Article Detail

Alert Type

PSN - Product Support Notification

RiskRisk Description

Low/Notification

Software Release Notification

ImpactImpact Description

Low/Notification

Software Release Notification

Product Affected

ACX, EX, MX, NFX, PTX, QFX, SRX, vSRX

Alert Description

Junos Software Service Release version 21.2R3-S2 is now available for download from the Junos software download site

Download Junos Software Service Release:

Go to Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts

Solution

Junos Software service Release version 21.2R3-S2 is now available.

21.2R3-S2 - List of Fixed issues

PR Number	Synopsis	Category: EX4300 Layer 2 implementation
1663172	MAC-address learning failure and traffic loss might be observed on VXLAN enabled port having native-VLAN configured. Product-Group=junos	On EX4300-MP with Virtual Chassis (VC) scenario, VXLAN enabled port might not learn MAC-address when having native-VLAN configured.
PR Number	Synopsis	Category: EX2300/3400 PFE
1633883	The EX2300 may unexpectedly drop VOIP VLAN traffic after reboot Product-Group=junos	On the EX2300 platform, the traffic drop may be observed on VOIP VLAN after the device reboot. Voice VLAN on EX2300 may not forward traffic correctly out of the interface when the device is either power-cycled / halted / power off or power on, and may not communicate with the default gateway.
PR Number	Synopsis	Category: MPC Fusion SW
1648030	chassis-control subsystem went to unresponsive state after FHP phase2 trigger Product-Group=junos	During the phase 2 handing of FHP, chassis might go unresponsive.
PR Number	Synopsis	Category: MX Layer 2 Forwarding Module
1663717	Traffic loss is observed in the VPLS scenario after the upgrade Product-Group=junos	On all Junos platforms with VPLS configuration, traffic loss is observed due to failure in ARP resolution. The ping fails for devices configured on VPLS after the upgrade.
PR Number	Synopsis	Category: BBE interface related issues
1645574	[subscriber_services] [all] mx480 :: JDI_FT_REGRESSION::SUBSCRIBER-SERVICES::DHCP dual stack subscriber scale-up failed in access model dhcp relay. Product-Group=junos	Issue is seen while bringing up dual stack DHCP subscribers. Not able to bring DHCP subscribers, as subscribers are getting logged out automatically. facing difficulties in RC analysis, as events are received from different daemons.
PR Number	Synopsis	Category: Bi Directional Forwarding Detection (BFD)
1624085	Aggregated Ethernet interface might send/receive traffic through child link though BFD status is "client in hold-down state" Product-Group=junos	On all Junos OS and Junos OS Evolved devices, traffic might continue to forward on the aggregated Ethernet member link even if MicroBFD status is in a hold-down state. There is no traffic loss due to this issue.
PR Number	Synopsis	Category: Border Gateway Protocol
1626717	The rpd dump file might be seen while processing the BGP updates Product-Group=junos	The rpd crash files might be observed on Junos and Junos OS Evolved platforms while processing updates for BGP (Border Gateway Protocol) NLRI (Network Layer Reachability Information). This is observed only in specific circumstances like the route is first learned from an external BGP peer and a BGP policy with more than 4000 terms of different IPv6 (Internet Protocol) prefixes is present on the system. The issue may be due to the larger number of match terms in BGP import policy, to avoid the issue the policy terms matching IP addresses are minimal.
1653356	BGP PIC Protection is not working in virtual router Product-Group=junos	BGP PIC Protection is not working in virtual router.
1664168	The v4 prefixes might not be advertised over the BGPv6 sessions Product-Group=junos	On all MX platforms with BGP rib-sharding and update-threading configured, the v4 prefixes might not be advertised over the BGPv6 sessions.
PR Number	Synopsis	Category: Host path software for ACX platform
1584509	IPv4 Traffic loss with packet size more than 1410 on ACX5448 Product-Group=junos	On ACX5400 series platform when there is traffic surge, due to packet reassembly failures in the VMHOST, traffic loss might be seen. The ACX5400 software consists of Windriver Linux (WRL) 64-bit kernel with KVM hypervisor support providing the host operating system environment. The JUNOS runs as a VM on top of WRL host (VMHOST). As per the architecture the traffic from the Junos control plane will pass through the VMHOST and further to PFE to exit via the WAN interface. The internal interface between the Junos and VMHOST is of MTU 1500 due to which control packets exceeding 1500 MTU are to be fragmented and sent to VMHOST but it fails.
PR Number	Synopsis	Category: VPWS, L2 CKT, EVPN-VPWS
1661802	The l2circuit backup might not get reverted to primary in rare condition Product-Group=junos	On ACX710/ACX5448 platforms in the layer2 circuit scenario, if the primary path is down due to any reason, the backup circuit takes the mastership and ideally, once the primary path is up, mastership is to be reverted. But, in rare cases, the mastership gets reverted but the label might get lost from PFE and results in traffic loss for the l2circuit connection. However, deactivating and activating the affected l2circuit configuration could help in restoring the services.
PR Number	Synopsis	Category: Layer 3 forwarding, both v4+v6
1648479	While sending BGP NOTIFICATION messages for RFC 8538 HARD RESET, the data portion is sometimes not present Product-Group=junos	On all Junos platforms, in the case of sending BGP NOTIFICATION messages for RFC 8538 HARD RESET, the data portion is sometimes may not present.
PR Number	Synopsis	Category: Covers Application classification workflows apart from custo
1638588	AppID installation failure on the secondary HA node in case of failover Product-Group=junos	On SRX platforms, installation of Application Identification service failed on the secondary HA node in case of failover due to checksum validation.
PR Number	Synopsis	Category: AF interface in Node Virtualization
1666397	The traffic loss might be observed over the AF interface Product-Group=junos	On MX platforms, the traffic loss might be observed when the FPC gets online but the AF interface is not ready to send the traffic over the fabric.
1666992	Traffic drop might occur on AF interface when PFE gets in disabled state on GNF in NodeSlice platforms Product-Group=junos	On MX-Series platforms with node slicing, the traffic blackhole of ~6mins might be observed on AF (Abstracted Fabric) interface when PFE (Packet Forwarding Engine) gets in disabled state on any GNF followed by FPC (Flexible PIC Concentrators) reboot on peer GNF (Guest Network Function).
PR Number	Synopsis	Category: Ethernet OAM (LFM)
1643855	Traffic might be impacted due to the RCP session number reaching the maximum limit Product-Group=junos	On dual RE platforms, if the RCP process session number exceeds 75, it can impact service.
PR Number	Synopsis	Category: EVO Class of Services
1667404	The default code-point aliases and respective CoS value Bit patterns are inconsistent with Junos in Evo Product-Group=junos	On Junos Evolved PTX platforms, class-of-service (CoS) values associated with default code-point aliases are inconsistent with Junos. Due to this, incoming packets may get associated with incorrect CoS servicing level (forwarding class and packet loss priority (PLP)).
PR Number	Synopsis	Category: SNMP, mib2d issues
1669510	The snmpd core might be observed with filter-duplicates configuration Product-Group=junos	On all Junos and EVO platforms configured with filter-duplicates, the snmpd core might be observed if the SNMP query is made simultaneously from NMS (Network Management System) as well from the CLI.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1669811	BUM traffic might be blackholed for ESI configured CE interface flap Product-Group=junos	On Junos MX/QFX5K/QFX10K platforms and Junos Evolved ACX/MX platforms, on interface up/down event loop prevention might not work resulting in BUM traffic being blackholed.
PR Number	Synopsis	Category: EX4400 PFE software
1662508	The fxpc crash might be observed with the RPF check enabled Product-Group=junosvae	On the EX4400 and EX4400-Multigigabit platforms with Reverse Path Forwarding (RPF) check enabled, the fxpc crash might be observed with the IPv6 routes.
1663126	SSH traffic might be affected when filter log action is used Product-Group=junos	On EX4400 and EX4100 platforms, when a filter is configured with log action, Secure Shell (SSH) packet might hit queue 15 where it will be discarded after logging causing SSH to fail.
PR Number	Synopsis	Category: Express PFE L2 fwding Features
1648078	The CLNP traffic tunneled through EVPN-VXLAN fabric might get dropped Product-Group=junos	On QFX10k platforms with EVPN-VXLAN (Ethernet Virtual Private Network Virtual Extensible LAN) is deployed, differences in the unicast and multicast packets between IS-IS (Intermediate System - Intermediate System) hello packets and CLNP (Connectionless Network Protocol) ping packets might be observed. The packet might get egressed out, but the LLC (Logical Link Control) header data is missed. A header needs to be added for all LLC packets, so the peer node can not recognize these packets without the header, and it simply discards the CLNP packet.
1654215	The ARP might not resolve with the native-vlan configuration Product-Group=junos	On all QFX10002-36Q/QFX10002-72Q/QFX10008/QFX10016 platforms, when Service Provider(SP) style is configured with IRB and native-vlan leads to ARP failure.
PR Number	Synopsis	Category: Express pfe Mclag
1666399	Static MACs are not programmed after reboot, resulting in floods of unicast traffic Product-Group=junos	After rebooting, we see that the link does not have a static MAC address. This results in unicast traffic flooding and sometimes traffic drops for this static MAC.
PR Number	Synopsis	Category: FIB telemetry daemon
1653942	When fib-streaming is enabled and two or more collectors are involved, fibtd core may be observed due to a timing sync issue Product-Group=junos	On all junos and EVO platforms, when two or more collectors have subscribed to gAFT sensors on the device, fibtd daemon(forwarding information base processing daemon) observes a core and initial sync with the collectors are lost. This will cause the device to stop streaming telemetry data.
PR Number	Synopsis	Category: Category for JET(JUNOS Extension Toolkit) related issues
1653968	The connection might get closed by the collector when connecting to jsd Product-Group=junos	The collector connects to jsd and before acceptance can be called by gRPC, the connection might get closed by the collector.
PR Number	Synopsis	Category: Flow Module
1661409	The gre-performance-acceleration might cause VPLS traffic drop Product-Group=junos	The Virtual Private LAN Service (VPLS) traffic might be dropped between the two sites when VPLS connections over MPLSoverGREoverIPSEC are configured along with gre-performance-acceleration on SRX platforms.
1668898	vSRX not processing fragmented packets Product-Group=junos	When the system memory is running low (Yellow/Orange zone) due to extensive L7 inspection of traffic, fragmented packets may not be able to be reassembled and may be dropped.
PR Number	Synopsis	Category: IPSEC/IKE VPN
1665332	IPSec tunnels may flap on SRX platforms Product-Group=junos	On all SRX platforms running the Junos-ike (Internet Key Exchange) package, when the flow trace options are committed, the ikemd process may restart and IPSec tunnels may flap.
PR Number	Synopsis	Category: Label Distribution Protocol
1611338	IPv4 Prefixes might be associated into both IPv4 and IPv6 LDP database after RE switchover Product-Group=junos	On all Junos and Evolved platforms with NSR enabled and dual-transport knob configured under protocols ldp, if RE switchover, IPv4 prefixes might get advertised to IPv6 session as well if there are separate LDP sessions existed for IPv4 and IPv6.
1644952	RPD cores when P2MP Egress interface deleted while LDP p2mp MBB is in progress. Product-Group=junos	RPD cores when P2MP Egress interface deleted while LDP p2mp MBB is in progress.
PR Number	Synopsis	Category: lldp sw on MX platform
1669677	LLDP neighborship might fail if the chassis-id format of the LLDP packet is xx:xx:xx:88:8e:xx Product-Group=junos	On all Junos platforms, Link Layer Discovery Protocol (LLDP) neighborship fails if the chassis-id format of the LLDP packet is xx:xx:xx:88:8e:xx.
PR Number	Synopsis	Category: Port-based link layer security services and protocols that a
1660070	MACsec session configured over IFD might be down when an IFL configured on IFD is disabled/deactivated Product-Group=junos	On EX and QFX platforms, in vlan-tagging/flexible-vlan-tagging scenario, when multiple Logical Interfaces (IFLs)(SP-style) are configured on a single Physical Interface (IFD) and MACsec is configured on the same IFD, and when one of the IFL is diabled/deactivated MACsec session will be down.
PR Number	Synopsis	Category: SW PRs for MPC10E Chassisd
1664448	SP][PDT][MPC10E]: Heap memory increase by 20-25% after protocol flap test for 12 hours Product-Group=junos	In long duration of link and protocol flapping test, significant increase in Heap Util is observed. This does not indicate memory leak and most of it can be reclaimed by the following command from the linux shell on the FPC: cli> start shell pfe network base-os fpcX (>>> Logging into FPC shell) root@router-fpcX:~# echo 3 > /proc/sys/vm/drop_caches However, due to potential impact to performance to recreate the dropped cache objects by linux, we do not recommend the use of this command outside of a testing or debugging environment.
PR Number	Synopsis	Category: SW PRs for MPC10E Interfaces
1560772	Interface not able to send/receive packets after repeated 100G link flaps on MPC10E Product-Group=junos	On all Junos platforms with MPC10E line-cards, repeated 100GE interface link flaps may result in complete traffic stall (packets no longer going out the interface). 10GE links are not exposed and 40GE links are far less sensitive compared to 100GE interfaces. MPC11E line-card is not exposed.
PR Number	Synopsis	Category: MPC11 ULC platform software related issues.
1647622	Regressions : [Segment Routing] : Ping verification is failing + VERIFY FAILED: verify_ping:ping On Devices: ['r0'] Product-Group=junos	PR is under investigation.
PR Number	Synopsis	Category: Multiprotocol Label Switching
1615001	The RPD crash may happen due to refcount leak in routing table metrics Product-Group=junos	On all Junos and Junos OS Evolved platforms with BGP-LS configured, addition of routes via TED_LS module might cause refcount leak and could lead to RPD crash on the device.
1664670	Dynamic label space usage crossed the threshold limit of 90 percent Product-Group=junos	On all Junos and EVO platforms, in warm standby mode, when the MPLS route is learnt on the standby, a label was allocated. As protocols are not running it will not be automatically synced/mirrored. But in case the route is deleted, this was not deallocated back and will result in traffic loss.
PR Number	Synopsis	Category: Multi Protocol Label Switch OAM
1634632	VCCV BFD session keeps flapping between MX and peer device if ultimate-hop popping is enabled Product-Group=junos	In Layer 2 circuit/Layer 2 VPN/VPLS environment with ultimate-hop popping enabled for LSP, Bidirectional Forwarding Detection (BFD) for the Pseudowire Virtual Circuit Connectivity Verification (VCCV) session between MX and peer device might flap periodically, due to the MPLS LSP ping sent from peer to MX getting failed.
PR Number	Synopsis	Category: MX Timing software
1647901	When PTP with PHY-timestamping is enabled, significant clock frequency drift might be seen Product-Group=junos	If timestamping the packet at the physical layer (also known as PHY timestamping) is enabled for Precision Time Protocol (PTP) in an l2circuit scenario, the transit PTP packets passing through the MPC2E-NG/MPC3E-NG/MPC5E/MIC-3D-20GE/10G built-in ports might be modified to have huge value in Correction Field of the PTP packet even though there is not PTP port configured on these line cards. If the transit PTP packets are used for synchronizing downstream node, the clock frequency drift could be seen.
PR Number	Synopsis	Category: Microkernel for neo mpc
1664602	Line card may crash after offline/online plane Product-Group=junos	On platforms supporting MQ and XM-based line cards, destination error, self-ping error and line cards can be offline after swapping the XM-based uplink cards and toggling the fabric planes. The issue will be seen on other MQ-based line cards in the chassis.
PR Number	Synopsis	Category: OS IPv4/ARP/ICMPv4
1644616	GARP reply doesn't update ARP entry though gratuitous-arp-reply option is configured. Product-Group=junos	Receiving GARP reply doesn't help update ARP entry though gratuitous-arp-reply option is configured. As a result, traffic loss might be seen depending on the timing.
PR Number	Synopsis	Category: OSPF routing protocol
1659366	The memory leak and process rpd crash might be observed when the peer interface flaps continuously in the Segment Routing Product-Group=junos	On all Junos and Junos OS Evolved platforms configured with Segment Routing, when the peer interface flaps continuously, the memory leak might be observed which might lead to the process rpd crash.
PR Number	Synopsis	Category: Express Chip L3 software
1598309	The unilist nexthop might get stuck after interface flap on PTX/QFX10K Product-Group=junos	On PTX/QFX10K platforms, some of the unilist nexthops might get stuck after interface flap, the issue might still exist even after FPC or rpd reboot.
1663881	ALB stats not showing in CLI Product-Group=junos	Adaptive [Load Balancing] Statistics are not updated under 'show interfaces aeX extensive' on the QFX10k platform.
PR Number	Synopsis	Category: Protocol Independant Multicast
1621358	Initial multicast register packets may get dropped Product-Group=junos	On MX platforms, initial multicast register packets may get dropped, this may affect multicast services.
PR Number	Synopsis	Category: for all ipv6 related issues
1662707	IPv6 ND packets might be dropped in QFX5100 and QFX5110 platforms Product-Group=junos	On QFX5100 and QFX5110 platforms, with L2circuit configured, after performing an upgrade, the IPv6 ND (Neighbor Discovery) packets might be dropped.
PR Number	Synopsis	Category: QFX L2 PFE
1649637	The local-minimum-links feature not working as expected on QFX5100 VC platforms Product-Group=junos	On the QFX5100 VC(Virtual-Chassis) platform, the AE(Aggregated Ethernet) interface might not go down on a single interface flap in the bundle even though the knob "local-minimum-links" is configured on the device.
PR Number	Synopsis	Category: QFX10008/16 QFX10002 Ultimat/Elit platform related issues -
1597479	The process dcpfe/FPC crash may be observed on the QFX10000 series platforms in a rare case Product-Group=junosvae	On the QFX10000 series platforms, the process dcpfe/FPC crash may be observed in boot time if rebooting the devices.
PR Number	Synopsis	Category: QFX5100 Virtual Chassis
1667952	QFX5100VC SNMP : jnxPowerSupplyFailure and jnxPowerSupplyOK are not getting generated for Backup FPC Product-Group=junos	On QFX5100VC, jnxPowerSupplyFailure and jnxPowerSupplyOK are not getting generated for Backup FPC.
PR Number	Synopsis	Category: QFX5200/5110/5120/5210 Platfom issues
1634495	Traffic loss might be observed on EX4650-48Y and QFX5120-48Y switches when there is a link flap Product-Group=junos	On EX4650-48Y and QFX5120-48Y switches when there is a link flap, the link/interface might take more than expected time to come up resulting in increased traffic loss.
1658568	QFX5120: "request system power-off" doesn't work and vmcore is generated Product-Group=junosvae	On QFX5120 platform, "request system power-off" doesn't work and system will be rebooted. At that time, vmcore is generated.
1659453	The slave PTP device will not lock its clock with the master PTP device Product-Group=junos	On all Junos platforms, when a slave Precision Time Protocol (PTP) member that used one IPV6 address went for a reboot and came back with another IP address via Dynamic Host Configuration Protocol (DHCP), which can end up in multiple entries for the same source port.
PR Number	Synopsis	Category: Related to sw defects for K2-RE
1662913	The watchdog timeout is encountered and the system reboots after the 'request system halt' command executed Product-Group=junos	On all platforms with RE-1800 & RE-2000, after the 'request system halt' command is executed, the watchdog timeout is encountered and causes the routing engine (RE) to fail to boot.
PR Number	Synopsis	Category: KRT Queue issues within RPD
1623170	BGP Flowspec might not show counters Product-Group=junos	On all Junos and Junos Evolved platforms, when installing an IPv6 firewall filter using BGP flowspec, matching traffic counters may show "0" values.
PR Number	Synopsis	Category: Issue related to mcnh routing infrastructure within RPD
1663568	The forwarding plane is not updated properly in scaled MVPN scenario after receiving PIM leave messages Product-Group=junos	On all Junos and Junos Evolved platforms, when IFLs from non-default routing instances are being added with the OIF scaling of more than 2000 there will be a spillover of IFLNHs into different next hops due to this the outgoing interfaces (OIFs) will not be deleted from multicast next-hop.
PR Number	Synopsis	Category: RPD Next-hop issues including indirect, CNH, and MCNH
1645296	Traffic drop with EBGP multipath and EBGP paths equal to the maximum-ecmp limit Product-Group=junos	On all Junos and Junos OS Evolved platforms configured with EBGP multipath and bgp-protect-core under the routing instance, if the number of external paths along with the BGP Prefix-Independent Convergence (PIC) backup paths reaches the maximum ECMP limit, then all the traffic towards the destination is dropped on PFE with the exception of "sw error".
PR Number	Synopsis	Category: Issues related route resolution routing infrastructure
1658277	Some L3VPN prefixes are not active because nexthop is not usable Product-Group=junos	If preserve-nexthop-hierarchy knob was deconfigured and if no-propagate-ttl config within VRF is opposite to global config,some routes can be inactive. Secondary nexthops may not be resolved and active, hence L3VPN routes are not active.
1658678	The rpd crash might be triggered when the BGP route resolves over another BGP route Product-Group=junos	On all Junos and EVO platforms, when the BGP route resolves over another BGP default route such that the default route is an EIBGP load-balanced route, then the resolution loop may go into infinite recursion leading to stack corruption and rpd core.
PR Number	Synopsis	Category: Resource Reservation Protocol
1638145	LSP over broadcast segment stays down when RSVP setup protection is enabled Product-Group=junos	When RSVP setup protection is enabled, the LSP over a broadcast segment might stay down, due to a missing function of nexthop check for broadcast segment in code.
PR Number	Synopsis	Category: jflow/monitoring services
1668521	MX platforms with specific line cards are affected due to increase in HEAP memory Product-Group=junos	MX platforms with specific line cards get affected when RE based sampling is enabled which causes increase in FPC's HEAP memory usage.
PR Number	Synopsis	Category: PTX10K Line Card specific interface PRs
1661215	Channelized interface might go down if low-light-alarm/low-light-warning is enabled Product-Group=junos	On Junos Evolved platforms or specific Junos platforms /linecards (MX304/MPC11/MPC12/LC2301/LC9600) equipped with QSFP-DD optics and if it has channelized interfaces, there might be chances for the channelized interface to immediately go down when either of knobs "low-light-alarm" or "low-light-warning" is enabled. The issue is expected to occur only when any other channel of same interface is down.
PR Number	Synopsis	Category: SW PRs for SCBE3 fabric
1625820	Fabric request timeouts and fabric healing occur Product-Group=junos	On MX platforms, the MPC10E-10C-MRATE went offline/online due to FO (Fabric out) timeouts.
PR Number	Synopsis	Category: Bug and Review Tracking for Segment routing traffic eng
1657176	SR-TE LSP state might go down due to "Compute Result failure" Product-Group=junos	On all Junos and Junos OS Evolved Platforms, the node index in the link key is short and cannot hold when the node's index is more than 32 bits long. Once this index exceeds its limitation, SR-TE (Segment Routing-Traffic Engineering) LSP might go down due to "Compute Result failure".
PR Number	Synopsis	Category: ZT/YT pfe infra issues
1633286	The ppman process might crash and MPC cards will be stuck in the ISSU state when "Unified ISSU with Enhanced Mode" is performed Product-Group=junos	On MX platforms, when "Unified In-Service Software Upgrade (ISSU) with Enhanced Mode" is performed, ppman crash may be seen and MPC10 and MPC11 cards will be stuck in the ISSU reboot state. The crash is seen if the node has both Link Aggregation Control Protocol (LACP) and Link Fault Management (LFM) sessions. Traffic loss might be seen due to the crash and wrong card state.
PR Number	Synopsis	Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1629136	,FPC crash might be observed in the subscriber scenarios Product-Group=junos	On all Junos platforms which support subscriber configuration, in a very rare scenario the FPC crash might be observed, when the subscriber logs out. The issue is due to out-of-bound memory access while deleting the subscriber prefix.
1647214	DHCP Subscriber traffic might get dropped due to the rpf-check filter Product-Group=junos	On all Junos platforms running BroadBand Edge(BBE) subscribers, when the rpf-check CLI knob is present in the configuration but the Reverse Path Forwarding (RPF) feature is not getting applied to certain subscribers which leads to DHCP subscriber traffic drop.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1631217	The core interface goes down Product-Group=junos	Using static LSP(labeled switched path) configuration, the child node is not removed from the flood composite when the core interface goes down.
PR Number	Synopsis	Category: Trio pfe l3 forwarding issues
1641323	Out of order packets might be seen in multicast streams with MVPN extranet scenario. Product-Group=junos	Out of order packets might be seen in multicast streams with MVPN extranet scenario, if multicast source route is missing in the receiver VRF.
PR Number	Synopsis	Category: PTX/QFX100002/8/16 platform software
1583839	File permissions are changed for /var/db/scripts files after reboot on PTX/QFX platforms Product-Group=junosvae	On PTX10K and QFX10K platforms running Junos, file permissions might be changed for /var/db/scripts files after rebooting the device. This issue might have an impact on the scripts running on the box.
PR Number	Synopsis	Category: Virtual Router Redundancy Protocol
1668280	The VRRP track might go down upon GRES Product-Group=junos	On all Junos platforms, when Graceful Routing Engine Switchover (GRES) is performed on the Virtual Router Redundancy Protocol (VRRP) master, the VRRP track on the master may go down and might be stuck in the down state. This might trigger VRRP Master switchover and temporary traffic loss if the track route cost changes the priority.
PR Number	Synopsis	Category: Windsurf interfaces software
1664978	The link-degrade recovery will not work for a specific interface speed Product-Group=junos	On all Junos platforms link-degrade functionality needs to be supported and manually configured. Link degrade is manually configured to monitor for link error/issues. Once the error is observed, the link goes down.

21.2R3-S2 - List of Known issues

PR Number	Synopsis	Category: EX2300/3400 PFE
1647209	DHCP traffic might be dropped when DHCP-security and RTG are enabled Product-Group=junos	On EX2300, EX2300-48MP, and EX3400 platforms, when DHCP-security and Redundant Trunk Group (RTG) are enabled clients connected over RTG might not get DHCP IP and DHCP traffic might be dropped.
PR Number	Synopsis	Category: EX2300/3400 platform
1667564	High numbers of POE devices might result in high CPU utilization Product-Group=junos	On EX2300 and EX3400 platforms, high CPU utilization might be observed when more POE devices are connected to the switch.
PR Number	Synopsis	Category: SPC3 HW and SW Issues
1641793	Traffic might be dropped due to the RX queue being full Product-Group=junos	Incoming packets might be sent to RX queues of core0 or core14 mistakenly, might result in the queue buffer full and the packets getting dropped.
PR Number	Synopsis	Category: ACX Services feature
1633395	Delegated BFD sessions configured on routing-instance may fail to come up Product-Group=junos	On ACX5448 and ACX710 platforms, all types of delegated BFD sessions configured on routing-instance other than the default routing-instance might not come up.
PR Number	Synopsis	Category: "agentd" software daemon
1656313	The Configuration of invalid forwarding-class in analytics export profile goes through may lead to traffic drop Product-Group=junos	In Telemetry scenario, the configuration of invalid forwarding-class in analytics export profile goes through inspite of the forwarding-class containing an invalid value. Due to this, FPC might crash and could cause traffic loss.
PR Number	Synopsis	Category: BBE interface related issues
1591603	The subscriber IFL is stuck forever after post ESSM service deletion Product-Group=junos	On all devices running Junos 19.1R3-S5-J3, the subscriber IFL(logical interface) may be in a stuck state after the ESSM (Extensible Subscriber Services Manager) deletion.
PR Number	Synopsis	Category: BBE Layer-2 Bitstream Access
1652337	The L2BSA subscribers may not be able to browse due to incorrect entries in the VPLS mac-table Product-Group=junos	On All Junos platforms, a few L2BSA(Layer 2 Bit Stream Access) subscribers with specific S-VLAN (stacked VLAN) allocated from a specified VLAN range may face issues with traffic forwarding due to incorrect/duplicate entries which might block the genuine subscribers. When this happens, subscriber traffic could be dropped.
PR Number	Synopsis	Category: EX Diagnostics Software
1598805	The interface on SFP-T or SFP-SX might stop forwarding traffic on EX4600 Product-Group=junos	On EX4600, the interfaces on SFP-T or SFP-SX might stop forwarding traffic when MACSec and auto-negotiation is enabled on the ports. The interfaces would still show as up and the transmit and receive counters will increase. However, the transmit counters on the port will not increase.
PR Number	Synopsis	Category: EX4400 PFE software
1603015	On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints. Product-Group=junos	On EX4400 dot1x authentication may not work on EVPN/xlan enabled endpoints. The issue is due to EAPOL packets received on VxLAN ports are not processed in hostpath.
PR Number	Synopsis	Category: Express PFE FW Features
1420560	The firewall counter for lo0 interface might not increase Product-Group=junos	The firewall counter for lo0 does not increase on PTX if lo0 filter family any is configured.
PR Number	Synopsis	Category: Express PFE MPLS Features
1590387	ISIS adjacency is not coming up through TCC l2circuit Product-Group=junos	On ACX/PTX/QFX platforms(PTX10002/10003/10008/10016/QFX10002/10003/10008/10016/ACX6360) if protocols l2circuit and channel tcc is enabled for providing layer 2 transaction, ISIS connection through the layer 2 domain might get failed and traffic loss might be seen.
PR Number	Synopsis	Category: Express ASIC platform
1643743	Observed the alarmd core in PTX router after loading the baseline configuration Product-Group=junos	Under some circumstances, alarmd will core due to some discrepancy in Junos-sync component.
PR Number	Synopsis	Category: Interface Information Display
1642731	PTX10008 Mgmt interface em0 shows speed as 10G instead of 1G Product-Group=junos	PTX10008 Mgmt interface em0 shows speed as 10G instead of 1G
PR Number	Synopsis	Category: BSDX Software installation issues
1665411	JDI-RCT:M/Mx: errors spew on junos upgrade @ rm: //opt/sdk/service-packages/...: is a directory Product-Group=junos	A harmless error from activation of jservices packages
PR Number	Synopsis	Category: Platform infra to support jvision
1666510	CmError: show system errors active detail fpc < slot> is returning empty output. Product-Group=junos	"show system errors active details fpc " CLI will not report error data where error is from a MPC10 LineCard. "show system errors error-id " CLI will not report error data where uri belongs to an error from MPC10 LineCard. As a workaround we can use the CLI "show chassis errors .." to get the same data for MPC10 LineCard.
1674017	MX960 :: UDP: ifLastChange value shows different format between MPC10E and old junos MPC7E/MPC4E Product-Group=junos	S/w to add content
PR Number	Synopsis	Category: Layer2 forwarding on EX/NTF/PTX/QFX
1664955	MAC addresses learned on the RTG interface are not aging out Product-Group=junos	On Junos EX/NFX/QFX platforms, stale MAC addresses entry not getting removed for RTG (Redundant trunk groups) interfaces.
1667310	L2 Hardening: HVPLS traffic blackhole when mesh group local-switching is enable or disabled Product-Group=junos	Avoid change of user mesh group (HVPLS) instead delete or add.
PR Number	Synopsis	Category: Label Distribution Protocol
1665846	Scheduler slip of 4-5 seconds is observed during AE interface deactivate/activate aggressively Product-Group=junos	S/w to add
PR Number	Synopsis	Category: SW PRs for MPC10E Interfaces
1601049	Interface flap might trigger major alarm causing disble-pfe action when high priority scheduler is configured Product-Group=junos	On all Junos platforms with MPC10E line-cards, repeated 100GE interface link flaps may result in loss of traffic going out of the interface. Each 100GE interface down event might not flush the stream and triggers a major alarm causing disable-pfe action. This is specific to interfaces configured with high priority scheduler. MPC11E card is not exposed.
1642584	MPC10E: Quick 100G link-flaps has still some race conditions which can cause MQSS stream drain failures and xqss_sched_flush_queue failures Product-Group=junos	On MPC10E cards upon many very quick link down and up events in msec range might not always able to drain all traffic in the queue. This causes lost of traffic going through the interface. Traffic volume and class-of-service configuration does influence the exposure. See also PR1638410.
PR Number	Synopsis	Category: MPC11 ULC interface software related issues.
1669333	UDP: optics sensor data missing snmp_if_index under Optics_diag Product-Group=junos	snmp_index for an interface on ULC based line cards (such as MPC11, LC9600 & MX304) will not be exported over the telemetry.
PR Number	Synopsis	Category: MPC11 ULC platform software related issues.
1663816	[SP][PDT][MPC10/11E]: [Error] Wedge-Detect : Host Loopback Wedge Detected in MPC10/11E card on enabling ppm and host-path traces after interface flaps for 12 hours Product-Group=junos	If host-path extensive logs are enabled, it is possible to run into host loopback wedge issues. To avoid such issues, it is recommended to disable such extensive host path logs.
1665071	Slater: Platforms :: for MPC11 , we are not seeing yellow alarm when the yellow alarm threshold are breeched for MPC11 temp sensors Product-Group=junos	s/w to add content
PR Number	Synopsis	Category: MPLS Openconfig part of RPD.
1660406	CMIS: MX2020(MPC11E)/MX960(MPC10E): RPD CPU shoots between ~70-90% after starting single collector from the server, monitored for > 2hrs. Product-Group=junos	The spike in RPD usage is expected because of the very large scale and OCST in general but it should not affect any RPD functionality if that is the concern as telemetry streaming is the least priority task in RPD.
PR Number	Synopsis	Category: Multicast Routing
1665791	Packets getting dropped in service leaf in EVPN-VXLAN with OISM Product-Group=junos	In EVPN-OISM (Optimized inter-subnet multicast), with listener behind Service Leaf and source outside fabric, if the SL does not have a valid supported unicast route (EVPN Type-5 unicast route is not supported with EVPN-OISM) to the source, might drop the flow.
PR Number	Synopsis	Category: Track veHostd, vmm-sdk issues on Mt Rainier RE
1604755	LTS19: MX2008: junos vmcore Dump failed. Partition too small. Product-Group=junos	Correct the partition size so vmcore can be generated, when needed.
PR Number	Synopsis	Category: Kernel Multicast Infrastructure
1653920	Traffic blackhole might be seen due to next-hop install failure on Junos PTX platforms Product-Group=junos	On Junos PTX platforms there might be a traffic blackhole which happens because of next-hop installation failure for multicast RSVP(Resource Reservation Protocol) P2MP(Point to Multipoint) traffic. This issue might only be encountered in a scaled RSVP P2MP environment after a network event which might cause reconvergence.
PR Number	Synopsis	Category: Kernel Stats Infrastructure
1629930	JDI-RCT: AlfaRomeo:Bugatti: %KERN-7: if_pfe_msg_handler: pfe_peer_msg_handler error: 2 for msg type 10, msg subtype 6, opcode 2 and peer index 0 errors seen on provisioning test configs Product-Group=junos	Below IPC timeouts logs can be seen for statistics query to kernel(queried from cli or daemons querying internally)when there is config churn, or large number of IPCs getting exchanged between kernel and pfe in the system. if_pfe_msg_handler: pfe_peer_msg_handler error: for msg type , msg subtype , opcode and peer index Default IPC timeout value in kernel for IPC statistics request is 10s. This can be incremented to larger value by setting below hidden config to avoid IPC timeout errors. # set system stats-timeout-lifetime 15 # commit
PR Number	Synopsis	Category: TCP/UDP transport layer
1626400	Configuration commit may fail while configuring the knob 'authentication-key-chains' under groups Product-Group=junos	On all Junos and Evo platforms, if 'no-persist-groups-inheritance' is not configured, configuration commit issues may be seen while configuring the knob 'authentication-key-chains' under groups. Expanded view of the database is not fetched when configured via groups security and hence commit check error may be seen. The TCP-keychain functionality may not work as expected if this issue occurs.
PR Number	Synopsis	Category: OSPF routing protocol
1576818	Unexpected CSPF link down/deleted events on LSPs Product-Group=junos	If OSPF and RSVP are configured, a device that is out of service is transmitting a large number of link-state advertisement (LSAs) (more than 100k), extremely busy neighbors are slow in sending LSACKs, and some LSA churn happens caused by route flaps, then unexpected CSPF link down/deleted events happen on LSPs. This causes other OSPF routers in the OSPF domain to fail their CSPF calculation for the router loopbacks that act as P routers in this topology and thus drop the LSPs, causing traffic impairment. In addition, rpd utilization will be pegged to 100%.
PR Number	Synopsis	Category: vMX Data Plane Issues
1669261	VMX crash as result of riot out of memory condition, reporting Interrupted thread 30 TTP Transmit. Product-Group=junos	VMX crash as result of riot out of memory condition, reporting Interrupted thread 30 TTP Transmit. The memory leak can be observed when checking RSI for pool-0 values. request support information \| match pool-0 - Pool-0 Values below 2000 are suspect memory problem.
PR Number	Synopsis	Category: Protocol Independant Multicast
1664211	The BSR information might not be flooded over NG-MVPN Product-Group=junos	On all Junos platforms, when the Protocol Independent Multicast (PIM) Bootstrap (BSR) packet comes over the Labeled Switch Interface (LSI), the BSR flooding/advertisement might not work and BSR information might not be flooded over the Next-Generation Multicast Virtual Private Network (NG-MVPN). This might impact the creation of the NG-MVPN.
PR Number	Synopsis	Category: JRR - VRR running on SRX4200
1665121	CLI command: "request system core-dump routing running" fails with error: "Insufficient Disk space" on JRR200 Platform Product-Group=junos	CLI command: "request system core-dump routing running" fails with error: "Insufficient Disk space" on JRR200 Platform
PR Number	Synopsis	Category: PPPoE functional plugin for bbe-smgd
1663555	-L2TP sessions on LAC is not up due to Keepalive failure seen in LNS, on doing self ISSU in LAC. Product-Group=junos	S/w to add conntent
PR Number	Synopsis	Category: QFX10008/16 QFX10002 linecard, serdes and uboot
1610745	"output-mac-control-frames" and "output-mac-pause-frames" counters are not incrementing on QFX10002-60C Product-Group=junos	In QFX10002-60C under mac statistics "output-mac-control-frames" & "output-mac-pause-frames" does not increment.
PR Number	Synopsis	Category: QFX5200/5110/5120/5210 Virtual Chassis
1636668	Pyrite_VC: em0 interface ppeed is reflecting as 10G instead of 1G Product-Group=junos	Management interface speed is displayed as 10G instead of 1G though there is no functionality impact.
PR Number	Synopsis	Category: Related to sw defects for K2-RE
1497592	Backup Routing Engine reboots because of power cycle or failure when the offline and online operations are performed on CB1. Product-Group=junos	After backup Routing Engine halt, CB1 goes offline and comes back online; this leads to the backup Routing Engine booting up, and it shows the reboot reason as "0x1:power cycle/failure." This issue is only for the RE reboot reason, and there is no other functional impact of this.
PR Number	Synopsis	Category: KRT Queue issues within RPD
1641297	KRT queue entries are stuck during RE switchover when backup RPD is not yet ready. Product-Group=junos	This is a rare scenario. In a dual RE setup, Assume the backup RPD has just started and re-syncing all states from FIB(Kernel). The backup RPD is not yet ready for switchover. If we do RE switchover manually via CLI or if any master RE HW crash occurs, We end up in not installing some of the FIB entries. The work around is to restart the RPD in new Master RE.
PR Number	Synopsis	Category: RPD policy options
1670998	RDP might core when terminating. Product-Group=junos	RDP might core when terminating.
PR Number	Synopsis	Category: RPD route tables, resolver, routing instances, static routes
1665094	Route leaking might happen with auto-export configuration Product-Group=junos	On all Junos platforms, if auto-export is configured under VRF, unexpected leaking of the routes could be observed.
PR Number	Synopsis	Category: MPC7/8/9 Interface Issues
1614508	Traffic loss of >2ms when AE down message is seen after the next hops are changed/deleted Product-Group=junos	On deactivating AE interface, we could see a traffic loss of greater than 2ms. This behavior is seen due to order in which the messages are processed in FPC wherein next hop change/delete is processed prior to interface down event.
PR Number	Synopsis	Category: MX10003/MX204 Linux issues (including driver issues)
1281554	The host root file system and the node boots with the previous vmhost software instead of the alternate disk. Product-Group=junos	If a vmhost snapshot is taken on an alternate disk and there is no further vmhost software image upgrade, the expectation is that if the current vmhost image gets corrupted, the system boots with the alternate disk so the user can recover the primary disk to restore the state. However, the host root file system and the node boots with the previous vmhost software instead of the alternate disk.
PR Number	Synopsis	Category: MX10002 Platform SW - Platform s/w defects
1637756	Syslog error @Err] MQSS(0): DRD: Error: WAN reorder ID timeout error - Valid 1, Reorder ID 0 after loading image. Product-Group=junos	S/w to add the content
PR Number	Synopsis	Category: ZT/YT pfe firewall software
1649499	The MPC might crash or the traffic may be silently dropped/discarded Product-Group=junos	The firewall filter might be incorrectly updated in the Packet Forwarding Engine (PFE) when large-scale filters, applied on any of the supported bind points, undergo repeated load and unload. It can result in a core and FPC will be restarted. It's a timing issue
PR Number	Synopsis	Category: ZT/YTpfe bridging, learning, stp, oam, irb software
1665343	L2 Hardening: ARP packet not flooded across the VPLS domain for IRB; jnh exceptions "sw error" is incrementing Product-Group=junos	S/w to update
PR Number	Synopsis	Category: ZT/YT pfe l3 forwarding issues
1604450	When delete an aggregate Ethernet interface with member links on either an MPC10 or an MPC11, you may see traffic loss on other AE bundles. Product-Group=junos	On aggregate Ethernet ("ae") interfaces with some of the member links part of MPC10 or MPC11, and other member links part of other MPC type (MPC1 up to MPC9), if you delete an "ae" interface, other "ae" interfaces may experience unicast packet loss.
1604814	traffic loss on link flap in mix deployment of mpc10/mpc11 and mpc7/8/9 Product-Group=junos	in 21.1R2 and 21.1R3 release, in chassis with mix of MPC10 or MPC11 and MPC1 to MPC9, and AE bundle configuration with member links on both MPC10/MPC11 and MPC1-MPC9, packet loss may be seen for unicast packets on link flap using ifconfig down/up command in RE shell.
PR Number	Synopsis	Category: ZT/YT pfe, vpls, mesh group software
1669765	L2 Traffic drop is seen for IRB inter-vlan with VPLS lsi MH + core ECMP; exceptions "Expected drops" is incrementing Product-Group=junos	L2 packets drop when the traffic came from non-MPC10 with IRB interface to an MPC10 which is part of ECMP egress interface.
PR Number	Synopsis	Category: Trio pfe stateless firewall software
1614480	Filter related service will not work when the filter is deleted/re-added frequently for AE interface Product-Group=junos	On MX platforms, during reboot, the AE ifls are first added, then deleted and again added, this flapping causes corner case where the filter attachment ipc has older AE ifl index on which the filter bind fails. Filter will not be attached to the interface, so any filter related service will not work.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1522896	Egress traffic loss might happen because of PFE MTU feature problem Product-Group=junos	On MX and EX9200 serial platforms, under Ethernet VPN (EVPN) environment, packets routed using IRB interface could not be fragmented due to media maximum transmission unit (MTU) problem.
PR Number	Synopsis	Category: Junos Automation, Commit/Op/Event and SLAX
1604622	File download using "request system download" might fail Product-Group=junos	On a EX4400 device, any files scheduled for download using the cli command "request system download" might fail due to error. The files can be downloaded using normal ftp/scp commands on the device.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1636085	MTU configuration on an interface is not set as expected Product-Group=junos	On all Junos with persist-groups disabled ( on Junos persist-groups feature is enabled by default 19.4 onwards) and on EVO platforms where persist groups can be disabled (21.4R1 onwards persist-groups cannot be disabled on EVO) this issue can be seen. This issue occurs when grafting happens during configuration expansion (when persist-groups is disabled) and a configuration such as a customer configuration is applied( for example, a configuration in which MTU is inherited from a groups configuration).
PR Number	Synopsis	Category: VMHOST platforms software
1646339	The alarm might not be generated for EDAC errors until the FPC is rebooted Product-Group=junos	On all MX and PTX platforms, EDAC errors are triggered but alarms are not observed until the FPC gets rebooted due to the data corruption in hardware.
PR Number	Synopsis	Category: Virtual Private LAN Services
1655858	The Pseudo Wires might go down in VPLS scenario Product-Group=junos	On all Junos/Junos Evolved platforms with VPLS (virtual private LAN service) deployed, deactivating and activating the neighbour under the default mesh-group might lead Pseudo Wires(PW) to go down. This happens when there is a change in default mesh-group and that might not be updating the PW status. This can be recovered by deactivating and activating the complete routing instance under the mesh-group.
PR Number	Synopsis	Category: usf ipsec related issues
1625888	Packet loops in the pic even after stopping the traffic on MX platform with SPC3 line card Product-Group=junos	Packet loop might happen when IPsec SA be deleted (command clear/rekey, etc), which will causing high CPU. Clear SA again to recover
PR Number	Synopsis	Category: usf nat related issues
1646822	NAT session reverse traffic fails due to NAT routes getting deleted from routing instance. Product-Group=junos	With overlapping NAT pool configured with different NAT rules under different service sets, when service outside interface is moved between different routing instances (EX: from vr1 to default, and from default to vr1), NAT routes corresponding to the service-set in default routing instance are getting deleted, resulting in reverse path traffic failure for NAT sessions.

Modification History

First publication 2022-07-21