Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, EX, NTX, PTX, QFX, SRX, vRR, vSRX
Alert Description
Junos Software Service Release version 21.3R2-S2 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as needed and follow the prompts
Solution
Junos Software service Release version 21.3R2-S2 is now available.
21.3R2-S2 - List of Fixed issues
PR Number
Synopsis
Category: JUNOS kernel/ukernel changes for ACX
1639459
When the panic command is issued, dump is complete, but while rebooting the box is stuck
Product-Group=junos
A missing component in the dump kernel prevented the ACX-710 from rebooting after dumping was completed.
PR Number
Synopsis
Category: Class of Service
1655371
The rewrite rule might not work configured on L2 VLAN CCC IFL
Product-Group=junos
Unbinds to IEEE 802.1 and 802.1AD rewrite rules bound to VLAN CCC IFLs might get blocked and hence the usual way of reconfiguring/removing rewrites will not work.
1656441
COS SMAP config not getting applied on AE IFLs
Product-Group=junos
On MX platforms, the COS SMAP config not getting applied on AE IFLs when configured via wildcard config.
PR Number
Synopsis
Category: QFX Control Plane VXLAN
1645591
The MAC address might not be visible in the EVPN/VXLAN environment
Product-Group=junos
On all QFX5K platforms with EVPN-VxLAN, the MAC address might get stuck in the pending list of VTEP (Virtual Tunnel End Points) and not get installed. This issue can lead to traffic loss or reachability issues.
PR Number
Synopsis
Category: DNX VPLS
1654172
The LDP sessions might flap in VPLS scenario resulting in PFE errors
Product-Group=junos
On ACX5448 and ACX710 LDP (Label Distribution Protocol) session flaps with multiple VPLS (Virtual Private LAN Service) instances/sessions might trigger a FEC leakage that can exhaust all available FECs as the VPLS FEC index is not freed. Prolonged LDP flap leads to FEC exhaustion in the system with no FEC index to be allocated resulting in PFE errors.
PR Number
Synopsis
Category: Platform infra to support jvision
1628807
Interface sensor data may not be decoded on line cards (MPC10E/MPC11/MPC12/LC9600) and Junos Evolved platforms
Product-Group=junos
On MX platforms having line cards (MPC10E/MPC11/MPC12/LC9600) and Junos Evolved platforms, the interface sensor data might not be decoded.
PR Number
Synopsis
Category: OS IPv4/ARP/ICMPv4
1644616
GARP reply doesn't update ARP entry though gratuitous-arp-reply option is configured.
Product-Group=junos
Receiving GARP reply doesn't help update ARP entry though gratuitous-arp-reply option is configured. As a result, traffic loss might be seen depending on the timing.
PR Number
Synopsis
Category: Express Chip L3 software
1649586
Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations (CVE-2022-22202)
Product-Group=junos
An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. On affected PTX Series devices, processing specific MPLS packets received on an interface with multiple units configured may cause FPC to restart unexpectedly. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Please refer to https://kb.juniper.net/
JSA69706
[juniper.net]
for more information.
PR Number
Synopsis
Category: QFX L2 PFE
1650416
L2PT configuration on a transit switch in a Q-in-Q environment breaks L2PT
Product-Group=junos
L2PT on a transit switchs like Ex4600 and QFX in a Q-in-Q environment breaks L2PT for other S-VLANs if uplink is AE (Aggregated Ethernet) interface.
PR Number
Synopsis
Category: QFX5200/5110/5120/5210 Platfom issues
1634495
Traffic loss might be observed on EX4650-48Y and QFX5120-48Y switches when there is a link flap
Product-Group=junos
On EX4650-48Y and QFX5120-48Y switches when there is a link flap, the link/interface might take more than expected time to come up resulting in increased traffic loss.
PR Number
Synopsis
Category: Related to sw defects for K2-RE
1662913
The watchdog timeout is encountered and the system reboots after the 'request system halt' command executed
Product-Group=junos
On all platforms with RE-1800 & RE-2000, after the 'request system halt' command is executed, the watchdog timeout is encountered and causes the routing engine (RE) to fail to boot.
PR Number
Synopsis
Category: security-intelligence feature on SRX
1638923
Kernel panic might be seen during boot
Product-Group=junos
On Junos platforms kernel panic might be seen during the boot sequence.
PR Number
Synopsis
Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1628270
EVPN flood filter might not work for MPC10/MPC11 line cards
Product-Group=junos
On all MX platforms equipped with MPC10/MPC11 line cards, when the flood filter is configured in EVPN(Ethernet Virtual Private Network) family on the PFE(Packet Forwarding Engine), the line card might fail to program the filter.
PR Number
Synopsis
Category: ZT/YT pfe mpls- lsps,rsvp,vpns- ccc, tcc software
1657465
AE bundles with member links from MPC10 does not have VLAN-REWRITE feature programmed correctly
Product-Group=junos
AE bundles with member links from MPC10 does not have VLAN-REWRITE feature programmed correctly because Media Address IPC comes before the Encapsulation is set. This is seen only on AFT based cards.
PR Number
Synopsis
Category: Junos Automation, Commit/Op/Event and SLAX
1657595
Commit failure may be observed with Terminate API used
Product-Group=junos
On all Junos platforms, if the Slax script is configured with API ";", commit may fail. This SLAX script uses library APIs to consume and execute, and any upgrade to these libraries may change the behaviour of the parsing script.
21.3R2-S2 - List of Known issues
PR Number
Synopsis
Category: Express PFE L2 fwding Features
1654215
The ARP might not resolve with the native-vlan configuration
Product-Group=junos
On all QFX10002-36Q/QFX10002-72Q/QFX10008/QFX10016 platforms, when Service Provider(SP) style is configured with IRB and native-vlan leads to ARP failure.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1416334
19.1R1: ISSU: During ISSU from 18.4R1 to 19.1, traffic through IPSEC VPN fails.
Product-Group=junos
On SRX5400, SRX5600, and SRX5800 devices, during in-service software upgrade (ISSU), the IPsec tunnels flap, causing a disruption of traffic. The IPsec tunnels recover automatically after the ISSU process is completed.
PR Number
Synopsis
Category: QFX MPLS PFE
1579931
QFX5120 - Observed the partial traffic loss after disabling the protected link resulting in delay in convergence for link-protection for PE1_P link
Product-Group=junos
On a QFX5120, when you disable a protected link. You may see a delay of 200-400 mSec for the system to react to the disable link event.
PR Number
Synopsis
Category: SW PRs for SCBE3 fabric
1657378
The low priority stream may get stuck and all traffic might be dropped
Product-Group=junos
On MX-Series devices, the low priority stream might be marked as a destination error and as a result, the low priority stream is stuck and all traffic might get dropped.
Modification History
First publication 2022-07-15
21.3R2-S2: Software Release Notification