JUNOS kernel/ukernel changes for ACX
1639459
Odin: When panic command issued, dump is complete, but while rebooting the box is stuck
Product-Group=junos
A missing component in the dump kernel prevented the ACX-710 from rebooting after dumping completed.
1657840
The validation fails if a media install Junos upgrade is performed
Product-Group=junos
On all Junos platforms, the Junos upgrade fails due to validation error post reboot. This issue happens due to invalid system date. Extreme care is needed when doing media install (USB or netboot) to avoid problems caused by faulty date.
PR Number
Synopsis
Category: agentd software daemon
1657886
The 'agentd' and 'eventd' process might cause high CPU utilization and may also affect Telemetry services
Product-Group=junos
On all Junos and Junos Evolved platforms, high CPU utilization is observed with the 'agentd' and 'eventd' processes. This is caused by 'rpd' issues.
PR Number
Synopsis
Category: BBE Autoconfigured DVLAN related issues
1643863
[subscriber_services] [all] : :JDI-REG-SUBSCRIBER_SERVICES:mx480:DHCP:Verify dhcp client count failed and 64k DHCPv4 subscribers are not bound as expected count
Product-Group=junos
On DHCP Subscribers stacked over AutoConf (dynamic) Vlans shows subscriber summary different count that actual DHCP bindings.
PR Number
Synopsis
Category: Border Gateway Protocol
1653356
BGP PIC Protection is not working in virtual router
Product-Group=junos
BGP PIC Protection is not working in virtual router.
PR Number
Synopsis
Category: Track PRs in BGP BMP area & is part of BGP inside RPD.
1653130
The rpd might crash when BMP rib-out monitoring is configured for flow-spec route
Product-Group=junos
On all Junos and Evolved platforms, rpd crash might be seen when BGP monitoring protocol (BMP) rib-out monitoring is configured for the flow-spec route. Since there is no next-hop for flow-spec route core might be seen while generating rib-out feed. Traffic loss might be seen due to this crash.
PR Number
Synopsis
Category: Chassis specific platform issues on MX304
1655827
MX304: Chassis : RSI command execution getting aborted due to error message - "[: JUNIPER: unexpected operator"
Product-Group=junos
"request support information" command show "[: JUNIPER: unexpected operator" error message at end of the command output. This error messages in not harmful.
PR Number
Synopsis
Category: VPLS - Including signalling, programming and MAC part
1654172
The LDP sessions might flap in VPLS scenario resulting in PFE errors
Product-Group=junos
On ACX5448 and ACX710 LDP (Label Distribution Protocol) session flaps with multiple VPLS (Virtual Private LAN Service) instances/sessions might trigger a FEC leakage that can exhaust all available FECs as the VPLS FEC index is not freed. Prolonged LDP flap leads to FEC exhaustion in the system with no FEC index to be allocated resulting in PFE errors.
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1650151
The vlan-tagging configuration might cause the blank interface configurations after a system reboot or upgrade
Product-Group=junos
On all EVO platforms, when vlan-tagging is configured on an interface via groups, 'commit' works fine. But, when upgrading to a newer version, the configuration validation fails. After reboot or upgrade, the device may go into a bad state and it might impact traffic as a result of initial configuration failure.
PR Number
Synopsis
Category: PR for Lagavuling platform
1653499
Additional debug logs may be printed onto device console, when device is booted from a bootable USB
Product-Group=junos
When EX4400 device is booted from a USB image with 22.1R1.8 software, additional debug log messages may be printed onto the console of the EX4400 device.
PR Number
Synopsis
Category: Flow Module
1651836
The traffic might get lost when using dedicated HA fabric link
Product-Group=junos
When dedicated fabric High Availability (HA) link is configured, there might be random device crash causing traffic loss. However, this can be avoided by configuring revenue port as fabric link.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1655355
The device enabled with FIPS mode and rebooted the system fails to boot
Product-Group=junos
On all VMhost platforms with LTS19, the system fails to boot up when FIPS mode is enabled.
PR Number
Synopsis
Category: Multicast Listener Discovery
1656311
The rpd process crash might be observed with PIM configured
Product-Group=junos
On all Junos and Junos OS Evolved platforms, if the interface is enabled with Protocol Independent Multicast (PIM) (enables Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) implicitly) and the same interface is configured under a non-forwarding instance, then the process rpd crash might be observed.
PR Number
Synopsis
Category: Express Paradise PFE L3 Features
1649586
Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations (CVE-2022-22202)
Product-Group=junos
An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. On affected PTX Series devices, processing specific MPLS packets received on an interface with multiple units configured may cause FPC to restart unexpectedly. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Please refer to https://kb.juniper.net/
JSA69706
[juniper.net]
for more information.
PR Number
Synopsis
Category: vMX Platform Infrastructure related issue tracking
1634908
LACP interface might go down when a sub-interface configuration is added and committed to the AE interface
Product-Group=junos
On all MX150 platforms, when an Aggregate Ethernet (AE) interface is configured with LACP and adding a sub-interface configuration under the AE interface causes the LACP down leads to traffic loss.
PR Number
Synopsis
Category: PRs for SFW, CGNAT on MS-MIC/MS-MPC (XLP)
1648428
The mspmand process crashes on MX router with MS-MPC card
Product-Group=junos
On Junos MX platforms with MS-MPC (Multi-Service Modular Port Concentrators) cards, the mspmand process may crash when PCP (Port Control Protocol) request is received for a subscriber whose subscriber NAT (Network Address Translation) session has ended and session mappings have been deleted. The crash might cause a service impact however, the system restores to normal functioning without manual intervention.
1652356
MTU-v6 on DS-Lite is not working as expected
Product-Group=junos
On all MX platforms supporting MS-MPC/MS-MIC, the MTU-v6 knob on DS-Lite (Dual-Stack Lite) is not working as expected. This option sets the maximum transmission unit when encapsulating IPv4 packets into IPv6. If the final length is greater than the configured MTU, the IPv6 packet is getting fragmented incorrectly as the PFE (Packet Forwarding Engine) is removing the IPv6 header size from the configured MTU-v6 value on the softwire configuration which is not expected.
PR Number
Synopsis
Category: Bug and Review Tracking for Segment routing traffic eng
1655518
SRv6 END.DT46 and END.DT4 configuration might not be Supported
Product-Group=junos
On PTX Junos platforms in Segment Routing IPV6 (SRv6) scenario, when END.DT46 and END.DT4 configured, traffic might be dropped.
PR Number
Synopsis
Category: security-intelligence feature on SRX
1638923
Kernel panic might be seen during boot
Product-Group=junos
On Junos platforms kernel panic might be seen during the boot sequence.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1627323
Junos Fusion Satellite EX4300 upgrade fails from Aggregate Device MX104
Product-Group=junos
Junos Fusion Satellite Device (SD) EX4300 upgrade fails from Aggregate Device (AD) MX104 with dual-RE.
1637552
During the ephemeral configuration database changes, "mgd" core files might be generated
Product-Group=junos
On all Junos platforms, "mgd" core files might be generated when the ephemeral configuration database changes.
1641025
Unable to access configure exclusive mode after mgd process is killed
Product-Group=junos
On all Junos OS and Junos OS Evolved devices, when copy-config, get-configuration, and discard-change RPCs run in two parallel NETCONF sessions and the database is also accessed in parallel by two NETCONF sessions, it leads to database corruption and mgd-related services might crash.
1643209
Commit fails with message "statement does not match patch" due to TOD mismatches between Primary RE and Backup RE
Product-Group=junos
When time-zone for the router is set as EST5EDT and if the TOD (Time-Of-Day) values under "event-options generate-events" are modified in different time zones, that is TOD configurations created on EST time zones are getting modified in EDT time zone, then it can cause commit failures. When such commits happens at different time-zones, internally, it generates a patch file and tries to load the patch at both RE. But due to different time zone, it is not getting excepted by backup RE.
1652605
JDI-RCT : QFX:5120 :MCLAG : l2ald core observed at ?0x0000000000676fed in l2ald_config_read_bridgedomain (insttype=< optimized out>, obj=0x0, lr=0x0, rtt=0x3317010) at l2ald/l2ald_config_bd.c:2607 ? after loading test configs.
Product-Group=junos
This is a regression of PR1588842. When a top-level (first level) dop exists only in any of the databases (static/one ephemeral database), then instead of creating a merge_dop operation, we proceed with the walk with the dop corresponding to that database.
22.1R1-S1 - List of Known issues
PR Number
Synopsis
Category: functionality related to Broadband Remote Access Server
1655832
JDI-RCT:BBE:Authd core@thr_kill () at thr_kill.S:3
Product-Group=junos
During ISSU upgrade, intermittent AUTHD core is seen. Core does not have a functional impact
PR Number
Synopsis
Category: Chassis specific platform issues on MX304
1639602
MX304: LC: Temperature value stuck at "Testing" under show chassis fpc output, after powering off PFE-0 & 1
Product-Group=junos
Unlike other Juniper FPCs, there is no temperature sensor for Exhaust-A/Exhaust-B in Bugatti. So, the temperature field in the output of the "show chassis fpc" displays as Testing. This is just a CLI problem otherwise there is no functionality impact due to this.
1643078
MX304: Options to configure vxlan-gpe under tunnel encapsulation hierarchy are missing.
Product-Group=junosvae
Options to configure vxlan will not be available under "set interfaces fti unit tunnel encapsulation"
PR Number
Synopsis
Category: MX304 line card platform software issues are tracked with
1639679
MX304: LC: AFT command "show sandbox tokens" shows output in endless loop, after powering off PFE-0 & 1.
Product-Group=junos
When pfe 0 and 1 are powered off, the new pfh interface(pfh-0/1/0) is not getting created with pfeId 2. Still, the old pfh-0/0/0 is created. Debug is still in progress.
PR Number
Synopsis
Category: Class of Service
1666010
Creating AE interfaces in per-unit-scheduler mode and committing COS config on AE IFLs in a single commit can lead to race-conditions
Product-Group=junos
The AE interfaces in per-unit-scheduler mode and committing COS config on AE IFLs in a single commit leads to race-conditions.
PR Number
Synopsis
Category: FIB telemetry daemon
1653942
When fib-streaming is enabled and two or more collectors are involved, fibtd core may be observed due to a timing sync issue
Product-Group=junos
On all junos and EVO platforms, when two or more collectors have subscribed to gAFT sensors on the device, fibtd daemon(forwarding information base processing daemon) observes a core and initial sync with the collectors are lost. This will cause the device to stop streaming telemetry data.
PR Number
Synopsis
Category: gladiator platform
1643743
The PTX platforms might exhibit alarmd crash after loading the baseline configuration
Product-Group=junos
On Junos PTX3000 and PTX5000 platforms with RE(Routing Engine) type as RE-DUO-2600 and running the jinstall64-.tgz type image, alarmd crash might be observed while loading the baseline configuration.
PR Number
Synopsis
Category: Firewall Network Address Translation
1636596
In AA mode with NAT config, on RG failover, traffic getting dropped on SRX
Product-Group=junos
In AA mode with NAT config, on RG failover, traffic getting dropped on SRX
PR Number
Synopsis
Category: This would be category for IPSEC functionality on M/MX/T ser
1641107
22.1R1:CGNATAMS:mspmand core is found while doing Tunnel distribution after Restart RPD daemon
Product-Group=junos
mspmand daemon running on MS-MPC/MS-MIC cards can occasionally crash when the service card (fpc/pic) is turned offline and then online at regular intervals when the number of service-set configured is moderately high and when extensive hardware crypto operations are being performed. Exact issue is yet to be isolated.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1654072
Seamless BFD Sessions for Static SRTE LSPs flap once when a NSR switchover is performed
Product-Group=junos
Due to the existing design for rib-groups, a rib-group configured with "import-policy" knob is considered changed after NSR switchover. This makes ISIS to refresh (delete and re-add) its routes in RIB, if such a rib-group is being used for ISIS protocol. The ISIS route refresh in-turn causes SBFD sessions to flap. This issue is only applicable with rib-group configured with "import-policy". Without "import-policy" this issue would not be seen.
PR Number
Synopsis
Category: Issues related to NETCONF
1585855
< ok/> response is getting generated along with < rpc-error>
Product-Group=junos
When maximum-password-length is configured and user tries to configure password whose length exceeds configured maximum-password-length, error is thrown, along with error '' tag is also emitted. (Ideally '' tag should not be emitted in an error scenario.) The configuration does not get committed.
Modification History
2022-09-14 Updated to include PRs which were fixed but missing release note entries (eg. 1654072)
First publication 2022-06-14
22.1R1-S1: Software Release Notification for JUNOS Software