Alert Type
PSN - Product Support Notification
Risk
Risk Description
Low/Notification
Software Release Notification
Impact
Impact Description
Low/Notification
Software Release Notification
Product Affected
ACX, EX, MX, NFX, PTX, QFX, SRX, vSRX
Alert Description
Junos Software Service Release version 22.2R1-S1 is now available for download from the Junos software download site
Download Junos Software Service Release:
Go to
Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select
Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts
Solution
Junos Software service Release version 22.2R1-S1 is now available.
22.2R1-S1 - List of Fixed issues
PR Number
Synopsis
Category: Alfa Romeo Interface Software Category
1670685
On MX platforms, back to back modification of the Interface profile results in ports not coming up.
Product-Group=junos
On MX platforms with line cards MPC11E, LC2301/MX10K-LC9600 configured, the physical interface-related object remains unpublished and thus channel remains stuck in a chan_deleting state.
PR Number
Synopsis
Category: BBE Advanced Services related issues
1657027
22.2R1:: MISC:: mspmand core found @sarena_free @mum_free @jsf_shm_free @jssl_mem_pool_free @jsf_openssl_free @CRYPTO_free @ssl_cert_free @jssl_config_dtor @msvcs_plugin_send_control_rt
Product-Group=junos
When service-set is configured with Syslog and SSL (secure Syslog), mspmand will core and might cause traffic disruption.
PR Number
Synopsis
Category: QFX Access Control related
1668144
[Dot1x][EX3400]:Mac radius authentication without restrict option was updating authenticated vlan information before client authentication
Product-Group=junos
When dot1x enabled access port is member of a secondary pvlan(either community or isolated vlan) by configuration then cli 'show dot1x interface detail' shows the 'Authenticated Vlan' as primary vlan and 'Authenticated secondary vlan' as configured secondary vlan though client/port is not yet Authenticated. Data traffic is still blocked until client is authenticated. This is just an incorrect display and discrepancy with other release. No know functional impact is there for this.
PR Number
Synopsis
Category: VxLAN specific
1665828
MAC-IP bindings for IPv4 (ARP) and IPv6 (ND) may not be processed for IRB interfaces in an EVPN scenario
Product-Group=junos
On all Junos and Junos Evolved platforms, when EVPN (Ethernet Virtual Private Network) related configuration is introduced from baseline, due to a rare timing issue between the IRB (Integrated Routing and Bridging) interfaces coming up and an attempt is made by the 'l2ald' (l2 address learning) daemon to process the corresponding MAC-IP entries, this issue may occur. This may also occur when IRB logical units are activated and deactivated.
PR Number
Synopsis
Category: PRs for AF interface in Dvaita (Node Virtualization)
1666397
The traffic loss might be observed over the AF interface
Product-Group=junos
On MX platforms, the traffic loss might be observed when the FPC gets online but the AF interface is not ready to send the traffic over the fabric.
PR Number
Synopsis
Category: FIB telemetry, fibtd, libocaft repositories
1662999
network-instance name for streaming telemetry to be changed from default to DEFAULT to align with CONFIG stanza
Product-Group=junos
for ONDATRA test case which tested this with different network-instance names - DEFAULT. test is failing. for TEST to pass ,use network-instance names - default.
PR Number
Synopsis
Category: PR related to socket replication in EVO
1660805
The BGP session might be flapping on EVO platforms
Product-Group=junos
On all EVO based platforms, if Nonstop active routing (NSR) is not enabled, the BGP (Border Gateway Protocol) session might not be established or the established sessions might start flapping continuously.
1671458
EVO NSR: Do not send unreplicate message to backup during switchover
Product-Group=junos
During swo, if unreplicate message reaches backup first before backup recovery on the connection is complete then it can lead to leaking the connection on the backup as well as recover does not happen on it. On subsequent switchover such connection may flap. The fix is highly recommended to be present in the image.
PR Number
Synopsis
Category: mgd, ddl, odl infra issues
1672348
During upgrade/downgrade/rollback to 22.2R1-EVO image, the configuration validation will fail with "system configuration-database extend-size" feature enabled.
Product-Group=junos
With "system configuration-database extend-size" feature enabled, the configuration validation will fail during upgrade/downgrade/rollback to 22.2R1-EVO image, whereas if "no-validate" option is used during upgrade/downgrade/rollback to 22.2R1-EVO image (with "system configuration-database extend-size" feature enabled) then system will go to amnesiac mode.
PR Number
Synopsis
Category: EVPN control plane issues
1636690
The rpd process crash might be seen due to memory allocation failure
Product-Group=junos
On all Junos and Junos OS Evolved platforms supporting EVPN, with the Ethernet Virtual Private Network (EVPN) Media Access Control (MAC) scale configuration, the Routing Protocol process (RPD) process crash might be seen due to memory allocation failure.
PR Number
Synopsis
Category: Emerald PFE
1644355
EX4100: class-of-service buffer-size exact config
Product-Group=junosvae
Class-of-service buffer-size exact config is not supported. The respective configured queue will still use the shared-pool.
PR Number
Synopsis
Category: Atlas Integrated Routing & Bridging (IRB) module
1660208
After changing the MTU on an aggregated interface along with IRB the kernel crash might be observed
Product-Group=junos
The kernel crash might be observed after changing the MTU on an aggregated interface along with integrated routing and bridging (IRB) on all Junos platforms.
PR Number
Synopsis
Category: High Availability/NSRP/VRRP
1670309
In the MNHA SRG scenario on the IPv6 switching mode, not using 'Virtual MAC' as the source MAC address for G-NDP
Product-Group=junos
On SRX5k platforms, for MNHA (Multinode High Availability) SRG (services redundancy group) scenario on the IPv6 switching mode, IPv6 G-NDP (Gratuitous Neighbor Discovery) packet is not sent out from MNHA SRG active node's virtual IPv6 interface result in neighbor layer-2 device (bridge/switch) is unable to learn the virtual-mac-address if configured.
PR Number
Synopsis
Category: Firewall Network Address Translation
1645039
Datapath daemon might crash resulting in total traffic and service failure
Product-Group=junos
On all SRX-Series devices, when policy configuration is modified and committed multiple times while the device is handling MS-RPC traffic with more than 1000 RPC port map entries present in the device, it may result in datapath daemon crash.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1669110
22.4DCB-PCT:"ipsec tunnel-events-statistics" is not coming as expected while Verifying IPv4 Auto-VPN in point-to-multipoint mode using IKEv2 with DUT as spoke with latest DCB
Product-Group=junos
the vpn monitoring and pmi cannot not co-exist
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1624592
PTX10008 EVO : l3vpn license warning message generated with commit check
Product-Group=junos
L3VPN license warning message is generated with commit check, even though l3vpn license is installed. Commit completes without errors.
PR Number
Synopsis
Category: lldp sw on MX platform
1669677
LLDP neighborship might fail if the chassis-id format of the LLDP packet is xx:xx:xx:88:8e:xx
Product-Group=junos
On all Junos platforms, Link Layer Discovery Protocol (LLDP) neighborship fails if the chassis-id format of the LLDP packet is xx:xx:xx:88:8e:xx.
PR Number
Synopsis
Category: Protocol Independant Multicast
1651824
Traffic loss might be seen when the new Multicast Composite Next-Hop is computed
Product-Group=junos
On all Junos Evolved platforms, if a receiver joins or prunes, old Multicast composite Next-Hop (MCNH) might be deleted before all routes can shift to new MCNH. Traffic between FPC's might be dropped because few FPCs might have shifted to the new MCNH and few FPCs are waiting for the route change to the new MCNH.
PR Number
Synopsis
Category: for all ipv6 related issues
1662707
IPv6 ND packets might be dropped in QFX5100 and QFX5110 platforms
Product-Group=junos
On QFX5100 and QFX5110 platforms, with L2circuit configured, after performing an upgrade, the IPv6 ND (Neighbor Discovery) packets might be dropped.
PR Number
Synopsis
Category: All issues related to L3 data-plane/forwarding
1663102
L2 Multicast traffic loss observed on EX4400 Virtual Chassis platform.
Product-Group=junos
Due to PR 1663102 L2 Multicast traffic loss would be observed on EX4400 Virtual chassis platform on 22.2R1.9. The fix has been committed in 22.2R1.12. If Junos 22.2R1.9 is already installed on EX4400 platform, it is recommended to upgrade to Junos 22.2R1.12.
PR Number
Synopsis
Category: All the issues related to PFE MPLS
1666760
BGP-LU traffic might be dropped when "CCNH ingress labeled-bgp inet" is configured
Product-Group=junos
On Junos PTX platforms, the native inet packet might not be forwarded correctly when "Chained Composite Next-Hop (CCNH) ingress labeled-bgp inet" is configured. PFE wrongly adds Label 3 to the incoming inet packet and sent the MPLS frame to the edge device where it fails.
PR Number
Synopsis
Category: Non sparks issues in jflow/monitoring services
1668521
MX platforms with specific line cards are affected due to increase in HEAP memory
Product-Group=junos
MX platforms with specific line cards get affected when RE based sampling is enabled which causes increase in FPC's HEAP memory usage.
PR Number
Synopsis
Category: Bug and Review Tracking for Segment routing traffic eng
1657176
SR-TE LSP state might go down due to "Compute Result failure"
Product-Group=junos
On all Junos and Junos OS Evolved Platforms, the node index in the link key is short and cannot hold when the node's index is more than 32 bits long. Once this index exceeds its limitation, SR-TE (Segment Routing-Traffic Engineering) LSP might go down due to "Compute Result failure".
PR Number
Synopsis
Category: Interface Issues seen on Stout cards (MPC7, MPC8, MPC9)
1651526
PCS Errored blocks count increments after Junos software upgrade
Product-Group=junos
20.2R1 and later release has introduced firmware version for PHY chip on some MIC and PIC models. After that migration, some of the 100GE ports on MIC/PIC or its peer devices would see PCS and framing errors.
PR Number
Synopsis
Category: Stout card (MPC7) fabric issues
1673806
Training failures reported on the MX2010/MX2020 Junos platforms post fabric plane offline-online
Product-Group=junos
On MX2010/MX2020 Junos platforms with SFB3 switch fabric, with MPC4, MPC5 or MPC7 line cards configured, the fabric plane might get disabled and it might impact traffic.
PR Number
Synopsis
Category: ZT/YT pfe mpls- lsps,rsvp,vpns- ccc, tcc software
1657465
AE bundles with member links from MPC10 does not have VLAN-REWRITE feature programmed correctly
Product-Group=junos
AE bundles with member links from MPC10 does not have VLAN-REWRITE feature programmed correctly because Media Address IPC comes before the Encapsulation is set. This is seen only on AFT based cards.
PR Number
Synopsis
Category: Issues related to confg mgmt, ffp, load-action, commit procs
1659783
The device might reboot post configuration commit confirm
Product-Group=junos
The user cannot enter the request system reboot command once the user schedules a commit operation with commit confirmed configuration.
PR Number
Synopsis
Category: Issues related to DAX APIs
1669637
Periodic rebalancing of subscribers over AE interface might not work
Product-Group=junos
On all Junos and Junos Evolved platforms with scaled PPPoE (Point-to-Point Protocol over Ethernet) subscribers over static vlan-demux-interfaces over AE (Aggregated Ethernet) interface, if the child member links are flapped, periodic rebalancing of subscribers over AE interface might not happen and might lead to congestion on a particular link.
PR Number
Synopsis
Category: Issues related to mgd, DAX API, DDL/ODL infrastructure, Juno
1634334
ISSU failure may be seen due to timer expiry
Product-Group=junos
On all Junos platforms with dual REs (Routing Engine), ISSU (In-Service Software Upgrade) may abort with "config_sync_err soft_mask_err".
1656565
Commit and commit check fails when the knob "interface-range" is configured
Product-Group=junos
On all Junos and Junos Evolved platforms, when the knob "interface-range" is configured commit and commit check fails.
1671038
Config error after upgrade when modifying group for lsp auto-bandwidth /config/juniper.conf:164:(39) syntax error: adjust-interval.
Product-Group=junos
Config error after upgrade when modifying group for lsp auto-bandwidth /config/juniper.conf:164:(39) syntax error: adjust-interval.
1673176
"gethostbyname: Host name lookup failure" is displayed during commit
Product-Group=junos
On all SRX series platform with J-web enabled, "gethostbyname: Host name lookup failure" is displayed during commit
PR Number
Synopsis
Category: Verstappen Diags SW Category
1672039
The chassisd memory was corrupted and the chassisd crashed
Product-Group=junos
The firmware count was incrementing for each firmware update information being sent from lcmd (Linux Chassis Management Daemon) after every configuration commit. This caused the counter to increment out of bounds of the array causing memory overwriting. This resulted in a memory corruption in chassisd on VMHost-based TVP platforms.
22.2R1-S1 - List of Known issues
PR Number
Synopsis
Category: Category for all the Sazerac & Macallan PFE PRs
1674487
Traffic loss is seen in EX2300-48mp devices on L3 interface when untagged traffic is sent
Product-Group=junos
Traffic loss is seen in EX2300-48mp devices on L3 interface when untagged traffic is sent
PR Number
Synopsis
Category: agentd software daemon
1634372
[Platform] : Bugatti :Fabric : jnxFabricMib - Not updating Fabric Counts
Product-Group=junos
The fabric statistics counters are not displayed in the output of "show snmp mib walk ascii jnxFabricMib".
PR Number
Synopsis
Category: Atlas Layer 2 Forwarding Module
1663717
Traffic loss is observed in the VPLS scenario after the upgrade
Product-Group=junos
On all Junos platforms with VPLS configuration, traffic loss is observed due to failure in ARP resolution. The ping fails for devices configured on VPLS after the upgrade.
PR Number
Synopsis
Category: BBE CPM/UPM related issues
1659175
JSD crash during cBNG container startup or restart from CLI from within a cBNG container
Product-Group=junos
During startup of a cBNG container or when JSD is restarted from the CLI in a cBNG container, JSD might crash creating a core dump. JSD should recover from the crash and automatically restart. JSD should function normally after recovering from the crash.
PR Number
Synopsis
Category: Chassis specific platform issues on MX304
1676506
Bugatti P2A :MX304 : Firmware version of few components on MX204 is shown Zero
Product-Group=junos
In 22.2R1-S1, RE BIOS and ICE firmware will not be updated in jfirmware package bundled with Junos install image. So the available firmware version will be displayed as zero. If customer needs to update the RE-BIOS and ICE firmware, he will need to load a separate jfirmware package that has the RE BIOS and ICE firmware included. After loading the jfimware package the available firmware version will be displayed.
PR Number
Synopsis
Category: Firewall Filter
1647669
mib2d core hitting @mib2d_fwstats_async_handler_cb rtslib_async_process_msg during GRES testing with page pooling enabled
Product-Group=junos
mib2d core hitting @mib2d_fwstats_async_handler_cb rtslib_async_process_msg during GRES testing with page pooling enabled
1670622
Traffic loss may be observed when changing firewall configuration
Product-Group=junos
On MX platforms supporting MPC7/8/9 line cards, traffic loss may be observed if the firewall configuration changes are made when PFE 0 (Packet Forwarding Engine) is in a disabled state. It is a rare occurrence.
PR Number
Synopsis
Category: ChassisD changes specific for DNX series.
1669968
Chassis alarms for smart errors not set or cleared
Product-Group=junos
When health monitoring is enabled on the routing-engine disks, alarms are raised if the appropriate conditions are met. But, if there are two disks and both the disks generate the alarm condition only one will be shown.
PR Number
Synopsis
Category: Covers Application classification workflows apart from custo
1668289
22.2R1: AppID: Logs not generated for "FACEBOOK-ACCESS" traffic.
Product-Group=junos
After sending "GOOGLE-GEN" and "FACEBOOK-ACCESS" traffic, issue is seen for AppCache and AppTrack logs in a specific scenario.
PR Number
Synopsis
Category: Express PFE MPLS Features
1590387
ISIS adjacency is not coming up through TCC l2circuit
Product-Group=junos
On ACX/PTX/QFX platforms(PTX10002/10003/10008/10016/QFX10002/10003/10008/10016/ACX6360) if protocols l2circuit and channel tcc is enabled for providing layer 2 transaction, ISIS connection through the layer 2 domain might get failed and traffic loss might be seen.
PR Number
Synopsis
Category: SRX4100/SRX4200 Great Wall
1587360
HA AP mode on-box logging in LSYS and Tenant: Security log verification is failing as the contents of binary log file in LSYS are not as expected
Product-Group=junos
HA AP mode on-box logging in LSYS and Tenant, Intermittently Security log contents of binary log file in LSYS are not as expected
PR Number
Synopsis
Category: Interface Information Display
1611623
SRX1500: Traffic fail seen on irb interface for network control forwarding class when verifying dscp classification based on single and multiple code-points
Product-Group=junos
Traffic drop might be seen on irb interface on SRX1500 for network control forwarding class when verifying dscp classification based on single and multiple code-points.
PR Number
Synopsis
Category: Atlas Integrated Routing & Bridging (IRB) module
1629345
Inter vlan ipv6 traffic loss for some hosts after configuration remove and restore.
Product-Group=junos
For a topology with VSTP and VRRP configured and IPV6 traffic, if VSTP bridge priority is changed a couple of times (to trigger toggling of root bridge), it is possible that V6 traffic drop is seen on some of the streams.
PR Number
Synopsis
Category: Issues related to Firewall Authentication on SRX platforms
1654842
Firewall-authentication with user-firewall based RADIUS access has syslog information broken
Product-Group=junos
Firewall-authentication with user-firewall based RADIUS access has syslog missing the username and rule.
PR Number
Synopsis
Category: User Firewall related issues
1665691
22.2R1:USERFW:while doing auth entry boundary testing, group-name and resource group-name list details are not as expected.
Product-Group=junos
SRX CLI command to show auth entry user detail "show services user-identification authentication-table ip-address " is failing when auth entry boundary testing with auth entry containing maximum length group-name and resource-group-name is used.
PR Number
Synopsis
Category: IPSEC/IKE VPN
1663364
Packet drops when using Power mode express path along with Policy based VPN
Product-Group=junos
On SRX platforms, packets through policy-based IPsec tunnel could be dropped in some case when power-mode is enabled.
1665506
22.2R1: Master Password for Configuration Encryption and FIPS mode should not be enabled together
Product-Group=junos
The Master Password for Configuration Encryption feature is outside the scope of FIPS/CC requirements. There is no FIPS/CC requirement to encrypt the keys at rest. In 22.2R1, customers should not enable both the Master Password for Configuration Encryption feature and the FIPS mode at the same time. This issue will be fixed in a later release.
PR Number
Synopsis
Category: Issues related to Junos licensing infrastructure
1656975
CGNAT: "license-check" core generated after executing Graceful RE switchover with Port-Forwarding configured
Product-Group=junos
Core dump reported intermittently where random grpc stack crash is observed. The license service will auto restart and recover.
PR Number
Synopsis
Category: Kernel socket data replication issues for protocols that use
1675057
MX304:Bugatti:Observing "kernel: jsr_iha_pri_unrepl_msg_func: Error: Invalid primary handle in msg " for a given scenario
Product-Group=junos
These are expected error logs, and doesn't cause any functional impact. "jsr_iha_pri_unrepl_msg_func: Error: Invalid primary handle in msg 0x10006c600000621, error=2" These logs might be seen if the following conditions are met: * On all Junos OS platforms * Non stop routing is enabled. * with scaled setup The possible triggers would be restart chassisd, ksyncd, switchover, re reboot... which causes nsr unreplication/replication.
PR Number
Synopsis
Category: Kernel Stats Infrastructure
1629930
JDI-RCT: AlfaRomeo:Bugatti: %KERN-7: if_pfe_msg_handler: pfe_peer_msg_handler error: 2 for msg type 10, msg subtype 6, opcode 2 and peer index 0 errors seen on provisioning test configs
Product-Group=junos
Below IPC timeouts logs can be seen for statistics query to kernel(queried from cli or daemons querying internally)when there is config churn, or large number of IPCs getting exchanged between kernel and pfe in the system. if_pfe_msg_handler: pfe_peer_msg_handler error: for msg type , msg subtype , opcode and peer index Default IPC timeout value in kernel for IPC statistics request is 10s. This can be incremented to larger value by setting below hidden config to avoid IPC timeout errors. # set system stats-timeout-lifetime 15 # commit
PR Number
Synopsis
Category: RPD Next-hop issues including indirect, CNH, and MCNH
1655052
EVPN-VXLAN: ex4100 :PDT:: Partial traffic drop seen on the emerald VC , after RE switchover from primary to back up with NSR/NSB.
Product-Group=junos
Momentary traffic loss may be observed with type-5 and NSR/NSB configuration on routing-engine switchover on Ex4100 with 22.R1
PR Number
Synopsis
Category: Resource Reservation Protocol
1670638
Premature RSVP Path Error BW-Unavailable originated by PLR
Product-Group=junos
With the "rsvp local reversion" configuration a PLR originates the "Bw_unavailable PathErr" during FRR (Fast Reroute). Junos Label Edge Router (LER or ingress router) ignores this type of PathErr message. However, this can be a problem if an ingress LER implementation reacts to this PathErr by bringing down the protected LSP causing packet loss.
PR Number
Synopsis
Category: This would be category for IPSEC functionality on M/MX/T ser
1641107
22.1R1:CGNATAMS:mspmand core is found while doing Tunnel distribution after Restart RPD daemon
Product-Group=junos
mspmand daemon running on MS-MPC/MS-MIC cards can occasionally crash when the service card (fpc/pic) is turned offline and then online at regular intervals when the number of service-set configured is moderately high and when extensive hardware crypto operations are being performed. Exact issue is yet to be isolated.
PR Number
Synopsis
Category: Issues related to Junos SNMP Infrastructure (snmpd, mib2d)
1666548
The "snmpd" process might crash if SNMP timeout happens
Product-Group=junos
On all Junos and EVO platforms, the "snmpd" process might crash, if there is no response for the SNMP requests and a timeout happens.
1670858
While loading MIB file, saw error : "DESCRIPTION" is missing for "mib-jnx-chas-defines.txt"
Product-Group=junos
Issue: Error in loading MIB file 'jnx-chas-defines.mib'. Cause: The order of REVISION-DESCRIPTION statements in header section of a MIB file is REVISION statement followed by DESCRIPTION. But there were some change in jnx-chas-defines.mib which added one extra 'REVISION' statement at the end and this caused MIB file compilation error. Work-Around: If the above issue is seen while loading jnx-chas-defines.mib file which is part of junos-mibs*.tgz package, then add a 'DESCRIPTION' statement at the end of this MIB file header to avoid this error.
PR Number
Synopsis
Category: SRX Argon module bugs
1646661
21.3R2:SRX_RIAD:srx1500,srx4200:SKYATP:IMAP/IMAPS Email permitted counter is not incremented in AAMW email statistics while testing whole email block.
Product-Group=junos
The SKYATP:IMAP/IMAPS Email permitted counter may have incorrect value under certain conditions.
PR Number
Synopsis
Category: Issues related to broadband edge apps (PPP, DHCP) on Trio ch
1666943
MX240:Verify VRRP stats is failed after Deactivate the Access interface
Product-Group=junos
MX240:Verify VRRP stats is failed after Deactivate the Access interface
PR Number
Synopsis
Category: trinity pfe bridging, learning, stp, oam, irb software
1631217
The core interface goes down
Product-Group=junos
Using static LSP(labeled switched path) configuration, the child node is not removed from the flood composite when the core interface goes down.
PR Number
Synopsis
Category: Issues related to Logging/Tracing, errmsg, eventd infrastruc
1602536
Observed memory leak in eventd leak during GRES
Product-Group=junos
A minor memory leak is seen in the event-daemon process when multiple GRES switchovers are performed.
Modification History
First publication 2022-08-18
22.2R1-S1: Software Release Notification for JUNOS Software Version 22.2R1-S1